Skolelinux es una distribución de Linux, hecha por el proyecto Debian Edu. Siendo una distribución mezclada de Debian es un sub-proyecto oficial de Debian

Lo que esto significa, es que Skolelinux es una versión de Debian que proporciona un ambiente "out of the box" de una red escolar completamente configurada.

The Skolelinux project in Norway was founded on July 2nd 2001 and about the same time Raphaël Hertzog started Debian-Edu in France. Since 2003 both projects are united, but both names stayed. "Skole" and (Debian-)"Education" are just two well understood terms in these regions.

En Noruega, donde Skolelinux se inició, el grupo principal de alcance son las escuelas con grupos de estudiantes desde los 6 a 16 años. Actualmente, el sistema es utilizado en muchos países alrededor del mundo, con un número mayor en Noruega, España, Alemania y Francia.

The figure is a sketch of the assumed network topology. The default setup of a Skolelinux network assumes that there is one (and only one) main server, while allowing the inclusion of both normal workstations and LTSP servers (with associated thin clients and/or diskless workstations). The number of workstations can be as large or small as you want (starting from none to a lot). The same goes for the LTSP servers, each of which is on a separate network so that the traffic between the clients and the LTSP server doesn't affect the rest of the network services. LTSP is explained in detail in the related HowTo chapter.

The reason that there can only be one main server in each school network is that the main server provides DHCP, and there can be only one machine doing so in each network. It is possible to move services from the main server to other machines by setting up the service on another machine, and subsequently updating the DNS configuration, pointing the DNS alias for that service to the right computer.

In order to simplify the standard setup of Skolelinux, the Internet connection runs over a separate router, also called gateway. See the Internet router chapter for details how to set up such a gateway if it is not possible to configure an existing one as needed.

All the Linux machines that are installed with the Skolelinux installer will be administrable from a central computer, most likely the server. It will be possible to log in to all machines via SSH, and thereby have full access to the machines. As root one needs to run kinit first to get a Kerberos TGT.

Toda la información de los usuarios se guarda en un directorio LDAP. Las actualizaciones de las cuentas de usuario se hacen contra esta base de datos, que es la que usan los clientes para autenticarse.

El propósito de los diferentes perfiles es explicado en el capítulo Arquitecturas de red.

If LTSP is intended to be used, take a look at the LTSP Hardware Requirements wiki page.

Una lista de hardware probado esta en http://wiki.debian.org/DebianEdu/Hardware/ . Esta lista no está completa

http://wiki.debian.org/InstallingDebianOn es un esfuerzo para documentar el proceso de instalación, configuración y uso de Debian en hardware específico. Por lo tanto los potenciales compradores sabrán si su hardware es soportado y los propietarios podrán saber como obtener el máximo de sus equipos.

Una excelente base de datos sobre hardware soportado por Debian esta disponible en http://kmuto.jp/debian/hcl/.

Se aplican las siguientes reglas cuando se usa la arquitectura de red por defecto:

Un enrutador/pasarela conectado a Internet en la interfaz externa y con la dirección IP 10.0.0.1 y máscara de red 255.0.0.0 en la interfaz interna, es necesario para conectarse a internet.

El enrutador no debería ejecutar un servidor DHCP, puede ejecutar un servidor DNS, aunque no es necesario y no será usado.

In case you already have a router but are unable to configure it like needed (not allowed to, technical reasons), a system with two network interfaces could be turned into a gateway if the Debian Edu 'Minimal' profile is installed.

After the installation:

 #!/bin/sh
 # Turn a system with profile 'Minimal' into a gateway/firewall. 
 #
 sed -i 's/auto eth0/auto eth0 eth1/' /etc/network/interfaces
 sed -i '/eth1/ s/dhcp/static/' /etc/network/interfaces
 echo 'address 10.0.0.1' >> /etc/network/interfaces
 echo 'netmask 255.0.0.0' >> /etc/network/interfaces
 hostname -b gateway
 hostname > /etc/hostname 
 service networking stop
 service networking start
 sed -i 's#NAT=#NAT="10.0.0.0/8"#' /etc/default/enable-nat 
 service enable-nat restart
 # You might want a firewall (shorewall or ufw) and traffic shaping.
 #apt update
 #apt install shorewall
 # or
 #apt install ufw
 #apt install wondershaper  

In case you are looking for a complete router firewall solution capable of running on an old PC, we recommend IPCop or floppyfw.

If you need something for an embedded router or accesspoint we recommend using OpenWRT, though of course you can also use the original firmware. Using the original firmware is easier; using OpenWRT gives you more choices and control. Check the OpenWRT webpages for a list of supported hardware.

Es posible usar una configuración diferente de red (existe un proceso documentado para hacer esto), pero si usted no tiene una infraestructura de red preexistente, le recomendamos abstenerse de hacerlo, y mantener la configuración predeterminada de la arquitectura de red.

We recommend that you read or at least take a look at the release notes for Debian Buster before you start installing a system for production use. There is more information about the Debian Buster release available in its installation manual.

Please give Debian Edu/Skolelinux a try, it should just work.

It is recommended, though, to read the chapters about hardware and network requirements and about the architecture before starting to install a main server.

Be sure to also read the getting started chapter of this manual, as it explains how to log in for the first time.

For those without a fast Internet connection, we can offer a CD or DVD sent for the cost of the CD or DVD and shipping. Just send an email to cd@skolelinux.no and we will discuss the payment details (for shipping and media). Recuerde incluir la dirección a la que desea le sea envíado su CD / DVD dentro del email.

