misc-containers/jump-box/README.md

jump-box

GUI (XFCE over RDP) first-time setup

1. Set a password for RDP logins: Generate a hash and mount it at /etc/xrdp/secrets/password-hash:

   openssl passwd -6 > password-hash
   

2. Optional: mount a persistent TLS cert as cert.pem + key.pem under /etc/xrdp/tls/

   openssl req -x509 -newkey rsa:3072 -nodes -days 3650 -keyout key.pem -out cert.pem -subj "/CN=jump-box"
   

3. Expose the port: expose TCP 3389.
4. Optional iGPU setup: Pass through /dev/dri; the user is added to its render group on boot.
5. Connect: For Remmina, set colour depth to "GFX AVC444" and network type to "Automatic detection" to get H.264