1. 背景使用Linux发行版最不方便的地方就是缺少一些软件，借助远程桌面工具我们可以很方便的远程Windows来解决常用软件缺失的问题

对于远程桌面，个人需求是

方便快捷的连接方式

高清晰度的远程画面（内网）

支持音频传输（QQ音乐VIP会员的血泪）

支持文字/图片复制粘贴

这些都是原生RDP协议就可以做到的，我自己使用的Linux发行版是Manjaro系统，桌面环境选择的是Gnome3

在Linux下远程Windows可以使用基于RDP协议的软件如最常见的Remmina以及Gnome桌面下的Vinagre软件、Rdesktop软件等

2. 方案2.1. Remmina

Use other desktops remotely, from a tiny screen or large monitors.

官网链接：https://remmina.org/contributing-to-remmina/

remmina是我最喜欢的远程桌面软件之一，功能非常全面，支持的协议包括但不限于RDP、VNC、SPICE、NX、XDMCP、SSH等等，同时也兼顾非常优秀的界面

支持非常复杂的远程协议配置选项

各个操作系统的安装方式可以参考官方Wiki文档 - How to install remmina

Manjaro下安装Remmina非常简单，只需要使用

sudo pacman -S remmina

# 如果要支持RDP协议，则需要安装FreeRDP

sudo pacman -S freerdp

在我看来，Remmina的优点如下

优秀的界面设计（颜值是第一生产力）

远程协议的配置选项丰富足以应对复杂的远程桌面（加密方式/认证方式等修改配置）

强大的软件快捷键，如Ctrl+→可以快速切换远程桌面，这在应对多个远程桌面比Windows自带远程桌面还要优秀

丰富的远程协议支持，不管是SSH还是RDP还是NX等远程协议均可以在一个远程客户端中配置完是非常Geek体验

支持配置文件的导出导入

...

Remmina是一个极其优秀的软件，我放弃使用的原因只有一个，那就是他在Gnome桌面下的表现糟糕

配置的远程桌面（各种协议）多的时候崩溃是家常便饭

RDP协议音频输出到本机的时候播放卡顿（这点实在令人头疼，Google了挺久没有好的解决方法，在Redhat系的发行版上安装却没有这个问题）

复制/粘贴卡顿严重，经常导致我的Chrome直接无相应（同样的在其他发行版上也不会有这种表现）

新建配置使用到一些没有使用过的选项配置时容易崩溃退出还不保存刚才的操作

基于以上表现，在使用过1年多后，我最终还是放弃了这个非常优秀的远程客户端

如果你没有使用过Linux下的远程桌面客户端，那我非常强烈推荐使用Remmina，他在大多数发行版上表现还是非常稳定的

2.2. Vinagre

Vinagre is a VNC, SSH, RDP and SPICE client for the GNOME desktop environment.

Vinagre是基于GNOME桌面环境的一款支持多种远程协议客户端，根据实际体验来看，可以看成是一款剔除掉复杂配置部分的remmina

界面也是相对简洁，跟remmina外观差别不大

其支持自定义话配置少，优点是上手快，缺点是过于简单的配置在应对一些复杂的远程协议配置时无能为力

例如RDP验证方式更改为冷门方式则有可能无法使用这个软件进行连接

对于打印机/音频资源播放选项的支持目前版本也是缺失的

官方文档：Apps/vinagre - Gnome

所以这个软件如果需求只是简单偶尔远程下远程桌面，那么他还是可以胜任的

2.3. Rdesktop

rdesktop is an open source UNIX client for connecting to Windows Remote Desktop Services, capable of natively speaking Remote Desktop Protocol (RDP) in order to present the user's Windows desktop.

rdesktop是一款开源的UNIX客户端，仅支持RDP协议，也支持复杂的协议配置，使用-h可以看到支持配置的选项非常多

rdesktop: A Remote Desktop Protocol client.

Version 1.9.0. Copyright (C) 1999-2016 Matthew Chapman et al.

See http://www.rdesktop.org/ for more information.

Usage: rdesktop [options] server[:port]

-u: user name

-d: domain

-s: shell / seamless application to start remotely

-c: working directory

-p: password (- to prompt)

-n: client hostname

-k: keyboard layout on server (en-us, de, sv, etc.)

