16 lines
688 B
Markdown
16 lines
688 B
Markdown
# jump-box
|
|
|
|
## GUI (XFCE over RDP) first-time setup
|
|
|
|
1. **Set a password for RDP logins:** Generate a hash and mount it at `/etc/xrdp/secrets/password-hash`:
|
|
```sh
|
|
openssl passwd -6 > password-hash
|
|
```
|
|
2. **Optional: mount a persistent TLS cert** as `cert.pem` + `key.pem` under `/etc/xrdp/tls/`
|
|
```sh
|
|
openssl req -x509 -newkey rsa:3072 -nodes -days 3650 -keyout key.pem -out cert.pem -subj "/CN=jump-box"
|
|
```
|
|
3. **Expose the port:** expose TCP `3389`.
|
|
4. **Optional iGPU setup:** Pass through `/dev/dri`; the user is added to its render group on boot.
|
|
5. **Connect:** For Remmina, set colour depth to "GFX AVC444" and network type to "Automatic detection" to get H.264
|