Manage multiple remote computers via http5
English 中文
Paid software such as TeamViewer helps you control multiple computers remotely. WebPC completes similar functions and is completely free and open source. At the same time, WebPC makes full use of modern browsers and only needs to use the browser to remotely control your computer without installing additional control programs.
WebPC mainly has the following characteristics:
- No client software required for all operations through the browser
- All controlled terminals provide file operations imitating the local system on the browser
- Create a playlist from the video in the folder and play it on the browser using video.js
- Execute commands on the controlled end through a remote shell, such as running vim
- Remote desktop function to the controlled end via noVNC on the browser
- The controlled end can configure the functions provided by itself to prevent WebPC from being used as a Trojan horse program
- Create port forwarding or socks5 proxy to the controlled end to facilitate access to the internal network of the controlled end
- Simple user and grouping system to control user access rights and scope
- Support multiple system platforms(linux windows mac ...)
- Support to retrieve the latest released program from github and automatically upgrade
- Use webpctv client to play video from webpc on TV
The popularity of computer equipment and the rapid development of the network make remote operation of computers more and more necessary and common. ssh and rdp can only control a device with an independent external network ip, and each has its own advantages and disadvantages. Services that provide remote management and control of multiple devices such as TeamViewer are usually not suitable for non-commercial users. And usually only provides remote desktop but remote shell for Linux and other devices is usually more useful and efficient. In addition, it is annoying to install an annoying remote control program. So I sorted out the above needs, and realized all customer functions to the browser is this project WebPC.
-
First, a server is required to receive user requests and the registration of the controlled end. We call this server the master, and all controlled ends are slaves.
-
The slave will register itself with the master and maintain a virtual network channel to the master. Salve provides grpc services to the master on this virtual network channel to support various remote control functions.
-
When the master receives a user request, it finds the registered slave and forwards the request to the slave.
For linux-amd64 and windows-amd64, pre-compiled programs have been provided, please download and install directly. For other platforms, you need to compile by yourself, and refer to the following for installation.
-
Download the latest program and unzip it to /opt/webpc/webpc
-
Copy /opt/webpc/webpc-master.service to /etc/systemd/system/webpc-master.service to install the master service for systemd
sudo cp /opt/webpc/webpc-master.service /etc/systemd/system/webpc-master.serviceIf you modify the installation directory, remember to modify the corresponding path in webpc-master.service
-
Create webpc user
sudo useradd webpc -Mrs /sbin/nologin -
Run the service
sudo systemctl start webpc-master.service
The random username and password created by the system can be obtained from ./var/logs/master/webpc.log after the first run:
$ cat ./var/logs/master/webpc.log
...
{"level":"info","ts":1630285898.3816726,"msg":"init user","user":"king","password":"08ab28ebb369dc15cc2c95dc972348ee"}
...
-
Download the latest program and unzip it to /opt/webpc/webpc
-
Copy /opt/webpc/webpc-slave.service to /etc/systemd/system/webpc-slave.service to install the slave service for systemd
sudo cp /opt/webpc/webpc-slave.service /etc/systemd/system/webpc-slave.serviceIf you modify the installation directory, remember to modify the corresponding path in webpc-slave.service
-
Create webpc user
sudo useradd webpc -Mrs /sbin/nologin -
Run the service
sudo systemctl start webpc-slave.service
- Download the latest program and unzip
- Run controller.bat as an administrator and enter the command 1 to install the master service
- Run webpc-master-service service in windows service manager
The random username and password created by the system can be obtained from ./var/logs/master/webpc.log after the first run:
$ cat ./var/logs/master/webpc.log
...
{"level":"info","ts":1630285898.3816726,"msg":"init user","user":"king","password":"08ab28ebb369dc15cc2c95dc972348ee"}
...
