Raphael Dannecker
13accc3715
Sync desktop starters from fileserver instead of server
2025-07-02 13:59:47 +02:00
Raphael Dannecker
1abbc0d823
Configure SSSD for hourly ticket lifetime checks and renewal
2025-07-02 13:56:32 +02:00
Raphael Dannecker
6e03863016
Refactor VM volume mounting
...
- Replace bind-mounts on /lmn/media/$USER with separate
mounting for Home and Share SMB shares in the VM.
- Update vm-run to start virtiofsd with /lmn/media/$USER
(/home/$USER on localhome machines).
- Use vm-vminfo to generate a JSON file containing user
information, including Username, Groups, printer list
krb5-ticket and some more
- Configure vminfo.service (systemd-timer) to periodically
call vm-vminfo.
- Ensure krb5-ticket (TGT) is injected into the Windows VM.
- Mount SMB-Home and SMB-Share shares as part of the new structure.
2025-07-02 13:54:19 +02:00
Raphael Dannecker
3ff8d48827
Bind mounts are no longer required; removing them
2025-07-02 13:15:21 +02:00
Raphael Dannecker
58418bf48f
Automounter automatically creates the mount point for NFS systems
2025-07-02 11:42:31 +02:00
Raphael Dannecker
b063b5eefb
On NFS systems, restart automount service when establishing a VPN connection
2025-07-02 11:39:25 +02:00
Raphael Dannecker
7243c8d265
Mount home via NFS automount
2025-07-01 14:54:12 +02:00
Raphael Dannecker
efd48de6c7
The virt-viewer package must be explicitly selected for trixie
2025-06-05 13:02:12 +02:00
Raphael Dannecker
db6197d0a0
Prevents the --options option in vm-run from interfering with other options
2025-06-05 12:48:10 +02:00
Raphael Dannecker
84865291e0
Allow multiple macvtap-VMs to use the same MAC address
2025-06-04 10:26:56 +02:00
Raphael Dannecker
6e119e0129
Omit backports, because Trixie does not have backports yet
2025-06-04 10:21:18 +02:00
Andreas B. Mundt
6063e65089
Fixes for trixie
2025-05-14 12:33:39 +02:00
Andreas B. Mundt
0e0950d184
Fix conditionals for ansible version in trixie
2025-05-14 12:33:39 +02:00
Raphael Dannecker
ce31924a3c
Remove unnecessary systemd-resolved
2025-05-08 07:16:12 +02:00
Raphael Dannecker
f0fd1d5aa0
Skip delegate_to tasks when running in installer
2025-05-07 14:38:01 +02:00
Raphael Dannecker
e060ba9161
Prevent playbook abort if iwd was not installed
2025-05-07 13:35:32 +02:00
Raphael Dannecker
dfb9cf5ee7
Fix playbook check if delegate_to host is accessible
2025-05-07 13:32:17 +02:00
Raphael Dannecker
f0f937448a
Don't restart polkit when run in installer
2025-04-07 10:40:15 +02:00
Raphael Dannecker
c5bddc3f31
Run VM cleanup tasks only if vm_support is true
2025-04-07 09:48:48 +02:00
Raphael Dannecker
2074c49c3e
Check if spyder is installed before patching spyder
2025-04-07 08:46:03 +02:00
Raphael Dannecker
f8cbb53cb7
Move spyder.patch to the subdirectory of the corresponding role
2025-04-07 08:20:20 +02:00
Raphael Dannecker
4c2e657c98
Make keys2deploy optional
2025-04-07 07:54:17 +02:00
Raphael Dannecker
471ff52df0
Make grub_pwd optional
2025-04-07 07:27:36 +02:00
Raphael Dannecker
4197acd2ce
Allow default-user login
2025-04-04 15:23:02 +02:00
Raphael Dannecker
6482f3864f
Set apt proxy and ntp server only if configured
2025-04-04 14:43:12 +02:00
Raphael Dannecker
84c7a4d1c6
Activate reporter by setting misc_reporter to true
...