When you do a Debian Edu installation, you have a few options to choose from. Don't be afraid; there aren't many. We have done a good job of hiding the complexity of Debian during the installation and beyond. However, Debian Edu is Debian, and if you want there are more than 57,000 packages to choose from and a billion configuration options. For the majority of our users, our defaults should be fine. Please note: if LTSP is intended to be used, choose a lightweight desktop environment.

deb http://ftp.debian.org/debian/ buster main 
deb http://security.debian.org/ buster/updates main 

d-i    pkgsel/include string my-extra-package(s)

El modo de texto y modo gráfico de instalación son idénticos, sólo la apariencia es diferente. El modo gráfico le ofrece la oportunidad de utilizar un ratón y por supuesto, el modo gráfico se ve mucho mejor y más moderno. A menos que el hardware presente problemas con el modo gráfico, no hay razón para no usarlo.

So here is a screenshot tour through a graphical 64-bit Main Server + Workstation + LTSP Server installation and how it looks at the first boot of the main server, a PXE boot on the workstation network and on the LTSP client network:

{{attachment:01-Installer_64bit_boot_menu.png}}

{{attachment:02-select_a_language.png}}

{{attachment:03-select_your_location.png}}

{{attachment:04-Configure_the_keyboard.png}}

{{attachment:05-Detect_and_mount_CD-ROM.png}}

{{attachment:06-Load_installer_components_from_CD.png}}

{{attachment:07-Detect_network_hardware.png}}

{{attachment:08-Choose_Debian_Edu_profile.png}}

{{attachment:09-Really_use_the_automatic_partitioning_tool.png}}

{{attachment:10-Really_use_the_automatic_partitioning_tool-Yes.png}}

{{attachment:11-Participate_in_the_package_usage_survey.png}}

{{attachment:12-Set_up_users_and_passwords.png}}

{{attachment:12a-Set_up_users_and_passwords.png}}

{{attachment:12b-Set_up_users_and_passwords.png}}

{{attachment:12c-Set_up_users_and_passwords.png}}

{{attachment:12d-Setting-up-the-partitioner.png}}

{{attachment:13-Install the base system.png}}

{{attachment:14-Select_and_install_software.png}}

{{attachment:17-Select_and_install_software.png}}

{{attachment:18-Build LTSP chroot.png}}

{{attachment:19-Install_the_GRUB_boot_loader_on_a_hard_disk.png}}

{{attachment:20-Finish_the_Installation.png}}

{{attachment:21-Finish_the_Installation-Installation_complete.png}}

{{attachment:22-Tjener_GRUB_boot_menu.png}}

{{attachment:23-Tjener-Login.png}}

{{attachment:26-Tjener-KDE_Desktop_Browser.png}}

{{attachment:27-Tjener-KDE_Desktop.png}}

{{attachment:28-Diskless-WS-GRUB_Boot_menu-PXE.png}}

{{attachment:29-Diskless-WS-LDM_Login.png}}

{{attachment:31-ThinClient-KDE_Desktop.png}}

Durante la instalación del servidor principal, fue creada una primera cuenta de usuario. A continuación, esta cuenta se llamará "primer usuario". Esta cuenta es especial, ya que no existe una cuenta de Samba (puede agregarse vía GOsa²), los permisos para el directorio del usuario están establecidos en 700 (es necesario ejecutar chmod o+x ~ para que el sitio web personal sea accesible), el primer usuario puede usar sudo para convertirse en root.

See the information about Debian Edu specific file system access configuration before adding users; adjust to your site's policy if needed.

Después de la instalación, las primeras cosas que necesita hacer como usuario son:

Adding users and workstations is described in detail below, so please read this chapter completely. It covers how to perform these minimum steps correctly as well as other stuff that everybody will probably need to do.

There is additional information available elsewhere in this manual: the New features in Buster chapter should be read by everyone who is familiar with previous releases. And for those upgrading from a previous release, make sure to read the Upgrades chapter.

If generic DNS traffic is blocked out of your network and you need to use some specific DNS server to look up internet hosts, you need to tell the DNS server to use this server as its "forwarder". Update /etc/bind/named.conf.options and specify the IP address of the DNS server to use.

El capítulo HowTo describe más trucos, pistas y algunas preguntas de uso frecuente.

{{attachment:27-Tjener-KDE_Desktop.png}}

GOsa²es una herramienta de administración web, que le ayudará a administrar algunas de las partes importantes de su configuración de Debian Edu. Podrá administrar (agregar, modificar o eliminar) estos principales grupos:

For GOsa² access you need the Skolelinux main server and a (client) system with a web browser installed which can be the main server itself if it was installed as a so called combined server (Main Server + LTSP Server + Workstation profiles). If all of the mentioned before is not available, see: Installing a graphical environment on the main-server to use GOsa².

Desde un navegador web, utilice https://www/gosa para acceder a GOsa² e ingrese por primera vez.

Para información general sobre GOsa², revise: https://oss.gonicus.de/labs/gosa/wiki/documentation

En primer lugar, haga clic en "Usuarios" en el menú de navegación de la izquierda. El lado derecho de la pantalla cambiará para mostrar una tabla con las carpetas de departamento para "Estudiantes" y "maestros" y la cuenta GOsa² Super-Administrador (el primer usuario creado). Por encima de esta tabla se puede ver un campo llamado Base que le permite navegar a través de su estructura de árbol (mueva el ratón sobre esa zona y aparecerá un menú desplegable) y seleccione una carpeta de base para sus operaciones previstas (por ejemplo, la adición de un nuevo usuario).

La gestión de grupos es muy similar a la gestión de usuarios.

Puede ingresar un nombre y una descripción por grupo. Asegúrese de elegir el nivel correcto en el árbol LDAP cuando cree un nuevo grupo.

By default, the appropriate Samba group isn't created. If you forgot to check the Samba group option during group creation, you can modify the group later on.

Adding users to a newly created group takes you back to the user list, where you most probably would like to use the filter box to find users. Check the LDAP tree level, too.

