Manuale di Debian Edu / Skolelinux Bullseye 11

Data di pubblicazione: 31/01/2024

deb http://deb.debian.org/debian/ bullseye main 
deb http://security.debian.org bullseye-security main 
d-i    pkgsel/include string miei-pacchetti-extra
  $ sudo apt update
  $ sudo apt install task-desktop-xfce lightdm education-menus
  ### after installation, run 'sudo service lightdm start'
  ### login as first user
/usr/share/debian-edu-config/tools/gosa-modify-host <hostname> <IP>
root@tjener:~# sitesummary2ldapdhcp -a -i ether-22:11:33:44:55:ff
info: Create GOsa machine for am-2211334455ff.intern [10.0.16.21] id ether-22:11:33:44:55:ff.

Enter password if you want to activate these changes, and ^c to abort.

Connecting to LDAP as cn=admin,ou=ldap-access,dc=skole,dc=skolelinux,dc=no
enter password: ********
root@tjener:~#
LC_ALL=C apt full-upgrade -y
$ sudo rdiff-backup -r <date>  \
   /skole/backup/tjener/skole/tjener/home0/user \
   /skole/tjener/home0/user_<date>
apt update
apt full-upgrade
apt clean
sed -i 's/buster/bullseye/g' /etc/apt/sources.list
sed -i 's#/debian-security bullseye/updates# bullseye-security#g' /etc/apt/sources.list
export LC_ALL=C        # optional (to get English output)
apt update
apt full-upgrade
cf-agent -v -D installation
service squid restart
apt install debian-edu-artwork-homeworld
apt purge debian-edu-artwork-buster      # unless Buster artwork should be kept as an alternative
rm -f /etc/xdg/xfce4/panel/default.xml.cfsaved
mv /etc/xdg/xfce4/panel/default.xml.dpkg-new /etc/xdg/xfce4/panel/default.xml
rm -f /etc/default/tftpd-hpa        # to remove no longer needed modifications
rm -rf /var/lib/tftpboot            # to remove no longer used tftp base directory
dpkg-reconfigure -p low tftpd-hpa   # first prompt: keep ''tftp'' as system account, second: change TFTP root directory to ''/srv/tftp''
                                    # third: keep address and port, last one: enter ''--secure'' as additional option 
service tftpd-hpa restart
rm -rf /opt/ltsp                    # cleanup old LTSP base directory
# The next steps will need quite some execution time.
debian-edu-ltsp-install --arch amd64 --diskless_workstation no thin_type bare   # if 64-Bit thin client support is wanted
debian-edu-ltsp-install --arch i386 --diskless_workstation no thin_type bare    # if 32-Bit thin client support is wanted
debian-edu-ltsp-install --diskless_workstation yes   # to create diskless workstation image from the server's file system
debian-edu-pxeinstall                                # to add PXE installation files and related iPXE menu items 
dn: cn=dhcp,cn=tjener,ou=servers,ou=systems,dc=skole,dc=skolelinux,dc=no
changetype: modify
add: dhcpOption
dhcpOption: space ipxe
dhcpOption: ipxe-encap-opts code 175 = encapsulate ipxe
dhcpOption: ipxe.menu code 39 = unsigned integer 8
dhcpOption: ipxe.no-pxedhcp code 176 = unsigned integer 8
dhcpOption: arch code 93 = unsigned integer 16  
81 cn=intern,cn=dhcp,cn=tjener,ou=servers,ou=systems,dc=skole,dc=skolelinux,dc=no
83 cn=subnet00.intern,cn=dhcp,cn=tjener,ou=servers,ou=systems,dc=skole,dc=skolelinux,dc=no
85 cn=subnet01.intern,cn=dhcp,cn=tjener,ou=servers,ou=systems,dc=skole,dc=skolelinux,dc=no
etckeeper vcs log
etckeeper vcs status
etckeeper vcs diff
etckeeper vcs add .
etckeeper vcs commit -a
man etckeeper
etckeeper vcs log
etckeeper vcs status
etckeeper vcs commit -a /etc/resolv.conf
lvextend -L30G /dev/vg_system/skole+tjener+home0
resize2fs /dev/vg_system/skole+tjener+home0
ldapvi --ldap-conf -ZD '(cn=admin)'
/srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)
/srv/nfs4/home0  gss/krb5i(rw,sync,no_subtree_check)
host: ldap.intern
port: 636
Security level: ssl + user + password
User dn: cn=admin,ou=ldap-access,dc=skole,dc=skolelinux,dc=no
echo "deb http://deb.debian.org/debian/ bullseye-backports main" >> /etc/apt/sources.list
apt-get update
apt install -t bullseye-backports tuxtype
aggiungere apt-cdrom
apt update
apt full-upgrade
  #!/bin/sh
  PATH=/usr/sbin:$PATH
  export PATH
  sitesummary-nodes -w
  #!/bin/sh
  PATH=/usr/sbin:$PATH
  export PATH
  netgroup -h shutdown-at-night-hosts
 #!/bin/bash
 home_path="/skole/tjener/home0"
 shared_folder="assignments"
 permissions="2770"
 created_dir=0
 for home in $(ls $home_path); do
    if [ ! -d "$home_path/$home/$shared_folder" ]; then
        mkdir $home_path/$home/$shared_folder
        chmod $permissions $home_path/$home/$shared_folder
        #set the right owner and group
        #"username" = "group name" = "folder name"
        user=$home
        group=teachers
        chown $user:$group $home_path/$home/$shared_folder
        ((created_dir+=1))
    else
        echo -e "the folder $home_path/$home/$shared_folder already exists.\n"
    fi
 done
 echo "$created_dir folders have been created"
    root@tjener:~# showmount -e nas-server
    Export list for nas-server:
    /storage         10.0.0.0/8
    root@tjener:~#
    add cn=nas-server,ou=auto.skole,ou=automount,dc=skole,dc=skolelinux,dc=no
    objectClass: automount
    cn: nas-server
    automountInformation: -fstype=autofs --timeout=60 ldap:ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no

