x2go-commits January 2019

x2go-commits@lists.x2go.org

3 participants
114 discussions

[x2gothinclient] branch master updated (c6106bd -> e3370bf)
by git-admin＠x2go.org 18 Jan '19

18 Jan '19

This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch master in repository x2gothinclient. from c6106bd usbmount/x2gousbmount: whitespace- and comment-only changes. new e3370bf usbmount/x2gousbmount: rework x2gothinclientd check. The 1 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: debian/changelog | 1 + usbmount/x2gousbmount | 4 ++-- 2 files changed, 3 insertions(+), 2 deletions(-) -- Alioth's /home/x2go-admin/maintenancescripts/git/hooks/post-receive-email on /srv/git/code.x2go.org/x2gothinclient.git

1 1

[[X2Go Wiki]] page changed: doc:howto:tce
by wiki-admin＠x2go.org 18 Jan '19

18 Jan '19

A page in your DokuWiki was added or changed. Here are the details: Date : 2019/01/18 00:24 Browser : Mozilla/5.0 (X11; Linux x86_64; rv:52.9) Gecko/20100101 Goanna/3.4 Firefox/52.9 PaleMoon/27.9.4 IP-Address : 149.172.203.221 Hostname : HSI-KBW-149-172-203-221.hsi13.kabel-badenwuerttemberg.de Old Revision: https://wiki.x2go.org/doku.php/doc:howto:tce?rev=1547749609 New Revision: https://wiki.x2go.org/doku.php/doc:howto:tce Edit Summary: [Live-Patching the Build] - script is now in git and can be fetched with wget User : stefanbaur @@ -145,292 +145,9 @@ <code> #!/bin/bash mkdir -p ./patch/includes.chroot/usr/lib/x2go/tce/ - - cat >./patch/includes.chroot/usr/lib/x2go/tce/x2gousbmount <<'USBMOUNTPATCH' - - #!/usr/bin/perl - # Copyright (C) 2007-2017 by X2Go project, http://wiki.x2go.org - # Oleksandr Shneyder <oleksandr.shneyder(a)obviously-nice.de> - - # X2Go is free software; you can redistribute it and/or modify - # it under the terms of the GNU General Public License as published by - # the Free Software Foundation; either version 2 of the License, or - # (at your option) any later version. - # - # X2Go is distributed in the hope that it will be useful, - # but WITHOUT ANY WARRANTY; without even the implied warranty of - # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the - # GNU General Public License for more details. - # - # You should have received a copy of the GNU General Public License - # along with this program; if not, write to the - # Free Software Foundation, Inc., - # 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. - - use strict; - use File::Path::Expand; - # comment out this "use" and the following two lines, and instead - # uncomment the block below if you need to do early boot stage - # debugging of the automounter, when rsyslogd isn't running yet - use Sys::Syslog qw( :standard :macros ); - openlog($0,'cons,pid','user'); - setlogmask( LOG_UPTO(LOG_NOTICE) ); - #open (B,">>/var/log/usbdebug"); - #sub syslog { - # print B $_[0].': '.$_[1]."\n"; - #} - - my $user; - if ( -f "/etc/x2go/x2gothinclient-minidesktop_start" ) { - # this is a minidesktop environment, which uses - # username "x2gothinclient" regardless of whether - # it runs on X2Go-TCE-Live or X2Go-TCE-NFS - $user='x2gothinclient'; - } - elsif ( -d "/lib/live/config" ) { - # this is X2Go-TCE-Live, but not with a minidesktop - # (if it were, the first condition would have matched), - # so we use Debian-Live's standard username "user" - $user='user'; - } - else { - # this is X2Go-TCE-NFS or something completely different, - # so we'll play it safe and pick the username "x2gothinclient" - # just like previous versions of this script did - $user='x2gothinclient'; - } - - # We need this as chown requires numeric uid/gid - my ($login,$pass,$uid,$gid) = getpwnam($user); - - # Some last-ditch efforts to fulfill the prerequisites for File Sharing: - # - This is stuff that should already have happened earlier in the boot process. - # - Also, if a directory already exists, we silently assume that ownership and - # permissions are correct. This is so that users that deliberately set - # different ownership/permission values don't have their settings silently - # overwritten. - - unless ( -d expand_filename("~$user/mounts") ) { - mkdir expand_filename("~$user/mounts"); - chmod 0700, expand_filename("~$user/mounts"); - chown $uid, $gid, expand_filename("~$user/mounts"); - } - - unless ( -d expand_filename("~$user/export") ) { - mkdir expand_filename("~$user/export"); - chmod 0700, expand_filename("~$user/export"); - chown $uid, $gid, expand_filename("~$user/export"); - } - - unless ( -d expand_filename("~$user/logins") ) { - mkdir expand_filename("~$user/logins"); - chmod 0700, expand_filename("~$user/logins"); - chown $uid, $gid, expand_filename("~$user/logins"); - } - - sub check_x2gothinclientmode { - my $ret = 0; - - # Check for x2gothinclientd first... - my $x=`ps ax | grep x2gothinclient`; - if ( $x=~m/thinclientd/ ) { - $ret = 1; - } - - return $ret; - } - - # TCE-NFS TCE-Live MMD-Live - if ( check_x2gothinclientmode() || ( -x "/lib/live/config/2900-x2go-thinclientconfig" ) || ( -x "/etc/x2go/x2gothinclient-minidesktop_start" ) ) - { - syslog('notice', "some kind of thinclient mode detected"); - - open (F,">>/var/log/usb"); - - my $dev=$ENV{'DEVNAME'}; - my $model=$ENV{'ID_MODEL'}; - my $vendor=$ENV{'ID_VENDOR'}; - my $action=$ENV{'ACTION'}; - my @ldev=split("/","$dev"); - my $ldev=@ldev[@ldev-1]; - # mntdir is not the directory where the mountpoint will be rooted, - # but where tracking of mount states takes place - my $mntdir; - if ( -d expand_filename("~$user/mounts") ) { - $mntdir=expand_filename("~$user/mounts"); - } - elsif ( -d "/var/run" ) { - $mntdir="/var/run"; - } - elsif ( -d "/run" ) { - $mntdir="/run"; - } - else { - die "No directory found that we could use as \$mntdir..." - } - - my $name="${vendor}_${model}"; - $name=~s/ //g; - $name=~s/\\//g; - $name=~s/\///g; - print F "action: $action, device: $dev, model: $model ($ldev), total: $name\n"; - mkdir("/media"); - mkdir("/media/$name"); - print F "$name\n"; - - if (`lsblk -ln -oRM $dev`=~/0$/) { - syslog('notice', "device is non-removable device, skipping"); - exit 0; - } - - if ( $action eq "add" ) { - - ### - ### ACTION: mount device after it has been added to USB subsystem - ### - - syslog('notice', "device add action called"); - - # prepare mount points - mkdir("/media"); - mkdir("/media/$name"); - mkdir("/media/$name/$ldev"); - - # mount the USB device - # sync is supported by all file systems - # uid is supported by vfat (via fat),ntfs,hfs,hpfs - # uni_xlate is supported by vfat,ntfs - # we must not trigger on iso9660 and udf, or else hybrid USB media - # would only cause a mount of the iso9660 raw device, - # blocking the mount of individual partitions - # real optical media ->x2gocdmanager/x2gothinclient-cdmanager package - - if ( system("mount -tntfs $dev /media/$name/$ldev -o uid=$user,sync,uni_xlate")==0 ) { - syslog('notice', "USB device $name ($ldev) successfully mounted (ntfs detected)"); - # if mounted, inform x2goclient about it... - system("touch $mntdir/$ldev.mounted"); - open (D,">",expand_filename("~$user/export/$name.$ldev")); - print D "export=/media/$name/$ldev\n"; - close (D); - } - elsif ( system("mount -tvfat $dev /media/$name/$ldev -o uid=$user,sync,uni_xlate")==0 ) { - syslog('notice', "USB device $name ($ldev) successfully mounted (vfat detected)"); - # if mounted, inform x2goclient about it... - system("touch $mntdir/$ldev.mounted"); - open (D,">",expand_filename("~$user/export/$name.$ldev")); - print D "export=/media/$name/$ldev\n"; - close (D); - } - elsif ( system("mount -t hfs $dev /media/$name/$ldev -o uid=$user,sync")==0 ) { - syslog('notice', "USB device $name ($ldev) successfully mounted (hfs detected)"); - # if mounted, inform x2goclient about it... - system("touch $mntdir/$ldev.mounted"); - open (D,">",expand_filename("~$user/export/$name.$ldev")); - print D "export=/media/$name/$ldev\n"; - close (D); - } - elsif ( system("mount -t hpfs $dev /media/$name/$ldev -o uid=$user,sync")==0 ) { - syslog('notice', "USB device $name ($ldev) successfully mounted (hpfs detected)"); - # if mounted, inform x2goclient about it... - system("touch $mntdir/$ldev.mounted"); - open (D,">",expand_filename("~$user/export/$name.$ldev")); - print D "export=/media/$name/$ldev\n"; - close (D); - } - elsif ( system("fuseext2 $dev /media/$name/$ldev -o ro,allow_other")==0 ) { - syslog('notice', "USB device $name ($ldev) successfully mounted readonly (ext*fs detected)"); - # if mounted, inform x2goclient about it... - system("touch $mntdir/$ldev.mounted"); - open (D,">",expand_filename("~$user/export/$name.$ldev")); - print D "export=/media/$name/$ldev\n"; - close (D); - } - else { - # the mount failed, let's assume that the device is encrypted... - my $enc=`ls -1 $mntdir | grep .encrypted`; - if ( $enc eq "" ) { - # use cryptsetup to decrypt the device... - system("/sbin/cryptsetup --key-file /etc/keys/keystick.key luksOpen $dev keystick"); - - # mount the ,,decrypted'' USB device via devmapper... - if ( system("mount /dev/mapper/keystick /media/$name/$ldev")==0 ) { - # inform x2goclient about this... - system("touch $mntdir/$ldev.encrypted"); - system("chown -R $user /media/$name/$ldev/dsa.key"); - open (D,">",expand_filename("~$user/logins/$name.$ldev")); - print D "login=/media/$name/$ldev\n"; - close (D); - print F "encrypted mount successful ($ldev)\n"; - } - else { - # on mount failures release the decrypted device again - system("/sbin/cryptsetup luksClose keystick"); - print F "mount failed ($ldev)\n"; - } - } - else { - print F "cryptodisk already present\n"; - } - } - if ( -e "/media/$name/$ldev" ) { - print F "detected mountpoint '/media/$name/$ldev'\n"; - print F "running '/sbin/blkid -o value -s LABEL $dev'\n"; - my $label=`/sbin/blkid -o value -s LABEL $dev`; - chomp($label); - if ($label) { - print F "symlinking '/media/$name/$ldev' and '/media/$name/$label'\n"; - unlink "/media/$name/$label" if ( -l "/media/$name/$label" ); - symlink("/media/$name/$ldev","/media/$name/$label"); - open (D,">>",expand_filename("~$user/export/$name.$ldev")); - print D "export=/media/$name/$label\n"; - close (D); - } - } - - } - elsif ( $action eq "remove" ) { - - ### - ### ACTION: unmount device after it has been removed from the USB subsystem - ### - - syslog('notice', "device remove action called"); - - # we rely on our own mount logistics here... - if ( -e "$mntdir/$ldev.mounted" ) { - # inform x2goclient that the device has been removed - system ("umount -ff /media/$name/$ldev"); - unlink ("$mntdir/$ldev.mounted"); - open ( D,">",expand_filename("~$user/export/$name.$ldev.unexport")); - open (I,"<",expand_filename("~$user/export/$name.$ldev")); - while (<I>) { - $_=~s/^export=/unexport=/i; - print D $_; - } - close (I); - close (D); - syslog('notice', "USB device $name ($ldev) successfully unmounted"); - } - elsif ( -e "$mntdir/$ldev.encrypted" ) { - # inform x2goclient that the device has been removed - # release the encrypted device mapping - unlink ("$mntdir/$ldev.encrypted"); - open ( D,">",expand_filename("~$user/logins/$name.$ldev.unexport")); - print D "logout=/media/$name/$ldev\n"; - system("umount /media/$name/$ldev"); - system("/sbin/cryptsetup luksClose keystick"); - close (D); - } - } - - close (F); - } else { - - syslog('notice', "not in any thinclient mode, exiting"); - } - USBMOUNTPATCH + wget -O ./patch/includes.chroot/usr/lib/x2go/tce/x2gousbmount 'https://code.x2go.org/gitweb?p=x2gothinclient.git;a=blob_plain;f=usbmount/x…' chmod 755 ./patch/includes.chroot/usr/lib/x2go/tce/x2gousbmount </code> ==== Starting the Build ==== -- This mail was generated by DokuWiki at https://wiki.x2go.org/

