Commit graph

  • 233e8e4ecf Improve documentation main Raphael Dannecker 2025-04-09 16:08:46 +02:00
  • 3580a9141b Avoid the need to use ssh keys for ansible connections to localhost Raphael Dannecker 2025-04-09 14:18:17 +02:00
  • 39d2491e36 Use defaults for kde_desktop_pkg in inventory-sample Raphael Dannecker 2025-04-09 08:38:18 +02:00
  • 9f5ecfc4f1 Improve documentation about installation via pxe Raphael Dannecker 2025-04-08 18:35:47 +02:00
  • 0406669109 Add vaultpw to debian installer preseeding Raphael Dannecker 2025-04-08 11:19:19 +02:00
  • 4f69dc0dfe Merge fvs branch into main Raphael Dannecker 2025-04-08 08:06:36 +02:00
  • 3efeb38623 Insert examples into sample inventory fvs Raphael Dannecker 2025-04-08 07:44:53 +02:00
  • 38a1c80db2 Fix markdown formatting Raphael Dannecker 2025-04-08 07:42:51 +02:00
  • 970eda96d2 Remove old cleanup task Raphael Dannecker 2025-04-07 10:40:58 +02:00
  • f0f937448a Don't restart polkit when run in installer Raphael Dannecker 2025-04-07 10:40:15 +02:00
  • c5bddc3f31 Run VM cleanup tasks only if vm_support is true Raphael Dannecker 2025-04-07 09:48:48 +02:00
  • 2074c49c3e Check if spyder is installed before patching spyder Raphael Dannecker 2025-04-07 08:46:03 +02:00
  • f8cbb53cb7 Move spyder.patch to the subdirectory of the corresponding role Raphael Dannecker 2025-04-07 08:20:20 +02:00
  • 4c2e657c98 Make keys2deploy optional Raphael Dannecker 2025-04-07 07:54:17 +02:00
  • 9a6a05e2d0 Improve documentation Raphael Dannecker 2025-04-07 07:48:01 +02:00
  • 471ff52df0 Make grub_pwd optional Raphael Dannecker 2025-04-07 07:27:36 +02:00
  • b7fd176541 Fix ansible syntax Raphael Dannecker 2025-04-04 15:41:29 +02:00
  • b1c878d248 Fix undefined printservers Raphael Dannecker 2025-04-04 15:23:33 +02:00
  • 4197acd2ce Allow default-user login Raphael Dannecker 2025-04-04 15:23:02 +02:00
  • 6482f3864f Set apt proxy and ntp server only if configured Raphael Dannecker 2025-04-04 14:43:12 +02:00
  • 9870757a90 Fix typo in preseeding Raphael Dannecker 2025-04-04 14:22:58 +02:00
  • 9665293dcd Add example inventory and preseeding for debian installer Raphael Dannecker 2025-04-04 12:26:27 +02:00
  • f8d93baa85 Fix name of reporter_server Raphael Dannecker 2025-04-03 11:54:57 +02:00
  • 84c7a4d1c6 Activate reporter by setting misc_reporter to true Raphael Dannecker 2025-04-03 10:54:15 +02:00
  • aa9a1fca43 Move all variables from the vault to the inventory Raphael Dannecker 2025-04-03 09:58:54 +02:00
  • e02a1ef28d Activate reporter by setting misc_reporter_serv to server name Raphael Dannecker 2025-04-03 09:57:01 +02:00
  • 7a0174838f Seed for VM upload can be configured using the variable vm_uploadseed_pwd Raphael Dannecker 2025-04-03 09:50:40 +02:00
  • 5438151f3d Increase number of available USB devices in VMs Raphael Dannecker 2025-04-03 07:22:10 +02:00
  • c9b7874eff New release of virtiofsd (1.13.1) Raphael Dannecker 2025-04-02 14:13:26 +02:00
  • 2e2280f50b Fix: Ansible syntax Raphael Dannecker 2025-04-02 14:03:51 +02:00
  • 250bb045f3 Fix: Add newline in squid config Raphael Dannecker 2025-04-02 14:01:34 +02:00
  • a4e2f22def Set http_proxy environment in localproxy role Raphael Dannecker 2025-04-02 13:59:53 +02:00
  • 6c8d1b1f28 Fix: String in when condition must be enclosed in quotes Raphael Dannecker 2025-04-02 13:58:15 +02:00
  • 513d29d628 Add an option to force logout if the home on server fails to mount Raphael Dannecker 2025-04-02 13:55:10 +02:00
  • e5bf6054fe Add links to firefox bookmarks Raphael Dannecker 2025-04-02 13:48:53 +02:00
