[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#996103: marked as done (debian-edu-config: missing real support for LTSP chroot creation and maintenance)

Your message dated Sun, 05 Dec 2021 21:03:28 +0000
with message-id <E1mtyfQ-0000zm-OO@fasolo.debian.org>
and subject line Bug#996103: fixed in debian-edu-config 2.11.56+deb11u2
has caused the Debian Bug report #996103,
regarding debian-edu-config: missing real support for LTSP chroot creation and maintenance
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
996103: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=996103
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: debian-edu-config
Version: 2.11.56+deb11u1
Severity: important

Hi,

bug #995610 has been reported concerning possibly missing firmware when 
doing PXE installations on real hardware.

Same applies to LTSP thin clients and diskless workstations, but this 
issue slipped my attention, too. (No real hardware available, VMs only.)

As of now, after generating the SquashFS image for thin clients, the 
related chroot is removed. Updating the image after possible package 
upgrades is done via running chroot creation from scratch again; reason 
has been to don't bother unexperienced admins to deal with chroot 
issues (like temporary files, proc and devpts).

Installing firmware packages inside the thin client chroot would even 
require to adjust the sbin/debian-edu-ltsp-install tool (after having 
copied it to /usr/local/sbin). Unexperienced admins would be left w/o a 
clue if LTSP client boot fails in case of network cards needing 
firmware.

The new LTSP (as of bullseye) has an approach different to LTSP5 which 
shipped a dedicated tool to create and maintain chroots.

Such a tool should be available for Debian Edu 11. In addition, a tool 
allowing to easily install firmware packages in LTSP chroots should be 
available.

LTSP chroot creation and maintenance for diskless workstations should be 
possible (as opposed to creating the SquashFS image from the LTSP 
server's file system). It would allow one to generate dedicated client 
images with possible needed firmware w/o spoiling the LTSP server 
filesystem by installing them there.

This would also be a secure fix for #993935 (privacy issues for combined 
servers). Unexperienced admins can't be expected to copy the 
sbin/debian-edu-ltsp-install tool to /usr/local/sbin and adjusting the 
exclude list to site specific needs.

The sbin/debian-edu-ltsp-install tool (and some others) would need 
related adjustments. Related manual pages need to be adjusted/added.

A wrapper tool for the 'ltsp ipxe' command needs to be added to allow 
one to easily update the iPXE menue after changing the default netboot 
menue item after /etc/ltsp/ltsp.conf file edits.

All above mentioned changes are already in unstable (with fixes in Git).

Once tested, these should go into bullseye-pu.

Wolfgang

Attachment: signature.asc
Description: PGP signature


--- End Message ---
--- Begin Message --- 
Source: debian-edu-config
Source-Version: 2.11.56+deb11u2
Done: Holger Levsen <holger@debian.org>

We believe that the bug you reported is fixed in the latest version of
debian-edu-config, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 996103@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Holger Levsen <holger@debian.org> (supplier of updated debian-edu-config package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 28 Nov 2021 16:10:50 +0100
Source: debian-edu-config
Architecture: source
Version: 2.11.56+deb11u2
Distribution: bullseye
Urgency: medium
Maintainer: Debian Edu Developers <debian-edu@lists.debian.org>
Changed-By: Holger Levsen <holger@debian.org>
Closes: 995610 996103
Changes:
 debian-edu-config (2.11.56+deb11u2) bullseye; urgency=medium
 .
   [ Mike Gabriel ]
   * share/debian-edu-config/tools/pxe-addfirmware: Fix TFTP server path
     (/var/lib/tftpboot-> /srv/tftp). (Closes: #995610).
 .
   [ Wolfgang Schweer ]
   * Add real support for LTSP chroot setup and maintenance. (Closes: #996103).
     - Adjust existing scripts and manual page for improved LTSP chroot setup:
       + sbin/debian-edu-ltsp-install: Add LTSP diskless client chroot creation,
         use uniform locations for X2Go thin clients and diskless workstations,
         ensure sitesummary-client setup and configuration inside chroots, care
         for proper mount and umount operation, add xrdp-sesman to the list of
         masked services for LTSP clients, make sure all kernels are updated,
         adjust the ltsp.conf file content to match the changes, replace last
         edit date with version number, adjust usage information accordingly.
       + share/debian-edu-config/tools/run-at-firstboot: Care for the changed
         'debian-edu-ltsp-install' default options to make sure combined server
         installations have a generated SquashFS image file just like before.
       + share/man/man8/debian-edu-ltsp-install.8: Update to reflect the changes.
     - Provide maintenance related scripts and manual pages:
       + sbin/debian-edu-ltsp-chroot: Tool to make LTSP chroot maintenance easy.
       + sbin/debian-edu-ltsp-initrd: Wrapper script for 'ltsp initrd' command.
         It makes sure that a use case specific initrd (/srv/tftp/ltsp/ltsp.img)
         is generated and moved to the right location.
       + sbin/debian-edu-ltsp-ipxe: Wrapper script for 'ltsp ipxe' command. It
         cares for a Debian Edu specific /srv/tftp/ltsp/ltsp.ipxe content.
       + share/debian-edu-config/tools/ltsp-addfirmware: Install firmware in LTSP
         chroots in case clients won't work otherwise. (Adjusted tool from Buster
         re-added to the binary package.)
       + share/man/man8/debian-edu-ltsp-chroot.8
       + share/man/man8/debian-edu-ltsp-initrd.8
       + share/man/man8/debian-edu-ltsp-ipxe.8
   * Adjust Makefile to reflect the changes.
Checksums-Sha1:
 e8221161ed747afbe5b193c9b2a23b68b96ae649 1958 debian-edu-config_2.11.56+deb11u2.dsc
 1390e2fe4f6752e1763a227397473e8b0630757b 346924 debian-edu-config_2.11.56+deb11u2.tar.xz
 34b8494c30286846d485a82336c50cb07bc5e7fa 5699 debian-edu-config_2.11.56+deb11u2_source.buildinfo
Checksums-Sha256:
 e2515143766084314163876b2290fa19f3c29608bb0fee3f1289fcafd4f92fe7 1958 debian-edu-config_2.11.56+deb11u2.dsc
 3830b45fef356f6890561e3a732e9f0c059e3eb9dc9872705534e56c46cb7b27 346924 debian-edu-config_2.11.56+deb11u2.tar.xz
 c8de4fe1ee4420e3d0e911f8d30231458a2266c79b825c05fe69615c27f3d7bf 5699 debian-edu-config_2.11.56+deb11u2_source.buildinfo
Files:
 ac71a2f2908ad6c41d1d3cf544071145 1958 misc optional debian-edu-config_2.11.56+deb11u2.dsc
 8f108d949423b87a779a7af1b60a7cf4 346924 misc optional debian-edu-config_2.11.56+deb11u2.tar.xz
 36e1edee00889067eeeec7c6caef7e0b 5699 misc optional debian-edu-config_2.11.56+deb11u2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=VA25
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: