9:57 That feeling when you boot up Linux again after using Windows. IDK but I felt kinda relieved at that moment of the video.

Thank you, Chris. I remember the first time I used X11 Forwarding about a decade ago and was utterly amazed.

ssh is great, I once used it to transfer like 13 GB of data (I was transferring my /home folder to another computer), and it worked like a charm.

Holy moly! I remember asking for this video tutorial a couple of months ago. Finally you delivered it. Thank you!!

Chris, I love your videos! I've just switched from Windows to Manjaro Cinnamon - and I'm running everything out of Linux except for Quicken. I've created a KVM Windows virtual machine for sole purpose of running Quicken. I'd like to suggest some video topics that would be especially helpful for me: 1. A whole SERIES on sharing and permissions, 2. A mini-series on creating KVM virtual machines (including raw vs qcow2, BIOS vs OVMF, virtual disk caching, VNC vs Spice, NAT networking vs. bridged networking, integrating NoMachine into the mix, sharing and using mounted drives - in other words, a VERY detailed series of instructional videos), and 3. If you get through the first two and still want more, I'll be happy to add to the list!! Thanks for your assistance so far. I followed your instructions regarding creating a Conky and now have a very useful display on the right side of my display!

Wow, I just realized I haven't done X11 forwarding in over a decade. At one of the places I used to work at, their monitoring software was configured to SSH into Linux, AIX, and Solaris boxes and bring up status windows on a Windows PC for monitoring what was happening in each of their environments. X11 forwarding is a powerful tool when used correctly, but a lot of its previous uses has been replaced by web interfaces and the results have been a mixed bag. That said, just seeing it again has inspired me to take another look at it and see what I can cook up now. Web interfaces for everything built on HTML5 just doesn't do everything efficiently or as well as running an app on a remote host so there's still a good need for it. Thanks Chris, ideas are floating into my head for some of my tasks at work now. :)

You might want to try VcXsrv instead of Xming. Pretty much identical, but VcXsrv is still being updated while Xming was last updated in 2016. The biggest problem with all of this, especially when running an X app over SSH, is remebering what machine the app is actually running on.

Nice video which, unfortunately, showcases the shortcomings of X11 forwarding. Although it's more work to setup, something like XRDP or FreeNX provides a much better experience! Also, since you are covering SSH, SCP is another one that's so very useful!!

I privately manage a few Linux machines via ssh, two remotely from UK to US. All connections are via ssh, sometimes using a tunnel for VNC and proxy browsing or using sftp to display remote file system. On the default Ubuntu file manager (files I think it is called) there is an option to connect using sftp then it shows up in your file manager locations same as local files. This would then make all remote files easily available for editing with any local application. Personally I've never found X11 forwarding very successful. Great videos by the way.

Hello Chris, very informative video, thanks. How would I go about piping say Microsoft Office from my Windows 10 PC over SSH to my Ubuntu Linux laptop, or another Windows 10 PC?

*Chris the best example you should have shown the usage of X11 & SSH would have been on cloud platforms like SSH into a server on AWS or AZURE. ..☺👍*

What about ufw the iptables frontend for beginners?

Great video! Thank you for your help.

I typically ssh-keygen then ssh-copy-id to all my endpoints then create a whiptail script to have a quick menu where I can select a system and on select.... instant ssh connection without entering password. Very helpful when you have a too many raspberries ;-)

Thanks for sharing your expertise. Basically a nice science fair project. If one has issue launching something as simple as a file viewer of a internet browser is little good one can say about it. For server stuff ssh and a good terminal client is more than enough.

wouldn't it be a significantly smoother way to go be to install xrdp and forward rdp over ssh? That's basically how I access my windows machines remotely, and then you can do session resume and stutf.

If all you're using SSH X Forwarding for is to run a file manager, then you can instead just use SFTP or SSHFS instead and use a local file manager application to manage your remote files. This has the benefit that you can copy paste or drag'n'drop files to upload/download files between your local and remote machine and there's no graphic/input latency as the application will be running locally. Also, there are a number of Security issues with doing X11 forwarding if you don't fully trust the server which using SSHFS/SFTP would avoid.

I'm new using the console, I love this trick ))

Could I use x11 forwarding to start gui app when connecting to linux server wich has console only(no graphics shell)

So if I install this X11 server, I can write programs using Xlib and run it on Windows natively?

What do you do on the Linux side to enable X11?