Los grupos incluidos en el manejo de grupos, son también grupos regulares de Unix, así que pueden utilizarse también para los permisos de archivos.

# Muestra el mapeo existente entre grupos UNIX y Windows.
net groupmap list

# Agrega un grupo nuevo o faltante:
net groupmap add unixgroup=GRUPO_NUEVO type=domain ntgroup="GRUPO_NUEVO_GRUPO"\
                 comment="DESCRIPCIÓN DEL GRUPO NUEVO"

Machine management basically allows you to manage all networked devices in your Debian Edu network. Every machine added to the LDAP directory using GOsa² has a hostname, an IP address, a MAC address and a domain name (which is usually "intern"). For a fuller description of the Debian Edu architecture see the architecture chapter of this manual.

Diskless workstations and thin-clients work out-of-the-box when connected to the main network. Only workstations with disks have to be added with GOsa², but all can.

To add a machine, use the GOsa² main menu, systems, add. You can use an IP address/hostname from the preconfigured address space 10.0.0.0/8. Currently there are only two predefined fixed addresses: 10.0.2.2 (tjener) and 10.0.0.1 (gateway). The addresses from 10.0.16.20 to 10.0.31.254 (roughly 10.0.16.0/20 or 4000 hosts) are reserved for DHCP and are assigned dynamically.

To assign a host with the MAC address 52:54:00:12:34:10 a static IP address in GOsa² you have to enter the MAC address, the hostname and the IP; alternatively you might click the Propose ip button which will show the first free fixed address in 10.0.0.0/8, most probably something like 10.0.0.2 if you add the first machine this way. It may be better to first think about your network: for example you could use 10.0.0.x with x>10 and x<50 for servers, and x>100 for workstations. Don't forget to activate the just added system. With the exception of the main server all systems will then have a matching icon.

If the machines have booted as thin clients/diskless workstations or have been installed using any of the networked profiles, the sitesummary2ldapdhcp script can be used to automatically add machines to GOsa². For simple machines it will work out of the box, for machines with more than one mac address the actually used one has to be chosen, sitesummary2ldapdhcp -h shows usage information. Please note, that the IP addresses shown after usage of sitesummary2ldapdhcp belong to the dynamic IP range. These systems can then be modified to suit your network: rename each new system, activate DHCP and DNS, add it to netgroups (see screenshot below for recommended netgroups), reboot the system afterwards. The following screenshots show how this looks in practice:

root@tjener:~# sitesummary2ldapdhcp -a -i ether-22:11:33:44:55:ff
info: Create GOsa machine for am-2211334455ff.intern [10.0.16.21] id ether-22:11:33:44:55:ff.

Enter password if you want to activate these changes, and ^c to abort.

Connecting to LDAP as cn=admin,ou=ldap-access,dc=skole,dc=skolelinux,dc=no
enter password: ********
root@tjener:~#

A cronjob updating DNS runs every hour; su -c ldap2bind can be used to trigger the update manually.

The package p910nd is installed by default on a system with the Workstation profile.

This section explains how to use apt-get upgrade.

Using apt-get is really simply. To update a system you need to execute two commands on the command line as root: apt-get update (which updates the lists of available packages) and apt-get upgrade (which upgrades the packages for which an upgrade is available).

As Debian Edu uses libpam-tmpdir, setting a per user TMP directory, it is a good idea to run apt-get without the TMP and TMPDIR variables set in the LTSP chroot. It is also a good idea to upgrade using the C locale to get known output and sorting order, even though that making a difference is a bug in a package.

LC_ALL=C apt-get update ; LC_ALL=C TMP= TMPDIR= ltsp-chroot apt-get update
LC_ALL=C apt-get upgrade -y
LC_ALL=C TMP= TMPDIR= ltsp-chroot -p apt-get upgrade -y
ltsp-update-kernels # If a new kernel was installed
ltsp-update-image

It is important to run ltsp-update-kernels if a new kernel was installed in the LTSP chroot, to keep the kernel and kernel modules in sync. The kernel is handed out via TFTP when the machine does PXE boot, and the kernel modules are fetched from the LTSP chroot.

Run ltsp-update-image to re-generate the NBD image(s).

También es buena idea instalar cron-apt y apt-listchanges y configurarlos para que le envíe corre electrónico.

cron-apt will notify you once a day via email about any packages that can be upgraded. It does not install these upgrades, but does download them (usually in the night), so you don't have to wait for the download when you do apt-get upgrade.

Automatic installation of updates can be done easily if desired, it just needs the unattended-upgrades package to be configured as described on wiki.debian.org/UnattendedUpgrades. On new installations security updates are enabled by default.

apt-listchanges can send new changelog entries to you via email, or alternativly display them in the terminal when running aptitude or apt-get.

For backup management point your browser to https://www/slbackup-php. Please note that you need to access this site via SSL, since you have to enter the root password there. If you try to access this site without using SSL it will fail.

Note: the site will only work if you temporarily allow ssh root login on the backup server (main server 'tjener' by default).

By default tjener will back up /skole/tjener/home0, /etc/, /root/.svk and LDAP to /skole/backup which is under the LVM. If you only want to have spare copies of things (in case you delete them) this setup should be fine for you.

Tome en cuenta que este esquema de respaldo no le protege de daños en el disco duro.

If you want to back up your data to an external server, a tape device or another hard drive you'll have to modify the existing configuration a bit.

Si quieres restaurar un directorio, la mejor opción es usar la línea de comandos:

$ sudo rdiff-backup -r <date>  \
   /skole/backup/tjener/skole/tjener/home0/user \
   /skole/tjener/home0/user_<date>

Esto pondrá el contenido de /skole/tjener/home0/user para <date> en el directorio /skole/tjener/home0/user_<date>.

