Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PCHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
VGSources
Blog

How to Set Up Chrome Remote Desktop on a Linux VPS

A complete guide to running Chrome Remote Desktop on a headless 64-bit Debian or Ubuntu VPS, with Xfce setup, authorization, networking, LAN/VPN restrictions, and troubleshooting commands.
Length10 min Posted Quest giverVGSources Team

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

You can run a graphical Linux desktop on a headless VPS and reach it through Chrome Remote Desktop without opening a public RDP port. The reliable path is to install Google’s Debian package on a 64-bit Debian-based server, add a lightweight X11 desktop (usually Xfce), authorize the host from Chrome Remote Desktop’s SSH setup page, and create a six-digit PIN. Connections are encrypted and normally use outbound service traffic rather than a listener on TCP 3389.

This guide covers Debian and Ubuntu VPSs, including the Xfce session configuration that prevents common blank-screen failures, the exact authorization flow, firewall requirements, LAN/VPN-only policy, and systemd troubleshooting commands.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What you are setting up

A VPS normally has no monitor, keyboard, or desktop session. Chrome Remote Desktop adds a host service and starts an X11 desktop session when you connect from the browser. The remote computer then appears in the Chrome Remote Desktop Remote Access page, and the Linux desktop is rendered inside your local browser window.

This is different from installing a conventional RDP server. You do not need to expose TCP 3389 to the internet for Chrome Remote Desktop. Google’s troubleshooting guidance calls for internet access, outbound UDP with inbound responses, TCP 443 (HTTPS), and TCP/UDP 3478 (STUN). The service establishes an encrypted remote session; Google states, “For your security, all remote desktop sessions are fully encrypted.”

#1 Best Overall
Sale
Gaoye Blue Light Blocking Glasses
  • BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
  • EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
  • COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
  • LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
  • WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.

Prerequisites and compatibility

  • Operating system: a 64-bit Debian-based Linux distribution. Google’s Compute Engine example uses a Debian boot disk; Canonical’s instructions target Ubuntu 22.04 LTS.
  • Access: an account with sudo rights and SSH access to the VPS.
  • Desktop: an X11 desktop environment and window manager. A server image with no graphical packages is not sufficient.
  • Browser: a local computer capable of opening the Chrome Remote Desktop setup and Remote Access pages.
  • Network: outbound connectivity for the host and firewall rules that permit the documented HTTPS, UDP, and STUN traffic.
  • Graphics: do not depend on 3D acceleration. Chrome Remote Desktop does not support 3D graphics acceleration for Linux hosts; disable 3D features in the selected desktop.

Package names and supported releases can change. Before deploying a new server image, verify the current package instructions on the vendor’s page rather than assuming that an old Debian or Ubuntu release remains supported.

Choose a desktop environment before installing

The desktop determines how much CPU, memory, bandwidth, and graphical work the VPS must handle. Google lists Xfce, Cinnamon, GNOME, GNOME Classic, and KDE Plasma as supported choices, provided their session and display-manager configuration is correct and 3D features are avoided.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Desktop When it fits Important considerations
Xfce Best default for a VPS, particularly over a slower connection. Light graphical interface, few animations, and a documented Chrome Remote Desktop setup. Install XScreenSaver to avoid the Light Locker blank-screen problem.
Cinnamon Useful if you already administer Cinnamon or need its workflow. Use a session command that matches the installed desktop and avoid 3D effects. A local session may have to be signed out first.
GNOME or GNOME Classic Suitable when your software or users require GNOME. Disable or avoid 3D features and ensure the session command in the Chrome Remote Desktop file names an installed GNOME session.
KDE Plasma Suitable for an existing KDE-based environment. Configure the correct session and avoid unsupported 3D acceleration. Display-manager conflicts can stop the remote session from starting.

If you have no strong preference, choose Xfce. It is the documented low-overhead option for slower links, not a claim that it has a particular memory or latency benchmark. Official sources do not publish a general CPU, RAM, bandwidth, or latency benchmark for Chrome Remote Desktop on a generic VPS.

Install the Chrome Remote Desktop host package

Connect to the VPS over SSH as the user who will own the remote desktop session. The following repository method is Google’s documented approach for an amd64 Debian-based host.

  1. Install Google’s signing key:

    curl https://dl.google.com/linux/linux_signing_key.pub 
      | sudo gpg --dearmor -o /etc/apt/trusted.gpg.d/chrome-remote-desktop.gpg
  2. Add the stable Chrome Remote Desktop repository for amd64:

    echo "deb [arch=amd64] https://dl.google.com/linux/chrome-remote-desktop/deb stable main" 
      | sudo tee /etc/apt/sources.list.d/chrome-remote-desktop.list
  3. Refresh package metadata:

    sudo apt-get update
  4. Install the host service without waiting for an interactive keyboard-layout prompt:

    Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
    Rank #2
    Windex Gaming Cleaning Wipes, Pre-Moistened Wipes to Instantly Clean all Gaming Gear and Electronics, Resealable Packaging for a Freshness Lock, 25 count (Pack of 1)
    • WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
    • AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
    • PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
    • ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
    • COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
    sudo DEBIAN_FRONTEND=noninteractive apt-get install --assume-yes chrome-remote-desktop

DEBIAN_FRONTEND=noninteractive matters on a headless VM because there is no directly connected keyboard from which to answer the layout question. If you prefer Ubuntu’s package-file method, Canonical documents downloading chrome-remote-desktop_current_amd64.deb and installing it with:

sudo apt-get install --assume-yes ./chrome-remote-desktop_current_amd64.deb

Use one installation method, not both. If the package URL or supported release has changed, follow the current vendor instructions for that release.

