Differences between revisions 1 and 84 (spanning 83 versions)
Revision 1 as of 2019-07-07 10:58:10
Size: 4047
Editor: ?WolfgangSchweer
Comment: Draft for bullseye, started as a copy from the Buster page w/ some edits
Revision 84 as of 2021-08-03 03:45:47
Size: 8213
Editor: PaulWise
Comment: grammar
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
{{attachment:i.png|Debian Edu Installer Logo|width=800}}
Line 7: Line 8:
 * This page is our main overview/tracker for the status of Debian Edu Buster. In addition to this we have a list of [[http://bugs.debian.org/cgi-bin/pkgreport.cgi?usertag=debian-edu@lists.debian.org|all bugs user-tagged "debian-edu"]].  * This page is our main overview/tracker for the status of Debian Edu Bullseye. In addition to this we have a list of [[http://bugs.debian.org/cgi-bin/pkgreport.cgi?usertag=debian-edu@lists.debian.org|all bugs user-tagged "debian-edu"]].
Line 11: Line 12:
Instead of the default ''xfce'' desktop environment, ''mate'', ''gnome'', ''lxde'', ''lxqt'' or ''kde'' can be used by editing the kernel {{{desktop}}} parameter (default: {{{desktop=xfce}}}).
See the [[https://wiki.debian.org/DebianEdu/Documentation/Buster/Installation|Buster manual installation chapter]] how to edit kernel command line parameters.
=== Changes ===

 * At first boot of a combined server the SquashFS image for diskless workstation support is generated. This will take quite some time.

 * In case of a separate or an additional LTSP server required information for setting up the LTSP client environment isn't complete during installation. Setup can be done once the system has been added with GOsa².

=== Hints ===

 *
Instead of the default ''xfce'' desktop environment, ''mate'', ''gnome'', ''lxde'', ''lxqt'', ''cinnamon'' or ''kde'' can be used by editing the kernel {{{desktop}}} parameter (default: {{{desktop=xfce}}}).

 * Dropping the modules= and desktop= items from the kernel command line completely allows one to use all ISO images for stock Debian installations.
 
See the [[https://wiki.debian.org/DebianEdu/Documentation/Bullseye/Installation|Bullseye manual installation chapter]] how to edit kernel command line parameters.

=== Installation media ===
Line 16: Line 29:
=== Download using http ===
Line 20: Line 31:
Weekly builds using d-i from buster: === Download using HTTPS ===

