You've Been Inform'd: PLANK #6

Is that a $70 screwdriver I spy? Ive been eyeing that one. you like?

LTT DRiver, it is adequate but not particularly special.

Maybe if you got the glow in the dark one, you’d feel better about it

Thant’s what she said, was still awkward.

I did a bunch of stuff here , forked plank and i have now

-> good multi monitor support on mac clients inlcuding draggin stuff across monitors
→ working file copy paste from remote to local machines and back (file transfer)
→ A full broker server setup with IPA integration so I can assign machines to users on IPA , 2FA including macOS passkey support , a display setup wizard and a bunch of other stuff

@ALan lmk if you want any of this in plank and ill send you some PRs…

basic flow for what i have made:

-> admin adds user to IPA and gives user plank entitlement , then assigns machines
→ user logs in to public broker server via plank client with inital setup password, then in the plank client has to setup 2FA / passkey and set a custom password
→ user clicks connect on machine, goes through display setup
→ plank connects, via broker - logs user straight into their user account on the linux box.
→ when a different user wants to connect , we “take over” aka log out previous user and log the new one back in .

will continue working on it, i am in the progress of deleting windows for houdini users from my life <3

if I was to run Flame on these boxes i would probably go hard and integrate ultragrid so during display setup the users can assign a broadcast monitor output or something along these lines.. just a idea :smiley:

PRs definitely welcome. You might want to update to main as you will find the following:

  • @cnoellert contributed some Mac monitor and wacom stuff which might overlap with you
  • @randy contributed Mac->RL copy/paste, I extended that out tfurther to cover more scenarios
  • If you want file transfer, please make that a host side configuration that can be disabled, there is an existing /etc/plank/host.conf which you can add that key too. I particularly do not want that as it breaks all our security protocols, and actually I don’t like it at all because I feel if you want to transfer files, use a proper app for that, not a Remote Desktop thing. that just screams lazy to me. I don’t want to be the everything app.
  • broker would be cool. maybe break that into a separate repo??
    • shouldn’t the password be the IPA password/MFA and not a whole secondary security layer? That seems really complicated. If the Broker VM is bound to IPA, then that should be the security. Currently PLANK just uses PAM, and our machines are on IPA, so that is working fine. Although we don’t use MFA, so untested.
  • if you are interested in high performance Ultragrid, look at my fork of that. CODEX rebuilt the compression to use Intel QSV 10bit 4:4:4 RGB native, all hardware fast.

Please make screen recordings of all the features you have added, it really helps me have context.

Also, I have Ubuntu/Mac Client microphone forwarding to macOS host working, so you can do FaceTimes and Zoom. Working on Ubuntu client webcam forwarding now.

Also @john-geehreng has some nice stuff he is lining up too.

It might be a good idea for us to start getting some co-ordination on features we want, and thing we are working on so there isn’t duplication of effort. I’ve never co-ordinated software development before, but I’m trying. The GH repo has discussions enabled, so that might be a good place too.

Please put 1 feature per PR, with human written/readable summary.

Thank you for contributing.

yea allready pulled in latest main today , nothing is done yet but- yes absolutely, the broker can be seperate repo (its allready)

the on the broker IS the IPA MFA not additional anything. just nicely integrated and super convenient

file transfer is a additional flag allready of course, we often have to look at PSDs/AI files e.t.c and users have client macbooks to use adobe locally , so its just a very convenient way to do small file transfers

right now its still all hardcoded to our infra for testing e.t.c but ill push up the stuff into PRs with screen recordings e.t.c

whts the usecase for mic/camera forwarding? cant you just do the call directly from the client?

Almost all are mac’s are headless in the machine room, accessed via Ubuntu thin-client.

I’ve made an empty repo, instinctual/plank-broker · GitHub

If you want to PR against that for broker. Or let me know if you want something else.

so they cant run a local webbroswer ? anyhow i guess everyones usecases are very different haha fair enough

works for me. Ill put the broker there and then make a pr to plank in the comming days after some testing as plank client needs to obviously have a broker enable setting :victory_hand:

Oooh. That was definitely a good idea.

Why on god’s green were those not Linux installs from the get-go? Talk about making your life difficult for no good reason…. And don’t say photoshop or substance. They can run that on their remote box :joy:

other stupid reasons, like having no dedicated IT department .. it just spiraled into what it is now lol. overdue as you said .

Big reason was lack of parsec

The Ubuntu clients, are very thin. No browser installed, and UFW totally locked down for inbound/outbound connections except for PLANK needs.