Π sixoxe ngokuqhuba iseva ye-VNC emshinini obonakalayo wanoma yiluphi uhlobo. Lolu khetho lunezinkinga eziningi, okuyinhloko okuyizidingo eziphakeme zokuphuma kweziteshi zokudlulisa idatha. Namuhla sizozama ukuxhuma kudeskithophu yezithombe ku-Linux nge-RDP (Iphrothokholi Yedeskithophu Ekude). Uhlelo lwe-VNC lusekelwe ekudluliseleni amaphikseli afanayo usebenzisa iphrothokholi ye-RFB (Remote Framebuffer), futhi i-RDP ikuvumela ukuthi uthumele imifanekiso yakudala eyinkimbinkimbi kanye nemiyalo yezinga eliphezulu. Ngokuvamile isetshenziselwa ukusingatha Izinsiza Zedeskithophu Ekude ku-Windows, kodwa amaseva e-Linux ayatholakala.
Incazelo:
Ifaka indawo yesithombe
Sizothatha umshini obonakalayo one-Ubuntu Server 18.04 LTS enamakhompiyutha amabili, amagigabhayithi amane e-RAM kanye ne-hard drive engamagigabhayithi angamashumi amabili (HDD). Ukucushwa okubuthakathaka akufanelekile kudeskithophu yezithombe, nakuba lokhu kuncike emisebenzini exazululwayo. Ungakhohlwa ukusebenzisa ikhodi yephromo ethi Habrahabr10 ukuze uthole isaphulelo sika-10% ku-oda lakho.
Ukufaka imvelo yedeskithophu nakho konke ukuncika kwenziwa ngomyalo olandelayo:
sudo apt-get install xfce4 xfce4-goodies xorg dbus-x11 x11-xserver-utilsNjengasendabeni edlule, sikhethe i-XFCE ngenxa yezidingo zayo zensiza yekhompyutha ephansi.
I-Russification yeseva nokufakwa kwesofthiwe
Ngokuvamile imishini ebonakalayo isetshenziswa kuphela ngokwenziwa kwasendaweni kwesiNgisi. Kudeskithophu ungase udinge isiRashiya, okulula ukusethwa. Okokuqala, masifake ukuhumusha kwezinhlelo zesistimu:
sudo apt-get install language-pack-ruMasimise ukwenziwa kwasendaweni:
sudo update-locale LANG=ru_RU.UTF-8Umphumela ofanayo ungafinyelelwa ngokuhlela ngesandla /etc/default/locale.
Ngokwenziwa kwasendaweni kwe-GNOME ne-KDE, inqolobane ine- language-pack-gnome-ru kanye namaphakheji e-language-pack-kde-ru - uzowadinga uma usebenzisa izinhlelo ezivela kulezi zindawo zedeskithophu. Ku-XFCE, ukuhumusha kufakwa nezinhlelo zokusebenza. Okulandelayo ungafaka izichazamazwi:
# Π‘Π»ΠΎΠ²Π°ΡΠΈ Π΄Π»Ρ ΠΏΡΠΎΠ²Π΅ΡΠΊΠΈ ΠΎΡΡΠΎΠ³ΡΠ°ΡΠΈΠΈ
sudo apt-get install hunspell hunspell-ru
# Π’Π΅Π·Π°ΡΡΡΡ Π΄Π»Ρ LibreOffice
sudo apt-get install mythes-ru
# ΠΠ½Π³Π»ΠΎ-ΡΡΡΡΠΊΠΈΠΉ ΡΠ»ΠΎΠ²Π°ΡΡ Π² ΡΠΎΡΠΌΠ°ΡΠ΅ DICT
sudo apt-get install mueller7-dictNgaphezu kwalokho, ukufakwa kokuhunyushiwe kungase kudingeke kwezinye izinhlelo zokusebenza:
# ΠΡΠ°ΡΠ·Π΅Ρ Firefox
sudo apt-get install firefox firefox-locale-ru
# ΠΠΎΡΡΠΎΠ²ΡΠΉ ΠΊΠ»ΠΈΠ΅Π½Ρ Thunderbird
sudo apt-get install thunderbird thunderbird-locale-ru
# ΠΡΠΈΡΠ½ΡΠΉ ΠΏΠ°ΠΊΠ΅Ρ LibreOffice
sudo apt-get install libreoffice libreoffice-l10n-ru libreoffice-help-ruLokhu kuqeda ukulungiswa kwendawo yedeskithophu, okusele nje ukulungisa iseva ye-RDP.
