Starting libvirtd.service provides iptable rules for NATed network virbr0.
When starting firewalld.service after libvirtd, these rules will be
overwritten. So NAT will no longer work. Restart of libvirtd fixes the
rules again.
When terminating screen lock, pam_exec is called in the context of the corresponding user.
Non-root users don't have the permission to start/stop firewalld. So exit immediately.
Existing dolphin configs can be incorrect for two reasons:
- Instead of the class identifier, a * was incorrectly entered in the home@server URL.
- If the student has changed classes, the old class name is still in the home URL.
lmn-patch-dolphin.sh no longer enters a * in the home@server URL.
lmn-fixhome-dolphin.sh will fix existing configs.
Fixed EDID modes are set on the HDMI switch (ACER 120Hz problem).
This means that the affected PCs always see a second screen, even if beamer is off.
To avoid confusion, it must be ensured that no information is displayed on invisible devices:
- set primary screen for login dialog
- set primary screen after login
- clone screen
If the primary screen deviates from the standard, this information is maintained via inventory.
In addition, some PCs have different audio autputs than HDMI (or they have multiple HDMI outputs).
It is therefore possible to specify the audio device in the inventory.
We don't have the time to test all upgrades in advance. Therefore, it's
safer to install all updates unattended and live with the (rare) risk of
faulty ones.
This reverts the commits:
b4d9cbdb94a29d89a7ab
- Wifi-devices will be managed by NetworkManager
- (USB-)Dockingstation with same MAC as internal device
will be assigned to virbr1
- users with role-teacher have privilege
- to create new NetworkManager connections
- install additional software
- change luks-key
- package plasma-discover will not be removed (for teacherlaptops)
- http-proxy-Settings will be configured by auto-detect
- providing sudo-script to mount default-school from server after
wireguard-connection is established
- user-home is on local disk
- additional entry in dolphin: home@server
- display info about localhome on login-screen
- provide unison-config for sync home with home@server
- force user to be logged out immediately after first login, because
home-dir must exists for bind-mounts on /lmn/media
This reverts commit 6c26983d85.
From the linux kernel update from 6.16 to 6.17 we learn: It is
not recommended to install updates unattended, c.f. Bug #1060052.
