[solved] TigerVNC cannot start via systemct: Failed to execute /sbin/runuser: Permission denied

Ask Fedora
, ,
1

I am following the docs and coming stuck when I am starting the server:

root in /etc/tigervnc
√ systemctl start vncserver@:3.service
Job for vncserver@:3.service failed because the control process exited with error code.
See "systemctl status vncserver@:3.service" and "journalctl -xeu vncserver@:3.service" for details.

root in /etc/tigervnc
✗ systemctl status vncserver@:3.service
× vncserver@:3.service - Remote desktop service (VNC)
     Loaded: loaded (/etc/systemd/system/vncserver@.service; disabled; preset: disabled)
    Drop-In: /usr/lib/systemd/system/service.d
             └─10-timeout-abort.conf
     Active: failed (Result: exit-code) since Wed 2023-10-04 16:10:22 BST; 6s ago
    Process: 301352 ExecStartPre=/usr/libexec/vncsession-restore :3 (code=exited, status=0/SUCCESS)
    Process: 301363 ExecStart=/sbin/runuser -l yg -c /usr/bin/vncserver :3 -geometry 1280x1024 (code=exited, status=203>
        CPU: 15ms

Oct 04 16:10:22 berserk systemd[1]: Starting vncserver@:3.service - Remote desktop service (VNC)...
Oct 04 16:10:22 berserk (runuser)[301363]: vncserver@:3.service: Failed to execute /sbin/runuser: Permission denied
Oct 04 16:10:22 berserk (runuser)[301363]: vncserver@:3.service: Failed at step EXEC spawning /sbin/runuser: Permission>
Oct 04 16:10:22 berserk systemd[1]: vncserver@:3.service: Control process exited, code=exited, status=203/EXEC
Oct 04 16:10:22 berserk systemd[1]: vncserver@:3.service: Failed with result 'exit-code'.
Oct 04 16:10:22 berserk systemd[1]: Failed to start vncserver@:3.service - Remote desktop service (VNC).

root in /etc/tigervnc took 2s

What am I doing wrong?

2

I'm trying to run a remote desktop without monitor but i cannot find out how it works - #4 by vgaetera

3

Sadly, this is what I am doing with no luck:

root in /etc/tigervnc
√ cat /etc/tigervnc/vncserver.users
# TigerVNC User assignment
#
# This file assigns users to specific VNC display numbers.
# The syntax is <display>=<username>. E.g.:
#
# :2=andrew
# :3=lisa
:3=yg

root in /etc/tigervnc
√ systemctl restart vncserver@:3.service
Job for vncserver@:3.service failed because the control process exited with error code.
See "systemctl status vncserver@:3.service" and "journalctl -xeu vncserver@:3.service" for details.

root in /etc/tigervnc
✗ systemctl status vncserver@:3.service
× vncserver@:3.service - Remote desktop service (VNC)
     Loaded: loaded (/etc/systemd/system/vncserver@.service; disabled; preset: disabled)
    Drop-In: /usr/lib/systemd/system/service.d
             └─10-timeout-abort.conf
     Active: failed (Result: exit-code) since Thu 2023-10-05 08:49:04 BST; 7s ago
    Process: 323815 ExecStartPre=/usr/libexec/vncsession-restore :3 (code=exited, status=0/SUCCESS)
    Process: 323826 ExecStart=/sbin/runuser -l yg -c /usr/bin/vncserver :3 -geometry 1280x1024 (code=exited, status=203>
        CPU: 16ms

Oct 05 08:49:04 berserk systemd[1]: Starting vncserver@:3.service - Remote desktop service (VNC)...
Oct 05 08:49:04 berserk (runuser)[323826]: vncserver@:3.service: Failed to execute /sbin/runuser: Permission denied
Oct 05 08:49:04 berserk (runuser)[323826]: vncserver@:3.service: Failed at step EXEC spawning /sbin/runuser: Permission>
Oct 05 08:49:04 berserk systemd[1]: vncserver@:3.service: Control process exited, code=exited, status=203/EXEC
Oct 05 08:49:04 berserk systemd[1]: vncserver@:3.service: Failed with result 'exit-code'.
Oct 05 08:49:04 berserk systemd[1]: Failed to start vncserver@:3.service - Remote desktop service (VNC).

All I really want is the ability to run chrome on a localmachine instead of my laptop. Maybe VNC is not the best idea here… :thinking:

4 
sudo rm -f /etc/systemd/system/vncserver@.service
sudo systemctl daemon-reload
sudo systemctl enable vncserver@:3.service
sudo systemctl restart vncserver@:3.service

The documentation is apparently outdated.
Follow the linked post, it works for me.

5

@vgaetera Thank you, I am now getting somewhere.

However, the vncviewer gives me an connection dropped. The firewall rules were changed in the remote host.

screenshot

PS: your help is much appreciated!

6

Be sure to connect to the port 590X where X is the configured display number.
Verify that the service is listening the port and the client is reaching the server:

sudo ss -lnpAinet | grep -e :590[0-9]
sudo tcpdump -evnni any tcp portrange 5900-5909
1 Like
7

I need more coffee before I debug things… All sorted.

vncviewer 192.168.1.83:5903

That was the correct command. :person_facepalming:

@vgaetera Thank you very much indeed. Your help us super appreciated. All the best.

1 Like