KasmVNC module

[bpmct]

A discussion dedicated to the KasmVNC module. Share your thoughts, questions, and feedback here.

Module Scorecard

Presentation & Onboarding	Credential Hygiene	Restricted-Environment Readiness	Engineering Quality	Overall
13 / 25	20 / 20	2 / 20	6 / 10	55 / 100

Drilldown

Presentation & Onboarding — 13 / 25

Criterion	Max	Score	Notes
Configuration-mode examples	12	12	Single clear example with sensible defaults (desktop_environment, subdomain). Module has limited configuration surface.
Coder-context framing	8	1	Names KasmVNC and mentions "access it via the dashboard" but does not explain what KasmVNC adds on top of Coder or show where Coder fits in the flow. Minimal context.
Visual preview	5	0	No image, GIF, or video in README. Icon reference does not count.

Credential Hygiene — 20 / 20

Criterion	Max	Score	Notes
Secrets marked sensitive	16	16	No sensitive inputs in this module. No secrets required or shown in examples.
Non-hardcoded auth path	4	4	Module starts KasmVNC with -disableBasicAuth and relies on Coder session token/tunnel for protection. No API keys or credentials needed.

Restricted-Environment Readiness — 2 / 20

Criterion	Max	Score	Notes
Mirrorable artifact source	10	0	No variable to override the GitHub download URL. The base_url in run.sh is hardcoded to https://github.com/kasmtech/KasmVNC/releases/download/v${KASM_VERSION}. Version can be changed via kasm_version variable but the domain/path cannot be overridden.
Bring-your-own binary	5	0	No documented way to skip installation when KasmVNC is pre-installed. Script checks check_installed() but still proceeds with configuration steps; no variable to disable the entire install block.
Egress transparency	3	0	No dedicated README section enumerating external endpoints. GitHub download URL is only visible in source code.
Runs without sudo	2	2	Script checks for sudo availability and degrades gracefully: "WARNING: Sudo access not available, using user config dir!" and writes to $HOME/.vnc/kasmvnc.yaml instead of /etc/kasmvnc/kasmvnc.yaml. Core functionality (starting kasmvncserver) works without sudo. Full credit from code inspection.

Engineering Quality — 6 / 10

Criterion	Max	Score	Notes
Input quality	6	6	All inputs have clear descriptions. Sensible defaults for port (6800), kasm_version (1.4.0), subdomain (true), share (owner). Validation present on desktop_environment and share.
Test coverage	4	0	No .tftest.hcl file present. TypeScript test in main.test.ts only validates that terraform apply doesn't throw for each desktop environment value; does not cover business logic or end-to-end behavior meaningfully.

Overall — 55 / 100

Raw 41 / 75 → round(41 / 75 × 100) = 55

Track: Utility (VNC desktop access tool, not an IDE or AI agent)

---

Scored against SCORECARD.md on 2026-07-15 with claude-sonnet-4-5.