This weekend we finally published the first stable release of -Skolelinux / Debian Edu based -on Debian/Squeeze. The full announcement is -available -from the project announcement list. Now is a good time to test if it -you have not done so already.
- -I plan to present the new version at -a NUUG -meeting on tuesday. I look forward to seeing you there if you are -in Oslo, Norway.
+ +Aftenposten melder i dag at selgerne av +gatemagasinet =Oslo er +irritert +pÃ¥ at det er kommet en konkurrent pÃ¥ banen fra organisasjonen +Folk er Folk, +som støtter ârumenerneâ, de mest uglesette av tiggerne i Norge. Min +første tanke da jeg leste nyheten er at slik mÃ¥ =Oslo-selgerne tÃ¥le +nÃ¥r de nekter "rumenerne" og andre utenlandske tiggere Ã¥ selge +gatemagasinet sitt. Det ble rapportert for noen Ã¥r siden at +utenlandske +tiggere ikke var velkomne som selgere, og Ã¥ opprette en konkurrent +virker da for meg som et rasjonelt alternativ. Og at "rumerene" +utelukkes gjelder visst ikke bare i Oslo. I Adresseavisen fant jeg en +artikkel om at selgerne av +gateavisen +Sorgenfri i Trondheim ogsÃ¥ +utelukker +utenlandske selgere.
+ +Men situasjonen er visst ikke så rett frem som opprinnelige +artikler kunne tyde på. Mens jeg søkte opp gamle artikler og +referanser om temaet, fant jeg et +leserbrev +fra en av stifterne av =Oslo, som protesterte på +påstander +fra likestillingsombudet om diskriminering og forteller at =Oslo +krever at de som selger magasinet skal kunne kommunisere med kundene +for å kunne representere magasinet utad, og at "rumererne" ikke +ekskluderes for å være utlendinger men pga. at de ikke kan snakke +norsk. Det er jo ikke urimelig å kreve at en selger skal kunne +kommunisere med kundene, men som kjøper har jeg ikke snakket så mye +med =Oslo-selgerne at det ville vært et problem for meg om selgeren +ikke kunne snakke norsk. Jeg er dermed i tvil om hvorvidt +argumentasjonen holder når effekten er at de mest uglesette tiggerne i +Norge ekskluderes.
+ +Uansett tror jeg ikke markedet for gatemagasiner i Oslo er mettet. +Personlig kunne jeg godt tenkte meg å kjøpe flere, men gidder ikke +kjøpe den samme utgaven av =Oslo flere ganger. En konkurrent som Folk +er Folk kan dermed ende opp med å gjøre markedet større i stedet for å +spise av markedsandelene til =Oslo.
Inspired by the -interview series conducted by Raphael, I started a Norwegian -interview series with people involved in the Debian Edu / Skolelinux -community. This was so popular that I believe it is time to move to a -more international audience.
- -While Debian Edu and -Skolelinux originated in France and Norway, and have most users in -Europe, there are users all around the globe. One of those far away -from me is Nigel Barker, a long time Debian Edu system administrator -and contributor. It is thanks to him that Debian Edu is adjusted to -work out of the box in Japan. I got him to answer a few questions, -and am happy to share the response with you. :) - - -
Who are you, and how do you spend your days?
- -My name is Nigel Barker, and I am British. I am married to Yumiko, -and we have three lovely children, aged 15, 14 and 4(!) I am the IT -Coordinator at Hiroshima International School, Japan. I am also a -teacher, and in fact I spend most of my day teaching Mathematics, -Science, IT, and Chemistry. I was originally a Chemistry teacher, but -I have always had an interest in computers. Another teacher teaches -primary school IT, but apart from that I am the only computer person, -so that means I am the network manager, technician and webmaster, -also, and I help people with their computer problems. I teach python -to beginners in an after-school club. I am way too busy, so I really -appreciate the simplicity of Skolelinux.
- -How did you get in contact with the Skolelinux/Debian Edu -project?
- -In around 2004 or 5 I discovered the ltsp project, and set up a -server in the IT lab. I wanted some way to connect it to our central -samba server, which I was also quite poor at configuring. I discovered -Edubuntu when it came out, but it didn't really improve my setup. I -did various desperate searches for things like "school Linux server" -and ended up in a document called "Drift" something or other. Reading -there it became clear that Skolelinux was going to solve all my -problems in one go. I was very excited, but apprehensive, because my -previous attempts to install Debian had ended in failure (I used -Mandrake for everything - ltsp, samba, apache, mail, ns...). I -downloaded a beta version, had some problems, so subscribed to the -Debian Edu list for help. I have remained subscribed ever since, and -my school has run a Skolelinux network since Sarge.
- -What do you see as the advantages of Skolelinux/Debian -Edu?
- -For me the integrated setup. This is not just the server, or the -workstation, or the ltsp. Its all of them, and its all configured -ready to go. I read somewhere in the early documentation that it is -designed to be setup and managed by the Maths or Science teacher, who -doesn't necessarily know much about computers, in a small Norwegian -school. That describes me perfectly if you replace Norway with -Japan.
- -What do you see as the disadvantages of Skolelinux/Debian -Edu?
- -The desktop is fairly plain. If you compare it with Edubuntu, who -have fun themes for children, or with distributions such as Mint, who -make the desktop beautiful. They create a good impression on people -who don't need to understand how to use any of it, but who might be -important to the school. School administrators or directors, for -instance, or parents. Even kids. Debian itself usually has ugly -default theme settings. It was my dream a few years back that some -kind of integration would allow Edubuntu to do the desktop stuff and -Debian Edu the servers, but now I realise how impossible that is. A -second disadvantage is that if something goes wrong, or you need to -customise something, then suddenly the level of expertise required -multiplies. For example, backup wasn't working properly in Lenny. It -took me ages to learn how to set up my own server to do rsync backups. -I am afraid of anything to do with ldap, but perhaps Gosa will -help.
- -Which free software do you use daily?
- -Nowadays I only use Debian on my personal computers. I have one for -studio work (I play guitar and write songs), running AV Linux -(customised Debian) a netbook running Squeeze, and a bigger laptop -still running Skolelinux Lenny workstation. I have a Tjener in my -house, that's very useful for the family photos and music. At school -the students only use Skolelinux. (Some teachers and the office still -have windows). So that means we only use free software all day every -day. Open office, The GIMP, Firefox/Iceweasel, VLC and Audacity are -installed on every computer in school, irrespective of OS. We also -have Koha on Debian for the library, and Apache, Moodle, b2evolution -and Etomite on Debian for the www. The firewall is Untangle.
- -Which strategy do you believe is the right one to use to -get schools to use free software?
- -Current trends are in our favour. Open source is big in industry, -and ordinary people have heard of it. The spread of Android and the -popularity of Apple have helped to weaken the impression that you have -to have Microsoft on everything. People complain to me much less about -file formats and Word than they did 5 years ago. The Edu aspect is -also a selling point. This is all customised for schools. Where is the -Windows-edu, or the Mac-edu? But of course the main attraction is -budget.The trick is to convince people that the quality is not -compromised when you stop paying and use free software instead. That -is one reason why I say the desktop experience is a weakness. People -are not impressed when their USB drive doesn't work, or their browser -doesn't play flash, for example.
+ +Doffin er det offentlige Norges +portal for annonsering av anbudsutlysninger. Nettstedet er mye brukt, +men rådataene er ikke enkelt tilgjengelig for almenheten. For å bøte +på det har jeg som et NUUG-prosjekt +laget en Scraperwiki-skraper som +lager en +SQL-database +med nøkkelinformasjonen fra Doffin, slik at det er mulig å søke og +analysere Doffin-oppføringene. Det publiseres mellom 900-1500 anbud +hver måned via Doffin. Jeg har ingen konkrete planer for analyse, men +håper enklere tilgjengelighet gjør at flere griper sjansen. På sikt +håper jeg å bruke denne databasen som grunnlag for å lage en database +over anbudsdokumenter, som i dag ikke er tilgjengelig fra doffin, men +må bestilles fra hver enkelt utlyser.
+ +Jeg var litt usikker på om det var rettighetsproblemer knyttet til +skraping av informasjon fra Doffin, men ser i +vilkårene til +Doffin følgende:
+ ++ ++ +Opphavsrett mv
+ +Ved innleggig av kunngjøringer på Doffin aksepterer Oppdragsgiver +at opphavsrett og andre rettigheter til materialet overføres til +Fornyings- og administrasjonsdepartementet, eller den departementet +utnevner. Oppdragsgiver har imidlertid bruksrett til materialet, og +kan benytte det til de formål de måtte ønske.
+ +
Hvis informasjonen er vernet av opphavsrettsloven (hvilket jeg +tviler på, gitt lovens begrensninger om informasjon fra det +offentlige), så er det FAD som har de immaterielle rettighetene. FAD +er en del av staten, som opererer på vegne av folket, og enhver borger +skulle dermed ha rett til å videreformidle informasjonen. Ingen av +offentlighetslovens unntak kommer til anvendelse, i og med at +informasjonen allerede er publisert.
One of the Debian Edu developers, Wolfgang Schweer, just created a -screen cast documenting how to create a lot of new users in LDAP on -Debian Edu Squeeze. The video is embedded here in quarter size, and -also available from vimeo and -download as a -Ogg -Theora file. Check it out below.
- - + +During my work on +Debian Edu +based on Squeeze, I came across some issues that should be +addressed in the Wheezy release. I finally found time to wrap up my +notes and provide quick summary of what I found, with a bit +explanation.
