centos8.3安装vncserver服务提供访问

admin

Installing VNC Server
5 F/ i, S& `9 Y% U2 V安装vncserver
TigerVNC is an actively maintained high-performance open-source VNC server. It is available in the default CentOS repositories. To install it, type:

#dnf install tigervnc-server   -y

配置vncServer
Configuring VNC Server
) I/ n, b" g  z3 `In CentOS 8, TigerVNC is configured using the systemd daemon.


In this example, we’ll show you how to configure TigerVNC for one or more VNC users.

/ |+ N% M8 ^4 Q! g# AUse the vncpasswd command to set up the password. Run the command as the user that will access the VNC server, do not use sudo:
这里配置vnc的密码：   （root）
vncpasswd


5 L- J4 b4 M# ^0 V% M6 yYou will be prompted to enter and confirm the password and whether to set it as a view-only password. If you choose to set up a view-only password, the user will not be able to interact with the VNC instance with the mouse and the keyboard.

% l1 t9 Q6 |( y; @The first time the vncpasswd command is run, it will create and store the password file in the user’s ~/.vnc directory.
9 r! F+ n1 r: d3 E7 ]
Password:
Verify:
4 i) o. J4 }2 a9 {  X0 KWould you like to enter a view-only password (y/n)? n
A view-only password is not used
8 z1 Y6 ~0 |, n7 X

If you’re adding a second user, switch to it and set the password with vncpasswd.
1 O. `8 k+ |, B7 g2 h
! q# X# m) i. D9 p# iThe next step is to configure TigerVNC to use Gnome. VNC reads the user configuration settings from the ~/.vnc/config file. Open the file and add the following:
+ Z9 d4 [" F" {4 E
: W4 U) ?6 y1 e" q7 o! ?: z#vim ~/.vnc/config
& }: A( ?4 ?) Wsession=gnome
2 S% Y; j' C; Y) c2 M& vgeometry=1920x1200    (or 1280x720)
localhost          (这个地方不配置，表示所有的都能访问)
: Y4 Y, C' l3 ]alwaysshared
1 h1 u; D/ k" V4 n, l0 e3 p, o6 e
例如：
- r: ?8 ^# i( J4 M. ]7 G$ n1 Y
/ N% V; m+ }: I1 i% o$ d$ cat ~/.vnc/config
session=gnome
geometry=1280x720
4 i5 _# u' U' ^- t$ c+ x8 \alwaysshared

% F* T: a7 |+ |; I# ~4 w

The session option specifies the session you want to start, and the geometry option specifies the size of the VNC desktop.
8 v4 d( T% J5 x* e5 v5 [% [- t4 M! Y
Save and close the file . If you’re adding multiple users, repeat the same step.

TigerVNC ships with a file that allows you to map a user to a particular port. The mapping is configured in the /etc/tigervnc/vncserver.users file:

8 i0 \# ^9 c: M8 o0 m配置vnc的用户：

6 o4 _$ d: {' l#sudo vim /etc/tigervnc/vncserver.users
( o* a& r& f, R5 i7 x
2 E. o, q4 s5 z* K0 ]& C7 \. ~) GThe file uses <display_port>=<username> syntax. In the example below, we are mapping display port :1 to user linuxize. Use the same format to add more users.

6 B8 z& `, L" g7 r0 k# TigerVNC User assignment
3 u% E1 z9 c% `3 s7 J/ k#
7 m8 E5 }* m7 a# This file assigns users to specific VNC display numbers.
! R1 q, i+ o4 U# The syntax is <display>=<username>. E.g.:
) T  }; F% o/ }; T. A* B' q#
# :2=andrew
( ^1 y/ V# g! z0 s7 j/ K/ L# :3=lisa
:1=root

% M7 q& v5 r8 M" z  ?
% h& T) G2 K9 T# d% N3 D+ @9 I
0 q8 T; N( @2 A8 c:1 is the display port number on which the VNC server will run. In our case, the server is running on TCP port 5901 (5900+1). If you map another user, for example, to display port :2, the server will also listen on port 5902 (5900+2).
* G" [6 ?* Q: r, f( h
  F' F) K# w5 F/ |. L1 z: vWhat is important to understand is that when working with VNC servers, :X is a display port that refers to 5900+X.
( \* |( ?. r. Z
启动vncserver
# j+ {  T" \! S/ t1 jStarting the Tigervnc Server
Once you’re done with the configuration, the last step is to start the VNC server.
! x0 C4 G! h4 \$ ]) v, Y/ a
5 f' \: A" {5 W) l) M8 ]  tTo start and enable the VNC service for the user mapped to the display port :1, enter:
, M  S% I6 s3 m3 d+ }

复制配置文件：
! C0 p1 S- Q3 Y3 I- d3 I2 |
$ X/ B( [2 ^! s7 f/ j4 Ucp /lib/systemd/system/vncserver@.service /lib/systemd/system/vncserver@:1.service

: H1 g0 `) j$ D$ F启动并加入开机启动：
5 b. T! Q& |' j: |( G2 \sudo systemctl enable vncserver@:1 --now

The VNC server will listen on port 5901, as we discussed in the previous section.

, I+ C" r2 j: U1 uYou can verify that the service is successfully started with:


. n, L, k1 V  o+ E+ tsudo systemctl status vncserver@:1

● vncserver@:1.service - Remote desktop service (VNC)
% _  u" y) O/ f- }6 ]( z   Loaded: loaded (/usr/lib/systemd/system/vncserver@.service; enabled; vendor preset: disabled)
   Active: active (running) since Thu 2020-12-17 21:49:41 UTC; 8s ago
7 G, c! i6 x) q# D  ...
2 V# d1 S- m$ M# V0 a, ~0 n* Y
To enable VNC for other users, simply replace 1 with the display port mapped to the user.

7 \$ e' p) ^. j/ ?* q  HConnecting to VNC server
) v7 B2 w* ~, H! \3 l1 y. e! LVNC is not an encrypted protocol and can be subject to packet sniffing. The recommended approach is to create an SSH tunnel to securely forward traffic from your local machine on port 5901 to the remote server on the same port.
( C# N7 L! l6 e7 [5 I& n, Y
5 }4 p6 `) ^$ x' K8 c
5 @( f% G. Y* y% e: YSet Up SSH Tunneling on Linux and macOS
If you run Linux, macOS, or any other Unix-based operating system on your machine, you can easily create a tunnel using the following ssh command:
$ i# M, P: w5 E8 y+ o# {/ }9 t
ssh -L 5901:10.16.68.5:5901 -N -f -l username remote_server_ip
  ~; s2 x9 j0 ]2 o* dCopy
+ z0 c8 Q, E8 k" wYou will be prompted to enter the user password.
8 Y& I5 ]' Z8 t# h& o* S7 T
& ^7 C" I1 t9 z3 |4 x' WDo not forget to replace username and server_ip_address with your username and the IP address of your server.
2 F5 s" X! Q2 y- t- G$ z/ H/ u

admin

然后就可以通港vnc客户端进行访问
% C- h6 \. p- y- x& p4 F$ C/ [或者通过外网telnet ip 5901 这个地址，即可