1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
|
debian-edu-fai (2024.02.01.2~deb12u1) bookworm; urgency=medium
* Release to Debian bookworm.
-- Mike Gabriel <sunweaver@debian.org> Thu, 01 Feb 2024 17:15:05 +0100
debian-edu-fai (2024.02.01.2) unstable; urgency=medium
* fai/config/package_config/EDU:
+ Fix package name (systemd-timerd -> systemd-timesyncd).
-- Mike Gabriel <sunweaver@debian.org> Thu, 01 Feb 2024 16:24:26 +0100
debian-edu-fai (2024.02.01.1) unstable; urgency=medium
* fai/config/class/40-parse-profiles.sh:
+ Enlarge menu window width by 5 chars.
* fai/config/disk_config/LVM_EDU*:
+ Drop /dev/vg_system/usr volume. Causes conflicts with usr-merge
initiative in Debian.
* fai/config/disk_config/LVM_EDU_*_LEGACY:
+ Add BIOS Legacy partition tables again. Some old UEFIs/BIOSes
can't handle BIOS legacy on GPT partition tables.
* fai/config/_obsolete-files.d/debian-edu-fai.removed:
+ Add class/90_fai.profile.
* fai/config/package_config/EDU:
+ Assure installation of systemd-timerd.
-- Mike Gabriel <sunweaver@debian.org> Thu, 01 Feb 2024 16:10:54 +0100
debian-edu-fai (2023.11.19.1~deb12u1) bookworm; urgency=medium
* Release to Debian bookworm.
-- Mike Gabriel <sunweaver@debian.org> Thu, 30 Nov 2023 09:14:29 +0100
debian-edu-fai (2023.11.19.1) unstable; urgency=medium
* bin/debian-edu-router-fai_updateconfigspace:
- Fix quoting typo in git command.
-- Mike Gabriel <sunweaver@debian.org> Sun, 19 Nov 2023 09:51:33 +0100
debian-edu-fai (2023.10.03.1) unstable; urgency=medium
* fai/config/_obsolete-files.d/debian-edu-fai.removed:
- Add .asc files which got replaced by .gpg files.
* fai/config/scripts/*/20-update-security-group-conf:
- Don't fail script if not on DEBIAN_11.
* fai/config/disk_config:
- LVM_EDU_MINIMAL: Fix LV name (home -> srv).
- Enlarge system partitions generously, so that system installation don't
fail because of low-disk space.
-- Mike Gabriel <sunweaver@debian.org> Tue, 03 Oct 2023 23:14:29 +0200
debian-edu-fai (2023.09.26.3) unstable; urgency=medium
* debian/control:
+ Move memtest86+ (for archs amd64 + i386) to Recommends: field as we can't
have arch-specific dependencies in arch-all bin:pkgs. (Closes: #1052957).
-- Mike Gabriel <sunweaver@debian.org> Tue, 26 Sep 2023 16:53:13 +0200
debian-edu-fai (2023.09.26.2) unstable; urgency=medium
* debian/control:
+ Fix installability on non-x86 architectures. People should at least be
able to test those platforms.
-- Mike Gabriel <sunweaver@debian.org> Mon, 25 Sep 2023 09:30:53 +0200
debian-edu-fai (2023.09.26.1) unstable; urgency=medium
[ Guido Berhoerster ]
* Improve OS detection for loading profiles
[ Mike Gabriel ]
* ChangeLog: update post-release
* bin/debian-edu-fai_install: Promote http_proxy settings into FAI config
space and set APTPROXY variable accordingly.
* fai/config/hooks/updatebase.DEBIAN: Debian Edu sets up http proxy
configuration via 03debian-edu-config. To override this (which we want),
we need to move 02proxy to 04proxy in /etc/apt/apt.conf.d/.
-- Mike Gabriel <sunweaver@debian.org> Mon, 25 Sep 2023 09:01:00 +0200
debian-edu-fai (2023.09.19.1) unstable; urgency=medium
[ Mike Gabriel ]
* {bin/debian-edu-fai_install,fai/config/class/DEBIAN.var.in}:
+ Propagate mirrorurl from debian-edu-fai.conf into FAI config space.
+ Don't use @mirrorurl@, use internally derived @apt_cdn@ variable instead.
* files/etc/apt/sources.list.d/fai-mirror.list/FAI_MIRROR:
+ Use more generic mirror (path) URL.
