Commit graph

738 commits

Author SHA1 Message Date
Raphael Dannecker
3b8b03cf59 Add teacher-pc A127 to inventory. 2024-07-07 11:01:58 +02:00
Raphael Dannecker
44f87537bb Extends krb5-ticket renewable_lifetime for teacherlaptops, so there is no need to login every day. 2024-07-07 10:58:27 +02:00
Andreas B. Mundt
b8904286ab Allow users to modify power management (relevant for teacher devices). 2024-07-03 14:19:16 +02:00
Andreas B. Mundt
d787ec9aba Fix enabling wifi on boot for school laptops. 2024-07-02 13:29:30 +02:00
Raphael Dannecker
48a3aa831d Create cleanup-config to remove /lmn/media/*-exam on boot. 2024-07-01 11:59:55 +02:00
Andreas B. Mundt
37943179c8 Start removing tasks not needed anymore (Debian 12.6 point release). 2024-06-29 18:48:03 +02:00
Andreas B. Mundt
0387a94798 Clean up failed ansible runs reported by emitter script. 2024-06-29 18:37:56 +02:00
Raphael Dannecker
0a21256901 A126 laptops added to laptop and homeondisk group. 2024-06-27 08:08:09 +02:00
Raphael Dannecker
fd9f241bc8 A126 laptops added to inventory. 2024-06-27 08:05:02 +02:00
Raphael Dannecker
67bcfbe1bf A130 devices hostnames added to inventory. 2024-06-26 11:46:41 +02:00
Raphael Dannecker
7a7f7c0b6d A130 devices added to inventory. 2024-06-26 11:25:17 +02:00
Raphael Dannecker
4e229b4a5d Merge branch 'virtiofsd-usermapping' into fvs 2024-06-24 07:20:55 +02:00
Raphael Dannecker
a3d8fbaa82 Improved temporary fix for assigning default UID and GID mappings for linux-VMs. 2024-06-23 18:02:16 +02:00
Raphael Dannecker
80a9b886a4 DNS-Search-Entry in wireguard-profile extended. 2024-06-23 15:16:59 +02:00
Raphael Dannecker
bb3acdba6d Fix regexp for wireguard-IP-detection. 2024-06-23 10:57:24 +02:00
Raphael Dannecker
4863caf526 Rename wireguard-connection from wg0 to VPN-Schule. 2024-06-23 10:37:18 +02:00
Raphael Dannecker
640f58996c Adjust mmcblk-device gid on teacherlaptops to permit teachers access. 2024-06-22 10:31:30 +02:00
Raphael Dannecker
2d7372e0c3 Fix spelling of virtiofsd binary. 2024-06-21 19:00:59 +02:00
Raphael Dannecker
1c4554e9e0 Run VM-sync only when server is reachable. 2024-06-21 15:49:36 +02:00
Andreas B. Mundt
55b89ac912 Fix misleading 'file-has-changed' message in spyder on CIFS.
The issue has been reported to upstream in spyder-ide/21877.
The patch implements a more tolerant file modification detection
and only reports differences greater than 1000 ms.
2024-06-21 08:25:28 +02:00
Andreas B. Mundt
040b017b40 Fix search syntax. 2024-06-21 08:12:08 +02:00
Raphael Dannecker
f201332a4b Run virtiofsd in usermode and mount shares with correct gid.
- The new virtiofsd provides the ability to map a specified
  UID and GID to that of the user when running in user mode.
  As a result, virtiofsd is moved to userland for VMs and
  the new -uid and -gid options are introduced that specify
  the IDs on the guest.New v
- The drives no longer have to be mounted with the group ID 1010.
  Therefore, the mount options are changed to the real group ID
2024-06-17 21:35:18 +02:00
Andreas B. Mundt
8a9bebba65 Add missing host R211 to inventory. 2024-06-14 14:26:31 +02:00
Andreas B. Mundt
4d961c60e9 Adapt to latest macvtap device names. 2024-06-14 14:24:26 +02:00
Andreas B. Mundt
3573fa3697 Use unattended-upgrades again to make sure packages are up-to-date.
We don't have the time to test all upgrades in advance.  Therefore, it's
safer to install all updates unattended and live with the (rare) risk of
faulty ones.

