x11sidecar.yaml

apiVersion: apps/v1
kind: DaemonSet
metadata:
  name: wallboard
  namespace: wallboard
spec:
  selector:
    matchLabels:
      name: test-wallboard
  template:
    metadata:
      labels:
        name: test-wallboard
    spec:
      initContainers:
        - name: x11
          image: registry.opensuse.org/home/atgracey/wallboardos/15.5/x11:notaskbar
          imagePullPolicy: Always
          restartPolicy: Always
          securityContext:
            privileged: true
            readOnlyRootFilesystem: false
          volumeMounts:
            - mountPath: /tmp/.X11-unix/
              name: xsocket
            - mountPath: /home/user/xauthority/
              name: xauthority
            - mountPath: /run/udev/data/
              name: udev-data
      containers:
        - name: wallboard
          env:
            - name: URL
              value: https://google.com
            - name: DISPLAY
              value: ':0'
            - name: XAUTHORITY
              value: /home/user/xauthority/.xauth
          image: registry.opensuse.org/home/atgracey/wallboardos/15.5/firefox:latest
          imagePullPolicy: Always
          securityContext:
            runAsUser: 1000
          volumeMounts:
            - mountPath: /tmp/.X11-unix/
              name: xsocket
            - mountPath: /home/user/xauthority/
              name: xauthority
      dnsPolicy: ClusterFirst
      terminationGracePeriodSeconds: 5
      volumes:
        - name: xauthority
          emptyDir: {}
        - name: xsocket
          emptyDir: {}
        - name: udev-data
          hostPath:
            path: /run/udev/data/
            type: Directory