That could work, they now have a Draytek router which allows up to 4 SSID's and we could set the las

That could work, they now have a Draytek router which allows up to 4 SSID's and we could set the last one to be enabled when re-provisioning.
Though is there really that much danger having the Kickstart configured on a pendrive, when it's kept securely in the owners office drawer?

AlextricalOP•12/3/23, 3:30 PM

I suppose I'm aiming to do the equivalent of as close as possible to a preconfigured OS deployment. Back in the XP days, Sysprep was amazing for getting a monoculture of PC's setup identically with minimal input of the technicians. I'm hoping to make something as elegant as that for the Makerspace, Ideally, insert a USB key, reboot, select HDD to install to and select install. Once done ideally have WiFi, Admin and Kiosk user accounts created, all the software installed and configured ready to go, including connection to the central owncloud file share

j0rge•12/3/23, 3:32 PM

I think @Caleb Woodbine wants something similar, maybe you can compare notes

j0rge•12/3/23, 3:36 PM

Once the tooling lands the oci support that shouldn't be a problem. I was doing that at an edu with the full automation, automated pxe install, zero config other than turning the machine on. That was 2006, so it'll be at least that good, hahah.

Jj0rge Once the tooling lands the oci support that shouldn't be a problem. I was doing ...

AlextricalOP•12/3/23, 3:54 PM

Actually it may be possible to do a PXE install, as I'm going to be setting up a local storage server in some form. Though WiFi only could be the killer for that idea

Jj0rge I think @Caleb Woodbine wants something similar, maybe you can compare notes

AlextricalOP•12/3/23, 3:54 PM

Good shout, thank you for the heads up. Hopefully we can collaborate

j0rge•12/3/23, 3:55 PM

the stick will come first, this is the tooling we're going to be using: https://github.com/osbuild/osbuild

j0rge•12/3/23, 3:55 PM

upstream is in the middle of adding a bunch of the features/fixes needed

AAlextrical That could work, they now have a Draytek router which allows up to 4 SSID's and ...

akdev•12/3/23, 4:23 PM

Yeah I would say so, it’s just a password laying down somewhere in plaintext

akdev•12/3/23, 4:23 PM

Anyway if you plan to have recurring provisioning you should definitely setup a separate network for that process

akdev•12/3/23, 4:23 PM

Separate ssid/vlan isolated from production traffic

Aakdev Yeah I would say so, it’s just a password laying down somewhere in plaintext

AlextricalOP•12/3/23, 4:24 PM

The password is encrypted in the Kickstart, though I'm not sure how hard it would be to crack it

akdev•12/3/23, 4:25 PM

The key would be with the encrypted password

akdev•12/3/23, 4:25 PM

Unless you require manual intervention to decrypt it

AlextricalOP•12/3/23, 4:25 PM

Ah, good point

AlextricalOP•12/3/23, 4:26 PM

It's trying to find the right amount of work to secure a setup of 10 machines in a small Makerspace. Having a dedicated network is probably a bit overkill for the workshop setup

akdev•12/3/23, 4:27 PM

10 machines you could also just use the usb approach

akdev•12/3/23, 4:27 PM

And then destroy it right after

akdev•12/3/23, 4:27 PM

If it’s 1 usb

Aakdev And then destroy it right after

AlextricalOP•12/3/23, 4:44 PM

Hmm, yeah erasing the USB is probably the best way to go then. I will get a script to inject the Kickstart and prompt the admin to enter the Root password and WiFi credentials

AlextricalOP•12/3/23, 4:45 PM

Out of curiosity is there a central account database fedora can use similar to Active directory to synchronise user accounts (i.e. one place to change an admin password instead of per machine)

AlextricalOP•12/3/23, 4:46 PM

Hec, even something like windows live login would be awesome

akdev•12/3/23, 4:47 PM

FreeIPA

Aakdev FreeIPA

AlextricalOP•12/3/23, 4:55 PM

Will add that to the list of reading materials, thank you

AAlextrical Out of curiosity is there a central account database fedora can use similar to A...

Bigpod•12/3/23, 5:05 PM

Active directory, freeipa, so on there are few options

BBigpod Active directory, freeipa, so on there are few options

AlextricalOP•12/3/23, 5:08 PM

If I can enroll an admin account to FreeIPA running on a Docker based server, with minimal human interaction for the workstation OS install, that's the route that's probably best. I'm hoping a single point to change the Admin/Root password across all machines would be pretty useful

AlextricalOP•12/3/23, 5:10 PM

I'm familiar enough with setting up a Windows domain, just doing something similar on Linux is rather new to me

Just want to fully get rid of M$ rubbish from my life and the communities I'm helping out, where possible

AAlextrical Good shout, thank you for the heads up. Hopefully we can collaborate

le_melon•12/3/23, 6:58 PM

Howdy! I've got some public discussion over here
https://universal-blue.discourse.group/t/building-a-bootable-qcow2-virtual-disk-image-from-an-oci-ostree-image/67

Universal Blue

Building a bootable qcow2 virtual disk image from an OCI OSTree image

Hi folks

I’m with ii.nz

and am trying to build bootable USB drives for things like education for classes and shared team development environments. Recently I came across GitHub - osbuild/osbuild-deploy-container, where a qcow2 image can be built, given an OCI OSTree image (i.e: a Universal Blue image). I built a qcow2 image for my u imag...

