Debian Edu / Skolelinux is a Linux distribution created by the Debian Edu project. As a Debian Pure Blend distribution it is an official Debian subproject.

For din skole betyder dette, at Skolelinux er en version af Debian, som tilbyder et ud af boksen-miljø for et fuldstændig konfigureret skolenetværk.

Projektet Skolelinux blev grundlagt i Norge den 2. juli 2001 og omkring samme tidspunkt startede Raphaël Hertzog Debian-Edu i Frankrig. Siden 2003 er projekterne forenet, men bevarede begge navne. »Skole« og (Debian-)»Education« er velintegrerede termer i begge regioner.

I dag bruges systemet i flere lande.

Dette afsnit af dokumentationen beskriver netværksarkitekturen og tjenesterne tilbudt af en Skolelinuxdistribution.

Figuren er en tegning af den forventede netværkstopologi. Standardopsætningen for et Skolelinuxnetværk antager, at der er en (og kun en) hovedserver, som tillader inkludering af både normale arbejdsstationer og servere for tynde klienter (med associerede tynde klienter og/eller diskløse arbejdsstationer). Antallet af arbejdsstationer kan være så stort eller småt som du ønsker (startende fra ingen til en helt masse). Det samme gælder for LTSP-serverne, som hver for sig er på et adskilt netværk, så at trafikken mellem klienterne og LTSP-serven ikke påvirker resten af netværkstjenesterne. LTSP er forklaret i detaljer i afsnittet den forbundne hjælp.

Årsagen til, at der kun kan være en hovedserver i hvert skolenetværk er at hovedserveren tilbyder DHCP, og der kan kun være en maskine til dette i hvert netværk. Det er muligt at flytte tjenester fra hovedserveren til andre maskiner ved at opsætte tjenesten på en anden maskine, og efterfølgende opdatere DNS-konfigurationen, pegende DNS-aliasset for den tjeneste til den korrekte computer.

For at forenkel opsætningen af Skolelinux, så afvikles internetforbindelsen over en separat ruter, også kaldt adgangspunkt. se kapitlet Internetruter for detaljer om opsætning af sådant et adgangspunkt, hvis det ikke er muligt at konfigurere en eksisterende som krævet.

Alle Linuxmaskinerne, som er installeret via Skolelinux-installationsprogrammet, vil kunne administreres fra en central computer, højst sandsynlig serveren. Det vil være muligt at logge ind på alle maskiner via SSH, og dermed have fuld adgang til maskinerne. Som administrator skal man afvikle kinit først for at få en Kerberos TGT.

Al brugerinformation opbevares i en LDAP-mappe. Opdateringer af brugerkontoer udføres mod denne database, som bruges af klienter for brugergodkendelse.

Formålet med forskellige profiler er forklaret i kapitlet netværksarkitektur.

If LTSP is intended to be used, take a look at the LTSP Hardware Requirements wiki page.

A list of tested hardware is provided at https://wiki.debian.org/DebianEdu/Hardware/ . This list is not nearly complete

https://wiki.debian.org/InstallingDebianOn is an effort to document how to install, configure and use Debian on some specific hardware, allowing potential buyers to know if that hardware is supported and existing owners to know how get the best out of that hardware.

Når der bruges standardarkitekturen for netværket, så gælder disse regler:

En router/gateway forbundet med internettet på den eksterne grænseflade og kørende på IP-adressen 10.0.0.1 med netmaske 255.0.0.0 på den interne grænseflade, er krævet for at forbinde til internettet.

Routeren skal ikke køre en DHCP-server, den kan køre en DNS-server, dog er dette ikke krævet og vil ikke blive brugt.

In case you already have a router but are unable to configure it as needed (eg because you are not allowed to do so, or for technical reasons), an older computer with two network interfaces can be turned into a gateway between the existing network and the Debian Edu one.

A simple way is to install Debian Edu on this computer; select 'Minimal' as profile during installation.

Efter installationen:

 #!/bin/sh
 # Turn a system with profile 'Minimal' into a gateway/firewall. 
 #
 sed -i 's/auto eth0/auto eth0 eth1/' /etc/network/interfaces
 sed -i '/eth1/ s/dhcp/static/' /etc/network/interfaces
 sed -i '/post-up/d' /etc/network/interfaces
 echo 'address 10.0.0.1' >> /etc/network/interfaces
 echo 'dns-nameservers 10.0.2.2' >> /etc/network/interfaces
 echo 'dns-domain intern' >> /etc/network/interfaces
 hostname -b gateway
 hostname > /etc/hostname
 rm -f /etc/dhcp/dhclient-exit-hooks.d/hostname
 rm -f /etc/dhcp/dhclient-exit-hooks.d/wpad-proxy-update
 rm -f /etc/dhcp/dhclient-exit-hooks.d/fetch-ldap-cert
 rm -f /etc/network/if-up.d/wpad-proxy-update
 sed -i 's/domain-name,//' /etc/dhcp/dhclient-debian-edu.conf
 sed -i 's/domain-search,//' /etc/dhcp/dhclient-debian-edu.conf
 service networking stop
 service networking start
 sed -i 's#NAT=#NAT="10.0.0.0/8"#' /etc/default/enable-nat
 service enable-nat restart
 # You might want a firewall (shorewall or ufw) and traffic shaping.
 #apt update
 #apt install shorewall
 # or
 #apt install ufw
 #apt install wondershaper  

If you need something for an embedded router or accesspoint we recommend using OpenWRT, though of course you can also use the original firmware. Using the original firmware is easier; using OpenWRT gives you more choices and control. Check the OpenWRT webpages for a list of supported hardware.

It is possible to use a different network setup (there is a documented procedure to do this), but if you are not forced to do this by an existing network infrastructure, we recommend against doing so and recommend you stay with the default network architecture.

We recommend that you read or at least take a look at the release notes for Debian Bullseye before you start installing a system for production use. There is more information about the Debian Bullseye release available in its installation manual.

Please give Debian Edu/Skolelinux a try, it should just work.

