We're getting quite a few requests for Linux laptops, but we're hesitant to provide them due to the difficulty in managing compliance with strict security standards compared to Windows and Mac systems. However, we want to find a way to allow our users to access Linux machines for GUI applications, as simply using SSH from their Mac or Windows laptops isn't enough for their needs. Has anyone set up a similar arrangement in a production environment? What tools are you using, and what does your setup look like?
5 Answers
We handle this with CIS hardened Debian VMs. Users can access them through either RDP or a web browser using Guacamole. We also provide hardened laptops that we maintain through SSH and Ansible, ensuring they don’t have root access.
We have a small user base of about 100 people and provide a cluster of 8 Debian Linux VMs using X2Go. Users connect through the X2Go client over SSH, and it’s been working well for us. If you're considering this, I suggest running a pilot to see if it meets your needs.
You might want to build a Linux server that can run xrdp. This way, users can connect to a Linux GUI using almost any RDP client they prefer.
Check out products like Kasm, Thinlinc, or NoMachine for robust remote access solutions. I’ve heard good things about Thinlinc; it’s free for up to 10 connections and offers solid performance.
You might also consider NoMachine as a slick cross-platform remote GUI tool. And don’t forget that WSL is an option for Windows users, depending on what they need from a Linux environment.
Related Questions
How to Build a Custom GPT Journalist That Posts Directly to WordPress
Fix Not Being Able To Add New Categories With Intuitive Category Checklist For Wordpress
Get Real User IP Without Installing Cloudflare Apache Module
How to Get Total Line Count In Visual Studio 2013 Without Addons
Install and Configure PhpMyAdmin on Centos 7
How To Setup PostfixAdmin With Dovecot and Postfix Virtual Mailbox