Si desea restablecer un archivo, debería de ser capaz de seleccionar el archivo (y la versión) de la interfaz web y descargar solamente ese archivo.

Si desea deshacerse de los respaldos viejos, elija "Maintenance" en el menú de la página respaldo y seleccione la instantánea más vieja que desee conservar:

Más información sobre personalizaciones de Debian Edu útil para administradores de sistema puede encontrarse en el capítulo Administración y en el capítulo Administración avanzada

Upgrading Debian from one distribution to the next is generally rather easy. For Debian Edu this is unfortunately not yet true as we modify configuration files in ways we shouldn't. (See Debian bug 311188 for more information.) Upgrading is still possible but may require some work.

En general, actualizar los servidores es más difícil que las estaciones de trabajo y el servidor principal es el más difícil de actualizar. Las estaciones de trabajo sin disco son más faciles, ya que su entorno chroot puede ser eliminado y recreado si no lo ha modificado. Si lo ha modificado, el chroot es básicamente un chroot de estación de trabajo, así que es bastante fácil de actualizar.

Si quiere asegurase de que después de la actualización todo va como antes, debería probarlo en un sistema de pruebas o en un sistema configurado igual que su servidor en producción. Ahí puede probar la actualización sin riesgo y ver si todo funciona como debiera.

Asegúrese de leer la información sobre la versión estable de Debian actual en el manual de instalación.

También sería inteligente esperar un poco y seguir con la versión anterior durante algunas semanas más, para que otros prueben la actualización y documenten algunos problemas que experimenten. La versión estable anterior de Debian Edu continuará recibiendo soporte por algún tiempo después de la publicación de la siguiente versión estable, pero cuando Debian cese el soporte a la versión estable anterior, Debian Edu hará lo mismo.

Be prepared: make sure you have tested the upgrade from Stretch in a test environment or have backups ready to be able to go back.

Please note that the following recipe applies to a default Debian Edu main server installation (desktop=kde, profiles Main Server, Workstation, LTSP Server). (For a general overview concerning stretch to buster upgrade, see: https://www.debian.org/releases/buster/releasenotes)

Don't use X, use a virtual console, log in as root.

Please note one difference between apt and apt-get: By default apt-get keeps downloaded packages, apt removes them from the cache (after successful installation).

If apt finishes with an error, try to fix it and/or run apt -f install and then apt -y full-upgrade once again.

apt update
apt full-upgrade

apt-get clean

sed -i 's/stretch/buster/g' /etc/apt/sources.list
apt update
apt full-upgrade

apt install debian-edu-artwork-buster

apt purge linux-image-4.9.0-*
apt purge linux-headers-4.9.0-*  

rm /etc/ldap/ssl/ldap-server-pubkey.pem
service nslcd stop
service fetch-ldap-cert restart
service nslcd start

ltsp-chroot -m -a i386 apt update
ltsp-chroot -m -a i386 apt -y full-upgrade
sed -i 's/stretch/buster/g' /opt/ltsp/i386/etc/apt/sources.list
ltsp-chroot -m -a i386 apt update
ltsp-chroot -m -a i386 apt -y full-upgrade
ltsp-chroot -m -a i386 apt -f install
ltsp-chroot -m -a i386 apt -y full-upgrade

ltsp-chroot -m -a i386 apt --purge autoremove

ltsp-update-kernels
ltsp-update-sshkeys
ltsp-update-image

To upgrade from any older release, you will need to upgrade to the Stretch based Debian Edu release first, before you can follow the instructions provided above. Instructions are given in the Manual for Debian Edu Stretch about how to upgrade to Stretch from the previous release, Jessie. Likewise the Jessie manual describes how to upgrade from Wheezy.

Con la introducción de etckeeper en Debian Edu Squeeze (las versiones anteriores utilizaban etcinsvk el cual fué removido de Debian), todos los archivos en /etc/ son seguidos utilizando git como sistema de control de versiones.

Esto hace posible ver cuando un archivo es agregado, modificado o eliminado, también ver lo que se cambió si el archivo es un archivo de texto. El repositorio de git es guardado en /etc/.git/.

Cualquier cambio, es registrado cada hora, permitiendo tener un histórico de la configuración para ser extraído y revisado.

To look at the history, the command etckeeper vcs log is used. To check the differences between two points in time, a command like etckeeper vcs diff can be used.

Revise la salida de man etckeeper para más información.

Lista de comandos útiles:

etckeeper vcs log
etckeeper vcs status
etckeeper vcs diff
etckeeper vcs add .
etckeeper vcs commit -a
man etckeeper

etckeeper vcs log

etckeeper vcs status

etckeeper vcs commit -a /etc/resolv.conf

In Debian Edu, all partitions other than the /boot/ partition are on logical LVM volumes. With Linux kernels since version 2.6.10, it is possible to extend partitions while they are mounted. Shrinking partitions still needs to happen while the partition is unmounted.

It is a good idea to avoid creating very large partitions (over, say, 20GiB), because of the time it takes to run fsck on them or to restore them from backup if the need arises. It is better, if possible, to create several smaller partitions than one very large one.

The helper script debian-edu-fsautoresize is provided to make it easier to extend full partitions. When invoked, it reads the configuration from /usr/share/debian-edu-config/fsautoresizetab, /site/etc/fsautoresizetab and /etc/fsautoresizetab. It then proposes to extend partitions with too little free space, according to the rules provided in these files. If run with no arguments, it will only show the commands needed to extend the file system. The argument -n is needed to actually execute these commands to extend the file systems.

The script is executed automatically every hour on every client listed in the fsautoresize-hosts netgroup.