  • 89fa704ea2 Mounthome is no longer required Raphael Dannecker 2025-04-01 15:52:11 +02:00
  • 0f4e455717 Use vm_torrent_srv to configure the torrent server Raphael Dannecker 2025-04-01 15:45:11 +02:00
  • 320ad3a51d Use wlan_eap_ca_crl for URL of the certificate revocation list Raphael Dannecker 2025-04-01 15:31:19 +02:00
  • f6b77c64cf Use kerberize_uris for chromium AuthServerAllowlist too Raphael Dannecker 2025-04-01 15:07:33 +02:00
  • 333b57cd8b Add a switch to remove plasma-discover and thus prevent update notifications Raphael Dannecker 2025-03-31 20:40:03 +02:00
  • 3615ef241c Move 'Fix primary screen' task to role Raphael Dannecker 2025-03-31 20:18:47 +02:00
  • ce40cb885f Create own role for the usersquid http_proxy functionality Raphael Dannecker 2025-03-31 18:13:50 +02:00
  • 68215897a6 Move 'pwroff on idle' task to role Raphael Dannecker 2025-03-31 14:37:42 +02:00
  • 6ba24ade09 Add missing files for a8e4130 Raphael Dannecker 2025-03-29 11:25:22 +01:00
  • e52c01615c Define variable for additional printer admin group Raphael Dannecker 2025-03-29 11:12:46 +01:00
  • aa990c388b Install unattended-upgrades before changing the corresponding config Raphael Dannecker 2025-03-29 09:43:31 +01:00
  • 7eb8fa62d1 Rescue task should always report status changed Raphael Dannecker 2025-03-28 12:02:35 +01:00
  • d9cd758b8e Define list for additional desktop packages Raphael Dannecker 2025-03-28 11:38:09 +01:00
  • ec3dd70a59 Allow teachers on teacherlaptops to install untrusted packages Raphael Dannecker 2025-03-28 11:32:10 +01:00
  • a8e4130aa8 Create final task including lmn_finish and lmn_tmpfixes Raphael Dannecker 2025-03-28 07:27:39 +01:00
  • 88e650aae7 Improve documentation Raphael Dannecker 2025-03-26 14:51:31 +01:00
  • 1018912703 Unify bind mounts for localhome and non-localhome devices Raphael Dannecker 2025-03-26 14:49:31 +01:00
  • 5b19a529f2 Collect some general tasks from other roles into role_misc Raphael Dannecker 2025-03-26 14:44:19 +01:00
  • a8736395c8 Enable wlan on boot by variable instead of membership in group teacherlaptop Raphael Dannecker 2025-03-26 12:14:02 +01:00
  • 5092969c8e Set default to (non)-mounting home as nfs Raphael Dannecker 2025-03-26 07:22:22 +01:00
  • 2602189911 Control execution of localuser by variable instead of group-membership Raphael Dannecker 2025-03-25 09:14:47 +01:00
  • a98617f9ca Add documentation for custome_roles Raphael Dannecker 2025-03-25 07:29:13 +01:00
  • 05844989eb Prevent playbook abort if variables are not defined Raphael Dannecker 2025-03-24 14:23:14 +01:00
  • 91ab4d3511 Implement the custom role concept Raphael Dannecker 2025-03-24 14:09:18 +01:00
  • a1149945da Remove obsolete role lmn_networkd Finn Hercke 2025-03-24 12:16:56 +01:00
  • c4e35584bc Remove role lmn_teacherlaptop and extend role lmn_security Finn Hercke 2025-03-24 12:14:48 +01:00
  • c00d5566dd Move extrapackage installation into separate role and make it more flexible Finn Hercke 2025-03-24 10:30:32 +01:00
  • 4dafbd8b85 Move migration from IWD to WPA-supplicant to role Finn Hercke 2025-03-24 08:56:01 +01:00
  • f965f4466c Improve ansible code so that ansibe-lint shows fewer errors Raphael Dannecker 2025-03-24 07:33:56 +01:00
  • e8ef744f59 Provide documenation Raphael Dannecker 2025-03-20 21:17:22 +01:00
  • f1cb7486a5 Refactor lmn_vpn role Raphael Dannecker 2025-03-20 21:13:20 +01:00
  • a68aaeb81c Refactor lmn_wlan role Finn Hercke 2025-03-20 16:37:04 +01:00
  • 9f1c60eefd Use variable instead of group membership to install localhome Raphael Dannecker 2025-03-19 11:08:57 +01:00
