vnc

[Patrick Dupre]

Dear all,

Trying to run remina, I follows

https://docs.fedoraproject.org/en-US/fedora/f40/system-administrators-guide/...

On the server

I edited
/etc/systemd/system/vncserver@.service
and set
ExecStart=/sbin/runuser -l pdupre -c "/usr/bin/vncserver %i -geometry 1280x1024"
PIDFile=/home/pdupre/.vnc/%H%i.pid

systemctl daemon-reload
vncpasswd

systemctl start vncserver@:2.service
==== AUTHENTICATING FOR org.freedesktop.systemd1.manage-units ====
Authentication is required to start 'vncserver@:2.service'.
Authenticating as: Patrick Dupre (pdupre)
Password: 
==== AUTHENTICATION COMPLETE ====

but
systemctl status vncserver@:2.service
× vncserver@:2.service - Remote desktop service (VNC)
     Loaded: loaded (/etc/systemd/system/vncserver@.service; enabled; preset: disabled)
    Drop-In: /usr/lib/systemd/system/service.d
             └─10-timeout-abort.conf
     Active: failed (Result: exit-code) since Sun 2025-02-16 11:09:32 CET; 39s ago
   Duration: 174ms
    Process: 1151698 ExecStartPre=/bin/sh -c /usr/bin/vncserver -kill :2 > /dev/null 2>&1 || : (code=exited, status=0/SUCCESS)
    Process: 1151700 ExecStart=/sbin/runuser -l pdupre -c /usr/bin/vncserver :2 -geometry 1280x1024 (code=exited, status=98)
   Main PID: 1151700 (code=exited, status=98)
        CPU: 18ms

Feb 16 11:09:32 homere systemd[1]: Starting vncserver@:2.service - Remote desktop service (VNC)...
Feb 16 11:09:32 homere systemd[1]: Started vncserver@:2.service - Remote desktop service (VNC).
Feb 16 11:09:32 homere systemd[1]: vncserver@:2.service: Can't convert PID files /home/pdupre/.vnc/homere:2.pid O_PATH file descriptor to proper file descriptor: Permission denied
Feb 16 11:09:32 homere systemd[1]: vncserver@:2.service: Main process exited, code=exited, status=98/n/a
Feb 16 11:09:32 homere systemd[1]: vncserver@:2.service: Failed with result 'exit-code'.

If I comment
#PIDFile=/home/pdupre/.vnc/%H%i.pid

I get
systemctl status vncserver@:2.service
× vncserver@:2.service - Remote desktop service (VNC)
     Loaded: loaded (/etc/systemd/system/vncserver@.service; enabled; preset: disabled)
    Drop-In: /usr/lib/systemd/system/service.d
             └─10-timeout-abort.conf
     Active: failed (Result: exit-code) since Sun 2025-02-16 11:13:37 CET; 8s ago
   Duration: 166ms
    Process: 1153640 ExecStartPre=/bin/sh -c /usr/bin/vncserver -kill :2 > /dev/null 2>&1 || : (code=exited, status=0/SUCCESS)
    Process: 1153642 ExecStart=/sbin/runuser -l pdupre -c /usr/bin/vncserver :2 -geometry 1280x1024 (code=exited, status=98)
   Main PID: 1153642 (code=exited, status=98)
        CPU: 18ms

Feb 16 11:13:37 homere systemd[1]: Starting vncserver@:2.service - Remote desktop service (VNC)...
Feb 16 11:13:37 homere systemd[1]: Started vncserver@:2.service - Remote desktop service (VNC).
Feb 16 11:13:37 homere systemd[1]: vncserver@:2.service: Main process exited, code=exited, status=98/n/a
Feb 16 11:13:37 homere systemd[1]: vncserver@:2.service: Failed with result 'exit-code'.

Any I get
vncviewer homere:2
failed to connect to "homere:2"
unable to connect to socket: cooecntion refused

Sun Feb 16 11:23:36 2025
 DecodeManager: Detected 4 CPU core(s)
 DecodeManager: Creating 4 decoder thread(s)
 CConn:       unable to connect to socket: Connection refused (111)
 DecodeManager:   Total: 0 rects, 0 pixels
 DecodeManager:          0 B (1:-nan ratio)

The ssh connection work

Thank for your help.

===========================================================================
 Patrick DUPRÉ                                 | | email: [e-mail]
===========================================================================

[Jonathan Billings]

On Feb 16, 2025, at 05:26, Patrick Dupre via users  wrote:
> Feb 16 11:09:32 homere systemd[1]: vncserver@:2.service: Can't convert PID files /home/pdupre/.vnc/homere:2.pid O_PATH file descriptor to proper file descriptor: Permission denied

Systemd services running as part of the system systemd aren’t generally permitted to reach into user home directories and change content. Even if you are using runuser (which doesn’t change the fact).  If you launched it as part of the user’s systemd session it would be fine.

I’m not sure if ProtectHome is enabled by default but I think Selinux also blocks it by default.

Put the pid file in someplace like /run.

[Samuel Sieb]

On 2/16/25 2:25 AM, Patrick Dupre via users wrote:
> Dear all,
>
> Trying to run remina, I follows
>
> https://docs.fedoraproject.org/en-US/fedora/f40/system-administrators-guide/...
>
> On the server
>
> I edited
> /etc/systemd/system/vncserver@.service
> and set
> ExecStart=/sbin/runuser -l pdupre -c "/usr/bin/vncserver %i -geometry 1280x1024"
> PIDFile=/home/pdupre/.vnc/%H%i.pid

That's your problem.  You shouldn't be touching that file.  That 
document is bad...  It does appear to have been removed in the current 
release.

You modify /etc/tigervnc/vncserver.users to configure a display number 
for the user, then activate it with:
systemctl enable --now vncserver@:2.service

I put my user on display 2.  Adjust as necessary.