No description
Find a file
Jesus Alejandro Sanchez Davila 5b9afc1beb
All checks were successful
Ansible Lint / ansible-lint (push) Successful in 1m46s
Merge pull request 'Trim comments to short reasons instead of full explanations' (#4) from chore/trim-comments into main
Reviewed-on: #4
Reviewed-by: Jesus Alejandro Sanchez Davila <jsanchezd@noreply.git.silvarion.org>
2026-10-08 06:46:09 +00:00
.forgejo/workflows Trim comments to short reasons instead of full explanations 2026-10-07 11:30:04 +02:00
changelogs Exclude duplicate release_summary from changelogs/config.yaml sections 2026-10-01 16:15:42 +02:00
playbooks First commit 2026-09-16 16:51:34 +02:00
roles Trim comments to short reasons instead of full explanations 2026-10-07 11:30:04 +02:00
.ansible-lint.yml Trim comments to short reasons instead of full explanations 2026-10-07 11:30:04 +02:00
.gitignore guacamole_server: remove all database provisioning, fix confirmed-live bugs, add molecule tests 2026-09-16 20:49:31 +02:00
AGENTS.md docs: rename CLAUDE.md/AGENT.md to AGENTS.md 2026-09-24 09:37:27 +02:00
galaxy.yml Fixed linting and some other issues 2026-10-01 12:55:18 +02:00
README.md Add linux_gui role and move Guacamole schema migration into guacamole_server 2026-09-17 09:51:53 +02:00

silvarion.remoting

Ansible collection providing standardized roles for remote-access infrastructure. Currently: a browser-based Guacamole bastion for reaching lab hosts via RDP/VNC/SSH without exposing them directly, or relying on RustDesk's P2P relay, and the desktop role that gives that bastion (or any other remoting-focused host) something to actually land on.

Roles

Role Status Description
guacamole_server Verified working (Ubuntu, RHEL-family) via molecule Apache Guacamole (guacd + client webapp); imports its own JDBC schema/admin account, but never provisions the database server itself
linux_gui Live-verified (Ubuntu 24.04, RHEL-family), no molecule suite yet XFCE desktop over xrdp and standalone TigerVNC, plus Remmina for onward SSH/VNC/RDP hops

Requirements

  • Ansible >= 2.14
  • community.general (build-from-source tasks on RHEL/Rocky/Alma)
  • community.mysql (JDBC schema import + initial admin account, guacamole_db_provider: mysql)
  • Supported platforms: RHEL/Rocky/AlmaLinux 9 (guacd built from source) and Ubuntu 22.04 (jammy) / 24.04 (noble) (guacd from the universe component). Debian (bookworm) is not currently supported — confirmed against packages.debian.org that guacd has no package for it at all (only bullseye/oldoldstable and sid/unstable) — see the guacamole_server role's README/AGENT.md.

Installation

ansible-galaxy collection install silvarion.remoting

Usage

- hosts: bastion
  roles:
    - role: silvarion.remoting.guacamole_server
      vars:
        guacamole_db_host: mysql01.lab.silvarion.org
        guacamole_db_pswd: "{{ lookup('community.hashi_vault.hashi_vault', 'secret/remoting/guacamole:db_password') }}"

See roles/guacamole_server/README.md for the full variable list and an example playbook.

Core Principles

Same as silvarion.databases — simple, clear, non-disruptive, secure by default. See AGENT.md for the full collection conventions.

Authors and acknowledgment

Author: Jesus Alejandro Sanchez Davila

Maintainer: Jesus Alejandro Sanchez Davila

Email: jsanchez.consultant@gmail.com

License

MIT