Det anbefales at læse kapitlerne om udstyrs- og netværkskrav og det om arkitektur før installation på en hovedserver.

Be sure to also read the getting started chapter of this manual, as it explains how to log in for the first time.

For those without a fast Internet connection, we can offer a CD or DVD sent for the cost of the CD or DVD and shipping. Just send an email to cd@skolelinux.no and we will discuss the payment details (for shipping and media). Husk at inkludere leveringsadressen for cd'en eller dvd'en i e-posten.

Når du foretager en installation af Debian Edu, så har du nogle få indstillinger at vælge mellem. Lad det ikke afskrække dig; der er ikke mange. Vi har gjort et godt stykke arbejde med at skjule kompleksiteten i Debian under installationen og efterfølgende. Debian Edu er dog en Debianvariant, og hvis du ønsker det, så er der mere end 57.000 pakker at vælge mellem og en milliard konfigurationsindstillinger. For hovedparten af vores brugere, bør vores standarder være okay. Bemærk venligst: Hvis LTSP skal bruges, så vælge et let skrivebordsmiljø.

deb http://deb.debian.org/debian/ bullseye main 
deb http://security.debian.org/debian-security/ bullseye-security main 

d-i    pkgsel/include string my-extra-package(s)

Teksttilstanden og den grafiske installation er funktionelt identisk - kun fremtoningen er forskellig. Den grafiske tilstand tilbyder muligheden for at bruge musen, og ser selvfølgelig pænere og mere moderne ud. Med mindre at udstyret har problemmer med den grafiske tilstand, så er der ingen grund til ikke at bruge den.

So here is a screenshot tour through a graphical 64-bit Main Server + Workstation + LTSP Server installation and how it looks at the first boot of the main server and a PXE boot on the LTSP client network (thin client session screen - and login screen after the session on the right has been clicked).

During installation of the main server a first user account was created. In the following text this account will be referenced as "first user". This account is special, as the home directory permission is set to 700 (so chmod o+x ~ is needed to make personal web pages accessible), and the first user can use sudo to become root.

Se informationen om konfiguration af Debian Edu-specifik filsystemadgang før tilføjelse af brugere; juster til din sidens politik hvis krævet.

Efter installationen er den første ting, du skal udføre, som første bruger:

Tilføjelse af brugere og arbejdsstationer er beskrevet i detaljer nedenfor, så læs venligst dette kapitel helt færdigt. Det dækker hvordan minimumstrinene udføres korrekt samt andre oplysninger som alle sikkert har brug for.

Der er yderligere information tilgængelig andre steder i denne manual: Kapitlet Nye funktioner i Bullseye kan læses af alle som er bekendt med tidligere udgivelser. Og for dem som opgraderer fra en tidligere udgivelse, så husk at læse kapitlet Opgraderinger.

If generic DNS traffic is blocked out of your network and you need to use some specific DNS server to look up internet hosts, you need to tell the DNS server to use this server as its "forwarder". Update /etc/bind/named.conf.options and specify the IP address of the DNS server to use.

Kapitlet Hjælp dækker flere fif og ideer og nogle ofte stillede spørgsmål.

GOsa² er et internetbaseret håndteringsværktøj, som hjælper med at håndtere nogle vigtige dele af din opsætning for Debian Edu. Med GOsa² kan du håndtere (tilføje, ændre eller slette) disse hovedgrupper:

For GOsa² access you need the Skolelinux main server and a (client) system with a web browser installed which can be the main server itself if it was installed as a so called combined server (Main Server + LTSP Server + Workstation profiles).

Hvis du (sikkert ved et tilfælde) installerede en ren hovedserverprofil og ikke har en klient med en internetbrowser ved hånden, så er det nemt at installere et lille skrivebord på hovedserveren med brug af denne kommandosekvens i en (ikke grafisk) skal med brugeren du oprettede under hovedserverens installation (første bruger):

  $ sudo apt update
  $ sudo apt install task-desktop-xfce lightdm education-menus
  ### after installation, run 'sudo service lightdm start'
  ### login as first user

Fra en internetbrowser så brug adressen https://www/gosa for adgang til GOsa², og log ind som den første bruger.

Klik først på Brugere (Users) i den venstre navigationsmenu. Højresiden af skærmen vil ændre sig og vise en tabel med afdelingsmapper for studenter (Students) og lærere (Teachers) og kontoen for GOsa²-administratoren (den først oprettede bruger). Over denne tabel kan du se et felt kaldt Base som tillader dig at navigere igennem din træstruktur (flyt din mus over det område og en rullegardinsmenu kommer frem) og du kan så vælge en basismappe for dine forventede handlinger (f.eks. tilføjelse af en ny bruger).

Håndteringen af grupper er meget lig håndteringen af brugere.

Du kan indtaste et navn og en beskrivelse per gruppe. Sikr dig at du vælger det rigtige niveau i LDAP-træet, når du opretter en ny gruppe.

Tilføjelse af brugere til en netop oprettet gruppe fører dig tilbage til brugerlisten, hvor du højst sandsynlig har brug for filterboksen for at finde brugere. Kontroller også LDAP-træniveauet.

Grupperne indtastet i gruppehåndteringen er også regulære unix-grupper, så du kan også bruge dem til filrettigheder.

Maskinhåndtering tillader dig grundlæggende at håndtere alle netværksenheder i dit Debian Edu-netværk. Hver maskine tilføjet til LDAP-mappen med brug af GOsa² har et værtsnavn, en IP-adresse, en MAC-adresse og et domænenavn (som normalt er »intern«). For en mere fyldestgørende beskrivelse af Debian Edu-arkitekturen så se kapitlet arkitektur i denne manual.

Diskless workstations and thin clients work out-of-the-box in case of a combined main server.

Workstations with disks (including separate LTSP servers) have to be added with GOsa². Behind the scenes, both a machine specific Kerberos Principal (sort of account) and a related keytab file (containing a key used as password) are generated; the keytab file needs to be present on the workstation to be able to mount users' home directories. Once the added system has been rebooted, log into it as root and run /usr/share/debian-edu-config/tools/copy-host-keytab.