-g: desktop geometry (WxH[@DPI][+X[+Y]])

-i: enables smartcard authentication, password is used as pin

-f: full-screen mode

-b: force bitmap updates

-L: local codepage

-A: path to SeamlessRDP shell, this enables SeamlessRDP mode

-V: tls version (1.0, 1.1, 1.2, defaults to negotiation)

-B: use BackingStore of X-server (if available)

-e: disable encryption (French TS)

-E: disable encryption from client to server

-m: do not send motion events

-M: use local mouse cursor

-C: use private colour map

-D: hide window manager decorations

-K: keep window manager key bindings

-S: caption button size (single application mode)

-T: window title

-t: disable use of remote ctrl

-N: enable numlock synchronization

-X: embed into another window with a given id.

-a: connection colour depth

-z: enable rdp compression

-x: RDP5 experience (m[odem 28.8], b[roadband], l[an] or hex nr.)

-P: use persistent bitmap caching

-r: enable specified device redirection (this flag can be repeated)

'-r comport:COM1=/dev/ttyS0': enable serial redirection of /dev/ttyS0 to COM1

or COM1=/dev/ttyS0,COM2=/dev/ttyS1

'-r disk:floppy=/mnt/floppy': enable redirection of /mnt/floppy to 'floppy' share

or 'floppy=/mnt/floppy,cdrom=/mnt/cdrom'

'-r clientname=': Set the client name displayed

for redirected disks

'-r lptport:LPT1=/dev/lp0': enable parallel redirection of /dev/lp0 to LPT1

or LPT1=/dev/lp0,LPT2=/dev/lp1

'-r printer:mydeskjet': enable printer redirection

or mydeskjet="HP LaserJet IIIP" to enter server driver as well

'-r sound:[local[:driver[:device]]|off|remote]': enable sound redirection

remote would leave sound on server

available drivers for 'local':

alsa: ALSA output driver, default device: default

oss: OSS output driver, default device: /dev/dsp or $AUDIODEV

libao: libao output driver, default device: system dependent

'-r clipboard:[off|PRIMARYCLIPBOARD|CLIPBOARD]': enable clipboard

redirection.

'PRIMARYCLIPBOARD' looks at both PRIMARY and CLIPBOARD

when sending data to server.

'CLIPBOARD' looks at only CLIPBOARD.

'-r scard[:"Scard Name"="Alias Name[;Vendor Name]"[,...]]

example: -r scard:"eToken PRO 00 00"="AKS ifdh 0"

"eToken PRO 00 00" -> Device in GNU/Linux and UNIX environment

"AKS ifdh 0" -> Device shown in Windows environment

example: -r scard:"eToken PRO 00 00"="AKS ifdh 0;AKS"

"eToken PRO 00 00" -> Device in GNU/Linux and UNIX environment

"AKS ifdh 0" -> Device shown in Microsoft Windows environment

"AKS" -> Device vendor name

-0: attach to console

-4: use RDP version 4

-5: use RDP version 5 (default)

-o: name=value: Adds an additional option to rdesktop.

sc-csp-name Specifies the Crypto Service Provider name which

is used to authenticate the user by smartcard

sc-container-name Specifies the container name, this is usually the username

sc-reader-name Smartcard reader name to use

sc-card-name Specifies the card name of the smartcard to use

-v: enable verbose logging

简单的使用例子

❯ rdesktop -K -g 1920x1080 10.0.0.3

如果不添加任何配置，默认的rdesktop是不支持Windows组合键的，一些比较重要的参数如下

-K ：支持Windows组合键映射

size ：指定远程桌面的大小

-f ：全屏显示

rdesktop基本符合我的需要了，但我发现在Gnome3上面即使指定了“-K”依旧没有不能使用Win组合键

远程桌面虽然显示有音频输出到remote，但依旧没有任何声音

在简单使用过FreeRDP之后，我打消了深入研究rdesktop的打算

这两个本质上差别不大，FreeRDP在我机器Gnome3上FreeRDP兼容性更好点（没出现任何问题）

2.4. FreeRDP

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license.