    add ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no
    objectClass: top
    objectClass: automountMap
    ou: auto.nas-server

    add cn=/,ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no
    objectClass: automount
    cn: /
    automountInformation: -fstype=nfs,tcp,rsize=32768,wsize=32768,rw,intr,hard,nodev,nosuid,noatime nas-server.intern:/&
+ : alice jane bob john : ALL
+ : ALL : 10.0.0.0/8 192.168.0.0/24 192.168.1.0/24
- : ALL : ALL
#
apt update
/usr/share/debian-edu-config/tools/install-task-pkgs
/usr/share/debian-edu-config/tools/improve-desktop-l10n
apt update
apt install libdvd-pkg
apt update && apt search ^firmware-
apt -y -q install firmware-linux
debian-edu-ltsp-install --diskless_workstation yes
/usr/share/debian-edu-config/tools/ltsp-addfirmware -h
ltsp image x2go-bare-amd64
debian-edu-ltsp-install --arch i386 --thin_type bare
debian-edu-ltsp-initrd
#add the skole projects local repository
d-i     apt-setup/local1/repository string      http://example.org/debian stable main contrib non-free
d-i     apt-setup/local1/comment string         Example Software Repository
d-i     apt-setup/local1/source boolean         true
d-i     apt-setup/local1/key    string          http://example.org/key.asc
 #!/bin/bash
 # Script to compile / recompile xrdp PulseAudio modules.
 # The caller needs to be root or a member of the sudo group.
 # Also, /etc/apt/sources.list must contain a valid deb-src line.
 set -e
  if [[ $UID -ne 0 ]] ; then  
     if ! groups | egrep -q sudo ; then
         echo "ERROR: You need to be root or a sudo group member."
         exit 1
     fi
 fi
 if ! egrep -q  ^deb-src /etc/apt/sources.list ; then
     echo "ERROR: Make sure /etc/apt/sources.list contains a deb-src line."
     exit 1
 fi
 TMP=$(mktemp -d)
 PULSE_UPSTREAM_VERSION="$(dpkg-query -W -f='${source:Upstream-Version}' pulseaudio)"
 XRDP_UPSTREAM_VERSION="$(dpkg-query -W -f='${source:Upstream-Version}' xrdp)"
 sudo apt -q update
 # Get sources and build dependencies:
 sudo apt -q install dpkg-dev
 cd $TMP
 apt -q source pulseaudio xrdp
 sudo apt -q build-dep pulseaudio xrdp
 # For pulseaudio 'configure' is all what is needed:
 cd pulseaudio-$PULSE_UPSTREAM_VERSION/
 ./configure
 # Adjust pulseaudio modules Makefile (needs absolute path)
 # and build the pulseaudio modules.
 cd $TMP/xrdp-$XRDP_UPSTREAM_VERSION/sesman/chansrv/pulse/
 sed -i 's/^PULSE/#PULSE/' Makefile
 sed -i "/#PULSE_DIR/a \
 PULSE_DIR = $TMP/pulseaudio-$PULSE_UPSTREAM_VERSION" Makefile
 make
 # Copy modules to Pulseaudio modules directory, adjust rights.
 sudo cp *.so /usr/lib/pulse-$PULSE_UPSTREAM_VERSION/modules/
 sudo chmod 644 /usr/lib/pulse-$PULSE_UPSTREAM_VERSION/modules/module-xrdp*
 # Restart xrdp, now with sound enabled.
 sudo service xrdp restart
C:\Program Files\pGina.fork\Plugins\pGina.Plugin.Ldap.dll

Tabella dei servizi
Descrizione del servizio	Nome comune	Nome DNS del servizio
Log centralizzato	rsyslog	syslog
Servizio dei nomi di dominio	DNS (BIND)	domain
Configurazione automatica della rete per le macchine	DHCP	bootps
Sincronizzazione dell'orologio	NTP	ntp
Directory home via Network File System	SMB / NFS	homes
Sistema di posta elettronica	IMAP (Dovecot)	postoffice
Servizio di directory	OpenLDAP	ldap
Amministrazione degli utenti	GOsa²	---
Server web	Apache/PHP	www
Backup centrale	sl-backup, slbackup-php	backup
Cache web	Proxy (Squid)	webcache
Stampa	CUPS	ipp
Login remoto sicuro	OpenSSH	ssh
Configurazione automatica	CFEngine	cfengine
LTSP Server	LTSP	ltsp
Controllo delle macchine e dei servizi con segnalazione degli errori, più lo stato e cronologia su web. Segnalazione degli errori attraverso la posta elettronica	Munin, Icinga e Sitesummary	sitesummary

Lingua (regione):	Valore locale:	Disposizione di tastiera:
Norvegese bokmål	nb_NO.UTF-8	no
Norvegese nynorsk	nn_NO.UTF-8	no
Tedesco	de_DE.UTF-8	de
Francese (Francia)	fr_FR.UTF-8	fr
Greco (Grecia)	el_GR.UTF-8	el
Giuapponese	ja_JP.UTF-8	jp
Sami settentrionale (Norvegia)	se_NO	no(smi)

Manuale di Debian Edu / Skolelinux Bullseye 11

Data di pubblicazione: 31/01/2024

1. Manuale per Debian Edu 11 Nome in codice Bullseye

2. Debian Edu e Skolelinux

2.1. Un po' di storia e il perché di due nomi

3. Architettura

3.1. La rete

3.1.1. La configurazione predefinita della rete

3.1.2. Server principale

3.1.3. Servizi attivi sul server principale

3.1.4. LTSP server

3.1.5. Thin-client

3.1.6. Workstation senza dischi

3.1.7. Client di rete

3.2. Amministrazione

3.2.1. Installazione

3.2.2. Configurazione dell'accesso al file system

4. Requisiti tecnici

4.1. Requisiti hardware

4.2. Hardware che funziona

5. Requisiti per la configurazione della rete

5.1. Setup di default

5.2. Router Internet

6. Installare e scaricare

6.1. Dove trovare maggiori informazioni

6.2. Scaricare il supporto di installazione per Debian Edu 11 nome in codice Bullseye

6.2.1. amd64 o i386

6.2.2. immagine iso netinst per amd64 o i386

6.2.3. Immagini iso BD per i386 o amd64

6.2.4. Verifica dei file immagine scaricati

6.2.5. Sorgenti:

6.3. Installare Debian Edu

6.3.1. Scenari di installazione del server principale

6.3.2. Ambienti desktop

6.3.3. Installazione modulare

6.3.4. Tipi di installazione e opzioni

6.3.5. Il processo d'installazione

6.3.6. Note su alcune caratteristiche

6.3.6.1. Una nota sui notebook

6.3.6.2. Una nota sull'installazione dell'immagine da flash drive USB / Blu-ray disc

6.3.6.3. Una nota sull'installazione da CD

6.3.7. Installazione da flash drive USB al posto di CD /Blu-ray disc

6.3.8. Installazione e avvio da rete via PXE

6.3.9. Modificare le installazioni PXE

6.3.10. Immagini personalizzate

6.4. Screenshot

7. Iniziare

7.1. I passi essenziali per iniziare

7.1.1. Servizi attivi sul server principale

7.2. Introduzione a GOsa²

7.2.1. Accesso a GOsa² e pagina iniziale

7.3. Gestione degli utenti con GOsa²

7.3.1. Aggiungere utenti

7.3.2. Cercare, modificare e cancellare utenti

7.3.3. Impostare le password

7.3.4. Gestione avanzata degli utenti

7.4. Gestione dei gruppi con GOsa²

7.5. Gestione delle macchine con GOsa²

7.5.1. Cercare e cancellare macchine

7.5.2. Modificare macchine esistenti / Gestione dei Netgroup

8. Amministrazione delle stampanti

8.1. Utilizzare stampanti collegate alle workstation

8.2. Stampanti di rete

9. Sincronizzazione dell'orologio

10. Allargare le partizioni piene

11. Manutenzione

11.1. Aggiornare il software

11.1.1. Tenersi informati sugli aggiornamenti di sicurezza

11.2. Gestione dei backup

11.3. Monitorare il server

11.3.1. Munin

11.3.2. Icinga

11.3.2.1. Avvisi comuni di Icinga e come gestirli

11.3.2.1.1. DISK CRITICAL - free space: /usr 309 MB (5% inode=47%):

11.3.2.1.2. APT CRITICAL: 13 packages available for upgrade (13 critical updates).

11.3.2.1.3. WARNING - Reboot required : running kernel = 2.6.32-37.81.0, installed kernel = 2.6.32-38.83.0

11.3.2.1.4. WARNING: CUPS queue size - 61

11.3.3. Sitesummary

11.4. Maggiori informazioni per personalizzare Debian Edu

12. Aggiornamenti