1 0

[[X2Go Wiki]] page changed: doc:howto:tce
by wiki-admin＠x2go.org 17 Jan '19

17 Jan '19

A page in your DokuWiki was added or changed. Here are the details: Date : 2019/01/17 18:26 Browser : Mozilla/5.0 (X11; Linux x86_64; rv:52.9) Gecko/20100101 Goanna/3.4 Firefox/52.9 PaleMoon/27.9.4 IP-Address : 149.172.203.221 Hostname : HSI-KBW-149-172-203-221.hsi13.kabel-badenwuerttemberg.de Old Revision: https://wiki.x2go.org/doku.php/doc:howto:tce?rev=1547749446 New Revision: https://wiki.x2go.org/doku.php/doc:howto:tce Edit Summary: [List of open ToDos/FIXMEs for this page] User : stefanbaur @@ -1184,9 +1184,9 @@ FIXME A smaller image size can be achieved by removing the following packages from the squashfs: ''libxapian30 libpcsclite1 libdbus-glib-1-2 libfuse2 libpipeline1 libusb-1.0-0 libxv1 xnest xserver-xephyr rdesktop freerdp-x11 traceroute screen net-tools less ntfs-3g fuse locales cifs-utils xterm libgssglue1 libntfs-3g871 libtalloc2 libtcl8.6 libtk8.6 libutempter0 libvncclient1 libvncserver1 libwbclient0 libxcb-xf86dri0 libxcb-xv0 samba-common tcl tcl8.6 tk tk8.6 xbitmaps nfs-common rpcbind atmel-firmware bluez-firmware dahdi-firmware-nonfree hdmi2usb-fx2-firmware iso-codes ixo-usb-jtag libc-l10n libnfsidmap2 libtirpc1 firmware* x11vnc* libfreerdp* libwinpr* libapparmor1 systemd apt-utils libapt-inst2.0'' - check if this could be turned into a build parameter. Note that this makes only sense for a netboot image that uses X2Go sessions only, and no NTFS media (neither fixed disk nor USB). Further reduction needs to be investigated: ''acpi-support-base* acpid* acpi-support* pm-utils* powermgmt-base* gnupg gnupg-agent whiptail vim* vim-common* vim-tiny* xxd* xinetd libcroco3* libcurl3* libexif12* libgdk-pixbuf2.0-0* libgdk-pixbuf2.0-common* libgif7* libid3tag0* libimlib2* libnghttp2-14* libobrender32v5* libobt2v5* libpango-1.0-0* libpangocairo-1.0-0* libpangoft2-1.0-0* libpangoxft-1.0-0* librsvg2-2* librtmp1* libssh2-1* libstartup-notification0* libxft2* libxss1* vim-runtime* xprintidle feh xdotool openbox rsync xserver-xorg-input-wacom* xserver-xorg-video-all* xserver-xorg-video-amdgpu* xserver-xorg-video-ati* xserver-xorg-video-nouveau* xserver-xorg-video-qxl* xserver-xorg-video-radeon* xserver-xorg-video-vmware* libdrm-amdgpu1* libdrm-nouveau2* libdrm-radeon1* libllvm3.9* libsensors4* libxatracker2*'' causes an X startup failure during boot (things seem to work when X is started manually afterwards, which makes this especially bizarre) - FIXME for MATE-MiniDesktop, it might make sense to teach the image how to do LDAP auth (preferably with LDAPS or LDAP+TLS) and use lightdm without the auto-login. That way, a local screensaver //with// locking functionality (prompting for the actual user's LDAP password) should be possible - and LDAP credential passthrough to X2GoClient should work, too. + FIXME for MATE-MiniDesktop, it might make sense to teach the image how to do LDAP auth (preferably with LDAPS or LDAP+TLS) and use lightdm without the auto-login. That way, a local screensaver //with// locking functionality (prompting for the actual user's LDAP password) should be possible - and LDAP credential passthrough to X2GoClient should work, too (though that might require kerberos in addition to LDAP,we'll see). ===== List of closed ToDos/FIXMEs for this page ===== * ''audioout='', ''blank='', ''*blankdpmsfix'', ''nodpms'', ''xinerama='', are currently unsupported in MiniDesktop-Mode, but this is being worked on, by outsourcing them into scripts under ''/etc/X11/Xsession.d/'' (currently, they reside in ''/lib/live/config/2900-x2go-thinclientconfig'' - which doesn't exist in the MiniDesktop branches - and from there, they get written to ''~/.xsession'' - fixed in github repo, soon in x2go repo * It would be nice to have a boot parameter ''xroot=[0xaabbcc|URI1[|URI2|...]]'' for the desktop background image/color, and a boot parameter ''xrootmode=center|fill|scale|tile'' to determine how the image(s) should be positioned (if the parameter has been set, but something is wrong, it should default to the "grey mesh" background) - fixed in github repo, soon in x2go repo * It would also be nice to have boot parameters ''xsaverimages=[URI1[|URI2|...]]'', ''xsaveridletime=n'', ''xsaverimgtime=n'', for a local, non-locking slideshow screensaver (if no images are specified/downloaded by the time it activates, it should just blank the screen). That way, one could display a slideshow without having to push the images across the network every time - fixed in github repo, soon in x2go repo -- This mail was generated by DokuWiki at https://wiki.x2go.org/

