Lernstick A Debian derivative for Schools in Switzerland Gaudenz Steinlin gaudenz@debian.org DebConf 15 22. Aug 2015 k c i t s n r e l
Outline Lernstick Overview 1 2 How to help - Improve collaboration with Debian Questions 3 k c i t s n r e l
Project Goals • Mobile and secure learning environment • Runs everywhere • Low administrative overhead for schools • Ready to use for (Swiss) schools • Bring your own device (BYOD) • Non technical End-User focus • Stable base system + latest applications k c i t s n r e l
Project structure • Not much structure really • Funded by the University of applied Sciences of Nortwestern Switzerland • Free support for schools in Northwestern Switzerland • Support contracts for other schools • Two people working part-time on the project • Ronny Standtke (Project founder) • Gaudenz Steinlin (me ;-) ) • Not much infrastructure • Package repository (reprepro) • Download site for ISO images • GIT repositories on Github k c i t s n r e l
Project structure • Not much structure really • Funded by the University of applied Sciences of Nortwestern Switzerland • Free support for schools in Northwestern Switzerland • Support contracts for other schools • Two people working part-time on the project • Ronny Standtke (Project founder) • Gaudenz Steinlin (me ;-) ) • Not much infrastructure • Package repository (reprepro) • Download site for ISO images • GIT repositories on Github k c i t s n r e l
Project structure • Not much structure really • Funded by the University of applied Sciences of Nortwestern Switzerland • Free support for schools in Northwestern Switzerland • Support contracts for other schools • Two people working part-time on the project • Ronny Standtke (Project founder) • Gaudenz Steinlin (me ;-) ) • Not much infrastructure • Package repository (reprepro) • Download site for ISO images • GIT repositories on Github k c i t s n r e l
Variants • Standard Lernstick (~4.3G) • Includes various Desktops (GNOME, KDE, XFCE, ...) • As much software as fits into a DVD • Open and unrestricted environment, students can examin the environment and learn from it • Paswordless sudo root access by default • Lernstick Exam Environment (~2.0G) • Restricted version for Exams • Disables all access to internal and external devices • Firewalled network • Intended for Bring your own device exams • Custom builds for support contract customers • May include proprietary software k c i t s n r e l
Variants • Standard Lernstick (~4.3G) • Includes various Desktops (GNOME, KDE, XFCE, ...) • As much software as fits into a DVD • Open and unrestricted environment, students can examin the environment and learn from it • Paswordless sudo root access by default • Lernstick Exam Environment (~2.0G) • Restricted version for Exams • Disables all access to internal and external devices • Firewalled network • Intended for Bring your own device exams • Custom builds for support contract customers • May include proprietary software k c i t s n r e l
Variants • Standard Lernstick (~4.3G) • Includes various Desktops (GNOME, KDE, XFCE, ...) • As much software as fits into a DVD • Open and unrestricted environment, students can examin the environment and learn from it • Paswordless sudo root access by default • Lernstick Exam Environment (~2.0G) • Restricted version for Exams • Disables all access to internal and external devices • Firewalled network • Intended for Bring your own device exams • Custom builds for support contract customers • May include proprietary software k c i t s n r e l
Technical Overview • Mostly Debian • Debian stable + Debian backports + Own backports + 3rd party packages + some Lernstick specific packages • Based on Debian Live • GNOME as default Desktop, others available • Distributed as ISO image with highly compressed SquashFS • Usually installed on a USB drive with a persistency partition • i386 planing to move to amd64 • Trying to keep delta to Debian as small as possible k c i t s n r e l
Specific software – DLCopy
Specific software – DLCopy
Specific software – Lernstick Welcome
Specific software – xmlboot
Lernstick specific software • lernstick-guest • Fast user switching • Mounts the home folder from an external USB Stick and logs in the user • lernstick-firewall • Used in the Exam Environment • Iptables and tinyproxy • Simple interface in Lernstick Welcome to whitelist services • JBackPack • Simple backup GUI to rdiff-backup k c i t s n r e l
Lernstick specific software • lernstick-guest • Fast user switching • Mounts the home folder from an external USB Stick and logs in the user • lernstick-firewall • Used in the Exam Environment • Iptables and tinyproxy • Simple interface in Lernstick Welcome to whitelist services • JBackPack • Simple backup GUI to rdiff-backup k c i t s n r e l
Lernstick specific software • lernstick-guest • Fast user switching • Mounts the home folder from an external USB Stick and logs in the user • lernstick-firewall • Used in the Exam Environment • Iptables and tinyproxy • Simple interface in Lernstick Welcome to whitelist services • JBackPack • Simple backup GUI to rdiff-backup k c i t s n r e l
Deviations from Debian • Non-free packages in base install (NVIDIA and ATI drivers, firmware) • Some more non-free software installable in “Lernstick Welcome” • Optimizations for non technical users • Mostly small things like desktop file changes, improved icons, internationalization • Upstreamed by bug reports if applicable and accepted • Live specific customizations • Mostly fixups of hardware assumptions (eg. sound card configuration in /home) • SecureBoot support • Because our users don’t know how and don’t want to modify BIOS settings k c • We have our own shim signed by Microsoft i t s n r • Willing to help to bring this to Debian if there is interest e l
Deviations from Debian • Non-free packages in base install (NVIDIA and ATI drivers, firmware) • Some more non-free software installable in “Lernstick Welcome” • Optimizations for non technical users • Mostly small things like desktop file changes, improved icons, internationalization • Upstreamed by bug reports if applicable and accepted • Live specific customizations • Mostly fixups of hardware assumptions (eg. sound card configuration in /home) • SecureBoot support • Because our users don’t know how and don’t want to modify BIOS settings k c • We have our own shim signed by Microsoft i t s n r • Willing to help to bring this to Debian if there is interest e l
Deviations from Debian • Non-free packages in base install (NVIDIA and ATI drivers, firmware) • Some more non-free software installable in “Lernstick Welcome” • Optimizations for non technical users • Mostly small things like desktop file changes, improved icons, internationalization • Upstreamed by bug reports if applicable and accepted • Live specific customizations • Mostly fixups of hardware assumptions (eg. sound card configuration in /home) • SecureBoot support • Because our users don’t know how and don’t want to modify BIOS settings k c • We have our own shim signed by Microsoft i t s n r • Willing to help to bring this to Debian if there is interest e l
Deviations from Debian • Non-free packages in base install (NVIDIA and ATI drivers, firmware) • Some more non-free software installable in “Lernstick Welcome” • Optimizations for non technical users • Mostly small things like desktop file changes, improved icons, internationalization • Upstreamed by bug reports if applicable and accepted • Live specific customizations • Mostly fixups of hardware assumptions (eg. sound card configuration in /home) • SecureBoot support • Because our users don’t know how and don’t want to modify BIOS settings k c • We have our own shim signed by Microsoft i t s n r • Willing to help to bring this to Debian if there is interest e l
Deviations from Debian • Non-free packages in base install (NVIDIA and ATI drivers, firmware) • Some more non-free software installable in “Lernstick Welcome” • Optimizations for non technical users • Mostly small things like desktop file changes, improved icons, internationalization • Upstreamed by bug reports if applicable and accepted • Live specific customizations • Mostly fixups of hardware assumptions (eg. sound card configuration in /home) • SecureBoot support • Because our users don’t know how and don’t want to modify BIOS settings k c • We have our own shim signed by Microsoft i t s n r • Willing to help to bring this to Debian if there is interest e l
Recommend
More recommend