bglug-it / client-pull-installation Goto Github PK

Base Edubuntu lacks basic functions for working in normal environments.

Please add ubuntu-restricted-extras to the packages installed by default on clients, as it was requested with issue #2 for server-config, as it can't be done within presed (brokes it).

Screen diffusion within Epoptes works like this: the single client will connect to a VNC session on a random port on the docenti machine. Since ufw will block random ports access, ufw needs to be disabled (it was installed as dependency during preseed).

It should be sufficient to do these two commands:

echo "manual" > /etc/init/ufw.override
stop ufw

Sometimes, breakage on APT stack blocks the Ansible chain on clients.

I suggest to call these two commands everytime to ensure APT is not broken:

• dpkg --configure -a
• apt-get install -f

In many installations (where configuration of pulseaudio went wrong because of errors within the Ansible playbook) the script for fixing audio permissions for domain users is not working at all. Result is that audio is not working on any clients.

Manual fixing can be done with the following steps:

• Fixing correct startup within /etc/init/pulseaudio.conf (fix already designed and implemented but last implementation is not fully working, so I am going to change it);
• Removing previous .pulse and .config/pulse folders for all users (best done on the server with root account);
• Running at least once the script for fixing the permissions (something like:
  curl -sSL http://pdc.localdomain.dom/ks/preseed/pulseaudio-perms.sh | sudo bash
  )

Probably is a good idea to provide a script (or a playbook within the server) to fix the issue on the whole infrastructure (well, it shouldn't happen anymore, but still...).

I suspect it has to do with the fact that the script would be run when the network stack hasn't been taken up yet.

I propose to convert it to an upstart task and make it dependent on two services: pulseaudio and samba.

Any user may disable NetworkManager within his/her interface. This is a problem, because the interface cannot be re-enabled and a local administrator needs to log in and fix the mess.

Please disable the possibility for a non "Domain operator/Domain Administrator" user to disable the network interfaces and the network stack within NetworkManager.

Images are to be supported for as long as possible. Installing Hardware Enablement stack by Ubuntu will align 14.04 Trusty installations with basic packages from 16.04 Xential.

Based on instructions here:

apt-get install --install-recommends linux-generic-lts-xenial xserver-xorg-core-lts-xenial xserver-xorg-lts-xenial xserver-xorg-video-all-lts-xenial xserver-xorg-input-all-lts-xenial libwayland-egl1-mesa-lts-xenial

Reinstalling a new PC with role "client" does not install epoptes-client, it seems. This will break the ansible chain and leave the configuration not working.

The fix I propose is to verify that the package epoptes-client is installed before doing stuff that requires it inside the playbook.

This should have to do with ansible, but after domain join the client machine doesn't restart.
First proposal is to include path for 'shutdown -r now' command used within playbooks.