https://github.com/skosachiov/linux-remote-assistance
The ansible code produces desktop files in the /usr/share/applications/ folder and creates server no-shell user. Desktop files contain one-liners bash scripts. Desktop files allow to connect in automatic mode reverse forward and direct forward ports over ssh for telework and helpdesk, telework launches x11vnc with a pin code, helpdesk "sees" telework vnc on helpdesk local port. Forward ports through ssh server allows you to provide assistance behind NAT. Graphical shell is zenity. Dependences are x11vnc, tigervnc, sshpasswd, zenity.
https://github.com/skosachiov/linux-remote-assistance
ansible assistance bash linux remote yaml
Last synced: 17 days ago
JSON representation
The ansible code produces desktop files in the /usr/share/applications/ folder and creates server no-shell user. Desktop files contain one-liners bash scripts. Desktop files allow to connect in automatic mode reverse forward and direct forward ports over ssh for telework and helpdesk, telework launches x11vnc with a pin code, helpdesk "sees" telework vnc on helpdesk local port. Forward ports through ssh server allows you to provide assistance behind NAT. Graphical shell is zenity. Dependences are x11vnc, tigervnc, sshpasswd, zenity.
- Host: GitHub
- URL: https://github.com/skosachiov/linux-remote-assistance
- Owner: skosachiov
- License: gpl-3.0
- Created: 2022-03-19T09:08:03.000Z (about 3 years ago)
- Default Branch: main
- Last Pushed: 2024-04-27T20:32:07.000Z (about 1 year ago)
- Last Synced: 2024-04-27T21:28:18.562Z (about 1 year ago)
- Topics: ansible, assistance, bash, linux, remote, yaml
- Homepage:
- Size: 860 KB
- Stars: 7
- Watchers: 2
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Linux remote assistance
The ansible code produces desktop files in the /usr/share/applications/ folder and creates server no-shell user. Desktop files contain one-liners bash scripts. Desktop files allow to connect in automatic mode reverse forward and direct forward ports over ssh for telework and helpdesk, telework launches x11vnc with a pin code, helpdesk "sees" telework vnc on helpdesk local port. Forward ports through ssh server allows you to provide assistance behind NAT. Graphical shell is zenity. Dependences are x11vnc, tigervnc, sshpasswd, zenity. X11 display server, no Wayland support yet.
## Fast start (ansible automation, push mode)
Tested on Ubuntu 20.04/22.04 and Centos Stream 8. Can be used for any Debian/RHEL-based distributions.
### Install
1. Clone git repo `git clone https://github.com/skosachiov/linux-remote-assistance`
2. Ensure sshd service started on client/server
3. Use `su` become method for default CentOS/RHEL installation and `sudo` for Debian/Ubuntu \
`ansible-playbook -v -k -K -b --become-method= -u user -e "fqdn_sshserver=my.ssh.example.com no_shell_pass=deploysecret" -i my.ssh.example.com, server.yml` \
`ansible-playbook -v -k -K -b --become-method= -u user -e "fqdn_sshserver=my.ssh.example.com no_shell_pass=deploysecret" -i client.example.com, client.yml`
### Uninstall
1. Uninstall client \
`ansible-playbook -v -k -K -b --become-method= -u user -i client.example.com, client-uninstall.yml`
2. Uninstall server \
`ansible-playbook -v -k -K -b --become-method= -u user -i my.ssh.example.com, server-uninstall.yml`
## Ansible automation pull mode
Tested on Ubuntu 20.04/22.04 and Centos Stream 8. Can be used for any Debian/RHEL-based distributions.
### Server configuration
1. Logon to the server and get root access
2. Install packages \
Ubuntu: `apt install git ansible` \
RHEL 8, Centos 8, Oracle linux 8: `dnf install epel-release; dnf install git ansible-core`
3. `echo "localhost ansible_connection=local" >> /etc/ansible/hosts`
4. `ansible-pull --extra-vars "fqdn_sshserver=my.ssh.example.com no_shell_pass=deploysecret" -U https://github.com/skosachiov/linux-remote-assistance/playbooks/server.yml`
### Client configuration (X11 display server, no Wayland support yet)
1. Logon to the client and get root access
2. Install packages \
Ubuntu: `apt install git ansible` \
RHEL 8, Centos 8, Oracle linux 8: `dnf install epel-release; dnf install git ansible-core`
3. `echo "localhost ansible_connection=local" >> /etc/ansible/hosts`
4. `ansible-pull --extra-vars "fqdn_sshserver=my.ssh.example.com no_shell_pass=deploysecret" -U https://github.com/skosachiov/linux-remote-assistance/playbooks/client.yml`
## Client uninstall (ansible automation, pull mode)
`ansible-pull -U https://github.com/skosachiov/linux-remote-assistance/playbooks/client-uninstall.yml`
## Operation through port 443 through an existing HTTPS server, port 22 is closed on the firewall
### HTTPS server configuration
a2enmod ssl \
a2enmod proxy_connect
Add to coniguration /etc/apache2/sites-enabled/default-ssl.conf
`ProxyRequests On` \
`AllowCONNECT 22`
### Add to ssh connection command:
`apt/dnf install proxytunnel`
`ssh ... -o ProxyCommand="proxytunnel -z -E -p {{fqdn_sshserver}}:443 -d 127.0.0.1:22" ...`
## Screenshots
## A note on security
Obviously, we can set a legitimate ssh-server fingerprint on each workstation and not use the StrictHostKeyChecking=no option.