apache guacamole 在ubuntu上的部署

安装基本组成

安装guacamole所需要的依赖库

 apt-get -y install libcairo2-dev libjpeg62-dev libpng12-dev libossp-uuid-dev
 apt-get -y install libavcodec-dev libavutil-dev libswscale-dev libfreerdp-dev libpango1.0-dev libssh2-1-dev libtelnet-dev libvncserver-dev libpulse-dev libssl-dev libvorbis-dev libwebp-dev 

JAVA环境

 apt-get -y --force-yes install default-jre
 apt-get -y --force-yes install default-jdk

Maven

手动配置Maven

sudo mkdir /data
cd /data
sudo wget http://apache.fayea.com/maven/maven-3/3.5.4/binaries/apache-maven-3.5.4-bin.tar.gz
sudo tar -xzf apache-maven-3.5.4-bin.tar.gz
cd ~ && vim .bashrc
# 在文件末尾添加,注意JAVA版本
# set maven environment
export JAVA_HOME=/usr/lib/jvm/java-1.8.0-openjdk-amd64
export JRE_HOME=$JAVA_HOME/jre
export CLASSPATH=.:$JAVA_HOME/lib:$JRE_HOME/lib:$CLASSPATH
export M2_HOME=/data/apache-maven-3.5.4
export PATH=$M2_HOME/bin:$PATH

apt直接安装

apt install maven

验证

mvn --version
Maven home: /usr/share/maven
Java version: 1.8.0_171, vendor: Oracle Corporation
Java home: /usr/lib/jvm/java-8-openjdk-amd64/jre
Default locale: en_US, platform encoding: UTF-8
OS name: "linux", version: "4.4.0-62-generic", arch: "amd64", family: "unix"

出现以上信息，那么安装配置成功

安装Tomcat

#下载tomcat
sudo apt-get -y install tomcat8
#配置环境变量
sudo echo "" >> /etc/default/tomcat8
# 其中GUACAMOLE_HOME文件夹在后面创建
sudo echo "# GUACAMOLE EVN VARIABLE" >> /etc/default/tomcat8
sudo echo "GUACAMOLE_HOME=/etc/guacamole" >> /etc/default/tomcat8

安装Guacamole-server

cd ~ && wget http://mirrors.hust.edu.cn/apache/guacamole/0.9.13-incubating/source/guacamole-server-0.9.13-incubating.tar.gz
tar -zxvf guacamole-server-0.9.13-incubating.tar.gz
cd guacamole-server-0.9.13-incubating/
#开机自启动guacd
sudo ./configure --with-init-dir=/etc/init.d
make
make install
ldconfig

安装Guacamole-client

cd && wget http://mirrors.tuna.tsinghua.edu.cn/apache/guacamole/0.9.13-incubating/binary/guacamole-0.9.13-incubating.war
#部署到Tomcat
cp guacamole-0.9.13-incubating.war /var/lib/tomcat8/webapps/guacamole.war 

配置guacamole

mkdir -p /etc/guacamole/ && vim /etc/guacamole/guacamole.properties

增加以下内容

basic-user-mapping: /etc/guacamole/user-mapping.xml

然后编写用户配置文件,具体参数配置文档：http://guacamole.apache.org/doc/gug/configuring-guacamole.html

<user-mapping>

    <!-- Per-user authentication and config information -->
    <authorize username="USERNAME" password="PASSWORD">
        <protocol>vnc</protocol>
        <param name="hostname">localhost</param>
        <param name="port">5900</param>
        <param name="password">VNCPASS</param>
    </authorize>

    <!-- Another user, but using md5 to hash the password
         (example below uses the md5 hash of "PASSWORD") -->
    <authorize 
            username="USERNAME2"
            password="319f4d26e3c536b5dd871bb2c52e3178"
            encoding="md5">
            <!--319f4...是PASSWORD的MD5值-->

        <!-- First authorized connection -->
        <connection name="localhost">
            <protocol>vnc</protocol>
            <param name="hostname">localhost</param>
            <param name="port">5901</param>
            <param name="password">VNCPASS</param>
        </connection>

        <!-- Second authorized connection -->
        <connection name="otherhost">
            <protocol>vnc</protocol>
            <param name="hostname">otherhost</param>
            <param name="port">5900</param>
            <param name="password">VNCPASS</param>
        </connection>

    </authorize>

</user-mapping>

启用服务

/etc/init.d/tomcat8 restart
/etc/init.d/guacd start

访问地址

http://ip:8080/guacamole/

guacad server配置

文件和guacamole.properties平级，guacd.conf . 切记：guacd.conf文件名固定

#
# guacd configuration file
#

[daemon]

pid_file = /var/run/guacd.pid
log_level = info

[server]

bind_host = localhost
bind_port = 4822

#
# The following parameters are valid only if
# guacd was built with SSL support.
#

[ssl]

server_certificate = /etc/ssl/certs/guacd.crt
server_key = /etc/ssl/private/guacd.key

可以查看修改是否生效：

lsof -i:4288
guacd   3425 root    4u  IPv4 106130      0t0  TCP localhost:4822 (LISTEN)
# 修改后显示为
guacd   3491    root    4u  IPv4 106325      0t0  TCP bogon:4822 (LISTEN)