User Tools

Site Tools


doc:howto:x2gobroker

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revision Both sides next revision
doc:howto:x2gobroker [2017/02/10 17:11]
stefanbaur [Setting up the systems] - added ISO urls
doc:howto:x2gobroker [2017/02/13 15:32]
stefanbaur [X2Go Session Broker Demo Environment Setup] removed WiP note
Line 1: Line 1:
 ====== X2Go Session Broker Demo Environment Setup ====== ====== X2Go Session Broker Demo Environment Setup ======
-<note important>Work in Progress - at present, session resuming doesn't work, even though it should.</note>+
 ===== Purpose of this document ===== ===== Purpose of this document =====
  
Line 54: Line 54:
   * Each system will power down once the installation is complete. **DO NOT** power any one of them up until ALL of them are completely installed and shut down!   * Each system will power down once the installation is complete. **DO NOT** power any one of them up until ALL of them are completely installed and shut down!
   * Once installed, power them up in exactly the same sequence - and **WAIT** until bootup is complete before powering up the next!   * Once installed, power them up in exactly the same sequence - and **WAIT** until bootup is complete before powering up the next!
 +
 +==== Preseeding - Manual Steps ====
 +These are the steps you have to perform manually:
 +  * {{:doc:howto:ldap1-1.png?200|}} Boot the ISO. It will beep at you, and the option "Install" will be highlighted.
 +  * {{:doc:howto:ldap1-2.png?200|}} Hit the TAB key (the key to the left <- of the "Q" key on most keyboards), and enter <code> auto url=http://your-web-server/preseed_namegoeshere hostname=namegoeshere domain=x2go.example.com</code> behind the part that says <code>--- quiet</code>
 +  * You can either choose to confirm this by pressing the ENTER key, or add further options as listed in each preseed file's comment header.
 +  * If you choose not to add further options, a few questions will be asked interactively, namely, the ones you can see in these screenshots:
 +
 +{{:doc:howto:ldap1-3.png?200|}} {{:doc:howto:ldap1-4.png?200|}} {{:doc:howto:ldap1-5.png?200|}} {{:doc:howto:ldap1-6.png?200|}} {{:doc:howto:ldap1-7.png?200|}} {{:doc:howto:ldap1-8.png?200|}}
  
 <note tip>Each entry below contains a hint regarding the minimum requirements for the individual system. If you're using virtual machines, and are low on disk space, feel free to assign sparse files/growing disk images. The systems don't really need that much space right away, but if you assign smaller sizes, the installer might become confused and partition the virtual disk in unexpected ways.</note> <note tip>Each entry below contains a hint regarding the minimum requirements for the individual system. If you're using virtual machines, and are low on disk space, feel free to assign sparse files/growing disk images. The systems don't really need that much space right away, but if you assign smaller sizes, the installer might become confused and partition the virtual disk in unexpected ways.</note>
 <note tip>If you click on the name of a preseed file, like "preseed_ldap1" below, you will be offered to download it - that's easier than copy-pasting each file.</note> <note tip>If you click on the name of a preseed file, like "preseed_ldap1" below, you will be offered to download it - that's easier than copy-pasting each file.</note>
-==== ldap1.xgo.example.com ====+==== ldap1.x2go.example.com ====
   * Minimum RAM required: 256MB   * Minimum RAM required: 256MB
   * Minimum disk space required: 4 GB   * Minimum disk space required: 4 GB
Line 224: Line 233:
  echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\   echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\ 
  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\
- echo "common-auth;*;*;A10000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\+ echo "*;*;*;Al0000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\
  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\
  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\
Line 322: Line 331:
 </file> </file>
  
-==== nfs1.xgo.example.com ====+==== nfs1.x2go.example.com ====
   * Minimum RAM required: 256MB   * Minimum RAM required: 256MB
   * Minimum disk space required: 20 GB   * Minimum disk space required: 20 GB
Line 481: Line 490:
  echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\   echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\ 
  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\
- echo "common-auth;*;*;A10000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\+ echo "*;*;*;Al0000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\
  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\
  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\
Line 540: Line 549:
 </file> </file>
  