Weekly builds using d-i from bullseye:
Line 24: Line 37:
        http://get.debian.org/cdimage/weekly-builds/amd64/iso-cd/         https://get.debian.org/cdimage/weekly-builds/amd64/iso-cd/
Line 26: Line 39:
        http://get.debian.org/cdimage/weekly-builds/amd64/iso-bd/         https://get.debian.org/cdimage/weekly-builds/amd64/iso-bd/
Line 30: Line 43:
        http://get.debian.org/cdimage/unofficial/non-free/cd-including-firmware/weekly-builds/amd64/iso-cd/         https://get.debian.org/cdimage/unofficial/non-free/cd-including-firmware/weekly-builds/amd64/iso-cd/
Line 32: Line 45:
        http://get.debian.org/cdimage/unofficial/non-free/cd-including-firmware/weekly-builds/amd64/iso-bd/         https://get.debian.org/cdimage/unofficial/non-free/cd-including-firmware/weekly-builds/amd64/iso-bd/
Line 38: Line 51:
        http://get.debian.org/cdimage/daily-builds/daily/arch-latest/amd64/iso-cd/         https://get.debian.org/cdimage/daily-builds/daily/arch-latest/amd64/iso-cd/
Line 42: Line 55:
        http://get.debian.org/cdimage/unofficial/non-free/cd-including-firmware/daily-builds/sid_d-i/current/amd64/iso-cd/         https://get.debian.org/cdimage/unofficial/non-free/cd-including-firmware/daily-builds/sid_d-i/current/amd64/iso-cd/
Line 50: Line 63:
   {{{ rsync -v --progress cdimage.debian.org::cdimage/weekly-builds/i386/iso-cd/debian-edu-testing-i386-netinst.iso debian-edu-testing-i386-netinst.iso}}}    {{{rsync -v --progress cdimage.debian.org::cdimage/weekly-builds/i386/iso-cd/debian-edu-testing-i386-netinst.iso debian-edu-testing-i386-netinst.iso}}}
Line 62: Line 75:
== Known problems we want to fix == == Known problems that need to be fixed elsewhere ==
Line 64: Line 77:
 * nothing atm  * isc-dhcp-server-ldap: fails to activate the service, see DebianBug:971275.<<BR>>After (re)booting the main server, it might take some minutes for the DHCP service to become available. This seems to happen randomly.<<BR>>In case the DHCP server doesn't work reliably, consider using the DHCP server packages from Debian 10 (buster).
  1. Create the file ''/etc/apt/sources.list.d/buster.sources.list'' with the following content:
  {{{
  deb http://deb.debian.org/debian buster main
  deb http://deb.debian.org/debian-security buster/updates main
  }}}
   and run:
  {{{
  apt update
  apt install isc-dhcp-server/buster isc-dhcp-server-ldap/buster
  }}}
Line 66: Line 89:
== Known problems that need to be fixed elsewhere ==
 * !X2Go doesn't register users with utmp/wtmp, see DebianBug:890517. Remove the {{{killer}}} package (or disable the killer cron job) on the related LTSP server to avoid user sessions to be kicked out.
  1. To make DHCP downgrading permanent and to ensure security upgrades, create two files to pin the DHCP server packages to the Debian 10 (buster) version.
Line 69: Line 91:
== Known problems we fixed via workarounds, real fix needed elsewhere ==
 * Squid needs to be started manually after reboots due to DebianBug:911325 (patch available).
 * Mounting removable media (like USB sticks) fails on diskless workstations; for details and workarounds, see DebianBug:913774.
 * Xfce is missing a volume control in the panel, see DebianBug:913610.
 * Xfce is missing a screenserver if Lightdm isn't used (e.g. LTSP clients, remote sessions), see DebianBug:922718.
  File ''/etc/apt/apt.conf.d/99-edu-default-release''; content:
  {{{
  APT::Default-Release "bullseye";
  }}}

  File ''/etc/apt/preferences.d/99-downgrade-dhcp-server''; content:
  {{{
  Package: isc-dhcp-server-ldap isc-dhcp-server
  Pin: version 4.4.1-2+deb10*
  Pin-Priority: 1001
  }}}

  1. Once the bug has been fixed, remove the three created files and run {{{apt update && apt upgrade}}}.

 * libpam-python: porting to python3 needed, see DebianBug:937234.
 * !X2Go doesn't register users with utmp/wtmp, see DebianBug:890517.
 * ldapvi sorts entries alphabetically which can break specific modifications where the order of the definitions is important, see DebianBug:820790.
Line 77: Line 111:
 * Our [[DebianEdu/Documentation/Buster|documentation]] could further be improved: eg by proof-reading and improving language+grammar used, by updating outdated entries, etc  * Our [[DebianEdu/Documentation/Bullseye|documentation]] could further be improved: eg by proof-reading and improving language+grammar used, by updating outdated entries, etc
Line 81: Line 115:
== Fixed in Git == == Fixed and done ==

 * Sending system emails from machines inside the internal network is broken, see DebianBug:989338.
 * DHCP configuration is broken, see DebianBug:989340.
 * The debian-edu-ltsp-install script fails to setup thin client support if used outside d-i, see DebianBug:989342.

 * Automatic partitioning fails on UEFI systems, see DebianBug:988396.

 * The first user doesn't have a Samba account, see DebianBug:987632.
  As a workaround, run {{{smbpasswd -a <firstusername>}}} as root on the main server.
  
 * Thin client support is broken if a combined server is installed in offline mode, see DebianBug:987633.
  As a workaround, run as root on the main server once Internet connection is available:
  {{{rm -rf /srv/ltsp/thin}}}<<BR>>
  {{{debian-edu-ltsp-install --diskless_workstation no --thin_type bare}}}

 * Diskless workstation support is broken in case of a 32-bit combined server installation, see DebianBug:987634.
  As a workaround, run {{{mv /srv/tftp/ltsp/ltsp.img /srv/tftp/ltsp/x86_32/ltsp.img}}} as root on the main server.
  <<BR>>
  Choose ''x86_32'' from the iPXE menu to start a diskless workstation.

