Diff for "InstallingControlOnCentos6"

You need to install a "minimal install" of CentOS 6.8, using the minimal install CD.

Hostname should be called concare4.  Configure Network for DHCP and to "Connect Automatically"

Partition sizes should be as follows (Create Custom Layout):

/        20-50GB, depending on size of drive, format as EXT4

swap    2-32GB, the same size as physical RAM

/u       with the rest of available space (Fill to maximum available size), formatted as EXT4

Make sure you tell us what the root password is set to.

After install is finished it will restart. Turn off firewall and selinux.

chkconfig iptables off

chkconfig ip6tables off

edit /etc/sysconfig/selinux and make sure the SELINUX line is as follows:

SELINUX=disabled

For linode only:

edit /etc/resolv.conf and add:

nameserver 8.8.8.8

Then make the file immutable

chattr +i /etc/resolv.conf

install wget and ppp:

yum install wget ppp

download the following file into the server:

http://customers.creativecomputing.com.au/concare/vpn.tgz

untar the file into /etc/

cd

wget http://customers.creativecomputing.com.au/concare/vpn.tgz

cd /etc

tar xvzf ~/vpn.tgz

then as root, accept the fingerprint:

# ssh 220.233.135.250

The authenticity of host '220.233.135.250 (220.233.135.250)' can't be established.

RSA key fingerprint is f6:f0:5c:21:74:0e:03:db:fc:71:e6:21:63:b5:c0:43.

Are you sure you want to continue connecting (yes/no)?

Type "yes" and cancel the connection (ctrl-c).

Reboot to connect the vpn

Add epel repository:

# rpm -ivh http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm

use yum to install additional packages

yum groupinstall "Desktop" "General Purpose Desktop" "Print Server" "Web Server" "X Window System" "Internet Browser" "Office Suite and Productivity" "Xfce"

yum install libstdc++.i686 libstdc++ unixODBC.i686 mysql-libs.i686 mysql-libs libcurl-devel.i686 expat.i686 expat glib2.i686 glib2 freetype.i686 libSM.i686 libXrender.i686 fontconfig.i686 libXext-devel.i686 guacd libguac-client-vnc mysql-server tomcat6 system-config-printer libXext.i686 libXext ImageMagick gtk2-devel gtk2-devel.i686

Load the /u partition:

Download the following tar file: http://customers.creativecomputing.com.au/concare/rel15_u_partition2.tgz

untar it into /u

cd

wget http://customers.creativecomputing.com.au/concare/rel15_u_partition2.tgz

cd /u

tar xvzf ~/rel15_u_partition2.tgz

Add "control" group

groupadd -g 3232 control

install turbovnc:

rpm -ivh http://customers.creativecomputing.com.au/concare/turbovnc-2.1.x86_64.rpm

cd

wget http://customers.creativecomputing.com.au/concare/turbostartup2.tgz

cd /etc

tar xvzf ~/turbostartup2.tgz

cd

wget http://customers.creativecomputing.com.au/concare/vncserver

mv vncserver /opt/TurboVNC/bin/

chmod 755 /opt/TurboVNC/bin/vncserver

Edit /etc/X11/xinit/Xclients and add ". /u/cc/usr/commonx11.sh" below the lines for GSESSION and STARTKDE.  Note there is a space between "." and "/".

Create the ccc user and start up its vnc session

adduser -m ccc

passwd ccc

initctl start turbo VNC=5

Install guacamole:

chkconfig guacd on

cd

wget https://sourceforge.net/projects/guacamole/files/current/binary/guacamole-0.9.12-incubating.war

mv ~/guacamole-0.9.12-incubating.war /var/lib/tomcat6/webapps/guacamole.war

wget http://customers.creativecomputing.com.au/concare/guacdb2.sql

chkconfig mysqld on

service mysqld start

mysql < ~/guacdb2.sql

chkconfig tomcat6 on

Restart once more.  guacadmin password is gu4c4dm1n

Try logging into guacamole on "http://<ip address>:8080/guacamole/" and connect to the pre configured "ccc" session.  If you see a menu on top, go to System->log out ccc, then say "Log out" to the dialog box that comes up.  This will close the session and start it over.  If the screen has been locked out and screen saver has activated, forcibly restart the vnc session:

