Debian Edu / Skolelinux är en Linux-distribution skapad av Debian Edu-projektet. Som en Debian Ren Blandning distribution det är ett officiellt Debian underprojekt.

Vad detta betyder för din skola är att Skolelinux är en version av Debian som erbjuder en out-of-the-box-miljö för ett helt konfigurerat skolnätverk.

Skolelinux projektet i Norge grundades den 2 juli 2001 och ungefär samtidigt startade Raphaël Hertzog Debian-Edu i Frankrike. Sedan 2003 är båda projekten förenade, men båda namnen stannade. "Skole" och (Debian-)"Education" är bara två välförstådda termer i dessa regioner.

Idag används systemet i flera länder runt om i världen.

Det här avsnittet av dokumentet beskriver nätverksarkitekturen och tjänsterna som tillhandahålls av en Skolelinux installation.

Figuren är en skiss över den antagna nätverkstopologin. Standardinställningen för ett Skolelinux nätverk förutsätter att det finns en (och bara en) huvudserver, samtidigt som det tillåter inkludering av både normala arbetsstationer och LTSP-servrar (med tillhörande tunna klienter och/eller disklösa arbetsstationer). Antalet arbetsstationer kan vara så stort eller litet som du vill (med början från ingen till många). Detsamma gäller för LTSP-servrarna, som var och en är på ett separat nätverk så att trafiken mellan klienterna och LTSP-servern inte påverkar resten av nätverkstjänsterna. LTSP förklaras i detalj i det relaterade Hur man gör-kapitlet.

Anledningen till att det bara kan finnas en huvudserver i varje skolnätverk är att huvudservern tillhandahåller DHCP, och det kan bara finnas en maskin som gör det i varje nätverk. Det är möjligt att flytta tjänster från huvudservern till andra maskiner genom att ställa in tjänsten på en annan dator, och därefter uppdatera DNS konfigurationen, peka DNS-aliaset för den tjänsten till rätt dator.

För att förenkla standardinställningen av Skolelinux körs internetanslutningen över en separat router, även kallad gateway. Se kapitlet Internetrouter för detaljer om hur man konfigurerar en sådan gateway om det inte är möjligt att konfigurera en befintlig efter behov.

Alla Linux-maskiner som är installerade med Skolelinux installationsprogrammet kommer att kunna administreras från en central dator, troligen servern. Det kommer att vara möjligt att logga in på alla maskiner via SSH, och därigenom ha full tillgång till maskinerna. Som root måste man köra kinit först för att få en Kerberos TGT.

All användarinformation lagras i en LDAP-katalog. Uppdateringar av användarkonton görs mot denna databas, som används av klienterna för användarautentisering.

Syftet med de olika profilerna förklaras i nätverksarkitektur kapitlet.

Om LTSP är tänkt att användas, ta en titt på wikisidan för LTSP Hårdvarukrav.

En lista över testad hårdvara finns på https://wiki.debian.org/DebianEdu/Hardware/ . Denna lista är inte helt komplett.

https://wiki.debian.org/InstallingDebianOn är ett försök att dokumentera hur man installerar, konfigurerar och använder Debian på viss specifik hårdvara, så att potentiella köpare kan veta om den hårdvaran stöds och befintliga ägare att veta hur man får ut det bästa av den hårdvaran.

När du använder standardnätverksarkitekturen gäller dessa regler:

En router/gateway, ansluten till Internet på det externa gränssnittet och som körs på IP -adressen 10.0.0.1 med nätmask 255.0.0.0 på det interna gränssnittet, behövs för att ansluta till Internet.

Routern ska inte köra en DHCP-server, den kan köra en DNS -server, även om detta inte behövs och inte kommer att användas.

In case you do not already have a router or your existing router cannot be set up accordingly, any machine which fulfills the requirements for a minimal Debian installation and which has at least two network interfaces can be turned into a gateway between the existing network and the Debian Edu one. See installation documentation for a simple way to install and set up a Debian machine using debian-edu-router-config.

Om du behöver något för en inbäddad router eller åtkomstpunkt rekommenderar vi att du använder OpenWRT, även om du naturligtvis också kan använda den ursprungliga fasta programvaran. Det är lättare att använda den ursprungliga fasta programvaran; att använda OpenWRT ger dig fler valmöjligheter och kontroll. Kontrollera OpenWRT webbsidorna för en lista över hårdvara som stöds.

Det är möjligt att använda en annan nätverkskonfiguration (det finns en dokumenterad procedur för att göra detta), men om du är inte tvingas göra detta av en befintlig nätverksinfrastruktur, så rekommenderar vi att du inte gör det och rekommenderar att du stannar med standard nätverksarkitekturenr.

We recommend that you read or at least take a look at the release notes for Debian Bookworm before you start installing a system for production use. There is more information about the Debian Bookworm release available in its installation manual.

Prova Debian Edu/Skolelinux, det borde bara fungera.

Det rekommenderas dock att du läser kapitlen om krav på hårdvara och nätverk och om arkitekturen innan du börjar installera en huvudserver .

Var noga med att också läsa kapitlet komma igång"> för att komma igång med denna handbok, eftersom det förklarar hur du loggar in för första gången.

När du gör en Debian Edu-installation har du några alternativ att välja mellan. Var inte rädd; det finns inte många. Vi har gjort ett bra jobb med att dölja komplexiteten i Debian under installationen och därefter. Debian Edu är dock Debian, och om du vill finns det mer än 59 000 paket att välja mellan och en miljard konfigurationsalternativ. För majoriteten av våra användare bör våra standardinställningar vara bra. Observera: om LTSP är avsedd att användas, välj en lättviktig skrivbordsmiljö.

