manual, sysadmins, gui

This commit is contained in:
Mik-TF 2024-05-14 12:37:07 -04:00
parent 2ac97d936c
commit 3b2e0f0241
3 changed files with 72 additions and 72 deletions

View File

@ -34,38 +34,38 @@ To start, you must [deploy and SSH into a full VM](ssh_guide.md).
* With an IPv4 Address
* After deployment, copy the IPv4 address
* Connect into the VM via SSH
* ```
```
ssh root@VM_IPv4_address
```
* Create a new user with root access
* Here we use `newuser` as an example
* ```
```
adduser newuser
```
* To see the directory of the new user
* ```
```
ls /home
```
* Give sudo capacity to the new user
* ```
```
usermod -aG sudo newuser
```
* Make the new user accessible by SSH
* ```
```
su - newuser
```
* ```
```
mkdir ~/.ssh
```
* ```
```
nano ~/.ssh/authorized_keys
```
* add the authorized public key in the file, then save and quit
* Exit the VM and reconnect with the new user
* ```
```
exit
```
* ```
```
ssh newuser@VM_IPv4_address
```
@ -74,11 +74,11 @@ To start, you must [deploy and SSH into a full VM](ssh_guide.md).
## Set the VM and Install Cockpit
* Update and upgrade the VM
* ```
```
sudo apt update -y && sudo apt upgrade -y && sudo apt-get update -y
```
* Install Cockpit
* ```
```
. /etc/os-release && sudo apt install -t ${UBUNTU_CODENAME}-backports cockpit -y
```
@ -89,24 +89,24 @@ To start, you must [deploy and SSH into a full VM](ssh_guide.md).
We now change the system daemon that manages network configurations. We will be using [NetworkManager](https://networkmanager.dev/) instead of [networkd](https://wiki.archlinux.org/title/systemd-networkd). This will give us further possibilities on Cockpit.
* Install NetworkManager. Note that it might already be installed.
* ```
```
sudo apt install network-manager -y
```
* Update the `.yaml` file
* Go to netplan's directory
* ```
```
cd /etc/netplan
```
* Search for the proper `.yaml` file name
* ```
```
ls -l
```
* Update the `.yaml` file
* ```
```
sudo nano 50-cloud-init.yaml
```
* Add the following lines under `network:`
* ```
```
version: 2
renderer: NetworkManager
```
@ -114,22 +114,22 @@ We now change the system daemon that manages network configurations. We will be
* Remove `version: 2` at the bottom of the file
* Save and exit the file
* Disable networkd and enable NetworkManager
* ```
```
sudo systemctl disable systemd-networkd
```
* ```
```
sudo systemctl enable NetworkManager
```
* Apply netplan to set NetworkManager
* ```
```
sudo netplan apply
```
* Reboot the system to load the new kernel and to properly set NetworkManager
* ```
```
sudo reboot
```
* Reconnect to the VM
* ```
```
ssh newuser@VM_IPv4_address
```
@ -139,24 +139,24 @@ We now change the system daemon that manages network configurations. We will be
We now set a firewall. We note that [ufw](https://wiki.ubuntu.com/UncomplicatedFirewall) is not compatible with Cockpit and for this reason, we will be using [firewalld](https://firewalld.org/).
* Install firewalld
* ```
```
sudo apt install firewalld -y
```
* Add Cockpit to firewalld
* ```
```
sudo firewall-cmd --add-service=cockpit
```
* ```
```
sudo firewall-cmd --add-service=cockpit --permanent
```
* See if Cockpit is available
* ```
```
sudo firewall-cmd --info-service=cockpit
```
* See the status of firewalld
* ```
```
sudo firewall-cmd --state
```
@ -165,7 +165,7 @@ We now set a firewall. We note that [ufw](https://wiki.ubuntu.com/UncomplicatedF
## Access Cockpit
* On your web browser, write the following URL with the proper VM IPv4 address
* ```
```
VM_IPv4_Address:9090
```
* Enter the username and password of the root-access user

View File

@ -37,30 +37,30 @@ If you are new to the Threefold ecosystem and you want to deploy workloads on th
* Minimum storage: 15Gb
* After deployment, note the VM IPv4 address
* Connect to the VM via SSH
* ```
```
ssh root@VM_IPv4_address
```
* Once connected, create a new user with root access (for this guide we use "newuser")
* ```
```
adduser newuser
```
* You should now see the new user directory
* ```
```
ls /home
```
* Give sudo capacity to the new user
* ```
```
usermod -aG sudo newuser
```
