Debian Edu / Skolelinux Bullseye 11 手册

出版日期： 2024-03-29

deb http://deb.debian.org/debian/ bullseye main 
deb http://security.debian.org bullseye-security main 
d-i    pkgsel/include string my-extra-package(s)
  $ sudo apt update
  $ sudo apt install task-desktop-xfce lightdm education-menus
  ### after installation, run 'sudo service lightdm start'
  ### login as first user
/usr/share/debian-edu-config/tools/gosa-modify-host <hostname> <IP>
root@tjener:~# sitesummary2ldapdhcp -a -i ether-22:11:33:44:55:ff
info: Create GOsa machine for am-2211334455ff.intern [10.0.16.21] id ether-22:11:33:44:55:ff.

Enter password if you want to activate these changes, and ^c to abort.

Connecting to LDAP as cn=admin,ou=ldap-access,dc=skole,dc=skolelinux,dc=no
enter password: ********
root@tjener:~#
LC_ALL=C apt full-upgrade -y
$ sudo rdiff-backup -r <date>  \
   /skole/backup/tjener/skole/tjener/home0/user \
   /skole/tjener/home0/user_<date>
apt update
apt full-upgrade
apt clean
sed -i 's/buster/bullseye/g' /etc/apt/sources.list
sed -i 's#/debian-security bullseye/updates# bullseye-security#g' /etc/apt/sources.list
export LC_ALL=C        # 可选（使输出为英语）
apt update
apt full-upgrade
cf-agent -v -D installation
service squid restart
apt install debian-edu-artwork-homeworld
apt purge debian-edu-artwork-buster      # 除非 Buster 插图作为另一可选用而保留
rm -f /etc/xdg/xfce4/panel/default.xml.cfsaved
mv /etc/xdg/xfce4/panel/default.xml.dpkg-new /etc/xdg/xfce4/panel/default.xml
rm -f /etc/default/tftpd-hpa        # to remove no longer needed modifications
rm -rf /var/lib/tftpboot            # to remove no longer used tftp base directory
dpkg-reconfigure -p low tftpd-hpa   # first prompt: keep ''tftp'' as system account, second: change TFTP root directory to ''/srv/tftp''
                                    # third: keep address and port, last one: enter ''--secure'' as additional option 
service tftpd-hpa restart
rm -rf /opt/ltsp                    # cleanup old LTSP base directory
# The next steps will need quite some execution time.
debian-edu-ltsp-install --arch amd64 --diskless_workstation no thin_type bare   # if 64-Bit thin client support is wanted
debian-edu-ltsp-install --arch i386 --diskless_workstation no thin_type bare    # if 32-Bit thin client support is wanted
debian-edu-ltsp-install --diskless_workstation yes   # to create diskless workstation image from the server's file system
debian-edu-pxeinstall                                # to add PXE installation files and related iPXE menu items 
dn: cn=dhcp,cn=tjener,ou=servers,ou=systems,dc=skole,dc=skolelinux,dc=no
changetype: modify
add: dhcpOption
dhcpOption: space ipxe
dhcpOption: ipxe-encap-opts code 175 = encapsulate ipxe
dhcpOption: ipxe.menu code 39 = unsigned integer 8
dhcpOption: ipxe.no-pxedhcp code 176 = unsigned integer 8
dhcpOption: arch code 93 = unsigned integer 16  
81 cn=intern,cn=dhcp,cn=tjener,ou=servers,ou=systems,dc=skole,dc=skolelinux,dc=no
83 cn=subnet00.intern,cn=dhcp,cn=tjener,ou=servers,ou=systems,dc=skole,dc=skolelinux,dc=no
85 cn=subnet01.intern,cn=dhcp,cn=tjener,ou=servers,ou=systems,dc=skole,dc=skolelinux,dc=no
etckeeper vcs log
etckeeper vcs status
etckeeper vcs diff
etckeeper vcs add .
etckeeper vcs commit -a
man etckeeper
etckeeper vcs log
etckeeper vcs status
etckeeper vcs commit -a /etc/resolv.conf
lvextend -L30G /dev/vg_system/skole+tjener+home0
resize2fs /dev/vg_system/skole+tjener+home0
ldapvi --ldap-conf -ZD '(cn=admin)'
/srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)
/srv/nfs4/home0  gss/krb5i(rw,sync,no_subtree_check)
host: ldap.intern
port: 636
Security level: ssl + user + password
User dn: cn=admin,ou=ldap-access,dc=skole,dc=skolelinux,dc=no
echo "deb http://deb.debian.org/debian/ bullseye-backports main" >> /etc/apt/sources.list
apt-get update
apt install -t bullseye-backports tuxtype
apt-cdrom add
apt update
apt full-upgrade
  #!/bin/sh
  PATH=/usr/sbin:$PATH
  export PATH
  sitesummary-nodes -w
  #!/bin/sh
  PATH=/usr/sbin:$PATH
  export PATH
  netgroup -h shutdown-at-night-hosts
 #!/bin/bash
 home_path="/skole/tjener/home0"
 shared_folder="assignments"
 permissions="2770"
 created_dir=0
 for home in $(ls $home_path); do
    if [ ! -d "$home_path/$home/$shared_folder" ]; then
        mkdir $home_path/$home/$shared_folder
        chmod $permissions $home_path/$home/$shared_folder
        #set the right owner and group
        #"username" = "group name" = "folder name"
        user=$home
        group=teachers
        chown $user:$group $home_path/$home/$shared_folder
        ((created_dir+=1))
    else
        echo -e "the folder $home_path/$home/$shared_folder already exists.\n"
    fi
 done
 echo "$created_dir folders have been created"
    root@tjener:~# showmount -e nas-server
    Export list for nas-server:
    /storage         10.0.0.0/8
    root@tjener:~#
    add cn=nas-server,ou=auto.skole,ou=automount,dc=skole,dc=skolelinux,dc=no
    objectClass: automount
    cn: nas-server
    automountInformation: -fstype=autofs --timeout=60 ldap:ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no