When the partition used by the Squid proxy is resized, the value for cache size in etc/squid/squid.conf needs to be updated as well. The helper script /usr/share/debian-edu-config/tools/squid-update-cachedir is provided to do this automatically, checking the current partition size of /var/spool/squid/ and configuring Squid to use 80% of this as its cache size.

lvextend -L30G /dev/vg_system/skole+tjener+home0
resize2fs /dev/vg_system/skole+tjener+home0

If you (probably accidentally) installed a pure main-server profile and don't have a client with a web-browser handy, it's easy to install a minimal desktop on the main server using this command sequence in a (non-graphical) shell as the user you created during the main server's installation (first user):

  $ sudo apt update
  $ sudo apt install education-desktop-xfce lightdm
  ### after installation, run 'sudo service lightdm start' 
  ### login as first user

ldapvi es una herramienta para editar la base de datos LDAP con un editor de texto en la linea de comandos.

Lo siguiente necesita ser ejecutado:

ldapvi --ldap-conf -ZD '(cn=admin)'

Nota: ldapvi usará el editor de texto predeterminado. Ejecutar export EDITOR=vim en el intérprete de comandos puede configurar el entorno para tener un clon de vi como editor.

To add an LDAP object using ldapvi, use object sequence number with the string add in front of the new LDAP object.

Adevertencia: ldapvi es una herramienta poderosa. Sea cuidadoso y no dañe la base de datos de LDAP, la misma advertencia aplica para JXplorer.

Using Kerberos for NFS to mount home directories is a security feature. The levels krb5, krb5i and krb5p are supported (krb5 means Kerberos authentication, i stands for integrity check and p for privacy, i.e. encryption); the load on both server and workstation increases with the security level, krb5i might be a good choice.

For new systems added with GOsa², Kerberos host keytab files are generated automatically.

To create one for a system already configured with GOsa², login on the main server as root and run

/usr/share/debian-edu-config/tools/gosa-modify-host <hostname> <IP>

Please note: host keytab creation is possible for systems of type workstations, servers and terminals but not for those of type netdevices. Also, LTSP clients are using sshfs to mount home directories, so there's nothing to do for diskless workstations.

/srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)
/srv/nfs4/home0  gss/krb5i(rw,sync,no_subtree_check)

This tool allows to set the default printer depending on location, machine, or group membership. For more information, see /usr/share/doc/standardskriver/README.md.

The configuration file /etc/standardskriver.cfg has to be provided by the admin, see /usr/share/doc/standardskriver/examples/standardskriver.cfg as an example.

If you prefer a GUI to work with the LDAP database, check out the jxplorer package, which is installed by default. To get write access connect like this:

host: ldap.intern
port:636
Base dn:dc=skole,dc=skolelinux,dc=no 
Security level: ssl + user + password
User dn: cn=admin,ou=ldap-access

Click "This session only" if asked for the certificate.

ldap-createuser-krb is a small command line tool to create LDAP users and set their passwords in Kerberos. It's mostly useful for testing, though.

Since the Squeeze release in 2011, Debian has included packages formerly maintained in volatile.debian.org in the stable-updates suite.

While you can use stable-updates directly, you don't have to: stable-updates are pushed into the stable suite regularly when stable point releases are done, which roughly happens every two months.

You are running Debian Edu because you prefer the stability of Debian Edu. It runs great; there is just one problem: sometimes software is a little bit more outdated than you like. This is where backports.debian.org steps in.

Backports are recompiled packages from Debian testing (mostly) and Debian unstable (in a few cases only, e.g. security updates), so they will run without new libraries (wherever this is possible) on a stable Debian distribution like Debian Edu. We recommend you to pick out individual backports which fit your needs, and not to use all backports available there.

Usar backports es sencillo:

echo "deb http://deb.debian.org/debian/ buster-backports main" >> /etc/apt/sources.list
apt-get update

After which one can install backported packages easily, the following command will install a backported version of tuxtype:

apt-get install -t buster-backports tuxtype

Backports are automatically updated (if available) just like other packages. Like the normal archive, backports has three sections: main, contrib and non-free.

If you want to upgrade from one version to another (for example from Buster 10.1+edu0 to 10.3+edu1) but you do not have Internet connectivity, only physical media, follow these steps:

Inserte el CD/DVD/Disco Blu-ray/Dispositivo USB en la unidad, montelo y use el comando apt-cdrom:

mount /media/cdrom
apt-cdrom add -m

Para citar el manual de referencia de apt-cdrom(8):

Luego ejecute estos dos comandos para actualizar el sistema:

apt-get update 
apt-get upgrade

killer is a perl script that gets rid of background jobs. Background jobs are defined as processes that belong to users who are not currently logged into the machine. It's run by cron job once an hour.

Para instalarlo ejecuta el siguiente comando como root:

 apt-get install killer

unattended-upgrades is a Debian package which will install security (and other) upgrades automatically. The package is installed by default and preconfigured to install security upgrades. The logs are available in /var/log/unattended-upgrades/; also, there are always /var/log/dpkg.log and /var/log/apt/.

It is possible to save energy and money by automatically turning client machines off at night and back on in the morning. The package will try to turn off the machine every hour on the hour from 16:00 in the afternoon, but will not turn it off if it seems to have users. It will try to tell the BIOS to turn on the machine around 07:00 in the morning, and the main-server will try to turn on machines from 06:30 by sending wake-on-lan packets. These times can be changed in the crontabs of individual machines.

Some considerations should be kept in mind when setting this up:

  #!/bin/sh
  PATH=/usr/sbin:$PATH
  export PATH
  sitesummary-nodes -w

  #!/bin/sh
  PATH=/usr/sbin:$PATH
  export PATH
  netgroup -h shutdown-at-night-hosts

To access machines behind a firewall from the Internet, consider installing the package autossh. It can be used to set up an SSH tunnel to a machine on the Internet that you have access to. From that machine, you can access the server behind the firewall via the SSH tunnel.