* Make the new user accessible by SSH
* ```
```
su - newuser
```
* ```
```
mkdir ~/.ssh
```
* Add authorized public key in the file and save it
* ```
```
nano ~/.ssh/authorized_keys
```
* Exit the VM and reconnect with the new user
@ -70,21 +70,21 @@ If you are new to the Threefold ecosystem and you want to deploy workloads on th
## SSH with Root-Access User, Install Prerequisites and Apache Guacamole
* SSH into the VM
* ```
```
ssh newuser@VM_IPv4_address
```
* Update and upgrade Ubuntu
* ```
```
sudo apt update && sudo apt upgrade -y && sudo apt-get install software-properties-common -y
```
* Download and run Apache Guacamole
* ```
```
wget -O guac-install.sh https://git.io/fxZq5
```
* ```
```
chmod +x guac-install.sh
```
* ```
```
sudo ./guac-install.sh
```
@ -93,11 +93,11 @@ If you are new to the Threefold ecosystem and you want to deploy workloads on th
## Access Apache Guacamole and Create Admin-Access User
* On your local computer, open a browser and write the following URL with the proper IPv4 address
* ```
```
https://VM_IPv4_address:8080/guacamole
```
* On Guacamole, enter the following for both the username and the password
* ```
```
guacadmin
```
* Download the [TOTP](https://totp.app/) app on your Android or iOS
@ -120,23 +120,23 @@ If you are new to the Threefold ecosystem and you want to deploy workloads on th
## Download the Desktop Environment and Run xrdp
* Download a Ubuntu desktop environment on the VM
* ```
```
sudo apt install tasksel -y && sudo apt install lightdm -y
```
* Choose lightdm
* Run tasksel and choose `ubuntu desktop`
* ```
```
sudo tasksel
```
* Download and run xrdp
* ```
```
wget https://c-nergy.be/downloads/xRDP/xrdp-installer-1.4.6.zip
```
* ```
```
unzip xrdp-installer-1.4.6.zip
```
* ```
```
bash xrdp-installer-1.4.6.sh
```
@ -146,7 +146,7 @@ If you are new to the Threefold ecosystem and you want to deploy workloads on th
* Create an RDP connection on Guacamole
* Open Guacamole
* ```
```
http://VM_IPv4_address:8080/guacamole/
```
* Go to Settings

View File

@ -31,107 +31,107 @@ If you are new to the Threefold ecosystem and you want to deploy workloads on th
* With an IPv4 Address
* After deployment, copy the IPv4 address
* To SSH into the VM, write in the terminal
* ```
```
ssh root@VM_IPv4_address
```
* Once connected, update, upgrade and install the desktop environment
* Update
* ```
```
sudo apt update -y && sudo apt upgrade -y
```
* Install a light-weight desktop environment (Xfce)
* ```
```
sudo apt install xfce4 xfce4-goodies -y
```
* Create a user with root access
* ```
```
adduser newuser
```
* ```
```
ls /home
```
* You should see the newuser directory
* Give sudo capacity to newuser
* ```
```
usermod -aG sudo newuser
```
* Make newuser accessible by SSH
* ```
```
su - newuser
```
* ```
```
mkdir ~/.ssh
```
* ```
```
nano ~/.ssh/authorized_keys
```
* add authorized public key in file and save
* Exit the VM and reconnect with new user
* ```
```
exit
```
* Reconnect to the VM terminal and install XRDP
* ```
```
ssh newuser@VM_IPv4_address
```
* Install XRDP
* ```
```
sudo apt install xrdp -y
```
* Check XRDP status
* ```
```
sudo systemctl status xrdp
```
* If not running, run manually:
* ```
```
sudo systemctl start xrdp
```
* If needed, configure xrdp (optional)
* ```
```
sudo nano /etc/xrdp/xrdp.ini
```
* Create a session with root-access user
Move to home directory
* Go to home directory of root-access user
* ```
```
cd ~
```
* Create session
* ```
```
echo "xfce4-session" | tee .xsession
```
* Restart the server
* ```
```
sudo systemctl restart xrdp
```
* Find your local computer IP address
* On your local computer terminal, write
* ```
```
curl ifconfig.me
```
* On the VM terminal, allow client computer port to the firewall (ufw)
* ```
```
sudo ufw allow from your_local_ip/32 to any port 3389
```
* Allow SSH connection to your firewall
* ```
```
sudo ufw allow ssh
```
* Verify status of the firewall
* ```
```
sudo ufw status
```
* If not active, do the following:
* ```
```
sudo ufw disable
```
* ```
```
sudo ufw enable
```
* Then the ufw status should show changes
* ```
```
sudo ufw status
```