centos8.3安装vncserver服务提供访问

admin

Installing VNC Server
安装vncserver
TigerVNC is an actively maintained high-performance open-source VNC server. It is available in the default CentOS repositories. To install it, type:
1 S- {9 G' c; ~
& D& B: E( W5 [9 }0 _) t#dnf install tigervnc-server   -y

配置vncServer
: T7 i) x3 L$ w) ]1 C1 ^* z, gConfiguring VNC Server
In CentOS 8, TigerVNC is configured using the systemd daemon.

/ {( T' o# d- Z8 H. w& ~
# p. o& Q" W8 V. {2 O6 QIn this example, we’ll show you how to configure TigerVNC for one or more VNC users.

7 V& X* S0 |4 P% V2 k; t; vUse the vncpasswd command to set up the password. Run the command as the user that will access the VNC server, do not use sudo:
) l8 T& T+ S3 b  a- y# Z这里配置vnc的密码：   （root）
vncpasswd
1 n$ e! q) ]) w+ o5 o7 ^

" E4 Z5 b* _" X2 L+ \) e* `You will be prompted to enter and confirm the password and whether to set it as a view-only password. If you choose to set up a view-only password, the user will not be able to interact with the VNC instance with the mouse and the keyboard.
+ Z/ Q' N8 d* t& \1 U6 }
The first time the vncpasswd command is run, it will create and store the password file in the user’s ~/.vnc directory.
, ?; s. f6 F0 {( S# X+ z8 X* Q6 z
6 N3 b$ z; W* L# A; F$ APassword:
9 L. ?% K* M" H7 Q' v/ o# }1 `Verify:
2 f* w: x; K! xWould you like to enter a view-only password (y/n)? n
8 `- c; \- j* wA view-only password is not used
# \+ ]% U& a0 L* d; |( w
; R6 A3 \. D& U/ f( p0 F1 l+ Z8 L
If you’re adding a second user, switch to it and set the password with vncpasswd.

The next step is to configure TigerVNC to use Gnome. VNC reads the user configuration settings from the ~/.vnc/config file. Open the file and add the following:
  z5 }0 f" ~4 ~
; N% `: P8 o- `- ~% m$ g. I#vim ~/.vnc/config
session=gnome
geometry=1920x1200    (or 1280x720)
localhost          (这个地方不配置，表示所有的都能访问)
alwaysshared
9 B5 J. F% G4 `$ Q4 P
例如：
( T2 j0 Z2 G1 g3 I+ d6 ]( g
1 y; h( v/ C% K9 s, T$ cat ~/.vnc/config
session=gnome
geometry=1280x720
. {  ~7 O4 J! g1 z4 kalwaysshared
) @3 j5 d5 U% V) ?/ H5 e0 e
  c0 |  F9 z- D8 N" Z* \3 d4 _

5 a& a' C4 R) ?9 p& B8 iThe session option specifies the session you want to start, and the geometry option specifies the size of the VNC desktop.
7 U3 x" F/ a' ~) K* J4 A4 ?
Save and close the file . If you’re adding multiple users, repeat the same step.

TigerVNC ships with a file that allows you to map a user to a particular port. The mapping is configured in the /etc/tigervnc/vncserver.users file:
* j+ B% q6 ~3 l% z& {- `
配置vnc的用户：
4 h1 g& S' C% J( H
#sudo vim /etc/tigervnc/vncserver.users

7 C, {3 e0 a: B) |0 [4 B4 p4 OThe file uses <display_port>=<username> syntax. In the example below, we are mapping display port :1 to user linuxize. Use the same format to add more users.

# TigerVNC User assignment
#
- P+ q6 S1 L" d. p# I9 M) b# This file assigns users to specific VNC display numbers.
) v3 G) j- d; R( p& V9 `- W# The syntax is <display>=<username>. E.g.:
#
7 X$ d3 a2 S; q2 [6 B# p" ]# :2=andrew
# :3=lisa
:1=root
: Z! m% O3 C$ m3 D
, H( a' j8 v+ E1 _# Z5 R* m
# ?0 p2 _3 H+ A0 p7 Z) Q" n. y
:1 is the display port number on which the VNC server will run. In our case, the server is running on TCP port 5901 (5900+1). If you map another user, for example, to display port :2, the server will also listen on port 5902 (5900+2).

: j! k) k6 L3 ?1 S9 Q- _: DWhat is important to understand is that when working with VNC servers, :X is a display port that refers to 5900+X.

  H" Z. }6 m! a启动vncserver
Starting the Tigervnc Server
) l4 g5 r2 _5 YOnce you’re done with the configuration, the last step is to start the VNC server.
. {$ [( K3 R  Q! `9 \
8 s  v& J3 `  L" _1 PTo start and enable the VNC service for the user mapped to the display port :1, enter:
; _: n/ l4 _) w6 G

: Q' J  _& h5 F) I% R2 d复制配置文件：

cp /lib/systemd/system/vncserver@.service /lib/systemd/system/vncserver@:1.service

启动并加入开机启动：
) u" C: C8 A, s" ^( l) Z0 rsudo systemctl enable vncserver@:1 --now
1 U6 L! [- b* j7 J9 n& q+ u: w
The VNC server will listen on port 5901, as we discussed in the previous section.
. Q# p9 E0 `' Y
You can verify that the service is successfully started with:
. W! B% t2 p* w$ T) b* [4 U
4 P9 {) U" h3 ^6 ?# K( ~
sudo systemctl status vncserver@:1

0 |" j8 ~6 c# z( ]5 N; \● vncserver@:1.service - Remote desktop service (VNC)
   Loaded: loaded (/usr/lib/systemd/system/vncserver@.service; enabled; vendor preset: disabled)
   Active: active (running) since Thu 2020-12-17 21:49:41 UTC; 8s ago
1 b) _( n$ W- \/ S  t  ...

To enable VNC for other users, simply replace 1 with the display port mapped to the user.
: R1 G8 X- c# S( |+ H
3 e1 D- @. Y& o6 Z% Y& G) c; G4 ]  S: rConnecting to VNC server
VNC is not an encrypted protocol and can be subject to packet sniffing. The recommended approach is to create an SSH tunnel to securely forward traffic from your local machine on port 5901 to the remote server on the same port.
; Z, K& d3 ^* ^( L* `  a( \1 l
1 r2 K! c& ]# z
) ~* I# t$ r9 kSet Up SSH Tunneling on Linux and macOS
( D* M: C( A7 X$ @& e% D) }If you run Linux, macOS, or any other Unix-based operating system on your machine, you can easily create a tunnel using the following ssh command:

ssh -L 5901:10.16.68.5:5901 -N -f -l username remote_server_ip
6 k+ g0 g4 w) [Copy
You will be prompted to enter the user password.
: `1 F& [3 s' k8 q& W, u# p6 S/ ?# F  _/ @
Do not forget to replace username and server_ip_address with your username and the IP address of your server.

" q* v& c. n3 v) y) v

admin

然后就可以通港vnc客户端进行访问
或者通过外网telnet ip 5901 这个地址，即可