jump-box
GUI (XFCE over RDP) first-time setup
- Set a password for RDP logins: Generate a hash and mount it at
/etc/xrdp/secrets/password-hash:openssl passwd -6 > password-hash - Optional: mount a persistent TLS cert as
cert.pem+key.pemunder/etc/xrdp/tls/openssl req -x509 -newkey rsa:3072 -nodes -days 3650 -keyout key.pem -out cert.pem -subj "/CN=jump-box" - Expose the port: expose TCP
3389. - Optional iGPU setup: Pass through
/dev/dri; the user is added to its render group on boot. - Connect: For Remmina, set colour depth to "GFX AVC444" and network type to "Automatic detection" to get H.264