[debian-edu-commits] [Git][debian-edu/debian-edu-doc][master] Update Debian Edu Bullseye manual from the wiki.

Holger Levsen gitlab at salsa.debian.org
Fri Jul 10 13:35:43 BST 2020



Holger Levsen pushed to branch master at Debian Edu / debian-edu-doc


Commits:
b2e09990 by Holger Levsen at 2020-07-10T14:35:07+02:00
Update Debian Edu Bullseye manual from the wiki.

Signed-off-by: Holger Levsen <holger at layer-acht.org>

- - - - -


17 changed files:

- debian/changelog
- documentation/debian-edu-bullseye/debian-edu-bullseye-manual.da.po
- documentation/debian-edu-bullseye/debian-edu-bullseye-manual.de.po
- documentation/debian-edu-bullseye/debian-edu-bullseye-manual.es.po
- documentation/debian-edu-bullseye/debian-edu-bullseye-manual.fr.po
- documentation/debian-edu-bullseye/debian-edu-bullseye-manual.it.po
- documentation/debian-edu-bullseye/debian-edu-bullseye-manual.ja.po
- documentation/debian-edu-bullseye/debian-edu-bullseye-manual.nb.po
- documentation/debian-edu-bullseye/debian-edu-bullseye-manual.nl.po
- documentation/debian-edu-bullseye/debian-edu-bullseye-manual.pl.po
- documentation/debian-edu-bullseye/debian-edu-bullseye-manual.pot
- documentation/debian-edu-bullseye/debian-edu-bullseye-manual.ro.po
- documentation/debian-edu-bullseye/debian-edu-bullseye-manual.sv.po
- documentation/debian-edu-bullseye/debian-edu-bullseye-manual.xml
- documentation/debian-edu-bullseye/debian-edu-bullseye-manual.zh.po
- documentation/debian-edu-bullseye/debian-edu-bullseye-manual.zh_Hant.po
- documentation/debian-edu-bullseye/source/AllInOne-debian-edu-bullseye-manual.xml


Changes:

=====================================
debian/changelog
=====================================
@@ -1,5 +1,7 @@
 debian-edu-doc (2.11.10) UNRELEASED; urgency=medium
 
+  * Update Debian Edu Bullseye manual from the wiki.
+
   [ Translation updates ]
   * Bullseye manual:
     - German: Wolfgang Schweer


=====================================
documentation/debian-edu-bullseye/debian-edu-bullseye-manual.da.po
=====================================
@@ -10,7 +10,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: debian-edu-bullseye-manual\n"
-"POT-Creation-Date: 2020-06-22 22:34+0000\n"
+"POT-Creation-Date: 2020-07-10 12:33+0000\n"
 "PO-Revision-Date: 2019-07-07 20:30+0100\n"
 "Last-Translator: Joe Hansen <joedalton2 at yahoo.dk>\n"
 "Language-Team: Danish <debian-l10n-danish at lists.debian.org>\n"
@@ -100,16 +100,28 @@ msgstr ""
 "grundlæggende miljødetaljer."
 
 #. type: Content of: <article><section><para>
+#, fuzzy
+#| msgid ""
+#| "After installation of a main server all services needed for a school "
+#| "network are set up and the system is ready to be used. Only users and "
+#| "machines need to be added via GOsa², a comfortable Web-UI, or any other "
+#| "LDAP editor. A netbooting environment using PXE has also been prepared, "
+#| "so after initial installation of the main server from CD, Blu-ray disc or "
+#| "USB flash drive all other machines can be installed via the network, this "
+#| "includes \"roaming workstations\" (ones that can be taken away from the "
+#| "school network, usually laptops or netbooks) as well as PXE booting for "
+#| "diskless machines like traditional thin clients."
 msgid ""
 "After installation of a main server all services needed for a school network "
 "are set up and the system is ready to be used. Only users and machines need "
 "to be added via GOsa², a comfortable Web-UI, or any other LDAP editor. A "
-"netbooting environment using PXE has also been prepared, so after initial "
-"installation of the main server from CD, Blu-ray disc or USB flash drive all "
-"other machines can be installed via the network, this includes \"roaming "
-"workstations\" (ones that can be taken away from the school network, usually "
-"laptops or netbooks) as well as PXE booting for diskless machines like "
-"traditional thin clients."
+"netbooting environment using PXE/<ulink url=\"https://ipxe.org/\">iPXE</"
+"ulink> has also been prepared, so after initial installation of the main "
+"server from CD, Blu-ray disc or USB flash drive all other machines can be "
+"installed via the network, this includes \"roaming workstations\" (ones that "
+"can be taken away from the school network, usually laptops or netbooks). "
+"Also, machines can be booted via PXE/iPXE as diskless workstations or thin "
+"clients."
 msgstr ""
 "Efter installation af en hovedserver er alle tjenester krævet for et sat op "
 "og systemet er klar til brug. Kun brugere og maskiner skal tilføjes via "


=====================================
documentation/debian-edu-bullseye/debian-edu-bullseye-manual.de.po
=====================================
@@ -16,7 +16,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: debian-edu-buster-manual.de\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2020-06-22 22:34+0000\n"
+"POT-Creation-Date: 2020-07-10 12:33+0000\n"
 "PO-Revision-Date: 2020-06-23 16:28+0200\n"
 "Last-Translator: Wolfgang Schweer <wschweer at arcor.de>\n"
 "Language-Team: German <debian-l10n-german at lists.debian.org>\n"
@@ -45,12 +45,10 @@ msgid "Manual for Debian Edu 11 Codename Bullseye"
 msgstr "Handbuch für Debian Edu 11, Codename Bullseye"
 
 #. type: Attribute 'fileref' of: <article><section><para><inlinemediaobject><imageobject><imagedata>
-#| msgid "./images/idea.png"
 msgid "./images/i.png"
 msgstr "./images/i.png"
 
 #. type: Content of: <article><section><para><inlinemediaobject><textobject><phrase>
-#| msgid "Debian Edu login"
 msgid "Debian Edu Installer Logo"
 msgstr "Debian Edu Installer Logo"
 
@@ -104,16 +102,28 @@ msgstr ""
 "Umgebung."
 
 #. type: Content of: <article><section><para>
+#, fuzzy
+#| msgid ""
+#| "After installation of a main server all services needed for a school "
+#| "network are set up and the system is ready to be used. Only users and "
+#| "machines need to be added via GOsa², a comfortable Web-UI, or any other "
+#| "LDAP editor. A netbooting environment using PXE has also been prepared, "
+#| "so after initial installation of the main server from CD, Blu-ray disc or "
+#| "USB flash drive all other machines can be installed via the network, this "
+#| "includes \"roaming workstations\" (ones that can be taken away from the "
+#| "school network, usually laptops or netbooks) as well as PXE booting for "
+#| "diskless machines like traditional thin clients."
 msgid ""
 "After installation of a main server all services needed for a school network "
 "are set up and the system is ready to be used. Only users and machines need "
 "to be added via GOsa², a comfortable Web-UI, or any other LDAP editor. A "
-"netbooting environment using PXE has also been prepared, so after initial "
-"installation of the main server from CD, Blu-ray disc or USB flash drive all "
-"other machines can be installed via the network, this includes \"roaming "
-"workstations\" (ones that can be taken away from the school network, usually "
-"laptops or netbooks) as well as PXE booting for diskless machines like "
-"traditional thin clients."
+"netbooting environment using PXE/<ulink url=\"https://ipxe.org/\">iPXE</"
+"ulink> has also been prepared, so after initial installation of the main "
+"server from CD, Blu-ray disc or USB flash drive all other machines can be "
+"installed via the network, this includes \"roaming workstations\" (ones that "
+"can be taken away from the school network, usually laptops or netbooks). "
+"Also, machines can be booted via PXE/iPXE as diskless workstations or thin "
+"clients."
 msgstr ""
 "Nach der Installation eines Hauptservers stehen alle für ein Schulnetzwerk "
 "notwendigen Dienste zur Verfügung (siehe Details dazu im nächsten Kapitel zu "
@@ -1944,7 +1954,6 @@ msgstr ""
 "Benutzung des Installationsprogrammes; siehe Screenshot weiter unten."
 
 #. type: Attribute 'fileref' of: <article><section><section><section><para><inlinemediaobject><imageobject><imagedata>
-#| msgid "{{attachment:01a-Installer_64bit_advanced_options.png}}"
 msgid "./images/01a-Installer_64bit_advanced_options.png"
 msgstr "./images/01a-Installer_64bit_advanced_options.png"
 
@@ -2011,7 +2020,6 @@ msgid "<emphasis>Help screen</emphasis>"
 msgstr "<emphasis>Help screen</emphasis>"
 
 #. type: Attribute 'fileref' of: <article><section><section><section><para><inlinemediaobject><imageobject><imagedata>
-#| msgid "./images/01-Installer_64bit_boot_menu.png"
 msgid "./images/01c-Installer_help.png"
 msgstr "./images/01c-Installer_help.png"
 
@@ -2045,7 +2053,6 @@ msgstr ""
 "emphasis>."
 
 #. type: Attribute 'fileref' of: <article><section><section><section><para><inlinemediaobject><imageobject><imagedata>
-#| msgid "./images/01-Installer_64bit_boot_menu.png"
 msgid "./images/01b-Installer_64bit_command_line.png"
 msgstr "./images/01b-Installer_64bit_command_line.png"
 
@@ -2517,7 +2524,6 @@ msgstr ""
 "emphasis> als alleinigem Profil aus:"
 
 #. type: Attribute 'fileref' of: <article><section><section><section><para><inlinemediaobject><imageobject><imagedata>
-#| msgid "{{attachment:30-Main-Server-GRUB_Boot_menu-PXE.png}}"
 msgid "./images/30-Main-Server-GRUB_Boot_menu-PXE.png"
 msgstr "./images/30-Main-Server-GRUB_Boot_menu-PXE.png"
 
@@ -2723,7 +2729,6 @@ msgstr ""
 "Bildschirm nach dem Anklicken der Session auf der rechten Seite.)"
 