- Download the latest program and unzip
- Run controller.bat as an administrator and enter the command 2 to install the slave service
- Run webpc-slave-service service in windows service manager
- WebPC uses jsonnet as the configuration file
- etc/master.jsonnet is the master's main setting, and it imports the sub-settings under the etc/master folder
- etc/slave.jsonnet is the slave's main setting, and it imports the sub-settings under the etc/slave folder
http.libsonnet defines how master provides website services
local def = import "def.libsonnet";
local size = def.Size;
local duration = def.Duration;
{
// http addr
Addr: ':9000',
// if not empty use https
CertFile: '',
KeyFile: '',
// enable swagger-ui on /document/
Swagger: true,
// grpc server option
Option: {
WriteBufferSize: 32*size.KB,
ReadBufferSize: 32*size.KB,
InitialWindowSize: 0*size.KB, // < 64k ignored
InitialConnWindowSize: 0*size.KB, // < 64k ignored
MaxRecvMsgSize: 0, // <1 6mb
MaxSendMsgSize: 0, // <1 math.MaxInt32
MaxConcurrentStreams: 0,
ConnectionTimeout: 120 * duration.Second,
Keepalive: {
MaxConnectionIdle: 0,
MaxConnectionAge: 0,
MaxConnectionAgeGrace: 0,
Time: 0,
Timeout: 0,
},
},
}
system.libsonnet defines the master itself as a slave to register to itself to provide remote control, and only users with Root or Server permissions can control the master
connect.libsonnet sets up where the controlled terminal can register itself. You need to add a remote control device to the web service first, and copy the registered address and fill in the URL attribute of this file
local def = import "def.libsonnet";
local size = def.Size;
local duration = def.Duration;
{
// http addr
URL: 'ws://127.0.0.1:9000/api/v1/dialer/64048031f73a11eba3890242ac120064',
// if true allow insecure server connections when using SSL
// Insecure: true,
// grpc server option
Option: {
WriteBufferSize: 32*size.KB,
ReadBufferSize: 32*size.KB,
InitialWindowSize: 0*size.KB, // < 64k ignored
InitialConnWindowSize: 0*size.KB, // < 64k ignored
MaxRecvMsgSize: 0, // <1 6mb
MaxSendMsgSize: 0, // <1 math.MaxInt32
MaxConcurrentStreams: 0,
ConnectionTimeout: 120 * duration.Second,
Keepalive: {
MaxConnectionIdle: 0,
MaxConnectionAge: 0,
MaxConnectionAgeGrace: 0,
Time: 0,
Timeout: 0,
},
},
}
system.libsonnet sets what functions the slave will provide
{
//Shell : "shell-linux", // if empty, linux default value shell-linux.sh
//Shell : "shell-windows.bat", // if empty, windows default value shell-windows.bat
// vnc server address
VNC: "127.0.0.1:5900",
// mount path to web
Mount: [
{
// web display name
Name: "s_movie",
// local filesystem path
Root: "/home/dev/movie",
// Set the directory to be readable. Users with read/write permissions can read files
Read: true,
// Set the directory to be writable. Users with write permission can write files
// If Write is true, Read will be forcibly set to true
Write: true,
// Set as a shared directory to allow anyone to read the file
// If Shared is true, Read will be forcibly set to true
Shared: true,
},
{
Name: "s_home",
Root: "/home/dev",
Write: true,
Read: true,
Shared: false,
},
{
Name: "s_root",
Root: "/",
Write: false,
Read: true,
Shared: false,
},
{
Name: "s_media",
Root: "/media/dev/",
Write: false,
Read: true,
Shared: false,
},
],
}
WebPC back-end uses golang and grpc development, front-end uses angular development, and needs to be compiled separately.
-
Install the necessary development environment node typescript yarn
-
Download the project and switch the working directory to webpc/view
git clone git@github.com:powerpuffpenguin/webpc.git && cd webpc/view -
Install project dependencies
yarn installor
npm install -
Compile the front-end code
../build.sh view
-
Install the necessary development environment gcc golang proto3 grpc protoc-gen-go protoc-gen-grpc-gateway protoc-gen-openapiv2
-
Download the project and switch the working directory to webpc
git clone git@github.com:powerpuffpenguin/webpc.git && cd webpc -
Generate grpc code
./build.sh grpc -
Embed front-end code and static files into golang code
./build.sh view -s -
Compile go code
./build.sh go
All users and controlled terminals in the WebPC exist under the node of a tree group. When the user's group is the ancestor node of the group where the controlled terminal belongs, the user can control the controlled terminal.
The permissions determine the operations that the user can perform include the following definitions:
- Root -> Can perform any operation
- Server -> When the master is registered as a slave, only users with Server permissions can control it
- Shell -> Ability to obtain remote shell execution commands
- Read -> Can read the web file system set by the fs module
- Write -> You can upload files or modify files through the fs module
- VNC -> Remote desktop operation can be done through vnc
- Slave -> You can add, delete, modify the slave list