Lle_melon Howdy! I've got some public discussion over here https://universal-blue.discours...

AlextricalOP•12/4/23, 12:19 PM

Awesome, Is the intended application you are aiming to achieve something similar to a LiveBoot (On par with Windows to Go?)

AlextricalOP•12/4/23, 1:48 PM

Can anyone advise how to apply a RPM file hosted in GitHub into the Recipe.yml

I'm trying to get "STL Thumb" intergrated into the system.

AlextricalOP•12/4/23, 2:11 PM

To answer my own question, Looking at the Bling for devpod shows how to use rpm-ostree to install a RPM file directly from a URL

AlextricalOP•12/4/23, 3:52 PM

So. It's installed, as it shows as a conflict if I try to install from the updated OS image, woop. However I cannot get the command to run from terminal, presumably wherever it's installed to isn't the correct location.

The counter problem is it's also an application I've had to compile as a rpm too, so that is also a likely place for the issue. Why do rabbit holes always go so deep in projects

AAlextrical Awesome, Is the intended application you are aiming to achieve something similar...

le_melon•12/4/23, 6:40 PM

I think so!
Not completely familiar with Windows to Go but it sounds familiar.

Pretty much an install preloaded with a default user and default software for a specific purpose, being an education resource

Lle_melon I think so! Not completely familiar with Windows to Go but it sounds familiar. ...

AlextricalOP•12/4/23, 8:04 PM

I would be happy to collaborate, it could be useful for some makerspaces out there wanting to allow users to use their own laptops with a pre-loaded system too.

Making an atomic Live USB boot device with persistent storage should be pretty useful to some people ^_^

AAlextrical I would be happy to collaborate, it could be useful for some makerspaces out the...

le_melon•12/4/23, 8:11 PM

That sounds great!

I'm keeping track of progress here
https://github.com/ii/uedu/issues/1 and the discourse as linked before.
Also talking to folks in the image-builder channel of the Fedora project Matrix
https://matrix.to/#/#image-builder:fedoraproject.org
Some of which are here too I think

GitHub

Goals · Issue #1 · ii/uedu

build a bootable Fedora/OSTree based image include the following software Scratch Sonic Pi Minecraft Forge an IDE? include a PDF or webpage for course instructions webserver? current issues include...

Matrix - Decentralised and secure communication

You're invited to talk on Matrix. If you don't already have a client this link will help you pick one, and join the conversation. If you already have one, this link will help you join the conversation

AlextricalOP•12/4/23, 8:34 PM

at the moment im going down a rabbit hole trying to get a STL thumbnail generator working. (good news, it works for Fedora KDE Workstation, but not Kinoite)

j0rge•12/4/23, 9:36 PM

@bsherman tomorrow is 37 day but if we wanna start nuking from orbit asap that wouldn't hurt either

j0rge•12/4/23, 9:36 PM

(It's the only way to be sure)

j0rge•12/4/23, 9:38 PM

@beekabop I tried the new release-please action in kera and it broke with the major upgrade

j0rge•12/4/23, 9:38 PM

I was hoping we could skip all that breaking change stuff

beekabop•12/4/23, 9:39 PM

wow

j0rge•12/4/23, 9:42 PM

oh we just need

release-type: simple

release-type: simple

j0rge•12/4/23, 9:43 PM

that one was set to node

beekabop•12/4/23, 9:43 PM

i see! good to know

j0rge•12/4/23, 9:44 PM

we should be good with the dependabot ones

beekabop•12/4/23, 9:56 PM

can we change the type in the pr itself, as suggest change, and commit, or do we need to set it afterwards in a new pr

beekabop•12/4/23, 9:56 PM

i see some are type node, and some are simple already

beekabop•12/4/23, 10:46 PM

well anyhows i have submitted release-type: simple pr's everywhere

j0rge•12/4/23, 10:57 PM

ok I'll check when I get back from dinner unless someone else gets to them first. The kera one failed but I think it's for another reason.

beekabop•12/4/23, 10:57 PM

oh otherwise just close all the pr's lol

j0rge•12/4/23, 11:00 PM

we jsut need to test a release in one

That could work, they now have a Draytek router which allows up to 4 SSID's and we could set the las

Similar Threads

Similar Threads

Similar Threads