 #. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
-#| msgid "./images/01-Installer_64bit_boot_menu.png"
 msgid "01-Installer_64bit_boot_menu.png"
 msgstr "01-Installer_64bit_boot_menu.png"
 
@@ -2732,7 +2737,6 @@ msgid "./images/02-select_a_language.png"
 msgstr "./images/02-select_a_language.png"
 
 #. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
-#| msgid "./images/02-select_a_language.png"
 msgid "02-select_a_language.png"
 msgstr "02-select_a_language.png"
 
@@ -2741,7 +2745,6 @@ msgid "./images/03-select_your_location.png"
 msgstr "./images/03-select_your_location.png"
 
 #. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
-#| msgid "./images/03-select_your_location.png"
 msgid "03-select_your_location.png"
 msgstr "03-select_your_location.png"
 
@@ -2750,107 +2753,86 @@ msgid "./images/04-Configure_the_keyboard.png"
 msgstr "./images/04-Configure_the_keyboard.png"
 
 #. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
-#| msgid "./images/04-Configure_the_keyboard.png"
 msgid "04-Configure_the_keyboard.png"
 msgstr "04-Configure_the_keyboard.png"
 
 #. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
-#| msgid "./images/07-Detect_network_hardware.png"
 msgid "./images/05-Detect_network_hardware.png"
 msgstr "./images/05-Detect_network_hardware.png"
 
 #. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
-#| msgid "./images/07-Detect_network_hardware.png"
 msgid "05-Detect_network_hardware.png"
 msgstr "05-Detect_network_hardware.png"
 
 #. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
-#| msgid "./images/08-Choose_Debian_Edu_profile.png"
 msgid "./images/06-Choose_Debian_Edu_profile.png"
 msgstr "./images/06-Choose_Debian_Edu_profile.png"
 
 #. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
-#| msgid "./images/08-Choose_Debian_Edu_profile.png"
 msgid "06-Choose_Debian_Edu_profile.png"
 msgstr "06-Choose_Debian_Edu_profile.png"
 
 #. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
-#| msgid "./images/09-Really_use_the_automatic_partitioning_tool.png"
 msgid "./images/07-Really_use_the_automatic_partitioning_tool_0.png"
 msgstr "./images/07-Really_use_the_automatic_partitioning_tool_0.png"
 
 #. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
-#| msgid "./images/09-Really_use_the_automatic_partitioning_tool.png"
 msgid "07-Really_use_the_automatic_partitioning_tool_0.png"
 msgstr "07-Really_use_the_automatic_partitioning_tool_0.png"
 
 #. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
-#| msgid "./images/09-Really_use_the_automatic_partitioning_tool.png"
 msgid "./images/08-Really_use_the_automatic_partitioning_tool_1.png"
 msgstr "./images/08-Really_use_the_automatic_partitioning_tool_1.png"
 
 #. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
-#| msgid "./images/09-Really_use_the_automatic_partitioning_tool.png"
 msgid "08-Really_use_the_automatic_partitioning_tool_1.png"
 msgstr "08-Really_use_the_automatic_partitioning_tool_1.png"
 
 #. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
-#| msgid "./images/11-Participate_in_the_package_usage_survey.png"
 msgid "./images/09-Participate_in_the_package_usage_survey_0.png"
 msgstr "./images/09-Participate_in_the_package_usage_survey_0.png"
 
 #. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
-#| msgid "./images/11-Participate_in_the_package_usage_survey.png"
 msgid "09-Participate_in_the_package_usage_survey_0.png"
 msgstr "09-Participate_in_the_package_usage_survey_0.png"
 
 #. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
-#| msgid "./images/11-Participate_in_the_package_usage_survey.png"
 msgid "./images/10-Participate_in_the_package_usage_survey_1.png"
 msgstr "./images/10-Participate_in_the_package_usage_survey_1.png"
 
 #. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
-#| msgid "./images/11-Participate_in_the_package_usage_survey.png"
 msgid "10-Participate_in_the_package_usage_survey_1.png"
 msgstr "10-Participate_in_the_package_usage_survey_1.png"
 
 #. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
-#| msgid "./images/12-Set_up_users_and_passwords.png"
 msgid "./images/11-Set_up_users_and_passwords_root.png"
 msgstr "./images/11-Set_up_users_and_passwords_root.png"
 
 #. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
-#| msgid "./images/12-Set_up_users_and_passwords.png"
 msgid "11-Set_up_users_and_passwords_root.png"
 msgstr "11-Set_up_users_and_passwords_root.png"
 
 #. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
-#| msgid "./images/12-Set_up_users_and_passwords.png"
 msgid "./images/12-Set_up_users_and_passwords_user_full_name.png"
 msgstr "./images/12-Set_up_users_and_passwords_user_full_name.png"
 
 #. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
-#| msgid "./images/12-Set_up_users_and_passwords.png"
 msgid "12-Set_up_users_and_passwords_user_full_name.png"
 msgstr "12-Set_up_users_and_passwords_user_full_name.png"
 
 #. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
-#| msgid "./images/12-Set_up_users_and_passwords.png"
 msgid "./images/13-Set_up_users_and_passwords_username.png"
 msgstr "./images/13-Set_up_users_and_passwords_username.png"
 
 #. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
-#| msgid "./images/12-Set_up_users_and_passwords.png"
 msgid "13-Set_up_users_and_passwords_username.png"
 msgstr "13-Set_up_users_and_passwords_username.png"
 
 #. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
-#| msgid "./images/12-Set_up_users_and_passwords.png"
 msgid "./images/14-Set_up_users_and_passwords_user_password.png"
 msgstr "./images/14-Set_up_users_and_passwords_user_password.png"
 
 #. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
-#| msgid "./images/12-Set_up_users_and_passwords.png"
 msgid "14-Set_up_users_and_passwords_user_password.png"
 msgstr "14-Set_up_users_and_passwords_user_password.png"
 
@@ -2859,12 +2841,10 @@ msgid "./images/21-Finish_the_Installation-Installation_complete.png"
 msgstr "./images/21-Finish_the_Installation-Installation_complete.png"
 
 #. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
-#| msgid "./images/21-Finish_the_Installation-Installation_complete.png"
 msgid "21-Finish_the_Installation-Installation_complete.png"
 msgstr "21-Finish_the_Installation-Installation_complete.png"
 
 #. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
-#| msgid "./images/29-Diskless-WS-LDM_Login.png"
 msgid "./images/22-Tjener-LightDM-Login.png"
 msgstr "./images/22-Tjener-LightDM-Login.png"
 
@@ -2873,7 +2853,6 @@ msgid "22-Tjener-LightDM-Login.png"
 msgstr "LightDM-Login auf den Hauptserver"
 
 #. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
-#| msgid "{{attachment:26-Tjener-Xfce_Desktop_Browser.png}}"
 msgid "./images/26-Tjener-Xfce_Desktop_Browser.png"
 msgstr "./images/26-Tjener-Xfce_Desktop_Browser.png"
 
@@ -2882,7 +2861,6 @@ msgid "Xfce and Browser"
 msgstr "Xfce mit Browser"
 
 #. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
-#| msgid "{{attachment:27-Tjener-Xfce_Desktop.png}}"
 msgid "./images/27-Tjener-Xfce_Desktop.png"
 msgstr "./images/27-Tjener-Xfce_Desktop.png"
 
@@ -2891,7 +2869,6 @@ msgid "Xfce Desktop"
 msgstr "Xfce-Desktop"
 
 #. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
-#| msgid "./images/filterbox.png"
 msgid "./images/24-Thin-Client-Welcome.png"
 msgstr "./images/24-Thin-Client-Welcome.png"
 
@@ -2900,12 +2877,10 @@ msgid "Thin-Client-Welcome"
 msgstr "Thin-Client-Welcome"
 
 #. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
-#| msgid "./images/29-Diskless-WS-LDM_Login.png"
 msgid "./images/25-Thin-Client-Login.png"
 msgstr "./images/25-Thin-Client-Login.png"
 
 #. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
-#| msgid "Thin clients"
 msgid "Thin-Client-Login"
 msgstr "Thin-Client-Login"
 
@@ -8696,8 +8671,8 @@ msgstr ""
 "translations finden Sie Informationen, wie Sie eine neue PO-Datei für Ihre "
 "Sprache anlegen und wie Übersetzungen aktualisiert werden."
 
-#. <remark>
-#. status ignore</remark>
+#.  <remark>
+#. status ignore</remark> 
 #. type: Content of: <article><section><section><section><para>
 msgid ""
 "Please keep in mind that this manual is still under development, so don't "


=====================================
documentation/debian-edu-bullseye/debian-edu-bullseye-manual.es.po
=====================================
@@ -11,7 +11,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: debian-edu-doc\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2020-06-22 22:34+0000\n"
+"POT-Creation-Date: 2020-07-10 12:33+0000\n"
 "PO-Revision-Date: 2015-03-30 22:30+0000\n"
 "Last-Translator: Rafael Ernesto Rivas <tatotat at gmail.com>\n"
 "Language-Team: Debian Spanish <debian-l10n-spanish at lists.debian.org>\n"
@@ -127,12 +127,13 @@ msgid ""
 "After installation of a main server all services needed for a school network "
 "are set up and the system is ready to be used. Only users and machines need "
 "to be added via GOsa², a comfortable Web-UI, or any other LDAP editor. A "
-"netbooting environment using PXE has also been prepared, so after initial "
-"installation of the main server from CD, Blu-ray disc or USB flash drive all "
-"other machines can be installed via the network, this includes \"roaming "
-"workstations\" (ones that can be taken away from the school network, usually "
-"laptops or netbooks) as well as PXE booting for diskless machines like "
-"traditional thin clients."
+"netbooting environment using PXE/<ulink url=\"https://ipxe.org/\">iPXE</"
+"ulink> has also been prepared, so after initial installation of the main "
+"server from CD, Blu-ray disc or USB flash drive all other machines can be "
+"installed via the network, this includes \"roaming workstations\" (ones that "
+"can be taken away from the school network, usually laptops or netbooks). "
+"Also, machines can be booted via PXE/iPXE as diskless workstations or thin "
+"clients."
 msgstr ""
 "Inmediatamente después de la instalación, el servidor de la escuela "
 "ejecutará todos los servicios necesarios para que la red escolar sea "


=====================================
documentation/debian-edu-bullseye/debian-edu-bullseye-manual.fr.po
=====================================
@@ -10,7 +10,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: debian-edu-doc\n"
-"POT-Creation-Date: 2020-06-22 22:34+0000\n"
+"POT-Creation-Date: 2020-07-10 12:33+0000\n"
 "PO-Revision-Date: 2019-11-10 12:03+0100\n"
 "Last-Translator: Jean-Pierre Giraud <jean-pierregiraud at neuf.fr>\n"
 "Language-Team: French <debian-l10n-french at lists.debian.org>\n"
@@ -103,16 +103,28 @@ msgstr ""
 "fournissent des détails sur les environnements de base."
 
 #. type: Content of: <article><section><para>
+#, fuzzy
+#| msgid ""
+#| "After installation of a main server all services needed for a school "
+#| "network are set up and the system is ready to be used. Only users and "
+#| "machines need to be added via GOsa², a comfortable Web-UI, or any other "
+#| "LDAP editor. A netbooting environment using PXE has also been prepared, "
+#| "so after initial installation of the main server from CD, Blu-ray disc or "
+#| "USB flash drive all other machines can be installed via the network, this "
+#| "includes \"roaming workstations\" (ones that can be taken away from the "
+#| "school network, usually laptops or netbooks) as well as PXE booting for "
+#| "diskless machines like traditional thin clients."
 msgid ""
 "After installation of a main server all services needed for a school network "
 "are set up and the system is ready to be used. Only users and machines need "
 "to be added via GOsa², a comfortable Web-UI, or any other LDAP editor. A "
-"netbooting environment using PXE has also been prepared, so after initial "
-"installation of the main server from CD, Blu-ray disc or USB flash drive all "
-"other machines can be installed via the network, this includes \"roaming "
-"workstations\" (ones that can be taken away from the school network, usually "
-"laptops or netbooks) as well as PXE booting for diskless machines like "
-"traditional thin clients."
+"netbooting environment using PXE/<ulink url=\"https://ipxe.org/\">iPXE</"
+"ulink> has also been prepared, so after initial installation of the main "
+"server from CD, Blu-ray disc or USB flash drive all other machines can be "
+"installed via the network, this includes \"roaming workstations\" (ones that "
+"can be taken away from the school network, usually laptops or netbooks). "
+"Also, machines can be booted via PXE/iPXE as diskless workstations or thin "
+"clients."
 msgstr ""
 "Immédiatement après l'installation, un serveur faisant fonctionner tous les "
 "services pour le réseau de l'école est configuré, et le système est prêt à "


=====================================
documentation/debian-edu-bullseye/debian-edu-bullseye-manual.it.po
=====================================
@@ -6,7 +6,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: debian-edu-wheezy-manual\n"
-"POT-Creation-Date: 2020-06-22 22:34+0000\n"
+"POT-Creation-Date: 2020-07-10 12:33+0000\n"
 "PO-Revision-Date: 2019-11-24 18:52+0100\n"
 "Last-Translator: Claudio Carboncini <claudio.carboncini at gmail.com>\n"
 "Language-Team: Italian <debian-l10n-italian at lists.debian.org>\n"
@@ -99,16 +99,28 @@ msgstr ""
 "dettagli di base sull'ambiente."
 