1 0

[[X2Go Wiki]] page changed: doc:howto:tce
by wiki-admin＠x2go.org 17 Jan '19

17 Jan '19

A page in your DokuWiki was added or changed. Here are the details: Date : 2019/01/17 18:24 Browser : Mozilla/5.0 (X11; Linux x86_64; rv:52.9) Gecko/20100101 Goanna/3.4 Firefox/52.9 PaleMoon/27.9.4 IP-Address : 149.172.203.221 Hostname : HSI-KBW-149-172-203-221.hsi13.kabel-badenwuerttemberg.de Old Revision: https://wiki.x2go.org/doku.php/doc:howto:tce?rev=1547749413 New Revision: https://wiki.x2go.org/doku.php/doc:howto:tce Edit Summary: [What options are available under FURTHER-OPTIONS-GO-HERE?] User : stefanbaur @@ -901,9 +901,9 @@ * ''tcpprint'' - Will allow you to use local LPT/USB printers like "dumb" network printers (listening to port 9100 and above). Requires MAC->IP mapping in DHCP server (and optionally, DNS->IP mapping), or static IPs - else your print jobs will end up on random devices. This setup is preferred over the X2GoClient's built-in printing for locally attached printers if X2GoServer and ThinClients are on the same network. It is not recommended when your X2Go connection goes across the internet or when the ThinClient is actually a laptop roaming between different networks. **Attention: When used without ''tcpprintonlyfrom'' (see below), this means anyone that can reach your thin client via e.g. ping can also send print jobs to it!** * ''tcpprintonlyfrom=x.x.x.x'' - Will allow you to specify which IP address may connect to Port 9100 and above for printing to a locally attached LPT/USB printer. This should be the IP of your CUPS server or whatever print server system you use. Understands the same syntax as ''xinetd'''s ''only_from''. * ''throttle=n|n:n:n:n:n'' - Will throttle down- and upload speed (''throttle=n'') or set throttling limits as follows: download:upload:smoothingtime:smoothinglength:latency. Defaults for up- and download are 10 (KiloBytes/s), 3.0 (seconds, using decimals is permitted) smoothingtime, 20 (KiloBytes), 0 (ms). for a detailed description of these parameters, see "man trickle". You can use the first 1, 2, 3, 4 or all 5 parameters. To set down- and/or upload speed to unlimited, use the letter "u" instead of a numeric value. * ''x3270servers="host[:port][|host[:port]...]"'' - this is only available in MiniDesktop mode. It allows you to specify one or more hosts (with optional ports) for x3270 terminal emulation sessions that will be created as desktop shortcuts on the thinclient. For a default 3270 connection, the port is 23 (telnet) and does not need to be specified. For an SSL-encrypted connection (recommended), the port is 992. Hosts may be IP addresses or DNS names, and need to be separated with a ''|''. (feature available via github repo, soon via x2go repo too) - ''x5250servers="host[:port][|host[:port]...]"'' - this is only available in MiniDesktop mode. It allows you to specify one or more hosts (with optional ports) for x5250 terminal emulation sessions that will be created as desktop shortcuts on the thinclient. For a default 5250 connection, the port is 23 (telnet) and does not need to be specified. For an SSL-encrypted connection (recommended), the port is 992. Hosts may be IP addresses or DNS names, and need to be separated with a ''|''. Note that x5250 support is currently not part of the standard image available via git, as there is no x5250 executable in Debian. You can try using x3270 instead, most modern IBM i (System i, iSeries, AS/400) systems support 3270-type connections as well. If you need native 5250 support, say, with a commercial, closed-source 5250 terminal emulator, please leave a message on the X2Go-User Mailing List and we'll tell you if and how you can integrate that into your build. (feature available via github repo, soon via x2go repo too) + * ''x5250servers="host[:port][|host[:port]...]"'' - this is only available in MiniDesktop mode. It allows you to specify one or more hosts (with optional ports) for x5250 terminal emulation sessions that will be created as desktop shortcuts on the thinclient. For a default 5250 connection, the port is 23 (telnet) and does not need to be specified. For an SSL-encrypted connection (recommended), the port is 992. Hosts may be IP addresses or DNS names, and need to be separated with a ''|''. Note that x5250 support is currently not part of the standard image available via git, as there is no x5250 executable in Debian. You can try using x3270 instead, most modern IBM i (System i, iSeries, AS/400) systems support 3270-type connections as well. If you need native 5250 support, say, with a commercial, closed-source 5250 terminal emulator, please leave a message on the X2Go-User Mailing List and we'll tell you if and how you can integrate that into your build. (feature available via github repo, soon via x2go repo too) * ''xinerama=left-of|right-of|above|below|same-as'' - Allows you to specify how multiple screens are handled (same-as clones the primary screen to all secondary screens, the other commands will cascade and thus expand the screen). Note that the current implementation will enforce "same-as" if it detects a touch screen driver (wacom) and no other pointing device. This is so you won't get stuck being unable to log off, for example, due to your touch device being limited to one screen. * ''xorg-resolution=HRESxVRES'' - will force the horizontal resolution to HRES and the vertical resolution to VRES, e.g. ''xorg-resolution=1280x1024'', useful if autodetection for the correct screen size fails, but you do get as far as seeing the X2Go GUI * ''xorgconfurl=tftp|http|https|ftp://your-http-server-ip-or-dns-here/x2go-tce/x2go-tce.xorg.conf'' - when a client outright refuses to boot into the graphical X2Go login screen, but gets stuck at the console or a black screen instead, yet you can get the GUI to work using a regular Linux on the same hardware, you can disable the X Server's autodetection and force it to use the xorg.conf specified here. Note that you should use a more descriptive name for the file, as described below. **Attention: Whoever manages to spoof the server name can inject rogue xorg config files into your ThinClients.** To mitigate this risk, use HTTPS, where the attacker would have to spoof both server name and matching certificate. * ''xroot=[0xaabbcc|URI1[|URI2|...]]'' - can be used to set a local desktop background image or color (in hex format, with leading 0x, not leading #). On the main screen, this is only visible during startup, while additional screens will display whatever is set for them when there is no active session. The background also becomes visible for a short moment when the optional local screensaver activates or deactivates. Specifying more than one image will cause the first image to show up on the first screen, the second image on the second screen, and so on (feature available via github repo, soon via x2go repo too). -- This mail was generated by DokuWiki at https://wiki.x2go.org/