DEBIAN_FRONTEND=noninteractive apt install -y -q debian-edu-router-config

lshw -class network

ip addr flush <interface>

dpkg-reconfigure --force uif debian-edu-router-config

deb http://deb.debian.org/debian/ bookworm main 
deb http://security.debian.org bookworm-security main 

sudo dd if=debian-edu-amd64-XXX.iso of=/dev/sdX bs=1M

lsblk -p

/usr/share/debian-edu-config/tools/pxe-addfirmware

d-i    pkgsel/include string my-extra-package(s)

Textläget och den grafiska installationen är funktionellt identiska - bara utseendet är annorlunda. Det grafiska läget ger möjlighet att använda en mus, och ser naturligtvis mycket snyggare och modernare ut. Om inte hårdvaran har problem med det grafiska läget, finns det ingen anledning att inte använda den.

Så här är en skärmdumpstur genom en grafisk 64-bitars HuvudServer + Arbetsstation + LTSP Server-installation (i BIOS-läge) och hur det ser ut vid den första uppstarten av huvudservern och en PXE-uppstart på LTSP-klientnätverket (tunn klientsessionsskärm - och inloggningsskärm efter sessionen till höger har klickats).

Under installationen av huvudservern så kommer ett första användarkonto att skapas. I följande text kommer detta konto att hänvisas till som "första användaren". Det här kontot är speciellt, eftersom hemkatalogbehörigheten är inställd på 700 (så chmod o+x ~ behövs för att göra personliga webbsidor tillgängliga), och den första användaren kan använda sudo för att bli root.

See the information about Debian Edu specific file system access configuration before adding users; adjust to your site's policy if needed.

Efter installationen är de första sakerna du behöver göra den första användaren:

Lägga till användare och arbetsstationer beskrivs i detalj nedan, så läs detta kapitel fullständigt. Det täcker hur man utför dessa minimala steg korrekt samt andra saker som alla förmodligen kommer att behöva göra.

Det finns ytterligare information tillgänglig på andra ställen i denna manual: Nya funktioner i Bullseye kapitlet bör läsas av alla som är bekanta med tidigare utgåvor. Och för de som uppgraderar från en tidigare version, se till att läsa kapitlet Uppgraderingar.

Om generisk DNS-trafik blockeras från ditt nätverk och du behöver använda någon specifik DNS-server för att söka upp internetvärdar, måste du tala om för DNS-servern att använda denna server som sin "sändare". Uppdatera /etc/bind/named.conf.options och ange IP-adressen för den DNS-server som ska användas.

Det länkade Hur man gör kapitlet innehåller fler tips och tricks och några vanligt ställda frågor.

GOsa² är ett webbaserat hanteringsverktyg som hjälper till att hantera några viktiga delar av din Debian Edu-installation. Med GOsa² kan du hantera (lägga till, ändra eller ta bort) dessa huvudgrupper:

För GOsa²-åtkomst behöver du Skolelinux huvudserver och ett (klient)system med en webbläsare installerad som kan vara själva huvudservern om den installerades som en så kallad kombinerad server (Huvudserver + LTSP-server + arbetsstationsprofiler).

If you (probably accidentally) installed a pure Main Server profile and don't have a client with a web-browser handy, it's easy to install a minimal desktop on the main server using this command sequence in a (non-graphical) shell as the user you created during the main server's installation (first user):

  $ sudo apt update
  $ sudo apt install task-desktop-xfce lightdm education-menus
  $ sudo service lightdm start

Från en webbbläsare använd webbadress https://www/gosa för GOsa² åtkomst, och logga in som den första användaren.

First, click on "Users" in the left navigation menu. The right side of the screen will change to show a table with department folders for "Students" and "Teachers" and the account of the GOsa² Administrator (the first created user). Above this table you can see a field called Base that allows you to navigate through your tree structure (move your mouse over that area and a drop-down menu will appear) and to select a base folder for your intended operations (e.g. adding a new user).

Hanteringen av grupper är mycket lik hanteringen av användare.

Du kan ange ett namn och en beskrivning per grupp. Se till att du väljer rätt nivå i LDAP-trädet när du skapar en ny grupp.

Genom att lägga till användare i en nyskapad grupp kommer du tillbaka till användarlistan, där du förmodligen vill använda filter rutan för att hitta användare. Kontrollera LDAP-trädnivån också.

Grupperna som anges i grupphanteringen är också vanliga unix-grupper, så du kan använda dem för filbehörigheter också.

Machine management basically allows you to manage all networked devices in your Debian Edu network. Every machine added to the LDAP directory using GOsa² has a hostname, an IP address, a MAC address and a domain name (which is usually "intern"). For a fuller description of the Debian Edu architecture see the architecture chapter of this manual.

Diskless workstations and thin clients work out-of-the-box in case of a combined main server.

Workstations with disks (including separate LTSP servers) have to be added with GOsa². Behind the scenes, both a machine specific Kerberos Principal (sort of account) and a related keytab file (containing a key used as password) are generated; the keytab file needs to be present on the workstation to be able to mount users' home directories. Once the added system has been rebooted, log into it as root and run /usr/share/debian-edu-config/tools/copy-host-keytab.

To create Principal and keytab file for a system already configured with GOsa², log in on the main server as root and run

/usr/share/debian-edu-config/tools/gosa-modify-host <hostname> <IP>

Vänligen notera: skapande av värdtangenter är möjligt för system av typen arbeitsstationer, servrar och terminaler men inte för de av typen nätenheter. Se kapitlet Hur gör du för nätverksklienter för NFS-konfigurationsalternativ.

