Debian Edu / Skolelinux is a Linux distribution created by the Debian Edu project. As a Debian Pure Blend distribution it is an official Debian subproject.

For din skole betyr dette at Skolelinux er en versjon av Debian GNU/Linux, og gir skolen din et IT-system ferdig oppsatt og tilpasset skoler.

Skolelinux-prosjektet i Norge ble stiftet 2. juli 2001, omtrent på samme tid som Raphaël Hertzog startet Debian-Edu i Frankrike. Fra 2003 er begge prosjekter samlet, og begge navn videreført. «Skole» og (Debian-)«Education» er to godt forståtte begreper i de berørte regionene.

I dag er systemet i bruk i flere land rundt om i verden.

Denne delen av dokumentet beskriver nettverksarkitekturen og tjenester som Skolelinux-installasjonen tilbyr.

Figuren er en skisse over det forventede nettverksoppsettet (topologien). Standardoppsettet til et Skolelinux-nettverk forventer at det er en (og bare en) hovedtjener, men det er tillatt å legge til både normale arbeidsstasjoner og LTSP-tjenere (med tilhørende tynnklienter og/eller lagringsløse arbeidsstasjoner). Antallet arbeidsstasjoner kan være stort eller lite alt etter behovet (fra null til veldig mange). Det samme gjelder for LTSP-tjenere. Hver enkelt LTSP-tjener er på et adskilt nettverk slik at nettverkstrafikken mellom LTSP-klienter og LTSP-tjenere ikke forstyrrer resten av nettverkstjenestene. En detaljert forklaring om LTSP er tilgjengelig i det tilhørende veiledningskapittelet.

Grunnen til at det bare kan være en hovedtjener i hvert skolenettverk, er at hovedtjeneren tilbyr DHCP, og det kan bare være en maskin som gjør det i et nettverk. Det er mulig å flytte tjenester fra hovedtjeneren til andre maskiner ved å sette opp tjenesten på en annen maskin, og så oppdatere DNS-oppsettet slik at DNS-aliaset for den tjenesten peker til rett maskin.

For å forenkle det vanlige oppsettet av Skolelinux, kjører internettilkoblingen oven en egen ruter, også kalt portner. Sjekk internettruter-kapitlet for flere detaljer om hvordan man setter opp en slik portner hvis det ikke er mulig å sette opp en eksisterende som ønsket.

Alle Linux-maskinene som er installert ved hjelp av en Skolelinux-installer vil være satt opp til å administreres fra en sentral maskin, mest trolig tjeneren. Det vil være mulig å logge inn på alle maskiner ved hjelp av SSH, og dermed ha full tilgang til maskinene. Som root må en kjøre kinit først for å få en Kerberos-TGT.

All brukerinformasjon ligger i en LDAP-katalog. Oppdateringer av brukerinformasjon blir gjort mot denne databasen, og blir brukt av klientene til autentisering.

Egenskapene til de ulike profilene forklares i kapittelet nettverksarkitektur.

Hvis LTSP skal brukes, ta en titt på wikisiden med maskinvarekrav for LTSP.

A list of tested hardware is provided at https://wiki.debian.org/DebianEdu/Hardware/ . This list is not nearly complete.

https://wiki.debian.org/InstallingDebianOn is an effort to document how to install, configure and use Debian on some specific hardware, allowing potential buyers to know if that hardware is supported and existing owners to know how get the best out of that hardware.

Når man bruker standard oppsett for nettverksarkitekturen, så brukes disse reglene:

En ruter/gateway tilkoplet Internett på det eksterne grensesnittet, og som kjører på IP-adressen 10.0.0.1 med nettmaske 255.0.0.0 på det interne grensesnittet, er nødvendig for å få tilgang til Internett.

Ruteren skal ikke kjøre på en DHCP-tjener. Den kan kjøre på en DNS-tjener, selv om dette ikke er nødvendig, og den ikke brukes.

In case you do not already have a router or your existing router cannot be set up accordingly, any machine which fulfills the requirements for a minimal Debian installation and which has at least two network interfaces can be turned into a gateway between the existing network and the Debian Edu one. See installation documentation for a simple way to install and set up a Debian machine using debian-edu-router-config.

If you need something for an embedded router or accesspoint we recommend using OpenWRT, though of course you can also use the original firmware. Using the original firmware is easier; using OpenWRT gives you more choices and control. Check the OpenWRT webpages for a list of supported hardware.

It is possible to use a different network setup (there is a documented procedure to do this), but if you are not forced to do this by an existing network infrastructure, we recommend against doing so and recommend you stay with the default network architecture.

We recommend that you read or at least take a look at the release notes for Debian Bookworm before you start installing a system for production use. There is more information about the Debian Bookworm release available in its installation manual.

Gi Debian Edu/Skolelinux en sjanse, det burde virke uten videre.

Det er derimot anbefalt, å lese kapitlene om maskinvare og nettverkskrav og om arkitekturen før du starter på installasjon av en hovedtjener.

Sørg for også å ha lest getting started (komme i gang)-kapittelet i denne manual, siden det beskriver hvordan man logger inn for første gang.

When you do a Debian Edu installation, you have a few options to choose from. Don't be afraid; there aren't many. We have done a good job of hiding the complexity of Debian during the installation and beyond. However, Debian Edu is Debian, and if you want there are more than 59,000 packages to choose from and a billion configuration options. For the majority of our users, our defaults should be fine. Please note: if LTSP is intended to be used, choose a lightweight desktop environment.

DEBIAN_FRONTEND=noninteractive apt install -y -q debian-edu-router-config

lshw -class network

ip addr flush <interface>

dpkg-reconfigure --force uif debian-edu-router

deb http://deb.debian.org/debian/ bookworm main 
deb http://security.debian.org bookworm-security main 

sudo dd if=debian-edu-amd64-XXX.iso of=/dev/sdX bs=1M

lsblk -p

/usr/share/debian-edu-config/tools/pxe-addfirmware

d-i    pkgsel/include string my-extra-package(s)

Tekstmodus og grafisk installasjon er identisk med tanke på innhold, kun utseendet er forskjellig, samt at man kan bruke mus ved grafisk installasjon. Den grafiske installasjonen ser selvfølgelig bedre og mer moderne ut. Hvis maskinvaren er i stand til å vise det grafiske installasjonsgrensesnittet, er det all grunn til å bruke dette.