To create Principal and keytab file for a system already configured with GOsa², log in on the main server as root and run

/usr/share/debian-edu-config/tools/gosa-modify-host <værtsnavn> <ip>

Please note: host keytab creation is possible for systems of type workstations, servers and terminals but not for those of type netdevices. See the Network clients HowTo chapter for NFS configuration options.

For at tilføje en maskine, så brug GOsa²-hovedmenuen, systemer, tilføj. Du kan bruge en IP-adresse/værtsnavn fra det prækonfigurerede adresserum 10.0.0.0/8. Aktuelt er der kun to prædefinerede faste adresser: 10.0.2.2 (tjener) og 10.0.0.1 (adgangspunkt). Adresserne fra 10.0.16.20 til 10.0.31.254 (cirka 10.0.16.0/20 eller 4000 værter) er reserverede for DHCP og tildeles dynamisk.

For at tildele en vært med MAC-adressen 52:54:00:12:34:10, en statisk IP-adresse i GOsa², så skal du indtaste MAC-adressen, værtsnavnet og IP'en; alternativt kan du klikke på knappen Propose ip (foreslå IP, som vil vise den første frie og faste adresse i 10.0.0.0/8, sikkert noget ligende 10.0.0.2 hvis du tilføjer den første maskine på denne måde. Det kan være bedre først at overveje dit netværk: For eksempel kan du bruge 10.0.0.x med x>10 og x<50 for servere, og x>100 for arbejdsstationer. Glem ikke at aktivere det netop tilføjet system. Med undtagelse af hovedserveren vil alle systemer så have et matchende ikon.

Hvis maskinerne er opstartet som tynde klienter/diskløse arbejdsstationer eller er blevet installeret med brug af nogle af netværksprofilerne, kan skriptet sitesummary2ldapdhcp bruges til automatisk at tilføje maskiner til GOsa². For simple maskiner vil det fungere med det samme, for maskiner med mere end en mac-adresse skal den faktisk anvendte vælges, sitesummary2ldapdhcp -h viser brugsinformation. Bemærk venligst at IP-adresserne vist efter brug af sitesummary2ldapdhcp tilhører det dynamiske IP-interval. Disse systemer kan så ændres, så de passer til dit netværk: Omdøb hvert nyt system, aktiver DHCP og DNS, tilføj den til netgroups, hvis krævet; genstart systemet efterfølgende. De følgende skærmbilleder viser hvordan dette gøres i praksis.

root@tjener:~# sitesummary2ldapdhcp -a -i ether-22:11:33:44:55:ff
info: Opret GOsa-mskine for am-2211334455ff.intern [10.0.16.21] id ether-22:11:33:44:55:ff.

Indtast adgangskode hvis du ønsker at aktivere disse ændringer, og ^c for at afbryde.

Forbindelse til LDAP som cn=admin,ou=ldap-access,dc=skole,dc=skolelinux,dc=no
indtast adgangskode: ********
root@tjener:~#

Et cronjob der opdaterer DNS kører hver time; su -c ldap2bind kan bruges til at udløse opdateringen manuelt.

Pakken p910nd installeres som standard på et system med profilen Workstation.

It is recommended to disable all self-advertising features in the used network printers. Instead, assign a fixed IP address with GOsa² and configure them as AppSocket/HP JetDirect network printers.

This section explains how to use apt full-upgrade.

Using apt is really simply. To update a system you need to execute two commands on the command line as root: apt update (which updates the lists of available packages) and apt full-upgrade (which upgrades the packages for which an upgrade is available).

Det er også en god ide at opgradere via C-sproget for at få engelske uddata i tilfælde af problemer, da det laver resultater der er nemmere at finde i søgemotorer.

LC_ALL=C apt full-upgrade -y

After upgrading the debian-edu-config package, changed Cfengine configuration files might be available. Run ls -ltr /etc/cfengine3/debian-edu/ to check if this is the case. To apply the changes, run LC_ALL=C cf-agent -D installation.

It is important to run debian-edu-ltsp-install --diskless_workstation yes after LTSP server upgrades to keep the SquashFS image for diskless clients menu in sync.

Det er også en god ide at installere cron-apt og apt-listchanges og konfigurere dem til at sende post til en adresse du følger løbende med på.

cron-apt will notify you once a day via email about any packages that can be upgraded. It does not install these upgrades, but does download them (usually in the night), so you don't have to wait for the download when you do apt full-upgrade.

Automatisk installation af opdateringer kan nemt udføres, det kræver bare at pakken unattended-upgrades installeres og konfigureres som beskrevet på wiki.debian.org/UnattendedUpgrades.

apt-listchanges can send new changelog entries to you via email, or alternatively display them in the terminal when running apt.

For sikkerhedshåndtering så peg din browser på https://www/slbackup-php. Bemærk venligst at du skal tilgå denne side via SSL, da du skal indtaste adgangskoden for administrator (root) der. Hvis du forsøger at tilgå denne side uden at bruge SSL, så vil forbindelsen fejle.

Note: the site will only work if you temporarily allow ssh root login on the backup server (main server 'tjener' by default).

Som standard vil tjener lave sikkerhedskopi af /skole/tjener/home0, /etc/, /root/.svk og LDAP til /skole/backup som er under LVM. Hvis du kun vil have delvise kopier af tingene (i tilfælde af at du sletter dem) så vil denne opsætning virke fint.

Be aware that this backup scheme doesn't protect you from failing hard drives.

Hvis du ønsker at lave sikkerhedskopiering af dine data til en ekstern server, en båndstation eller en anden harddisk, så skal du ændre den eksisterende konfiguration en lille smule.

Hvis du ønsker at gendanne en fuldstændig mappe, er din bedste løsning at bruge kommandolinjen:

$ sudo rdiff-backup -r <dato>  \
   /skole/backup/tjener/skole/tjener/home0/bruger \
   /skole/tjener/home0/bruger_<dato>

Dette vil kopiere indholdet fra /skole/tjener/home0/user for <date> i mappen /skole/tjener/home0/user_<date>

Hvis du ønsker at gendanne en enkelt fil, så skal du vælge filen (og versionen) fra internetgrænsefladen og hente kun den fil.