To add a machine, use the GOsa² main menu, systems, add. The name of the machine is expected to be a valid unqualified hostname, do not add the domain name here. You can use an IP address/hostname from the preconfigured address space 10.0.0.0/8. Currently there are only two predefined fixed addresses: 10.0.2.2 (tjener) and 10.0.0.1 (gateway). The addresses from 10.0.16.20 to 10.0.31.254 (roughly 10.0.16.0/20 or 4000 hosts) are reserved for DHCP and are assigned dynamically.

För att tilldela en värd med MAC-adressen 52:54:00:12:34:10 en statisk IP-adress i GOsa² måste du ange MAC-adressen, värdnamnet och IP-adressen; alternativt kan du klicka på knappen Föreslå ip som kommer att visa den första lediga fasta adressen i 10.0.0.0/8, troligen ungefär 10.0.0.2 om du lägger till den första maskinen på detta sätt. Det kan vara bättre att först tänka på ditt nätverk: till exempel kan du använda 10.0.0.x med x>10 och x<50 för servrar och x>100 för arbetsstationer. Glöm inte att aktivera det nyss tillagda systemet. Med undantag för huvudservern kommer då alla system att ha en matchande ikon.

If the machines have booted as thin clients/diskless workstations or have been installed using any of the networked profiles, the sitesummary2ldapdhcp script can be used to automatically add machines to GOsa². For simple machines it will work out of the box, for machines with more than one mac address the actually used one has to be chosen, sitesummary2ldapdhcp -h shows usage information. Please note, that the IP addresses shown after usage of sitesummary2ldapdhcp belong to the dynamic IP range. These systems can then be modified to suit your network: rename each new system, activate DHCP and DNS, add it to netgroups (see screenshot below for recommended netgroups), reboot the system afterwards. The following screenshots show how this looks in practice:

root@tjener:~# sitesummary2ldapdhcp -a -i ether-22:11:33:44:55:ff
info: Create GOsa machine for am-2211334455ff.intern [10.0.16.21] id ether-22:11:33:44:55:ff.
 
Enter password if you want to activate these changes, and ^c to abort.
 
Connecting to LDAP as cn=admin,ou=ldap-access,dc=skole,dc=skolelinux,dc=no
enter password: ********
root@tjener:~#

Ett cronjob som uppdaterar DNS körs varje timme; su -c ldap2bind kan användas för att utlösa uppdateringen manuellt.

Paketet p910nd är installerat som standard på ett system med Arbetsstation profilen.

It is recommended to disable all self-advertising features in the used network printers. Instead, assign a fixed IP address with GOsa² and configure them as AppSocket/HP JetDirect network printers.

Denna sektion förklarar hur man använder apt full-upgrade.

Att använda apt är verkligen enkelt. För att uppdatera ett system måste du utföra två kommandon på kommandoraden som root: apt update (som uppdaterar listorna över tillgängliga paket) och apt full-upgrade (som uppgraderar paketen för vilka en uppgradering är tillgänglig).

It is also a good idea to upgrade using the C locale to get English output which in cases of problems is more likely to produce results in search engines.

LC_ALL=C apt full-upgrade -y

Efter att ha uppgraderat paketet debian-edu-config kan ändrade Cfengine-konfigurationsfiler vara tillgängliga. Kör ls -ltr /etc/cfengine3/debian-edu/ för att kontrollera om så är fallet. För att tillämpa ändringarna, kör LC_ALL=C cf-agent -D installation.

It is important to run debian-edu-ltsp-install --diskless_workstation yes after LTSP server upgrades to keep the SquashFS image for diskless clients in sync.

Efter en punktutgivningsuppgradering av ett system med profilen Huvudserver eller LTSP Server måste debian-edu-pxeinstall köras för att uppdatera PXE:s installationsmiljö.

Det är också en bra idé att installera cron-apt och apt-listchanges och konfigurera dem för att skicka e-post till en adress du läser.

cron-apt kommer att meddela dig en gång om dagen via e-post om eventuella paket som kan uppgraderas. Den installerar inte dessa uppgraderingar, men laddar ner dem (vanligtvis på natten), så du behöver inte vänta på nedladdningen när du gör apt full-upgrade.

Automatisk installation av uppdateringar kan göras enkelt om så önskas, det behöver bara att paketet unattended-upgrades är installerat och konfigurerat som enligt beskrivningen på wiki.debian.org/UnattendedUpgrades.

apt-listchanges kan skicka nya ändringsloggposter till dig via e-post, eller alternativt visa dem i terminalen när du kör apt.

För säkerhetskopieringshantering peka din webbläsare till https://www/slbackup-php. Observera att du måste komma åt denna sida via SSL, eftersom du måste ange root-lösenordet där. Om du försöker komma åt den här sidan utan att använda SSL kommer det att misslyckas.

Note: the site will only work if you temporarily allow SSH root login on the backup server, which is the main server (tjener.intern) by default.

By default, backups of /skole/tjener/home0, /etc/, /root/.svk and LDAP are stored in the /skole/backup/ directory which is managed as separate partition by LVM. If you only want to have spare copies of things (in case you delete them) this setup should be fine for you.

Var medveten om att det här säkerhetskopieringsschemat inte skyddar dig från trasiga hårddiskar.

Om du vill säkerhetskopiera din skolas data till en extern server, en bandenhet eller annan hårddisk måste du ändra den befintliga konfigurationen lite.

Om du vill återställa en komplett mapp är det bästa alternativet att använda kommandoraden:

$ sudo rdiff-backup -r <date>  \
   /skole/backup/tjener/skole/tjener/home0/user \
   /skole/tjener/home0/user_<date>

Detta lämnar innehållet från /skole/tjener/home0/user för <date> i mappen /skole/tjener/home0/user_<date>

Om du vill återställa en enskild fil bör du kunna välja filen (och versionen) från webbgränssnittet och bara ladda ner den filen.

