В mun tattauna gudanar da uwar garken VNC akan na'ura mai kama da kowane nau'i. Wannan zabin yana da rashin amfani mai yawa, babban ɗayan su shine babban buƙatun don abubuwan da ake amfani da su na tashoshin watsa bayanai. A yau za mu yi ƙoƙarin haɗawa zuwa tebur mai hoto akan Linux ta hanyar RDP (Protocol na Nesa). Tsarin VNC ya dogara ne akan watsa tsararrun pixels ta yin amfani da ka'idar RFB (Framebuffer mai nisa), kuma RDP yana ba ku damar aika ƙarin hadaddun zane-zane da manyan umarni. Yawancin lokaci ana amfani da shi don karɓar Ayyukan Desktop na Nisa akan Windows, amma ana samun sabar Linux.
Ɗaukaka:
Shigar da yanayin hoto
Za mu ɗauki injin kama-da-wane tare da Ubuntu Server 18.04 LTS tare da muryoyin kwamfuta guda biyu, gigabytes na RAM da gigabyte hard drive (HDD). Ƙarfin sanyi bai dace da tebur mai hoto ba, kodayake wannan ya dogara da ayyukan da ake warwarewa. Kar ku manta kuyi amfani da lambar talla Habrahabr10 don samun rangwame 10% akan odar ku.
Shigar da yanayin tebur tare da duk abin dogara ana yin shi tare da umarni mai zuwa:
sudo apt-get install xfce4 xfce4-goodies xorg dbus-x11 x11-xserver-utilsKamar yadda yake a cikin yanayin da ya gabata, mun zaɓi XFCE saboda ƙarancin buƙatun kayan aikin kwamfuta.
Russification na uwar garken da shigar da software
Yawancin injunan kama-da-wane ana tura su tare da tura turanci kawai. A kan tebur za ku iya buƙatar Rashanci, wanda yake da sauƙin saitawa. Da farko, bari mu shigar da fassarori don shirye-shiryen tsarin:
sudo apt-get install language-pack-ruBari mu saita wuri:
sudo update-locale LANG=ru_RU.UTF-8Ana iya samun irin wannan tasiri ta hanyar gyara /etc/default/locale da hannu.
Don gano GNOME da KDE, ma'ajiyar tana da fakitin-fakitin-gnome-ru da fakitin-fakitin-kde-ru - zaku buƙaci su idan kuna amfani da shirye-shirye daga waɗannan mahallin tebur. A cikin XFCE, ana shigar da fassarori tare da aikace-aikace. Na gaba za ku iya shigar da ƙamus:
# Словари для проверки орфографии
sudo apt-get install hunspell hunspell-ru
# Тезаурус для LibreOffice
sudo apt-get install mythes-ru
# Англо-русский словарь в формате DICT
sudo apt-get install mueller7-dictBugu da kari, ana iya buƙatar shigar da fassarori don wasu shirye-shiryen aikace-aikacen:
# Браузер Firefox
sudo apt-get install firefox firefox-locale-ru
# Почтовый клиент Thunderbird
sudo apt-get install thunderbird thunderbird-locale-ru
# Офисный пакет LibreOffice
sudo apt-get install libreoffice libreoffice-l10n-ru libreoffice-help-ruWannan yana kammala shirye-shiryen yanayin tebur, duk abin da ya rage shine saita sabar RDP.