+ +-
+
+
- We need to rewrite our package installation framework, as tasksel +changed from using tasksel tasks to using meta packages (aka packages +with dependencies like our education-* packages), and our installation +system depend on tasksel tasks in +/usr/share/tasksel/debian-edu-tasks.desc for package +installation. + +
- Enable Kerberos login for more services. Now with the Kerberos
+foundation in place, we should use it to get single sign on with more
+services, and avoiding unneeded password / login questions. We should
+at least try to enable it for these services:
+
-
+
+
- CUPS for admins to add/configure printers and users when using + quotas. +
- Nagios for admins checking the system status. +
- GOsa for admins updating LDAP and users changing their passwords. +
- LDAP for admins updating LDAP. +
- Squid for users when exam mode / filtering is active. +
- ssh for admins and users to save a password prompt. + +
+
+ - When we move GOsa to use Kerberos instead of LDAP bind to +authenticate users, we should try to block or at least limit access to +use LDAP bind for authentication, to ensure Kerberos is used when it +is intended, and nothing fall back to using the less safe LDAP bind + +
- Merge debian-edu-config and debian-edu-install. The split made +sense when d-e-install did a lot more, but these days it is just an +inconvenience when we update the debconf preseeding values. + +
- Fix partman-auto to allow us to abort the installation before +touching the disk if the disk is too small. This is +BTS report #653305 and the +d-i developers are fine with the patch and someone just need to apply +it and upload. After this is done we need to adjust +debian-edu-install to use this new hook. + +
- Adjust to new LTSP framework (boot time config instead of install +time config). LTSP changed its design, and our hooks to install +packages and update the configuration is most likely not going to work +in Wheezy. + +
- Consider switching to NBD instead of NFS for LTSP root, to allow +the Kernel to cache files in its normal file cache, possibly speeding +up KDE login on slow networks. + +
- Make it possible to create expired user passwords that need to +change on first login. This is useful when handing out password on +paper, to make sure only the user know the password. This require +fixes to the PAM handling of kdm and gdm. + +
- Make GUI for adding new machines automatically from sitesummary. +The current command line script is not very friendly to people most +familiar with GUIs. This should probably be integrated into GOsa to +have it available where the admin will be looking for it.. + +
- We should find way for Nagios to check that the DHCP service +actually is working (as in handling out IP addresses). None of the +Nagios checks I have found so far have been working for me. + +
- We should switch from libpam-nss-ldapd to sssd for all profiles +using LDAP, and not only on for roaming workstations, to have less +packages to configure and consistent setup across all profiles. + +
- We should configure Kerberos to update LDAP and Samba password +when changing password using the Kerberos protocol. The hook was +requested in BTS report +#588968 and is now available in Wheezy. We might need to write a +MIT Kerberos plugin in C to get this. + +
- We should clean up the set of applications installed by default.
+
-
+
+
- reduce the number of chemistry visualisers +
- consider dropping xpaint +
- and probably more? +
+
+ - Some hardware need external firmware to work properly. This is +mostly the case for WiFi network cards, but there are some other +examples too. For popular laptops to work out of the box, such +firmware need to be installed from non-free, and we should provide +some GUI to do this. Ubuntu already have this implemented, and we +could consider using their packages. At the moment we have some +command line script to do this (one for the running system, another +for the LTSP chroot). + + +
- In Squeeze, we provide KDE, Gnome and LXDE as desktop options. We +should extend the list to Xfce and Sugar, and preferably find a way to +install several and allow the admin or the user to select which one to +use. + +
- The golearn tool from the goplay package make it easy to check out +interesting educational packages. We should work on the package +tagging in Debian to ensure it represent all the useful educational +packages, and extend the tool to allow it to use packagekit to install +new applications with a simple mouse click. + +
- The Squeeze version got half a exam solution already in place, +with the introduction of iptable based network blocking, but for it to +be a complete exam solution the Squid proxy need to enable +filtering/blocking as well when the exam mode is enabled. We should +implement a way to easily enable this for the schools that want it, +instead of the "it is documented" method of today. + +
- A feature used in several schools is the ability for a teacher to +"take over" the desktop of individual or all computers in the room. +There are at least three implementations, +italc, +controlaula og +epoptes and we should pick one of +them and make it trivial to set it up in a school. The challenges is +how to distribute crypto keys and how to group computers in one room +and how to set up which machine/user can control the machines in a +given room. + +
- Tablets and surf boards are getting more and more popular, and we +should look into providing a good solution for integrating these into +the Debian Edu network. Not quite sure how. Perhaps we should +provide a installation profile with better touch screen support for +them, or add some sync services to allow them to exchange +configuration and data with the central server. This should be +investigated. + +
I guess we will discover more as we continue to work on the Wheezy +version.