How to configure WSL-related services after upgrading Landscape

Note

This guide is only for those who’ve upgraded from Landscape 23.10 or earlier.

This guide describes how to configure an upgraded Landscape beta version to enable WSL-related services. This applies to users upgrading from an existing beta version or stable version. If this is your first time installing Landscape Beta, you don’t need to perform these steps.

Update the service.conf file

Open the service.conf file located in the /etc/landscape directory and add the following lines:

[broker]
hostagent_virtual_host = landscape-hostagent
hostagent_task_queue = landscape-server-hostagent-task-queue

[grpc]
grpc.max_connection_age_ms = 2592000000  # 30 days

[hostagent-message-consumer]
threads = 1
stores = main account-1

Update your Apache config

Open your Apache config (commonly located in /etc/apache2/sites-available/{hostname}.conf) and add the following lines at the end:

Listen 6554

<VirtualHost *:6554>
  ServerName ${hostname}
  ServerAdmin webmaster@${hostname}

  ErrorLog /var/log/apache2/landscape_error.log
  CustomLog /var/log/apache2/landscape_access.log combined

  SSLEngine On
  SSLCertificateFile ${ssl_certificate_crt}
  SSLCertificateKeyFile ${ssl_certificate_key}
  # Disable to avoid POODLE attack
  SSLProtocol all -SSLv3 -SSLv2 -TLSv1
  SSLHonorCipherOrder On
  SSLCompression Off
  SSLCipherSuite EECDH+AESGCM+AES128:EDH+AESGCM+AES128:EECDH+AES128:EDH+AES128:ECDH+AESGCM+AES128:aRSA+AESGCM+AES128:ECDH+AES128:DH+AES128:aRSA+AES128:EECDH+AESGCM:EDH+AESGCM:EECDH:EDH:ECDH+AESGCM:aRSA+AESGCM:ECDH:DH:aRSA:HIGH:!MEDIUM:!aNULL:!NULL:!LOW:!3DES:!DSS:!EXP:!PSK:!SRP:!CAMELLIA:!DHE-RSA-AES128-SHA:!DHE-RSA-AES256-SHA:!aECDH
  # If you have either an SSLCertificateChainFile or, a self-signed CA signed certificate
  # uncomment the line below.
  # Note: Some versions of Apache will not accept the SSLCertificateChainFile
  # directive. Try using SSLCACertificateFile instead
  # SSLCertificateChainFile /etc/ssl/certs/landscape_server_ca.crt
 
  ProxyPass / h2c://localhost:50051/
  ProxyPassReverse / http://localhost:50051/
</VirtualHost>

Then enable proxy_http2:

sudo a2enmod proxy_http2

You can see a full Apache config example with details in our how to configure the web server guide.

Add a virtual host to RabbitMQ

Add a new virtual host to RabbitMQ using the following commands:

sudo rabbitmqctl add_vhost landscape-hostagent
sudo rabbitmqctl set_permissions -p landscape-hostagent landscape ".*" ".*" ".*"

The ".*" characters in the set_permissions command are regular expressions that match any character. They grant all permissions (configure, write, read) on all resources (exchanges, queues, bindings, etc.) to the landscape user for the landscape-hostagent virtual host.

Restart the services

Restart the Landscape services:

sudo service landscape-hostagent-messenger restart
sudo service landscape-hostagent-consumer restart

Done! Now you’re ready to use WSL with Landscape. If you want instructions on setting up your environment, see How to set up a Windows 11 environment to use WSL with Landscape. If you already have a Windows machine set up with WSL and Ubuntu, see How to set up Ubuntu Pro for WSL and register WSL hosts to Landscape.