Panduan Debian Edu / Skolelinux 13 Trixie

Tanggal publikasi: 13//04//25

DEBIAN_FRONTEND=noninteractive apt install -y -q debian-edu-router-config
lshw -class network
ip addr flush <interface>
dpkg-reconfigure --force uif debian-edu-router-config
deb http://deb.debian.org/debian/ trixie main 
deb http://security.debian.org trixie-security main 
sudo dd if=debian-edu-amd64-XXX.iso of=/dev/sdX bs=1M
lsblk -p
/usr/share/debian-edu-config/tools/pxe-addfirmware
d-i    pkgsel/include string my-extra-package(s)
  $ sudo apt update
  $ sudo apt install task-desktop-xfce lightdm education-menus
  $ sudo service lightdm start
/usr/share/debian-edu-config/tools/gosa-modify-host <hostname> <IP>
root@tjener:~# sitesummary2ldapdhcp -a -i ether-22:11:33:44:55:ff
info: Create GOsa machine for am-2211334455ff.intern [10.0.16.21] id ether-22:11:33:44:55:ff.

Enter password if you want to activate these changes, and ^c to abort.

Connecting to LDAP as cn=admin,ou=ldap-access,dc=skole,dc=skolelinux,dc=no
enter password: ********
root@tjener:~#
LC_ALL=C apt full-upgrade -y
$ sudo rdiff-backup -r <date>  \
   /skole/backup/tjener/skole/tjener/home0/user \
   /skole/tjener/home0/user_<date>
apt update
apt full-upgrade
sed -i 's/bookworm/trixie/g' /etc/apt/sources.list
export LC_ALL=C
apt update
apt upgrade --without-new-pkgs
apt full-upgrade
cf-agent -v -D installation
etckeeper vcs log
etckeeper vcs status
etckeeper vcs diff
etckeeper vcs add .
etckeeper vcs commit -a
man etckeeper
etckeeper vcs log
etckeeper vcs status
etckeeper vcs commit -a /etc/resolv.conf
lvextend -L30G /dev/vg_system/skole+tjener+home0
resize2fs /dev/vg_system/skole+tjener+home0
ldapvi -ZD '(cn=admin)'
/srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)
/srv/nfs4/home0  gss/krb5i(rw,sync,no_subtree_check)
host: ldap.intern
port: 636
Security level: ssl + user + password
User dn: cn=admin,ou=ldap-access,dc=skole,dc=skolelinux,dc=no
ldap-createuser-krb5 [-u uid] [-g gid] [-G group[,group]...] [-d department] <username> <gecos>
root@tjener:~# ldap-createuser-krb5 -d Teachers harhir "Harry Hirsch"
new user password: 
confirm password: 

dn: uid=harhir,ou=people,ou=Teachers,dc=skole,dc=skolelinux,dc=no
changetype: add
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: gosaAccount
objectClass: posixAccount
objectClass: shadowAccount
objectClass: krbPrincipalAux
objectClass: krbTicketPolicyAux
sn: Harry Hirsch
givenName: Harry Hirsch
uid: harhir
cn: Harry Hirsch
userPassword: {CRYPT}$y$j9T$TWnq55O1rvyLhjF.$oVf.t.RXC1v/4Y8FhV0umno629mo7bP7/YJyig6HET6
homeDirectory: /skole/tjener/home0/harhir
loginShell: /bin/bash
uidNumber: 2004
gidNumber: 2004
gecos: Harry Hirsch
shadowLastChange: 19641
shadowMin: 0
shadowMax: 99999
shadowWarning: 7
krbPwdPolicyReference: cn=users,cn=INTERN,cn=kerberos,dc=skole,dc=skolelinux,dc=no
krbPrincipalName: harhir@INTERN

ldap_initialize( <DEFAULT> )
Enter LDAP Password: 
add objectClass:
        top
        person
        organizationalPerson
        inetOrgPerson
        gosaAccount
        posixAccount
        shadowAccount
        krbPrincipalAux
        krbTicketPolicyAux
add sn:
        Harry Hirsch
add givenName:
        Harry Hirsch
add uid:
        harhir
add cn:
        Harry Hirsch
add userPassword:
        {CRYPT}$y$j9T$TWnq55O1rvyLhjF.$oVf.t.RXC1v/4Y8FhV0umno629mo7bP7/YJyig6HET6
add homeDirectory:
        /skole/tjener/home0/harhir
add loginShell:
        /bin/bash
add uidNumber:
        2004
add gidNumber:
        2004
add gecos:
        Harry Hirsch
add shadowLastChange:
        19641
add shadowMin:
        0
add shadowMax:
        99999
add shadowWarning:
        7
add krbPwdPolicyReference:
        cn=users,cn=INTERN,cn=kerberos,dc=skole,dc=skolelinux,dc=no
add krbPrincipalName:
        harhir@INTERN
adding new entry "uid=harhir,ou=people,ou=Teachers,dc=skole,dc=skolelinux,dc=no"
modify complete