Hvis du ønsker at fjerne gamle sikkerhedskopier, så vælg Maintenance (vedligeholdelse) i menuen på siden for sikkerhedskopiering og vælg det ældste øjebliksbillede du ønsker at bevare:

Yderligere information om Debian Edu-tilpasninger, der er nyttige for systemadministratorer, kan ses i hjælpeafsnittet Administration og i hjælpeafsnittet avanceret administration.

Opgradering af Debian fra en distribution til den næste er normalt ret nemt. Dette gælder desværre endnu ikke for Debian Edu, da vi kraftigt ændrer i konfigurationsfilerne på måder vi ikke burde. (Se Debianfejl 311188 for yderligere information.) Opgradering er stadig muligt, men kan kræve noget arbejde.

In general, upgrading the servers is more difficult than the workstations and the main-server is the most difficult to upgrade.

Hvis du ønsker at sikre dig at alt virker som før efter opgraderingen, så skal du teste opgraderingen på et testsystem eller systemer konfigureret på samme måde som dine produktionsmaskiner. Der kan du teste opgraderingen uden risiko og se om alt virker, som det skal.

Make sure to also read the information about the current Debian Stable release in its installation manual.

It may also be wise to wait a bit and keep running Oldstable for a few weeks longer, so that others can test the upgrade and document any problems they experience. The Oldstable release of Debian Edu will receive continued support for some time after the next Stable release, but when Debian ceases support for Oldstable, Debian Edu will necessarily do the same.

Be prepared: make sure you have tested the upgrade from Buster in a test environment or have backups ready to be able to go back.

Please note that the following recipe applies to a default Debian Edu main server installation (desktop=xfce, profiles Main Server, Workstation, LTSP Server). (For a general overview concerning Buster to Bullseye upgrade, see: https://www.debian.org/releases/bullseye/releasenotes)

Brug ikke X, brug en virtuel konsol, log ind som root.

Hvis apt afslutter med en fejl, så prøv at rette den og/eller køre apt -f install og så apt -y full-upgrade igen.

apt update
apt full-upgrade

apt clean

rm -f /etc/squid/conf.d/debian-edu.conf

sed -i 's/buster/bullseye/g' /etc/apt/sources.list
sed -i 's#/debian-security bullseye/updates# bullseye-security#g' /etc/apt/sources.list
export LC_ALL=C        # optional (to get English output)
apt update
apt full-upgrade

cf-agent -v -D di,installation

apt install debian-edu-artwork-homeworld
apt purge debian-edu-artwork-buster      # unless Buster artwork should be kept as an alternative

rm -f /etc/default/tftpd-hpa        # to remove no longer needed modifications
rm -rf /var/lib/tftpboot            # to remove no longer used tftp base directory
dpkg-reconfigure -p low tftpd-hpa   # first prompt: keep ''tftp' as system account, second: change TFTP root directory to ''/srv/tftp''
                                    # third: keep address and port, last one: enter ''--secure'' as additional option 
service tftpd-hpa restart
rm -rf /opt/ltsp                    # cleanup old LTSP base directory
# The next steps will need quite some execution time.
debian-edu-ltsp-install --arch amd64 --diskless_workstation no thin_type bare   # if 64-Bit thin client support is wanted
debian-edu-ltsp-install --arch i386 --diskless_workstation no thin_type bare    # if 32-Bit thin client support is wanted
debian-edu-ltsp-install --diskless_workstation yes   # to create diskless workstation image from the server's file system
debian-edu-pxeinstall                                # to add PXE installation files add related iPXE menu items 

To upgrade from any older release, you will need to upgrade to the Buster based Debian Edu release first, before you can follow the instructions provided above. Instructions are given in the Manual for Debian Edu Buster about how to upgrade to Buster from the previous release, Stretch. Likewise the Stretch manual describes how to upgrade from Jessie.

Using etckeeper, all files in /etc/ are tracked using Git as a version control system.

Dette gør det muligt at se hvornår en fil tilføjes, ændres og fjernes, samt hvad der har ændres sig hvis filen er en tekstfil. Git-arkivet gemmes i /etc/.git/.

Hver time, bliver alle ændringer automatisk optaget, hvilket tillader at konfigurationshistorik kan udtrækkes og gennemses.

For at kige på historikken bruges kommandoen etckeeper vcs log. For at kontrollere forskellene mellem to punkter i et tidsforløb, kan en kommando som etckeeper vcs diff bruges.

Se resultatet af man etckeeper for yderligere information.

Liste over brugbare kommandoer:

etckeeper vcs log
etckeeper vcs status
etckeeper vcs diff
etckeeper vcs add .
etckeeper vcs commit -a
man etckeeper

etckeeper vcs log

etckeeper vcs status

etckeeper vcs commit -a /etc/resolv.conf

I Debian Edu er alle partitioner udover partitionen /boot/ på logiske LVM-diskenheder. Med Linuxkerner højere end 2.6.10 er det muligt at udvide partitioner mens de er monteret. Formindskelse af partitioner skal stadig foregå mens partitionen ikke er monteret.

Det er en god ide at undgå at oprette meget store partitioner (over lad os sige 20 GiB), på grund af den tid det tager at køre fsck på dem eller at genskabe dem fra sikkerhedskopier hvis behovet skulle opstå. Det er bedre, hvis muligt, at oprette flere små partitioner end en meget stor.

Hjælpeskriptet debian-edu-fsautoresize tilbydes for at gøre det nemmere at udvide fulde partitioner. Når det igangsættes læser skriptet konfigurationen fra /usr/share/debian-edu-config/fsautoresizetab, /site/etc/fsautoresizetab og /etc/fsautoresizetab. Skriptet forslår så at udvide partitioner med for lidt ledig plads, jævnfør de regler der er angivet i disse filer. Hvis det køres uden argumenter, vil skriptet kun vise de kommandoer som er krævet for at udvide filsystemet. Arguementet -n er krævet for rent faktisk at udføre disse kommandoer for at udvide filsystemet.

