Your browser is your new computer.
Self-hosted browser isolation and remote application streaming.
SealSkin runs desktop applications in isolated containers on a server you control and streams them to any browser or phone. A browser extension turns every link, file, download and text selection into something you open remotely instead of locally, so nothing from the web ever runs on the device in front of you. It is built on Selkies and the LinuxServer.io application images.
Read the documentation or visit sealskin.app.
| Chrome, Edge, Brave and other Chromium browsers | Chrome Web Store |
| Firefox | Firefox Add-ons |
| iPhone and iPad | App Store |
| Android | Google Play |
Every release also carries the extension zips, the APK, the IPA and the server wheel.
The server ships as the linuxserver/sealskin container. The quickest path to a working server with a trusted certificate is its installer, which needs Docker, a free Duck DNS subdomain and its token:
mkdir sealskin && cd sealskin
bash <(curl -sSL https://raw.githubusercontent.com/linuxserver/docker-sealskin/refs/heads/master/install.sh)Then import the generated config/admin.json into a client and launch your
first application. The
Getting Started guide
covers the installer, the plain docker compose alternative, certificates
and the first login.
- Isolation. Links, files, downloads and searches open in a fresh container on the server. Cleanroom sessions leave nothing behind; persistent home directories keep what you choose.
- Any application. Browsers, office suites, IDEs, media editors, emulators and 3D tools from the app stores, or any Selkies-compatible image you add, with NVIDIA and DRI3 GPU acceleration.
- Files stay on the server. A file manager, chunked uploads, intercepted downloads and password-protected public share links.
- Collaboration rooms. Launch any app into a room with chat, voice and video, gamepad slots and hand-over of mouse and keyboard control.
- End-to-end encrypted, passwordless. Every API call is encrypted with a per-session key negotiated against the server's RSA key; users authenticate with a signed token from a private key that never leaves the client.
- One UI, served by the server. The extension and the app are thin shells; the launcher, dashboard and admin panels ship with the server image, so UI updates never wait for a store review.
| Getting Started | Install the server, connect a client, launch an application. |
| Usage | The launcher, context menus, sessions, storage, files and rooms. |
| Administration | Users, groups, app stores, templates, the App Laboratory, GPUs. |
| Configuration | What lives in /config and /storage, keys, hand-editing the YAML. |
| Settings Reference | Every environment variable the server reads. |
| Architecture | Control and data planes, encryption, the served UI and the shells. |
| HTTP API | Every endpoint and how requests are wrapped. |
| Development | Running from source, building the client, the mobile shells, this site. |
| Releasing | Versioning, release notes and the workflows. |
| Troubleshooting | Certificates, Firefox, mobile, GPUs and Docker. |
The pages live in docs/content and can be edited on GitHub;
the site is rebuilt on every push to main.
VERSION the one version number for server, UI, extension and app
server/ Python API server, Caddy template, tests, wheel
client/ web UI source and build (dist/ui, dist/extension, dist/mobile)
browser_extension/ manifests, icons and packaging for the extension shell
mobile/ Capacitor project for the iOS and Android shells
docs/ the documentation site
release-notes/ one file per stable release
cd client && npm install && npm run build # served UI + extension + mobile web dir
cd server && pip install -r requirements.txt && pytest
cd docs && npm install && npm run dev # documentation at http://localhost:3000- Issues for bugs and feature requests
- LinuxServer.io Discord for questions and support
- linuxserver/sealskin-apps, the default application catalogue
SealSkin is licensed under the Mozilla Public License 2.0. The privacy policy for the published clients is PRIVACY.md.