 #. type: Content of: <article><section><para>
+#, fuzzy
+#| msgid ""
+#| "After installation of a main server all services needed for a school "
+#| "network are set up and the system is ready to be used. Only users and "
+#| "machines need to be added via GOsa², a comfortable Web-UI, or any other "
+#| "LDAP editor. A netbooting environment using PXE has also been prepared, "
+#| "so after initial installation of the main server from CD, Blu-ray disc or "
+#| "USB flash drive all other machines can be installed via the network, this "
+#| "includes \"roaming workstations\" (ones that can be taken away from the "
+#| "school network, usually laptops or netbooks) as well as PXE booting for "
+#| "diskless machines like traditional thin clients."
 msgid ""
 "After installation of a main server all services needed for a school network "
 "are set up and the system is ready to be used. Only users and machines need "
 "to be added via GOsa², a comfortable Web-UI, or any other LDAP editor. A "
-"netbooting environment using PXE has also been prepared, so after initial "
-"installation of the main server from CD, Blu-ray disc or USB flash drive all "
-"other machines can be installed via the network, this includes \"roaming "
-"workstations\" (ones that can be taken away from the school network, usually "
-"laptops or netbooks) as well as PXE booting for diskless machines like "
-"traditional thin clients."
+"netbooting environment using PXE/<ulink url=\"https://ipxe.org/\">iPXE</"
+"ulink> has also been prepared, so after initial installation of the main "
+"server from CD, Blu-ray disc or USB flash drive all other machines can be "
+"installed via the network, this includes \"roaming workstations\" (ones that "
+"can be taken away from the school network, usually laptops or netbooks). "
+"Also, machines can be booted via PXE/iPXE as diskless workstations or thin "
+"clients."
 msgstr ""
 "Dopo l'installazione di un server principale sono configurati tutti i "
 "servizi necessari per la rete scolastica e il sistema è pronto per essere "


=====================================
documentation/debian-edu-bullseye/debian-edu-bullseye-manual.ja.po
=====================================
@@ -9,7 +9,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: debian-edu-stretch\n"
-"POT-Creation-Date: 2020-06-22 22:34+0000\n"
+"POT-Creation-Date: 2020-07-10 12:33+0000\n"
 "PO-Revision-Date: 2019-06-08 10:11+0000\n"
 "Last-Translator: hoxp18 <hoxp18 at noramail.jp>\n"
 "Language-Team: Japanese <https://hosted.weblate.org/projects/debian-edu-"
@@ -103,16 +103,28 @@ msgstr ""
 "要件</link>の章にあります。"
 
 #. type: Content of: <article><section><para>
+#, fuzzy
+#| msgid ""
+#| "After installation of a main server all services needed for a school "
+#| "network are set up and the system is ready to be used. Only users and "
+#| "machines need to be added via GOsa², a comfortable Web-UI, or any other "
+#| "LDAP editor. A netbooting environment using PXE has also been prepared, "
+#| "so after initial installation of the main server from CD, Blu-ray disc or "
+#| "USB flash drive all other machines can be installed via the network, this "
+#| "includes \"roaming workstations\" (ones that can be taken away from the "
+#| "school network, usually laptops or netbooks) as well as PXE booting for "
+#| "diskless machines like traditional thin clients."
 msgid ""
 "After installation of a main server all services needed for a school network "
 "are set up and the system is ready to be used. Only users and machines need "
 "to be added via GOsa², a comfortable Web-UI, or any other LDAP editor. A "
-"netbooting environment using PXE has also been prepared, so after initial "
-"installation of the main server from CD, Blu-ray disc or USB flash drive all "
-"other machines can be installed via the network, this includes \"roaming "
-"workstations\" (ones that can be taken away from the school network, usually "
-"laptops or netbooks) as well as PXE booting for diskless machines like "
-"traditional thin clients."
+"netbooting environment using PXE/<ulink url=\"https://ipxe.org/\">iPXE</"
+"ulink> has also been prepared, so after initial installation of the main "
+"server from CD, Blu-ray disc or USB flash drive all other machines can be "
+"installed via the network, this includes \"roaming workstations\" (ones that "
+"can be taken away from the school network, usually laptops or netbooks). "
+"Also, machines can be booted via PXE/iPXE as diskless workstations or thin "
+"clients."
 msgstr ""
 "学校サーバーのインストールが完了すれば、学校ネットワークに必要となるサービス"
 "は全て準備され、システムは利用可能になっています。\n"


=====================================
documentation/debian-edu-bullseye/debian-edu-bullseye-manual.nb.po
=====================================
@@ -21,7 +21,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: debian-edu-doc\n"
-"POT-Creation-Date: 2020-06-22 22:34+0000\n"
+"POT-Creation-Date: 2020-07-10 12:33+0000\n"
 "PO-Revision-Date: 2020-05-13 03:41+0000\n"
 "Last-Translator: Allan Nordhøy <epost at anotheragency.no>\n"
 "Language-Team: Norwegian Bokmål <https://hosted.weblate.org/projects/debian-"
@@ -108,16 +108,28 @@ msgstr ""
 "grunnlegende miljøvariabler."
 
 #. type: Content of: <article><section><para>
+#, fuzzy
+#| msgid ""
+#| "After installation of a main server all services needed for a school "
+#| "network are set up and the system is ready to be used. Only users and "
+#| "machines need to be added via GOsa², a comfortable Web-UI, or any other "
+#| "LDAP editor. A netbooting environment using PXE has also been prepared, "
+#| "so after initial installation of the main server from CD, Blu-ray disc or "
+#| "USB flash drive all other machines can be installed via the network, this "
+#| "includes \"roaming workstations\" (ones that can be taken away from the "
+#| "school network, usually laptops or netbooks) as well as PXE booting for "
+#| "diskless machines like traditional thin clients."
 msgid ""
 "After installation of a main server all services needed for a school network "
 "are set up and the system is ready to be used. Only users and machines need "
 "to be added via GOsa², a comfortable Web-UI, or any other LDAP editor. A "
-"netbooting environment using PXE has also been prepared, so after initial "
-"installation of the main server from CD, Blu-ray disc or USB flash drive all "
-"other machines can be installed via the network, this includes \"roaming "
-"workstations\" (ones that can be taken away from the school network, usually "
-"laptops or netbooks) as well as PXE booting for diskless machines like "
-"traditional thin clients."
+"netbooting environment using PXE/<ulink url=\"https://ipxe.org/\">iPXE</"
+"ulink> has also been prepared, so after initial installation of the main "
+"server from CD, Blu-ray disc or USB flash drive all other machines can be "
+"installed via the network, this includes \"roaming workstations\" (ones that "
+"can be taken away from the school network, usually laptops or netbooks). "
+"Also, machines can be booted via PXE/iPXE as diskless workstations or thin "
+"clients."
 msgstr ""
 "Etter installasjonen av en skoletjener er alle tjenester som trengs for et "
 "skolenettverk satt opp og systemet er klart til bruk. Bare brukere og "


=====================================
documentation/debian-edu-bullseye/debian-edu-bullseye-manual.nl.po
=====================================
@@ -6,7 +6,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: debian-edu-bullseye-manual\n"
 "Report-Msgid-Bugs-To: debian-edu-doc at packages.debian.org\n"
-"POT-Creation-Date: 2020-06-22 22:34+0000\n"
+"POT-Creation-Date: 2020-07-10 12:33+0000\n"
 "PO-Revision-Date: 2020-05-31 15:23+0200\n"
 "Last-Translator: Frans Spiesschaert <Frans.Spiesschaert at yucom.be>\n"
 "Language-Team: Debian Dutch l10n Team <debian-l10n-dutch at lists.debian.org>\n"
@@ -93,16 +93,28 @@ msgstr ""
 "\">architectuur</link> bevatten basisinformatie over de omgeving."
 
 #. type: Content of: <article><section><para>
+#, fuzzy
+#| msgid ""
+#| "After installation of a main server all services needed for a school "
+#| "network are set up and the system is ready to be used. Only users and "
+#| "machines need to be added via GOsa², a comfortable Web-UI, or any other "
+#| "LDAP editor. A netbooting environment using PXE has also been prepared, "
+#| "so after initial installation of the main server from CD, Blu-ray disc or "
+#| "USB flash drive all other machines can be installed via the network, this "
+#| "includes \"roaming workstations\" (ones that can be taken away from the "
+#| "school network, usually laptops or netbooks) as well as PXE booting for "
+#| "diskless machines like traditional thin clients."
 msgid ""
 "After installation of a main server all services needed for a school network "
 "are set up and the system is ready to be used. Only users and machines need "
 "to be added via GOsa², a comfortable Web-UI, or any other LDAP editor. A "
-"netbooting environment using PXE has also been prepared, so after initial "
-"installation of the main server from CD, Blu-ray disc or USB flash drive all "
-"other machines can be installed via the network, this includes \"roaming "
-"workstations\" (ones that can be taken away from the school network, usually "
-"laptops or netbooks) as well as PXE booting for diskless machines like "
-"traditional thin clients."
+"netbooting environment using PXE/<ulink url=\"https://ipxe.org/\">iPXE</"
+"ulink> has also been prepared, so after initial installation of the main "
+"server from CD, Blu-ray disc or USB flash drive all other machines can be "
+"installed via the network, this includes \"roaming workstations\" (ones that "
+"can be taken away from the school network, usually laptops or netbooks). "
+"Also, machines can be booted via PXE/iPXE as diskless workstations or thin "
+"clients."
 msgstr ""
 "Onmiddellijk na de installatie van een schoolserver worden alle diensten die "
 "in een schoolnetwerk nodig zijn, ingesteld en is het systeem klaar voor "


=====================================
documentation/debian-edu-bullseye/debian-edu-bullseye-manual.pl.po
=====================================
@@ -1,7 +1,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: Polish (Debian Edu Documentation)\n"
-"POT-Creation-Date: 2020-06-22 22:34+0000\n"
+"POT-Creation-Date: 2020-07-10 12:33+0000\n"
 "PO-Revision-Date: 2020-04-03 14:30+0000\n"
 "Last-Translator: Michal Biesiada <blade-14 at o2.pl>\n"
 "Language-Team: Polish <https://hosted.weblate.org/projects/debian-edu-"
@@ -99,16 +99,28 @@ msgstr ""
 
 # type: Content of: <article><section><para>
 #. type: Content of: <article><section><para>
+#, fuzzy
+#| msgid ""
+#| "After installation of a main server all services needed for a school "
+#| "network are set up and the system is ready to be used. Only users and "
+#| "machines need to be added via GOsa², a comfortable Web-UI, or any other "
+#| "LDAP editor. A netbooting environment using PXE has also been prepared, "
+#| "so after initial installation of the main server from CD, Blu-ray disc or "
+#| "USB flash drive all other machines can be installed via the network, this "
+#| "includes \"roaming workstations\" (ones that can be taken away from the "
+#| "school network, usually laptops or netbooks) as well as PXE booting for "
+#| "diskless machines like traditional thin clients."
 msgid ""
 "After installation of a main server all services needed for a school network "
 "are set up and the system is ready to be used. Only users and machines need "
 "to be added via GOsa², a comfortable Web-UI, or any other LDAP editor. A "
-"netbooting environment using PXE has also been prepared, so after initial "
-"installation of the main server from CD, Blu-ray disc or USB flash drive all "
-"other machines can be installed via the network, this includes \"roaming "
-"workstations\" (ones that can be taken away from the school network, usually "
-"laptops or netbooks) as well as PXE booting for diskless machines like "
-"traditional thin clients."
+"netbooting environment using PXE/<ulink url=\"https://ipxe.org/\">iPXE</"
+"ulink> has also been prepared, so after initial installation of the main "
+"server from CD, Blu-ray disc or USB flash drive all other machines can be "
+"installed via the network, this includes \"roaming workstations\" (ones that "
+"can be taken away from the school network, usually laptops or netbooks). "
+"Also, machines can be booted via PXE/iPXE as diskless workstations or thin "
+"clients."
 msgstr ""
 "Po instalacji głównego serwera wszystkie usługi potrzebne do szkolnej sieci "
 "komputerowej są skonfigurowane, a system jest gotowy do użycia. Muszą być "