 * major manual update due to LTSP and Samba changes, minor one for CUPS; also document the (optional) freeRADIUS setup.
 * add Bullseye artwork Homeworld.
 * GOSa²: deprecated implode() function usage with PHP 7.4 messes up GUI items, see DebianBug:964600.
 * GOsa²: Fatal error when opening user list, see DebianBug:941165 (also for a possible workaround).
 * GOSa²: password encryption/decryption broken with PHP 7.4, see DebianBug:964318.
 * Mail server configuration is broken after Exim upgrade to exim4 4.94
 * major LTSP update in bullseye, see https://lists.debian.org/debian-edu/2019/11/msg00037.html
 * LTSP 19.x: 'ltsp image /' fails to generate usable image, see DebianBug:946946. For a workaround see the bugreport. [The command stills fails but LTSP 20.x now provides a way to generate the image in case of advanced partitioning.]
 * integrate icingaweb2
 * Xfce is missing a volume control in the panel, see DebianBug:913610. [Unlikely to be fixed in Buster.]
 * fetch-ldap-cert should have independent conditions for host and LTSP chroot, see DebianBug:934380.
 * Fix fetch-ldap-cert to improve security, see DebianBug:931413.
Line 85: Line 151:
 * Fix Firefox NFS related issue, see DebianBug:930122.  * Fix Firefox NFS related issue, see DebianBug:930122.
 * Fix krb5 related logging configuration, see DebianBug:931366.
 * Set LTSP chroot path in /etc/exports file if LTSP server has i386 arch, see DebianBug:931680.
 * Include the LDAP server certificate in initial LTSP chroot image, see DebianBug:932828.
 * Provide Debian Edu RootCA certificate for download, see DebianBug:933183.
 * Fix loss of dynamically allocated v4 IP address, see DebianBug:933580.

Debian Edu Installer Logo

Status of Debian Edu "Bullseye"

(development started in July 2019)

Installation

Changes

  • At first boot of a combined server the SquashFS image for diskless workstation support is generated. This will take quite some time.
  • In case of a separate or an additional LTSP server required information for setting up the LTSP client environment isn't complete during installation. Setup can be done once the system has been added with GOsa².

Hints

  • Instead of the default xfce desktop environment, mate, gnome, lxde, lxqt, cinnamon or kde can be used by editing the kernel desktop parameter (default: desktop=xfce).

  • Dropping the modules= and desktop= items from the kernel command line completely allows one to use all ISO images for stock Debian installations.

    See the Bullseye manual installation chapter how to edit kernel command line parameters.

Installation media

Debian Edu ISOs for 64-bit and 32-bit PCs (both AMD and Intel processors) are available from the usual Debian places.

(Replace amd64 with i386 if an image is needed for very old 32-bit PCs.)

Download using HTTPS

Weekly builds using d-i from bullseye:

Daily iso-cd builds using d-i from unstable (iso-bd images are not built daily):

Download using rsync

Also recommended to update an already existing image.

  • rsync -v --progress cdimage.debian.org::cdimage/weekly-builds/amd64/iso-cd/debian-edu-testing-amd64-netinst.iso debian-edu-testing-amd64-netinst.iso

    rsync -v --progress cdimage.debian.org::cdimage/weekly-builds/i386/iso-cd/debian-edu-testing-i386-netinst.iso debian-edu-testing-i386-netinst.iso

    rsync -v --progress cdimage.debian.org::cdimage/weekly-builds/amd64/iso-bd/debian-edu-testing-amd64-BD-1.iso debian-edu-testing-amd64-BD-1.iso

    rsync -v --progress cdimage.debian.org::cdimage/weekly-builds/i386/iso-bd/debian-edu-testing-i386-BD-1.iso debian-edu-testing-i386-BD-1.iso

Verify the downloaded image file

Detailed instructions for verifying these images are part of the Debian-CD FAQ.


