4228
Comment: update blends issue.
|
4457
add LDAP and initial setup issues.
|
Deletions are marked like this. | Additions are marked like this. |
Line 26: | Line 26: |
* LDAP bootstrap: sudo-ldap needs FQDN, otherwise some GOsa² actions fail. * ldap-debian-edu-install: systemctl start/stop call must be replaced with service ones for some daemons, otherwise Samba and Kerberos setup fails. |
Contents
Status of Debian Edu "Stretch"
Development started end of March 2016.
- Use this image for testing:
Most resources moved to git, see SVN2Git Migration Status page
Executive summary
ATM an installation ends up in a broken system; the edu task description file is completely wrong now that the 'blend-gen-control' script has been changed; see: 834719. Using the old style tasks file (in debian-edu-expert mode inside Debian-Installer) allows one to get a system with the chosen profiles installed.
The LTSP chroot installation is broken most probably caused by recent changes to apt; see 831409 and the apt issue in 830696.
Changes from Jessie to Stretch
- TBD
Known problems we must fix
- new samba version: configuration changes, login on workstations not possible.
- pxe installation: fails due to kernel mismatch, but works after adapting d-e-pxeinstall to wget the daily d-i netboot images.
Fixed in git, needs upload to unstable
- LDAP bootstrap: sudo-ldap needs FQDN, otherwise some GOsa² actions fail.
- ldap-debian-edu-install: systemctl start/stop call must be replaced with service ones for some daemons, otherwise Samba and Kerberos setup fails.
Fixed + done (related packages migrated to stretch or unstable)
network interfaces: eth0 -> enp0s3, eth1 -> enp0s8 (VirtualBox environment), see: https://www.freedesktop.org/wiki/Software/systemd /PredictableNetworkInterfaceNames/ for more general information and how to disable this change. [added kernel param net.ifnames=0 to get back old device names]. Added forgotten type 'string' (preseed file).
- cfengine run is broken due to forgotten removal of one line (ldap2zone) in /etc/cfengine/debian-edu/cfengine.conf.
- sddm: by default, all users (icons) are shown (after fixing network and autofs); default theme breeze can't be configured to show a username field. [replaced with lightdm]
- isc-dhcp-server: fails to work, variable INTERFACES in /etc/default/isc-dhcp-server has been split into INTERFACESv4 and INTERFACESv6 (cf).
- tftp-server: as atftpd isn't available in stretch atm, tftpd-hpa has been installed; disabling option --secure (/etc/default/tftpd-hpa) lets the daemon work (cf).
- LTSP generates squashfs image file automatically, this takes ages and needs a lot of disk space. A file like ../ltsp-build-client/Debian-custom/001-disable-squashfs-image containing one line: SQUASHFS_IMAGE="False" will prevent it.
LTSP: both thin and diskless clients fail to start (kernel panic), seems to be due to 786925. (LTSP default is NBD in stretch, Debian Edu uses NFS.) Update: after generating the NBD image file (and using it), both LTSP client types work like expected. Generation takes a long time (3.6 GiB size for MATE DE, 3.9 GiB for default PLASMA DE).
mirror redirector: http.debian.net -> httpredir.debian.org
sitesummary prerm script is rc buggy 823688.
default browser: iceweasel -> firefox(-esr)
squid renaming: squid3 -> squid
- autofs: disabling on main server fails, maybe use 'systemctl disable autofs' instead (cf)
- d-e-c/032-edu-pkgs: non-existing packages readahead and readahead-fedora should be dropped from purge list to enable LTSP chroot installation.
- display manager: kdm is gone; after a default combi server installation sddm (w/ MATE as default session) shows up but doesn't allow login (no username field). [kdm replaced with lightdm]
- several packages need fixes to work with PHP 7.0:
- LTSP chroot installation will fail atm w/o manual changes in d-i environment.
gosa.conf: the version shipped with d-e-c 1.819 is broken, see 820551. If you want to test GOsa², you have to:
- fix the file /etc/gosa/gosa.conf manually (see bug report for a patch)
- remove /etc/gosa/gosa.secrets
- execute 'gosa-encrypt-passwords'
- execute 'service apache2 reload'