👍🏻 Greetings from Netherland

You should check out Xpra. TLDR: remote programs will not hang when connection breaks. Here is "about" section from their home page: " Xpra is an open-source multi-platform persistent remote display server and client for forwarding applications and desktop screens. It gives you remote access to individual applications or full desktops. On X11, it is also known as screen for X11: it allows you to run programs, usually on a remote host, direct their display to your local machine, and then to disconnect from these programs and reconnect from the same or another machine, without losing any state. It can also be used to forward full desktops, from X11 servers, MS Windows, or Mac OS X. Xpra also allows forwarding of sound, clipboard and printing services. Sessions can be accessed over SSH, or password protected over plain TCP sockets with or without SSL. Xpra is usable over reasonably slow links and does its best to adapt to changing network bandwidth constraints." You'll probably be able to run browser or LibreOffice remotely with Xpra.

Cool, never did this but i think it is possible to setup an hand made container and use this stuff in it, why give the whole system on the wire when you can use namespaces.

Any chance you would make this guide to create a file server to access files remotely (via SSH?) as if I'm connecting my laptop from one home network to another person's home network? I'd like to run a file server at home and share photos and movies between family members over Windows?

Appreciate VNC can be sometimes a wee bit slow but bearing in mind two file managers failed in your demo using X forwarding maybe VNC through an SSH tunnel would be a decent option.

You can run libGL apps if you use swrast mesa using llvmpipe. Might not work super fast, but it will allow apps to actually run. Not sure the state of Xming and if it even has the GLX and Composite extentions. Cygwin does.

Thank you for the intro to new file managers. Could you do a list of useful free and open source software for new Linux users?

How do you find Windows Service for Linux for SSH support? I have Ubuntu installed in it, I tried all the free ones on the App Store and that seemed to be the one that was most compatible, even though I'm not generally a Ubuntu fan.

Chris I'd like to see you do a video about the XDG Base Directory Specification to manage dotfiles instead of dumping them in home. Newer software usually supports it, some things like Gimp were updated to support it past a certain version, some things you can set environment variables to support it (preferable since if these are sourced properly they'll be available through the GUI too) or pass command line args, which means creating an alias / editing GUI shortcut. SSH is one of those "will never support it" things, as is cups. You can do it with an alias and config file, but may have problems because so many things expect ~/.ssh to be there. I am creating a git repo using dotbot to manage my dotfiles and have a couple of scripts for trying to force XDG compliance. The Arch Wiki has a page listing the support of various programs.

I really like your mini xming/SSH/X11 forwarding tutorial. It's going to make life easier accessing my simulation server. Can you you show me how you modified bashrc in putty to reflect what you have here as that makes all the difference in my case running multiple terminal windows. Thanks again in advance.

This is cool Titus.

What mic are you using.?

Your enthusiasm is infectious. Could you do a tutorial on setting up a FTP Server using vsftpd?

I use securecrt on both windows and Linux and I love it

the 2000$ question. do i the performance of the computer its affected while doing the xforward?

To ssh into my raspberry pi from Windows 10 I'm using powershell core with openssh (was already installed on Windows 10 for me) and the bash terminal looks great! That being said I haven't tweaked that terminal with custom fonts or anything so not a valid test but it does work nicely.

Chris Titus Tech well. Yes and no. If you trust your local network and the network you connect to than tunnelling X11 is as safe as tunnelling any other application. How ever the X11 protocols themselves are not considered “safe for internetwork use”. There are a whole heap of security holes in the X11 protocol and it’s why most admins disable it outright in favour of a vnc / OpenVPN setup for tunnelling the main desktop to a remote location (desktop :0 or :1 ). This has less of the issues of X11 but still has some. For any externally accessible ssh service you should employ at least - fail2ban or other logscanner and banner - key only login. Passwords are to easy to brute force / obtain via other means. - a proper firewall (I personally prefer CSF but that quite strict UFW if configured will also work) The reason google-chrome failed is that your X11 was not elevated. So it could not access the cryptographic random function if your remote box. (Something you should not want through X11). Also remember that access to a box is also access to your network. It is often easier to break into a mother box from the inside. I personally use ssh daily and keep on learning more about it (wishing I knew about it when I started working on windows 98 Remote Desktop... it would have saved me a ton of headache).

Hello Chris, thanks for your nice video. Could we use the X11 forwarding protocol to connect to a remote MS windows PC?

For windows i recommend MobaXterm, has X11 forwarding support perfectly working out of the box nothing else needed! For Linux the linux side there is another really neat application called X11Clone which allows you to view your desktop session over ssh. Its basically a secure VNC alternative that does not need open ports other than SSH.

i cant pull up gedit at the 4:50 mark as it states " 'gedit' is not recognized as an internal or external command, operable program or batch file." how can i fix this i have downloaded and installed it on my windows machine as well as my alpine VM?