FreeRDP是一款开源专用于RDP远程协议的软件，Remmina也是他们的产品

FreeRDP支持的配置非常详细，Remmina的RDP插件也是基于FreeRDP实现的，所以才有非常丰富的配置选项

❯ xfreerdp -h ~

[14:45:40:678] [200347:200347] [ERROR][com.winpr.commandline] - Failed at index 1 [-h]: Missing value

FreeRDP - A Free Remote Desktop Protocol Implementation

See www.freerdp.com for more information

Usage: xfreerdp [file] [options] [/v:[:port]]

Syntax:

/flag (enables flag)

/option: (specifies option with value)

+toggle -toggle (enables or disables toggle, where '/' is a synonym of '+')

/a:[,] Addin

/action-script: Action script

/admin Admin (or console) session

+aero Enable desktop composition

/app: or || Remote application program

/app-cmd: Remote application command-line parameters

/app-file: File to open with remote application

/app-guid: Remote application GUID

/app-icon: Remote application icon for user interface

/app-name: Remote application name for user interface

/app-workdir: Remote application workspace path

/assistance: Remote assistance password

/auto-request-control Automatically request remote assistance

input control

+async-channels Enable Asynchronous channels

(experimental)

+async-input Enable Asynchronous input

+async-update Enable Asynchronous update

/audio-mode: Audio output mode

+auth-only Enable Authenticate only

-authentication Disable Authentication (experimental)

+auto-reconnect Enable Automatic reconnection

/auto-reconnect-max-retries:

Automatic reconnection maximum retries, 0

for unlimited [0,1000]

+bitmap-cache Enable bitmap cache

/bpp: Session bpp (color depth)

/buildconfig Print the build configuration

/cert:[deny,ignore,name:,tofu,fingerprint::

[,fingerprint::]]

Certificate accept options. Use with care!

* deny ... Automatically abort

connection if the certificate does not

match, no user interaction. *

ignore ... Ignore the certificate

checks altogether (overrules all other

options) * name

... Use the alternate

instead of the certificate subject to

match locally stored certificates * tofu

... Accept certificate

unconditionally on first connect and deny

on subsequent connections if the

certificate does not match * fingerprints

... A list of certificate hashes that are

accepted unconditionally for a connection

/cert-deny [deprecated, use /cert:deny] Automatically

abort connection for any certificate that

can not be validated.

/cert-ignore [deprecated, use /cert:ignore] Ignore

certificate

/cert-name: [deprecated, use /cert:name:]

Certificate name

/cert-tofu [deprecated, use /cert:tofu] Automatically

accept certificate on first connect

/client-build-number: Client Build Number sent to server

(influences smartcard behaviour, see

[MS-RDPESC])

/client-hostname: Client Hostname to send to server

-clipboard[:[use-selection:]]

Disable Redirect clipboard.

* use-selection: ... (X11) Specify

which X selection to access. Default is

CLIPBOARD. PRIMARY is the X-style

middle-click selection.

/codec-cache:[rfx|nsc|jpeg] Bitmap codec cache

-compression Disable compression

/compression-level: Compression level (0,1,2)

+credentials-delegation Enable credentials delegation

/d: Domain

-decorations Disable Window decorations

/disp Display control

/drive:, Redirect directory as named share

. Hotplug support is enabled with

/drive:hotplug,*. This argument provides

the same function as "Drives that I plug

in later" option in MSTSC.

+drives Enable Redirect all mount points as shares

/dvc:[,] Dynamic virtual channel

/dynamic-resolution Send resolution updates when the window is

resized

/echo Echo channel

-encryption Disable Encryption (experimental)

/encryption-methods:[40,][56,][128,][FIPS]

RDP standard security encryption methods

/f Fullscreen mode (++

toggles fullscreen)

-fast-path Disable fast-path input/output

+fipsmode Enable FIPS mode

/floatbar[:sticky:[on|off],default:[visible|hidden],show:

[always|fullscreen||window]]

floatbar is disabled by default (when

enabled defaults to sticky in fullscreen

mode)

-fonts Disable smooth fonts (ClearType)

/frame-ack: Number of frame acknowledgement

/from-stdin[:force] Read credentials from stdin. With

the prompt is done before connection,

otherwise on server request.

/g:[:] Gateway Hostname

/gateway-usage-method:[direct|detect]

Gateway usage method

/gd: Gateway domain

/gdi:sw|hw GDI rendering

/geometry Geometry tracking channel

+gestures Enable Consume multitouch input locally

/gfx[:[[RFX|AVC420|AVC444],mask:]]

RDP8 graphics pipeline

/gfx-h264[:[[AVC420|AVC444],mask:]

[DEPRECATED] use /gfx:avc420 instead]

RDP8.1 graphics pipeline using H264 codec

+gfx-progressive Enable RDP8 graphics pipeline using progressive

codec

+gfx-small-cache Enable RDP8 graphics pipeline using small cache

mode

+gfx-thin-client Enable RDP8 graphics pipeline using thin client

mode

+glyph-cache Enable Glyph cache (experimental)

