centos8.3安装vncserver服务提供访问

admin

Installing VNC Server
2 G3 L* h5 d7 M安装vncserver
TigerVNC is an actively maintained high-performance open-source VNC server. It is available in the default CentOS repositories. To install it, type:

#dnf install tigervnc-server   -y

- l; {" x* D; Z' U% c9 f配置vncServer
- r8 t8 S' ^! U2 o2 S- A. S" NConfiguring VNC Server
( Z8 g, l+ a* e. GIn CentOS 8, TigerVNC is configured using the systemd daemon.


0 ^; p  P" d3 G" u  l/ E. C% TIn this example, we’ll show you how to configure TigerVNC for one or more VNC users.
% X3 T! F; y. ?+ b* R! E7 b+ B
- B3 c. `6 ^! U, B6 zUse the vncpasswd command to set up the password. Run the command as the user that will access the VNC server, do not use sudo:
这里配置vnc的密码：   （root）
& ~2 U; j  ~' Q- P  K/ u1 i- Vvncpasswd

& W3 |( P, o4 p4 r. N# ^
You will be prompted to enter and confirm the password and whether to set it as a view-only password. If you choose to set up a view-only password, the user will not be able to interact with the VNC instance with the mouse and the keyboard.

The first time the vncpasswd command is run, it will create and store the password file in the user’s ~/.vnc directory.
, @9 ^# F- S- f) g
Password:
Verify:
Would you like to enter a view-only password (y/n)? n
: T* I8 Y/ K- Z* a6 `7 G3 xA view-only password is not used
0 [6 k# \( M$ `0 u5 h0 A* A- w
% C+ G9 t7 Z0 `* Y
0 Q. P* x& x# E' N: R2 H, l7 vIf you’re adding a second user, switch to it and set the password with vncpasswd.

6 b1 [* x/ h$ F, VThe next step is to configure TigerVNC to use Gnome. VNC reads the user configuration settings from the ~/.vnc/config file. Open the file and add the following:

#vim ~/.vnc/config
session=gnome
geometry=1920x1200    (or 1280x720)
localhost          (这个地方不配置，表示所有的都能访问)
0 Q4 Y3 D6 j- |" d* ^1 Ualwaysshared
5 d6 M: I1 o8 ^% p, T1 A# n) V
" o' N9 _% J7 E3 ^" @例如：
% j) z8 [" L/ N; t) H' X
1 O. b2 t; \! A2 h" Y9 T  H9 B$ cat ~/.vnc/config
session=gnome
geometry=1280x720
alwaysshared



7 P: f) `1 F0 J! U& a5 K' xThe session option specifies the session you want to start, and the geometry option specifies the size of the VNC desktop.
# F! y" @9 {7 W) v. A* q
Save and close the file . If you’re adding multiple users, repeat the same step.
' N. r3 ^* n6 [7 P: W
. I( d1 V7 N" H4 w) |% pTigerVNC ships with a file that allows you to map a user to a particular port. The mapping is configured in the /etc/tigervnc/vncserver.users file:
; V2 t9 G0 `0 n- U
配置vnc的用户：

#sudo vim /etc/tigervnc/vncserver.users

The file uses <display_port>=<username> syntax. In the example below, we are mapping display port :1 to user linuxize. Use the same format to add more users.
  |" x6 _6 b8 J4 P0 A5 c7 C; |' y
/ F2 L3 k2 ?9 [# TigerVNC User assignment
8 o0 Q/ f" q6 F$ z  i#
6 w/ P# E- M4 @$ y7 `# This file assigns users to specific VNC display numbers.
# The syntax is <display>=<username>. E.g.:
1 D6 C" J4 d1 m" \( ]#
# :2=andrew
# :3=lisa
& R7 c' \1 x: e" x; A6 E:1=root



. A8 W0 G$ N  P) ~3 z+ \6 z7 W:1 is the display port number on which the VNC server will run. In our case, the server is running on TCP port 5901 (5900+1). If you map another user, for example, to display port :2, the server will also listen on port 5902 (5900+2).
5 T6 ]3 l1 G+ O  b! v6 c
What is important to understand is that when working with VNC servers, :X is a display port that refers to 5900+X.
+ }- z' T" z9 ]# j3 I8 O+ F3 F" A' h
启动vncserver
Starting the Tigervnc Server
3 }4 B- q/ Q# N( \7 b) k  k, D3 mOnce you’re done with the configuration, the last step is to start the VNC server.
+ B8 d/ `/ j" J" T9 m
To start and enable the VNC service for the user mapped to the display port :1, enter:

0 ?. o! L0 h: i
复制配置文件：
" Y- r4 w4 u  g& s
cp /lib/systemd/system/vncserver@.service /lib/systemd/system/vncserver@:1.service
1 l0 \$ h! R0 ]
: U& l/ ^* S5 X启动并加入开机启动：
' d* Q( f+ N2 B( {  y4 csudo systemctl enable vncserver@:1 --now

The VNC server will listen on port 5901, as we discussed in the previous section.

8 f: y1 H0 _. q8 m4 IYou can verify that the service is successfully started with:

+ i' S* W- Y- k3 G' Q
+ E2 H" b4 e1 ]* V5 x( q( [0 Ksudo systemctl status vncserver@:1

● vncserver@:1.service - Remote desktop service (VNC)
+ G, @6 \' u9 a) `8 L/ J0 O! e   Loaded: loaded (/usr/lib/systemd/system/vncserver@.service; enabled; vendor preset: disabled)
   Active: active (running) since Thu 2020-12-17 21:49:41 UTC; 8s ago
  ...

To enable VNC for other users, simply replace 1 with the display port mapped to the user.

+ u5 A% a  V% p* ~& k2 l+ xConnecting to VNC server
VNC is not an encrypted protocol and can be subject to packet sniffing. The recommended approach is to create an SSH tunnel to securely forward traffic from your local machine on port 5901 to the remote server on the same port.
) a; V4 ^* e" \8 h
# n6 I9 y5 T/ s7 Q. i/ ^
* L( X) n4 c7 @$ r3 ]Set Up SSH Tunneling on Linux and macOS
If you run Linux, macOS, or any other Unix-based operating system on your machine, you can easily create a tunnel using the following ssh command:

/ ?! ^# H4 Q: t, n6 ossh -L 5901:10.16.68.5:5901 -N -f -l username remote_server_ip
Copy
; G+ c" O" _' U) |You will be prompted to enter the user password.
2 c! R3 y& ?* p
8 e% p! f( M6 ^, v: N  ]8 R  S. Y/ MDo not forget to replace username and server_ip_address with your username and the IP address of your server.

6 u, R! P% @  x$ i5 D1 V

admin

然后就可以通港vnc客户端进行访问
或者通过外网telnet ip 5901 这个地址，即可