This is an automated email from the git hooks/post-receive script. x2go pushed a commit to branch mini in repository live-build-x2go. commit bd72a61c9ec32036c2aa790928a3c857546a15fb Author: Stefan Baur (BAUR-ITCS) <kontakt@baur-itcs.de> Date: Fri Aug 5 21:14:20 2016 +0200 added x11vnc startup, commented out, with a note how stupid it is --- .../lib/live/config/2800-x2go-thinclientconfig | 23 ++++++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/config/includes.chroot/lib/live/config/2800-x2go-thinclientconfig b/config/includes.chroot/lib/live/config/2800-x2go-thinclientconfig index 6efdc18..01950a9 100755 --- a/config/includes.chroot/lib/live/config/2800-x2go-thinclientconfig +++ b/config/includes.chroot/lib/live/config/2800-x2go-thinclientconfig @@ -38,6 +38,29 @@ LDAP2=\$(cat /proc/cmdline | \ sed 's/^ldap2=/ldap2#/' | \ awk -F'#' ' /^ldap2#/ { print \$2 }') +# Spawn x11vnc +# x11vnc -wait 50 -passwd PASSWORD -forever -loop -display :0 -o /var/log/x11vnc.log & +# +# This runs as user, so cannot write to /var/log - thus you should use this instead: +# x11vnc -wait 50 -passwd PASSWORD -forever -loop -display :0 & +# +# Spawning x11vnc here is a really, really dumb idea, as VNC has no way of using +# a public/private key pair, only passwords - and these must be stored in plain +# text somewhere, in a place that is actually world-readable. +# +# /!\ This is about as dumb as shouting your root password in a room full of strangers! /!\ +# +# A much, much better, safer and saner way to handle this is to enable the +# SSH daemon on the thinclient, supply it with an authorized_keys file containing +# a public key, and spawning x11vnc on demand after logging in - binding it to +# localhost only, and forwarding the port through your SSH connection. +# +# In short, run this on your local admin workstation: +# ssh -t -L 5900:localhost:5900 name_or_ip_of_thinclient 'x11vnc -localhost -display :0' +# and while this connection is active, run: +# vncviewer localhost:0 + + # Spawn X2GoClient if [ -n "\$BROKERURL" ]; then SESSIONFROM="--broker-url=\$BROKERURL" -- Alioth's /home/x2go-admin/maintenancescripts/git/hooks/post-receive-email on /srv/git/code.x2go.org/live-build-x2go.git