1 0

[[X2Go Wiki]] page changed: doc:howto:tce
by wiki-admin＠x2go.org 17 Jan '19

17 Jan '19

A page in your DokuWiki was added or changed. Here are the details: Date : 2019/01/17 18:23 Browser : Mozilla/5.0 (X11; Linux x86_64; rv:52.9) Gecko/20100101 Goanna/3.4 Firefox/52.9 PaleMoon/27.9.4 IP-Address : 149.172.203.221 Hostname : HSI-KBW-149-172-203-221.hsi13.kabel-badenwuerttemberg.de Old Revision: https://wiki.x2go.org/doku.php/doc:howto:tce?rev=1547747737 New Revision: https://wiki.x2go.org/doku.php/doc:howto:tce Edit Summary: [What options are available under FURTHER-OPTIONS-GO-HERE?] added lots of new options that are now available via the latest buildscripts on github User : stefanbaur @@ -885,10 +885,11 @@ * ''blank=n|n:n:n'' - Will disable (''blank=0'') or set screensaver timeout. Use ''blank=n:n:n'' to set DPMS Standby/Suspend/Off values. Standby value equals screensaver timeout value. All values are given in seconds. * ''blankdpmsfix'' - This forces the TFT do black for a few seconds during the X startup phase, then forces it back on again. This fixes an occasional "black screen" issue that occurs with some flaky client/TFT hardware combinations when using DisplayPort connectors, and could otherwise only be remediated by manually turning the TFT off and back on again. (feature available via github repo, soon via x2go repo too) * ''branding=https|http|ftp://your-http-server-ip-or-dns-here/x2go-tce/x2go-tce-branding.svg'' - use this to specify an SVG file to "brand" your X2Go-TCE with. It will replace the seal icon in the lower left of the login screen. See below for how to add this file to your HTTP, HTTPS, or FTP server. **Attention: Whoever manages to spoof the server name can inject rogue images into your ThinClients.** To mitigate this risk, use HTTPS, where the attacker would have to spoof both server name and matching certificate. * ''copysecring'' - this will scan for USB media and fixed disk media (with USB media taking precedence) at boot for one or more of the following directories: ''config/ssh'', 'ssh', ''.ssh''. The volume must be labeled ''X2GO-TCE-LIVE'' or ''PORTABLEAPP'' and may use any supported file system. Any SSH Secret Keys found there will be copied into ''/home/user/.ssh'' (in the ramdisk), with proper permissions and ownerships for the default user account. This may come in handy when you are using SSH Secret Keys on USB media, but need to log in and out of sessions often, and don't want to leave the USB media plugged in all the time/don't want to have to re-insert it before each session startup. **Attention: This poses a security risk when other people are using your ThinClient afterwards (as they will have access to your keys).** To mitigate this risk,be sure to power-cycle the ThinClient once you are done. You //should// specify this parameter when booting X2Go-TCE-Live from portable media when you want to use SSH Secret Keys, to make sure your secret key on the FAT/NTFS partition is available. But as stated above, be sure to power-cycle the machine once you're done. - * ''earlyblankdpmsfix'' - This forces the TFT do black for a few seconds during the initial boot phase (right after the squashfs was downloaded), then forces it back on again. This fixes an occasional "black screen" issue that occurs with some flaky client/TFT hardware combinations when using DisplayPort connectors, and could otherwise only be remediated by manually turning the TFT off and back on again. (feature available via github repo, soon via x2go repo too) + * ''earlyblankdpmsfix'' - This forces the TFT do black for a few seconds during the initial boot phase (right after the squashfs was downloaded), then forces it back on again. This fixes an occasional "black screen" issue that occurs with some flaky client/TFT hardware combinations when using DisplayPort connectors, and could otherwise only be remediated by manually turning the TFT off and back on again. Earlyblankdpmsfix can also be called as ''earlyblankdpmsfix=nnnn'', where ''nnnn'' is the blanking time in milliseconds (so, ''earlyblankdpmsfix=1500'' equals 1.5 seconds). (feature available via github repo, soon via x2go repo too) * ''homepageurl="URL1[|URL2|URLn]"'' - this is only available in MiniDesktop mode. It allows you to specify one or more web pages that show up on Browser start/when clicking the "Home" icon. URLs need to be separated with a ''|'', and the set of URLs needs to be enclosed in double quotes. Do //not// enclose each URL in double quotes separately! Correct example: ''homepageurl="https://www.google.de|https://wiki.x2go.org"'' + * ''initrdblankdpmsfix'' is the same as ''earlyblankdpmsfix'', only that it activates in the initial ramdisk already. Like ''earlyblankdpmsfix'', it can also be called as ''initrdblankdpmsfix=nnnn''. This parameter is useful if you are affected by the //black screen at boot// issue, and you are not combining squashfs and initrd into one file when netbooting. (feature available via github repo, soon via x2go repo too) * ''ldap=ldap.example.com:389:cn=cngoeshere,dc=example,dc=com'' - this allows you to specify an LDAP server to connect to - note that this is not needed for LDAP-based authentication, only when you intend to store entire session profiles in LDAP. You should really consider using the X2Go Session Broker instead. * ''ldap1=ldap-backupserver-1.example.com:389'' - this allows you to specify the first of up to two LDAP backup servers when using LDAP authentication * ''ldap2=ldap-backupserver-2.example.com:389'' - this allows you to specify the second of up to two LDAP backup servers when using LDAP authentication * ''nodpms'' - Will not touch DPMS settings at all (by default, ''blank=0'' does both ''xset s off'' and ''xset -dpms''). Use this along with ''blank=n'' if you do want to blank the screen, but your screen is confused by DPMS settings. @@ -899,12 +900,18 @@ * ''tcedebug'' - this switches X2GoClient into debug mode and will also lead to increased logging to /var/log/x2goclient and to tty9 * ''tcpprint'' - Will allow you to use local LPT/USB printers like "dumb" network printers (listening to port 9100 and above). Requires MAC->IP mapping in DHCP server (and optionally, DNS->IP mapping), or static IPs - else your print jobs will end up on random devices. This setup is preferred over the X2GoClient's built-in printing for locally attached printers if X2GoServer and ThinClients are on the same network. It is not recommended when your X2Go connection goes across the internet or when the ThinClient is actually a laptop roaming between different networks. **Attention: When used without ''tcpprintonlyfrom'' (see below), this means anyone that can reach your thin client via e.g. ping can also send print jobs to it!