guacamole

secrets

• guacamole-postgres-password
• local-docker-registry
• registry-password

initial deployment

initialise database

docker ps | grep guacamole-postgresql.1
sh init-postgresql.sh $ID

using ssh keys

guacamole does not work with the standard openssh format for private keys. ie:

-----BEGIN OPENSSH PRIVATE KEY-----
[key goes here]
-----END OPENSSH PRIVATE KEY-----

you need to generate the public/private key pair using:

ssh-keygen -m pem

this will give you a private key that looks like:

-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: [dec info goes here]

[key goes here]
-----END RSA PRIVATE KEY-----

then on the target machine you need to paste the public key into the file /home/[user]/.ssh/authorized_keys

and the private key into the configuration for the guacamole connection