initctl stop turbo VNC=5

wait a few seconds, then:

initctl start turbo VNC=5

Install cups-cloudprint:

cd

wget http://customers.creativecomputing.com.au/concare/cups.tgz

cd /etc

tar xvzf ~/cups.tgz

yum install cupscloudprint

service cups restart

Prior to running the following, please make sure you have a cloudprint account set up with Google and have at least one A4 printer there. This link will give you some more idea about Google cloud print: https://www.google.com/cloudprint/learn/printers.html .  It is advisable that you create a Google account just for the sole purpose of printing and not use a pre-existing one.

The following command will initiate setting up cups cloudprint.  (This will ask you to enter a URL into a browser and log in to your Google cloud print account) /usr/share/cloudprint-cups/setupcloudprint.py

For now, only add the account and do not add any printers just yet.

Set up chroot sftp

In /etc/ssh/sshd_config change the following near the bottom:

#Subsystem    sftp    /usr/libexec/openssh/sftp-server

Subsystem     sftp    internal-sftp

Match Group sftpusers

• ChrootDirectory /sftp/%u

  ForceCommand internal-sftp

Add a new group sftpusers and create a chroot subdirectory

groupadd -g 3255 sftpusers

mkdir /sftp/

Restart sshd if you want to use it straight away

service sshd restart

Set up OpenVPN

Install the OpenVPN package

yum install openvpn easy-rsa

cd /usr/share/easy-rsa/2.0

source vars

./clean-all

Edit the file "vars" and change the items near the end (this is just an example, you can use your real location details):

export KEY_COUNTRY="AU"

export KEY_PROVINCE="NewSouthWales"

export KEY_CITY="CrowsNest"

export KEY_ORG="Creative-Computing"

export KEY_EMAIL="support@creativecomputing.com.au"

export KEY_OU="Concare"

build the certificate authority (just accept all the defaults and say yes to sign the certificate and commit):

source ./vars

./build-ca

./build-dh

./build-key-server server

wget http://customers.creativecomputing.com.au/concare/openvpn.conf

mv openvpn.conf /etc/openvpn/

chkconfig openvpn on

mkdir /var/log/openvpn

service openvpn start

At this point the OS is installed and a very rudimentary version of Control (based on what's installed in the original test VM) is now installed in the system.  The following instructions are for adding sessions and printers which I will do a live demo for.

To Add a new session:

Add a Linux user and set their password

adduser -m <session_name> -G sftpusers

mkdir -p /sftp/<session_name>/<session_name>

chmod 755 /sftp/<session_name>

passwd <session_name>

Add this to /etc/fstab:

/u/cc/usr/<session_name> /sftp/<session_name>/<session_name>   none bind

Then mount it.

mount -a

Edit the file /u/cc/usr/vncusers.sh and add a line

USER[<USER_NUMBER>]='<session_name>'

RESO[<USER_NUMBER>]='800x600'

<USER_NUMBER> is a vnc session number, for now keep this between 6 and 100.  5 is the screen we use for support.  The 'RESO' line is optional, if you leave it out, it defaults to 1600x900

Start up the vnc session

initctl start turbo VNC=<USER_NUMBER>

Use a VNC client to connect to <ip_address_of_server>:<USER_NUMBER>.  Initial password is set to "123456"

If the menu is on top, go to System->Log out <session_name>, then click OK.  If the screen saver has started, unlock it with the linux password and log out.  This will move the menus to the bottom of the screen and disable the screen saver.