=====================================
documentation/debian-edu-bullseye/debian-edu-bullseye-manual.pot
=====================================
@@ -7,7 +7,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
-"POT-Creation-Date: 2020-06-22 22:34+0000\n"
+"POT-Creation-Date: 2020-07-10 12:33+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL at ADDRESS>\n"
 "Language-Team: LANGUAGE <LL at li.org>\n"
@@ -80,12 +80,13 @@ msgid ""
 "After installation of a main server all services needed for a school network "
 "are set up and the system is ready to be used. Only users and machines need "
 "to be added via GOsa², a comfortable Web-UI, or any other LDAP editor. A "
-"netbooting environment using PXE has also been prepared, so after initial "
-"installation of the main server from CD, Blu-ray disc or USB flash drive all "
-"other machines can be installed via the network, this includes \"roaming "
-"workstations\" (ones that can be taken away from the school network, usually "
-"laptops or netbooks) as well as PXE booting for diskless machines like "
-"traditional thin clients."
+"netbooting environment using PXE/<ulink url=\"https://ipxe.org/\">iPXE</"
+"ulink> has also been prepared, so after initial installation of the main "
+"server from CD, Blu-ray disc or USB flash drive all other machines can be "
+"installed via the network, this includes \"roaming workstations\" (ones that "
+"can be taken away from the school network, usually laptops or netbooks). "
+"Also, machines can be booted via PXE/iPXE as diskless workstations or thin "
+"clients."
 msgstr ""
 
 #. type: Content of: <article><section><para>


=====================================
documentation/debian-edu-bullseye/debian-edu-bullseye-manual.ro.po
=====================================
@@ -6,7 +6,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
-"POT-Creation-Date: 2020-06-22 22:34+0000\n"
+"POT-Creation-Date: 2020-07-10 12:33+0000\n"
 "PO-Revision-Date: 2019-12-11 17:02+0000\n"
 "Last-Translator: Catalin ENE <catalin.ene73 at gmail.com>\n"
 "Language-Team: Romanian <https://hosted.weblate.org/projects/debian-edu-"
@@ -105,16 +105,28 @@ msgstr ""
 "mediul de baza."
 
 #. type: Content of: <article><section><para>
+#, fuzzy
+#| msgid ""
+#| "After installation of a main server all services needed for a school "
+#| "network are set up and the system is ready to be used. Only users and "
+#| "machines need to be added via GOsa², a comfortable Web-UI, or any other "
+#| "LDAP editor. A netbooting environment using PXE has also been prepared, "
+#| "so after initial installation of the main server from CD, Blu-ray disc or "
+#| "USB flash drive all other machines can be installed via the network, this "
+#| "includes \"roaming workstations\" (ones that can be taken away from the "
+#| "school network, usually laptops or netbooks) as well as PXE booting for "
+#| "diskless machines like traditional thin clients."
 msgid ""
 "After installation of a main server all services needed for a school network "
 "are set up and the system is ready to be used. Only users and machines need "
 "to be added via GOsa², a comfortable Web-UI, or any other LDAP editor. A "
-"netbooting environment using PXE has also been prepared, so after initial "
-"installation of the main server from CD, Blu-ray disc or USB flash drive all "
-"other machines can be installed via the network, this includes \"roaming "
-"workstations\" (ones that can be taken away from the school network, usually "
-"laptops or netbooks) as well as PXE booting for diskless machines like "
-"traditional thin clients."
+"netbooting environment using PXE/<ulink url=\"https://ipxe.org/\">iPXE</"
+"ulink> has also been prepared, so after initial installation of the main "
+"server from CD, Blu-ray disc or USB flash drive all other machines can be "
+"installed via the network, this includes \"roaming workstations\" (ones that "
+"can be taken away from the school network, usually laptops or netbooks). "
+"Also, machines can be booted via PXE/iPXE as diskless workstations or thin "
+"clients."
 msgstr ""
 "Procedura de instalare furnizeaza un server complet configurat si care "
 "include toate serviciile necesare unei retele scolare. Cu ajutorul unei "


=====================================
documentation/debian-edu-bullseye/debian-edu-bullseye-manual.sv.po
=====================================
@@ -6,7 +6,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
-"POT-Creation-Date: 2020-06-22 22:34+0000\n"
+"POT-Creation-Date: 2020-07-10 12:33+0000\n"
 "PO-Revision-Date: 2020-05-27 11:41+0000\n"
 "Last-Translator: Luna Jernberg <droidbittin at gmail.com>\n"
 "Language-Team: Swedish <https://hosted.weblate.org/projects/debian-edu-"
@@ -84,12 +84,13 @@ msgid ""
 "After installation of a main server all services needed for a school network "
 "are set up and the system is ready to be used. Only users and machines need "
 "to be added via GOsa², a comfortable Web-UI, or any other LDAP editor. A "
-"netbooting environment using PXE has also been prepared, so after initial "
-"installation of the main server from CD, Blu-ray disc or USB flash drive all "
-"other machines can be installed via the network, this includes \"roaming "
-"workstations\" (ones that can be taken away from the school network, usually "
-"laptops or netbooks) as well as PXE booting for diskless machines like "
-"traditional thin clients."
+"netbooting environment using PXE/<ulink url=\"https://ipxe.org/\">iPXE</"
+"ulink> has also been prepared, so after initial installation of the main "
+"server from CD, Blu-ray disc or USB flash drive all other machines can be "
+"installed via the network, this includes \"roaming workstations\" (ones that "
+"can be taken away from the school network, usually laptops or netbooks). "
+"Also, machines can be booted via PXE/iPXE as diskless workstations or thin "
+"clients."
 msgstr ""
 
 #. type: Content of: <article><section><para>


=====================================
documentation/debian-edu-bullseye/debian-edu-bullseye-manual.xml
=====================================
@@ -19,7 +19,7 @@
 </para>
 <para>The chapters about <link linkend="Requirements">hardware and network requirements</link> and about the <link linkend="Architecture">architecture</link> contain basic environment details. 
 </para>
-<para>After installation of a main server all services needed for a school network are set up and the system is ready to be used. Only users and machines need to be added via GOsa², a comfortable Web-UI, or any other LDAP editor. A netbooting environment using PXE has also been prepared, so after initial installation of the main server from CD, Blu-ray disc or USB flash drive all other machines can be installed via the network, this includes "roaming workstations" (ones that can be taken away from the school network, usually laptops or netbooks) as well as PXE booting for diskless machines like traditional thin clients. 
+<para>After installation of a main server all services needed for a school network are set up and the system is ready to be used. Only users and machines need to be added via GOsa², a comfortable Web-UI, or any other LDAP editor. A netbooting environment using PXE/<ulink url="https://ipxe.org/">iPXE</ulink> has also been prepared, so after initial installation of the main server from CD, Blu-ray disc or USB flash drive all other machines can be installed via the network, this includes "roaming workstations" (ones that can be taken away from the school network, usually laptops or netbooks). Also, machines can be booted via PXE/iPXE as diskless workstations or thin clients. 
 </para>
 <para>Several educational applications like GeoGebra, Kalzium, KGeography, GNU Solfege and Scratch are included in the default desktop setup, which can be extended easily and almost endlessly via the Debian universe. 
 </para>


=====================================
documentation/debian-edu-bullseye/debian-edu-bullseye-manual.zh.po
=====================================
@@ -6,7 +6,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: debian-edu-doc\n"
-"POT-Creation-Date: 2020-06-22 22:34+0000\n"
+"POT-Creation-Date: 2020-07-10 12:33+0000\n"
 "PO-Revision-Date: 2020-05-30 00:41+0000\n"
 "Last-Translator: wdggg <wdggg7 at gmail.com>\n"
 "Language-Team: Chinese (Simplified) <https://hosted.weblate.org/projects/"
@@ -92,16 +92,28 @@ msgstr ""
 "\"Architecture\">架构</link>的相关章节包含了基本环境的细节。"
 
 #. type: Content of: <article><section><para>
+#, fuzzy
+#| msgid ""
+#| "After installation of a main server all services needed for a school "
+#| "network are set up and the system is ready to be used. Only users and "
+#| "machines need to be added via GOsa², a comfortable Web-UI, or any other "
+#| "LDAP editor. A netbooting environment using PXE has also been prepared, "
+#| "so after initial installation of the main server from CD, Blu-ray disc or "
+#| "USB flash drive all other machines can be installed via the network, this "
+#| "includes \"roaming workstations\" (ones that can be taken away from the "
+#| "school network, usually laptops or netbooks) as well as PXE booting for "
+#| "diskless machines like traditional thin clients."
 msgid ""
 "After installation of a main server all services needed for a school network "
 "are set up and the system is ready to be used. Only users and machines need "
 "to be added via GOsa², a comfortable Web-UI, or any other LDAP editor. A "
-"netbooting environment using PXE has also been prepared, so after initial "
-"installation of the main server from CD, Blu-ray disc or USB flash drive all "
-"other machines can be installed via the network, this includes \"roaming "
-"workstations\" (ones that can be taken away from the school network, usually "
-"laptops or netbooks) as well as PXE booting for diskless machines like "
-"traditional thin clients."
+"netbooting environment using PXE/<ulink url=\"https://ipxe.org/\">iPXE</"
+"ulink> has also been prepared, so after initial installation of the main "
+"server from CD, Blu-ray disc or USB flash drive all other machines can be "
+"installed via the network, this includes \"roaming workstations\" (ones that "
+"can be taken away from the school network, usually laptops or netbooks). "
+"Also, machines can be booted via PXE/iPXE as diskless workstations or thin "
+"clients."
 msgstr ""
 "主服务器安装之后学校网络所需的所有服务就已建立而系统也准备好使用。仅是用户和"
 "机器需要通过一个友好的 Web 用户界面,GOsa²,或者任何其他的 LDAP 编辑器来添"


=====================================
documentation/debian-edu-bullseye/debian-edu-bullseye-manual.zh_Hant.po
=====================================
@@ -6,7 +6,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
-"POT-Creation-Date: 2020-06-22 22:34+0000\n"
+"POT-Creation-Date: 2020-07-10 12:33+0000\n"
 "PO-Revision-Date: 2019-01-28 08:11+0000\n"
 "Last-Translator: Louies <louies0623 at gmail.com>\n"
 "Language-Team: Chinese (Traditional) <https://hosted.weblate.org/projects/"
@@ -103,12 +103,13 @@ msgid ""
 "After installation of a main server all services needed for a school network "
 "are set up and the system is ready to be used. Only users and machines need "
 "to be added via GOsa², a comfortable Web-UI, or any other LDAP editor. A "
-"netbooting environment using PXE has also been prepared, so after initial "
-"installation of the main server from CD, Blu-ray disc or USB flash drive all "
-"other machines can be installed via the network, this includes \"roaming "
-"workstations\" (ones that can be taken away from the school network, usually "
-"laptops or netbooks) as well as PXE booting for diskless machines like "
-"traditional thin clients."
+"netbooting environment using PXE/<ulink url=\"https://ipxe.org/\">iPXE</"
+"ulink> has also been prepared, so after initial installation of the main "
+"server from CD, Blu-ray disc or USB flash drive all other machines can be "
+"installed via the network, this includes \"roaming workstations\" (ones that "
+"can be taken away from the school network, usually laptops or netbooks). "
+"Also, machines can be booted via PXE/iPXE as diskless workstations or thin "
+"clients."
 msgstr ""
 