Install and configure Xfce

For a new, efficient session, install Xfce and the supporting packages Google specifies:

sudo DEBIAN_FRONTEND=noninteractive 
  apt install --assume-yes xfce4 desktop-base dbus-x11 xscreensaver

Then tell Chrome Remote Desktop exactly which session to start:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
sudo bash -c 'echo "exec /etc/X11/Xsession /usr/bin/xfce4-session" > /etc/chrome-remote-desktop-session'

Disable the LightDM service so it does not compete with the Chrome Remote Desktop session:

sudo systemctl disable lightdm.service

The xscreensaver package is intentional. Xfce’s default Light Locker can leave a Chrome Remote Desktop connection at a blank screen that cannot be unlocked; XScreenSaver avoids that documented failure mode. The optional task-xfce-desktop package installs a fuller Xfce application suite, but it is not required for the basic remote session.

Rank #3
Sale
LISEN Cell Phone Stand Phone Holder for Desk, Office Decor Gadgets for Men
  • Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
  • Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
  • Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
  • ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
  • Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)

Do not enable desktop animations or 3D effects on the VPS. Chrome Remote Desktop’s Linux host does not support 3D graphics acceleration, and such features can prevent the service from starting rather than merely making it slower.

Configure an existing desktop with a per-user session file

If the VPS already contains multiple desktop environments, use a per-user file instead of replacing the system-wide configuration. Chrome Help documents $HOME/.chrome-remote-desktop-session. The command in that file should be based on the Exec= line in the selected desktop’s .desktop file.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For example, a Cinnamon session can be written as:

exec /etc/X11/Xsession 'gnome-session --session=cinnamon'

The exact command must match a desktop environment actually installed on the VPS. Copying a session name from another distribution, or leaving a stale GNOME/Cinnamon command after uninstalling that desktop, produces a service that starts and immediately exits.

Some desktop environments do not permit more than one session at a time. Sign out of a local graphical session before connecting, or select a different environment for the remote host. A display manager that is still controlling the console can also conflict with the headless session; use the Xfce configuration above or adjust the display-manager setup for the environment you selected.

Authorize the VPS and create the access PIN

Package installation alone does not register the VPS to your account. Authorization is performed from the Chrome Remote Desktop setup page on a local computer.

  1. Open the Chrome Remote Desktop setup page in your local browser and choose the SSH setup path.
  2. Select Begin.
  3. Select Next. This step tells the page that the host package is already installed.
  4. Select Authorize and complete the Google account authorization flow shown in the browser.
  5. Copy the Debian Linux command displayed by the page.
  6. Return to the VPS’s SSH terminal and paste that command exactly as shown. Run it as the user who should own the remote desktop, using sudo only where the generated command includes it.
  7. When prompted, create a six-digit PIN. You will enter this PIN whenever you initiate a remote login.

Do not invent a different registration command from an older tutorial. The setup page generates the authorization command for the current host package and account, so it is the authoritative source for this step.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
Ledagic IC+RGBW USB Powered Led Light Bar with App & Remote Control, 2 Pack
  • Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
  • Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
  • 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
  • Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
  • USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC

Connect from the browser

  1. On the local computer, open the Chrome Remote Desktop Remote Access page.
  2. Find the VPS under Remote devices.
  3. Select the VPS and enter the six-digit PIN created during authorization.
  4. Wait for the Xfce (or your selected desktop) session to start. The Linux desktop appears inside the browser.

The first connection can take longer than later connections while the user session and desktop services start. If the device never appears, return to the authorization step and confirm that the generated command completed successfully in the SSH terminal rather than merely being pasted.

Firewall and connectivity requirements

Chrome Remote Desktop uses its own service traffic; it is not the same as exposing an RDP daemon. Do not open a public TCP 3389 rule just because you are connecting to a desktop. Google’s troubleshooting guidance recommends allowing:

  • Outbound UDP and the corresponding inbound UDP responses.
  • TCP 443 for HTTPS.
  • TCP and UDP 3478 for STUN.

