Raphael Dannecker
04a5e8b455
Enable ARP support in nftable for outbound restriction in exam_mode
2025-12-17 19:43:33 +01:00
Raphael Dannecker
1f45184d0c
Apply outbound restriction in exam_mode on macvtap interfaces too
2025-12-17 13:24:24 +01:00
Raphael Dannecker
a986254abc
Apply libvirt firewall policy only on devices with vm_support
2025-12-17 13:19:43 +01:00
Raphael Dannecker
4687ac4888
Make IP addresses of teacherpc configurable (for the firewall in exam mode)
2025-12-15 08:17:39 +01:00
Raphael Dannecker
21f4cbcbc3
Correct the determination of the teacher's PC's IP address ( a75934c)
2025-12-11 17:27:50 +01:00
Raphael Dannecker
a75934ca0b
Restrict outbound traffic in exam-mode
2025-12-10 15:40:21 +01:00
Raphael Dannecker
f965f4466c
Improve ansible code so that ansibe-lint shows fewer errors
2025-03-24 07:33:56 +01:00
Raphael Dannecker
9f1c60eefd
Use variable instead of group membership to install localhome
...
Use variable localhome to determines whether the localhome module is installed.
Default: localhome=false
Further changes:
- Move pam-exec from common-auth to common-session
- Move pam-mkhomedir before pam-mount to avoid double login on first use
on localhome devices
2025-03-19 11:08:57 +01:00
Raphael Dannecker
3d01394820
Separate exam-mode stuff in own role
2025-03-18 14:37:13 +01:00