 #. type: Content of: <article><section><para>


=====================================
documentation/debian-edu-bullseye/source/AllInOne-debian-edu-bullseye-manual.xml
=====================================
@@ -1,4 +1,4 @@
-<?xml version="1.0" encoding="utf-8"?><!DOCTYPE article  PUBLIC '-//OASIS//DTD DocBook XML V4.4//EN'  'http://www.docbook.org/xml/4.4/docbookx.dtd'><article><articleinfo><title>DebianEdu/Documentation/Bullseye/AllInOne</title><revhistory><revision><revnumber>1</revnumber><date>2020-02-13 14:08:14</date><authorinitials>WolfgangSchweer</authorinitials><revremark>WIP: starting to work on Debian Edu Bullseye documentation as a copy with s/buster/bullseye/ and some other adjustments</revremark></revision></revhistory></articleinfo><section><title>Manual for Debian Edu 11 Codename Bullseye</title><para><inlinemediaobject><imageobject><imagedata fileref="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AboutDebianEdu?action=AttachFile&do=get&target=i.png" width="800"/></imageobject><textobject><phrase>Debian Edu Installer Logo</phrase></textobject></inlinemediaobject> </para><para>This is the manual for the Debian Edu 11 Bullseye release. </para><para>The version at <ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye"/> is a wiki and updated frequently. </para><para><ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AllInOne/DebianEdu/Documentation/Bullseye/Translations#">Translations</ulink> are part of the <code>debian-edu-doc</code> package which can be installed on a webserver, and is available <ulink url="https://jenkins.debian.net/userContent/debian-edu-doc/">online</ulink>. </para></section><section><title>About Debian Edu and Skolelinux</title><para>Debian Edu aka Skolelinux is a Linux distribution based on Debian providing an out-of-the box environment of a completely configured school network. </para><para>The chapters about <ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AllInOne/DebianEdu/Documentation/Bullseye/Requirements#">hardware and network requirements</ulink> and about the <ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AllInOne/DebianEdu/Documentation/Bullseye/Architecture#">architecture</ulink> contain basic environment details. </para><para>After installation of a main server all services needed for a school network are set up and the system is ready to be used. Only users and machines need to be added via GOsa², a comfortable Web-UI, or any other LDAP editor. A netbooting environment using PXE has also been prepared, so after initial installation of the main server from CD, Blu-ray disc or USB flash drive all other machines can be installed via the network, this includes "roaming workstations" (ones that can be taken away from the school network, usually laptops or netbooks) as well as PXE booting for diskless machines like traditional thin clients. </para><para>Several educational applications like GeoGebra, Kalzium, KGeography, GNU Solfege and Scratch are included in the default desktop setup, which can be extended easily and almost endlessly via the Debian universe. </para><section><title>Some history and why two names</title><para><ulink url="https://blends.debian.org/edu">Debian Edu / Skolelinux</ulink> is a Linux distribution created by the Debian Edu project. As a <ulink url="https://blends.debian.org">Debian Pure Blend</ulink> distribution it is an official <ulink url="https://www.debian.org">Debian</ulink> subproject. </para><para>What this means for your school is that Skolelinux is a version of Debian providing an out-of-the box environment of a completely configured school-network. </para><para>The Skolelinux project in Norway was founded on July 2nd 2001 and about the same time Raphaël Hertzog started Debian-Edu in France. Since 2003 both projects are united, but both names stayed. "Skole" and (Debian-)"Education" are just two well understood terms in these regions. </para><para>Today the system is in use in several countries around the world. </para><para><ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AllInOne/CategoryPermalink#">CategoryPermalink</ulink> </para></section></section><para><anchor id="Architecture"/> </para><section><title>Architecture</title><para><anchor id="Architecture--Network"/> </para><section><title>Network</title><para>This section of the document describes the network architecture and services provided by a Skolelinux installation. </para><para><inlinemediaobject><imageobject><imagedata fileref="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/Architecture?action=AttachFile&do=get&target=Debian_Edu_Network_Bullseye.png" width="1024"/></imageobject><textobject><phrase>The Debian Edu network topology</phrase></textobject></inlinemediaobject> </para><para>The figure is a sketch of the assumed network topology. The default setup of a Skolelinux network assumes that there is one (and only one) main server, while allowing the inclusion of both normal workstations and LTSP servers (with associated thin clients and/or diskless workstations). The number of workstations can be as large or small as you want (starting from none to a lot). The same goes for the LTSP servers, each of which is on a separate network so that the traffic between the clients and the LTSP server doesn't affect the rest of the network services. LTSP is explained in detail in <ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AllInOne/DebianEdu/Documentation/Bullseye/HowTo/NetworkClients#">the related HowTo</ulink> chapter. </para><para>The reason that there can only be one main server in each school network is that the main server provides DHCP, and there can be only one machine doing so in each network. It is possible to move services from the main server to other machines by setting up the service on another machine, and subsequently updating the DNS configuration, pointing the DNS alias for that service to the right computer. </para><para>In order to simplify the standard setup of Skolelinux, the Internet connection runs over a separate router, also called gateway. See the <ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AllInOne/DebianEdu/Documentation/Bullseye/Requirements#Internet_router">Internet router</ulink> chapter for details how to set up such a gateway if it is not possible to configure an existing one as needed.  </para><section><title>The default network setup</title><para>DHCP on the main server serves the 10.0.0.0/8 network, providing a PXE boot menu where you can choose whether to install a new server/workstation, boot a thin client or a diskless workstation, run memtest, or boot from the local hard disk. </para><para>This is designed to be modified; for details, see <ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AllInOne/DebianEdu/Documentation/Bullseye/HowTo/NetworkClients#Configuring_the_PXE_menu">the related HowTo</ulink> chapter. </para><para>DHCP on the LTSP servers only serves a dedicated network on the second interface (192.168.0.0/24 and 192.168.1.0/24 are preconfigured options) and should seldom need to be changed. </para><para>The configuration of all subnets is stored in LDAP. </para></section><section><title>Main server</title><para>A Skolelinux network needs one main server (also called "tjener" which is Norwegian and means "server") which per default has the IP address 10.0.2.2 and is installed by selecting the Main Server profile. It's possible (but not required) to also select and install the LTSP Server and Workstation profiles in addition to the Main Server profile. </para></section><section><title>Services running on the main server</title><para>With the exception of the control of the thin clients, all services are initially set up on one central computer (the main server). For performance reasons, the LTSP server(s) should be separate (though it is possible to install both the Main Server and LTSP Server profiles on the same machine). All services are allocated a dedicated DNS-name and are offered exclusively over IPv4. The allocated DNS name makes it easy to move individual services from the main server to a different machine, by simply stopping the service on the main server, and changing the DNS configuration to point to the new location of the service (which should be set up on that machine first, of course). </para><para>To ensure security all connections where passwords are transmitted over the network are encrypted, so no passwords are sent over the network as plain text. </para><para>Below is a table of the services that are set up by default in a Skolelinux network and the DNS name of each service. If possible all configuration files will refer to the service by name (without the domain name) thus making it easy for schools to change either their domain (if they have an own DNS domain) or the IP addresses they use. </para><informaltable><tgroup cols="3"><colspec colname="col_0"/><colspec colname="col_1"/><colspec colname="col_2"/><tbody><row rowsep="1"><entry align="center" colsep="1" nameend="col_2" namest="col_0" rowsep="1"><para><emphasis role="strong">Table of services</emphasis></para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> <emphasis role="strong">Service description</emphasis> </para></entry><entry colsep="1" rowsep="1"><para> <emphasis role="strong">Common name</emphasis> </para></entry><entry colsep="1" rowsep="1"><para> <emphasis role="strong">DNS service name</emphasis> </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Centralised Logging </para></entry><entry colsep="1" rowsep="1"><para> rsyslog  </para></entry><entry colsep="1" rowsep="1"><para> syslog </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Domain Name Service </para></entry><entry colsep="1" rowsep="1"><para> DNS (BIND) </para></entry><entry colsep="1" rowsep="1"><para> domain </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Automatic Network Configuration of Machines </para></entry><entry colsep="1" rowsep="1"><para> DHCP </para></entry><entry colsep="1" rowsep="1"><para> bootps </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Clock Synchronisation </para></entry><entry colsep="1" rowsep="1"><para> NTP </para></entry><entry colsep="1" rowsep="1"><para> ntp </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Home Directories via Network File System </para></entry><entry colsep="1" rowsep="1"><para> SMB / NFS </para></entry><entry colsep="1" rowsep="1"><para> homes </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Electronic Post Office </para></entry><entry colsep="1" rowsep="1"><para> IMAP (Dovecot)  </para></entry><entry colsep="1" rowsep="1"><para> postoffice </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Directory Service </para></entry><entry colsep="1" rowsep="1"><para> OpenLDAP </para></entry><entry colsep="1" rowsep="1"><para> ldap </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> User Administration </para></entry><entry colsep="1" rowsep="1"><para> GOsa² </para></entry><entry colsep="1" rowsep="1"><para> ---  </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Web Server </para></entry><entry colsep="1" rowsep="1"><para> Apache/PHP </para></entry><entry colsep="1" rowsep="1"><para> www </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Central Backup </para></entry><entry colsep="1" rowsep="1"><para> sl-backup, slbackup-php </para></entry><entry colsep="1" rowsep="1"><para> backup </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Web Cache </para></entry><entry colsep="1" rowsep="1"><para> Proxy (Squid) </para></entry><entry colsep="1" rowsep="1"><para> webcache </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Printing </para></entry><entry colsep="1" rowsep="1"><para> CUPS </para></entry><entry colsep="1" rowsep="1"><para> ipp </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Secure Remote Login </para></entry><entry colsep="1" rowsep="1"><para> OpenSSH </para></entry><entry colsep="1" rowsep="1"><para> ssh </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Automatic Configuration </para></entry><entry colsep="1" rowsep="1"><para> CFEngine </para></entry><entry colsep="1" rowsep="1"><para> cfengine </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> LTSP Server/s </para></entry><entry colsep="1" rowsep="1"><para> LTSP </para></entry><entry colsep="1" rowsep="1"><para> ltsp </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Network Block Device Server </para></entry><entry colsep="1" rowsep="1"><para> NBD </para></entry><entry colsep="1" rowsep="1"><para> --- </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Machine and Service Surveillance with Error Reporting, plus Status and History on the Web. Error Reporting by email </para></entry><entry colsep="1" rowsep="1"><para>Munin, Icinga and Sitesummary </para></entry><entry colsep="1" rowsep="1"><para> sitesummary </para></entry></row></tbody></tgroup></informaltable><para>Personal files for each user are stored in their home directories, which are made available by the server. Home directories are accessible from all machines, giving users access to the same files regardless of which machine they are using. The server is operating system agnostic, offering access via NFS for Unix clients, SMB for Windows and Macintosh clients. </para><para>By default email is set up for local delivery (i.e. within the school) only, though email delivery to the wider Internet may be set up if the school has a permanent Internet connection. Clients are set up to deliver mail to the server (using 'smarthost'), and users can <ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AllInOne/DebianEdu/Documentation/Bullseye/HowTo/Users#Using_email">access their personal mail</ulink> through IMAP. </para><para>All services are accessible using the same username and password, thanks to the central user database for authentication and authorisation. </para><para>To increase performance on frequently accessed sites a web proxy that caches files locally (Squid) is used. In conjunction with blocking web-traffic in the router this also enables control of Internet access on individual machines. </para><para>Network configuration on the clients is done automatically using DHCP. All types of clients can be connected to the private 10.0.0.0/8 subnet and will get according IP addresses; LTSP clients should be connected to the corresponding LTSP server via the separate subnet 192.168.0.0/24 (this is to ensure that the network traffic of the LTSP clients doesn't interfere with the rest of the network services). </para><para>Centralised logging is set up so that all