What happens if you open startx ? Will it load existing x session ? I tried piping x session through SSH but I had to create a script to automate login otherwise the server would just die after a session is closed, can't replicate that script any longer.

20 years ago I noticed that every IP address I had at home was being portscanned by IP addresses in China. Since then I've closed down "classic" ports and used SSH for port forwarding, using only port numbers above 1024 (the higher the better) to make portscans as difficult as possible. Back when Webmin was big, I would put the Webmin HTTPS for each of my machines in order starting at something like 10011 for desktops and 10091 for servers, but have since stopped exposing that to the Internet, and stopped using Webmin. A similar port order for SSH makes it easy to remember the LAN IP by port number using PAT.

I could add many things(that I believe that are missing) here but I would like to add one important thing. On RHEL/CentOS/Fedora systems if we change the port to anything other than the default, we need to update the SELinux rule. We need to update it actually by running semanage port -a -t ssh_port_t -p tcp {your new port number goes here}. Thus if you haven't disabled the SELinux.

Just what I was looking for.

I like that one. Nice Video

Exception in thread "main" java.awt.AWTError: Can't connect to X11 window server

what about linux mint to windows10 through ssh?

8:15 Google Chrome didn't crash. It would probably have worked. Those two were warnings from GTK, not fatal errors. At most there would have been some issues with colors and icons on the browser interface. You already had Google Chrome running in another window, probably on the physical desktop environment, and it used that to launch a new tab or your home page.

apt-get install worker oc the question arises, how do you get X11forwarding type functionality in 2019/20 when you dont run X anymore!

Have you heard of X2Go?

*HI Chris , is it possible to run your own update server to update your own systems for Linux ? And not rely on the community to update or upgrade your personal servers. How could this be done ? Securely, thanks for any advise ☺*

SSH Episide 2: sshkeys. Episode 3: sshfs. Episode 4: Tunnels - x11vnc piped over ssh, local desktop access behind safe, key only, ssh authentication.

i've been using xming, which has an opengl over network option, since my windows 98se days.

You should do a video about sftp file sharing, it is quite usefull in a private network.

thanks for the video

I thought application on SourceForge was safe

Thanks! Would love to see a tutorial on how to connect to ubuntu using RDP from Windows, couldnt make it work

No. Ssh isn't vulnerable unless of course you use a bad password and have password auth enabled.

Ssh is integrated into windows powershell no more putty please

On windows I use cygwin/x . Actual openssh. Works nicely.

any graphical program: Unable to init server: Could not connect: Connection refused Could not parse arguments: Cannot open display:

Can I request a video about setting up a stable Virtual LAN network with a friend over the net for gaming?

The "windows glasses" are slowly coming off.. this video is going to be saved. I will use this to start the storage server.

the only thing i would recommend @christitustech is to use vcxsrv instead of xming, it lets you run some of the more graphical demanding gui programs and it has some more performance tweaks that xming lacks sourceforge.net/projects/vcxsrv/ however both are good but i prefer vcxsrv as its newer and has opengl compatibility :) (still dont try running games over it though!)

Thank you

xrdp any good?

As always, extremely useful video, thanks!

Wow all those browser extensions. Do a video on that.

What do they mean by this: X11 forwarding should be enabled with caution. Users with the ability to bypass file permissions on the remote host (for the user's X autho‐ rization database) can access the local X11 display through the for‐ warded connection. An attacker may then be able to perform activities such as keystroke monitoring. For this reason, X11 forwarding is subjected to X11 SECURITY extension restrictions by default. Please refer to the ssh -Y option and the ForwardX11Trusted directive in ssh_config(5) for more information. (Debian-specific: X11 forwarding is not subjected to X11 SECURITY ex‐ tension restrictions by default, because too many programs currently crash in this mode. Set the ForwardX11Trusted option to “no” to re‐ store the upstream behaviour. This may change in future depending on client-side improvements.)

i just finished setting ssh on windows.... well time to set it up on my phone too i guess!