So here is a screenshot tour through a graphical 64-bit Main Server + Workstation + LTSP Server installation (in BIOS mode) and how it looks at the first boot of the main server and a PXE boot on the LTSP client network (thin client session screen - and login screen after the session on the right has been clicked).

During installation of the main server a first user account was created. In the following text this account will be referenced as "first user". This account is special, as the home directory permission is set to 700 (so chmod o+x ~ is needed to make personal web pages accessible), and the first user can use sudo to become root.

Se informasjonen om Debian Edu-spesifikke oppsett av filsystemtilgang før brukere legges til. Oppsett for filsystemtilgang kan tilpasses lokale regler hvis det ønskes.

Etter installasjonen, de første tingene du trenger å gjøre som den første brukeren er:

Å legge til brukere og arbeidsstasjoner er beskrevet i detalj nedenfor, så vær vennlig å les dette kapittelet fullstendig. Her vises hvordan disse minimumsskrittene utføres riktig, men også annet stoff som alle kan trenge å utføre.

There is additional information available elsewhere in this manual: the New features in Bookworm chapter should be read by everyone who is familiar with previous releases. And for those upgrading from a previous release, make sure to read the Upgrades chapter.

Hvis generell DNS-trafikk er blokkert ut fra nettverket ditt, og du må bruke en spesifikk DNS-tjener for å slå opp Internett-maskiner, så må du be DNS-tjeneren til å bruke denne tjener som sin «forwarder». Oppdater /etc/bind/named.conf.options, og spesifiser IP-adressen til DNS-tjeneren som må brukes.

HowTo-kapittelet dekker tips og triks samt hyppige stilte spørsmål.

GOsa² er et nettbasert administrasjonsverktøy som vil hjelpe deg å håndtere en del viktige ting i Debian Edu-oppsettet ditt. Du kan håndtere disse hovedgruppene (legge til, endre, slette):

For tilgang til GOsa² trenger du Skolelinux-hovedtjeneren, og et (klient) system med en nettleser installert som kan bli hoverdtjeneren selv hvis den var installert som en såkalt kombinerttjener (hoved-, LTSP-tjener- + arbeidsstasjonsprofiler).

If you (probably accidentally) installed a pure Main Server profile and don't have a client with a web-browser handy, it's easy to install a minimal desktop on the main server using this command sequence in a (non-graphical) shell as the user you created during the main server's installation (first user):

  $ sudo apt update
  $ sudo apt install task-desktop-xfce lightdm education-menus
  $ sudo service lightdm start

Legg inn nettadressen https://www/gosa i en nettleser for å få tilgang til GOsa², og logg inn som det første brukeren.

Først klikker du på «Brukere» («Users») i venstre navigasjonsmeny. Høyre side av skjermen vil endres for å vise en tabell med avdelingsmapper for «Studenter» («Students») og «Lærere» («Teachers»), og kontoen til GOsa² Super-Administrator (den brukeren som først ble opprettet). Ovenfor denne tabellen kan du se feltet Base som lar deg navigere gjennom trestrukturen din (beveg musen over området, og en rullegardinmeny vises), og for å velge en basismappe for de planlagte oppgaver (for eksempel legge til en ny bruker).

Administrasjonen av grupper er svært lik administrasjonen av brukere.

Du kan skrive inn et navn og en beskrivelse for hver gruppe. Pass på at du velger riktig nivå i LDAP-treet når du oppretter en ny gruppe.

Hvis du legger til brukere i en nyopprettet gruppe, kommer du tilbake til brukerlisten. Det er her du mest sannsynlig ønsker å bruke filterboksen for å finne brukere. Sjekk LDAP-trenivået også.

Gruppene du legger til i gruppehåndteringen er også vanlige UNIX-grupper, så du kan bruke dem til filrettigheter også.

Med maskinadministrasjon kan du administrere alle nettverksenhetene i ditt Debian Edu-nettverk. Hver eneste maskin som legges til i LDAP-katalogen med GOsa² har et vertsnavn, en IP-adresse, en MAC-adresse og et domenenavn som vanligvis er «intern». For en mer grundig beskrivelse av arkitekturen i Debian Edu, se architecture-kapittelet i denne manualen.

Diskless workstations and thin clients work out-of-the-box in case of a combined main server.

Workstations with disks (including separate LTSP servers) have to be added with GOsa². Behind the scenes, both a machine specific Kerberos Principal (sort of account) and a related keytab file (containing a key used as password) are generated; the keytab file needs to be present on the workstation to be able to mount users' home directories. Once the added system has been rebooted, log into it as root and run /usr/share/debian-edu-config/tools/copy-host-keytab.

To create Principal and keytab file for a system already configured with GOsa², log in on the main server as root and run

/usr/share/debian-edu-config/tools/gosa-modify-host <hostname> <IP>

Please note: host keytab creation is possible for systems of type workstations, servers and terminals but not for those of type netdevices. See the Network clients HowTo chapter for NFS configuration options.

To add a machine, use the GOsa² main menu, systems, add. The name of the machine is expected to be a valid unqualified hostname, do not add the domain name here. You can use an IP address/hostname from the preconfigured address space 10.0.0.0/8. Currently there are only two predefined fixed addresses: 10.0.2.2 (tjener) and 10.0.0.1 (gateway). The addresses from 10.0.16.20 to 10.0.31.254 (roughly 10.0.16.0/20 or 4000 hosts) are reserved for DHCP and are assigned dynamically.

