We have a couple of questions from a user. The first one is about putting a password for VNC on the VM template. We tried it by just adding a password on the VM template but it seems it is not working. Therefore, I would like to ask if someone has any experience with it. I guess for getting this it is necessary to make some configuration on the sunstone server or on the OpenNebula hosts.
The second question is about changing the resolution of the VNC session, is that possible? We tried it with xrandr command but it did not work. Does also have any experience with this?
Thanks in advance,
Is quite easy to set the VNC/SPICE pass in your VM template. If the user is able to modify the template he/she has to add PASSWD line into GRAPHICS section:
PASSWD=“my vnc fancy pass”,
or even better, ONE can also generate a random pass for you:
About the VNC screen size in Sunstone I think that is related with this
issue but I’m not sure…
Thank you very much for your answer
We have used both configurations in the template for instantiating the VM but when we access to the VM through the OpenNebula VNC, it does not ask any password, so I am not sure what I am missing on the configuration.
ahh… thanks a lot for sending me the issue that you have opened about the VNC screen
Hi! Have same problem with VNC passwords. Link in Álvaro Simón post is broken. I can’t find any info in docs.
Rewinding the time machine and using the docs for ONE released one year earlier recovers the link:
This file has been truncated.
Virtual Machine Definition File
A template file consists of a set of attributes that defines a Virtual Machine. Using the command ``onetemplate create``, a template can be registered in OpenNebula to be later instantiated. For compatibility with previous versions, you can also create a new Virtual Machine directly from a template file, using the ``onevm create`` command.
.. warning:: There are some template attributes that can compromise the security of the system or the security of other VMs, and can be used **only** by users in the oneadmin group. These attributes can be configured in :ref:`oned.conf <oned_conf>`, the default ones are labeled with ``*`` in the following tables. See the complete list in the :ref:`Restricted Attributes <template_restricted_attributes>` section.
The syntax of the template file is as follows:
- Anything behind the pound or hash sign ``#`` is a **comment**.
- **Strings** are delimited with double quotes ``"``, if a double quote is part of the string it needs to be escaped ``\\"``.
- **Single Attributes** are in the form:
And here is the rendered version:
Update: here is the most recent version:
Hope this helps,
Thanks for answer! Read this doc but can’t see info about where I can see generated password and why oneadmin can connect via VNC to any client VM. Its not secure.