Skriptet køres automatisk hver time på alle klienter angivet i netgruppen fsautoresize-hosts.

Når partitionen brugt af Squidproxyen ændrer størrelse, skal værdien for mellemlagerstørrelsen i etc/squid/squid.conf også opdateres. Hjælpeskriptet /usr/share/debian-edu-config/tools/squid-update-cachedir tilbydes for at gøre dette automatisk, kontrol af den aktuelle partitionsstørrelse af /var/spool/squid/ og konfiguration af Squid til at bruge 80 % af denne som sin størrelse for mellemlageret.

lvextend -L30G /dev/vg_system/skole+tjener+home0
resize2fs /dev/vg_system/skole+tjener+home0

ldapvi er et værktøj til at redigere LDAP-databasen med et normalt tekstredigeringsprogram på kommandolinjen.

Det følgende skal køres:

ldapvi --ldap-conf -ZD '(cn=admin)'

Bemærk: ldapvi vil bruge det valgte redigeringsprogram. Ved at køre export EDITOR=vim i skallen kan man konfigurere miljøet til at hente en vi-klon som redigeringsprogram.

For at tilføje et LDAP-objekt med ldapvi, så brug objektsekvensens tal med strengen add foran det nye LDAP-objekt.

Warning: ldapvi is a very powerful tool. Be careful and don't mess up the LDAP database, same warning applies for JXplorer.

Using Kerberos for NFS to mount home directories is a security feature. As of Bullseye, LTSP clients won't work without Kerberos. The levels krb5, krb5i and krb5p are supported (krb5 means Kerberos authentication, i stands for integrity check and p for privacy, i.e. encryption); the load on both server and workstation increases with the security level, krb5i is a good choice and has been chosen as default.

/srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)
/srv/nfs4/home0  gss/krb5i(rw,sync,no_subtree_check)

Dette værktøj gør det muligt at angive standardprinteren afhængig af sted, maskine eller gruppemedlemskab. For yderligere oplysninger, se /usr/share/doc/standardskriver/README.md.

Konfigurationsfilen /etc/standardskriver.cfg skal være installeret af adminsitratoren, se /usr/share/doc/standardskriver/examples/standardskriver.cfg for et eksempel.

Hvis du foretrækker en grafisk brugerflade til arbejdet med LDAP-databasen, så se pakken jxplorer, som installeres som standard. For at få skriveadgang forbindes således:

host: ldap.intern
port: 636
Security level: ssl + user + password
User dn: cn=admin,ou=ldap-access,dc=skole,dc=skolelinux,dc=no

ldap-createuser-krb er et lille værktøj for kommandolinjen til at oprette LDAP-brugere og angive deres adgangskoder i Kerberos. Den bruges dog hovedsagelig for testformål.

Since the Squeeze release in 2011, Debian has included packages formerly maintained in volatile.debian.org in the stable-updates suite.

Selvom du kan bruge stable-updates direkte, så er det ikke et krav: stable-updates overføres til programpakken stable med faste intervaller, når punktudgivelserne er klar, hvilket sker cirka hver anden måned.

Du kører Debian Edu fordi du fortrækker stabiliteten i Debian Edu. Det fungerer bare; der er kun et lille problem: Nogle gange er programmerne noget ældre end du ville ønske. Det er her backports.debian.org kommer ind i billedet.

Backporte er rekompilerede pakker fra Debian testing (hovedsagelig) og Debian unstable (kun i nogle få tilfælde, f.eks. sikkerhedsopdateringer), så de vil køre uden nye biblioteker (hvor dette er muligt) på en stabil Debiandistribution såsom Debian Edu. Vi anbefaler at du udvælger de individuelle backporte som passer til dit behov, og ikke at du bruger alle tilgængelige backporte.

Brug af backports er nemt:

echo "deb http://deb.debian.org/debian/ buster-backports main" >> /etc/apt/sources.list
apt-get update

Hvorefter man nemt kan installere pakker fra backported, den følgende kommando vil installere en backported-version for tuxtype:

apt install -t buster-backports tuxtype

Backports opdateres automatisk (hvis tilgængelige) ligesom andre pakker. Som det normale arkiv har backports tre afsnit: main, contrib og non-free.

If you want to upgrade from one version to another (for example from Bullseye 11.1 to 11.2) but you do not have Internet connectivity, only physical media, follow these steps:

Indsæt cd/dvd/blue-ray/USB-drev og brug kommandoen apt-cdrom:

apt-cdrom add

For at citere manualsiden apt-cdrom(8):

Kør så disse to kommandoer for at opgradere systemet:

apt update
apt full-upgrade

killer er et Perlskript, som fjerner baggrundsjob. Baggrundsjob er defineret som processer, som tilhører brugere som aktuelt ikke er logget ind på maskinen. Det køres som cronjob hver time.

unattended-upgrades is a Debian package which will install security (and other) upgrades automatically. If installed, the package is preconfigured to install security upgrades. The logs are available in /var/log/unattended-upgrades/; also, there are always /var/log/dpkg.log and /var/log/apt/.

Det er muligt at spare energi og penge ved automatisk at slukke for klientmaskiner om natten og tænde dem igen om morgenen. Pakken vil forsøge at slutte maskinen hver time i perioden fra 16:00 om aftenen, men vil ikke slukke den såfremt den ser ud til at blive brugt. Pakken vil forsøge at give BIOS'en besked om at tænde maskinen fra 06:30 ved at sende pakkerne wake-on-lan. Disse tidspunkter kan ændres i crontabs for individuelle maskiner.

Der bør foretages nogle overvejelser når dette sættes op:

  #!/bin/sh
  PATH=/usr/sbin:$PATH
  export PATH
  sitesummary-nodes -w

  #!/bin/sh
  PATH=/usr/sbin:$PATH
  export PATH
  netgroup -h shutdown-at-night-hosts

For at tilgå maskiner bag en brandmur fra internettet, så overvej at installere pakken autossh. Den kan bruges til at opsætte en SSH-tunnel til en maskine på internettet, som du har adgang til. Fra den maskine, kan du tilgå serveren bag brandmuren via SSH-tunnelen.