En la instalación predeterminada, todos los servicios están ejecutándose en el servidor principal, tjener. Para mover algunos servicios a otra computadora de manera sencilla, existe un perfil mínimo de instalación disponible. Instalar con este perfil le proporcionará una computadora, que es parte de la red de Debian Edu, pero que no cuenta con un servicio ejecutándose (todavía)

Estos son los pasos que se deben seguir para configurar un servicio dedicado en una computadora:

FIXME: The HowTos from http://wiki.debian.org/DebianEdu/HowTo/ are either user- or developer-specific. Let's move the user-specific HowTos over here (and delete them over there)! (But first ask the authors (see the history of those pages to find them) if they are fine with moving the howto and putting it under the GPL.)

Take these steps to set up a dedicated storage server for user home directories and possibly other data.

Now users should be able to access the files on 'nas-server.intern' directly by just visiting the '/tjener/nas-server/storage/' directory using any application on any workstation, LTSP thin client or LTSP server, and visiting ~/Storage in case an LTSP diskless client is used.

There are several ways to restrict ssh login, some are listed here.

+ : alice jane bob john : ALL
+ : ALL : 10.0.0.0/8 192.168.0.0/24 192.168.1.0/24
- : ALL : ALL
#

To install other desktop environments after installation, simply use apt:

 apt update
 apt install education-desktop-gnome education-desktop-kde education-desktop-lxde education-desktop-lxqt education-desktop-mate

To set the default desktop environment, run:

update-alternatives --config x-session-manager

Users will then be able to choose any of the six desktop environment via the login manager before logging in. Of course, you can also choose to give less choices. Keep in mind that there will be several programs for the same purpose (like file managers, editors, PDF viewers...) if more than one desktop environment is installed; this might confuse users.

The use of LXDE as default on LTSP clients can be forced; see networked clients for details.

If you don't want to do installations with the default desktop Xfce, you can also install with one of the five alternative desktops, GNOME, KDE, LXDE, LXQt or MATE directly.

To support multiple languages these commands need to be run:

apt update
/usr/share/debian-edu-config/tools/install-task-pkgs
/usr/share/debian-edu-config/tools/improve-desktop-l10n

Users will then be able to choose the language via the Lightdm display manager before logging in; this applies to Xfce, LXDE and LXQt. GNOME and KDE both come with their own internal region and language configuration tools, use these. MATE uses the Arctica greeter on top of Lightdm whithout a language chooser. Run apt purge arctica-greeter to get the stock Lightdm greeter.

If LTSP diskless clients are used the above steps need to be done inside the LTSP chroot as well. LDM supports all desktop environments. First use Settings to choose the language, then login.

libdvdcss is needed for playing most commercial DVDs. For legal reasons it's not included in Debian (Edu). If you are legally allowed to use it, you can build your own local packages using the libdvd-pkg Debian package; make sure contrib is enabled in /etc/apt/sources.list.

apt update
apt install libdvd-pkg

Answer the debconf questions, then run dpkg-reconfigure libdvd-pkg.

The package fonts-linex (which is installed by default) installs the font "Abecedario" which is a nice handwriting font for kids. The font has several forms to be used with kids: dotted, and with lines.

Default for new Debian Edu Buster installations: LTSP clients are using the same architecture as the LTSP server, i.e. 64-bit-PC (aka amd64) or 32-bit-PC (aka i386).

Please keep in mind to use the correct architecture for all commands referred to below.

Un término genérico para clientes ligeros y estaciones de trabajo sin disco es cliente LTSP. LTSP es el acrónimo en Inglés para Linux Terminal Server Project.

Cliente ligero

A thin client setup enables an ordinary PC to function as an (X-)terminal, where all software runs on the LTSP server. This means that this machine boots via PXE without using a local client hard drive.

Estaciones de trabajo sin disco

A diskless workstation runs all software locally. The client machines boot directly from the LTSP server without a local hard drive. Software is administered and maintained on the LTSP server (inside of the LTSP chroot), but it runs on the diskless workstation. Home directories and system settings are stored on the server too. Diskless workstations are an excellent way of reusing older (but powerful) hardware with the same low maintenance cost as with thin clients.

LTSP defines 320MB as the default minimum amount of RAM for diskless workstations. If the amount of RAM is less, the machine will boot as thin client. The related LTSP parameter is FAT_RAM_THRESHOLD with the default value 300. So if (for example) the clients should only boot as diskless workstations if they have 1 GB RAM, add FAT_RAM_THRESHOLD=1000 to lts.conf (or set this in LDAP). Unlike workstations diskless workstations run without any need to add them with GOsa², because LDM is used to login and connect to the LTSP server.

LTSP client firmware

LTSP client boot will fail if the client's network interface requires a non-free firmware. A PXE installation can be used for troubleshooting problems with netbooting a machine; if the Debian Installer complains about a missing XXX.bin file then non-free firmware has to be added to the initrd used by LTSP clients.

En este caso, ejecute los siguientes comandos en un servidor LTSP.

# First get information about firmware packages
apt-get update && apt-cache search ^firmware-

# Decide which package has to be installed for the network interface(s). 
# Most probably this will be firmware-linux-nonfree.
# Things have to take effect in the LTSP chroot for architecture amd64.
ltsp-chroot -a amd64 apt-get update
ltsp-chroot -d -a amd64 apt-get -y -q install <package name>

# copy the new initrd to the server's tftpboot directory and update the NBD image.
ltsp-update-kernels
ltsp-update-image

Una manera más corta sería instalar todos los firmware disponibles y actualizar el directorio tftpboot, podría ejecutar:

/usr/share/debian-edu-config/tools/ltsp-addfirmware

(1)Open the file /opt/ltsp/amd64/etc/ltsp/update-kernels.conf with an editor
and replace the line
CMDLINE_LINUX_DEFAULT="init=/sbin/init-ltsp quiet"
with
CMDLINE_LINUX_DEFAULT="init=/sbin/init-ltsp LTSP_FATCLIENT=False quiet"
(2)Execute 'ltsp-chroot -a amd64 /usr/share/ltsp/update-kernels'
(3)Execute 'ltsp-update-kernels'
(4)Execute 'ltsp-update-image'

The PXE configuration is generated using the script debian-edu-pxeinstall. It allows some settings to be overridden using the file /etc/debian-edu/pxeinstall.conf with replacement values.