Apply these rules to the VPS’s egress firewall, cloud security group, and any corporate or home firewall that filters the host’s traffic. A restrictive network can allow SSH while blocking the UDP or STUN traffic needed for a successful remote session, so “SSH works” does not prove that Chrome Remote Desktop has everything it needs.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Google documents encrypted sessions, but encryption does not remove the need to protect the VPS itself. Keep SSH restricted to your administration network, use a strong account password or key-based login, and treat the six-digit PIN as a credential rather than as a replacement for server hardening.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Restrict connections to a LAN or VPN

Organizations that do not want the host to use internet firewall traversal can disable that feature with Chrome’s managed policy. On Linux, create or edit:

/etc/opt/chrome/policies/managed/RemoteAccessHostFirewallTraversal.json

Set the policy to FALSE:

{
  "RemoteAccessHostFirewallTraversal": false
}

With traversal disabled, plan to provide the required LAN or VPN path yourself. Test the policy in the target managed Chrome environment before deploying it broadly; a policy that is syntactically valid but applied to the wrong managed installation will not produce the intended restriction.

Best Value
Sale
HUANUO FlowLift™ Dual Monitor Stand, Fully Adjustable Gaming Monitor Desk Mount for 13–32″ Computer Screens, Full Motion VESA 75x75/100x100 with C-Clamp & Grommet Base, Each Arm Holds 4.4 to 19.8 lbs
  • Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
  • Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
  • Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
  • Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
  • Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.

Troubleshoot a blank screen or a session that will not start

Check the per-user systemd service

Run these commands over SSH as the account that owns the remote host:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
sudo systemctl status chrome-remote-desktop@$USER
sudo systemctl restart chrome-remote-desktop@$USER

The status output can show an immediate exit, a missing executable, or a permission problem. Restart only after correcting the underlying configuration; repeatedly restarting an invalid session command does not repair it.

Read the host logs

Use journalctl to inspect the service history:

journalctl SYSLOG_IDENTIFIER=chrome-remote-desktop
journalctl SYSLOG_IDENTIFIER=chrome-remote-desktop -e
journalctl SYSLOG_IDENTIFIER=chrome-remote-desktop -b

The first form lists matching messages, -e moves to the newest entries, and -b limits the view to the current boot. Look for the first error after a connection attempt rather than only the final “session exited” message.

Fix a blank screen

  • Confirm that Xfce is installed and that /usr/bin/xfce4-session exists.
  • Confirm that /etc/chrome-remote-desktop-session contains the Xfce command shown earlier, or that the per-user file contains the correct command for your chosen desktop.
  • Install xscreensaver if you are using Xfce, because Light Locker can produce an unlockable blank display.
  • Disable the conflicting LightDM service when following the system-wide Xfce setup.
  • Remove unsupported 3D effects and animations.

Fix an immediate session exit

  • Open both /etc/chrome-remote-desktop-session and ~/.chrome-remote-desktop-session; a per-user file can override the system-wide choice.
  • Ensure the command names a desktop environment installed on this VPS, not one copied from another image.
  • Check the Exec= line of the selected desktop’s .desktop file and use the corresponding Xsession command.
  • Sign out of any local session if the desktop supports only one active session.
  • Restart the service and immediately inspect the current-boot journal.

Fix a host that never appears online

  • Verify that the authorization command from the setup page completed without an error.
  • Check the service status and journal before changing firewall rules.
  • Confirm outbound UDP, HTTPS 443, and STUN 3478 traffic at every firewall layer.
  • Make sure you are viewing the same Google account’s Remote Access page that authorized the VPS.

Operational choices and trade-offs

For a single administrator who needs occasional GUI access, Xfce plus the system-wide session file is the shortest path from a blank Debian or Ubuntu image to a usable browser desktop. It minimizes graphical overhead and avoids the heavier session-management issues that can accompany full GNOME, Cinnamon, or KDE installations.

Use a different desktop when application compatibility or an established team workflow matters more than graphical overhead. In that case, keep the session command explicit, disable 3D features, and test whether the desktop’s display manager allows a headless, single-user session. The choice is about compatibility and resource use; no official source establishes a universal performance ranking or VPS size for these environments.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Final verification checklist

  • The VPS is a supported 64-bit Debian-based system and is reachable by SSH.
  • The Chrome Remote Desktop package installed from the current Debian repository or package instructions.
  • An X11 desktop and window manager are installed.
  • The session file points to an installed environment.
  • XScreenSaver is installed for the documented Xfce setup.
  • LightDM is disabled when using the supplied Xfce configuration.
  • The host was authorized through the browser-generated SSH command.
  • A six-digit PIN was created and stored securely.
  • Remote Access lists the VPS and accepts the PIN.
  • Firewall rules permit the documented outbound and response traffic, or a tested LAN/VPN policy is in place.
  • Systemd status and journal output are clean after a test connection.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More quests from Patch Notes

  1. How to Set Up a RedM (RDR2) Server in 2026: License Key, txAdmin and server.cfg, Step by StepBlog11min
  2. Best RedM (RDR2) Server Hosting in 2026: Comparing Four Hosts on Slots, Memory and PriceBlog10min
  3. How to Host a Mindustry Server in 2026: server-release.jar, Port 6567 and the Commands That MatterBlog7min
Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.