    add ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no
    objectClass: top
    objectClass: automountMap
    ou: auto.nas-server

    add cn=/,ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no
    objectClass: automount
    cn: /
    automountInformation: -fstype=nfs,tcp,rsize=32768,wsize=32768,rw,intr,hard,nodev,nosuid,noatime nas-server.intern:/&
+ : alice jane bob john : ALL
+ : ALL : 10.0.0.0/8 192.168.0.0/24 192.168.1.0/24
- : ALL : ALL
#
apt update
/usr/share/debian-edu-config/tools/install-task-pkgs
/usr/share/debian-edu-config/tools/improve-desktop-l10n
apt update
apt install libdvd-pkg
apt update && apt search ^firmware-
apt -y -q install firmware-linux
debian-edu-ltsp-install --diskless_workstation yes
/usr/share/debian-edu-config/tools/ltsp-addfirmware -h
ltsp image x2go-bare-amd64
debian-edu-ltsp-install --arch i386 --thin_type bare
debian-edu-ltsp-initrd
#add the skole projects local repository
d-i     apt-setup/local1/repository string      http://example.org/debian stable main contrib non-free
d-i     apt-setup/local1/comment string         Example Software Repository
d-i     apt-setup/local1/source boolean         true
d-i     apt-setup/local1/key    string          http://example.org/key.asc
 #!/bin/bash
 # Script to compile / recompile xrdp PulseAudio modules.
 # The caller needs to be root or a member of the sudo group.
 # Also, /etc/apt/sources.list must contain a valid deb-src line.
 set -e
  if [[ $UID -ne 0 ]] ; then  
     if ! groups | egrep -q sudo ; then
         echo "ERROR: You need to be root or a sudo group member."
         exit 1
     fi
 fi
 if ! egrep -q  ^deb-src /etc/apt/sources.list ; then
     echo "ERROR: Make sure /etc/apt/sources.list contains a deb-src line."
     exit 1
 fi
 TMP=$(mktemp -d)
 PULSE_UPSTREAM_VERSION="$(dpkg-query -W -f='${source:Upstream-Version}' pulseaudio)"
 XRDP_UPSTREAM_VERSION="$(dpkg-query -W -f='${source:Upstream-Version}' xrdp)"
 sudo apt -q update
 # Get sources and build dependencies:
 sudo apt -q install dpkg-dev
 cd $TMP
 apt -q source pulseaudio xrdp
 sudo apt -q build-dep pulseaudio xrdp
 # For pulseaudio 'configure' is all what is needed:
 cd pulseaudio-$PULSE_UPSTREAM_VERSION/
 ./configure
 # Adjust pulseaudio modules Makefile (needs absolute path)
 # and build the pulseaudio modules.
 cd $TMP/xrdp-$XRDP_UPSTREAM_VERSION/sesman/chansrv/pulse/
 sed -i 's/^PULSE/#PULSE/' Makefile
 sed -i "/#PULSE_DIR/a \
 PULSE_DIR = $TMP/pulseaudio-$PULSE_UPSTREAM_VERSION" Makefile
 make
 # Copy modules to Pulseaudio modules directory, adjust rights.
 sudo cp *.so /usr/lib/pulse-$PULSE_UPSTREAM_VERSION/modules/
 sudo chmod 644 /usr/lib/pulse-$PULSE_UPSTREAM_VERSION/modules/module-xrdp*
 # Restart xrdp, now with sound enabled.
 sudo service xrdp restart
C:\Program Files\pGina.fork\Plugins\pGina.Plugin.Ldap.dll