machines send their syslog messages to the server. The syslog service is set up so that it only accepts incoming messages from the local network. </para><para>By default the DNS server is set up with a domain for internal use only (*.intern), until a real ("external") DNS domain can be set up. The DNS server is set up as caching DNS server so that all machines on the network can use it as the main DNS Server. </para><para>Pupils and teachers have the ability to publish websites. The web server provides mechanisms for authenticating users, and for limiting access to individual pages and subdirectories to certain users and groups. Users will have the ability to create dynamic web pages, as the web server will be programmable on the server side. </para><para>Information on users and machines can be changed in one central location, and is made accessible to all computers on the network automatically. To achieve this a centralised directory server is set up. The directory will have information on users, user groups, machines, and groups of machines. To avoid user confusion there won't be any difference between file groups, mailing lists, and network groups. This implies that groups of machines which are to form network groups will use the same namespace as user groups and mailing lists. </para><para>Administration of services and users will mainly be via the web, and follow established standards, functioning well in the web browsers which are part of Skolelinux. The delegation of certain tasks to individual users or user groups will be made possible by the administration systems. </para><para>In order to avoid certain problems with NFS, and to make it simpler to debug problems, the different machines need synchronised clocks. To achieve this the Skolelinux server is set up as a local Network Time Protocol (NTP) server, and all workstations and clients are set up to synchronise with the server. The server itself should synchronise its clock via NTP against machines on the Internet, thus ensuring the whole network has the correct time. </para><para>Printers are connected where convenient, either directly onto the main network, or connected to a server, workstation or LTSP server. Access to printers can be controlled for individual users according to the groups they belong to; this will be achieved by using quota and access control for printers. </para></section><section><title>LTSP server(s)</title><para>A Skolelinux network can have many LTSP servers, which are installed by selecting the LTSP Server profile. </para><para>The LTSP servers are set up to receive syslog from thin clients and workstations, and forward these messages to the central syslog recipient.  </para><para>Please note: </para><itemizedlist><listitem><para>LTSP diskless workstations are now using the programs installed on the server. </para></listitem><listitem><para>The client root filesystem is provided using NFS. After each modification to the LTSP server the related image has to be re-generated; run <code>ltsp image /</code> on the LTSP server. </para></listitem></itemizedlist></section><section><title>Thin clients</title><para>A thin client setup enables ordinary PCs to function as (X-)terminals. This means that the machine boots directly from the server using PXE without using the local client hard drive. The thin client setup now uses X2Go, because LTSP has dropped support. </para><para>Thin clients are a good way to still make use of very old (mostly 32-bit) machines as they effectively run all programs on the LTSP server. This works as follows: the service uses DHCP and TFTP to connect to the network and boot from the network. Next, the file system is mounted from the LTSP server using NFS, and finally the X2Go client is started. </para></section><section><title>Diskless workstations</title><para>A diskless workstation runs all software on the PC without a locally installed operating system. This means that client machines boot via PXE without running software installed on a local hard drive. </para><para>Diskless workstations are an excellent way of using powerful hardware with the same low maintenance cost as with thin clients. Software is administered and maintained on the server with no need for local installed software on the clients. Home directories and system settings are stored on the server too.  </para></section><section><title>Networked clients</title><para>The term "networked clients" is used in this manual to refer to both thin clients and diskless workstations, as well as computers running Mac OS or Windows. </para></section></section><section><title>Administration</title><para>All the Linux machines that are installed with the Skolelinux installer will be administrable from a central computer, most likely the server. It will be possible to log in to all machines via SSH, and thereby have full access to the machines. As root one needs to run <code>kinit</code> first to get a Kerberos TGT. </para><para>All user information is kept in an LDAP directory. Updates of user accounts are made against this database, which is used by the clients for user authentication. </para><section><title>Installation</title><para>Currently there are two kinds of installation media images: netinst and BD. Both images can also be booted from USB sticks. </para><para>The aim is to be able to install a server from any type of medium once, and install all other clients over the network by booting from the network.  </para><para>Only the netinstall image needs access to the Internet during installation. </para><para>The installation should not ask any questions, with the exception of desired language (e.g. Norwegian Bokmål, Nynorsk, Sami) and machine profile (main server, workstation, LTSP server, ...). All other configuration will be set up automatically with reasonable values, to be changed from a central location by the system administrator subsequent to the installation. </para><para><anchor id="Architecture--File_system_access_configuration"/> </para></section><section><title>File system access configuration</title><para>Each Skolelinux user account is assigned a section of the file system on the file server. This section (home directory) contains the user's configuration files, documents, email and web pages. Some of the files should be set to have read access for other users on the system, some should be readable by everyone on the Internet, and some should not be accessible for reading by anyone but the user. </para><para>To ensure that all disks that are used for user directories or shared directories can be uniquely named across all the computers in the installation, they can be mounted as <code>/skole/host/directory/</code>. Initially, one directory is created on the file server, <code>/skole/tjener/home0/</code>, in which all the user accounts are created. More directories may then be created when needed to accommodate  particular user groups or particular patterns of usage. </para><para>To enable shared access to files under the normal UNIX permissions system, users need to be in supplementary shared groups (such as "students") as well as the personal primary group that they're in by default. If users have an appropriate umask to make newly created items group-accessible (002 or 007), and if the directories they're working in are setgid to ensure the files inherit the correct group-ownership, the result is controlled file sharing between the members of a group. </para><para>The initial access settings for newly created files are a matter of policy. The Debian default umask is 022 (which would not allow group-access as described above), but Debian Edu uses a default of 002 - meaning that files are created with read access for everybody, which can later be removed by explicit user action. This can alternatively be changed (by editing <code>/etc/pam.d/common-session</code>) to a umask of 007 - meaning read access is initially blocked, necessitating user action to make them accessible.  The first approach encourages knowledge sharing, and makes the system more transparent, whereas the second method decreases the risk of unwanted spreading of sensitive information. The problem with the first solution is that it is not apparent to the users that the material they create will be accessible to all other users. They can only detect this by inspecting other users' directories and seeing that their files are readable. The problem with the second solution is that few people are likely to make their files accessible, even if they do not contain sensitive information and the content would be helpful to inquisitive users who want to learn how others have solved particular problems (typically configuration issues). </para><para><ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AllInOne/CategoryPermalink#">CategoryPermalink</ulink> </para></section></section></section><para><anchor id="Requirements"/> </para><section><title>Requirements</title><para>There are different ways of setting up a Skolelinux solution. It can be installed on just one standalone PC, or as a region-wide solution at many schools operated centrally. This flexibility makes a huge difference to the configuration of network components, servers and client machines. </para><section><title>Hardware requirements</title><para>The purpose of the different profiles is explained in the <ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AllInOne/DebianEdu/Documentation/Bullseye/Architecture#">network architecture</ulink> chapter. </para><para><inlinemediaobject><imageobject><imagedata depth="16" fileref="https://wiki.debian.org/htdocs/debwiki/img/idea.png" width="16"/></imageobject><textobject><phrase>(!)</phrase></textobject></inlinemediaobject> If LTSP is intended to be used, take a look at the <ulink url="https://wiki.debian.org/LTSP/Ltsp%20Hardware%20Requirements">LTSP Hardware Requirements wiki page</ulink>. </para><itemizedlist><listitem><para>The computers running Debian Edu / Skolelinux must have either 32 bit (Debian architecture 'i386', oldest supported processors are 686 class ones) or 64 bit (Debian architecture 'amd64') x86 processors. </para></listitem><listitem><para>Thin clients with only 256 MiB RAM and 400 MHz are possible, though more RAM and faster processors are recommended. </para></listitem><listitem><para>For workstations, diskless workstations and standalone systems, 1500 MHz and 1024 MiB RAM are the absolute minimum requirements. For running modern webbrowsers and LibreOffice at least 2048 MiB RAM is recommended.  </para></listitem><listitem><para>The minimum disk space requirements depend on the profile which is installed: </para><itemizedlist><listitem><para>combined main server + LTSP server: 60 GiB (plus additional space for user accounts). </para></listitem><listitem><para>LTSP server: 40 GiB. </para></listitem><listitem><para>workstation or standalone: 30 GiB.  </para></listitem></itemizedlist></listitem><listitem><para>LTSP servers need two network cards when using the default network architecture: </para><itemizedlist><listitem><para>eth0 is connected to the main network (10.0.0.0/8), </para></listitem><listitem><para>eth1 is used for serving LTSP clients. </para></listitem></itemizedlist></listitem><listitem><para>Laptops are movable workstations, so they have the same requirements as workstations. </para></listitem></itemizedlist></section><section><title>Hardware known to work</title><para>A list of tested hardware is provided at <ulink url="https://wiki.debian.org/DebianEdu/Hardware/"/> . This list is not nearly complete <inlinemediaobject><imageobject><imagedata depth="16" fileref="https://wiki.debian.org/htdocs/debwiki/img/smile.png" width="16"/></imageobject><textobject><phrase>:)</phrase></textobject></inlinemediaobject> </para><para><ulink url="https://wiki.debian.org/InstallingDebianOn"/> is an effort to document how to install, configure and use Debian on some specific hardware, allowing potential buyers to know if that hardware is supported and existing owners to know how get the best out of that hardware. </para></section></section><section><title>Requirements for network setup</title><section><title>Default Setup</title><para>When using the default network architecture, these rules apply: </para><itemizedlist><listitem><para>You need exactly one main server, the tjener. </para></listitem><listitem><para>You can have hundreds of workstations on the main network. </para></listitem><listitem><para>You can have a lot of LTSP servers on the main network; two different subnets are preconfigured (DNS, DHCP) in LDAP, more can be added.  </para></listitem><listitem><para>You can have hundreds of thin clients and/or diskless workstations on each LTSP server network.  </para></listitem><listitem><para>You can have hundreds of other machines which will have dynamic IP addresses assigned. </para></listitem><listitem><para>For access to the Internet you need a router/gateway (see below). </para></listitem></itemizedlist><para><anchor id="Requirements--Internet_router"/> </para></section><section><title>Internet router</title><para>A router/gateway, connected to the Internet on the external interface and running on the IP address 10.0.0.1 with netmask 255.0.0.0 on the internal interface, is needed to connect to the Internet. </para><para>The router should not run a DHCP server, it can run a DNS server, though this is not needed and will not be used. </para><para>In case you already have a router but are unable to configure it as needed (eg because you are not allowed to do so, or for technical reasons), an older computer with two network interfaces can be turned into a gateway between the existing network and the Debian Edu one. </para><para>A simple way is to install Debian Edu on this computer; select 'Minimal' as profile during installation. </para><para>After the installation: </para><itemizedlist><listitem><para>Adjust the /etc/network/interfaces file. </para></listitem><listitem><para>Change the hostname permanently to 'gateway'. </para></listitem><listitem><para>Remove superfluous scripts. </para></listitem><listitem><para>Enable IP forwarding and NAT for the 10.0.0.0/8 network. </para></listitem><listitem><para>As an option install a firewall and / or a traffic shaping tool. </para></listitem></itemizedlist><screen><![CDATA[ #!/bin/sh