** * ''tcpprintonlyfrom=x.x.x.x'' - Will allow you to specify which IP address may connect to Port 9100 and above for printing to a locally attached LPT/USB printer. This should be the IP of your CUPS server or whatever print server system you use. Understands the same syntax as ''xinetd'''s ''only_from''. * ''throttle=n|n:n:n:n:n'' - Will throttle down- and upload speed (''throttle=n'') or set throttling limits as follows: download:upload:smoothingtime:smoothinglength:latency. Defaults for up- and download are 10 (KiloBytes/s), 3.0 (seconds, using decimals is permitted) smoothingtime, 20 (KiloBytes), 0 (ms). for a detailed description of these parameters, see "man trickle". You can use the first 1, 2, 3, 4 or all 5 parameters. To set down- and/or upload speed to unlimited, use the letter "u" instead of a numeric value. + * ''x3270servers="host[:port][|host[:port]...]"'' - this is only available in MiniDesktop mode. It allows you to specify one or more hosts (with optional ports) for x3270 terminal emulation sessions that will be created as desktop shortcuts on the thinclient. For a default 3270 connection, the port is 23 (telnet) and does not need to be specified. For an SSL-encrypted connection (recommended), the port is 992. Hosts may be IP addresses or DNS names, and need to be separated with a ''|''. (feature available via github repo, soon via x2go repo too) + ''x5250servers="host[:port][|host[:port]...]"'' - this is only available in MiniDesktop mode. It allows you to specify one or more hosts (with optional ports) for x5250 terminal emulation sessions that will be created as desktop shortcuts on the thinclient. For a default 5250 connection, the port is 23 (telnet) and does not need to be specified. For an SSL-encrypted connection (recommended), the port is 992. Hosts may be IP addresses or DNS names, and need to be separated with a ''|''. Note that x5250 support is currently not part of the standard image available via git, as there is no x5250 executable in Debian. You can try using x3270 instead, most modern IBM i (System i, iSeries, AS/400) systems support 3270-type connections as well. If you need native 5250 support, say, with a commercial, closed-source 5250 terminal emulator, please leave a message on the X2Go-User Mailing List and we'll tell you if and how you can integrate that into your build. (feature available via github repo, soon via x2go repo too) * ''xinerama=left-of|right-of|above|below|same-as'' - Allows you to specify how multiple screens are handled (same-as clones the primary screen to all secondary screens, the other commands will cascade and thus expand the screen). Note that the current implementation will enforce "same-as" if it detects a touch screen driver (wacom) and no other pointing device. This is so you won't get stuck being unable to log off, for example, due to your touch device being limited to one screen. * ''xorg-resolution=HRESxVRES'' - will force the horizontal resolution to HRES and the vertical resolution to VRES, e.g. ''xorg-resolution=1280x1024'', useful if autodetection for the correct screen size fails, but you do get as far as seeing the X2Go GUI * ''xorgconfurl=tftp|http|https|ftp://your-http-server-ip-or-dns-here/x2go-tce/x2go-tce.xorg.conf'' - when a client outright refuses to boot into the graphical X2Go login screen, but gets stuck at the console or a black screen instead, yet you can get the GUI to work using a regular Linux on the same hardware, you can disable the X Server's autodetection and force it to use the xorg.conf specified here. Note that you should use a more descriptive name for the file, as described below. **Attention: Whoever manages to spoof the server name can inject rogue xorg config files into your ThinClients.** To mitigate this risk, use HTTPS, where the attacker would have to spoof both server name and matching certificate. - + * ''xroot=[0xaabbcc|URI1[|URI2|...]]'' - can be used to set a local desktop background image or color (in hex format, with leading 0x, not leading #). On the main screen, this is only visible during startup, while additional screens will display whatever is set for them when there is no active session. The background also becomes visible for a short moment when the optional local screensaver activates or deactivates. Specifying more than one image will cause the first image to show up on the first screen, the second image on the second screen, and so on (feature available via github repo, soon via x2go repo too). + * ''xrootmode=center|fill|scale|tile'' can be used to determine how the local desktop background image(s) should be positioned. If the parameter has been set, but something is wrong, it will default to a //grey mesh// background. (feature available via github repo, soon via x2go repo too). (feature available via github repo, soon via x2go repo too) + * ''xsaveridletime=n'' - this value determines how long the screen should have been idle before the local slideshow screensaver sets in (value given in seconds). We recommend using 60 seconds less than for the server-sided, locking screensaver. (feature available via github repo, soon via x2go repo too) + * ''xsaverimages=[URI1[|URI2|...]]'' - if you want a local, non-locking slideshow screensaver, you can specify image URLs here. These Images will be downloaded once, at boot. That way, one can display a slideshow without having to push the images across the network every time. Especially for slow links, this is the recommended way of running a slideshow screensaver. For security, combine this with a locking screensaver on the server with only one slide or a black background. (feature available via github repo, soon via x2go repo too) + * ''xsaverimgtime=n'' - this determines how long each slide of the local, non-locking screensaver will be shown. (feature available via github repo, soon via x2go repo too) === These are only intended to be used with TCE images stored on local media === * ''bwlimit=nnn'' - Will allow you to specify a bandwidth limit (valid values: 1-100) in percent for the backgrounded update task. * ''ntfs-uuid='' - Will be required for updating images stored on NTFS filesystems. Full UUID as shown under /dev/disk/by-uuid/ is preferred, but can work with the volume serial number shown in the output of "vol c:" as well. * ''updatesleep=nnnnn'' - Will allow you to specify the upper limit (in seconds) of the update timer's randomizer. Allowed range for upper limit: 240-32767. Will default to 900 if unset or set to an out-of-range value. Lower limit is fixed at 120 seconds. -- This mail was generated by DokuWiki at https://wiki.x2go.org/