Ukufaka nokumisa iseva ye-RDP
Amakhosombe e-Ubuntu aneseva ye-Xrdp esabalaliswe ngokukhululekile, esizoyisebenzisa:
sudo apt-get install xrdpUma konke kuhambe kahle, iseva kufanele iqale ngokuzenzakalelayo:
sudo systemctl status xrdp
Iseva ye-Xrdp isebenza namalungelo omsebenzisi we-xrdp futhi ngokuzenzakalelayo ithatha isitifiketi /etc/ssl/private/ssl-cert-snakeoil.key, esingashintshwa ngesakho. Ukuze ube nokufinyelela kokufunda ifayela, udinga ukwengeza umsebenzisi eqenjini le-ssl-cert:
sudo adduser xrdp ssl-certIzilungiselelo ezizenzakalelayo zingatholakala kufayela /etc/default/xrdp, futhi wonke amanye amafayela wokumisa iseva atholakala kuhla lwemibhalo /etc/xrdp. Imingcele eyinhloko ikufayela le-xrdp.ini, elingadingi ukushintshwa. I-config ibhalwe kahle, futhi ama-manpages ahambisanayo afakiwe:
man xrdp.ini
man xrdpOkusele nje ukuhlela iskripthi /etc/xrdp/startwm.sh, esisetshenziswa lapho isikhathi somsebenzisi siqaliswa. Okokuqala, masenze ikhophi eyisipele yeskripthi ekusabalaliseni:
sudo mv /etc/xrdp/startwm.sh /etc/xrdp/startwm.b
sudo nano /etc/xrdp/startwm.shUkuze uqale imvelo yedeskithophu ye-XFCE, uzodinga umbhalo ofana nalokhu:
#!/bin/sh
if [ -r /etc/default/locale ]; then
. /etc/default/locale
export LANG LANGUAGE
fi
exec /usr/bin/startxfce4Sicela uqaphele: emibhalweni kungcono ukubhala indlela ephelele eya kumafayela asebenzisekayo - lokhu kuwumkhuba omuhle. Masenze iskripthi sisebenziseke futhi kuleli phuzu ukusethwa kweseva ye-Xrdp kungabhekwa njengokuphelele:
sudo chmod 755 /etc/xrdp/startwm.shQala kabusha iseva:
sudo systemctl restart xrdp
Ukusetha i-firewall
Ngokuzenzakalelayo, i-Xrdp ilalela imbobo ye-TCP 3389 kukho konke ukuxhumana. Kuye ngokucushwa kweseva ebonakalayo, ungase udinge ukulungisa i-firewall ye-Netfilter. Ku-Linux lokhu kuvame ukwenziwa kusetshenziswa insiza ye-iptables, kodwa ku-Ubuntu kungcono ukusebenzisa i-ufw. Uma ikheli le-IP leklayenti laziwa, ukucushwa kwenziwa ngomyalo olandelayo:
sudo ufw allow from IP_Address to any port 3389Ungavumela ukuxhumana kusuka kunoma iyiphi i-IP efana nalena:
sudo ufw allow 3389Iphrothokholi ye-RDP isekela ukubethela, kodwa ukuveza iseva ye-Xrdp kumanethiwekhi omphakathi kuwumbono omubi. Uma iklayenti ingenayo i-IP engaguquki, iseva kufanele ilalele kuphela i-hosthost yasendaweni ukuze ikhulise ukuvikeleka. Kungcono ukuyifinyelela ngomhubhe we-SSH, ozoqondisa kabusha ngokuphephile ithrafikhi esuka kukhompyutha yeklayenti. Sinendlela efanayo okweseva ye-VNC.
Ixhuma kuseva ye-RDP
Ukuze usebenze ngendawo yedeskithophu, kungcono ukudala umsebenzisi ohlukile ongenamalungelo:
sudo adduser rdpuser
Ake sengeze umsebenzisi eqenjini le-sudo ukuze akwazi ukwenza imisebenzi ehlobene nokuphatha. Uma singekho isidingo esinjalo, ungeqa lesi sinyathelo:
sudo gpasswd -a rdpuser sudoUngakwazi ukuxhuma kuseva usebenzisa noma yiliphi iklayenti le-RDP, kuhlanganise neklayenti le-Windows Remote Desktop Services eyakhelwe ngaphakathi. Uma i-Xrdp ilalele isixhumi esibonakalayo sangaphandle, azikho izenzo ezengeziwe ezizodingeka. Kwanele ukucacisa ikheli le-IP le-VPS, igama lomsebenzisi nephasiwedi kuzilungiselelo zokuxhuma. Ngemva kokuxhuma, sizobona okufana nalokhu:
Ngemuva kokusetha kokuqala kwendawo yedeskithophu, sizothola ideskithophu egcwele ngokugcwele. Njengoba ubona, ayidli izinsiza eziningi, nakuba konke kuzoncika kuzinhlelo zokusebenza ezisetshenzisiwe.