+<?xml version="1.0" encoding="utf-8"?><!DOCTYPE article  PUBLIC '-//OASIS//DTD DocBook XML V4.4//EN'  'http://www.docbook.org/xml/4.4/docbookx.dtd'><article><articleinfo><title>DebianEdu/Documentation/Bullseye/AllInOne</title><revhistory><revision><revnumber>1</revnumber><date>2020-02-13 14:08:14</date><authorinitials>WolfgangSchweer</authorinitials><revremark>WIP: starting to work on Debian Edu Bullseye documentation as a copy with s/buster/bullseye/ and some other adjustments</revremark></revision></revhistory></articleinfo><section><title>Manual for Debian Edu 11 Codename Bullseye</title><para><inlinemediaobject><imageobject><imagedata fileref="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AboutDebianEdu?action=AttachFile&do=get&target=i.png" width="800"/></imageobject><textobject><phrase>Debian Edu Installer Logo</phrase></textobject></inlinemediaobject> </para><para>This is the manual for the Debian Edu 11 Bullseye release. </para><para>The version at <ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye"/> is a wiki and updated frequently. </para><para><ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AllInOne/DebianEdu/Documentation/Bullseye/Translations#">Translations</ulink> are part of the <code>debian-edu-doc</code> package which can be installed on a webserver, and is available <ulink url="https://jenkins.debian.net/userContent/debian-edu-doc/">online</ulink>. </para></section><section><title>About Debian Edu and Skolelinux</title><para>Debian Edu aka Skolelinux is a Linux distribution based on Debian providing an out-of-the box environment of a completely configured school network. </para><para>The chapters about <ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AllInOne/DebianEdu/Documentation/Bullseye/Requirements#">hardware and network requirements</ulink> and about the <ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AllInOne/DebianEdu/Documentation/Bullseye/Architecture#">architecture</ulink> contain basic environment details. </para><para>After installation of a main server all services needed for a school network are set up and the system is ready to be used. Only users and machines need to be added via GOsa², a comfortable Web-UI, or any other LDAP editor. A netbooting environment using PXE/<ulink url="https://ipxe.org/">iPXE</ulink> has also been prepared, so after initial installation of the main server from CD, Blu-ray disc or USB flash drive all other machines can be installed via the network, this includes "roaming workstations" (ones that can be taken away from the school network, usually laptops or netbooks). Also, machines can be booted via PXE/iPXE as diskless workstations or thin clients. </para><para>Several educational applications like GeoGebra, Kalzium, KGeography, GNU Solfege and Scratch are included in the default desktop setup, which can be extended easily and almost endlessly via the Debian universe. </para><section><title>Some history and why two names</title><para><ulink url="https://blends.debian.org/edu">Debian Edu / Skolelinux</ulink> is a Linux distribution created by the Debian Edu project. As a <ulink url="https://blends.debian.org">Debian Pure Blend</ulink> distribution it is an official <ulink url="https://www.debian.org">Debian</ulink> subproject. </para><para>What this means for your school is that Skolelinux is a version of Debian providing an out-of-the box environment of a completely configured school-network. </para><para>The Skolelinux project in Norway was founded on July 2nd 2001 and about the same time Raphaël Hertzog started Debian-Edu in France. Since 2003 both projects are united, but both names stayed. "Skole" and (Debian-)"Education" are just two well understood terms in these regions. </para><para>Today the system is in use in several countries around the world. </para><para><ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AllInOne/CategoryPermalink#">CategoryPermalink</ulink> </para></section></section><para><anchor id="Architecture"/> </para><section><title>Architecture</title><para><anchor id="Architecture--Network"/> </para><section><title>Network</title><para>This section of the document describes the network architecture and services provided by a Skolelinux installation. </para><para><inlinemediaobject><imageobject><imagedata fileref="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/Architecture?action=AttachFile&do=get&target=Debian_Edu_Network_Bullseye.png" width="1024"/></imageobject><textobject><phrase>The Debian Edu network topology</phrase></textobject></inlinemediaobject> </para><para>The figure is a sketch of the assumed network topology. The default setup of a Skolelinux network assumes that there is one (and only one) main server, while allowing the inclusion of both normal workstations and LTSP servers (with associated thin clients and/or diskless workstations). The number of workstations can be as large or small as you want (starting from none to a lot). The same goes for the LTSP servers, each of which is on a separate network so that the traffic between the clients and the LTSP server doesn't affect the rest of the network services. LTSP is explained in detail in <ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AllInOne/DebianEdu/Documentation/Bullseye/HowTo/NetworkClients#">the related HowTo</ulink> chapter. </para><para>The reason that there can only be one main server in each school network is that the main server provides DHCP, and there can be only one machine doing so in each network. It is possible to move services from the main server to other machines by setting up the service on another machine, and subsequently updating the DNS configuration, pointing the DNS alias for that service to the right computer. </para><para>In order to simplify the standard setup of Skolelinux, the Internet connection runs over a separate router, also called gateway. See the <ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AllInOne/DebianEdu/Documentation/Bullseye/Requirements#Internet_router">Internet router</ulink> chapter for details how to set up such a gateway if it is not possible to configure an existing one as needed.  </para><section><title>The default network setup</title><para>DHCP on the main server serves the 10.0.0.0/8 network, providing a PXE boot menu where you can choose whether to install a new server/workstation, boot a thin client or a diskless workstation, run memtest, or boot from the local hard disk. </para><para>This is designed to be modified; for details, see <ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AllInOne/DebianEdu/Documentation/Bullseye/HowTo/NetworkClients#Configuring_the_PXE_menu">the related HowTo</ulink> chapter. </para><para>DHCP on the LTSP servers only serves a dedicated network on the second interface (192.168.0.0/24 and 192.168.1.0/24 are preconfigured options) and should seldom need to be changed. </para><para>The configuration of all subnets is stored in LDAP. </para></section><section><title>Main server</title><para>A Skolelinux network needs one main server (also called "tjener" which is Norwegian and means "server") which per default has the IP address 10.0.2.2 and is installed by selecting the Main Server profile. It's possible (but not required) to also select and install the LTSP Server and Workstation profiles in addition to the Main Server profile. </para></section><section><title>Services running on the main server</title><para>With the exception of the control of the thin clients, all services are initially set up on one central computer (the main server). For performance reasons, the LTSP server(s) should be separate (though it is possible to install both the Main Server and LTSP Server profiles on the same machine). All services are allocated a dedicated DNS-name and are offered exclusively over IPv4. The allocated DNS name makes it easy to move individual services from the main server to a different machine, by simply stopping the service on the main server, and changing the DNS configuration to point to the new location of the service (which should be set up on that machine first, of course). </para><para>To ensure security all connections where passwords are transmitted over the network are encrypted, so no passwords are sent over the network as plain text. </para><para>Below is a table of the services that are set up by default in a Skolelinux network and the DNS name of each service. If possible all configuration files will refer to the service by name (without the domain name) thus making it easy for schools to change either their domain (if they have an own DNS domain) or the IP addresses they use. </para><informaltable><tgroup cols="3"><colspec colname="col_0"/><colspec colname="col_1"/><colspec colname="col_2"/><tbody><row rowsep="1"><entry align="center" colsep="1" nameend="col_2" namest="col_0" rowsep="1"><para><emphasis role="strong">Table of services</emphasis></para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> <emphasis role="strong">Service description</emphasis> </para></entry><entry colsep="1" rowsep="1"><para> <emphasis role="strong">Common name</emphasis> </para></entry><entry colsep="1" rowsep="1"><para> <emphasis role="strong">DNS service name</emphasis> </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Centralised Logging </para></entry><entry colsep="1" rowsep="1"><para> rsyslog  </para></entry><entry colsep="1" rowsep="1"><para> syslog </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Domain Name Service </para></entry><entry colsep="1" rowsep="1"><para> DNS (BIND) </para></entry><entry colsep="1" rowsep="1"><para> domain </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Automatic Network Configuration of Machines </para></entry><entry colsep="1" rowsep="1"><para> DHCP </para></entry><entry colsep="1" rowsep="1"><para> bootps </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Clock Synchronisation </para></entry><entry colsep="1" rowsep="1"><para> NTP </para></entry><entry colsep="1" rowsep="1"><para> ntp </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Home Directories via Network File System </para></entry><entry colsep="1" rowsep="1"><para> SMB / NFS </para></entry><entry colsep="1" rowsep="1"><para> homes </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Electronic Post Office </para></entry><entry colsep="1" rowsep="1"><para> IMAP (Dovecot)  </para></entry><entry colsep="1" rowsep="1"><para> postoffice </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Directory Service </para></entry><entry colsep="1" rowsep="1"><para> OpenLDAP </para></entry><entry colsep="1" rowsep="1"><para> ldap </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> User Administration </para></entry><entry colsep="1" rowsep="1"><para> GOsa² </para></entry><entry colsep="1" rowsep="1"><para> ---  </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Web Server </para></entry><entry colsep="1" rowsep="1"><para> Apache/PHP </para></entry><entry colsep="1" rowsep="1"><para> www </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Central Backup </para></entry><entry colsep="1" rowsep="1"><para> sl-backup, slbackup-php </para></entry><entry colsep="1" rowsep="1"><para> backup </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Web Cache </para></entry><entry colsep="1" rowsep="1"><para> Proxy (Squid) </para></entry><entry colsep="1" rowsep="1"><para> webcache </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Printing </para></entry><entry colsep="1" rowsep="1"><para> CUPS </para></entry><entry colsep="1" rowsep="1"><para> ipp </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Secure Remote Login </para></entry><entry colsep="1" rowsep="1"><para> OpenSSH </para></entry><entry colsep="1" rowsep="1"><para> ssh </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Automatic Configuration </para></entry><entry colsep="1" rowsep="1"><para> CFEngine </para></entry><entry colsep="1" rowsep="1"><para> cfengine </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> LTSP Server/s </para></entry><entry colsep="1" rowsep="1"><para> LTSP </para></entry><entry colsep="1" rowsep="1"><para> ltsp </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Network Block Device Server </para></entry><entry colsep="1" rowsep="1"><para> NBD </para></entry><entry colsep="1" rowsep="1"><para> --- </para></entry></row><row rowsep="1"><entry colsep="1" rowsep="1"><para> Machine and Service Surveillance with Error Reporting, plus Status and History on the Web. Error Reporting by email </para></entry><entry colsep="1" rowsep="1"><para>Munin, Icinga and Sitesummary </para></entry><entry colsep="1" rowsep="1"><para> sitesummary </para></entry></row></tbody></tgroup></informaltable><para>Personal files for each user are stored in their home directories, which are made available by the server. Home directories are accessible from all machines, giving users access to the same files regardless of which machine they are using. The server is operating system agnostic, offering access via NFS for Unix clients, SMB for Windows and Macintosh clients. </para><para>By default email is set up for local delivery (i.e. within the school) only, though email delivery to the wider Internet may be set up if the school has a permanent Internet connection. Clients are set up to deliver mail to the server (using 'smarthost'), and users can <ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AllInOne/DebianEdu/Documentation/Bullseye/HowTo/Users#Using_email">access their personal mail</ulink> through IMAP. </para><para>All services are accessible using the same username and password, thanks to the central user database for authentication and authorisation. </para><para>To increase performance on frequently accessed sites a web proxy that caches files locally (Squid) is used. In conjunction with blocking web-traffic in the router this also enables control of Internet access on individual machines. </para><para>Network configuration on the clients is done automatically using DHCP. All types of clients can be connected to the private 10.0.0.0/8 subnet and will get according IP addresses; LTSP clients should be connected to the corresponding LTSP server via the separate subnet 192.168.0.0/24 (this is to ensure that the network traffic of the LTSP clients doesn't interfere with the rest of the network services). </para><para>Centralised logging is set up so that all machines send their syslog messages to the server. The syslog service is set up so that it only accepts incoming messages from the local network. </para><para>By default the DNS server is set up with a domain for internal use only (*.intern), until a real ("external") DNS domain can be set up. The DNS server is set up as caching DNS server so that all