This reverts the commits:
  b4d9cbdb94
  a29d89a7ab
2024-06-14 09:19:57 +02:00
Raphael Dannecker
4356474a43 Disable Wireguard-config when in installer. 2024-06-13 10:10:34 +02:00
Raphael Dannecker
0d557335fc Change productive wireguard-config on server. 2024-06-13 09:21:23 +02:00
Raphael Dannecker
bd773a2551 Teacherlaptops added to inventory. 2024-06-13 09:13:11 +02:00
Raphael Dannecker
2ba7d84b78 Local default user disabled on teacherlaptops. 2024-06-13 09:12:48 +02:00
Raphael Dannecker
fa6306e7a0 Notebooks included in inventory. 2024-06-12 15:25:59 +02:00
Raphael Dannecker
654c678df5 New WiFi defined. 2024-06-12 14:34:22 +02:00
Raphael Dannecker
9fa3b411ce New version of kio fix. 2024-06-11 14:47:16 +02:00
Raphael Dannecker
07ff7f258c Merge branch 'macvtap' into fvs 2024-06-11 14:45:15 +02:00
Raphael Dannecker
c3d7692f21 Remove NetworkManager connection Wired Connection.
NetworkManager has problems using the default 'Wired Connection 1'
setting for more than one network card, so it is better to remove this file
and NetworkManager will use default 'Wired Connections' in memory.
2024-06-11 13:37:56 +02:00
Raphael Dannecker
9c068dd915 Wireguard client and WLAN-SSID-Config.
NetworkManager wireguard VPN-config will be created and updated.
Split configuration of WLAN-SSID in inventory (SSID) and vault (secret).
2024-06-11 13:25:34 +02:00
Raphael Dannecker
450ca22441 Mount network-shares after established wireguard-connection. 2024-06-04 14:46:17 +02:00
Raphael Dannecker
679e0cc0aa Rework printer setup.
Don't remove local printers.
Create printerlist.csv for VMs.
2024-06-04 14:42:10 +02:00
Raphael Dannecker
463997aa26 Allow teachers to install printers on teacherlaptops. 2024-06-04 14:40:15 +02:00
Raphael Dannecker
4b4328bde5 Remove deprecated macvtap NetworkManager config. 2024-06-04 14:28:06 +02:00
Raphael Dannecker
ce9b1806f1 Create macvtap devices based on all physical network devices (en[pos]). 2024-06-04 14:26:40 +02:00
Raphael Dannecker
93d261e73b Network devices are now only managed by NetworkManager.
Systemd-networkd is no longer used.
NetworkManager creates a MACVTAP device for each physical Ethernet device.
When calling vm-run with option macvtap, all macvtap-devices are passed to the VM.
2024-05-23 09:58:41 +02:00
Raphael Dannecker
a8d74fce5b Install kio-package with bugfix (documents may get lost on SMB shares) 2024-05-06 11:30:18 +02:00
Raphael Dannecker
81b268cff9 Use systemd-networkd for devices with more than 1 physical ethernet device. 2024-04-30 12:06:36 +02:00
Andreas B. Mundt
edf92566cf Allow multiple VMs. 2024-04-30 11:16:32 +02:00
Raphael Dannecker
749b8e1e17 Move libreoffce-samba-fix to bookworm-fix section. 2024-04-30 09:26:43 +02:00
Raphael Dannecker
59649b0bff Remove libreoffice-kf5 (documents may get lost on SMB shares). 2024-04-30 08:35:25 +02:00
Raphael Dannecker
975b9867c3 Remove domain part from devicename. 2024-04-30 08:30:57 +02:00
Raphael Dannecker
f3d9b0c46f Move chromium policy create to lmn_fvs task (and make sure, directory exists). 2024-04-30 07:41:11 +02:00
Raphael Dannecker
c6c67615f3 Add teacherlaptop to the laptop group. 2024-04-29 18:55:54 +02:00
Raphael Dannecker
da88db0061 Teacherlaptops don't need pwroff service and suspend function will not be disabled. 2024-04-29 18:53:22 +02:00