- Fixing an hanging debian installer for Debian Edu + Handling non-free firmware in Debian Edu/Squeeze

- 3rd January 2012 + 27th January 2012

During christmas, I have been working getting the next version of -Debian Edu / Skolelinux ready -for release. The initial problem I looked at was particularly -interesting.

With some computer hardware, one need non-free firmware blobs. +This is the sad fact of todays computers. In the next version of +Debian Edu / Skolelinux based +on Squeeze, we provide several scripts and modifications to make +firmware blobs easier to handle. The common use case I run into is a +laptop with a wireless network card requiring non-free firmware to +work, but there are other use cases as well.

The installer would hang at the end when it was doing it -post-installation configuration, and whatevery I did to try to find -the cause and fix it always worked while I tested it, but never when I -integrated it into the installer and ran the installation from -scratch. I would try to restart processes, close file descriptors, -remove or create files, and the installer would always unblock and -wrap up its tasks.

First and foremost, Debian Edu provide ISO images for DVD and CD +with all firmware packages in the Debian sections main and non-free +included, to ensure debian-installer find and can install all of them +during installation. This take care firmware for network devices used +by the installer when installing from from local media. But for +example multimedia devices are not activated in the installer and are +not taken care of by this.

Eventually the cause was found. The kernel was simply running out -of entropy, causing the Kerberos setup to hang waiting for more. -Pressing keys was adding entropy to the kernel, and thus all my tries -to fix the problem worked not because what I was typing to fix it, but -because I was typing.

For non-network devices, we provide the script +/usr/share/debian-edu-config/tools/auto-addfirmware which +search through the dmesg output for drivers requesting extra +firmware. The firmware file name is looked up in the Contents-ARCH.gz +file available in the package repository, and the packages providing +the requested firmware file(s) is installed. I have proposed to do +something similar in debian-installer (BTS report +#655507), to allow PXE +installs of Debian to handle firmware installation better. Run the +script as root from the command line to fetch and install the needed +firmware packages.

The fix I implemented was to add a background process looking at -the level of entropy in the kernel (by checking -/proc/sys/kernel/random/entropy_avail), and if it was too small, the -installer will flush the kernel file buffers and do 'find /' to -generate some disk IO. Disk IO generate entropy in the kernel, and is -one of the few things that can be initated from within the system to -generate entropy.

Debian Edu provide PXE installation of Debian out of the box, and +because some machines need firmware to get their network cards +working, the installation initrd some times need extra firmware +included to be able to install at all. To fill the PXE installation +initrd with extra firmware, the +/usr/share/debian-edu-config/tools/pxe-addfirmware script is +provided. Again, just run it as root on the command line to fill the +PXE initrd with firmware packages.

The fix is in -beta1 -of the Debian Edu/Squeeze version, and we -welcome more testers and -developers. We plan to release beta2 this weekend.

Last, some LTSP clients might also need firmware to get their +network cards working. For this, +/usr/share/debian-edu-config/tools/ltsp-addfirmware is +provided to update the LTSP initrd with firmware blobs. It is used +the same way as the other firmware related tools.

+ +

At the moment, we do not run any of these during installation. We +do not know if this is acceptable for the local administrator to use +non-free software, and it is their choice.

+ +

We plan to release beta3 this weekend. You might want to give it a +try.

@@ -75,27 +92,56 @@ developers. We plan to release beta2 this weekend.

- Second beta version of Debian Edu / Skolelinux based on Squeeze + Skjermbilder fra nordsamisk installasjon av Skolelinux/Squeeze

- 7th January 2012 + 26th January 2012

I am happy to announce that today we managed to wrap up and publish -the second beta version of -Debian Edu / Skolelinux. If -you want to test a LDAP backed Kerberos server with out of the box PXE -configuration for running diskless machines and installing new -machines, check it out. If you need a software solution for your -school, check it out too. The full announcement is -available -on the project announcement list.

For morro skyld har jeg gjennomfÃ¸rt en nordsamisk installasjon for +neste utgave av Skolelinux +(Squeeze) og knipset skjermbilder av resultatet.