For å tildele en vert med MAC-adresse 52:54:00:12:34:10 en statisk IP-adresse i GOsa², trenger du bare å skrive inn MAC-adressen, vetsnavnet og IP-en; alternativt kan du klikke på Propose ip-knappen som vil vise den første frie faste adressen i 10.0.0.0/8, mest sannsynlig noe som 10.0.0.2 hvis du legger til den første maskinen på denne måten. Det kan være bedre å først tenke rundt nettverket: For eksempel kan du bruke 10.0.0.x med x>10 og x<50 for tjenere, og x>100 for arbeidsstasjoner. Ikke glem å aktivere det nettopp tilføyde systemet. Med unntak av hovedtjeneren vil alle systemer da ha et matchende ikon.

Hvis maskinene har startet som tynne klienter/diskløse arbeidsstasjoner, eller har blitt installert ved hjelp av noen av nettverksprofilene, som sitesummary2ldapdhcp-skript kan brukes til automatisk å legge maskiner til GOsa². For enkle maskiner vil det fungere ut av boksen. For maskiner med mer enn en mac-adresse, må den som faktisk brukes velges, sitesummary2ldapdhcp -h viser informasjon om bruken. Vær oppmerksom på at IP-adressene som vises etter bruk av sitesummary2ldapdhcp tilhører det dynamiske IP-området. Disse systemene kan deretter endres for å passe til nettverket ditt; endre navn på hvert nytt system, aktivere DHCP og DNS, legge den til nettgrupper (se skjermbilder lenger ned for anbefalte nettgrupper). Hvis det er nødvendig; start systemet på nytt etterpå. Følgende skjermbilder viser hvordan dette ser ut i praksis:

root@tjener:~# sitesummary2ldapdhcp -a -i ether-22:11:33:44:55:ff
info: Create GOsa machine for am-2211334455ff.intern [10.0.16.21] id ether-22:11:33:44:55:ff.
 
Enter password if you want to activate these changes, and ^c to abort.
 
Connecting to LDAP as cn=admin,ou=ldap-access,dc=skole,dc=skolelinux,dc=no
enter password: ********
root@tjener:~#

En cron-jobb oppdaterer DNS en gang i timen. Benytt kommandoen su -c ldap2bind for å kjøre oppdateringen manuelt.

Pakken p910nd er installert som forvalg på et system med Arbeidsstasjonsprofil.

It is recommended to disable all self-advertising features in the used network printers. Instead, assign a fixed IP address with GOsa² and configure them as AppSocket/HP JetDirect network printers.

This section explains how to use apt full-upgrade.

Using apt is really simply. To update a system you need to execute two commands on the command line as root: apt update (which updates the lists of available packages) and apt full-upgrade (which upgrades the packages for which an upgrade is available).

It is also a good idea to upgrade using the C locale to get English output which in cases of problems is more likely to produce results in search engines.

LC_ALL=C apt full-upgrade -y

After upgrading the debian-edu-config package, changed Cfengine configuration files might be available. Run ls -ltr /etc/cfengine3/debian-edu/ to check if this is the case. To apply the changes, run LC_ALL=C cf-agent -D installation.

It is important to run debian-edu-ltsp-install --diskless_workstation yes after LTSP server upgrades to keep the SquashFS image for diskless clients in sync.

After a point release upgrade of a system with Main Server or LTSP Server profile, debian-edu-pxeinstall needs to be run to update the PXE installation environment.

Det er også en god idé å installere cron-apt og apt-listchanges, og sette dem opp til å sende e-post til en adresse du leser.

cron-apt will notify you once a day via email about any packages that can be upgraded. It does not install these upgrades, but does download them (usually in the night), so you don't have to wait for the download when you do apt full-upgrade.

Automatic installation of updates can be done easily if desired, it just needs the unattended-upgrades package to be installed and configured as described on wiki.debian.org/UnattendedUpgrades.

apt-listchanges can send new changelog entries to you via email, or alternatively display them in the terminal when running apt.

For å håndtere sikkerhetskopier går du med nettleseren til adressen https://www/slbackup-php. Vær oppmerksom på at du trenger tilgang til dette nettstedet via SSL, ettersom du må skrive inn root-passordet der. Hvis du prøver å få tilgang til dette nettstedet uten å bruke SSL, vil det mislykkes.

Note: the site will only work if you temporarily allow SSH root login on the backup server, which is the main server (tjener.intern) by default.

By default, backups of /skole/tjener/home0, /etc/, /root/.svk and LDAP are stored in the /skole/backup/ directory which is managed as separate partition by LVM. If you only want to have spare copies of things (in case you delete them) this setup should be fine for you.

Vær oppmerksom på at denne sikkerhetskopieringsmekanismen ikke beskytter deg mot harddisker som går i stykker.

Hvis du vil sikkerhetskopiere dine data til en ekstern tjener, en tape-stasjon eller en annen harddisk, så må du endre oppsettet litt.

Hvis du ønsker å gjenopprette en komplett folder, anbefales det å bruke kommandolinja:

$ sudo rdiff-backup -r <date>  \
   /skole/backup/tjener/skole/tjener/home0/user \
   /skole/tjener/home0/user_<date>

Dette vil legge innholdet fra /skole/tjener/home0/user fra <dato> i mappa /skole/tjener/home0/user_<dato>

Hvis du ønsker å gjenopprette en enkelt fil, skal dette kunne gjøres ved å velge fila (og versjon) fra webgrensesnittet, for så å laste ned bare den fila.

Hvis du ønsker å kvitte deg med eldre sikkerhetskopier, velg «Vedlikehold» i menyen på sikkerhetskopi-siden, og velg å beholde det eldste øyeblikksbildet:

Mer informasjon om nyttige tilpasninger i Debian Edu for systemadministratorer finnes i kapittelet om Administrasjonsoppskrifter og i kapittelet om Avanserte administrasjonsoppskrifter

Upgrading Debian from one distribution to the next is generally rather easy. For Debian Edu this is unfortunately a bit more complicated as we modify configuration files in ways we shouldn't. However we have documented the needed steps below. (See Debian bug 311188 for more information how Debian Edu should modify configuration files.)

