There have been multiple accounts created with the sole purpose of posting advertisement posts or replies containing unsolicited advertising.

Accounts which solely post advertisements, or persistently post them may be terminated.

Ubuntu server to run Remmina only

Hi,

My Linux knowledge is not great and I am configuring computers that should be used to connect to a remote server via Remmina only.

The goal is to enable the users to connect to the remote server and to restrict their interaction with the local OS.

I installed Ubuntu server and did the following configurations :

<pre style="background-color:#ffffff;">
<span style="color:#323232;">LVM partition, encrypted
</span><span style="color:#323232;">
</span><span style="color:#323232;">sudo apt-get install remmina
</span><span style="color:#323232;">
</span><span style="color:#323232;">sudo adduser *username*
</span><span style="color:#323232;">
</span><span style="color:#323232;">Autologin of *username*
</span><span style="color:#323232;">	sudo nano /etc/systemd/logind.conf
</span><span style="color:#323232;">		NAutoVTs=6
</span><span style="color:#323232;">		ReserveVT=7
</span><span style="color:#323232;">	sudo mkdir /etc/systemd/system/[email protected]/
</span><span style="color:#323232;">	sudo nano /etc/systemd/system/[email protected]/override.conf
</span><span style="color:#323232;">		[Service]
</span><span style="color:#323232;">		ExecStart=
</span><span style="color:#323232;">		ExecStart=-/sbin/agetty --noissue --autologin *username* %I $TERM
</span><span style="color:#323232;">		Type=idle
</span><span style="color:#323232;">
</span><span style="color:#323232;">Install xinit
</span><span style="color:#323232;">	sudo apt install xinit
</span><span style="color:#323232;">	sudo nano /etc/X11/xinit/xinitrc
</span><span style="color:#323232;">		setxkbmap -layout en
</span><span style="color:#323232;">		exec remmina
</span><span style="color:#323232;">		Comment ". /etc/X11/Xsession"
</span><span style="color:#323232;">
</span><span style="color:#323232;">Auto startx
</span><span style="color:#323232;">	nano .profile
</span><span style="color:#323232;">	Add
</span><span style="color:#323232;">		#StartX Autostart
</span><span style="color:#323232;">		if [[ -z "$DISPLAY" ]] && [[ $(tty) = /dev/tty1 ]]; then
</span><span style="color:#323232;">		. startx
</span><span style="color:#323232;">		logout
</span><span style="color:#323232;">		fi
</span><span style="color:#323232;">
</span><span style="color:#323232;">Hide cmdlines
</span><span style="color:#323232;">	sudo nano /etc/default/grub
</span><span style="color:#323232;">		Edit line
</span><span style="color:#323232;">			GRUB_CMDLINE_LINUX_DEFAULT="quiet splash"
</span><span style="color:#323232;">	sudo update-grub
</span><span style="color:#323232;">	sudo nano /etc/default/grub.d/50-curtin-settings.cfg
</span><span style="color:#323232;">		Add line
</span><span style="color:#323232;">			GRUB_CMDLINE_LINUX_DEFAULT="quiet splash"
</span><span style="color:#323232;">	sudo update-grub
</span>

It is working almost as it needs to but as I’m not experienced I’m wondering if my configuration is a good way of achieving my goal. Could I improve something ?

Ideally I want to restrict the users ability to change the configurations of Remmina but I didn’t find a good solution yet.

It is a bit slow to boot. Maybe some useless services are being started and I could disable them ? How could I know what services are not needed by Remmina and could be disabled ? Or would it be easier for me to use a minimal distribution like Arch ? Could I still apply my configuration steps or am I going to need to change everything ?

Thanks in advance for any insight.

InFerNo ,

You should look into distros that do this specifically, they are called kiosks. There might be a way to configure your distro of choice to be a kiosk, it is definitely a solved problem.

r0b0 ,

I would just set it up with normal KDE with autologin and have the home directory deleted and recreated at boot.

Should they mess up anything, just tell them to reboot

vampatori ,
@vampatori@feddit.uk avatar

Don’t roll your own if you can help it, just use a distribution dedicated for use as a thin client. I was co-incidentally just looking into this last week and came across ThinStation which looks really good. There are other distro’s too, search for “linux thin client”.

astraeus ,
@astraeus@programming.dev avatar

What’s the use case here?

Nunki OP ,

Employees who need to connect to a windows remote desktop.

astraeus ,
@astraeus@programming.dev avatar

You could set their users up with non-power user access on the Windows host and that should be enough to keep them from accessing OS features or things they shouldn’t.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • [email protected]
  • random
  • lifeLocal
  • goranko
  • All magazines