# guacamole

## secrets

* guacamole-postgres-db
* guacamole-postgres-password
* guacamole-postgres-user
* local-docker-registry
* registry-password

## initial deployment

initialise database

```shell
docker ps | grep guacamole-postgresql.1
sh init-postgresql.sh $ID
```

## using ssh keys

guacamole does *not* work with the standard openssh format for private keys.  ie:

```
-----BEGIN OPENSSH PRIVATE KEY-----
[key goes here]
-----END OPENSSH PRIVATE KEY-----
```

you need to generate the public/private key pair using:

```shell
ssh-keygen -m pem
```

this will give you a private key that looks like:


```
-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: [dec info goes here]

[key goes here]
-----END RSA PRIVATE KEY-----
```

then on the target machine you need to paste the *public* key into the file /home/[user]/.ssh/authorized_keys

and the *private* key into the configuration for the guacamole connection