1 0

[[X2Go Wiki]] page changed: doc:howto:tce
by wiki-admin＠x2go.org 17 Jan '19

17 Jan '19

A page in your DokuWiki was added or changed. Here are the details: Date : 2019/01/17 17:55 Browser : Mozilla/5.0 (X11; Linux x86_64; rv:52.9) Gecko/20100101 Goanna/3.4 Firefox/52.9 PaleMoon/27.9.4 IP-Address : 149.172.203.221 Hostname : HSI-KBW-149-172-203-221.hsi13.kabel-badenwuerttemberg.de Old Revision: https://wiki.x2go.org/doku.php/doc:howto:tce?rev=1547555492 New Revision: https://wiki.x2go.org/doku.php/doc:howto:tce Edit Summary: Added a new troubleshooting section for audio issues User : stefanbaur @@ -965,8 +965,18 @@ * When using netbooting, do the following on your PXE/TFTP Server * create a separate configuration file "name-of-your-stubborn-hardware" for this hardware, based on the default file, * create a symlink matching "01-", followed by the first three out of the six bytes of your hardware address, each separated by "-" (say, 01-AA-BB-CC when the full MAC was shown as AA:BB:CC:DD:EE:FF), that points to the file "name-of-your-stubborn-hardware". * In your boot configuration file (either "name-of-your-stubborn-hardware", when using netbooting, or menu.lst, when using local or USB storage media and grub-legacy, or X2Go-live1.cfg/X2Go-live2.cfg, when using local or USB storage media and syslinux), add the boot parameter ''xorgconfurl=tftp|http|https|ftp://your-http-server-ip-here/x2go-tce/x2go-tce.xorg.conf.name-of-your-stubborn-hardware'' + + ==== The session itself works fine, but Audio is not working ==== + + First, check that the audio isn't simply muted (some cards/setups do this by default). Run ''pavucontrol'' inside the X2Go session. Check the settings on the tabs //Output Devices// and //Configuration//. If that is the case, you probably need to create a script on the server that raises the volume/toggles the mute setting upon user login. + + If that doesn't help, please boot with additional boot parameter ''audioout=list'' and look at the output on /dev/tty8 (Hit Ctrl+Alt+F8) - it will give you a list of available audio output devices. This list also gets written to ''/tmp/audiolog'' on the ThinClient. + + You might have to pick a different one from the list, by using boot parameter ''audioout='' with a particular card/output value, like: ''audioout=“alsa_card.pci-0000_00_1b.0|output:hdmi-stereo”'' (you need to copy the proper value from the list generated on your particular thinclient). + + If you need different settings for different manufacturers, you can try to tell them apart by MAC address and set separate pxe boot configuration files for them. ===== Support Tools available in X2Go-TCE ===== ==== Remote Access to the ThinClient's local display (before any connection is made) ==== -- This mail was generated by DokuWiki at https://wiki.x2go.org/

