This guide will take you through how to install VNC Server on Rocky Linux 8. VNC is an acronym for Virtual Network Computing. It makes it easy to share the graphical desktop of a system for remote control of the system.
Install VNC Server on Rocky Linux 8
In this guide, we are using TigerVNC to setup VNC Server on Rocky Linux 8. TigerVNC works in a client-server architecture with
vncserver being the utility that provides access to remote desktop and
vncviewer being the client used to connect to VNC server.
Install VNC Server on Rocky Linux 8
VNC server is provided by the
tigervnc-server package which is available on the default Rocky Linux 8 AppStream repos. Therefore, update your system and install VNC server by running the commands below;
sudo dnf update
sudo dnf install tigervnc-server
Configure VNC Server on Rocky Linux 8
Create VNC Connection User Account
Once the installation completes, proceed to configure VNC server to define the users that are allowed to access remote desktop.
NOTE: The user must already be existing on the system.
You can however create a user account for VNC logins.
By default, Rocky Linux 8 uses Wayland s the default X server. For the VNC logins to work, you need to force the login screen to use Xorg server by uncommenting the line
#WaylandEnable=false, on the
/etc/gdm/custom.conf configuration file.
sed -i 's/#WaylandEnable/WaylandEnable/' /etc/gdm/custom.conf
Reboot the System
Reboot your Rocky Linux 8 system to apply the changes.
Once the system boots, login as the user with which you will be using for remote VNC desktop logins, in this case, janedoe.
Create VNC Systemd Service Unit file
Next, create a per user VNC systemd unit file under the home directory of every user you want to allow to connect to your remote desktop via VNC server.
For example, if you want to configure VNC server to provide a display for user,
janedoe, create the VNC systemd configuration file for this user under
As a user in question and create the service unit directory above;
su - janedoe
mkdir -p ~/.config/systemd/user
Create user vnc service as follows.
cat > ~/.config/systemd/user/[email protected] << 'EOL' [Unit] Description=Remote desktop service (VNC) After=syslog.target network.target [Service] Type=forking ExecStartPre=/bin/sh -c '/usr/bin/vncserver -kill %i > /dev/null 2>&1 || :' ExecStart=/usr/bin/vncserver %i -geometry 1912x988 ExecStop=/usr/bin/vncserver -kill %i Restart=on-success RestartSec=15 [Install] WantedBy=default.target EOL
You can also restrict connection to the VNC server only through localhost (Loopback) interface by adding the keyword,
-localhost to the
ExecStart=/usr/bin/vncserver -localhost %i
Then when run, it only opens connection on localhost.
To create a systemd service as shown above, you can as well copy the
/usr/lib/systemd/system/[email protected] file to the user systemd service directory created above.
cp /usr/lib/systemd/user/[email protected] ~/.config/systemd/user
And modify it to suite your settings. For example, you can adjust the screen size geometry.
Reload systemd configurations to effect the changes made above.
systemctl --user daemon-reload
NOTE: If you get the error, Failed to connect to bus: No such file or directory, then you need to set your
XDG_RUNTIME_DIR environment variable properly (This is usually done automatically when you login via GUI).
If you logged in via the GUI and still experience the issue, set this environment variable manually,
export XDG_RUNTIME_DIR=/run/user/$(id -u), on your bashrc file.
echo 'export XDG_RUNTIME_DIR=/run/user/$(id -u)' >> ~/.bashrc source ~/.bashrc
Next, confirm your environment variables, using
systemctl --user show-environment command.
systemctl --user show-environment
DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/1001/bus DESKTOP_SESSION=gnome DISPLAY=:1 GDK_BACKEND=x11 GDMSESSION=gnome GDM_LANG=en_US.UTF-8 GNOME_DESKTOP_SESSION_ID=this-is-deprecated HISTCONTROL=ignoredups HISTSIZE=1000 HOME=/home/janedoe ... ...