  • 3d01394820 Separate exam-mode stuff in own role Raphael Dannecker 2025-03-18 14:37:13 +01:00
  • 43157dd810 Restart libvirtd after firewalld.service restart Raphael Dannecker 2025-03-18 12:45:46 +01:00
  • 4b982205ba Revoke already issued certificates on re-enroll Finn Hercke 2025-03-11 12:49:33 +01:00
  • 831f453512 Configuring the NFS server using variables is more customizable Raphael Dannecker 2025-03-02 11:12:16 +01:00
  • 18b2cb8ccf Add TPM support for win11 VMs Raphael Dannecker 2025-02-27 19:21:49 +01:00
  • ae393086c7 Add maintenance ssh-keys Raphael Dannecker 2025-02-27 18:44:34 +01:00
  • e418ab6189 Add requested packages Raphael Dannecker 2025-02-27 18:39:00 +01:00
  • 5b4a287cca Direct logout, when mount of server shares failed Raphael Dannecker 2025-02-27 18:34:44 +01:00
  • 677931a483 Use wpa-supplicant instead of iwd as wifi-backend Raphael Dannecker 2025-02-27 18:25:17 +01:00
  • 843289d2c2 Create generic wlan role Raphael Dannecker 2025-02-27 12:28:21 +01:00
  • 72340155ed Correct ansible syntax to pass ansible-lint Raphael Dannecker 2025-02-27 12:20:57 +01:00
  • f447d1dca6 Added support for 802-1X wifi-authentification and certificate-rollout on clients Finn Hercke 2025-02-24 12:40:33 +01:00
  • 97b9ba8d97 Shorten path for XDG_CONFIG_HOME and clean dir Raphael Dannecker 2025-02-18 14:16:56 +01:00
  • bde276d962 Exit pam_exec script when not running as root Raphael Dannecker 2025-02-14 08:45:37 +01:00
  • 8b57bef7f8 Add missing file for commit e3396ef Raphael Dannecker 2025-02-05 13:57:07 +01:00
  • 76c2c38800 Revert "Adjust mmcblk-device gid on teacherlaptops to permit teachers access." Raphael Dannecker 2025-02-05 13:22:23 +01:00
  • e3396ef06c Start firewalld when -exam user logs in Raphael Dannecker 2025-02-05 13:15:42 +01:00
  • 6dcbb03601 Allow domain users to write sd-cards Raphael Dannecker 2025-02-05 13:10:56 +01:00
  • dfa16402f1 Set default git branch to main Raphael Dannecker 2025-02-03 08:10:09 +01:00
  • 5998c5900e Trixies uses tmpfs for /tmp, so let's use /var/tmp/vm for temporary VM files Raphael Dannecker 2025-01-27 17:11:12 +01:00
  • f4dffc06fc Rename instead of delete -exam media directories (belongs to commit 39da308) Raphael Dannecker 2025-01-27 17:01:03 +01:00
  • 985e02443c Hardware has changed in some classrooms Raphael Dannecker 2025-01-22 14:45:14 +01:00
  • d5f9bb889b Some internet connections need smaller MTU for wireguard Raphael Dannecker 2025-01-22 14:43:16 +01:00
  • 18cde94846 Mount nfs share for additional programs and data Raphael Dannecker 2025-01-22 14:40:52 +01:00
  • a6eadce948 Sync application starters on boot and separate ansible tasks from lmn_vm role Raphael Dannecker 2025-01-22 14:36:38 +01:00
  • 39da308ff7 Rename instead of delete outdated exam-user directories on localhome-clients Raphael Dannecker 2025-01-22 09:40:27 +01:00
  • 727922f152 Prevent autoremove of libreoffice-qt5 (e.g. filepicker) Raphael Dannecker 2025-01-20 15:54:56 +01:00
  • 9c8a8bdc69 Increase minimum available disk space after downloading a new vm image Raphael Dannecker 2025-01-15 12:22:37 +01:00
  • 7db755e718 Add alternative git GUI Raphael Dannecker 2025-01-13 13:49:26 +01:00
  • 6c81e93937 Restore SDDM-Config when the primary screen patch is no longer needed Raphael Dannecker 2025-01-13 13:43:24 +01:00
  • 352a897d88 Start user-squid-proxy at login so that all programs without kerberos support have proxy access Raphael Dannecker 2025-01-09 12:31:24 +01:00
  • f5f3d9557d Add missing file for commit 23a9b6f Raphael Dannecker 2024-12-13 18:40:42 +01:00