Om du vill bli av med äldre säkerhetskopior, välj "Underhåll" i menyn på säkerhetskopieringssidan och välj den äldsta ögonblicksbilden att behålla:

More information about Debian Edu customisations useful for system administrators can be found in the Administration Howto chapter and in the Advanced administration Howto chapter

Upgrading Debian from one distribution to the next is generally rather easy. For Debian Edu this is unfortunately a bit more complicated as we modify configuration files in ways we shouldn't. However we have documented the needed steps below. (See Debian bug 311188 for more information how Debian Edu should modify configuration files.)

In general, upgrading the servers is more difficult than the workstations and the main server is the most difficult to upgrade.

If you want to be sure that after the upgrade everything works as before, you should test the upgrade on a test system or systems configured the same way as your production machines. There you can test the upgrade without risk and see if everything works as it should.

Make sure to also read the information about the current Debian Stable release in its installation manual.

It may also be wise to wait a bit and keep running Oldstable for a few weeks longer, so that others can test the upgrade and document any problems they experience. The Oldstable release of Debian Edu will receive continued support for some time after the next Stable release, but when Debian ceases support for Oldstable, Debian Edu will necessarily do the same.

Be prepared: make sure you have tested the upgrade from Bullseye in a test environment or have backups ready to be able to go back.

Please note that the following recipe applies to a default Debian Edu main server installation (desktop=xfce, profiles Main Server, Workstation, LTSP Server). (For a general overview concerning Bullseye to Bookworm upgrade, see: https://www.debian.org/releases/bookworm/releasenotes)

Använd inte X, använd en virtuell konsol, logga in som root.

If apt finishes with an error, try to fix it and/or run apt -f install and then apt -y full-upgrade once again.

apt update
apt full-upgrade

sed -i 's/bullseye/bookworm/g' /etc/apt/sources.list
export LC_ALL=C
apt update
apt upgrade --without-new-pkgs
apt full-upgrade

cf-agent -v -D installation

To upgrade from any older release, you will need to upgrade to the Bullseye based Debian Edu release first, before you can follow the instructions provided above. Instructions are given in the Manual for Debian Edu Bullseye about how to upgrade to Bullseye from the previous release, Buster.

Using etckeeper, all files in /etc/ are tracked using Git as a version control system.

This makes it possible to see when a file is added, changed and removed, as well as what was changed if the file is a text file. The git repository is stored in /etc/.git/.

Every hour, any changes are automatically recorded, allowing configuration history to be extracted and reviewed.

To look at the history, the command etckeeper vcs log is used. To check the differences between two points in time, a command like etckeeper vcs diff can be used.

See the output of man etckeeper for more information.

Lista på användbara kommandon:

etckeeper vcs log
etckeeper vcs status
etckeeper vcs diff
etckeeper vcs add .
etckeeper vcs commit -a
man etckeeper

etckeeper vcs log

etckeeper vcs status

etckeeper vcs commit -a /etc/resolv.conf

In Debian Edu, all partitions other than the /boot/ partition are on logical LVM volumes. With Linux kernels since version 2.6.10, it is possible to extend partitions while they are mounted. Shrinking partitions still needs to happen while the partition is unmounted.

It is a good idea to avoid creating very large partitions (over, say, 20GiB), because of the time it takes to run fsck on them or to restore them from backup if the need arises. It is better, if possible, to create several smaller partitions than one very large one.

The helper script debian-edu-fsautoresize is provided to make it easier to extend full partitions. When invoked, it reads the configuration from /usr/share/debian-edu-config/fsautoresizetab, /site/etc/fsautoresizetab and /etc/fsautoresizetab. It then proposes to extend partitions with too little free space, according to the rules provided in these files. If run with no arguments, it will only show the commands needed to extend the file system. The argument -n is needed to actually execute these commands to extend the file systems.

Skriptet körs automatiskt varje timme på varje klient listad i fsautoresize-hosts nätgruppen.

When the partition used by the Squid proxy is resized, the value for cache size in etc/squid/squid.conf needs to be updated as well. The helper script /usr/share/debian-edu-config/tools/squid-update-cachedir is provided to do this automatically, checking the current partition size of /var/spool/squid/ and configuring Squid to use 80% of this as its cache size.

lvextend -L30G /dev/vg_system/skole+tjener+home0
resize2fs /dev/vg_system/skole+tjener+home0

ldapvi är ett verktyg för att redigera LDAP-databasen med en vanlig textredigerare på kommandoraden.

Följande måste utföras:

ldapvi -ZD '(cn=admin)'

Note: ldapvi will use whatever is the default editor. By executing export EDITOR=vim in the shell prompt one can configure the environment to get a vi clone as editor.

Varning: ldapvi är ett mycket kraftfullt verktyg. Var försiktig och ha inte sönder LDAP-databasen, samma varning gäller för JXplorer.

Using Kerberos for NFS to mount home directories is a security feature. Workstations and LTSP clients won't work without Kerberos. The levels krb5, krb5i and krb5p are supported (krb5 means Kerberos authentication, i stands for integrity check and p for privacy, i.e. encryption); the load on both server and workstation increases with the security level, krb5i is a good choice and has been chosen as default.

/srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)
/srv/nfs4/home0  gss/krb5i(rw,sync,no_subtree_check)

Detta verktyg gör det möjligt att ställa in standardskrivaren beroende på plats, maskin eller gruppmedlemskap. För mer information, se /usr/share/doc/standardskriver/README.md.

Konfigurationsfilen /etc/standardskriver.cfg måste tillhandahållas av admin, se /usr/share/doc/standardskriver/examples/standardskriver.cfg som ett exempel.

Om du föredrar ett GUI att arbeta med LDAP-databasen, kolla in paketet jxplorer , som installeras som standard. För att få skrivåtkomst anslut så här:

host: ldap.intern
port: 636
Security level: ssl + user + password
User dn: cn=admin,ou=ldap-access,dc=skole,dc=skolelinux,dc=no

ldap-createuser-krb is a small command line tool to create user accounts, it is invoked as follows:

ldap-createuser-krb5 [-u uid] [-g gid] [-G group[,group]...] [-d department] <username> <gecos>

All arguments except the username and GECOS field are optional, the latter usually should contain the full name of the user. Unless specified the tool will pick the next free UID and GID automatically and not assign any additional groups to the user. If no department is given, it will pick the first gosaDepartment from LDAP which is likely skole and for regular users usually not what you want, so you should pick an appropriate value for the user, e.g. Teachers or Students. After entering and confirming the password and entering the LDAP administrator password, ldap-createuser-krb5 will create the user account in LDAP, set the Kerberos password, create the home directory, and add a corresponding Samba user. The following screenshot shows an example invocation to create a user account named harhir for a teacher whose full name is "Harry Hirsch":

root@tjener:~# ldap-createuser-krb5 -d Teachers harhir "Harry Hirsch"
new user password: 
confirm password: 

dn: uid=harhir,ou=people,ou=Teachers,dc=skole,dc=skolelinux,dc=no
changetype: add
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: gosaAccount
objectClass: posixAccount
objectClass: shadowAccount
objectClass: krbPrincipalAux
objectClass: krbTicketPolicyAux
sn: Harry Hirsch
givenName: Harry Hirsch
uid: harhir
cn: Harry Hirsch
userPassword: {CRYPT}$y$j9T$TWnq55O1rvyLhjF.$oVf.t.RXC1v/4Y8FhV0umno629mo7bP7/YJyig6HET6
homeDirectory: /skole/tjener/home0/harhir
loginShell: /bin/bash
uidNumber: 1004
gidNumber: 1004
gecos: Harry Hirsch
shadowLastChange: 19641
shadowMin: 0
shadowMax: 99999
shadowWarning: 7
krbPwdPolicyReference: cn=users,cn=INTERN,cn=kerberos,dc=skole,dc=skolelinux,dc=no
krbPrincipalName: harhir@INTERN

ldap_initialize( <DEFAULT> )
Enter LDAP Password: 
add objectClass:
        top
        person
        organizationalPerson
        inetOrgPerson
        gosaAccount
        posixAccount
        shadowAccount
        krbPrincipalAux
        krbTicketPolicyAux
add sn:
        Harry Hirsch
add givenName:
        Harry Hirsch
add uid:
        harhir
add cn:
        Harry Hirsch
add userPassword:
        {CRYPT}$y$j9T$TWnq55O1rvyLhjF.$oVf.t.RXC1v/4Y8FhV0umno629mo7bP7/YJyig6HET6
add homeDirectory:
        /skole/tjener/home0/harhir
add loginShell:
        /bin/bash
add uidNumber:
        1004
add gidNumber:
        1004
add gecos:
        Harry Hirsch
add shadowLastChange:
        19641
add shadowMin:
        0
add shadowMax:
        99999
add shadowWarning:
        7
add krbPwdPolicyReference:
        cn=users,cn=INTERN,cn=kerberos,dc=skole,dc=skolelinux,dc=no
add krbPrincipalName:
        harhir@INTERN
adding new entry "uid=harhir,ou=people,ou=Teachers,dc=skole,dc=skolelinux,dc=no"
modify complete

Authenticating as principal root/admin@INTERN with password.
kadmin.local:  change_password harhir@INTERN
Enter password for principal "harhir@INTERN": 
Re-enter password for principal "harhir@INTERN": 
Password for "harhir@INTERN" changed.
kadmin.local:  lpcfg_do_global_parameter: WARNING: The "encrypt passwords" option is deprecated
Added user harhir.

While you can use stable-updates directly, you don't have to: stable-updates are pushed into the stable suite regularly when stable point releases are done, which roughly happens every two months.

Du kör Debian Edu eftersom du föredrar stabiliteten hos Debian Edu. Det går jättebra; det finns bara ett problem: ibland är programvaran lite mer föråldrad än du vill. Det är här backports.debian.org kliver in.

Backports are recompiled packages from Debian testing (mostly) and Debian unstable (in a few cases only, e.g. security updates), so they will run without new libraries (wherever this is possible) on a stable Debian distribution like Debian Edu. We recommend you to pick out individual backports which fit your needs, and not to use all backports available there.

Att använda backports är enkelt:

echo "deb http://deb.debian.org/debian/ bookworm-backports main" > /etc/apt/sources.list.d/bookworm-backports.sources.list
apt update

After which one can install backported packages easily, the following command will install a backported version of tuxtype:

apt install tuxtype/bookworm-backports

Backports are automatically updated (if available) just like other packages. Like the normal archive, backports has three sections: main, contrib and non-free.

Om du vill uppgradera från en version till en annan (till exempel från Bookworm 12.1 till 12.2) men du inte har internetanslutning, bara fysisk media, följ dessa steg:

Sätt in CD / DVD / Blu-ray skiva / USB-minne och använd kommandot apt-cdrom:

apt-cdrom add

För att citera apt-cdrom(8) man sidan:

Kör sedan dessa två kommandon för att uppgradera systemet:

apt update
apt full-upgrade

killer is a perl script that gets rid of background jobs. Background jobs are defined as processes that belong to users who are not currently logged into the machine. It's run by cron job once an hour.

unattended-upgrades is a Debian package which will install security (and other) upgrades automatically. If installed, the package is preconfigured to install security upgrades. The logs are available in /var/log/unattended-upgrades/; also, there are always /var/log/dpkg.log and /var/log/apt/.

It is possible to save energy and money by automatically turning client machines off at night and back on in the morning. The package shutdown-at-night will try to turn off the machine every hour on the hour from 16:00 in the afternoon, but will not turn it off if it seems to have users. It will try to tell the BIOS to turn on the machine around 07:00 in the morning, and the main server will try to turn on machines from 06:30 by sending Wake-on-LAN packets. These times can be changed in the crontabs of individual machines.

Some considerations should be kept in mind when setting this up:

  #!/bin/sh
  PATH=/usr/sbin:$PATH
  export PATH
  sitesummary-nodes -w

  #!/bin/sh
  PATH=/usr/sbin:$PATH
  export PATH
  netgroup -h shutdown-at-night-hosts

För att komma åt maskiner bakom en brandvägg från Internet, överväg att installera paketet autossh. Det kan användas för att sätta upp en SSH-tunnel till en maskin på Internet som du har tillgång till. Från den maskinen kan du komma åt servern bakom brandväggen via SSH-tunneln.

In the default installation, all services are running on the main server, hostname tjener. To simplify moving some to another machine, there is a minimal installation profile available. Installing with this profile will lead to a machine, which is part of the Debian Edu network, but which doesn't have any services running (yet).

Detta är de steg som krävs för att konfigurera en maskin som är avsedd för vissa tjänster:

FIXME: The HowTos from https://wiki.debian.org/DebianEdu/HowTo/ are either user- or developer-specific. Let's move the user-specific HowTos over here (and delete them over there)! (But first ask the authors (see the history of those pages to find them) if they are fine with moving the howto and putting it under the GPL.)

Utför dessa steg för att konfigurera en dedikerad lagringsserver för användarhemkataloger och eventuellt annan data.

Now users should be able to access the files on 'nas-server.intern' directly by just visiting the '/tjener/nas-server/storage/' directory using any application on any workstation, LTSP thin client or LTSP server.

Det finns flera sätt att begränsa åtkomst till ssh-inloggning, några listas här.

+ : alice jane bob john : ALL
+ : ALL : 10.0.0.0/8 192.168.0.0/24 192.168.1.0/24
- : ALL : ALL
#

För att stödja flera språk dessa steg måste göras:

Users will then be able to choose the language via the LightDM display manager before logging in; this applies to Xfce, LXDE and LXQt. GNOME and KDE both come with their own internal region and language configuration tools, use these. MATE uses the Arctica greeter on top of LightDM whithout a language chooser. Run apt purge arctica-greeter to get the stock LightDM greeter.

libdvdcss behövs för att spela de flesta kommersiella DVD-skivor. Av juridiska skäl ingår det inte i Debian (Edu). Om du lagligen har tillåtelse att använda det kan du bygga dina egna lokala paket genom att använda dig av libdvd-pkg Debian paketet; se till att contrib är aktiverat i /etc/apt/sources.list.

apt update
apt install libdvd-pkg

Svara på debconf-frågorna och kör sedan dpkg-reconfigure libdvd-pkg.

Paketet fonts-linex (vilket är installerat som standard) installerar teckensnittet "Abecedario" vilket är ett fint handstilstypsnitt för barn. Teckensnittet har flera former som kan användas med barn: prickade och med linjer.

En generisk term för både tunna klienter och disklösa arbetsstationer är LTSP klient.

Från och med Bullseye är LTSP ganska annorlunda från de tidigare versionerna. Detta gäller både installation och underhåll.

För information om LTSP rent generellt, se hemsidan. På system med LTSP server profilen, man ltsptillhandahåller mer information.

Please note that the ltsp tool from LTSP has to be used carefully. For example, ltsp image / would fail to generate the SquashFS image in case of Debian machines (these have a separate /boot partition by default), ltsp ipxe would fail to generate the iPXE menu correctly (due to Debian Edu's thin client support), and ltsp initrd would mess up LTSP client boot completely.

The debian-edu-ltsp-install tool is a wrapper script for ltsp image, ltsp initrd and ltsp ipxe. It is used to setup and configure diskless workstation and thin client support (both 64-Bit and 32-Bit PC). See man debian-edu-ltsp-install or the script content to see how it works. All configuration is contained in the script itself (HERE documents) to facilitate site specific adjustments.

Exempel på hur man använder wrapper-skript debian-edu-ltsp-instal:

Besides bare (smallest thin client system), also display and desktop are available options. The display type offers a shutdown button, the desktop type runs Firefox ESR in kiosk mode on the client itself (more local RAM and CPU power required, but server load reduced).

The debian-edu-ltsp-ipxe tool is a wrapper script for ltsp ipxe. It makes sure that the /srv/tftp/ltsp/ltsp.ipxe file is Debian Edu specific. The command needs to be run after iPXE menu related items (like menu timeout or default boot settings) in the /etc/ltsp/ltsp.conf [server] section have been modified.

The debian-edu-ltsp-initrd tool is a wrapper script for ltsp initrd. It makes sure that a use case specific initrd (/srv/tftp/ltsp/ltsp.img) is generated and then moved to the use case related directory. The command needs to be run after the /etc/ltsp/ltsp.conf [clients] section has been modified.

The debian-edu-ltsp-chroot tool is a replacement for the ltsp-chroot tool shipped with LTSP5. It is used to execute commands in a specified LTSP chroot (like e.g. install, upgrade and remove packages).

Disklös arbetsstation

A diskless workstation runs all software locally. The client machines boot directly from the LTSP server without a local hard drive. Software is administered and maintained on the LTSP server, but runs on the diskless workstations. Home directories and system settings are stored on the server too. Diskless workstations are an excellent way of reusing older (but powerful) hardware with the same low maintenance costs as with thin clients.

Till skillnad från arbetsstationer körs disklösa arbetsstationer utan att behöva lägga till dem med GOsa².

