How to configure WSL-related services after upgrading Landscape
This guide is only for those who’ve upgraded from Landscape 23.10 or earlier.
This guide describes how to configure an upgraded Landscape beta version to enable WSL-related services. This applies to users upgrading from an existing beta version or stable version. If this is your first time installing Landscape Beta, you don’t need to perform these steps.
Update the service.conf file
Open the service.conf file located in the /etc/landscape directory and add the following lines:
[broker]
hostagent_virtual_host = landscape-hostagent
hostagent_task_queue = landscape-server-hostagent-task-queue
[grpc]
grpc.max_connection_age_ms = 2592000000 # 30 days
[hostagent-message-consumer]
threads = 1
stores = main account-1
Update your Apache config
Open your Apache config (commonly located in /etc/apache2/sites-available/{hostname}.conf) and add the following lines at the end:
Listen 6554
<VirtualHost *:6554>
ServerName ${hostname}
ServerAdmin webmaster@${hostname}
ErrorLog /var/log/apache2/landscape_error.log
CustomLog /var/log/apache2/landscape_access.log combined
SSLEngine On
SSLCertificateFile ${ssl_certificate_crt}
SSLCertificateKeyFile ${ssl_certificate_key}
# Disable to avoid POODLE attack
SSLProtocol all -SSLv3 -SSLv2 -TLSv1
SSLHonorCipherOrder On
SSLCompression Off
SSLCipherSuite EECDH+AESGCM+AES128:EDH+AESGCM+AES128:EECDH+AES128:EDH+AES128:ECDH+AESGCM+AES128:aRSA+AESGCM+AES128:ECDH+AES128:DH+AES128:aRSA+AES128:EECDH+AESGCM:EDH+AESGCM:EECDH:EDH:ECDH+AESGCM:aRSA+AESGCM:ECDH:DH:aRSA:HIGH:!MEDIUM:!aNULL:!NULL:!LOW:!3DES:!DSS:!EXP:!PSK:!SRP:!CAMELLIA:!DHE-RSA-AES128-SHA:!DHE-RSA-AES256-SHA:!aECDH
# If you have either an SSLCertificateChainFile or, a self-signed CA signed certificate
# uncomment the line below.
# Note: Some versions of Apache will not accept the SSLCertificateChainFile
# directive. Try using SSLCACertificateFile instead
# SSLCertificateChainFile /etc/ssl/certs/landscape_server_ca.crt
ProxyPass / h2c://localhost:50051/
ProxyPassReverse / http://localhost:50051/
</VirtualHost>
Then enable proxy_http2:
sudo a2enmod proxy_http2
You can see a full Apache config example with details in our how to configure the web server guide.
Add a virtual host to RabbitMQ
Add a new virtual host to RabbitMQ using the following commands:
sudo rabbitmqctl add_vhost landscape-hostagent
sudo rabbitmqctl set_permissions -p landscape-hostagent landscape ".*" ".*" ".*"
The ".*" characters in the set_permissions command are regular expressions that match any character. They grant all permissions (configure, write, read) on all resources (exchanges, queues, bindings, etc.) to the landscape user for the landscape-hostagent virtual host.
Restart the services
Restart the Landscape services:
sudo service landscape-hostagent-messenger restart
sudo service landscape-hostagent-consumer restart
Done! Now you’re ready to use WSL with Landscape. If you want instructions on setting up your environment, see how to set up an environment to use WSL with Landscape. If you already have a Windows machine set up with WSL and Ubuntu, see how to set up Ubuntu Pro for WSL and register WSL hosts to Landscape.