In general, upgrading the servers is more difficult than the workstations and the main server is the most difficult to upgrade.

Hvis du vil være sikker på at alt fungerer som før etter oppgraderingen, så bør du teste oppgraderingen på en testtjener, som er satt opp på samme måte som tjeneren som er i drift. Der kan du teste oppgraderingen uten risiko, og se om alt fungerer som det skal.

Pass på å også lese informasjonen om gjeldende stabile Debian-utgave tilgjengelig fra installasjonshåndboken.

It may also be wise to wait a bit and keep running Oldstable for a few weeks longer, so that others can test the upgrade and document any problems they experience. The Oldstable release of Debian Edu will receive continued support for some time after the next Stable release, but when Debian ceases support for Oldstable, Debian Edu will necessarily do the same.

Be prepared: make sure you have tested the upgrade from Bullseye in a test environment or have backups ready to be able to go back.

Please note that the following recipe applies to a default Debian Edu main server installation (desktop=xfce, profiles Main Server, Workstation, LTSP Server). (For a general overview concerning Bullseye to Bookworm upgrade, see: https://www.debian.org/releases/bookworm/releasenotes)

Ikke bruk X, bruk et virtuellt konsoll og logg inn som root.

Hvis apt avsluttes med en feil, forsøk å rette den og/eller kjør apt -f install, og så igjenapt -y full-upgrade.

apt update
apt full-upgrade

sed -i 's/bullseye/bookworm/g' /etc/apt/sources.list
export LC_ALL=C
apt update
apt upgrade --without-new-pkgs
apt full-upgrade

cf-agent -v -D installation

To upgrade from any older release, you will need to upgrade to the Bullseye based Debian Edu release first, before you can follow the instructions provided above. Instructions are given in the Manual for Debian Edu Bullseye about how to upgrade to Bullseye from the previous release, Buster.

Using etckeeper, all files in /etc/ are tracked using Git as a version control system.

Dette gjør det mulig å se når en fil er lagt til, endret eller fjernet. Hvis det er en tekstfil som er endret, så kan man se endringene. SVK-repository er lagret i ~root/.svk/. Hver time blir alle endringer automatisk registrert, noe som gjør det mulig å trekke ut konfigurasjonshistorikken for å se på den.

Alle endringer blir automatisk tatt vare på hver time. Det gjør at konfigurasjonshistorien kan hentes ut for senere gjennomgang.

To look at the history, the command etckeeper vcs log is used. To check the differences between two points in time, a command like etckeeper vcs diff can be used.

Se på koden i /etc/init.d/kdm for informasjon om hvordan disse variablene blir brukt.

Liste over nyttige kommandoer:

etckeeper vcs log
etckeeper vcs status
etckeeper vcs diff
etckeeper vcs add .
etckeeper vcs commit -a
man etckeeper

etckeeper vcs log

etckeeper vcs status

etckeeper vcs commit -a /etc/resolv.conf

De fleste partisjoner i Debian Edu er logiske dataområder (LVM). Det er kun /boot/-partisjonen som ikke er det. Med Debian/Squeeze-utgivelsen av Skolelinux/Debian Edu, er det mulig å utvide partisjoner mens de er montert. Dette er en egenskap i Linux-kjernen siden versjon 2.6.10. Krymping av partisjoner må fortsatt skje mens partisjonen er avmontert.

Det er en god idé å unngå å lage svært store partisjoner (med over, for eksempel. 20 GiB), fordi tiden det tar å kjøre fsck på dem, eller å gjenskape dem fra sikkerhetskopier hvis dette skulle bli nødvendig. Det er bedre, hvis mulig, å lage flere mindre partisjoner enn en svært stor en.

For å gjøre det enklere å utvide fulle partisjoner så finnes skriptet debian-edu-fsautoresiz. Når det blir kjørt, leser det oppsettet fra /usr/share/debian-edu-config/fsautoresizetab, /site/etc/fsautoresizetab og /etc/fsautoresizetab. Basert på reglene i disse filene foreslår det utvidelse av partisjoner med for lite ledig plass. Uten argument, så vil det bare skrive ut kommandoene som trengs for å utvide filsystemet. Argumentet -n trengs for faktisk å utvide filsystemet.

Skriptet utføres automatisk hver time på hver klient listet i nettgruppen fsautoresize-hosts.

When the partition used by the Squid proxy is resized, the value for cache size in etc/squid/squid.conf needs to be updated as well. The helper script /usr/share/debian-edu-config/tools/squid-update-cachedir is provided to do this automatically, checking the current partition size of /var/spool/squid/ and configuring Squid to use 80% of this as its cache size.

lvextend -L30G /dev/vg_system/skole+tjener+home0
resize2fs /dev/vg_system/skole+tjener+home0

ldapvi er et verktøy for å redigere LDAP databasen med en vanlig tekstredigerer fra kommandolinjen.

Følgende må utføres:

ldapvi -ZD '(cn=admin)'

Merk: ldapvi vil bruke det som måtte være standard editor (standardredigeringsprogram). Ved å kjøre export EDITOR=vim i skallets kommandolinje kan man konfigurere miljøet for å få en vi-klone som editor.

NB: lokale enheter med ltspfs vil ikke fungere lenger uten LDM.

Using Kerberos for NFS to mount home directories is a security feature. Workstations and LTSP clients won't work without Kerberos. The levels krb5, krb5i and krb5p are supported (krb5 means Kerberos authentication, i stands for integrity check and p for privacy, i.e. encryption); the load on both server and workstation increases with the security level, krb5i is a good choice and has been chosen as default.

/srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)
/srv/nfs4/home0  gss/krb5i(rw,sync,no_subtree_check)

Dette verktøyet tillater valg av forvalgt skriver, avhangig av plassering, maskin, eller gruppemedlemskap. For mer info, se /usr/share/doc/standardskriver/README.md.

The configuration file /etc/standardskriver.cfg has to be provided by the admin, see /usr/share/doc/standardskriver/examples/standardskriver.cfg as an example.