The reporting service can still be installed without sending automatic reports.
This allows an automatic report to be sent after the initial installation.
The report can also be triggered by user interaction.
2025-04-03 10:54:15 +02:00
Raphael Dannecker
e02a1ef28d
Activate reporter by setting misc_reporter_serv to server name
2025-04-03 09:57:01 +02:00
Raphael Dannecker
7a0174838f
Seed for VM upload can be configured using the variable vm_uploadseed_pwd
2025-04-03 09:50:40 +02:00
Raphael Dannecker
5438151f3d
Increase number of available USB devices in VMs
2025-04-03 07:22:10 +02:00
Raphael Dannecker
c9b7874eff
New release of virtiofsd (1.13.1)
2025-04-02 14:13:26 +02:00
Raphael Dannecker
2e2280f50b
Fix: Ansible syntax
2025-04-02 14:03:51 +02:00
Raphael Dannecker
250bb045f3
Fix: Add newline in squid config
2025-04-02 14:01:34 +02:00
Raphael Dannecker
a4e2f22def
Set http_proxy environment in localproxy role
2025-04-02 13:59:53 +02:00
Raphael Dannecker
513d29d628
Add an option to force logout if the home on server fails to mount
2025-04-02 13:55:10 +02:00
Raphael Dannecker
e5bf6054fe
Add links to firefox bookmarks
2025-04-02 13:48:53 +02:00
Raphael Dannecker
89fa704ea2
Mounthome is no longer required
2025-04-01 15:52:11 +02:00
Raphael Dannecker
0f4e455717
Use vm_torrent_srv to configure the torrent server
2025-04-01 15:45:11 +02:00
Raphael Dannecker
320ad3a51d
Use wlan_eap_ca_crl for URL of the certificate revocation list
2025-04-01 15:31:19 +02:00
Raphael Dannecker
f6b77c64cf
Use kerberize_uris for chromium AuthServerAllowlist too
2025-04-01 15:09:25 +02:00
Raphael Dannecker
333b57cd8b
Add a switch to remove plasma-discover and thus prevent update notifications
2025-03-31 20:40:03 +02:00
Raphael Dannecker
3615ef241c
Move 'Fix primary screen' task to role
2025-03-31 20:18:47 +02:00
Raphael Dannecker
ce40cb885f
Create own role for the usersquid http_proxy functionality
2025-03-31 18:13:50 +02:00
Raphael Dannecker
68215897a6
Move 'pwroff on idle' task to role
2025-03-31 14:37:42 +02:00
Raphael Dannecker
6ba24ade09
Add missing files for a8e4130
2025-03-29 11:25:22 +01:00
Raphael Dannecker
e52c01615c
Define variable for additional printer admin group
...
Add a new variable `printer_admin_group` to specify additional CUPS admin group.
When set to `role-teacher`, teachers will have the ability to add and remove printers.
2025-03-29 11:12:46 +01:00
Raphael Dannecker
aa990c388b
Install unattended-upgrades before changing the corresponding config
2025-03-29 09:43:31 +01:00
Raphael Dannecker
7eb8fa62d1
Rescue task should always report status changed
2025-03-28 12:02:35 +01:00
Raphael Dannecker
d9cd758b8e
Define list for additional desktop packages
...
Packages listed in `kde_desktop_pkg` will be installed in role `lmn_kde`.
2025-03-28 11:38:09 +01:00
Raphael Dannecker
a8e4130aa8
Create final task including lmn_finish and lmn_tmpfixes
...
lmn_tmpfixes is used for:
- temporary fixes and quirks
- cleaning up stuff from obsolete/erroneous tasks
lmn_finish is used for:
- installing extra_pkg
- setting ansible-stamps
2025-03-28 07:27:39 +01:00
Raphael Dannecker
1018912703
Unify bind mounts for localhome and non-localhome devices
2025-03-26 14:49:31 +01:00