I have enabled X11Forwarding in the sshd_config, but it still doesn't work for gedit on Linux. nable to init server: Could not connect: Connection refused (org.gnome.gedit:23095): Gtk-WARNING **: 12:12:52.224: cannot open display:

Am using debian 10 buster I have laptop comes with Dual graphics card intel hd520 And Amd radeon r5 m430 As default debian using intel hd 520 and I want to use Amd r5 m439 how i can do that Because I want to use Davinci resolve 16 on my laptop Video editor

To get those more complex programs to run over a remote connections you should at least use VNC instead of just normal X11. It handles the more complicated stuff easier, but it's a full desktop remote control. Also, VNC has no encryption of its own, so you should be piping it through SSH: www.techrepublic.com/article/how-to-connect-to-vnc-using-ssh/ Personally though, I prefer the NX protocol instead. It is much more responsive and tends to even handle 1080p gaming at 60fps over an ethernet cable. Simplest way to use this is to install the proprietary NoMachine version.

This guy would freak out with a nfs share.

Cool, is X11 already active within SSH in Linux environments?

hello how to setup ubuntu desktop environment on AWS EC2 server

Is there a Linux package that is similar to the Windows version of Remote Desktop? I would like to remotely control a Linux box, from a local Linux box. I am currently doing this between two Windows Pro boxes. But I want to escape (divorce myself) from Windows, and am looking for a Linux alternative. Thank you.

I can open gedit via SSH in Windows? I didn't know it and never tried it before. Is X11 forwarding safe?

*Q. How to set up your own private APT PPA REPOSITORY server ? A: ???😐😐*

I have watched almost all your YT Video's. They are awesome.... Great going. Will surely be pleased to watch something on remote-desktop session in Linux. Many people wants Windows Terminal Server type capabilities. Hope you would consider at some point. Thanks in advance and love from India.

Just start at 1:55 and you'll save some of your life. Good guide though.

Why Putty instead of WSL?

FWIW: I think a PPTP & XRDP is a better solution since it enables remote access from any Windows machine. Most of time when I need remote access, its from a windows machine.

You ever get really bored and log into a Linux box from a windows box, the use X11 forwarding to launch VNC to log back into the Windows Box.... No just me.... Ok then.

Have a look at MobaXterm, way better than putty

video actually starts at 1:55

I use mobaxterm is open-source ans free for personal use. Does forwarding auto magically and also has clients for a lot of other programs.

9:58 For Linux enjoyers

Well I've been pronouncing Nautilus the wrong way the whole time.. I say "Nauuu -Tee-Lus"

this version of your studio was cooler.

Just use dns!

video starts at 1:55

Nice Video!!!! X11 Forwarding is perfect xD. From windows you can use MobaXterm to do X11 forwarding. It integrates a X Server as well. mobaxterm.mobatek.net/ Some time ago I needed to change a partition layout to a production linux server and I don't wanted to mesh around with command line interfaces. ssh -Y server gparted & Yes, you can do it with fdisk, but sometimes I need the confidence of seing what will be the layout in a graphical manner. If gparted had a ncurses interface, I will use it. cfdisk seems to be a nice alternative that I hadn't the oportunity to test it.

i want to do

Please... XMing was discontinued ages ago. i suppose some if not all problems you had might just come from this really old X server. So PLEASE check out MobaXTerm, it is an AWESOME X-Server which also has its own SSH terminals + RDP Shells, WSL Shells, Powershell, cmd, XDMCP sessions and whatnot.... a TON of configuration options, not only fonts, window features, you can have your terminals in the program itself or just detach them... an X-Server is automatically when the program starts AND i haven't run into your latency or other problems (i can run KDE Plasma on it no problem for example). Here is the link: mobaxterm.mobatek.net/

I love PuTTY in Winders, but it's rather a piece of crap in Linux, imfo. I just "ssh user@addy" and login that way with shortcuts... not as convenient at first but I'm comfortable with it now. SSH is also great for file exploration and sharing, so much better than the shite that windows has for file sharing, I've not had ANY network file sharing issues since I ditched all the Microshaft crap in the house... with the exception of the one old craptop.

du dürftest was langsammer sprechen in Deusch damit ich die English nicht so gut können genauso Mitkommmen . Ansonsten finde ich das Klasse. Habe dich mal Aboniert. Und vielleicht nutzt du mal das Forum mit und teilst dich dort mit deinen Dingen noch besser aus zusammen .English ist auch Möglich @carrabelloy.de justforfun-gaming.de/

10:00

X11 forwarding sucks, it has always sucked. For some reason, piping the graphics over the ssh loses important graphical items and disables buttons and other clickable items. The best solution when it is absolutely necessary to run GUI programs over an SSH connection is to tunnel VNC. Unfortunately, in some odd cases, VNC is not an option, in which case I recommend calling someone on site and walking them through the buttons to click, etc. while using a screen-share conferencing application.