• [^] # Re: installation encore plus simple

    Posté par (site web personnel) . En réponse à la dépêche MeshCentral, alternative à TeamViewer et RustDesk. Évalué à 1. Dernière modification le 27 janvier 2026 à 22:03.

    Salutations,

    Il y a plus simple pour du remote multi-user multi-session avec de bonnes perfs :
    https://github.com/TurboVNC/turbovnc & https://turbovnc.org

    Un yeutage sur VirtualGL peut fournir une alternative aux usages type VDI en environnement ou il faut un peu d'accélération matériels.

    Ca marche sur de nombreux OS, transite par dessus SSH et supporte plein de modèles d'identification.

    Exemple de recette d'installation d'un système partagé Debian :

    # cd /etc/apt/sources.list.d/
# wget -q -O- https://packagecloud.io/dcommander/turbovnc/gpgkey | \
 gpg --dearmor >/etc/apt/trusted.gpg.d/TurboVNC.gpg
# wget https://raw.githubusercontent.com/TurboVNC/repo/main/TurboVNC.list
# apt update
# apt install turbovnc
# apt-cache madison turbovnc
# echo unattended-upgrades unattended-upgrades/enable_auto_updates boolean true | debconf-set-selections
# dpkg-reconfigure -f noninteractive unattended-upgrades
# systemctl cat apt-daily.timer
# realm discover MONAD.ORG
entpe.net
 type: kerberos
 realm-name: MONAD.ORG
 domain-name: entpe.net
 configured: no
 server-software: active-directory
 client-software: sssd
 required-package: sssd-tools
 required-package: sssd
 required-package: libnss-sss
 required-package: libpam-sss
 required-package: adcli
 required-package: samba-common-bin
# realm join MONAD.ORG --user maurin_admin_ad
# journalctl REALMD_OPERATION=`journalctl --grep realmd | grep Join | tail -1 | cut -d "'" -f 2` | grep enrolled
Mar 10 11:34:16 xvnc realmd[783364]: * Successfully enrolled machine in realm
# echo -en "\n# Create homedir at login\nsession optional\tpam_mkhomedir.so skel=/etc/skel umask=077" >>/etc/pam.d/common-session
# perl -ap -i.orig_`date +%Y%m%d%H%M`SylM -e 's/use_fully_qualified_names = True/#use_fully_qualified_names = True\nuse_fully_qualified_names = False\n/;' /etc/sssd/sssd.conf
# systemctl restart sssd
# perl -ap -i.orig_`date +%Y%m%d%H%M`SylM -e 's/SENDMAILTO="logcheck"/#SENDMAILTO="logcheck"\nSENDMAILTO="root"\n/;' /etc/logcheck/logcheck.conf
# cat <<EOF_Userlimit >/etc/ssh/sshd_config.d/Restricted_Group_Access.conf
Match Group "utilisateurs du domaine" Address 10.1.0.0/22
 PasswordAuthentication yes
 ChrootDirectory none
 X11Forwarding yes
 AllowTcpForwarding yes
 AllowAgentForwarding yes
 ForceCommand none
Match Address *
 PasswordAuthentication yes
 ChrootDirectory /home
 X11Forwarding no
 AllowTcpForwarding no
 AllowAgentForwarding no
 ForceCommand internal-sftp -d /%u
EOF_Userlimit
# cp -p /etc/turbovncserver.conf /etc/turbovncserver.conf.orig_`date +%Y%m%d%H%M`SylM
# cp -p /etc/turbovncserver-security.conf /etc/turbovncserver-security.conf.orig_`date +%Y%m%d%H%M`SylM
# echo -en '\n\n#MONSITE\n#\n$userDBus = 1\n$serverArgs = "-localhost"\n$securityTypes = "VNC, OTP, UnixLogin, Plain"\n\n' >/etc/turbovncserver.conf
# echo -en '\n\n#MONSITE\n#\nmax-desktop-size = 10000x5000\nmax-idle-timeout = 7776000\nno-remote-connections\npermitted-security-types = OTP, UnixLogin, Plain\n\n' >/etc/turbovncserver-security.conf

    Exemple de script client se reconnectant tout seul avec un agent SSH :

    alias xvnc='for ((;;)); do sleep 1 ; /opt/TurboVNC/bin/vncviewer -Jump sylvain.maurin@xvnc.monad.org sylvain.maurin@xvnc.monad.org ; done'