Graphical Login (VNC) ... with Strudel

Strudel (Scientific Remote Desktop Launcher) Strudel is a cross-platform application which is helps to access interactive desktop sessions on high performance computing systems and cloud environments. The name is a partial acronym of Scientific Remote Desktop Launcher (and a tasty pastry), and has been developed under the NeCTAR-funded ​Characterisation Virtual Laboratory. Strudel is developed by the MASSIVE team for users of the Multi-modal Australien ScienceS Imaging and Visualization Environment (​MASSIVE) and the Characterisation Virtual Laboratory. DISCLAIMER: Strudel is research software and it may contain bugs ... Download: ​Strudel (customized for JSC) ​Strudel (mind. version > Jun-2016)

Installation

• Linux
  • download & install VNC viewer ​TurboVNC
    (we recommend the latest stable TurboVNC version)
  • download & install ​Strudel

• Windows
  • download & install SSH client ​PuTTy
  • add your SSH key to PuTTy's
  • install VNC viewer ​TurboVNC
    (we recommend the latest stable TurboVNC version)
  • download & install ​Strudel

• MacOS X
  • download & install ​Oracle Java Runtime Environment
  • download & install VNC viewer ​TurboVNC for Oracle Java
    (you will need to install a Java Runtime Environment)
  • download & install ​Strudel

	​TurboVNC VNC Viewer must be installed on your local computer JSC will focus on TurboVNC 2.x as it is optimized for use with VirtualGL. for best performance do not use any other VNC viewer! use VirtualGL to run OpenGL applications Download: ​TurboVNC

Login using Strudel

Authentication:

--- Background Information ---
Strudel communicates with remote sites via multiple Secure Shells (SSH).
It is mandatory that the remote site trusts Strudel and is 100% sure
that the incoming connection is by a certain user and no none else.

Hence, each new SSH connections starts with an authentification procedure.
SSH supports different authentification methods, but not all are available on any site.
Strudel uses the most secure Public-Key Authentification (PKA) as it is supported by all sites.

PKA is based on a SSH key-pair with a private key and a public key.
The private key never leaves the local machine and the public key must be installed on the remote machine.
Anyone who knows the private key can now connect to the remote machine.
Hence, the private key is in general encrypted with a passphrase for security reasons.

But it is not desirable to involve the user in each of the multiple authentification procedures.
Hence, Strudel relys on an SSH key agent on the local machine.
A SSH key agent loads private keys and ask for the passphrase once.
For a new SSH connection the SSH key agent can now provide the private key without user interaction.

--- Important ---
How this SSH key agent is started and what private keys are loaded depends on you:

• load your key to a SSH key agent (ssh-add on Linux or OSX or Putty's Pagent on Windows) before you start Strudel
• choose "Remember me" as Authentication Option in Strudel

Configuration:

If you use the vanilla package from MASSIVE or the JURECA configuration is missing
please add the following to 'File->Manage sites':
​https://gitlab.version.fz-juelich.de/vis/strudel/raw/master/conf/jsc_jureca_flavours.json

How to login ...

---

any feedback welcomed - h.zilken@…, j.goebbert@…