MENU PASSWD $4$NDk0OTUzNTQ1NTQ5$7d6KvAlVCJKRKcijtVSPfveuWPM$

#add the skole projects local repository
d-i     apt-setup/local1/repository string      http://example.org/debian stable main contrib non-free
d-i     apt-setup/local1/comment string         Example Software Repository
d-i     apt-setup/local1/source boolean         true
d-i     apt-setup/local1/key    string          http://example.org/key.asc

ln -s /var/lib/tftpboot/debian-edu/default-diskless.cfg /var/lib/tftpboot/pxelinux.cfg/default

ln -s /var/lib/tftpboot/debian-edu/default-thin.cfg /var/lib/tftpboot/pxelinux.cfg/default

 DEFAULT ltsp/amd64/vmlinuz initrd=ltsp/amd64/initrd.img nfsroot=10.0.2.10:/opt/ltsp/amd64 init=/sbin/init-ltsp boot=nfs ro quiet ipappend 2

The debian-edu-config package comes with a tool which helps in changing the network from 10.0.0.0/8 to something else. Have a look at /usr/share/debian-edu-config/tools/subnet-change. It is intended for use just after installation on the main server, to update LDAP and other files that need to be edited to change the subnet.

Note that changing to one of the subnets already used elsewhere in Debian Edu will not work. 192.168.0.0/24 and 192.168.1.0/24 are already set up as LTSP client networks. Changing to these subnets will require manual editing of configuration files to remove duplicate entries.

There is no easy way to change the DNS domain name. Changing it would require changes to both the LDAP structure and several files in the main server file system. There is also no easy way to change the host and DNS name of the main server (tjener.intern). To do so would also require changes to LDAP and files in the main-server and client file system. In both cases the Kerberos setup would have to be changed, too.

This documentation presumes that you have installed the Debian Edu main server and also a Debian Edu workstation. We presume that you have already created some users that can login and use the Debian Edu workstation. We also presume that you have a Windows workstation at hand, so you can test access to the Debian Edu main server from a Windows machine.

Después de la instalación del servidor principal de Debian Edu, \\TJENER debería ser visible desde computadoras con Windows. El dominio de Debian Edu en Windows es SKOLELINUX. Utilice una computadora con Windows (o Linux con smbclient) para explorar su entorno de red de Windows/Samba.

To use Samba on TJENER as a domain controller, your network's Windows workstations have to join the SKOLELINUX domain provided by the Debian Edu main server.

The first thing you have to do is to enable the SKOLELINUX\Administrator account. This account is not intended for day-to-day usage; its current main purpose is to add Windows machines to the SKOLELINUX domain. To enable this account log on to TJENER as the first user (created during main server installation) and run this command:

The password of SKOLELINUX\Administrator has been preconfigured during the main server's installation. Please use the system's root account when authenticating as SKOLELINUX\Administrator.

Once you are done with your administrative work make sure to disable the SKOLELINUX\Administrator account again:

Debian Edu ships some logon scripts that pre-configure the Windows user profile on first logon. When logging on to a Windows workstation that has joined the SKOLELINUX domain for the first time the following tasks are run:

Other tasks are run on every logon. For further information on this, please refer to the /etc/samba/netlogon folder on your Debian Edu main server.

stable/education-development is a meta package depending on a lot of programming tools. Please note that almost 2 GiB of disk space is needed if this package is installed. For more details (maybe to install only a few packages), see the Debian Edu Development packages page.

Warning: make sure you know the status of the laws about monitoring and restricting computer users' activities in your jurisdiction.

Some schools use control tools like Epoptes to supervise their students. See also: Epoptes Homepage.

To get full Epoptes support, these steps are required.

# Run on a combi server (and on each additional ltsp server):
apt update
apt install epoptes
ltsp-chroot -m --arch amd64 apt update
ltsp-chroot -m --arch amd64 apt install epoptes-client
ltsp-chroot -m --arch amd64 apt install ssvnc
ltsp-chroot -m --arch amd64 sed -i 's/test -f/#test -f/' /etc/init.d/epoptes-client 
ltsp-chroot -m --arch amd64 sed -i 's/grep -qs/#grep -qs/' /etc/init.d/epoptes-client 
# If diskspace matters, use 'ltsp-update-image -n' instead.
ltsp-update-image

Some schools use Squidguard or Dansguardian to restrict Internet access.

Casa usuario debería cambiar su contraseña usando GOsa². Para hacerlo, solo use un navegador web y vaya a https://www/gosa/.

Using GOsa² to change the password ensures that passwords for Kerberos (krbPrincipalKey), LDAP (userPassword) and Samba (sambaNTPassword and sambaLMPassword) are the same.

Changing passwords using PAM is working also at the GDM login prompt, but this will only update the Kerberos password, and not the Samba and GOsa² (LDAP) password. So after you changed your password at the login prompt, you really should also change it using GOsa².

All users can send and receive mails within the internal network; certificates are provided to allow TLS secured connections. To allow mail outside the internal network, the administrator needs to configure the mailserver exim4 to suit the local situation, starting with dpkg-reconfigure exim4-config.