* APT sources: Use {%apt_cdn%} variable instead of hard-coded servername.
* bin/debian-edu-fai_install:
+ Fix config file's name in comment.
* bin/debian-edu-fai_updateconfigspace:
+ More reliably detect if we are in a Git working copy.
* fai/config/class:
+ Add OS detection code to 40-parse-profiles.sh to support OS + version specific
installation profiles (detect from FAI nfsroot OS + version).
* fai/config/class:
+ Rename / add profile files, now OS + version specific.
[ Guido Berhörster ]
* fai/config/class/40-parse-profiles.sh:
+ Adjust OS_VERSION_MAJOR population.
-- Mike Gabriel <sunweaver@debian.org> Tue, 19 Sep 2023 22:05:11 +0200
debian-edu-fai (2023.09.13.1) unstable; urgency=medium
[ Guido Berhoerster ]
* Replace nullmailer with exim4
This corresponds to a manual installation and avoids problems with nullmailer
such as excessive delivery attempts of all queued messages at once and
excessive logging of such events (see discussion in #1051461).
-- Mike Gabriel <sunweaver@debian.org> Wed, 13 Sep 2023 08:55:53 +0200
debian-edu-fai (2023.09.09.1) unstable; urgency=medium
[ Guido Berhoerster ]
* Fix nullmailer configuration
Configure the nullmailer relayhost (the default is mail.<domain>) in order to
allow clients to actually send mail and explicitly set /etc/mailname
(Closes: #1051461).
* Do not append the hostname to /etc/mailname
Do not append to /etc/mailname, the file should contain a single hostname.
Rather create it with the default "postoffice.intern" if it does not exist yet.
This is consistent with manual installations of Debian Edu.
-- Mike Gabriel <sunweaver@debian.org> Sat, 09 Sep 2023 22:51:26 +0200
debian-edu-fai (2023.09.07.1) unstable; urgency=medium
* Debian Edu FAI for Debian bookworm.
[ Guido Berhoerster ]
* Rename bin/debian-edu-faiinstall to bin/debian-edu-fai_install for
consistency with debian-edu-router.
* Actually install /etc/security/group.conf on bullseye. From bookworm on this
is handled via cfengine.
* Use non-free-firmware component on bookworm and later.
This is required for installing the firmware packages.
* Add support for memtest86+ x64.
* debian/control: Add explicit dependency on memtest86+.
* Unset TMPDIR when invoking fai-make-nfsroot.
On a DebianEdu installation pam_tmpdir is installed which sets TMPDIR to
/tmp/user/<uid>. This is then propagated from fai-make-nfsroot to
debootstrap which causes maintainer scripts making use of TMPDIR (e.g. by
calling mktemp) to fail because the directory does not exist inside the
chroot.
* Add some documentation about NFS exports to README.md
* Switch to installing bookworm.
* Ensure parent of target directory exists before copying FAI config space
debian-edu-faiinstall does not check whether the parent of the target
directory /srv/fai/config existed before invoking cp -a on the config space.
Thus, if /srv/fai does no exist cp will copy /usr/share/debian-edu-fai/fai
/config to /srv/fai instead of /srv/fai/config which is not detected until
booting a client via PXE. Fix this by ensuring the parent directory of
$FAI_CONFIGDIR_REAL exists.
Additionally do not hardcode /srv/fai which ignores that FAI_CONFIGDIR is
configurable.
* Disable apt proxy by default. Do not assume faiserver.intern exists. The
proxy can be set via /etc/debian-edu/debian-edu-fai.conf.
* Fix instructions in README.md and /etc/debian-edu/debian-edu-fai.conf
The configuration file name is /etc/debian-edu/debian-edu-fai.conf not
/etc/debian-edu/faiinstall.conf.
Improve and shorten the instructions to set up SSH access for the fai user.
* Add primary group fai for the fai user (instead of primary group
nobody).
* Recommend the use of yescrypt password hashes.
This follows the default since Debian bullseye.
* Add note about syntax to configuration.
* Update motd for bookworm.
* README.md: Change instructions to emphasize the need for first time
configuration. Users should not be enticed to blindly run
debian-edu-fai_install before actually configuring the server.
* Ensure debian-edu-fai.conf is not world-readable
It contains password hashes for the root account of installed clients so
like /etc/shadow it should not be world readable.
* Replace fetch-ldap-cert script usage with fetch-rootca-cert
The fetch-ldap-cert init script has been obsolete and was removed
(see #971780).
