it-team/lmn-client
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
769 commits 4 branches 0 tags 7.7 MiB
Commit graph

608 commits

Author SHA1 Message Date
Raphael Dannecker
8ec701595a Prevent simultaneous logins from multiple users (multi-seat mode) 
Because the home directory is mounted via pam_mount using the user's Kerberos ticket,
simultaneous login of two users is not possible.
 2025-10-06 20:20:59 +02:00
Raphael Dannecker
cb37d52271 Eliminate bind mounts that are no longer required for virtual machines (VMs) 2025-10-06 20:13:58 +02:00
Raphael Dannecker
b4caaf036d Implement timeout for krb5 ticket retrieval during VPN connections 2025-10-06 13:12:08 +02:00
Raphael Dannecker
61833201cb Remove the Nextcloud/WebDAV integration 2025-10-05 16:49:16 +02:00
Raphael Dannecker
ad9c0e7243 zulucrypt-gui package has been removed from Trixie 2025-10-05 15:55:59 +02:00
Raphael Dannecker
e83616292f Set firefox and thunderbird as default applications 2025-10-05 15:55:25 +02:00
Raphael Dannecker
62f2ac58f4 Freeplane package has been removed from Trixie 2025-10-05 15:54:13 +02:00
Raphael Dannecker
f69cc6efb7 Add more links to firefox bookmarks 2025-10-02 08:05:00 +02:00
Raphael Dannecker
191e953bb0 Force vminfo.service to run on every vm start 2025-10-02 08:04:44 +02:00
Raphael Dannecker
51d4e34a07 No longer output error messages from the vminfo script to stdout 
The error messages were corrupting the contents of the .vminfo.json file.
Error messages are now sent to stderr.
 2025-10-02 08:04:00 +02:00
Raphael Dannecker
2660cc05c8 Fix home directory for localhomes in vminfo.service 2025-10-02 08:03:43 +02:00
Raphael Dannecker
1b1758809a Force use of /lmn/media/USER share for legacy VMs 
- Introduced VMLEGACY environment variable to ensure that old VMs
  utilize the legacy media share located at /lmn/media/USER.
- This change is aimed at maintaining compatibility with older
  virtual machines that rely on the previous media share structure.
 2025-10-02 08:03:24 +02:00
Raphael Dannecker
a7c879d267 Sync desktop starters from fileserver instead of server 2025-10-02 08:02:22 +02:00
Raphael Dannecker
e875ac00a4 Configure SSSD for hourly ticket lifetime checks and renewal 2025-10-02 08:01:05 +02:00
Raphael Dannecker
b688a8df59 Refactor VM volume mounting 
- Replace bind-mounts on /lmn/media/$USER with separate
  mounting for Home and Share SMB shares in the VM.
- Update vm-run to start virtiofsd with /lmn/media/$USER
  (/home/$USER on localhome machines).
- Use vm-vminfo to generate a JSON file containing user
  information, including Username, Groups, printer list
  krb5-ticket and some more
- Configure vminfo.service (systemd-timer) to periodically
  call vm-vminfo.
- Ensure krb5-ticket (TGT) is injected into the Windows VM.
- Mount SMB-Home and SMB-Share shares as part of the new structure.