Create VNC Connection Password
Next, create the VNC password for the user whose VNC display has been configured. The password can set using the
When prompted to set the read-only password, you can choose to not to set it
The VNC passwords are stored under
Once you have set the password, logout by pressing
Ctrl+d or just type
Running VNC Server
VNC server can be run as a normal systemd service. However, to run it, you need to assign a display number to the service. Systemd will automatically substitute the
%i with the specified display number.
Start and enable VNC server on a specific display number, by running run the command below.
NOTE that am running this commands as remote VNC login user, janedoe in this case and starting VNC server on display number 2.
Ensure that the display number you are using is not being used;
Start VNC on display number not being used currently.
systemctl --user enable vncserver@:2 --now
To ensure the service runs persistently, even when the user logs out, enable lingering;
To check the status;
systemctl status --user vncserver@:2
● vncserver@:2.service - Remote desktop service (VNC) Loaded: loaded (/home/janedoe/.config/systemd/user/[email protected]; enabled; vendor preset: enabled) Active: active (running) since Mon 2021-06-21 13:29:55 EDT; 31s ago Process: 4696 ExecStart=/usr/bin/vncserver :2 -geometry 1912x988 (code=exited, status=0/SUCCESS) Process: 4690 ExecStartPre=/bin/sh -c /usr/bin/vncserver -kill :2 > /dev/null 2>&1 || : (code=exited, status=0/SUCCESS) CGroup: /user.slice/user-1001.slice/[email protected]/vncserver.slice/vncserver@:2.service ├─4703 /usr/bin/Xvnc :2 -auth /run/user/1001/gdm/Xauthority -desktop localhost.localdomain:2 (janedoe) -fp catalogue:/etc/X11/fontpath.d -geometry 1912x988 -pn > ├─4716 /usr/libexec/gnome-session-binary ├─4725 dbus-launch --sh-syntax --exit-with-session ├─4756 /usr/bin/dbus-daemon --syslog --fork --print-pid 6 --print-address 8 --session ├─4768 /usr/bin/VBoxClient --checkhostversion ├─4770 /usr/bin/VBoxClient --checkhostversion ├─4804 /usr/libexec/at-spi-bus-launcher ...
You can as well stop the VNC server session by running;
systemctl --user stop vncserver@:2
Allow VNC Server Access on FirewallD
VNC server listens on TCP port 590N. Where N is the VNC display number. This port is incremented based on the VNC display number. For example, for a display number 1, the VCN listens on port 5901.
ss -alt | grep 590
LISTEN 0 5 0.0.0.0:5902 0.0.0.0:* LISTEN 0 5 [::]:5902 [::]:*
If firewalld is running, you need to open each VNC display port. For example to open port 5902 for display 2, execute;
sudo firewall-cmd --add-port=5902/tcp --permanent
sudo firewall-cmd --reload
Test VNC Server Connection
So how do you connect to your Rocky Linux 8 desktop via the VNC server?
vncviewer is the commonly used VNC client for connection to remote desktops via VNC server.
Install TigerVNC package on another Rocky Linux 8, which provides
dnf install tigervnc
If you are connection from Ubuntu/Debain, install VNC viewer client:
sudo apt install xtightvncviewer -y
Once the installation is done, you can test VNC server connection to your Rocky Linux 8 system from another host;
Where host_IP_or_hostname is the resolvable hostname for my Rocky Linux 8 desktop with VNC server running. It can be an IP address.
If all is well, you will be prompted to enter the VNC authentication password.
Connected to RFB server, using protocol version 3.8 Performing standard VNC authentication Password: PASSWORD_SET_WITH_vncpasswd
After a successful authentication, you should now land on Rocky Linux 8 desktop environment.
You have successfully connected to your remote Rocky Linux 8 desktop via VNC server and that marks the end of our guide is all on how to install VNC Server on Rocky Linux 8.
You can use a more secure way of logging into to a remote desktop via VNC using SSH by following the link below.