Every user who wants to use Thunderbird needs to configure it as follows. For a user with username jdoe the internal email address is jdoe@postoffice.intern.

En clientes ligeros, pavucontrol o alsamixer (pero no kmix) puede ser usado para ajustar el volumen.

En otras computadoras (estaciones de trabajo, servidores LTSP y estaciones de trabajo sin disco), puede usar kmix o alsamixer.

Actualmente hay equipos locales en Noruega, Alemania, la región de Extremadura en España, Taiwan y Francia. Contruibdores y usuarias "aislados" existen en Grecia, Holanda, Japan y otros lugares.

El capítulo de soporte contiene explicaciones y enlaces a recursos localizados, ya que contruibuir y apoyar son dos lados de la misma moneda.

A nivel internacional estamos organizados en varios equipos que trabajan en distintas áreas.

Most of the time, the developer mailing list is our main medium for communication, though we have monthly IRC meetings on #debian-edu on irc.debian.org and even, less frequently, real gatherings, where we meet each other in person. New contributors should read our http://wiki.debian.org/DebianEdu/ArchivePolicy.

A good way to learn what is happening in the development of Debian Edu is to subscribe to the commit mailinglist.

¡Este documento necesita de su ayuda! No está finalizado todavía: si lo lee, notará varias lineas que dicen POR CORREGIR. Si usted saber lo que se necesita corregir, considere compartir su conocimiento con nosotros.

The source of the text is a wiki and can be edited with a simple webbrowser. Just go to http://wiki.debian.org/DebianEdu/Documentation/Buster/ and you can contribute easily. Note: a user account is needed to edit the pages; you need to create a wiki user first.

Another very good way to contribute and to help users is by translating software and documentation. Information on how to translate this document can be found in the translations chapter of this book. Please consider helping the translation effort of this book!

Lists of companies providing professional support are available from http://wiki.debian.org/DebianEdu/Help/ProfessionalHelp.

Copyright (C) 2007-2018 Holger Levsen < holger@layer-acht.org > and others, see the Copyright chapter for the full list of copyright owners.

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.

Version 2, June 1991

Copyright (C) 1989, 1991 Free Software Foundation, Inc. 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed.

0. This License applies to any program or other work which contains a notice placed by the copyright holder saying it may be distributed under the terms of this General Public License. The "Program", below, refers to any such program or work, and a "work based on the Program" means either the Program or any derivative work under copyright law: that is to say, a work containing the Program or a portion of it, either verbatim or with modifications and/or translated into another language. (Hereinafter, translation is included without limitation in the term "modification".) Each licensee is addressed as "you".

Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the Program (independent of having been made by running the Program). Whether that is true depends on what the Program does.

1. You may copy and distribute verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty; and give any other recipients of the Program a copy of this License along with the Program.

You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee.

2. You may modify your copy or copies of the Program or any portion of it, thus forming a work based on the Program, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions:

These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Program, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works. But when you distribute the same sections as part of a whole which is a work based on the Program, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it.

Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the intent is to exercise the right to control the distribution of derivative or collective works based on the Program.

In addition, mere aggregation of another work not based on the Program with the Program (or with a work based on the Program) on a volume of a storage or distribution medium does not bring the other work under the scope of this License.

3. You may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following:

The source code for a work means the preferred form of the work for making modifications to it. For an executable work, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the executable. However, as a special exception, the source code distributed need not include anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component itself accompanies the executable.

If distribution of executable or object code is made by offering access to copy from a designated place, then offering equivalent access to copy the source code from the same place counts as distribution of the source code, even though third parties are not compelled to copy the source along with the object code.

4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance.

5. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Program or its derivative works. These actions are prohibited by law if you do not accept this License. Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it.

6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions. You may not impose any further restrictions on the recipients' exercise of the rights granted herein. You are not responsible for enforcing compliance by third parties to this License.

7. If, as a consequence of a court judgment or allegation of patent infringement or for any other reason (not limited to patent issues), conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not distribute the Program at all. For example, if a patent license would not permit royalty-free redistribution of the Program by all those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Program.

If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is intended to apply and the section as a whole is intended to apply in other circumstances.

It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system, which is implemented by public license practices. Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system; it is up to the author/donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice.

This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License.

8. If the distribution and/or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Program under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded. In such case, this License incorporates the limitation as if written in the body of this License.

9. The Free Software Foundation may publish revised and/or new versions of the General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns.

Each version is given a distinguishing version number. If the Program specifies a version number of this License which applies to it and "any later version", you have the option of following the terms and conditions either of that version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of this License, you may choose any version ever published by the Free Software Foundation.

10. If you wish to incorporate parts of the Program into other free programs whose distribution conditions are different, write to the author to ask for permission. For software which is copyrighted by the Free Software Foundation, write to the Free Software Foundation; we sometimes make exceptions for this. Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally.

NO WARRANTY

11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.

12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

END OF TERMS AND CONDITIONS

To activate a specific translation, boot using locale=ll_CC.UTF-8 as a boot option, where ll_CC.UTF-8 is the locale name you want. To activate a given keyboard layout, use the keyb=KB option where KB is the desired keyboard layout. Here is a list of commonly used locale codes:

La lista completa de los códigos locales esta disponible en /usr/share/i18n/SUPPORTED, pero únicamente los locales con UTF-8 son soportados por la imagen «live». No todas las traducciones locales tienen instalación. Las distribuciones de teclados pueden ser encontradas en /usr/share/keymaps/i386/.

The image would be (but currently isn't) available via FTP, HTTP or rsync from ftp.skolelinux.org under cd-buster-live/.

The following Debian Edu releases were made further in the past:

A complete and detailed overview about older releases is contained in Appendix C of the Jessie manual; or see the related release manuals on the release manuals page.