 2025-10-02 08:00:13 +02:00
Raphael Dannecker
efd48de6c7 The virt-viewer package must be explicitly selected for trixie 2025-06-05 13:02:12 +02:00
Raphael Dannecker
db6197d0a0 Prevents the --options option in vm-run from interfering with other options 2025-06-05 12:48:10 +02:00
Raphael Dannecker
84865291e0 Allow multiple macvtap-VMs to use the same MAC address 2025-06-04 10:26:56 +02:00
Raphael Dannecker
6e119e0129 Omit backports, because Trixie does not have backports yet 2025-06-04 10:21:18 +02:00
Andreas B. Mundt
6063e65089 Fixes for trixie 2025-05-14 12:33:39 +02:00
Andreas B. Mundt
0e0950d184 Fix conditionals for ansible version in trixie 2025-05-14 12:33:39 +02:00
Raphael Dannecker
ce31924a3c Remove unnecessary systemd-resolved 2025-05-08 07:16:12 +02:00
Raphael Dannecker
f0fd1d5aa0 Skip delegate_to tasks when running in installer 2025-05-07 14:38:01 +02:00
Raphael Dannecker
e060ba9161 Prevent playbook abort if iwd was not installed 2025-05-07 13:35:32 +02:00
Raphael Dannecker
dfb9cf5ee7 Fix playbook check if delegate_to host is accessible 2025-05-07 13:32:17 +02:00
Raphael Dannecker
f0f937448a Don't restart polkit when run in installer 2025-04-07 10:40:15 +02:00
Raphael Dannecker
c5bddc3f31 Run VM cleanup tasks only if vm_support is true 2025-04-07 09:48:48 +02:00
Raphael Dannecker
2074c49c3e Check if spyder is installed before patching spyder 2025-04-07 08:46:03 +02:00
Raphael Dannecker
f8cbb53cb7 Move spyder.patch to the subdirectory of the corresponding role 2025-04-07 08:20:20 +02:00
Raphael Dannecker
4c2e657c98 Make keys2deploy optional 2025-04-07 07:54:17 +02:00
Raphael Dannecker
471ff52df0 Make grub_pwd optional 2025-04-07 07:27:36 +02:00
Raphael Dannecker
4197acd2ce Allow default-user login 2025-04-04 15:23:02 +02:00
Raphael Dannecker
6482f3864f Set apt proxy and ntp server only if configured 2025-04-04 14:43:12 +02:00
Raphael Dannecker
84c7a4d1c6 Activate reporter by setting misc_reporter to true 
The reporting service can still be installed without sending automatic reports.
This allows an automatic report to be sent after the initial installation.
The report can also be triggered by user interaction.
 2025-04-03 10:54:15 +02:00
Raphael Dannecker
e02a1ef28d Activate reporter by setting misc_reporter_serv to server name 2025-04-03 09:57:01 +02:00
Raphael Dannecker
7a0174838f Seed for VM upload can be configured using the variable vm_uploadseed_pwd 2025-04-03 09:50:40 +02:00
Raphael Dannecker
5438151f3d Increase number of available USB devices in VMs 2025-04-03 07:22:10 +02:00
Raphael Dannecker
c9b7874eff New release of virtiofsd (1.13.1) 2025-04-02 14:13:26 +02:00
Raphael Dannecker
2e2280f50b Fix: Ansible syntax 2025-04-02 14:03:51 +02:00
Raphael Dannecker
250bb045f3 Fix: Add newline in squid config 2025-04-02 14:01:34 +02:00
Raphael Dannecker
a4e2f22def Set http_proxy environment in localproxy role 2025-04-02 13:59:53 +02:00
Raphael Dannecker
513d29d628 Add an option to force logout if the home on server fails to mount 2025-04-02 13:55:10 +02:00
Raphael Dannecker
e5bf6054fe Add links to firefox bookmarks 2025-04-02 13:48:53 +02:00
Raphael Dannecker
89fa704ea2 Mounthome is no longer required 2025-04-01 15:52:11 +02:00
Raphael Dannecker
0f4e455717 Use vm_torrent_srv to configure the torrent server 2025-04-01 15:45:11 +02:00
Raphael Dannecker
320ad3a51d Use wlan_eap_ca_crl for URL of the certificate revocation list 2025-04-01 15:31:19 +02:00
Raphael Dannecker
f6b77c64cf Use kerberize_uris for chromium AuthServerAllowlist too 2025-04-01 15:09:25 +02:00
Raphael Dannecker
333b57cd8b Add a switch to remove plasma-discover and thus prevent update notifications 2025-03-31 20:40:03 +02:00
Raphael Dannecker
3615ef241c Move 'Fix primary screen' task to role 2025-03-31 20:18:47 +02:00
Raphael Dannecker
ce40cb885f Create own role for the usersquid http_proxy functionality 2025-03-31 18:13:50 +02:00