Tunn klient

A thin client setup enables an ordinary PC to function as an (X-)terminal, where all software runs on the LTSP server. This means that this machine boots via PXE without using a local client hard drive and that the LTSP server needs to be a powerful machine.

Debian Edu stöder fortfarande användningen av tunna klienter för att möjliggöra användningen av mycket gammal hårdvara.

Since Thin clients use X2Go, users should disable compositing to avoid display artefacts. In the default case (Xfce desktop environment): Settings -> Window Manager Tweaks -> Compositor.

LTSP klient fastprogramvara

LTSP client boot will fail if the client's network interface requires a non-free firmware. A PXE installation can be used for troubleshooting problems with netbooting a machine; if the Debian Installer complains about a missing XXX.bin file then non-free firmware has to be added to the LTSP server's initrd.

Fortsätt så här på LTSP-servern:

apt update && apt search ^firmware-

apt -y -q install firmware-linux

debian-edu-ltsp-install --diskless_workstation yes

/usr/share/debian-edu-config/tools/ltsp-addfirmware -h

ltsp image x2go-bare-amd64

debian-edu-ltsp-install --arch i386 --thin_type bare

debian-edu-ltsp-initrd

PXE stands for Preboot eXecution Environment. Debian Edu now uses the iPXE implementation for easier LTSP integration.

d-i     apt-setup/local1/repository string      http://example.org/debian stable main contrib non-free
d-i     apt-setup/local1/comment string         Example Software Repository
d-i     apt-setup/local1/source boolean         true
d-i     apt-setup/local1/key    string          http://example.org/key.asc

The debian-edu-config package comes with a tool which helps in changing the network from 10.0.0.0/8 to something else. Have a look at /usr/share/debian-edu-config/tools/subnet-change. It is intended for use just after installation on the main server, to update LDAP and other files that need to be edited to change the subnet.

Note that changing to one of the subnets already used elsewhere in Debian Edu will not work. 192.168.0.0/24 and 192.168.1.0/24 are already set up as LTSP client networks. Changing to these subnets will require manual editing of configuration files to remove duplicate entries.

There is no easy way to change the DNS domain name. Changing it would require changes to both the LDAP structure and several files in the main server file system. There is also no easy way to change the host and DNS name of the main server (tjener.intern). To do so would also require changes to LDAP and files in the main server and client file system. In both cases the Kerberos setup would have to be changed, too.

Välja LTSP-serverprofilen eller den kombinerade serverprofilen installerar också xrdp och x2goserver -paketen.

 #!/bin/bash
 set -e
  if [[ $UID -ne 0 ]] ; then  
     if ! groups | egrep -q sudo ; then
         echo "ERROR: You need to be root or a sudo group member."
         exit 1
     fi
 fi
 if ! egrep -q  ^deb-src /etc/apt/sources.list ; then
     echo "ERROR: Make sure /etc/apt/sources.list contains a deb-src line."
     exit 1
 fi
 TMP=$(mktemp -d)
 PULSE_UPSTREAM_VERSION="$(dpkg-query -W -f='${source:Upstream-Version}' pulseaudio)"
 XRDP_UPSTREAM_VERSION="$(dpkg-query -W -f='${source:Upstream-Version}' xrdp)"
 sudo apt -q update
 sudo apt -q install dpkg-dev
 cd $TMP
 apt -q source pulseaudio xrdp
 sudo apt -q build-dep pulseaudio xrdp
 cd pulseaudio-$PULSE_UPSTREAM_VERSION/
 ./configure
 cd $TMP/xrdp-$XRDP_UPSTREAM_VERSION/sesman/chansrv/pulse/
 sed -i 's/^PULSE/#PULSE/' Makefile
 sed -i "/#PULSE_DIR/a \
 PULSE_DIR = $TMP/pulseaudio-$PULSE_UPSTREAM_VERSION" Makefile
 make
 sudo cp *.so /usr/lib/pulse-$PULSE_UPSTREAM_VERSION/modules/
 sudo chmod 644 /usr/lib/pulse-$PULSE_UPSTREAM_VERSION/modules/module-xrdp*
 sudo service xrdp restart

The freeRADIUS server could be used to provide secure network connections. For this to work, install the freeradius and winbind packages on the main server and run /usr/share/debian-edu-config/tools/setup-freeradius-server to generate a basic, site specific configuration. This way, both EAP-TTLS/PAP and PEAP-MSCHAPV2 methods are enabled. All configuration is contained in the script itself to facilitate site specific adjustments. See the freeRADIUS homepage for details.

Ytterligare konfiguration behövs för att

End user devices need to be configured properly, these devices need to be PIN protected for the use of EAP (802.1x) methods. Users should also be educated to install the freeradius CA certificate on their devices to be sure to connect to the right server. This way their password can't be catched in case of a malicious server. The site specific certificate is available on the internal network.

Please note that configuring end user devices will be a real challenge due to the variety of devices. For Windows devices an installer script could be created, for Apple devices a mobileconfig file. In both cases the freeRADIUS CA certificate can be integrated, but OS specific tools are needed to create the scripts.

Connections to a user's home directory and to additional site specific shares (if configured) are possible for devices running Linux, Android, macOS, iOS, iPadOS, Chrome OS or Windows. For example, Android based devices require a file manager with SMB2/SMB3 support, also known as LAN access. X-plore or Total Commander with LAN plugin might be a good choice.

Använd \\tjener\<användarnamn> eller smb://tjener/<användarnamn> för att komma åt hemkatalogen.

stable/education-development is a meta package depending on a lot of programming tools. Please note that almost 2 GiB of disk space is needed if this package is installed. For more details (maybe to install only a few packages), see the Debian Edu Development packages page.