1 0

[x2gothinclient] branch master updated (966d6c5 -> c6106bd)
by git-admin＠x2go.org 17 Jan '19

17 Jan '19

This is an automated email from the git hooks/post-receive script. x2go pushed a change to branch master in repository x2gothinclient. from 966d6c5 management/etc/x2gothinclient_settings: add "extras" component. new 3415faf usbmount/x2gousbmount: pull (most) changes from doc:howto:tce wiki page. new c6106bd usbmount/x2gousbmount: whitespace- and comment-only changes. The 2 revisions listed above as "new" are entirely new to this repository and will be described in separate emails. The revisions listed as "adds" were already present in the repository and have only been added to this reference. Summary of changes: debian/changelog | 7 +++ usbmount/x2gousbmount | 137 +++++++++++++++++++++++++++++++++----------------- 2 files changed, 98 insertions(+), 46 deletions(-) -- Alioth's /home/x2go-admin/maintenancescripts/git/hooks/post-receive-email on /srv/git/code.x2go.org/x2gothinclient.git

1 2

[[X2Go Wiki]] page changed: doc:howto:tce
by wiki-admin＠x2go.org 15 Jan '19

15 Jan '19

A page in your DokuWiki was added or changed. Here are the details: Date : 2019/01/15 12:31 Browser : Mozilla/5.0 (X11; Linux x86_64; rv:52.9) Gecko/20100101 Goanna/3.4 Firefox/52.9 PaleMoon/27.9.4 IP-Address : 149.172.203.221 Hostname : HSI-KBW-149-172-203-221.hsi13.kabel-badenwuerttemberg.de Old Revision: https://wiki.x2go.org/doku.php/doc:howto:tce?rev=1547555457 New Revision: https://wiki.x2go.org/doku.php/doc:howto:tce Edit Summary: [Starting the Build] added /bin/bash shebang line User : stefanbaur @@ -433,9 +433,11 @@ chmod 755 ./patch/includes.chroot/usr/lib/x2go/tce/x2gousbmount </code> ==== Starting the Build ==== - Change to a directory where you want to save your builds, and run the following commands:<code> + Change to a directory where you want to save your builds, and run the following commands: + <code> + #!/bin/bash # Create Timestamp LBX2GO_TIMESTAMP=$(date +"%Y%m%d%H%M%S") # Set Directory name -- This mail was generated by DokuWiki at https://wiki.x2go.org/

1 0

[[X2Go Wiki]] page changed: doc:howto:tce
by wiki-admin＠x2go.org 15 Jan '19

15 Jan '19

A page in your DokuWiki was added or changed. Here are the details: Date : 2019/01/15 12:30 Browser : Mozilla/5.0 (X11; Linux x86_64; rv:52.9) Gecko/20100101 Goanna/3.4 Firefox/52.9 PaleMoon/27.9.4 IP-Address : 149.172.203.221 Hostname : HSI-KBW-149-172-203-221.hsi13.kabel-badenwuerttemberg.de Old Revision: https://wiki.x2go.org/doku.php/doc:howto:tce?rev=1547555235 New Revision: https://wiki.x2go.org/doku.php/doc:howto:tce Edit Summary: [Live-Patching the Build] added /bin/bash shebang line User : stefanbaur @@ -143,8 +143,9 @@ ==== Live-Patching the Build ==== This patch is required if you need USB mount capability on the ThinClient while [[http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=1136|Bug #1136]] is still unresolved. <code> + #!/bin/bash mkdir -p ./patch/includes.chroot/usr/lib/x2go/tce/ cat >./patch/includes.chroot/usr/lib/x2go/tce/x2gousbmount <<'USBMOUNTPATCH' -- This mail was generated by DokuWiki at https://wiki.x2go.org/

1 0

[[X2Go Wiki]] page changed: doc:howto:tce
by wiki-admin＠x2go.org 15 Jan '19

15 Jan '19

A page in your DokuWiki was added or changed. Here are the details: Date : 2019/01/15 12:27 Browser : Mozilla/5.0 (X11; Linux x86_64; rv:52.9) Gecko/20100101 Goanna/3.4 Firefox/52.9 PaleMoon/27.9.4 IP-Address : 149.172.203.221 Hostname : HSI-KBW-149-172-203-221.hsi13.kabel-badenwuerttemberg.de Old Revision: https://wiki.x2go.org/doku.php/doc:howto:tce?rev=1547119158 New Revision: https://wiki.x2go.org/doku.php/doc:howto:tce Edit Summary: [Configuring the Build] added /bin/bash shebang line User : stefanbaur @@ -36,8 +36,9 @@ ===== Building your own X2Go-TCE Image ===== ==== Configuring the Build ==== <code> + #!/bin/bash # Select ONE of the following git reposities # this one loosely corresponds to "stable" export LBX2GO_CONFIG='git://code.x2go.org/live-build-x2go.git::feature/openbox-magic-pixel-workar…' # this one loosely corresponds to "heuler" -- This mail was generated by DokuWiki at https://wiki.x2go.org/

1 0

← Newer
1
2
3
4
5
6
7
8
...
12
Older →

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

x2go-commits January 2019