Shigarwa da daidaita sabar RDP
Wuraren ajiya na Ubuntu suna da sabar Xrdp da aka rarraba kyauta, wanda za mu yi amfani da shi:
sudo apt-get install xrdpIdan komai yayi kyau, uwar garken zata fara ta atomatik:
sudo systemctl status xrdp
Sabar Xrdp tana aiki tare da haƙƙin mai amfani xrdp kuma ta tsohuwa tana ɗaukar takardar shaidar /etc/ssl/private/ssl-cert-snakeoil.key, wanda za'a iya maye gurbinsa da naku. Don samun damar karanta fayil ɗin, kuna buƙatar ƙara mai amfani zuwa rukunin ssl-cert:
sudo adduser xrdp ssl-certAna iya samun saitunan tsoho a cikin /etc/default/xrdp fayil, kuma duk sauran fayilolin sanyi na uwar garken suna cikin /etc/xrdp directory. Babban sigogi suna cikin fayil xrdp.ini, wanda baya buƙatar canzawa. Tsarin tsari yana da kyau a rubuce, kuma an haɗa madaidaitan shafukan yanar gizo:
man xrdp.ini
man xrdpAbin da ya rage shi ne gyara rubutun /etc/xrdp/startwm.sh, wanda ake aiwatarwa lokacin da aka fara zaman mai amfani. Da farko, bari mu yi ajiyar kwafin rubutun daga rarraba:
sudo mv /etc/xrdp/startwm.sh /etc/xrdp/startwm.b
sudo nano /etc/xrdp/startwm.shDon fara yanayin tebur na XFCE, kuna buƙatar rubutun wani abu kamar haka:
#!/bin/sh
if [ -r /etc/default/locale ]; then
. /etc/default/locale
export LANG LANGUAGE
fi
exec /usr/bin/startxfce4Lura: a cikin rubutun yana da kyau a rubuta cikakkiyar hanyar zuwa fayilolin da za a iya aiwatarwa - wannan al'ada ce mai kyau. Bari mu sanya rubutun aiwatarwa kuma a wannan lokacin ana iya ɗaukar saitin uwar garken Xrdp cikakke:
sudo chmod 755 /etc/xrdp/startwm.shSake kunna uwar garken:
sudo systemctl restart xrdp
Saita Tacewar zaɓi
Ta hanyar tsoho, Xrdp yana sauraron tashar TCP 3389 akan duk musaya. Dangane da tsarin sabar uwar garken kama-da-wane, kuna iya buƙatar saita Tacewar zaɓi na Netfilter. A Linux ana yin wannan ta amfani da iptables utility, amma akan Ubuntu yana da kyau a yi amfani da ufw. Idan an san adireshin IP na abokin ciniki, ana aiwatar da tsari tare da umarni mai zuwa:
sudo ufw allow from IP_Address to any port 3389Kuna iya ba da izinin haɗi daga kowane IP kamar haka:
sudo ufw allow 3389Ka'idar RDP tana goyan bayan ɓoyewa, amma fallasa uwar garken Xrdp zuwa cibiyoyin sadarwar jama'a mummunan ra'ayi ne. Idan abokin ciniki bashi da kafaffen IP, uwar garken yakamata ya saurari localhost kawai don ƙara tsaro. Zai fi dacewa don samun dama ta hanyar rami na SSH, wanda zai karkatar da zirga-zirga cikin aminci daga kwamfutar abokin ciniki. Muna da irin wannan hanya don uwar garken VNC.
Haɗa zuwa uwar garken RDP
Don yin aiki tare da yanayin tebur, yana da kyau a ƙirƙiri mai amfani daban mara gata:
sudo adduser rdpuser
Bari mu ƙara mai amfani zuwa rukunin sudo domin ya iya yin ayyukan da suka shafi gudanarwa. Idan babu irin wannan buƙata, kuna iya tsallake wannan matakin:
sudo gpasswd -a rdpuser sudoKuna iya haɗawa zuwa uwar garken ta amfani da kowane abokin ciniki na RDP, gami da ginannen abokin ciniki na Sabis na Desktop na Windows. Idan Xrdp yana sauraron dubawar waje, ba za a buƙaci ƙarin ayyuka ba. Ya isa a saka adireshin IP na VPS, sunan mai amfani da kalmar wucewa a cikin saitunan haɗin gwiwa. Bayan haɗawa, za mu ga wani abu kamar haka:
Bayan saitin farko na yanayin tebur, za mu sami cikakken tebur. Kamar yadda kake gani, baya cinye albarkatu da yawa, kodayake komai zai dogara ne akan aikace-aikacen da aka yi amfani da su.
Idan uwar garken Xrdp yana sauraron localhost kawai, zirga-zirgar kan kwamfutar abokin ciniki dole ne a haɗa shi cikin rami na SSH (sshd dole ne ya kasance yana gudana akan VPS). A kan Windows, zaku iya amfani da abokin ciniki na SSH mai hoto (misali, PuTTY), kuma akan tsarin UNIX kuna buƙatar mai amfani ssh:
ssh -L 3389:127.0.0.1:3389 -C -N -l rdpuser RDP_server_ipBayan an ƙaddamar da rami, abokin ciniki na RDP ba zai ƙara haɗawa zuwa uwar garken nesa ba, amma ga mai gida.