Hvis du foretrekker et grafisk grensesnitt for å jobbe med LDAP-databasen, ta en titt på jxplorer-pakken, som er tilgjengelig ut av boksen. For å få skrivetilgang, koble til på denne måten:

host: ldap.intern
port: 636
Security level: ssl + user + password
User dn: cn=admin,ou=ldap-access,dc=skole,dc=skolelinux,dc=no

ldap-createuser-krb is a small command line tool to create user accounts, it is invoked as follows:

ldap-createuser-krb5 [-u uid] [-g gid] [-G group[,group]...] [-d department] <username> <gecos>

All arguments except the username and GECOS field are optional, the latter usually should contain the full name of the user. Unless specified the tool will pick the next free UID and GID automatically and not assign any additional groups to the user. If no department is given, it will pick the first gosaDepartment from LDAP which is likely skole and for regular users usually not what you want, so you should pick an appropriate value for the user, e.g. Teachers or Students. After entering and confirming the password and entering the LDAP administrator password, ldap-createuser-krb5 will create the user account in LDAP, set the Kerberos password, create the home directory, and add a corresponding Samba user. The following screenshot shows an example invocation to create a user account named harhir for a teacher whose full name is "Harry Hirsch":

root@tjener:~# ldap-createuser-krb5 -d Teachers harhir "Harry Hirsch"
new user password: 
confirm password: 

dn: uid=harhir,ou=people,ou=Teachers,dc=skole,dc=skolelinux,dc=no
changetype: add
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: gosaAccount
objectClass: posixAccount
objectClass: shadowAccount
objectClass: krbPrincipalAux
objectClass: krbTicketPolicyAux
sn: Harry Hirsch
givenName: Harry Hirsch
uid: harhir
cn: Harry Hirsch
userPassword: {CRYPT}$y$j9T$TWnq55O1rvyLhjF.$oVf.t.RXC1v/4Y8FhV0umno629mo7bP7/YJyig6HET6
homeDirectory: /skole/tjener/home0/harhir
loginShell: /bin/bash
uidNumber: 1004
gidNumber: 1004
gecos: Harry Hirsch
shadowLastChange: 19641
shadowMin: 0
shadowMax: 99999
shadowWarning: 7
krbPwdPolicyReference: cn=users,cn=INTERN,cn=kerberos,dc=skole,dc=skolelinux,dc=no
krbPrincipalName: harhir@INTERN

ldap_initialize( <DEFAULT> )
Enter LDAP Password: 
add objectClass:
        top
        person
        organizationalPerson
        inetOrgPerson
        gosaAccount
        posixAccount
        shadowAccount
        krbPrincipalAux
        krbTicketPolicyAux
add sn:
        Harry Hirsch
add givenName:
        Harry Hirsch
add uid:
        harhir
add cn:
        Harry Hirsch
add userPassword:
        {CRYPT}$y$j9T$TWnq55O1rvyLhjF.$oVf.t.RXC1v/4Y8FhV0umno629mo7bP7/YJyig6HET6
add homeDirectory:
        /skole/tjener/home0/harhir
add loginShell:
        /bin/bash
add uidNumber:
        1004
add gidNumber:
        1004
add gecos:
        Harry Hirsch
add shadowLastChange:
        19641
add shadowMin:
        0
add shadowMax:
        99999
add shadowWarning:
        7
add krbPwdPolicyReference:
        cn=users,cn=INTERN,cn=kerberos,dc=skole,dc=skolelinux,dc=no
add krbPrincipalName:
        harhir@INTERN
adding new entry "uid=harhir,ou=people,ou=Teachers,dc=skole,dc=skolelinux,dc=no"
modify complete

Authenticating as principal root/admin@INTERN with password.
kadmin.local:  change_password harhir@INTERN
Enter password for principal "harhir@INTERN": 
Re-enter password for principal "harhir@INTERN": 
Password for "harhir@INTERN" changed.
kadmin.local:  lpcfg_do_global_parameter: WARNING: The "encrypt passwords" option is deprecated
Added user harhir.

Selv om du kan bruke stable-updates direkte, trenger du det ikke; stable-updates blir lagt inn i den stabile utgaven regelmessig når stabile versjoner blir laget, noe som grovt sett skjer hver annen måned.

Du kjører Debian Edu, fordi du foretrekker stabiliteten til Debian Edu. Det kjører fint, det er bare ett problem: Av og til er programvaren mer utdatert enn du liker. Her er hvor backports.org kommer inn.

Backports er pakker fra Debian testing (for det meste) og Debian unstable (i noen få tilfeller, f.eks. sikkerhetsoppdateringer), som er kompilert for Debian stable. Du vil derfor ikke trenge nye bibliotek (så langt det er mulig) på en stabil Debian-distribusjon som Debian Edu. Vi anbefaler deg til bare å plukke ut enkeltpakker som passer til dine behov, og ikke bruke alle pakkene som er tilgjengelig i backports.

Bruk av backports er enkelt:

echo "deb http://deb.debian.org/debian/ bookworm-backports main" > /etc/apt/sources.list.d/bookworm-backports.sources.list
apt update

Så kan man lett installere tilbakeførte pakker (backports). Den følgende kommando vil installere en tilbakeflyttet versjon av tuxtype:

apt install tuxtype/bookworm-backports

Tilbakeførte pakker (backports) blir automatisk oppdatert (hvis tilgjengelige) akkurat som andre pakker. Som i det normale arkivet, har tilbakeførte pakker tre seksjoner: Main, contrib og non-free.

If you want to upgrade from one version to another (for example from Bookworm 12.1 to 12.2) but you do not have Internet connectivity, only physical media, follow these steps:

Insert the CD / DVD / Blu-ray disc / USB flash drive and use the apt-cdrom command:

apt-cdrom add

For å sitere apt-cdrom(8) manualsiden:

Deretter, kjør disse to kommandoene for å oppgradere systemet:

apt update
apt full-upgrade

killer er et perl-skript som fjerner bakgrunnsprosesser. Dette er prosesser som hører til brukere som ikke lenger er logget inn på en maskin. Killer kjøres av Cron en gang i timen.

unattended-upgrades is a Debian package which will install security (and other) upgrades automatically. If installed, the package is preconfigured to install security upgrades. The logs are available in /var/log/unattended-upgrades/; also, there are always /var/log/dpkg.log and /var/log/apt/.

