Re: k12ltsp.org site is dead/for sale
Jim Kinney <[email protected]> Sat, 09 Sep 2017 09:12:46 -0400
| Newsgroups | gmane.linux.redhat.k12osn |
|---|---|
| Message-ID | <[email protected]> |
--===============7034499148886067222== Content-Type: multipart/alternative; boundary="----E92Q635DI4EFDV8VYESX9ENEP7HQMC" Content-Transfer-Encoding: 7bit ------E92Q635DI4EFDV8VYESX9ENEP7HQMC Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Lars, I made a very manual first run and got a working client=2E Lots of bugs to= work out=2E I have a very specific need to have selinux running in enforci= ng mode on the clients=2E Yeah, that blew up in my face! Lot's to do on tha= t=2E=20 Biggest fail is using an installer initrd image=2E That will need to be re= placed with a version that is more secured=2E The ftp root needs MUCH work= =2E Another specific need for me is user authentication from ipa=2E That wi= ll probably not be super hard to "bake in" but will need some more research= so I know where all the pieces need to be placed=2E I suspect each client = will need an autoenroll process=2E The challenge there is there's no mechan= ism in ipa to store certs for multiple machines in the same file on a share= d root filesystem=2E So a client will need a sequence of personality mounts= on boot to get detailed content=2E That will require some scripting on the= server end to manage and deploy that structure=2E The other part I'm not s= ure about is /dev/random pool depletion=2E It's essential to my security ne= eds for encryption tokens (kerberos keys, ssl/tls communications of huge mo= unted filesystems) and multiple users each eat up randomness for each conne= ction (yes=2E I also need encryption between thin clients and home server)= =2E Applications: this was a generic yum group install "server with gui" chroo= t of centos 7 for the clients to run on=2E All the k12 stuff was not there = but could be easily added=2E Sorry actual details are non existent here=2E My notes on this are at work= and I'm just on my phone, slurping coffee on a Saturday morning=2E More, m= uch more, later=2E Hmm=2E I need to get the site loaded onto my server for data sharing=2E Pr= obably not this weekend=2E Spent most of last weekend migrating to a new we= b server and have all of those normal weekend chores still to do=2E Oh=2E Other than a pile of old laptops, mac book pro and some Thinkpads, I= 'm looking to use these for clients: https://www=2Eamazon=2Ecom/gp/aw/d/B06VW53L88 On September 8, 2017 6:26:49 PM EDT, Lars Schade <lars=2Eschade@berlin=2Ed= e> wrote: >Jim, > >have you been successful with your TC-setup under CentOS 7? >Do you care to share/document your experience - I would appreciate! > >Regards, Lars > >_______________________________________________ >K12OSN mailing list >K12OSN@redhat=2Ecom >https://www=2Eredhat=2Ecom/mailman/listinfo/k12osn >For more info see <http://www=2Ek12os=2Eorg> --=20 Sent from my Android device with K-9 Mail=2E All tyopes are thumb related = and reflect authenticity=2E ------E92Q635DI4EFDV8VYESX9ENEP7HQMC Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <html><head></head><body>Lars,<br> <br> I made a very manual first run and got a working client=2E Lots of bugs to= work out=2E I have a very specific need to have selinux running in enforci= ng mode on the clients=2E Yeah, that blew up in my face! Lot's to do on= that=2E <br> <br> Biggest fail is using an installer initrd image=2E That will need to be re= placed with a version that is more secured=2E The ftp root needs MUCH work= =2E Another specific need for me is user authentication from ipa=2E That wi= ll probably not be super hard to "bake in" but will need some mor= e research so I know where all the pieces need to be placed=2E I suspect ea= ch client will need an autoenroll process=2E The challenge there is there&#= 39;s no mechanism in ipa to store certs for multiple machines in the same f= ile on a shared root filesystem=2E So a client will need a sequence of pers= onality mounts on boot to get detailed content=2E That will require some sc= ripting on the server end to manage and deploy that structure=2E The other = part I'm not sure about is /dev/random pool depletion=2E It's essen= tial to my security needs for encryption tokens (kerberos keys, ssl/tls com= munications of huge mounted filesystems) and multiple users each eat up ran= domness for each connection (yes=2E I also need encryption between thin cli= ents and home server)=2E<br> <br> Applications: this was a generic yum group install "server with gui&q= uot; chroot of centos 7 for the clients to run on=2E All the k12 stuff was = not there but could be easily added=2E<br> <br> Sorry actual details are non existent here=2E My notes on this are at work= and I'm just on my phone, slurping coffee on a Saturday morning=2E Mor= e, much more, later=2E<br> <br> Hmm=2E I need to get the site loaded onto my server for data sharing=2E Pr= obably not this weekend=2E Spent most of last weekend migrating to a new we= b server and have all of those normal weekend chores still to do=2E<br> <br> Oh=2E Other than a pile of old laptops, mac book pro and some Thinkpads, I= 'm looking to use these for clients:<br> <br> <a href=3D"https://www=2Eamazon=2Ecom/gp/aw/d/B06VW53L88">https://www=2Eam= azon=2Ecom/gp/aw/d/B06VW53L88</a><br><br><div class=3D"gmail_quote">On Sept= ember 8, 2017 6:26:49 PM EDT, Lars Schade <lars=2Eschade@berlin=2Ede>= wrote:<blockquote class=3D"gmail_quote" style=3D"margin: 0pt 0pt 0pt 0=2E8= ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"> <pre class=3D"k9mail">Jim,<br /><br />have you been successful with your T= C-setup under CentOS 7?<br />Do you care to share/document your experience = - I would appreciate!<br /><br />Regards, Lars<br /><br /><hr /><br />K12OS= N mailing list<br />K12OSN@redhat=2Ecom<br /><a href=3D"https://www=2Eredha= t=2Ecom/mailman/listinfo/k12osn">https://www=2Eredhat=2Ecom/mailman/listinf= o/k12osn</a><br />For more info see <<a href=3D"http://www=2Ek12os=2Eorg= ">http://www=2Ek12os=2Eorg</a>><br /></pre></blockquote></div><br> -- <br> Sent from my Android device with K-9 Mail=2E All tyopes are thumb related = and reflect authenticity=2E</body></html> ------E92Q635DI4EFDV8VYESX9ENEP7HQMC-- --===============7034499148886067222== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ K12OSN mailing list [email protected] https://www.redhat.com/mailman/listinfo/k12osn For more info see <http://www.k12os.org> --===============7034499148886067222==--