Change the VNC password:

Open a terminal inside the session:

/opt/TurboVNC/bin/vncpasswd

Edit the file /etc/init/start-xvncs.conf and add the number to the string ACTIVE_VNCSCREENS

env ACTIVE_VNCSCREENS="5 6 7 8 9 10 11 12"

This is to make sure the session will auto startup if the server was restarted.

create guacamole account:

in the web page http://<ip address>:8080/guacamole, log in as guacadmin

click on the guacadmin on the upper right then click on settings

click on connections

click on New Connection

Name: <session_name>

Maximum number of connections: 5

Maximum number of connections per user: 5

Hostname: localhost

Port: <5900+USER_NUMBER>

Password: <vnc_password>

Enable SFTP: <Tick>

Hostname: localhost

Port: 22

Username: <session_name>

Password: <Linux_password>

Default upload directory: /<session_name>

and then click Save.

Click on Users

Click on Add New User

Username: <session_name>

Password: <set up a password for end user>

Re-enter Password: same as Password

Change own password: <tick>

Connections:

tick on <session_name>

Set up a Printer:

These instructions are mostly just an outline.  I will have to do a live demo of this.

If using a printer that will be hooked up to a windows PC, We will need to make sure that the windows printer driver is installed and a test page can be printed.

If using cloudprint, a google account should be created solely for printing.

If using cloud print (A4 printers):

On native cloudprint printer

set up cloudprint on device (this is device specific)

https://support.google.com/cloudprint/answer/1686197?hl=en

On classic printer

set up cloudprint on attached windows PC and Chrome.

https://support.google.com/cloudprint/answer/1686197?hl=en

for both of the above: set up cups-cloudprint using python script

/usr/share/cloudprint-cups/setupcloudprint.py

If direct printing (40 column thermal receipt printers and label printers)

set up openvpn account on the server:

cd /usr/share/easy-rsa/2.0

source vars

./build-key <session_name>

It will then ask you a series of questions, similar to the ones asked by the ./build-key-server script. You should only need to answer the "Common Name" field, "Sign the certificate?" and "1 out of 1 certificate requests certified, commit?"

In the keys directory under current a configuration file <session_name>.ovpn similar to openvpn.conf must be created.

# Configuration for connecting into Concarce internal network

tls-client

dev tap

proto udp

remote <ip_address_of_server> 1194

resolv-retry infinite

nobind

ifconfig 10.5.0.x 255.255.255.0 # This line is client dependent. (x means choose the ip address to use for client)

ca ca.crt

cert <session_name>.crt

key <session_name>.key

verb 3

mute 10

Then zip all these file you just created ( .crt, .key,.opvn and etc may be 6 or so files)

zip <session_name>.zip <session_name>.* dh2048.pem ca.crt

Load into client machine.  An external method may be needed to load the OpenVPN files into the client computer.

Use the latest stable installer (whether 32 bit or 64 bit) from the following:

https://openvpn.net/index.php/open-source/downloads.html

Unzip all the files into the config directory under where OpenVPN is installed (Usually C:\Program Files\OpenVPN\config).  Create a shortcut to OpenVPN on the desktop if the installer has not done so.

set up windows driver and make sure test page works.

turn on Unix printing for windows and make sure it auto starts the service.

use system-config-printer to set up cups

At this point, you have a cups printer, either to a cloud printer device, or a direct printing device.

run printer management from inside Control:

prnaad (as end user)

cloud print printer use "graphics" printing, the rest choose appropriate printer model.

Go to Control "terminal details" screen to set up printers.

yum install sendmail

chkconfig --levels 235 sendmail on

chmod 755 -R /etc/mail

service sendmail restart

update all the binaries to the latest:

From SAM:

rsync -avz --delete /u/ccr.15/std/{ut,}bin{l,x11} root@<serverIP>:/u/cc/std/

rsync -avz –-delete /u/ccr.15/standard.adm/ root@<server IP>:/u/cc/adm/

scp /u/ccr.15/adm/menu.* /u/ccr.15/adm/*.qss root@<server IP>:/u/cc/adm/

ssh to the server.

Copy the <standard company> to <company name>

chmod a+w -R /u/ccr.15/<company> /u/ccr.15/adm

./contrl =>put address and phone

/u/cc/std/localbin/brarep