I standardinstallationen kører alle tjenester på hovedserveren tjener. For at gøre det enklere at flytte nogle til andre maskiner, er der en minimal installationsprofil tilgængelig. Installation med denne profil vil føre til en maskine, som er en del af Debian Edu-netværket, men som ikke har nogen tjenester kørende (endnu).

Dette er de krævede trin for at opsætte en maskine dedikeret til udvalgte tjenester:

FIXME: The HowTos from https://wiki.debian.org/DebianEdu/HowTo/ are either user- or developer-specific. Let's move the user-specific HowTos over here (and delete them over there)! (But first ask the authors (see the history of those pages to find them) if they are fine with moving the howto and putting it under the GPL.)

Benyt disse trin til at opsætte en dedikeret lagerserver for brugernes hjemmemappe og muligvis andre data.

Now users should be able to access the files on 'nas-server.intern' directly by just visiting the '/tjener/nas-server/storage/' directory using any application on any workstation, LTSP thin client or LTSP server.

Der er flere måder at begrænse ssh-logind, nogle er vist her.

+ : alice jane bob john : ALL
+ : ALL : 10.0.0.0/8 192.168.0.0/24 192.168.1.0/24
- : ALL : ALL
#

For at understøtte flere sprog skal disse kommandoer afvikles:

apt update
/usr/share/debian-edu-config/tools/install-task-pkgs
/usr/share/debian-edu-config/tools/improve-desktop-l10n

Users will then be able to choose the language via the LightDM display manager before logging in; this applies to Xfce, LXDE and LXQt. GNOME and KDE both come with their own internal region and language configuration tools, use these. MATE uses the Arctica greeter on top of Lightdm whithout a language chooser. Run apt purge arctica-greeter to get the stock Lightdm greeter.

Hvis LTSP-diskløse klienter bruges skal de ovenstående trin også udføres inden i LTSP-chroot'en. LDM understøtter alle skrivebordsmiljøer. Brug først Præferencer for at vælge sproget, log så ind.

libdvdcss er krævet for at afspille de fleste kommercielle dvd'er. Af juridiske årsager er programmet ikke inkluderet i Debian (Edu). Hvis det er lovligt for dig at bruge programmet, så kan du bygge dine egne lokale pakker via Debianpakken libdvd-pkg; sikr dig at contrib er aktiveret i /etc/apt/sources.list.

apt update
apt install libdvd-pkg

Svar på debconf-spørgsmålene, kør så dpkg-reconfigure libdvd-pkg.

Pakken fonts-linex (som installeres som standard) installerer skrifttypen »Abecedario« som er en pæn håndskrevet skrifttype for børn. Skrifttypen har flere varianter, som kan bruges af børn: prikket og med linjer.

One generic term for both thin clients and diskless workstations is LTSP client.

Starting with Bullseye, LTSP is quite different from the previous versions. This concerns both setup and maintenance. As one main difference, the SquashFS image for diskless workstations is now generated from the LTSP server file system. Also, thin clients are no longer supported.

In case of a separate or an additional LTSP server required information for setting up the LTSP client environment isn't complete at installation time. Setup can be done once the system has been added with GOsa².

For information about LTSP in general, see the LTSP homepage. On systems with LTSP server profile, man ltsp provides more information.

The debian-edu-ltsp-install tool is a wrapper script for ltsp image, ltsp kernel and ltsp ipxe. It is used to setup and configure diskless workstation support; in addition thin clients (both 64-Bit and 32-Bit PC) are supported using X2Go. See man debian-edu-ltsp-install or the script content to see how it works. All configuration is contained in the script itself (here documents) to facilitate site specific adjustments.

Please note that the ltsp tool has to be used carefully. For example, ltsp image / would fail to generate the SquashFS image in case of Debian machines (these have a separate /boot partition by default), and ltsp ipxe would fail to generate the iPXE menu correctly (due to Debian Edu's thin client support).

Examples how to use the wrapper script debian-edu-ltsp-install instead:

Besides bare (smallest thin client system), also display and desktop are available options. Some programs like Firefox ESR are executed on the client itself (more local RAM and CPU power required, but server load reduced).

Diskløs arbejdsstation

A diskless workstation runs all software locally. The client machines boot directly from the LTSP server without a local hard drive. Software is administered and maintained on the LTSP server, but runs on the diskless workstations. Home directories and system settings are stored on the server too. Diskless workstations are an excellent way of reusing older (but powerful) hardware with the same low maintenance costs as with thin clients.

Unlike workstations diskless workstations run without any need to add them with GOsa².

Tynd klient

En opsætning som tynd klient gør det muligt for en ordinær pc at fungere som en (X-)terminal, hvor alle programmer kører på LTSP-serveren. Dette betyder at denne maskine starter op via PXE uden at bruge en lokal klients harddisk.

Debian Edu still supports the use of thin clients to enable the use of very old hardware.

LTSP-klientfirmware

LTSP client boot will fail if the client's network interface requires a non-free firmware. A PXE installation can be used for troubleshooting problems with netbooting a machine; if the Debian Installer complains about a missing XXX.bin file then non-free firmware has to be added to the LTSP server's initrd.

In this case execute the following commands on the LTSP server.

# First get information about firmware packages
apt update && apt search ^firmware-
 
# Decide which package has to be installed for the network interface(s). 
# Most probably this will be firmware-linux-nonfree.
apt -y -q install <package name>
 
# Update the SquashFS image for diskless workstations.
debian-edu-ltsp-install --diskless_workstation yes

PXE stands for Preboot eXecution Environment. Debian Edu now uses the iPXE implementation for easier LTSP integration.

#tilføj skolens projekters lokale arkiv
d-i     apt-setup/local1/repository string      http://example.org/debian stable main contrib non-free
d-i     apt-setup/local1/comment string         Example Software Repository
d-i     apt-setup/local1/source boolean         true
d-i     apt-setup/local1/key    string          http://example.org/key.asc

Pakken debian-edu-config indeholder et værktøj, som hjælper med at ændre netværket 10.0.0.0/8 til noget andet. Se eventuelt /usr/share/debian-edu-config/tools/subnet-change. Det er lavet for brug lige efter installationen på hovedserveren, for at opdatere LDAP og andre filer, som skal redigeres for at ændre undernettet.