It is possible to save energy and money by automatically turning client machines off at night and back on in the morning. The package shutdown-at-night will try to turn off the machine every hour on the hour from 16:00 in the afternoon, but will not turn it off if it seems to have users. It will try to tell the BIOS to turn on the machine around 07:00 in the morning, and the main server will try to turn on machines from 06:30 by sending Wake-on-LAN packets. These times can be changed in the crontabs of individual machines.

Det er noen vurderinger man må gjøre før man gjør dette:

  #!/bin/sh
  PATH=/usr/sbin:$PATH
  export PATH
  sitesummary-nodes -w

  #!/bin/sh
  PATH=/usr/sbin:$PATH
  export PATH
  netgroup -h shutdown-at-night-hosts

For å få tilgang til maskiner bak en brannvegg fra Internett, vurder å installere pakken: autossh. Den kan brukes til å sette opp en SSH-tunnel til en maskin på Internett som du har tilgang til. Fra den maskinen, kan du få tilgang til en tjener bak brannveggen via SSH-tunnelen.

In the default installation, all services are running on the main server, hostname tjener. To simplify moving some to another machine, there is a minimal installation profile available. Installing with this profile will lead to a machine, which is part of the Debian Edu network, but which doesn't have any services running (yet).

Disse skrittene kreves for å sette opp en maskin som skal utføre noen/bestemte tjenester:

FIXME: The HowTos from https://wiki.debian.org/DebianEdu/HowTo/ are either user- or developer-specific. Let's move the user-specific HowTos over here (and delete them over there)! (But first ask the authors (see the history of those pages to find them) if they are fine with moving the howto and putting it under the GPL.)

Ta disse skrittene for å sette opp en tjener avsatt til oppgaven med å lagre brukerhjemmemapper og mulige andre data.

Now users should be able to access the files on 'nas-server.intern' directly by just visiting the '/tjener/nas-server/storage/' directory using any application on any workstation, LTSP thin client or LTSP server.

There are several ways to restrict SSH login, some are listed here.

+ : alice jane bob john : ALL
+ : ALL : 10.0.0.0/8 192.168.0.0/24 192.168.1.0/24
- : ALL : ALL
#

To support multiple languages these steps need to be done:

Users will then be able to choose the language via the LightDM display manager before logging in; this applies to Xfce, LXDE and LXQt. GNOME and KDE both come with their own internal region and language configuration tools, use these. MATE uses the Arctica greeter on top of LightDM whithout a language chooser. Run apt purge arctica-greeter to get the stock LightDM greeter.

libdvdcss er nødvendig for å spille de fleste kommersielle DVD-er. Av juridiske årsaker er den ikke inkludert i Debian (Edu). Hvis du har lov til å bruke den, kan du bygge dine egne lokale pakker ved hjelp av libdvd-pkg Debian-pakken. Kontroller at contrib er aktivert i /etc/apt/sources.list.

apt update
apt install libdvd-pkg

Svar på debconf-spørsmålene, kjør så dpkg-reconfigure libdvd-pkg.

Pakken fonts-linex, (som er installert som standard), installerer skrifttypen «Abecedario» som er en fin håndskriftsskrifttype for barn. Denne skrifttypen har flere varianter som kan bli brukt med barn: Prikket, og med linjer.

One generic term for both thin clients and diskless workstations is LTSP client.

Starting with Bullseye, LTSP is quite different from the previous versions. This concerns both setup and maintenance.

For information about LTSP in general, see the LTSP homepage. On systems with LTSP server profile, man ltsp provides more information.

Please note that the ltsp tool from LTSP has to be used carefully. For example, ltsp image / would fail to generate the SquashFS image in case of Debian machines (these have a separate /boot partition by default), ltsp ipxe would fail to generate the iPXE menu correctly (due to Debian Edu's thin client support), and ltsp initrd would mess up LTSP client boot completely.

The debian-edu-ltsp-install tool is a wrapper script for ltsp image, ltsp initrd and ltsp ipxe. It is used to setup and configure diskless workstation and thin client support (both 64-Bit and 32-Bit PC). See man debian-edu-ltsp-install or the script content to see how it works. All configuration is contained in the script itself (HERE documents) to facilitate site specific adjustments.

Examples how to use the wrapper script debian-edu-ltsp-install:

Besides bare (smallest thin client system), also display and desktop are available options. The display type offers a shutdown button, the desktop type runs Firefox ESR in kiosk mode on the client itself (more local RAM and CPU power required, but server load reduced).

The debian-edu-ltsp-ipxe tool is a wrapper script for ltsp ipxe. It makes sure that the /srv/tftp/ltsp/ltsp.ipxe file is Debian Edu specific. The command needs to be run after iPXE menu related items (like menu timeout or default boot settings) in the /etc/ltsp/ltsp.conf [server] section have been modified.

The debian-edu-ltsp-initrd tool is a wrapper script for ltsp initrd. It makes sure that a use case specific initrd (/srv/tftp/ltsp/ltsp.img) is generated and then moved to the use case related directory. The command needs to be run after the /etc/ltsp/ltsp.conf [clients] section has been modified.

The debian-edu-ltsp-chroot tool is a replacement for the ltsp-chroot tool shipped with LTSP5. It is used to execute commands in a specified LTSP chroot (like e.g. install, upgrade and remove packages).

Diskløs arbeidsstasjon

A diskless workstation runs all software locally. The client machines boot directly from the LTSP server without a local hard drive. Software is administered and maintained on the LTSP server, but runs on the diskless workstations. Home directories and system settings are stored on the server too. Diskless workstations are an excellent way of reusing older (but powerful) hardware with the same low maintenance costs as with thin clients.