+ +

Som en kan se der er det noen oversettelser som mangler. Det hadde +vÃ¦rt hyggelig hvis alle tekstene som vises i Skolelinux-installasjonen +ble oversatt til nordsamisk, men for Ã¥ fÃ¥ det til mÃ¥ noen som forstÃ¥r +sprÃ¥ket melde seg til dyst. Det er mangel pÃ¥ nordsamiske oversettere +av fri programvare. Hvis noen starter raskt, sÃ¥ bÃ¸r en rekke Ã¥ +fullfÃ¸re Wheezy-utgaven fÃ¸r den gis ut. :)

+ +

Se oversetterstatistikk for +debian installer for detaljert status. Jeg har tipset +epostlisten for samiskoversettelser, +men det har vÃ¦rt veldig liten aktivitet der de siste Ã¥rene.

+ +

+ + + + + + + + + + + + + + + + + + + + +

- Tags: debian edu, english. + Tags: debian edu, norsk.

@@ -104,39 +150,64 @@ on the project announcement list.

- Changing the default Iceweasel start page in Debian Edu/Squeeze + Setting up a new school with Debian Edu/Squeeze

- 10th January 2012 + 25th January 2012

In the Squeeze version of -Debian Edu / Skolelinux soon -to be released, users of the system will get their default browser -start page set from LDAP, allowing the system administrator to point -all users to the school web page by updating one setting in LDAP. In -addition to setting the default start page when a machine boots, users -are shown the same page as a welcome page when they log in for the -first time.

The next version of Debian Edu +/ Skolelinux will include a new tool +sitesummary2ldapdhcp, which can be used to quickly set up all +the computers in a school without much manual labour. Here is a short +summary on how to use it to set up a new school.

The LDAP object dc=skole,dc=skolelinux,dc=no have an attribute -labeledURI with "http://www/ LDAP for Debian Edu/Skolelinux" as the -default content. By changing this value to another URL, all users get -to see the page behind this new URL.

First, install a combined Main Server and Thin Client Server as the +central server in the network. Next, PXE boot all the client machines +as thin clients and wait 5 minutes after the last client booted to +allow the clients to report their existence to the central server. When +this is done, log on to the central server and run +sitesummary2ldapdhcp -a in the konsole to use the +collected information to generate system objects in LDAP. The output +will look similar to this:

An easy way to update it is by using the ldapvi tool. It can be -called as "ldapvi -ZD '(cn=admin)'' to update LDAP with the -new setting.

+% sitesummary2ldapdhcp -a +info: Updating machine tjener.intern [10.0.2.2] id ether-00:01:02:03:04:05. +info: Create GOsa machine for auto-mac-00-01-02-03-04-06 [10.0.16.20] id ether-00:01:02:03:04:06. -

We have written the code to adjust the default start page and show -the welcome page, and I wonder if there is an easier way to do this -from within Iceweasel instead.

+Enter password if you want to activate these changes, and ^c to abort. + +Connecting to LDAP as cn=admin,ou=ldap-access,dc=skole,dc=skolelinux,dc=no +enter password: ******* +% +

+ +

After providing the LDAP administrative password (the same as the +root password set during installation), the LDAP database will be +populated with system objects for each PXE booted machine with +automatically generated names. The final step to set up the school is +then to log into GOsa, +the web based user, group and system administration system to change +system names, add systems to the correct host groups and finally +enable DHCP and DNS for the systems. All clients that should be used +as diskless workstations should be added to the workstation-hosts +group. After this is done, all computers can be booted again via PXE +and get their assigned names and group based configuration +automatically.

+ +

We plan to release beta3 with the updated version of this feature +enabled this weekend. You might want to give it a try.

+ +

Update 2012-01-28: When calling sitesummary2ldapdhcp to add new +hosts, one need to add the option -a. I forgot to mention this in my +original text, and have added it to the text now.

- Tags: debian edu, english, web. + Tags: debian edu, english, sitesummary.

@@ -277,64 +348,39 @@ hjemme.