Note that changing to one of the subnets already used elsewhere in Debian Edu will not work. 192.168.0.0/24 and 192.168.1.0/24 are already set up as LTSP client networks. Changing to these subnets will require manual editing of configuration files to remove duplicate entries.

Der er ingen nem måde at ændre DNS-domænenavnet. Ændring af navnet vil kræve ændringer til både LDAP-strukturen og flere filer i filsystemet for hovedserveren (tjener.intern). At gøre dette vil også kræve ændringer til LDAP og filer i hovedserveren og filsystemet for klienten. I begge tilfælde skal Kerberosopsætningen også ændres.

Choosing the LTSP server profile or the combined server profile also installs the xrdp and x2goserver packages.

 #!/bin/bash
 # Skript til at kompilere/genkompilere xrdp PulseAudio-moduler.
 # Kalderen skal være root eller medlem af sudo-gruppen.
 # /etc/apt/sources.list skal også indeholde en gyldig deb-src-linje.
 set -e
  if [[ $UID -ne 0 ]] ; then  
     if ! groups | egrep -q sudo ; then
         echo "ERROR: You need to be root or a sudo group member."
         exit 1
     fi
 fi
 if ! egrep -q  ^deb-src /etc/apt/sources.list ; then
     echo "ERROR: Make sure /etc/apt/sources.list contains a deb-src line."
     exit 1
 fi
 TMP=$(mktemp -d)
 PULSE_UPSTREAM_VERSION="$(dpkg-query -W -f='${source:Upstream-Version}' pulseaudio)"
 XRDP_UPSTREAM_VERSION="$(dpkg-query -W -f='${source:Upstream-Version}' xrdp)"
 sudo apt -q update
 # Hent kilder og byggeafhængigheder:
 sudo apt -q install dpkg-dev
 cd $TMP
 apt -q source pulseaudio xrdp
 sudo apt -q build-dep pulseaudio xrdp
 # For pulseaudio 'configure' is all what is needed:
 cd pulseaudio-$PULSE_UPSTREAM_VERSION/
 ./configure
 # Juster pulseaudio-modulers Makefile (kræver absolut sti)
 # og byg pulseaudio-modulerne.
 cd $TMP/xrdp-$XRDP_UPSTREAM_VERSION/sesman/chansrv/pulse/
 sed -i 's/^PULSE/#PULSE/' Makefile
 sed -i "/#PULSE_DIR/a \
 PULSE_DIR = $TMP/pulseaudio-$PULSE_UPSTREAM_VERSION" Makefile
 make
 # Kopier moduler til Pulseaudio modules-mappen, juster rettigheder.
 sudo cp *.so /usr/lib/pulse-$PULSE_UPSTREAM_VERSION/modules/
 sudo chmod 644 /usr/lib/pulse-$PULSE_UPSTREAM_VERSION/modules/module-xrdp*
 # Genstart xrdp, nu med lyd aktiveret.
 sudo service xrdp restart

The freeRADIUS server could be used to provide secure network connections. For this to work, install the freeradius and winbind packages on the main server and run /usr/share/debian-edu-config/setup-freeradius-server to generate a basic, site specific configuration. This way, both EAP-TTLS/PAP and PEAP-MSCHAPV2 methods are enabled. All configuration is contained in the script itself to facilitate site specific adjustments. See the freeRADIUS homepage for details.

Additional configuration is needed to

End user devices need to be configured properly, these devices need to be PIN protected for the use of EAP (802.1x) methods. And most important: users need to be educated to install the freeradius CA certificate on their devices to be sure to connect to the right server. This way the password can't be catched in case of a malicious server. The site specific certificate is available on the internal network.

Please note that configuring end user devices will be a real challenge due to the variety of devices. For Windows devices an installer script could be created, for Apple devices a mobileconfig file. In both cases the freeRADIUS CA certificate can be integrated, but OS specific tools are needed to create the scripts.

Connections to a user's home directory and to additional site specific shares (if configured) are possible for devices running Linux, Android, macOS, iOS, iPadOS, Chrome OS or Windows. Other devices like Android based ones require a file manager with SMB2/SMB3 support, also known as LAN access. X-plore or Total Commander with LAN plugin might be a good choice.

Use \\tjener\<username> or smb://tjener/<username> to access the home directory.

stable/education-development er en metapakke, der afhænger af en masse programmeringsværktøjer. Bemærk venligst at næsten 2 GiB diskplads er krævet hvis denne pakke installeres. For yderligere detaljer (måske for at installere nogle få pakker), se siden for Debian Edu-udviklingspakkerne.

Warning: make sure you know the status of the laws about monitoring and restricting computer users' activities in your jurisdiction.

Some schools use control tools like Epoptes or Veyon to supervise their students. See also: Epoptes Homepage and Veyon Homepage.

Some schools use Squidguard or e2guardian to restrict Internet access.

Hver bruger skal ændre sin adgangskode ved at bruge GOsa². Brug en browser og gå til https://www/gosa/.

Using GOsa² to change the password ensures that passwords for Kerberos (krbPrincipalKey), LDAP (userPassword) and Samba (sambaNTPassword) are the same.

Ændring af adgangskoder med PAM virker også ved GDM-logindet, men dette vil kune opdatere adgangskoden for Kerberos, og ikke adgangskoden for Samba og GOsa² (LDAP). Så efter at du har ændret din adgangskode ved logindet, så skal du også ændre adgangskoden med GOsa².

Uafhængige Javaprogrammer understøttes direkte af kørselstiden OpenJDK Java.

Alle brugere kan sende og modtage post i det interne netværk; certifikater tilbydes til TLS-sikrede forbindelser. For at tillade post uden for det interne netværk skal administratoren konfigurere postserveren exim4 til den lokale situation, startende med dpkg-reconfigure exim4-config.

