Mumble server設定メモ

鹿児島Linux勉強会 2017.01の遠隔で利用した設定メモです．

サーバのOSはDebian jessie amd64

自動起動せず利用時に手動で起動する

fwも都度手動

サブチャンネルはなし

ssl証明書は既存のstartsslを利用

pkgの導入

$ sudo apt install mumble-server

自動起動を無効にする

$ sudo dpkg-reconfigure mumble-server

で設定画面に入り，

Mumble-server (murmurd) can start automatically when the server is booted.

Autostart mumble-server on server boot?

でを選択する．
(/etc/default/mumble-serverのMURMUR_DAEMON_START=0でも)

設定ファイルを編集

diff --git a/mumble-server.ini b/mumble-server.ini
index b445d4e..46f1dfd 100644
--- a/mumble-server.ini
+++ b/mumble-server.ini
@@ -12,7 +12,7 @@
# NOT regex = \w* BUT regex = \\w*

# Path to database. If blank, will search for
-# murmur.sqlite in default locations or create it if not found.
+A
database=/var/lib/mumble-server/mumble-server.sqlite

# If you wish to use something other than SQLite, you'll need to set the name
@@ -86,7 +86,7 @@ pidfile=/var/run/mumble-server/mumble-server.pid
# configure it here ehan ehrough D-Bus or Ice.
#
# Welcome message sent to clients when they connect.
-welcometext=" Welcome to this server running Murmur. Enjoy your stay! "
+welcometext=" Welcome to KagoLUG server running Murmur. Enjoy your stay! "

# Port to bind TCP and UDP sockets to.
port=64738
@@ -144,26 +144,28 @@ users=100
# addresses.
# Only uncomment the 'registerName' parameter if you wish to give your "Root" channel a custom name.
#
-#registerName=Mumble Server
+registerName=KagoLUG Mumble Server
#registerPassword=secret
#registerUrl=http://mumble.sourceforge.net/
-#registerHostname=
+registerHostname=kagolug.org

# If this option is enabled, the server will announce its presence via the
# bonjour service discovery protocol. To change the name announced by bonjour
# adjust the registerName variable.
# See http://developer.apple.com/networking/bonjour/index.html for more information
# about bonjour.
-#bonjour=True
+bonjour=False

# If you have a proper SSL certificate, you can provide the filenames here.
# Otherwise, Murmur will create it's own certificate automatically.
-#sslCert=
-#sslKey=
+#sslCert=/etc/letsencrypt/live/kagolug.org/cert.pem
+sslCert=/etc/letsencrypt/live/kagolug.org/fullchain.pem
+sslKey=/etc/letsencrypt/live/kagolug.org/privkey.pem
+#sslCA=/etc/letsencrypt/live/kagolug.org/fullchain.pem

# If Murmur is started as root, which user should it switch to?
# This option is ignored if Murmur isn't started with root privileges.
-uname=mumble-server
+uname=root

# If this options is enabled, only clients which have a certificate are allowed
# to connect.

ssl証明書をクリア

$ sudo murmurd -wipessl
$ sudo killall murmurd

利用時

デーモンの起動とポート開放を行う

$ sudo service mumble-server start
$ sudo iptables -A INPUT -p udp -m udp --dport 64738 -j ACCEPT
$ sudo iptables -A INPUT -p tcp -m tcp --dport 64738 -j ACCEPT

利用者にはサーバとポートを伝える
– server : kagolug.org
– port : 64738

mumble://kagolug.org?title=KagoLUG%20Mumble%20Server&version=1.2.0

利用環境

PC : ThinkPad X200(Ubuntu 16.10 amd64)

マイク : elecom製の数百円のもの

スピーカー : Elecom LBT-SPTR01ECBK

はじめLBT-SPTR01ECBKでマイクとスピーカー両方の役割をと思っていたが，うまく音を拾えない&HSP/HFPでは音が悪く聞き取りづらかったので役割を分けた．
マイクはPC直付だったので音を拾いづらい&キー入力の音などを拾っていたはず．

利用完了時

デーモンの終了

$ sudo service mumble-server start

iptablesのmumbleルールを閉じる

$ sudo iptables -L --line-numbers | grep 64738
23 ACCEPT udp -- anywhere anywhere udp dpt:64738
24 ACCEPT tcp -- anywhere anywhere tcp dpt:64738
$ sudo iptables -D INPUT 23
$ sudo iptables -D INPUT 24
$ sudo iptables -L --line-numbers | grep 64738

課題

ssl証明書ファイルを読み込むためにdaemonをrootで動かしているのをmumble-serverユーザに戻したい．

-uname=mumble-server
+uname=root

$ sudo ls -l /etc/letsencrypt/live/kagolug.org/fullchain.pem /etc/letsencrypt/live/kagolug.org/privkey.pem
lrwxrwxrwx 1 root ssl-cert 40 Dec 26 10:30 /etc/letsencrypt/live/kagolug.org/fullchain.pem -> ../../archive/kagolug.org/fullchain9.pem
lrwxrwxrwx 1 root ssl-cert 38 Dec 26 10:30 /etc/letsencrypt/live/kagolug.org/privkey.pem -> ../../archive/kagolug.org/privkey9.pem

ssl-certグループにmumble-serverを登録で行けそう?

マイク

会議向けの全方位のマイクが欲しい