Unlike workstations diskless workstations run without any need to add them with GOsa².

Tynnklient

A thin client setup enables an ordinary PC to function as an (X-)terminal, where all software runs on the LTSP server. This means that this machine boots via PXE without using a local client hard drive and that the LTSP server needs to be a powerful machine.

Debian Edu still supports the use of thin clients to enable the use of very old hardware.

Since Thin clients use X2Go, users should disable compositing to avoid display artefacts. In the default case (Xfce desktop environment): Settings -> Window Manager Tweaks -> Compositor.

Tynnklient

LTSP client boot will fail if the client's network interface requires a non-free firmware. A PXE installation can be used for troubleshooting problems with netbooting a machine; if the Debian Installer complains about a missing XXX.bin file then non-free firmware has to be added to the LTSP server's initrd.

Proceed like this on the LTSP server:

apt update && apt search ^firmware-

apt -y -q install firmware-linux

debian-edu-ltsp-install --diskless_workstation yes

/usr/share/debian-edu-config/tools/ltsp-addfirmware -h

ltsp image x2go-bare-amd64

debian-edu-ltsp-install --arch i386 --thin_type bare

debian-edu-ltsp-initrd

PXE stands for Preboot eXecution Environment. Debian Edu now uses the iPXE implementation for easier LTSP integration.

d-i     apt-setup/local1/repository string      http://example.org/debian stable main contrib non-free
d-i     apt-setup/local1/comment string         Example Software Repository
d-i     apt-setup/local1/source boolean         true
d-i     apt-setup/local1/key    string          http://example.org/key.asc

Pakken debian-edu-config kommer med et verktøy som hjelper til med å endre nettverket fra 10.0.0.0/8 til et annet. Se på /usr/share/debian-edu-config/tools/subnet-change. Den er beregnet for bruk rett etter installasjon på hovedtjener for å oppdatere LDAP og andre filer som må redigeres for å endre subnettet.

Merk at endring til ett av de subnett som allerede brukes andre steder i Debian Edu, ikke vil fungere. 192.168.1.0/24 er allerede satt opp som tynnklientnett. Å endre til dette subnettet krever manuell redigering av konfigurasjonsfiler for å fjerne doble oppføringer.

There is no easy way to change the DNS domain name. Changing it would require changes to both the LDAP structure and several files in the main server file system. There is also no easy way to change the host and DNS name of the main server (tjener.intern). To do so would also require changes to LDAP and files in the main server and client file system. In both cases the Kerberos setup would have to be changed, too.

Valg av LTSP-tjenerprofil, eller kombinert tjenerprofil installerer også xrdp og x2goserver -pakkene.

 #!/bin/bash
 set -e
  if [[ $UID -ne 0 ]] ; then  
     if ! groups | egrep -q sudo ; then
         echo "ERROR: You need to be root or a sudo group member."
         exit 1
     fi
 fi
 if ! egrep -q  ^deb-src /etc/apt/sources.list ; then
     echo "ERROR: Make sure /etc/apt/sources.list contains a deb-src line."
     exit 1
 fi
 TMP=$(mktemp -d)
 PULSE_UPSTREAM_VERSION="$(dpkg-query -W -f='${source:Upstream-Version}' pulseaudio)"
 XRDP_UPSTREAM_VERSION="$(dpkg-query -W -f='${source:Upstream-Version}' xrdp)"
 sudo apt -q update
 sudo apt -q install dpkg-dev
 cd $TMP
 apt -q source pulseaudio xrdp
 sudo apt -q build-dep pulseaudio xrdp
 cd pulseaudio-$PULSE_UPSTREAM_VERSION/
 ./configure
 cd $TMP/xrdp-$XRDP_UPSTREAM_VERSION/sesman/chansrv/pulse/
 sed -i 's/^PULSE/#PULSE/' Makefile
 sed -i "/#PULSE_DIR/a \
 PULSE_DIR = $TMP/pulseaudio-$PULSE_UPSTREAM_VERSION" Makefile
 make
 sudo cp *.so /usr/lib/pulse-$PULSE_UPSTREAM_VERSION/modules/
 sudo chmod 644 /usr/lib/pulse-$PULSE_UPSTREAM_VERSION/modules/module-xrdp*
 sudo service xrdp restart

The freeRADIUS server could be used to provide secure network connections. For this to work, install the freeradius and winbind packages on the main server and run /usr/share/debian-edu-config/tools/setup-freeradius-server to generate a basic, site specific configuration. This way, both EAP-TTLS/PAP and PEAP-MSCHAPV2 methods are enabled. All configuration is contained in the script itself to facilitate site specific adjustments. See the freeRADIUS homepage for details.

Additional configuration is needed to

End user devices need to be configured properly, these devices need to be PIN protected for the use of EAP (802.1x) methods. Users should also be educated to install the freeradius CA certificate on their devices to be sure to connect to the right server. This way their password can't be catched in case of a malicious server. The site specific certificate is available on the internal network.

Please note that configuring end user devices will be a real challenge due to the variety of devices. For Windows devices an installer script could be created, for Apple devices a mobileconfig file. In both cases the freeRADIUS CA certificate can be integrated, but OS specific tools are needed to create the scripts.

Connections to a user's home directory and to additional site specific shares (if configured) are possible for devices running Linux, Android, macOS, iOS, iPadOS, Chrome OS or Windows. For example, Android based devices require a file manager with SMB2/SMB3 support, also known as LAN access. X-plore or Total Commander with LAN plugin might be a good choice.

Use \\tjener\<username> or smb://tjener/<username> to access the home directory.

stable/education-development er en metapakke som har avhengigheter på en rekke programmeringsverktøy. Merk at det trengs nesten 2 GiB med diskplass hvis denne pakken installeres. For flere detaljer (kanskje for å kun installere noen få av pakkene), se siden for Debian Edu Development-pakker.

Advarsel: overvåkning av mennesker kan være uetisk og ulovlig i ditt område.