/gp: Gateway password

-grab-keyboard Disable Grab keyboard

-grab-mouse Disable Grab mouse

/gt:[rpc|http|auto] Gateway transport type

/gu:[[\]|[@]]

Gateway username

/gat: Gateway Access Token

/h: Height

-heartbeat Disable Support heartbeat PDUs

/help Print help

+home-drive Enable Redirect user home as share

/ipv6 Prefer IPv6 AAA record over IPv4 A record

/kbd:0x or Keyboard layout

/kbd-lang:0x Keyboard active language identifier

/kbd-fn-key: Function key value

/kbd-list List keyboard layouts

/kbd-lang-list List keyboard languages

/kbd-remap:List of =,... pairs to remap scancodes

Keyboard scancode remapping

/kbd-subtype: Keyboard subtype

/kbd-type: Keyboard type

/load-balance-info: Load balance info

/log-filters::[,:[,...]]

Set logger filters, see wLog(7) for

details

/log-level:[OFF|FATAL|ERROR|WARN|INFO|DEBUG|TRACE]

Set the default log level, see wLog(7) for

details

/max-fast-path-size: Specify maximum fast-path update size

/max-loop-time: Specify maximum time in milliseconds spend

treating packets

+menu-anims Enable menu animations

/microphone[:[sys:,][dev:,][format:,][rate:,]

[channel:]] Audio input (microphone)

/monitor-list List detected monitors

/monitors:[,[,...]] Select monitors to use

-mouse-motion Disable Send mouse motion

/multimon[:force] Use multiple monitors

+multitouch Enable Redirect multitouch input

+multitransport Enable Support multitransport protocol

-nego Disable protocol security negotiation

/network:[modem|broadband|broadband-low|broadband-high|wan|lan|auto]

Network connection type

/nsc NSCodec support

+offscreen-cache Enable offscreen bitmap cache

/orientation:[0|90|180|270] Orientation of display in degrees

+old-license Enable Use the old license workflow (no CAL and

hwId set to 0)

/p: Password

/parallel[:[,]] Redirect parallel device

/parent-window: Parent window id

+password-is-pin Enable Use smart card authentication with

password as smart card PIN

/pcb: Preconnection Blob

/pcid: Preconnection Id

/pheight: Physical height of display (in

millimeters)

/play-rfx: Replay rfx pcap file

/port: Server port

-suppress-output Disable suppress output when minimized

+print-reconnect-cookie Enable Print base64 reconnect cookie after

connecting

/printer[:[,]] Redirect printer device

/proxy:[://][:@]:

Proxy settings: override env. var (see

also environment variable below). Protocol

"socks5" should be given explicitly where

"http" is default.

/pth: Pass the hash (restricted admin mode)

/pwidth: Physical width of display (in millimeters)

/rdp2tcp:

TCP redirection

/reconnect-cookie: Pass base64 reconnect cookie to the

connection

/redirect-prefer:,[...]

Override the preferred redirection order

/relax-order-checks Do not check if a RDP order was announced

during capability exchange, only use when

connecting to a buggy server

/restricted-admin Restricted admin mode

/rfx RemoteFX

/rfx-mode:[image|video] RemoteFX mode

/scale:[100|140|180] Scaling factor of the display

/scale-desktop: Scaling factor for desktop applications

(value between 100 and 500)

/scale-device:100|140|180 Scaling factor for app store applications

/sec:[rdp|tls|nla|ext] Force specific protocol security

+sec-ext Enable NLA extended protocol security

-sec-nla Disable NLA protocol security

-sec-rdp Disable RDP protocol security

-sec-tls Disable TLS protocol security

/serial[:[,[,[,permissive]]]]

Redirect serial device

/shell: Alternate shell

/shell-dir:

Shell working directory

/size:x or %[wh]

Screen size

/smart-sizing[:x] Scale remote desktop to window size

/smartcard[:[,...]] Redirect the smartcard devices containing

any of the in their names.

/smartcard-logon Activates Smartcard Logon authentication.

(EXPERIMENTAL: NLA not supported)

/sound[:[sys:,][dev:,][format:,][rate:,]

[channel:,][latency:,][quality:]]

Audio output (sound)

/span Span screen over multiple monitors

/spn-class: SPN authentication service class

/ssh-agent SSH Agent forwarding channel

/t: