jinying8869 发表于 2017-6-24 18:40:15

centos7.2部署vnc服务记录

  不做过多介绍了,下面直接记录下centos7系统下安装配置vncserver的操作记录
  1)关闭防火墙
centos的防火墙是firewalld,关闭防火墙的命令
# systemctl stop firewalld.service #停止firewall
# systemctl disable firewalld.service #禁止firewall开机启动
  # setenforce 0
# getenforce
# cat /etc/sysconfig/selinux
SELINUX=disabled
SELINUXTYPE=targeted
  2)安装软件:
# yum update
# yum groupinstall "GNOME Desktop" "X Window System" "Desktop"
# yum install tigervnc-server tigervnc vnc vnc-server
  3)配置vnc连接
# cp /lib/systemd/system/vncserver@.service /etc/systemd/system/vncserver@:1.service
修改/etc/systemd/system/vncserver@:1.service
找到这一行
ExecStart=/sbin/runuser -l <USER> -c "/usr/bin/vncserver %i"
PIDFile=/home/<USER>/.vnc/%H%i.pid
  这里直接用root 用户登录,所以我替换成
ExecStart=/sbin/runuser -l root -c "/usr/bin/vncserver %i"
PIDFile=/root/.vnc/%H%i.pid
  如果是其他用户的话比如john替换如下
ExecStart=/sbin/runuser -l john -c "/usr/bin/vncserver %i"
PIDFile=/home/john/.vnc/%H%i.pid
  由于直接root用户登录,所以配置如下:
# cat /etc/systemd/system/vncserver@:1.service
.........

Description=Remote desktop service (VNC)
After=syslog.target network.target
  
Type=forking
# Clean any existing files in /tmp/.X11-unix environment
ExecStartPre=/bin/sh -c '/usr/bin/vncserver -kill %i > /dev/null 2>&1 || :'
ExecStart=/usr/sbin/runuser -l root -c "/usr/bin/vncserver %i"
PIDFile=/root/.vnc/%H%i.pid
ExecStop=/bin/sh -c '/usr/bin/vncserver -kill %i > /dev/null 2>&1 || :'
  
WantedBy=multi-user.target
  为VNC设密码
# vncpasswd
123456
  # vim /etc/libvirt/qemu.conf
vnc_password = "123456"
vnc_listen = "0.0.0.0"
  重加载 systemd
# systemctl daemon-reload
  启动vnc
# systemctl enable vncserver@:1.service
# systemctl start vncserver@:1.service
  注意,此处关闭了防火墙
如果防火墙开了,需要开通一下规则:
# firewall-cmd --permanent --add-service vnc-server
# systemctl restart firewalld.service
如果是iptable,则需要在/etc/sysconfig/iptables里添加:
-A INPUT -m state --state NEW -m tcp -p tcp --dport 5900:5903 -j ACCEPT
  关闭vnc连接
# /usr/bin/vncserver -kill :1
  测试vnc连接:
# novnc_server --vnc 192.168.1.8:5901 --listen 6081
Warning: could not find self.pem
Starting webserver and WebSockets proxy on port 6081
WebSocket server settings:
- Listen on :6081
- Flash security policy server
- Web server. Web root: /usr/share/novnc
- No SSL/TLS support (no cert file)
- proxying from :6081 to 192.168.1.8:5901
  Navigate to this URL:
  http://kvm-server:6081/vnc.html?host=kvm-server&port=6081 #http访问方式
  Press Ctrl-C to exit
  由于kvm-server的主机名对于ip是112.112.113.56,所以在浏览器里输入:
http://112.112.113.56:6081/vnc.html?host=112.112.113.56&port=6081

页: [1]
查看完整版本: centos7.2部署vnc服务记录