Some schools use control tools like Epoptes or Veyon to supervise their students. See also: Epoptes Homepage and Veyon Homepage.

Some schools use Squidguard or e2guardian to restrict Internet access.

Enhver bruker bør bytte sitt passord ved å bruke GOsa². For å gjøre dette, bruk en nettleser og besøk https://www/gosa/.

Using GOsa² to change the password ensures that passwords for Kerberos (krbPrincipalKey), LDAP (userPassword) and Samba are the same.

Å endre passord ved hjelp av PAM virker også i GDM login ledetekst, men dette vil bare oppdatere Kerberos passord, og ikke Samba og GOsa² (LDAP) passord. Så etter at du har byttet passord i login ledeteksten, bør du egentlig også endre den ved hjelp GOsa².

Frittstående Java-applikasjoner er støttet rett ut av boksen med pakken OpenJDK Java Runtime.

Alle brukere kan sende og motta e-post på det interne nettverket; sertifikater tilbys for å tillate sikring av forbindelsene med TLS. Hvis du vil tillate e-post utenfor dette, må administratoren sette opp e-posttjeneren exim4 med passende innstillinger. En kan starte med dpkg-reconfigure exim4-config.

Alle brukere som ønsker å bruke Thunderbird må konfigurere den som følger. For en bruker med brukernavn jdoe er den interne e-postadressen: jdoe@postoffice.intern.

Most of the time, the developer mailing list is our main medium for communication, though we also have #debian-edu on irc.debian.org and even, sometimes, real gatherings, where we meet each other in person.

En fin måte å få med seg hva som foregår i utviklingen av Debian Edu er å melde seg på e-postlisten for innmeldinger av bidrag.

Debian Edu uses the Debian Bug Tracking System (BTS). View existing bug reports and feature requests or create new ones. Please report all bugs against the package debian-edu-config. Take a look at How To Report Bugs for more information on bug reporting in Debian Edu.

Dette dokumentet trenger din hjelp! For det første, så er det ikke ferdig ennå: Hvis du leser det, så vil du se flere FIXME i teksten. Hvis du vet litt om emnet og hva som må forklares der, er det fint om du vil dele kunnskapen din med oss.

The source of the text is a wiki and can be edited with a simple webbrowser. Just go to https://wiki.debian.org/DebianEdu/Documentation/Bookworm/ and you can contribute easily. Note: a user account is needed to edit the pages; you may need to create a wiki user account first.

En annen god måte å bidra på er å hjelpe brukere ved å oversette programvare og dokumentasjon. Informasjon om hvordan oversette dette dokumentet kan du finne i oversettelsekapittelet av denne boken. Vurder å hjelpe til med oversettingen av denne boken!

Lists of companies providing professional support are available from https://wiki.debian.org/DebianEdu/Help/ProfessionalHelp.

Copyright (C) 2007-2021 Holger Levsen < holger@layer-acht.org > and others, see the Copyright for the full list of copyright owners.

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

Version 2, June 1991

Copyright (C) 1989, 1991 Free Software Foundation, Inc. 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed.

0. This License applies to any program or other work which contains a notice placed by the copyright holder saying it may be distributed under the terms of this General Public License. The "Program", below, refers to any such program or work, and a "work based on the Program" means either the Program or any derivative work under copyright law: that is to say, a work containing the Program or a portion of it, either verbatim or with modifications and/or translated into another language. (Hereinafter, translation is included without limitation in the term "modification".) Each licensee is addressed as "you".

Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the Program (independent of having been made by running the Program). Whether that is true depends on what the Program does.

1. You may copy and distribute verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty; and give any other recipients of the Program a copy of this License along with the Program.

You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee.

2. You may modify your copy or copies of the Program or any portion of it, thus forming a work based on the Program, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions:

These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Program, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works. But when you distribute the same sections as part of a whole which is a work based on the Program, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it.

Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the intent is to exercise the right to control the distribution of derivative or collective works based on the Program.

In addition, mere aggregation of another work not based on the Program with the Program (or with a work based on the Program) on a volume of a storage or distribution medium does not bring the other work under the scope of this License.

3. You may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following:

The source code for a work means the preferred form of the work for making modifications to it. For an executable work, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the executable. However, as a special exception, the source code distributed need not include anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component itself accompanies the executable.

If distribution of executable or object code is made by offering access to copy from a designated place, then offering equivalent access to copy the source code from the same place counts as distribution of the source code, even though third parties are not compelled to copy the source along with the object code.

4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance.

5. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Program or its derivative works. These actions are prohibited by law if you do not accept this License. Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it.

6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions. You may not impose any further restrictions on the recipients' exercise of the rights granted herein. You are not responsible for enforcing compliance by third parties to this License.

7. If, as a consequence of a court judgment or allegation of patent infringement or for any other reason (not limited to patent issues), conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not distribute the Program at all. For example, if a patent license would not permit royalty-free redistribution of the Program by all those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Program.

If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is intended to apply and the section as a whole is intended to apply in other circumstances.

It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system, which is implemented by public license practices. Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system; it is up to the author/donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice.

This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License.

8. If the distribution and/or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Program under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded. In such case, this License incorporates the limitation as if written in the body of this License.

9. The Free Software Foundation may publish revised and/or new versions of the General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns.

Each version is given a distinguishing version number. If the Program specifies a version number of this License which applies to it and "any later version", you have the option of following the terms and conditions either of that version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of this License, you may choose any version ever published by the Free Software Foundation.

10. If you wish to incorporate parts of the Program into other free programs whose distribution conditions are different, write to the author to ask for permission. For software which is copyrighted by the Free Software Foundation, write to the Free Software Foundation; we sometimes make exceptions for this. Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally.

NO WARRANTY

11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.

12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

END OF TERMS AND CONDITIONS

Følgende tidligere Debian Edu-utgivelser ble utviklet ytterligere:

En komplett og detaljert oversikt om eldre utgivelser finnes i Appendix C of the Jessie manual; Eller se de relaterte håndbokutgivelser på release manuals page.