Known problems that need to be fixed elsewhere

  • isc-dhcp-server-ldap: fails to activate the service, see 971275.
    After (re)booting the main server, it might take some minutes for the DHCP service to become available. This seems to happen randomly.
    In case the DHCP server doesn't work reliably, consider using the DHCP server packages from Debian 10 (buster).

    1. Create the file /etc/apt/sources.list.d/buster.sources.list with the following content:

        deb http://deb.debian.org/debian buster main
        deb http://deb.debian.org/debian-security buster/updates main
      • and run:
        apt update
        apt install isc-dhcp-server/buster isc-dhcp-server-ldap/buster
    2. To make DHCP downgrading permanent and to ensure security upgrades, create two files to pin the DHCP server packages to the Debian 10 (buster) version.

      File /etc/apt/apt.conf.d/99-edu-default-release; content:

        APT::Default-Release "bullseye";

      File /etc/apt/preferences.d/99-downgrade-dhcp-server; content:

        Package: isc-dhcp-server-ldap isc-dhcp-server
        Pin: version 4.4.1-2+deb10*
        Pin-Priority: 1001
    3. Once the bug has been fixed, remove the three created files and run apt update && apt upgrade.

  • libpam-python: porting to python3 needed, see 937234.

  • X2Go doesn't register users with utmp/wtmp, see 890517.

  • ldapvi sorts entries alphabetically which can break specific modifications where the order of the definitions is important, see 820790.

Manual

  • Our documentation could further be improved: eg by proof-reading and improving language+grammar used, by updating outdated entries, etc


Fixed and done

  • Sending system emails from machines inside the internal network is broken, see 989338.

  • DHCP configuration is broken, see 989340.

  • The debian-edu-ltsp-install script fails to setup thin client support if used outside d-i, see 989342.

  • Automatic partitioning fails on UEFI systems, see 988396.

  • The first user doesn't have a Samba account, see 987632.

    • As a workaround, run smbpasswd -a <firstusername> as root on the main server.

  • Thin client support is broken if a combined server is installed in offline mode, see 987633.

    • As a workaround, run as root on the main server once Internet connection is available:

      rm -rf /srv/ltsp/thin
      debian-edu-ltsp-install --diskless_workstation no --thin_type bare

  • Diskless workstation support is broken in case of a 32-bit combined server installation, see 987634.

    • As a workaround, run mv /srv/tftp/ltsp/ltsp.img /srv/tftp/ltsp/x86_32/ltsp.img as root on the main server.
      Choose x86_32 from the iPXE menu to start a diskless workstation.

  • major manual update due to LTSP and Samba changes, minor one for CUPS; also document the (optional) freeRADIUS setup.
  • add Bullseye artwork Homeworld.
  • GOSa²: deprecated implode() function usage with PHP 7.4 messes up GUI items, see 964600.

  • GOsa²: Fatal error when opening user list, see 941165 (also for a possible workaround).

  • GOSa²: password encryption/decryption broken with PHP 7.4, see 964318.

  • Mail server configuration is broken after Exim upgrade to exim4 4.94
  • major LTSP update in bullseye, see https://lists.debian.org/debian-edu/2019/11/msg00037.html

  • LTSP 19.x: 'ltsp image /' fails to generate usable image, see 946946. For a workaround see the bugreport. [The command stills fails but LTSP 20.x now provides a way to generate the image in case of advanced partitioning.]

  • integrate icingaweb2
  • Xfce is missing a volume control in the panel, see 913610. [Unlikely to be fixed in Buster.]

  • fetch-ldap-cert should have independent conditions for host and LTSP chroot, see 934380.

  • Fix fetch-ldap-cert to improve security, see 931413.

  • Drop obsolete code in d-i/finish-install, see 923675.

  • Fix sudo-ldap configuration, see 929964.

  • Fix LTSP related PXE configuration, see 928756.

  • Fix Firefox NFS related issue, see 930122.

  • Fix krb5 related logging configuration, see 931366.

  • Set LTSP chroot path in /etc/exports file if LTSP server has i386 arch, see 931680.

  • Include the LDAP server certificate in initial LTSP chroot image, see 932828.

  • Provide Debian Edu RootCA certificate for download, see 933183.

  • Fix loss of dynamically allocated v4 IP address, see 933580.