-==== pg1.xgo.example.com ====+==== pg1.x2go.example.com ====
   * Minimum RAM required: 256MB   * Minimum RAM required: 256MB
   * Minimum disk space required: 20 GB   * Minimum disk space required: 20 GB
Line 697: Line 706:
  echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\   echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\ 
  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\
- echo "common-auth;*;*;A10000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\+ echo "*;*;*;Al0000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\
  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\
  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\
Line 765: Line 774:
 </file> </file>
  
-==== x2gobroker1.xgo.example.com ====+==== x2gobroker1.x2go.example.com ====
   * Minimum RAM required: 256MB   * Minimum RAM required: 256MB
   * Minimum disk space required: 4 GB   * Minimum disk space required: 4 GB
Line 888: Line 897:
 # sources.list line will be left commented out # sources.list line will be left commented out
  
-CHANGE THIS - you need to download this keyfile onto your web server +When this key doesn't work any more, switch entries 
-run these gpg commands to download it: +#d-i apt-setup/local0/key string http://packages.x2go.org/pub.key 
-# gpg --keyserver keys.gnupg.net --recv-keys E1F958385BFE2B6E +d-i apt-setup/local0/key string http://packages.x2go.org/debian-old-pub.key
-# gpg -a --export E1F958385BFE2B6E > x2go.key.gpg +
-d-i apt-setup/local0/key string http://192.168.0.224/x2go.key.gpg+
  
 # Task and Package Selection # Task and Package Selection
Line 918: Line 925:
 x2gobroker-authservice \ x2gobroker-authservice \
 x2gobroker-daemon \ x2gobroker-daemon \
 +x2gobroker-loadchecker \
 x2gobroker-ssh x2gobroker-ssh
  
Line 946: Line 954:
  echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\   echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\ 
  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\
- echo "common-auth;*;*;A10000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\+ echo "*;*;*;Al0000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\
  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\
  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\
Line 985: Line 993:
  sed -i -e '/^command=SHADOW/aacl-groups-deny=ALL' /target/etc/x2go/broker/x2gobroker-sessionprofiles.conf ;\  sed -i -e '/^command=SHADOW/aacl-groups-deny=ALL' /target/etc/x2go/broker/x2gobroker-sessionprofiles.conf ;\
  sed -i -e '/^command=SHADOW/aacl-groups-allow=group-shadow' /target/etc/x2go/broker/x2gobroker-sessionprofiles.conf ;\  sed -i -e '/^command=SHADOW/aacl-groups-allow=group-shadow' /target/etc/x2go/broker/x2gobroker-sessionprofiles.conf ;\
 + echo "COMMENT: These patches fix bugs that are still present in the current stable release" ;\
 + sed -i -e 's/if pam.pam:/if hasattr(pam, "pam"):/' /target/usr/sbin/x2gobroker-authservice /target/usr/lib/python2.7/dist-packages/x2gobroker/authmechs/pam_authmech.py ;\
 + sed -i -e "s/'hostname'/'hostaddr'/" /target/usr/sbin/x2gobroker-testagent ;\
 + echo "COMMENT: This enables the HTTP Session Broker for SystemD and SysVinit systems" ;\
 + sed -i '/#DAEMON_BIND_ADDRESS=127.0.0.1:8080/aDAEMON_BIND_ADDRESS=*:8080' /target/etc/default/x2gobroker-daemon /target/etc/x2go/broker/defaults.conf ;\
  echo "COMMENT: This patches rc.local so the following set of commands is run" ;\  echo "COMMENT: This patches rc.local so the following set of commands is run" ;\
  echo "COMMENT: exactly *once* - at the first boot after installation." ;\  echo "COMMENT: exactly *once* - at the first boot after installation." ;\
Line 1053: Line 1066:
 </file> </file>
  