Hver bruger som ønsker at bruge Thunderbird skal konfigurere programmet således. For en bruger med brugernavnet jdoe er den interne e-postadresse jdoe@postoffice.intern.

Aktuelt er der lokale hold i Norge, Tyskland, Extremadura i Spanien, Taiwan og Frankrig. »Isolerede« bidragydere og brugere findes i Grækenland, Holland Japan og andre steder.

kapitlet med hjælp har forklaringer og henvisninger til oversatte ressourcer, da bidrag og hjælp er to sider af den samme mønt.

Internationally we are organised into various teams working on different subjects.

Most of the time, the developer mailing list is our main medium for communication, though we have monthly IRC meetings on #debian-edu on irc.debian.org and even, less frequently, real gatherings, where we meet each other in person. New contributors should read our https://wiki.debian.org/DebianEdu/ArchivePolicy.

En god måde at lære noget om hvad der sker i udviklingen af Debian Edu er at abonnere på postlisten for indsendelse (commit).

Debian Edu uses the Debian Bug Tracking System (BTS). View existing bug reports and feature requests or create new ones. Please report all bugs against the package debian-edu-config. Take a look at How To Report Bugs for more information on bug reporting in Debian Edu.

Dette dokument har brug for din hjælp! Først og fremmest, så er det endnu ikke færdig: Hvis du læser igennem vil du bemærke diverse FIXME (RETMIG) i teksten. Hvis du ved noget (bare en smule) om hvad der skal forklares de steder, så overvej at dele din viden med os.

The source of the text is a wiki and can be edited with a simple webbrowser. Just go to https://wiki.debian.org/DebianEdu/Documentation/Bullseye/ and you can contribute easily. Note: a user account is needed to edit the pages; you need to create a wiki user first.

En anden god måde at bidrage på og hjælpe brugerne er ved at oversætte programmer og dokumentation. Information om hvordan dette dokument oversættes kan findes i oversættelseskapitlet for denne bog. Overvej venligt at hjælpe med oversættelsesindsatsen for denne bog!

Lists of companies providing professional support are available from https://wiki.debian.org/DebianEdu/Help/ProfessionalHelp.

Copyright (C) 2007-2018 Holger Levsen < holger@layer-acht.org > and others, see the Copyright chapter for the full list of copyright owners.

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.

Version 2, June 1991

Copyright (C) 1989, 1991 Free Software Foundation, Inc. 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed.

0. This License applies to any program or other work which contains a notice placed by the copyright holder saying it may be distributed under the terms of this General Public License. The "Program", below, refers to any such program or work, and a "work based on the Program" means either the Program or any derivative work under copyright law: that is to say, a work containing the Program or a portion of it, either verbatim or with modifications and/or translated into another language. (Hereinafter, translation is included without limitation in the term "modification".) Each licensee is addressed as "you".

Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the Program (independent of having been made by running the Program). Whether that is true depends on what the Program does.

1. You may copy and distribute verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty; and give any other recipients of the Program a copy of this License along with the Program.

You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee.

2. You may modify your copy or copies of the Program or any portion of it, thus forming a work based on the Program, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions:

These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Program, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works. But when you distribute the same sections as part of a whole which is a work based on the Program, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it.

Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the intent is to exercise the right to control the distribution of derivative or collective works based on the Program.

In addition, mere aggregation of another work not based on the Program with the Program (or with a work based on the Program) on a volume of a storage or distribution medium does not bring the other work under the scope of this License.

3. You may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following:

The source code for a work means the preferred form of the work for making modifications to it. For an executable work, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the executable. However, as a special exception, the source code distributed need not include anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component itself accompanies the executable.

If distribution of executable or object code is made by offering access to copy from a designated place, then offering equivalent access to copy the source code from the same place counts as distribution of the source code, even though third parties are not compelled to copy the source along with the object code.

4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance.

5. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Program or its derivative works. These actions are prohibited by law if you do not accept this License. Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it.

6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions. You may not impose any further restrictions on the recipients' exercise of the rights granted herein. You are not responsible for enforcing compliance by third parties to this License.

7. If, as a consequence of a court judgment or allegation of patent infringement or for any other reason (not limited to patent issues), conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not distribute the Program at all. For example, if a patent license would not permit royalty-free redistribution of the Program by all those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Program.

If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is intended to apply and the section as a whole is intended to apply in other circumstances.

It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system, which is implemented by public license practices. Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system; it is up to the author/donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice.

This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License.

8. If the distribution and/or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Program under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded. In such case, this License incorporates the limitation as if written in the body of this License.

9. The Free Software Foundation may publish revised and/or new versions of the General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns.

Each version is given a distinguishing version number. If the Program specifies a version number of this License which applies to it and "any later version", you have the option of following the terms and conditions either of that version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of this License, you may choose any version ever published by the Free Software Foundation.

10. If you wish to incorporate parts of the Program into other free programs whose distribution conditions are different, write to the author to ask for permission. For software which is copyrighted by the Free Software Foundation, write to the Free Software Foundation; we sometimes make exceptions for this. Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally.

NO WARRANTY

11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.

12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

END OF TERMS AND CONDITIONS

For at aktivere en specifik oversættelse, så start op med locale=ll_CC.UTF-8 som opstartsindstilling, hvor ll_CC.UTF-8 er sprognavnet du ønsker. For at aktivere et bestemt tastaturlayout, så brug indstillingen keyb=KB hvor KB er det ønskede tastaturlayout. Her er en liste over ofte brugte sprogkoder:

A complete list of locale codes is available in /usr/share/i18n/SUPPORTED, but only the UTF-8 locales are supported by the live images. Not all locales have translations installed, though. The keyboard layout names can be found in /usr/share/keymaps/amd64/.

Følgende Debian Edu-udgivelser har været lavet tidligere:

Et fuldstændigt og detaljeret overblik om ældre udgivelser er indeholdt i Appendiks C af Jessiemanualen; eller se de relaterede udgivelsesmanualer på siden for udgivelsesmanualer.