From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Authentication-Results: lists.ozlabs.org; spf=none (mailfrom) smtp.mailfrom=linux.intel.com (client-ip=192.55.52.115; helo=mga14.intel.com; envelope-from=jae.hyun.yoo@linux.intel.com; receiver=) Authentication-Results: lists.ozlabs.org; dmarc=none (p=none dis=none) header.from=linux.intel.com Received: from mga14.intel.com (mga14.intel.com [192.55.52.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by lists.ozlabs.org (Postfix) with ESMTPS id 44KxC45dhbzDqN6 for ; Fri, 15 Mar 2019 04:53:19 +1100 (AEDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga004.jf.intel.com ([10.7.209.38]) by fmsmga103.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 14 Mar 2019 10:53:15 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.58,478,1544515200"; d="scan'208";a="282711617" Received: from yoojae-mobl1.amr.corp.intel.com (HELO [10.7.153.147]) ([10.7.153.147]) by orsmga004.jf.intel.com with ESMTP; 14 Mar 2019 10:53:15 -0700 Subject: Re: Does obmc-ikvm work with bmcweb? To: xiuzhi <1450335857@qq.com>, openbmc , ed , Eddie James References: From: Jae Hyun Yoo Message-ID: Date: Thu, 14 Mar 2019 10:53:15 -0700 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.5.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-BeenThere: openbmc@lists.ozlabs.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Development list for OpenBMC List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Mar 2019 17:53:22 -0000 Hi xiuzhi, These are my repo information: bmcweb: 9474b3788017bddd70e493e2b9b7674be30abc87 phosphor-webui: 511a2bbc5540fccb883b8d0005c2b387a23c9d05 Cherry picked https://gerrit.openbmc-project.xyz/#/c/openbmc/phosphor-webui/+/10268/ libvncserver: 3348a7e42e86dfb98dd7458ad29def476cf6096f obmc-ikvm: 2bc661d34abd1fda92a9d2b256ed88ca0e90d09a I can see working KVM through https://my.bmc.ip.addr/#/server-control/kvm -Jae On 3/13/2019 7:21 PM, xiuzhi wrote: > Hi Jae, Ed, >     I updated the source to openbmc latest version which uses bmcweb > instead of phosphor-rest. >    It seemed that ikvm cannot work on bmcweb. > The websit error: > app.bundle.js:43 Refused to connect to 'wss://192.168.200.132/kvm/0' > because it violates the following Content Security Policy directive: > "default-src 'self'". Note that 'connect-src' was not explicitly set, so > 'default-src' is used as a fallback. > Then I modify the bmcweb file include/security_headers_middleware.hpp L40: >         // The KVM currently needs to load images from base64 encoded > strings. >         // img-src 'self' data: is used to allow that. >         // > https://stackoverflow.com/questions/18447970/content-security-policy-data-not-working-for-base64-images-in-chrome-28 >         res.addHeader("Content-Security-Policy", >                       "default-src 'self'; img-src 'self' data:"); > to: > policy-data-not-working-for-base64-images-in-chrome-28 >         res.addHeader("Content-Security-Policy", >                       "script-src 'self'; img-src 'self' data:"); > > The website erro: > "app.bundle.js:43 WebSocket on-error event" > "WebSocket connection to 'wss://192.168.200.132/kvmws' failed: WebSocket > opening handshake timed out" >   What is wrong with it? >    Best, > Xiuzhi >