-==== x2goserver1.xgo.example.com ====+==== x2goserver1.x2go.example.com ====
   * Minimum RAM required: 256MB   * Minimum RAM required: 256MB
   * Minimum disk space required: 8 GB   * Minimum disk space required: 8 GB
Line 1176: Line 1189:
 # sources.list line will be left commented out # sources.list line will be left commented out
  
-CHANGE THIS - you need to download this keyfile onto your web server +When this key doesn't work any more, switch entries 
-run these gpg commands to download it: +#d-i apt-setup/local0/key string http://packages.x2go.org/pub.key 
-# gpg --keyserver keys.gnupg.net --recv-keys E1F958385BFE2B6E +d-i apt-setup/local0/key string http://packages.x2go.org/debian-old-pub.key
-# gpg -a --export E1F958385BFE2B6E > x2go.key.gpg +
-d-i apt-setup/local0/key string http://192.168.0.224/x2go.key.gpg+
  
 # Task and Package Selection # Task and Package Selection
Line 1239: Line 1250:
  echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\   echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\ 
  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\
- echo "common-auth;*;*;A10000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\+ echo "*;*;*;Al0000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\
  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\
  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\
Line 1338: Line 1349:
 </file> </file>
  
-==== x2goserver2.xgo.example.com ====+==== x2goserver2.x2go.example.com ====
   * Minimum RAM required: 256MB   * Minimum RAM required: 256MB
   * Minimum disk space required: 8 GB   * Minimum disk space required: 8 GB
Line 1461: Line 1472:
 # sources.list line will be left commented out # sources.list line will be left commented out
  
-CHANGE THIS - you need to download this keyfile onto your web server +When this key doesn't work any more, switch entries 
-run these gpg commands to download it: +#d-i apt-setup/local0/key string http://packages.x2go.org/pub.key 
-# gpg --keyserver keys.gnupg.net --recv-keys E1F958385BFE2B6E +d-i apt-setup/local0/key string http://packages.x2go.org/debian-old-pub.key
-# gpg -a --export E1F958385BFE2B6E > x2go.key.gpg +
-d-i apt-setup/local0/key string http://192.168.0.224/x2go.key.gpg+
  
 # Task and Package Selection # Task and Package Selection
Line 1524: Line 1533:
  echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\   echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\ 
  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\
- echo "common-auth;*;*;A10000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\+ echo "*;*;*;Al0000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\
  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\
  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\
Line 1592: Line 1601:
 </file> </file>
  
-==== x2goclient1.xgo.example.com ====+==== x2goclient1.x2go.example.com ====
   * Minimum RAM required: 256MB   * Minimum RAM required: 256MB
   * Minimum disk space required: 4 GB   * Minimum disk space required: 4 GB
Line 1715: Line 1724:
 # sources.list line will be left commented out # sources.list line will be left commented out
  
-CHANGE THIS - you need to download this keyfile onto your web server +When this key doesn't work any more, switch entries
-# run these gpg commands to download it: +
-# gpg --keyserver keys.gnupg.net --recv-keys E1F958385BFE2B6E +
-# gpg -a --export E1F958385BFE2B6E > x2go.key.gpg +
-#d-i apt-setup/local0/key string http://192.168.0.224/x2go.key.gpg+
 #d-i apt-setup/local0/key string http://packages.x2go.org/pub.key #d-i apt-setup/local0/key string http://packages.x2go.org/pub.key
 d-i apt-setup/local0/key string http://packages.x2go.org/debian-old-pub.key d-i apt-setup/local0/key string http://packages.x2go.org/debian-old-pub.key
Line 1782: Line 1787:
  in-target apt-get clean ;\  in-target apt-get clean ;\
  echo "COMMENT: This last step creates an X2GoClient-in-Broker-Mode desktop entry" ;\  echo "COMMENT: This last step creates an X2GoClient-in-Broker-Mode desktop entry" ;\
- mkdir /target/home/localuser/Desktop ;\ + mkdir /target/home/localuser/Desktop ;\ echo '[Desktop Entry]' >>/target/home/localuser/Desktop/x2goclient-broker-ssh.desktop ;\ 
- echo '[Desktop Entry]' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\ + echo 'Version=1.0' >>/target/home/localuser/Desktop/x2goclient-broker-ssh.desktop ;\ 
- echo 'Version=1.0' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\ + echo 'Terminal=false' >>/target/home/localuser/Desktop/x2goclient-broker-ssh.desktop ;\ 
- echo 'Terminal=false' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\ + echo 'Icon=x2goclient' >>/target/home/localuser/Desktop/x2goclient-broker-ssh.desktop ;\ 
- echo 'Icon=x2goclient' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\ + echo 'Type=Application' >>/target/home/localuser/Desktop/x2goclient-broker-ssh.desktop ;\ 
- echo 'Type=Application' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\ + echo 'Categories=Internet' >>/target/home/localuser/Desktop/x2goclient-broker-ssh.desktop ;\ 
- echo 'Categories=Internet' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\ + echo 'Exec=x2goclient --broker-url=ssh://x2gobroker1.x2go.example.com:/usr/bin/x2gobroker-ssh --add-to-known-hosts' >>/target/home/localuser/Desktop/x2goclient-broker-ssh.desktop ;\ 
- echo 'Exec=x2goclient --broker-url=ssh://x2gobroker1.x2go.example.com:/usr/bin/x2gobroker --add-to-known-hosts' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\ + echo 'Name=X2GoClient in SSH Broker Mode' >>/target/home/localuser/Desktop/x2goclient-broker-ssh.desktop ;\ 
- echo 'Name=X2GoClient in Broker Mode' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\ + echo 'GenericName=X2GoClient in SSH Broker Mode' >>/target/home/localuser/Desktop/x2goclient-broker-ssh.desktop ;\ 
- echo 'GenericName=X2GoClient in Broker Mode' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\ + echo 'Comment=Starts X2GoClient in SSH Broker Mode' >>/target/home/localuser/Desktop/x2goclient-broker-ssh.desktop ;\ 
- echo 'Comment=Starts X2GoClient in Broker Mode' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\ + echo 'StartupNotify=true' >>/target/home/localuser/Desktop/x2goclient-broker-ssh.desktop ;\ 
- echo 'StartupNotify=true' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\+ echo '[Desktop Entry]' >>/target/home/localuser/Desktop/x2goclient-broker-http.desktop ;\ 
 + echo 'Version=1.0' >>/target/home/localuser/Desktop/x2goclient-broker-http.desktop ;\ 
 + echo 'Terminal=false' >>/target/home/localuser/Desktop/x2goclient-broker-http.desktop ;\ 
 + echo 'Icon=x2goclient' >>/target/home/localuser/Desktop/x2goclient-broker-http.desktop ;\ 
 + echo 'Type=Application' >>/target/home/localuser/Desktop/x2goclient-broker-http.desktop ;\ 
 + echo 'Categories=Internet' >>/target/home/localuser/Desktop/x2goclient-broker-http.desktop ;\ 
 + echo 'Exec=x2goclient --broker-url=ssh://x2gobroker1.x2go.example.com:8080/plain/inifile --add-to-known-hosts' >>/target/home/localuser/Desktop/x2goclient-broker-http.desktop ;\ 
 + echo 'Name=X2GoClient in HTTP Broker Mode' >>/target/home/localuser/Desktop/x2goclient-broker-http.desktop ;\ 
 + echo 'GenericName=X2GoClient in HTTP Broker Mode' >>/target/home/localuser/Desktop/x2goclient-broker-http.desktop ;\ 
 + echo 'Comment=Starts X2GoClient in HTTP Broker Mode' >>/target/home/localuser/Desktop/x2goclient-broker-http.desktop ;\ 
 + echo 'StartupNotify=true' >>/target/home/localuser/Desktop/x2goclient-broker-http.desktop ;\ 
  echo "End Post-Install Setup/Config"  echo "End Post-Install Setup/Config"
  
doc/howto/x2gobroker.txt · Last modified: 2017/02/28 09:21 by stefanbaur