Warning: make sure you know the status of the laws about monitoring and restricting computer users' activities in your jurisdiction.

Some schools use control tools like Epoptes or Veyon to supervise their students. See also: Epoptes Homepage and Veyon Homepage.

Vissa skolor använder Squidguard eller e2guardian för att begränsa internetåtkomst.

Varje användare ska ändra sitt lösenord genom att använda GOsa2. För att göra det, använd bara en webbläsare och gå till https://www/gosa/.

Använda GOsa2 för att ändra lösenordet säkerställer att lösenord för Kerberos (krbPrincipalKey), LDAP (userPassword) och Samba är desamma.

Ändra lösenord med PAM fungerar också på GDM inloggningsprompten, men detta kommer bara att uppdatera Kerberos lösenord, och inte Samba och GOsa2 (LDAP) lösenord. Så efter att du ändrat ditt lösenord på inloggningsprompten, bör du verkligen ändra det med GOsa2.

Standalone Java applications are supported out of the box by the OpenJDK Java runtime.

All users can send and receive mails within the internal network; certificates are provided to allow TLS secured connections. To allow mail outside the internal network, the administrator needs to configure the mailserver exim4 to suit the local situation, starting with dpkg-reconfigure exim4-config.

Every user who wants to use Thunderbird needs to configure it as follows. For a user with username jdoe the internal email address is jdoe@postoffice.intern.

Most of the time, the developer mailing list is our main medium for communication, though we also have #debian-edu on irc.debian.org and even, sometimes, real gatherings, where we meet each other in person.

A good way to learn what is happening in the development of Debian Edu is to subscribe to the commit mailinglist.

Debian Edu uses the Debian Bug Tracking System (BTS). View existing bug reports and feature requests or create new ones. Please report all bugs against the package debian-edu-config. Take a look at How To Report Bugs for more information on bug reporting in Debian Edu.

This document needs your help! First and foremost, it is not finished yet: if you read it, you will notice various FIXMEs within the text. If you happen to know (a bit of) what needs to be explained there, please consider sharing your knowledge with us.

The source of the text is a wiki and can be edited with a simple webbrowser. Just go to https://wiki.debian.org/DebianEdu/Documentation/Bookworm/ and you can contribute easily. Note: a user account is needed to edit the pages; you may need to create a wiki user account first.

Another very good way to contribute and to help users is by translating software and documentation. Information on how to translate this document can be found in the translations chapter of this book. Please consider helping the translation effort of this book!

Lists of companies providing professional support are available from https://wiki.debian.org/DebianEdu/Help/ProfessionalHelp.

Copyright (C) 2007-2021 Holger Levsen < holger@layer-acht.org > and others, see the Copyright for the full list of copyright owners.

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

Version 2, June 1991

Copyright (C) 1989, 1991 Free Software Foundation, Inc. 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed.

0. This License applies to any program or other work which contains a notice placed by the copyright holder saying it may be distributed under the terms of this General Public License. The "Program", below, refers to any such program or work, and a "work based on the Program" means either the Program or any derivative work under copyright law: that is to say, a work containing the Program or a portion of it, either verbatim or with modifications and/or translated into another language. (Hereinafter, translation is included without limitation in the term "modification".) Each licensee is addressed as "you".

Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the Program (independent of having been made by running the Program). Whether that is true depends on what the Program does.

1. You may copy and distribute verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty; and give any other recipients of the Program a copy of this License along with the Program.

You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee.

2. You may modify your copy or copies of the Program or any portion of it, thus forming a work based on the Program, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions:

These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Program, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works. But when you distribute the same sections as part of a whole which is a work based on the Program, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it.

Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the intent is to exercise the right to control the distribution of derivative or collective works based on the Program.

In addition, mere aggregation of another work not based on the Program with the Program (or with a work based on the Program) on a volume of a storage or distribution medium does not bring the other work under the scope of this License.

3. You may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following:

The source code for a work means the preferred form of the work for making modifications to it. For an executable work, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the executable. However, as a special exception, the source code distributed need not include anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component itself accompanies the executable.

If distribution of executable or object code is made by offering access to copy from a designated place, then offering equivalent access to copy the source code from the same place counts as distribution of the source code, even though third parties are not compelled to copy the source along with the object code.

4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance.

5. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Program or its derivative works. These actions are prohibited by law if you do not accept this License. Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it.

6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions. You may not impose any further restrictions on the recipients' exercise of the rights granted herein. You are not responsible for enforcing compliance by third parties to this License.

7. If, as a consequence of a court judgment or allegation of patent infringement or for any other reason (not limited to patent issues), conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not distribute the Program at all. For example, if a patent license would not permit royalty-free redistribution of the Program by all those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Program.

If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is intended to apply and the section as a whole is intended to apply in other circumstances.

It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system, which is implemented by public license practices. Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system; it is up to the author/donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice.

This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License.

8. If the distribution and/or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Program under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded. In such case, this License incorporates the limitation as if written in the body of this License.

9. The Free Software Foundation may publish revised and/or new versions of the General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns.

Each version is given a distinguishing version number. If the Program specifies a version number of this License which applies to it and "any later version", you have the option of following the terms and conditions either of that version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of this License, you may choose any version ever published by the Free Software Foundation.

10. If you wish to incorporate parts of the Program into other free programs whose distribution conditions are different, write to the author to ask for permission. For software which is copyrighted by the Free Software Foundation, write to the Free Software Foundation; we sometimes make exceptions for this. Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally.

NO WARRANTY

11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.

12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

END OF TERMS AND CONDITIONS

The following Debian Edu releases were made further in the past:

A complete and detailed overview about older releases is contained in Appendix C of the Jessie manual; or see the related release manuals on the release manuals page.