Ya fi wahala tare da na'urorin hannu: Abokan ciniki na SSH masu iya haɓaka ramin dole ne a siya, kuma a cikin iOS da iPadOS, aikin bangon aikace-aikacen ɓangare na uku yana da wahala saboda ingantaccen haɓakar kuzari. A kan iPhone da iPad, ba za ku iya ƙirƙirar rami a cikin aikace-aikacen daban ba; kuna buƙatar aikace-aikacen girbi wanda zai iya kafa haɗin RDP ta hanyar SSH. Kamar misali .
Manajan Zama da Zaman Mai Amfani
Ana aiwatar da ikon yin aikin mai amfani da yawa kai tsaye a cikin uwar garken Xrdp kuma baya buƙatar ƙarin tsari. Bayan fara sabis ta hanyar systemd, tsari ɗaya yana gudana a yanayin daemon, yana sauraron tashar jiragen ruwa 3389 kuma yana sadarwa ta hanyar localhost tare da mai sarrafa zaman.
ps aux |grep xrdp
sudo netstat -ap |grep xrdp
Mai sarrafa zaman yawanci ba ya ganuwa ga masu amfani, saboda shiga da kalmar wucewa da aka ƙayyade a cikin saitunan abokin ciniki ana canjawa wuri zuwa gare shi ta atomatik. Idan hakan bai faru ba ko kuma an sami kuskure yayin tantancewa, taga mai shiga tsakani zai bayyana maimakon tebur.
An ƙaddamar da ƙaddamarwa ta atomatik na mai sarrafa zaman a cikin fayil /etc/default/xrdp, kuma ana adana tsarin a /etc/xrdp/sesman.ini. Ta hanyar tsoho yana kama da wani abu kamar haka:
[Globals]
ListenAddress=127.0.0.1
ListenPort=3350
EnableUserWindowManager=true
UserWindowManager=startwm.sh
DefaultWindowManager=startwm.sh
[Security]
AllowRootLogin=true
MaxLoginRetry=4
TerminalServerUsers=tsusers
TerminalServerAdmins=tsadmins
; When AlwaysGroupCheck=false access will be permitted
; if the group TerminalServerUsers is not defined.
AlwaysGroupCheck=false
[Sessions]Ba dole ba ne ka canza wani abu a nan, kawai dole ne ka kashe shiga tare da haƙƙin tushen (AllowRootLogin = ƙarya). Ga kowane mai amfani da aka ba da izini a cikin tsarin, ana ƙaddamar da wani tsari na xrdp daban: idan kun cire haɗin ba tare da ƙare zaman ba, hanyoyin mai amfani za su ci gaba da gudana ta tsohuwa, kuma kuna iya sake haɗawa da zaman. Ana iya canza saituna a cikin fayil /etc/xrdp/sesman.ini ([Sessions] section).
Canza shimfidar madannai
Yawancin lokaci babu matsala tare da allo na hanya biyu, amma tare da shimfidar madannai na Rashanci za ku yi wasa kaɗan (ya kamata yankin Rasha ya riga ya kasance. ). Bari mu gyara saitunan madannai na uwar garken Xrdp:
sudo nano /etc/xrdp/xrdp_keyboard.iniKuna buƙatar ƙara layin masu zuwa zuwa ƙarshen fayil ɗin daidaitawa:
[rdp_keyboard_ru]
keyboard_type=4
keyboard_type=7
keyboard_subtype=1
model=pc105
options=grp:alt_shift_toggle
rdp_layouts=default_rdp_layouts
layouts_map=layouts_map_ru
[layouts_map_ru]
rdp_layout_us=us,ru
rdp_layout_ru=us,ruAbin da ya rage shi ne adana fayil ɗin kuma sake kunna Xrdp:
sudo systemctl restart xrdpKamar yadda kake gani, ba shi da wahala a kafa uwar garken RDP akan Linux VPS, amma Mun riga mun tattauna saitin VNC. Baya ga waɗannan fasahohin, akwai wani zaɓi mai ban sha'awa: tsarin X3Go ta amfani da ingantaccen tsarin NX 2. Za mu magance shi a cikin littattafai na gaba.
source: www.habr.com