machines on the network can use it as the main DNS Server. </para><para>Pupils and teachers have the ability to publish websites. The web server provides mechanisms for authenticating users, and for limiting access to individual pages and subdirectories to certain users and groups. Users will have the ability to create dynamic web pages, as the web server will be programmable on the server side. </para><para>Information on users and machines can be changed in one central location, and is made accessible to all computers on the network automatically. To achieve this a centralised directory server is set up. The directory will have information on users, user groups, machines, and groups of machines. To avoid user confusion there won't be any difference between file groups, mailing lists, and network groups. This implies that groups of machines which are to form network groups will use the same namespace as user groups and mailing lists. </para><para>Administration of services and users will mainly be via the web, and follow established standards, functioning well in the web browsers which are part of Skolelinux. The delegation of certain tasks to individual users or user groups will be made possible by the administration systems. </para><para>In order to avoid certain problems with NFS, and to make it simpler to debug problems, the different machines need synchronised clocks. To achieve this the Skolelinux server is set up as a local Network Time Protocol (NTP) server, and all workstations and clients are set up to synchronise with the server. The server itself should synchronise its clock via NTP against machines on the Internet, thus ensuring the whole network has the correct time. </para><para>Printers are connected where convenient, either directly onto the main network, or connected to a server, workstation or LTSP server. Access to printers can be controlled for individual users according to the groups they belong to; this will be achieved by using quota and access control for printers. </para></section><section><title>LTSP server(s)</title><para>A Skolelinux network can have many LTSP servers, which are installed by selecting the LTSP Server profile. </para><para>The LTSP servers are set up to receive syslog from thin clients and workstations, and forward these messages to the central syslog recipient.  </para><para>Please note: </para><itemizedlist><listitem><para>LTSP diskless workstations are now using the programs installed on the server. </para></listitem><listitem><para>The client root filesystem is provided using NFS. After each modification to the LTSP server the related image has to be re-generated; run <code>ltsp image /</code> on the LTSP server. </para></listitem></itemizedlist></section><section><title>Thin clients</title><para>A thin client setup enables ordinary PCs to function as (X-)terminals. This means that the machine boots directly from the server using PXE without using the local client hard drive. The thin client setup now uses X2Go, because LTSP has dropped support. </para><para>Thin clients are a good way to still make use of very old (mostly 32-bit) machines as they effectively run all programs on the LTSP server. This works as follows: the service uses DHCP and TFTP to connect to the network and boot from the network. Next, the file system is mounted from the LTSP server using NFS, and finally the X2Go client is started. </para></section><section><title>Diskless workstations</title><para>A diskless workstation runs all software on the PC without a locally installed operating system. This means that client machines boot via PXE without running software installed on a local hard drive. </para><para>Diskless workstations are an excellent way of using powerful hardware with the same low maintenance cost as with thin clients. Software is administered and maintained on the server with no need for local installed software on the clients. Home directories and system settings are stored on the server too.  </para></section><section><title>Networked clients</title><para>The term "networked clients" is used in this manual to refer to both thin clients and diskless workstations, as well as computers running Mac OS or Windows. </para></section></section><section><title>Administration</title><para>All the Linux machines that are installed with the Skolelinux installer will be administrable from a central computer, most likely the server. It will be possible to log in to all machines via SSH, and thereby have full access to the machines. As root one needs to run <code>kinit</code> first to get a Kerberos TGT. </para><para>All user information is kept in an LDAP directory. Updates of user accounts are made against this database, which is used by the clients for user authentication. </para><section><title>Installation</title><para>Currently there are two kinds of installation media images: netinst and BD. Both images can also be booted from USB sticks. </para><para>The aim is to be able to install a server from any type of medium once, and install all other clients over the network by booting from the network.  </para><para>Only the netinstall image needs access to the Internet during installation. </para><para>The installation should not ask any questions, with the exception of desired language (e.g. Norwegian Bokmål, Nynorsk, Sami) and machine profile (main server, workstation, LTSP server, ...). All other configuration will be set up automatically with reasonable values, to be changed from a central location by the system administrator subsequent to the installation. </para><para><anchor id="Architecture--File_system_access_configuration"/> </para></section><section><title>File system access configuration</title><para>Each Skolelinux user account is assigned a section of the file system on the file server. This section (home directory) contains the user's configuration files, documents, email and web pages. Some of the files should be set to have read access for other users on the system, some should be readable by everyone on the Internet, and some should not be accessible for reading by anyone but the user. </para><para>To ensure that all disks that are used for user directories or shared directories can be uniquely named across all the computers in the installation, they can be mounted as <code>/skole/host/directory/</code>. Initially, one directory is created on the file server, <code>/skole/tjener/home0/</code>, in which all the user accounts are created. More directories may then be created when needed to accommodate  particular user groups or particular patterns of usage. </para><para>To enable shared access to files under the normal UNIX permissions system, users need to be in supplementary shared groups (such as "students") as well as the personal primary group that they're in by default. If users have an appropriate umask to make newly created items group-accessible (002 or 007), and if the directories they're working in are setgid to ensure the files inherit the correct group-ownership, the result is controlled file sharing between the members of a group. </para><para>The initial access settings for newly created files are a matter of policy. The Debian default umask is 022 (which would not allow group-access as described above), but Debian Edu uses a default of 002 - meaning that files are created with read access for everybody, which can later be removed by explicit user action. This can alternatively be changed (by editing <code>/etc/pam.d/common-session</code>) to a umask of 007 - meaning read access is initially blocked, necessitating user action to make them accessible.  The first approach encourages knowledge sharing, and makes the system more transparent, whereas the second method decreases the risk of unwanted spreading of sensitive information. The problem with the first solution is that it is not apparent to the users that the material they create will be accessible to all other users. They can only detect this by inspecting other users' directories and seeing that their files are readable. The problem with the second solution is that few people are likely to make their files accessible, even if they do not contain sensitive information and the content would be helpful to inquisitive users who want to learn how others have solved particular problems (typically configuration issues). </para><para><ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AllInOne/CategoryPermalink#">CategoryPermalink</ulink> </para></section></section></section><para><anchor id="Requirements"/> </para><section><title>Requirements</title><para>There are different ways of setting up a Skolelinux solution. It can be installed on just one standalone PC, or as a region-wide solution at many schools operated centrally. This flexibility makes a huge difference to the configuration of network components, servers and client machines. </para><section><title>Hardware requirements</title><para>The purpose of the different profiles is explained in the <ulink url="https://wiki.debian.org/DebianEdu/Documentation/Bullseye/AllInOne/DebianEdu/Documentation/Bullseye/Architecture#">network architecture</ulink> chapter. </para><para><inlinemediaobject><imageobject><imagedata depth="16" fileref="https://wiki.debian.org/htdocs/debwiki/img/idea.png" width="16"/></imageobject><textobject><phrase>(!)</phrase></textobject></inlinemediaobject> If LTSP is intended to be used, take a look at the <ulink url="https://wiki.debian.org/LTSP/Ltsp%20Hardware%20Requirements">LTSP Hardware Requirements wiki page</ulink>. </para><itemizedlist><listitem><para>The computers running Debian Edu / Skolelinux must have either 32 bit (Debian architecture 'i386', oldest supported processors are 686 class ones) or 64 bit (Debian architecture 'amd64') x86 processors. </para></listitem><listitem><para>Thin clients with only 256 MiB RAM and 400 MHz are possible, though more RAM and faster processors are recommended. </para></listitem><listitem><para>For workstations, diskless workstations and standalone systems, 1500 MHz and 1024 MiB RAM are the absolute minimum requirements. For running modern webbrowsers and LibreOffice at least 2048 MiB RAM is recommended.  </para></listitem><listitem><para>The minimum disk space requirements depend on the profile which is installed: </para><itemizedlist><listitem><para>combined main server + LTSP server: 60 GiB (plus additional space for user accounts). </para></listitem><listitem><para>LTSP server: 40 GiB. </para></listitem><listitem><para>workstation or standalone: 30 GiB.  </para></listitem></itemizedlist></listitem><listitem><para>LTSP servers need two network cards when using the default network architecture: </para><itemizedlist><listitem><para>eth0 is connected to the main network (10.0.0.0/8), </para></listitem><listitem><para>eth1 is used for serving LTSP clients. </para></listitem></itemizedlist></listitem><listitem><para>Laptops are movable workstations, so they have the same requirements as workstations. </para></listitem></itemizedlist></section><section><title>Hardware known to work</title><para>A list of tested hardware is provided at <ulink url="https://wiki.debian.org/DebianEdu/Hardware/"/> . This list is not nearly complete <inlinemediaobject><imageobject><imagedata depth="16" fileref="https://wiki.debian.org/htdocs/debwiki/img/smile.png" width="16"/></imageobject><textobject><phrase>:)</phrase></textobject></inlinemediaobject> </para><para><ulink url="https://wiki.debian.org/InstallingDebianOn"/> is an effort to document how to install, configure and use Debian on some specific hardware, allowing potential buyers to know if that hardware is supported and existing owners to know how get the best out of that hardware. </para></section></section><section><title>Requirements for network setup</title><section><title>Default Setup</title><para>When using the default network architecture, these rules apply: </para><itemizedlist><listitem><para>You need exactly one main server, the tjener. </para></listitem><listitem><para>You can have hundreds of workstations on the main network. </para></listitem><listitem><para>You can have a lot of LTSP servers on the main network; two different subnets are preconfigured (DNS, DHCP) in LDAP, more can be added.  </para></listitem><listitem><para>You can have hundreds of thin clients and/or diskless workstations on each LTSP server network.  </para></listitem><listitem><para>You can have hundreds of other machines which will have dynamic IP addresses assigned. </para></listitem><listitem><para>For access to the Internet you need a router/gateway (see below). </para></listitem></itemizedlist><para><anchor id="Requirements--Internet_router"/> </para></section><section><title>Internet router</title><para>A router/gateway, connected to the Internet on the external interface and running on the IP address 10.0.0.1 with netmask 255.0.0.0 on the internal interface, is needed to connect to the Internet. </para><para>The router should not run a DHCP server, it can run a DNS server, though this is not needed and will not be used. </para><para>In case you already have a router but are unable to configure it as needed (eg because you are not allowed to do so, or for technical reasons), an older computer with two network interfaces can be turned into a gateway between the existing network and the Debian Edu one. </para><para>A simple way is to install Debian Edu on this computer; select 'Minimal' as profile during installation. </para><para>After the installation: </para><itemizedlist><listitem><para>Adjust the /etc/network/interfaces file. </para></listitem><listitem><para>Change the hostname permanently to 'gateway'. </para></listitem><listitem><para>Remove superfluous scripts. </para></listitem><listitem><para>Enable IP forwarding and NAT for the 10.0.0.0/8 network. </para></listitem><listitem><para>As an option install a firewall and / or a traffic shaping tool. </para></listitem></itemizedlist><screen><![CDATA[ #!/bin/sh
  # Turn a system with profile 'Minimal' into a gateway/firewall. 
  #
  sed -i 's/auto eth0/auto eth0 eth1/' /etc/network/interfaces



View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-doc/-/commit/b2e09990e77e4c0baefdf4b8042b3df77045a116

-- 
View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-doc/-/commit/b2e09990e77e4c0baefdf4b8042b3df77045a116
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-edu-commits/attachments/20200710/34cf956a/attachment-0001.html>


More information about the debian-edu-commits mailing list