[SAC] [OSGeo] #2919: vms for labs on osgeo8 - remote.osgeo.org

#2919: vms for labs on osgeo8 - remote.osgeo.org
---------------------------+--------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Sysadmin Contract 2023-I
Component: Systems Admin | Keywords:
---------------------------+--------------------------------------
This is still a work in progress but looks promising.

I took the latest livecd Index of /livedvd/nightly/
/osgeolive-nightly-build40-amd64-1949c1b-master.iso

and was able to create a VM on osgeo8 and then made a copy of that vm.
So there is an live-desktop and live-desktop-2

Which are accessible thru meshcentral (https://meshcentral.com/info/)

https://remote.osgeo.org

Anyone interested in testing them out, let me know and I'll create account
on remote.osgeo.org for you to test them out.

The performance thru the browser seems pretty decent, the clipboard copy
paste (between remote and local user desktop) takes a bit of getting used
to.

Anyway my plan is to maybe setup a bunch of these. They don't need to be
on osgeo8 (can be on other servers or even cloud ones we have the
meshcentral client installed on) and so we can have a backup for those who
have issues with the livecd disk.

Copying the vms is pretty instant. Only thing I have to do after setting
them up is change their hostnames so they don't appear all the same in
remote.osgeo.org.

I think I can also allocate machines to particular users so that way for a
lab, we can define guest user accounts for people to use and destroy them
after.
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2919&gt;
OSGeo <Gter - OSGeo;
OSGeo committee and general foundation issue tracker.

#2919: vms for labs on osgeo8 - remote.osgeo.org
---------------------------+---------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Sysadmin Contract 2023-I
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+---------------------------------------
Comment (by robe):

I was looking to see if we could have remote.osgeo.org (meshcentral) use
ldap, and it seems possible according to this video

https://www.youtube.com/watch?v=UQMbNQk85g8

I'm going to try to implement this then we don't need to be creating
standalone accounts to allow users to use lab desktops.
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2919#comment:1&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2919: vms for labs on osgeo8 - remote.osgeo.org
---------------------------+---------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Sysadmin Contract 2023-I
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+---------------------------------------
Comment (by robe):

Yeh I got ldap working so now https://remote.osgeo.org requires you log in
with ldap.

I still don't have the ldap group piece working. Evidentally memberOf is
not something we are using for groups and not sure I can specify our
groups.

Ideally I'd like to set access to remote desktops based on the LDAP groups
rather than waiting for people to log in to remote.osgeo.org before I can
assign remote desktops.

Vicky just tried and was able to log in. I was too and it seemed to sync
with my existing account after I set the key right, so I am still an
admin.
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2919#comment:2&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2919: vms for labs on osgeo8 - remote.osgeo.org
---------------------------+---------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: new
Priority: normal | Milestone: Sysadmin Contract 2023-I
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+---------------------------------------
Comment (by robe):

For here is the video on configuring the LDAP groups.

https://www.youtube.com/watch?v=_POULGboaCw

I'm not sure if the issue is because he is using activedirectory or just
we don't have memberOf configured. I read somewhere here that requires
and extra overlay. Trying to figure out how we can use the groups we have
already.
--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2919#comment:3&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.