Uma iseva ye-Xrdp ilalela umsingathi wendawo kuphela, ithrafikhi kukhompyutha yeklayenti kuyodingeka ihlanganiswe emhubheni we-SSH (i-sshd kumelwe isebenze ku-VPS). Ku-Windows, ungasebenzisa iklayenti le-SSH eliyisithombe (ngokwesibonelo, i-PuTTY), nasezinhlelweni ze-UNIX udinga insiza ye-ssh:
ssh -L 3389:127.0.0.1:3389 -C -N -l rdpuser RDP_server_ipNgemva kokuthi umhubhe usuqalisiwe, iklayenti le-RDP ngeke lisaxhumeka kuseva ekude, kodwa kumsingathi wendawo.
Kunzima kakhulu ngamadivayisi eselula: Amaklayenti e-SSH akwazi ukukhulisa umhubhe kuzodingeka athengwe, futhi ku-iOS ne-iPadOS, ukusebenza kwangemuva kwezinhlelo zokusebenza zezinkampani zangaphandle kunzima ngenxa yokwenziwa kahle kakhulu kokusetshenziswa kwamandla. Ku-iPhone ne-iPad, ngeke ukwazi ukudala umhubhe ohlelweni oluhlukile; uzodinga uhlelo lokuvuna olungasungula uxhumano lwe-RDP nge-SSH. Njengokuthi, isibonelo .
Isiphathi Seseshini kanye Nezikhathi Zomsebenzisi
Amandla omsebenzi wabasebenzisi abaningi asetshenziswa ngokuqondile kuseva ye-Xrdp futhi ayidingi ukucushwa okwengeziwe. Ngemva kokuqala isevisi nge-systemd, inqubo eyodwa isebenza ngemodi ye-daemon, ilalela ku-port 3389 futhi ixhumana nge-localhost nomphathi weseshini.
ps aux |grep xrdp
sudo netstat -ap |grep xrdp
Umphathi weseshini ngokuvamile akabonakali kubasebenzisi, ngoba ukungena ngemvume nephasiwedi eshiwo kuzilungiselelo zeklayenti kudluliselwa kuyo ngokuzenzakalelayo. Uma lokhu kungenzeki noma kukhona iphutha ngesikhathi sokufakazela ubuqiniso, kuzovela iwindi lokungena elisebenzisanayo esikhundleni sedeskithophu.
Ukwethulwa ngokuzenzakalelayo komphathi weseshini kucaciswe kufayela /etc/default/xrdp, futhi ukucushwa kugcinwa ku-/etc/xrdp/sesman.ini. Ngokuzenzakalelayo kubukeka kanjena:
[Globals]
ListenAddress=127.0.0.1
ListenPort=3350
EnableUserWindowManager=true
UserWindowManager=startwm.sh
DefaultWindowManager=startwm.sh
[Security]
AllowRootLogin=true
MaxLoginRetry=4
TerminalServerUsers=tsusers
TerminalServerAdmins=tsadmins
; When AlwaysGroupCheck=false access will be permitted
; if the group TerminalServerUsers is not defined.
AlwaysGroupCheck=false
[Sessions]Akumele uguqule noma yini lapha, kufanele nje ukhubaze ukungena ngemvume ngamalungelo empande (AllowRootLogin=false). Kumsebenzisi ngamunye ogunyazwe ohlelweni, kuqaliswa inqubo ehlukile ye-xrdp: uma unqamula ngaphandle kokuqeda iseshini, izinqubo zomsebenzisi zizoqhubeka zisebenza ngokuzenzakalelayo, futhi ungakwazi ukuxhuma kuseshini futhi. Izilungiselelo zingashintshwa kufayela elithi /etc/xrdp/sesman.ini ([Isigaba]).
Ishintsha izakhiwo zekhibhodi
Ngokuvamile azikho izinkinga ngebhodi lokunamathisela elinezindlela ezimbili, kodwa ngesakhiwo sekhibhodi yesiRashiya kuzodingeka udlale kancane (indawo yesiRashiya kufanele ibe vele ). Masihlele izilungiselelo zekhibhodi zeseva ye-Xrdp:
sudo nano /etc/xrdp/xrdp_keyboard.iniUdinga ukungeza imigqa elandelayo ekugcineni kwefayela lokumisa:
[rdp_keyboard_ru]
keyboard_type=4
keyboard_type=7
keyboard_subtype=1
model=pc105
options=grp:alt_shift_toggle
rdp_layouts=default_rdp_layouts
layouts_map=layouts_map_ru
[layouts_map_ru]
rdp_layout_us=us,ru
rdp_layout_ru=us,ruOkusele ukugcina ifayela bese uqala kabusha i-Xrdp:
sudo systemctl restart xrdpNjengoba ubona, akunzima ukusetha iseva ye-RDP ku-Linux VPS, kodwa Sesixoxile kakade ngokusethwa kwe-VNC. Ngokungeziwe kulobu buchwepheshe, kunenye inketho ethokozisayo: isistimu ye-X3Go esebenzisa iphrothokholi ye-NX 2 eguquliwe. Sizobhekana nakho encwadini elandelayo.
Source: www.habr.com