Re: graphical session in LXC automatically started at boot and reachable via VNC/RDP/X2GO

From	Linux-Fan <Ma_Sys.ma@web.de>
Newsgroups	linux.debian.user
Subject	Re: graphical session in LXC automatically started at boot and reachable via VNC/RDP/X2GO
Date	2020-12-31 14:20 +0100
Message-ID	<Bs61Y-Ne-5@gated-at.bofh.it> (permalink)
References	<BrupI-2vn-13@gated-at.bofh.it> <Brwrv-3Y4-3@gated-at.bofh.it> <BrPu9-7rW-9@gated-at.bofh.it> <BrSs1-Oh-1@gated-at.bofh.it> <Bs1vj-6qf-1@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Yvan Masson writes:

[...]

> I glanced over /etc/vnc.conf and it seems communication can be easily  
> secured with self-signed X509 certificate: this might be simpler to setup  
> than SSH tunneling, especially with a Windows client. Has someone already  
> tried that? Anyway, I will let you know.

I do not have any personal experience with the X509 certificates in the case  
of VNC. From my experience, TLS is more difficult to configure than SSH,  
mostly because of (1) the necessity for a PKI and (2) time-based certificate  
expiration by default. The other point is the more difficult process of  
generating all the necessary files (host certificate). The manpage for  
`vnc.conf` seems to indicate that this is automated for the VNC usage to  
some extent -- possibly worth trying :)

My cheatsheet for openssl commands to prepare all the necessary TLS keys  
(for stunnel, but VNC may be similar) is here:
https://masysma.lima-city.de/37/dashboards_with_docker.xhtml

At a glance, the `vnc.conf` manpage does not hint towards private-key-based  
client authentication, whereas SSH private key files serve this purpose.

The new SSH client on Windows is straight-forward to configure:  
Just store the id_rsa file and configure the Windows equivalent of "chmod  
600" for it. Afterwards, use command `ssh` (or optionally
%USERPROFILE%/.ssh/config) as you would on Linux.

HTH and YMMV
Linux-Fan

öö

Back to linux.debian.user | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

graphical session in LXC automatically started at boot and reachable  via VNC/RDP/X2GO Yvan Masson <yvan@masson-informatique.fr> - 2020-12-29 22:10 +0100
  Re: graphical session in LXC automatically started at boot and  reachable via VNC/RDP/X2GO Georgi Naplatanov <gosho@oles.biz> - 2020-12-29 22:30 +0100
  Re: graphical session in LXC automatically started at boot and          reachable via VNC/RDP/X2GO Linux-Fan <Ma_Sys.ma@web.de> - 2020-12-30 00:20 +0100
    Re: graphical session in LXC automatically started at boot and  reachable via VNC/RDP/X2GO Yvan Masson <yvan@masson-informatique.fr> - 2020-12-30 20:40 +0100
      Re: graphical session in LXC automatically started at boot and          reachable via VNC/RDP/X2GO Linux-Fan <Ma_Sys.ma@web.de> - 2020-12-30 23:50 +0100
        Re: graphical session in LXC automatically started at boot and  reachable via VNC/RDP/X2GO Yvan Masson <yvan@masson-informatique.fr> - 2020-12-31 09:30 +0100
          Re: graphical session in LXC automatically started at boot and          reachable via VNC/RDP/X2GO Linux-Fan <Ma_Sys.ma@web.de> - 2020-12-31 14:20 +0100

csiph-web