服务列表
服务描述	普通名称	DNS 服务名称
中央日志	rsyslog	syslog
域名服务	DNS (BIND)	domain
机器的自动网络配置	DHCP	bootps
时钟同步	NTP	ntp
通过网络文件系统的主目录	SMB / NFS	homes
电子邮局	IMAP（Dovecot）	postoffice
目录服务	OpenLDAP	ldap
用户管理	GOsa²	---
Web 服务器	Apache/PHP	www
中央备份	sl-backup，slbackup-php	backup
Web 缓存	Proxy（Squid）	webcache
打印	通用UNIX 打印系统（CUPS）	ipp
安全远程登录	OpenSSH	ssh
自动配置	CFEngine	cfengine
（若干） LTSP 服务器	LTSP	ltsp
以错误报告监视机器和服务，和 Web 上的Status与历史。由电子邮件报告错误	Munin, Icinga 和 Sitesummary	sitesummary

语言（区域）	地区值	键盘布局
挪威书面语	nb_NO.UTF-8	no
新挪威语（Nynorsk）	nn_NO.UTF-8	no
德语	de_DE.UTF-8	de
法语（法国）	fr_FR.UTF-8	fr
希腊语（希腊）	el_GR.UTF-8	el
日语	ja_JP.UTF-8	jp
北萨米语（挪威）	se_NO	no(smi)

Debian Edu / Skolelinux Bullseye 11 手册

出版日期： 2024-03-29

1. Debian Edu 11 别名 Bullseye 的手册

2. 关于 Debian Edu 和 Skolelinux

2.1. 部分历史及为何使用两个名称

3. 结构

3.1. 网络

3.1.1. 缺省网络设置

3.1.2. 主服务器

3.1.3. 运行在主服务器上的服务

3.1.4. LTSP 服务器

3.1.5. 瘦客户端

3.1.6. 无盘工作站

3.1.7. 网络客户端

3.2. 管理

3.2.1. 安装

3.2.2. 文件系统存取配置

4. 需求

4.1. 硬件需求

4.2. 所知工作的硬件

5. 网络设置需求

5.1. 缺省设置

5.2. 互联网路由

6. 安装和下载选项

6.1. 在哪里找到另外的信息

6.2. 下载 Debian Edu 11 代号 Bullseye 的安装媒体

6.2.1. amd64 或 i386

6.2.2. amd64 或 i386 的网络安装 iso 映像

6.2.3. i386 或 amd64 的蓝光光盘 iso 映像

6.2.4. 已下载映像文件的校验

6.2.5. 源代码

6.3. 安装 Debian Edu

6.3.1. 主要服务器安装

6.3.2. 桌面环境

6.3.3. 模块化安装

6.3.4. 安装类型和选项

6.3.5. 安装过程

6.3.6. 一些典型的注意事项

6.3.6.1. 一个在笔记本上的注意事项

6.3.6.2. USB 闪存盘 / 蓝光光盘映像安装的一个注意点

6.3.6.3. CD 安装的一个说明

6.3.7. 安装使用 USB 闪存驱动器来取代 CD / 蓝光光盘

6.3.8. 通过 PXE 在网络上安装和引导

6.3.9. 修改 PXE 安装

6.3.10. 定制镜像

6.4. 屏幕快照观览

7. 开始

7.1. 开始的最少步骤

7.1.1. 运行在主服务器上的服务

7.2. GOsa² 简介

7.2.1. GOsa² 登录和概览

7.3. 使用 GOsa² 管理用户

7.3.1. 添加用户

7.3.2. 搜索，修改和删除用户

7.3.3. 设置密码

7.3.4. 提高的用户管理

7.4. 用 GOsa² 管理用户组

7.5. 用 GOsa² 管理机器

7.5.1. 搜索和删除机器

7.5.2. 修改现有机器/网络组管理

8. 打印机管理

8.1. 使用连在工作站上的打印机

8.2. 网络打印机

9. 时钟同步

10. 扩展占满的分区

11. 维护

11.1. 更新软件

11.1.1. 保留你自己的安全更新相关信息

11.2. 备份管理

11.3. 服务器监视

11.3.1. Munin

11.3.2. Inciga

11.3.2.1. 一般的 Icinga 通知以及如何处理它们

11.3.2.1.1. DISK CRITICAL - free space: /usr 309 MB (5% inode=47%):

11.3.2.1.2. APT CRITICAL: 13 packages available for upgrade (13 critical updates).

11.3.2.1.3. WARNING - Reboot required : running kernel = 2.6.32-37.81.0, installed kernel = 2.6.32-38.83.0

11.3.2.1.4. WARNING: CUPS queue size - 61

11.3.3. Sitesummary

11.4. 更多有关 Debian Edu 定制的信息

12. 升级