[ Mike Gabriel ]
* bin/debian-edu-fai_install (port over from debian-edu-router's FAI
installation script):
+ Manage config space with ucf.
+ Echo headlines to show where we are in the script.
+ Drop support for Debian versions older than bullseye
+ Mount /proc and /sys in nfsroot
* README.md: Typo fix.
* {README.md,conf/debian-edu/debian-edu-fai.conf}: Adjust files to renaming
of debian-edu-fai_install script (only in docs or comments).
* bin/debian-edu-fai_install: Mount /proc and /sys in nfsroot
Mount prior to creating/updating it. Those mountpoints are needed by
dracut's 45url-libs module.
* debian/control:
+ Bump Standards-Version: to 4.6.2. No changes needed.
* debian/copyright:
+ Update copyright attributions.
* lintian: Override uses-dpkg-database-directly and openpgp-file-has-
implementation-specific-extension for given reasons.
-- Mike Gabriel <sunweaver@debian.org> Thu, 07 Sep 2023 21:16:37 +0200
debian-edu-fai (2023.05.16.1) unstable; urgency=medium
* bin/debian-edu-faiinstall: Make sure FAI_CONFIGDIR_REAL is set before it
is accessed.
* debian/postrm: Ignore failures during execution of deluser/delgroup.
(Closes: #1035292).
-- Mike Gabriel <sunweaver@debian.org> Tue, 16 May 2023 23:00:47 +0200
debian-edu-fai (2022.04.14.1) unstable; urgency=medium
* fai/config/scripts/GRUB_EFI/10-setup:
- Use <tab> for indentations.
- Use backquotes, make Midnight Commanders shell syntax highlighter happier.
- Add EFI boot manager wipe for the Dell Venue 8 Pro tablet series.
- Explicitly set --bootnext entry to 0000 after grub-install.
* bin/debian-edu-faiinstall:
- Drop unused $gtkvideo variable.
- Adjust path in comment.
- Adjust defaults for NFSROOT and TFTPROOT according to debian-edu-fai.conf.
- Drop duplicate value defaults for wifi_essid and wifi_passphrase.
* debian/maintscript:
+ Rename /etc/debian-edu/faiinstall.conf to /etc/debian-edu/debian-edu-fai.
conf.
* Rename faiinstall.conf to debian-edu-fai.conf.
* conf/debian-edu/fai/debian-edu-fai.TEMPLATE/nfsroot.conf.in:
- Adjust paths of TFTPROOT and NFSROOT. More properly use our own namespace.
* conf/debian-edu/fai/debian-edu-fai.TEMPLATE/fai.conf.in:
- Typo fix.
* debian/control:
+ Bump Standards-Version: to 4.6.1. No changes needed.
+ Bump Standards-Version: to 4.6.1. No changes needed.
-- Mike Gabriel <sunweaver@debian.org> Fri, 16 Sep 2022 20:38:21 +0200
debian-edu-fai (2022.02.22.1) unstable; urgency=medium
* fai/config/basefiles/mk-basefile:
+ Drop file. Not needed here.
* fai/config/scripts/EDU/50-cups-browsing:
+ Assure that CreateRemoteCUPSPrinterQueues is set to 'Yes'.
* fai/config/class/{10-*,20-*}:
+ Update from upstream FAI config space.
* debian/postinst:
+ Fix add user call, add user account name (which was obviously missing).
(This resolves the current piuparts test failure).
-- Mike Gabriel <sunweaver@debian.org> Tue, 22 Feb 2022 21:40:11 +0100
debian-edu-fai (2022.02.09.1) unstable; urgency=medium
* bin/debian-edu-faiinstall:
- Fix script failure if /srv/tftp/ltsp does not exist.
- Obviously 'test -d' is true for symlinks that point to a directory. In
that case, we need to be more precise.
- Fix school_tag (for those, who use it)
* fai/config/package_config/STANDARD:
- python{,-minimal} are virtual, let's use python3{,-minimal} instead.
-- Mike Gabriel <sunweaver@debian.org> Wed, 09 Feb 2022 20:45:21 +0100
debian-edu-fai (2022.01.31.1) unstable; urgency=medium
* Initial release to Debian. (Closes: #1004675).
-- Mike Gabriel <sunweaver@debian.org> Mon, 31 Jan 2022 16:47:23 +0100
|