- Setting up a new school with Debian Edu/Squeeze + Changing the default Iceweasel start page in Debian Edu/Squeeze

- 25th January 2012 + 10th January 2012

The next version of Debian Edu -/ Skolelinux will include a new tool -sitesummary2ldapdhcp, which can be used to quickly set up all -the computers in a school without much manual labour. Here is a short -summary on how to use it to set up a new school.

- -

First, install a combined Main Server and Thin Client Server as the -central server in the network. Next, PXE boot all the client machines -as thin clients and wait 5 minutes after the last client booted to -allow the clients to report their existence to the central server. When -this is done, log on to the central server and run -sitesummary2ldapdhcp -a in the konsole to use the -collected information to generate system objects in LDAP. The output -will look similar to this:

- -

-% sitesummary2ldapdhcp -a
-info: Updating machine tjener.intern [10.0.2.2] id ether-00:01:02:03:04:05.
-info: Create GOsa machine for auto-mac-00-01-02-03-04-06 [10.0.16.20] id ether-00:01:02:03:04:06.
-
-Enter password if you want to activate these changes, and ^c to abort.
-
-Connecting to LDAP as cn=admin,ou=ldap-access,dc=skole,dc=skolelinux,dc=no
-enter password: *******
-% 
-

In the Squeeze version of +Debian Edu / Skolelinux soon +to be released, users of the system will get their default browser +start page set from LDAP, allowing the system administrator to point +all users to the school web page by updating one setting in LDAP. In +addition to setting the default start page when a machine boots, users +are shown the same page as a welcome page when they log in for the +first time.

After providing the LDAP administrative password (the same as the -root password set during installation), the LDAP database will be -populated with system objects for each PXE booted machine with -automatically generated names. The final step to set up the school is -then to log into GOsa, -the web based user, group and system administration system to change -system names, add systems to the correct host groups and finally -enable DHCP and DNS for the systems. All clients that should be used -as diskless workstations should be added to the workstation-hosts -group. After this is done, all computers can be booted again via PXE -and get their assigned names and group based configuration -automatically.

The LDAP object dc=skole,dc=skolelinux,dc=no have an attribute +labeledURI with "http://www/ LDAP for Debian Edu/Skolelinux" as the +default content. By changing this value to another URL, all users get +to see the page behind this new URL.

We plan to release beta3 with the updated version of this feature -enabled this weekend. You might want to give it a try.

An easy way to update it is by using the ldapvi tool. It can be +called as "ldapvi -ZD '(cn=admin)'' to update LDAP with the +new setting.

Update 2012-01-28: When calling sitesummary2ldapdhcp to add new -hosts, one need to add the option -a. I forgot to mention this in my -original text, and have added it to the text now.

We have written the code to adjust the default start page and show +the welcome page, and I wonder if there is an easier way to do this +from within Iceweasel instead.

- Tags: debian edu, english, sitesummary. + Tags: debian edu, english, web.

@@ -343,56 +389,27 @@ original text, and have added it to the text now.

- Skjermbilder fra nordsamisk installasjon av Skolelinux/Squeeze + Second beta version of Debian Edu / Skolelinux based on Squeeze

- 26th January 2012 + 7th January 2012

For morro skyld har jeg gjennomfÃ¸rt en nordsamisk installasjon for -neste utgave av Skolelinux -(Squeeze) og knipset skjermbilder av resultatet.

- -

Som en kan se der er det noen oversettelser som mangler. Det hadde -vÃ¦rt hyggelig hvis alle tekstene som vises i Skolelinux-installasjonen -ble oversatt til nordsamisk, men for Ã¥ fÃ¥ det til mÃ¥ noen som forstÃ¥r -sprÃ¥ket melde seg til dyst. Det er mangel pÃ¥ nordsamiske oversettere -av fri programvare. Hvis noen starter raskt, sÃ¥ bÃ¸r en rekke Ã¥ -fullfÃ¸re Wheezy-utgaven fÃ¸r den gis ut. :)

- -

Se oversetterstatistikk for -debian installer for detaljert status. Jeg har tipset -epostlisten for samiskoversettelser, -men det har vÃ¦rt veldig liten aktivitet der de siste Ã¥rene.