Authenticating as principal root/admin@INTERN with password.
kadmin.local:  change_password harhir@INTERN
Enter password for principal "harhir@INTERN": 
Re-enter password for principal "harhir@INTERN": 
Password for "harhir@INTERN" changed.
kadmin.local:  lpcfg_do_global_parameter: WARNING: The "encrypt passwords" option is deprecated
Added user harhir.
cat << EOF > /etc/apt/sources.list.d/trixie-backports.sources
Types: deb
URIs: http://deb.debian.org/debian
Suites: trixie-backports
Components: main contrib non-free non-free-firmware
Enabled: yes
Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
EOF
apt update
apt install tuxtype/trixie-backports
apt-cdrom add
apt update
apt full-upgrade
  #!/bin/sh
  PATH=/usr/sbin:$PATH
  export PATH
  sitesummary-nodes -w
  #!/bin/sh
  PATH=/usr/sbin:$PATH
  export PATH
  netgroup -h shutdown-at-night-hosts
 #!/bin/bash
 home_path="/skole/tjener/home0"
 shared_folder="assignments"
 permissions="2770"
 created_dir=0
 for home in $(ls $home_path); do
    if [ ! -d "$home_path/$home/$shared_folder" ]; then
        mkdir $home_path/$home/$shared_folder
        chmod $permissions $home_path/$home/$shared_folder
        user=$home
        group=teachers
        chown $user:$group $home_path/$home/$shared_folder
        ((created_dir+=1))
    else
        echo -e "the folder $home_path/$home/$shared_folder already exists.\n"
    fi
 done
 echo "$created_dir folders have been created"
    root@tjener:~# showmount -e nas-server
    Export list for nas-server:
    /storage         10.0.0.0/8
    root@tjener:~#
    add cn=nas-server,ou=auto.skole,ou=automount,dc=skole,dc=skolelinux,dc=no
    objectClass: automount
    cn: nas-server
    automountInformation: -fstype=autofs --timeout=60 ldap:ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no

    add ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no
    objectClass: top
    objectClass: automountMap
    ou: auto.nas-server

    add cn=/,ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no
    objectClass: automount
    cn: /
    automountInformation: -fstype=nfs,tcp,rsize=32768,wsize=32768,rw,intr,hard,nodev,nosuid,noatime nas-server.intern:/&
+ : alice jane bob john : ALL
+ : ALL : 10.0.0.0/8 192.168.0.0/24 192.168.1.0/24
- : ALL : ALL
#
   apt update
   /usr/share/debian-edu-config/tools/install-task-pkgs
   /usr/share/debian-edu-config/tools/improve-desktop-l10n
apt update
apt install libdvd-pkg
apt update && apt search ^firmware-
apt -y -q install firmware-linux
debian-edu-ltsp-install --diskless_workstation yes
/usr/share/debian-edu-config/tools/ltsp-addfirmware -h
ltsp image x2go-bare-amd64
debian-edu-ltsp-install --arch i386 --thin_type bare
debian-edu-ltsp-initrd
d-i     apt-setup/local1/repository string      http://example.org/debian stable main contrib non-free
d-i     apt-setup/local1/comment string         Example Software Repository
d-i     apt-setup/local1/source boolean         true
d-i     apt-setup/local1/key    string          http://example.org/key.asc
 #!/bin/bash
 set -e
  if [[ $UID -ne 0 ]] ; then  
     if ! groups | egrep -q sudo ; then
         echo "ERROR: You need to be root or a sudo group member."
         exit 1
     fi
 fi
 if ! egrep -q  ^deb-src /etc/apt/sources.list ; then
     echo "ERROR: Make sure /etc/apt/sources.list contains a deb-src line."
     exit 1
 fi
 TMP=$(mktemp -d)
 PULSE_UPSTREAM_VERSION="$(dpkg-query -W -f='${source:Upstream-Version}' pulseaudio)"
 XRDP_UPSTREAM_VERSION="$(dpkg-query -W -f='${source:Upstream-Version}' xrdp)"
 sudo apt -q update
 sudo apt -q install dpkg-dev
 cd $TMP
 apt -q source pulseaudio xrdp
 sudo apt -q build-dep pulseaudio xrdp
 cd pulseaudio-$PULSE_UPSTREAM_VERSION/
 ./configure
 cd $TMP/xrdp-$XRDP_UPSTREAM_VERSION/sesman/chansrv/pulse/
 sed -i 's/^PULSE/#PULSE/' Makefile
 sed -i "/#PULSE_DIR/a \
 PULSE_DIR = $TMP/pulseaudio-$PULSE_UPSTREAM_VERSION" Makefile
 make
 sudo cp *.so /usr/lib/pulse-$PULSE_UPSTREAM_VERSION/modules/
 sudo chmod 644 /usr/lib/pulse-$PULSE_UPSTREAM_VERSION/modules/module-xrdp*
 sudo service xrdp restart
C:\Program Files\pGina.fork\Plugins\pGina.Plugin.Ldap.dll

