Raphael Dannecker
8ec701595a
Prevent simultaneous logins from multiple users (multi-seat mode)
...
Because the home directory is mounted via pam_mount using the user's Kerberos ticket,
simultaneous login of two users is not possible.
2025-10-06 20:20:59 +02:00
Raphael Dannecker
cb37d52271
Eliminate bind mounts that are no longer required for virtual machines (VMs)
2025-10-06 20:13:58 +02:00
Raphael Dannecker
b4caaf036d
Implement timeout for krb5 ticket retrieval during VPN connections
2025-10-06 13:12:08 +02:00
Raphael Dannecker
61833201cb
Remove the Nextcloud/WebDAV integration
2025-10-05 16:49:16 +02:00
Raphael Dannecker
998bcb515a
Add firmware-sof-signed package for audio output on different Lenovo devices
2025-10-05 16:01:03 +02:00
Raphael Dannecker
ad9c0e7243
zulucrypt-gui package has been removed from Trixie
2025-10-05 15:55:59 +02:00
Raphael Dannecker
e83616292f
Set firefox and thunderbird as default applications
2025-10-05 15:55:25 +02:00
Raphael Dannecker
62f2ac58f4
Freeplane package has been removed from Trixie
2025-10-05 15:54:13 +02:00
Raphael Dannecker
34fbb44b22
Fix Ansible boolean syntax for compatibility with new version
2025-10-05 15:51:14 +02:00
Raphael Dannecker
fdc44b8a6d
Move outbound traffic restriction from teacher pc to classromm pcs
2025-10-02 08:54:05 +02:00
Raphael Dannecker
29d77f3ba3
Due to new media tables, the audio output on some devices has changed
2025-10-02 08:40:41 +02:00
Raphael Dannecker
f69cc6efb7
Add more links to firefox bookmarks
2025-10-02 08:05:00 +02:00
Raphael Dannecker
191e953bb0
Force vminfo.service to run on every vm start
2025-10-02 08:04:44 +02:00
Raphael Dannecker
51d4e34a07
No longer output error messages from the vminfo script to stdout
...
The error messages were corrupting the contents of the .vminfo.json file.
Error messages are now sent to stderr.
2025-10-02 08:04:00 +02:00
Raphael Dannecker
2660cc05c8
Fix home directory for localhomes in vminfo.service
2025-10-02 08:03:43 +02:00
Raphael Dannecker
1b1758809a
Force use of /lmn/media/USER share for legacy VMs
...
- Introduced VMLEGACY environment variable to ensure that old VMs
utilize the legacy media share located at /lmn/media/USER.
- This change is aimed at maintaining compatibility with older
virtual machines that rely on the previous media share structure.
2025-10-02 08:03:24 +02:00
Raphael Dannecker
a7c879d267
Sync desktop starters from fileserver instead of server
2025-10-02 08:02:22 +02:00
Raphael Dannecker
e875ac00a4
Configure SSSD for hourly ticket lifetime checks and renewal
2025-10-02 08:01:05 +02:00
Raphael Dannecker
b688a8df59
Refactor VM volume mounting
...
- Replace bind-mounts on /lmn/media/$USER with separate
mounting for Home and Share SMB shares in the VM.
- Update vm-run to start virtiofsd with /lmn/media/$USER
(/home/$USER on localhome machines).
- Use vm-vminfo to generate a JSON file containing user
information, including Username, Groups, printer list
krb5-ticket and some more
- Configure vminfo.service (systemd-timer) to periodically
call vm-vminfo.
- Ensure krb5-ticket (TGT) is injected into the Windows VM.
- Mount SMB-Home and SMB-Share shares as part of the new structure.
2025-10-02 08:00:13 +02:00
Raphael Dannecker
efd48de6c7
The virt-viewer package must be explicitly selected for trixie
2025-06-05 13:02:12 +02:00
Raphael Dannecker
db6197d0a0
Prevents the --options option in vm-run from interfering with other options
2025-06-05 12:48:10 +02:00
Raphael Dannecker
563ac18483
Add host to inventory
2025-06-04 11:20:58 +02:00
Raphael Dannecker
76c7cc042a
Configure display resolution / audio out for specific clients
2025-06-04 10:49:47 +02:00
Raphael Dannecker
84865291e0
Allow multiple macvtap-VMs to use the same MAC address
2025-06-04 10:26:56 +02:00
Raphael Dannecker
6e119e0129
Omit backports, because Trixie does not have backports yet
2025-06-04 10:21:18 +02:00
Andreas B. Mundt
6063e65089
Fixes for trixie
2025-05-14 12:33:39 +02:00
Andreas B. Mundt
0e0950d184
Fix conditionals for ansible version in trixie
2025-05-14 12:33:39 +02:00
Raphael Dannecker
ce31924a3c
Remove unnecessary systemd-resolved
2025-05-08 07:16:12 +02:00
Raphael Dannecker
f0fd1d5aa0
Skip delegate_to tasks when running in installer
2025-05-07 14:38:01 +02:00
Raphael Dannecker
e060ba9161
Prevent playbook abort if iwd was not installed
2025-05-07 13:35:32 +02:00
Raphael Dannecker
dfb9cf5ee7
Fix playbook check if delegate_to host is accessible
2025-05-07 13:32:17 +02:00
Raphael Dannecker
233e8e4ecf
Improve documentation
2025-04-09 16:08:46 +02:00
Raphael Dannecker
3580a9141b
Avoid the need to use ssh keys for ansible connections to localhost
2025-04-09 14:18:17 +02:00
Raphael Dannecker
39d2491e36
Use defaults for kde_desktop_pkg in inventory-sample
2025-04-09 08:38:18 +02:00
Raphael Dannecker
9f5ecfc4f1
Improve documentation about installation via pxe
2025-04-08 18:35:47 +02:00
Raphael Dannecker
0406669109
Add vaultpw to debian installer preseeding
2025-04-08 11:19:19 +02:00
Raphael Dannecker
4f69dc0dfe
Merge fvs branch into main
2025-04-08 08:06:36 +02:00
Raphael Dannecker
3efeb38623
Insert examples into sample inventory
2025-04-08 07:44:53 +02:00
Raphael Dannecker
38a1c80db2
Fix markdown formatting
2025-04-08 07:42:51 +02:00
Raphael Dannecker
970eda96d2
Remove old cleanup task
2025-04-07 10:40:58 +02:00
Raphael Dannecker
f0f937448a
Don't restart polkit when run in installer
2025-04-07 10:40:15 +02:00
Raphael Dannecker
c5bddc3f31
Run VM cleanup tasks only if vm_support is true
2025-04-07 09:48:48 +02:00
Raphael Dannecker
2074c49c3e
Check if spyder is installed before patching spyder
2025-04-07 08:46:03 +02:00
Raphael Dannecker
f8cbb53cb7
Move spyder.patch to the subdirectory of the corresponding role
2025-04-07 08:20:20 +02:00
Raphael Dannecker
4c2e657c98
Make keys2deploy optional
2025-04-07 07:54:17 +02:00
Raphael Dannecker
9a6a05e2d0
Improve documentation
2025-04-07 07:48:01 +02:00
Raphael Dannecker
471ff52df0
Make grub_pwd optional
2025-04-07 07:27:36 +02:00
Raphael Dannecker
b7fd176541
Fix ansible syntax
2025-04-04 15:41:29 +02:00
Raphael Dannecker
b1c878d248
Fix undefined printservers
2025-04-04 15:23:33 +02:00
Raphael Dannecker
4197acd2ce
Allow default-user login
2025-04-04 15:23:02 +02:00