- -

- - - - - - - - - - - - - - - - - - - - -

I am happy to announce that today we managed to wrap up and publish +the second beta version of +Debian Edu / Skolelinux. If +you want to test a LDAP backed Kerberos server with out of the box PXE +configuration for running diskless machines and installing new +machines, check it out. If you need a software solution for your +school, check it out too. The full announcement is +available +on the project announcement list.

- Tags: debian edu, norsk. + Tags: debian edu, english.

@@ -401,61 +418,44 @@ men det har vÃ¦rt veldig liten aktivitet der de siste Ã¥rene.

- Handling non-free firmware in Debian Edu/Squeeze + Fixing an hanging debian installer for Debian Edu

- 27th January 2012 + 3rd January 2012

With some computer hardware, one need non-free firmware blobs. -This is the sad fact of todays computers. In the next version of -Debian Edu / Skolelinux based -on Squeeze, we provide several scripts and modifications to make -firmware blobs easier to handle. The common use case I run into is a -laptop with a wireless network card requiring non-free firmware to -work, but there are other use cases as well.

- -

First and foremost, Debian Edu provide ISO images for DVD and CD -with all firmware packages in the Debian sections main and non-free -included, to ensure debian-installer find and can install all of them -during installation. This take care firmware for network devices used -by the installer when installing from from local media. But for -example multimedia devices are not activated in the installer and are -not taken care of by this.

- -

For non-network devices, we provide the script -/usr/share/debian-edu-config/tools/auto-addfirmware which -search through the dmesg output for drivers requesting extra -firmware. The firmware file name is looked up in the Contents-ARCH.gz -file available in the package repository, and the packages providing -the requested firmware file(s) is installed. I have proposed to do -something similar in debian-installer (BTS report -#655507), to allow PXE -installs of Debian to handle firmware installation better. Run the -script as root from the command line to fetch and install the needed -firmware packages.

During christmas, I have been working getting the next version of +Debian Edu / Skolelinux ready +for release. The initial problem I looked at was particularly +interesting.

Debian Edu provide PXE installation of Debian out of the box, and -because some machines need firmware to get their network cards -working, the installation initrd some times need extra firmware -included to be able to install at all. To fill the PXE installation -initrd with extra firmware, the -/usr/share/debian-edu-config/tools/pxe-addfirmware script is -provided. Again, just run it as root on the command line to fill the -PXE initrd with firmware packages.

The installer would hang at the end when it was doing it +post-installation configuration, and whatevery I did to try to find +the cause and fix it always worked while I tested it, but never when I +integrated it into the installer and ran the installation from +scratch. I would try to restart processes, close file descriptors, +remove or create files, and the installer would always unblock and +wrap up its tasks.

Last, some LTSP clients might also need firmware to get their -network cards working. For this, -/usr/share/debian-edu-config/tools/ltsp-addfirmware is -provided to update the LTSP initrd with firmware blobs. It is used -the same way as the other firmware related tools.

Eventually the cause was found. The kernel was simply running out +of entropy, causing the Kerberos setup to hang waiting for more. +Pressing keys was adding entropy to the kernel, and thus all my tries +to fix the problem worked not because what I was typing to fix it, but +because I was typing.

At the moment, we do not run any of these during installation. We -do not know if this is acceptable for the local administrator to use -non-free software, and it is their choice.

The fix I implemented was to add a background process looking at +the level of entropy in the kernel (by checking +/proc/sys/kernel/random/entropy_avail), and if it was too small, the +installer will flush the kernel file buffers and do 'find /' to +generate some disk IO. Disk IO generate entropy in the kernel, and is +one of the few things that can be initated from within the system to +generate entropy.

We plan to release beta3 this weekend. You might want to give it a -try.

The fix is in +beta1 +of the Debian Edu/Squeeze version, and we +welcome more testers and +developers. We plan to release beta2 this weekend.