Tabel layanan
Deskripsi layanan	Nama umum	Nama layanan DNS
Pencatatan Log Terpusat	rsyslog	syslog
Layanan Nama Domain	DNS (BIND)	domain
Konfigurasi Jaringan Otomatis untuk Mesin-mesin	DHCP	bootps
Sinkronisasi Jam	NTP	ntp
Direktori rumah melalui Sistem Berkas Jaringan	SMB / NFS	homes
Kantor Pos Elektronik	IMAP (Dovecot)	postoffice
Layanan Direktori	OpenLDAP	ldap
Administrasi Pengguna	GOsa²	---
Server Web	Apache/PHP	www
Pencadangan Terpusat	sl-backup, slbackup-php	backup
Singgahan Web	Proksi (Squid)	webcache
Pencetakan	CUPS	ipp
Login Jarak Jauh Aman	OpenSSH	ssh
Konfigurasi Otomatis	CFEngine	cfengine
Server LTSP	LTSP	ltsp
Pemantauan Mesin dan Layanan dengan Pelaporan Kesalahan, ditambah Status dan Riwayat di Web. Pelaporan Kesalahan melalui email	Munin, Icinga, dan Sitesummary	sitesummary

Panduan Debian Edu / Skolelinux 13 Trixie

Tanggal publikasi: 13//04//25

1. Panduan untuk Debian Edu 13 dengan nama sandi trixie

2. Tentang Debian Edu dan Skolelinux

2.1. Sedikit sejarah dan mengapa ada dua nama

3. Arsitektur

3.1. Jaringan

3.1.1. Penyiapan jaringan baku

3.1.2. Server utama

3.1.3. Layanan yang berjalan di server utama

3.1.4. Server LTSP

3.1.5. Thin client

3.1.6. Workstation tanpa disk

3.1.7. Klien jaringan

3.2. Administrasi

3.2.1. Instalasi

3.2.2. Konfigurasi akses sistem berkas

4. Persyaratan

4.1. Kebutuhan perangkat keras

4.2. Perangkat keras yang diketahui berfungsi

5. Persyaratan untuk penyiapan jaringan

5.1. Penyiapan Baku

5.2. Router internet

6. Opsi instalasi dan unduhan

6.1. Di mana menemukan informasi tambahan

6.2. Unduh media instalasi untuk Debian Edu 12 dengan nama kode trixie

6.2.1. amd64 atau i386

6.2.2. citra ISO netinst untuk arsitektur amd64 atau i386

6.2.3. Gambar ISO BD untuk amd64 atau i386

6.2.4. Verifikasi berkas citra yang diunduh

6.2.5. Sumber

6.3. Memasang Debian Edu

6.3.1. Skenario instalasi server utama

6.3.2. Lingkungan desktop

6.3.3. Instalasi modular

6.3.4. Jenis dan opsi instalasi

6.3.5. Proses instalasi

6.3.6. Menginstal gateway menggunakan debian-edu-router

6.3.7. Catatan tentang beberapa karakteristik

6.3.7.1. Catatan tentang buku catatan

6.3.7.2. Catatan tentang instalasi citra USB flash drive / Blu-ray disc

6.3.7.3. Catatan tentang instalasi CD

6.3.8. Pemasangan menggunakan flash drive USB sebagai pengganti CD / Blu-ray disc

6.3.9. Pemasangan dan booting melalui jaringan menggunakan PXE

6.3.10. Mengubah instalasi PXE

6.3.11. Image ubahan

6.4. Tur cuplikan layar

7. Memulai

7.1. Langkah-langkah minimal untuk memulai

7.1.1. Layanan yang berjalan di server utama

7.2. Pengantar GOsa²

7.2.1. GOsa² Login plus Ringkasan

7.3. Pengelolaan Pengguna dengan GOsa²

7.3.1. Menambahkan pengguna

7.3.2. Cari, ubah, dan hapus pengguna

7.3.3. Menyetel kata sandi

7.3.4. Pengelolaan pengguna tingkat lanjut

7.3.4.1. Menambahkan pengguna melalui baris perintah

7.4. Pengelolaan Kelompok dengan GOsa²

7.5. Pengelolaan Mesin dengan GOsa²

7.5.1. Cari dan hapus mesin

7.5.2. Modifikasi mesin yang sudah ada / Pengelolaan Netgroup

8. Manajemen Pencetak

8.1. Gunakan printer yang terhubung ke workstation

8.2. Pencetak jaringan

9. Sinkronisasi jam

10. Memperluas partisi penuh

11. Pemeliharaan

11.1. Memperbarui perangkat lunak

11.1.1. Tetaplah terinformasi tentang pembaruan keamanan

11.2. Manajemen Cadangan

11.3. Pemantauan Server

11.3.1. Munin

11.3.2. Icinga

11.3.2.1. Peringatan umum Icinga dan cara mengatasinya

11.3.2.1.1. DISK KRITIS - ruang kosong: /usr 309 MB (5% inode=47%):

11.3.2.1.2. APT KRITIS: 13 paket tersedia untuk pembaruan (13 pembaruan kritis).

11.3.2.1.3. PERINGATAN - Diperlukan reboot: kernel yang sedang berjalan = 2.6.32-37.81.0, kernel yang terpasang = 2.6.32-38.83.0

11.3.2.1.4. PERINGATAN: Ukuran antrian CUPS - 61

11.3.3. Sitesummary