This script applies security configurations to a remote, virtual server that acts as a virtual reading room. Researchers connect via the RDP protocol, which enables desktop virtualization.
The script: installs software for opening researcher materials and enabling sound redirection; disables HTTP, HTTPS, and SSH connections for accounts other than library_specialcollections and the user running the script; and creates a sample directory, ABC, for which the account researcherID has read-only permissions.
NC State University Libraries has used the script on servers hosted by the Virtual Computing Lab, a campus service that uses Apache VCL, an open-source cloud computing platform. The script has been tested in Ubuntu 18.04 LTS, 20.04.1 LTS, and 22.04 LTS on VCL servers. It has not been tested on other cloud computing services.
To learn more about the NC State virtual reading room, view our blog or researcher user guide.
- A virtual Linux server must be set up through a cloud computing service, e.g. Amazon EC2 or Google Cloud, first.
- A desktop environment, such as Mate or XFCE, needs to be installed before running the script.
- Download the script.
- Go to lines 17 and 21 and change the default SSH port number from 22 to a number higher than 1024.
- Go to line 37 and change researcherID to an existing user account.
- Transfer the script to the server:
rsync -avhP vrr_config.sh [IPADDRESS]:/home/$(whoami) - Connect to the server:
ssh [IPADDRESS] - Make the script executable:
chmod u+x vrr_config.sh - Run script:
sudo ./vrr_config.sh - Reboot.
- Verify that the security configurations were applied.