bchanot/config
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs(memory): record RDP pivot to gnome-remote-desktop (BLK-004, LRN-004)

Browse Source 
xrdp was found incompatible with Wayland-only GNOME and replaced by
gnome-remote-desktop system "Remote Login". Add BLK-004 (mstsc 0x904/0x7 root
cause: empty gate credentials) and LRN-004 (g-r-d --system recipe + two-layer
auth), both superseding the now-outdated xrdp entries BLK-003/LRN-003, plus a
journal line. RDP connection confirmed working live.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01JSFhCiEgndbRrMf7s8mmth
This commit is contained in:
Bastien Chanot
2026-06-23 17:48:46 +02:00
co-authored by Claude Opus 4.8
parent 0bd936bf33
commit 75440741b4
3 changed files with 49 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.claude/memory/blockers.md
+17
View File
@@ -14,3 +14,20 @@ repo (remote git.bchanot.fr) would leak it. Root cause: key inlined in `write_op
Fix: repo copy `bin/claude-provider` reads `${OPENROUTER_API_KEY:?...}` from env; key never in
repo. Verified `git grep sk-or` clean. Status: resolved in repo. ACTION user: revoke old key at
openrouter.ai (compromised — was in plaintext + exposed in chat).
## BLK-003 — xrdp block: `systemctl enable xrdb` typo aborted installer — RESOLVED
2026-06-23. Uncommitted install.sh xrdp block had `sudo systemctl enable xrdb` (typo: `xrdb` = X
resource-DB tool, no such systemd service). Returns non-zero → under `set -euo pipefail` aborts
whole installer. Also `apt-get install xrdp` missing `-y` → hangs non-interactive run. Root cause:
one-letter typo `xrdp`→`xrdb` + missing -y. Fix: idempotent `install_xrdp()` (apt -y, adduser xrdp
ssl-cert, polkit .rules, conditional ufw 3389, enable+restart). shellcheck + bash -n CLEAN.
Status: resolved in repo. Not run live / RDP connection not tested.
## BLK-004 — RDP Win→Linux 0x904/0x7: empty gate creds on g-r-d --system — RESOLVED
2026-06-23. After xrdp dropped for gnome-remote-desktop (Wayland), mstsc fails `0x904 / 0x7`
despite: daemon LISTEN *:3389, ufw inactive, TLS cert readable, service active. Root cause:
`grdctl --system status` → `Username: (empty)` / `Password: (empty)`. System "Remote Login" =
2-layer auth: shared gate creds (`grdctl --system rdp set-credentials`) unlock GDM, then per-user
PAM login at GDM. Empty gate creds → RDP nego refused before GDM → 0x904. Fix: set-credentials,
connect (gate creds → GDM `bchanot`). Connection CONFIRMED live. Automated in install.sh via
ensure_rdp_credentials (prompt, TTY-guarded, idempotent). Supersedes BLK-003 (xrdp). Status: resolved.