IRC chat logs for #ltsp on irc.libera.chat (webchat)


Channel log from 27 March 2013   (all times are UTC)

00:00* vagrantc makes a note to tone down the description of ltsp-client* packages
00:01
<gbaman>
:)
00:03
ok, so install the packages, edit boot file, add ssh keys, check ldm server and boot pi...
00:03
them it should work?
00:03
<vagrantc>
approximately ... might be some glitch missing :)
00:04
<gbaman>
well, at least you cant brick a pi
00:04
and it takes 3 mins to reload rasbian back onto the sd card
00:04
<vagrantc>
oh, the rpi kernel may not have aufs support
00:04
<gbaman>
...
00:05
it can never be that easy...
00:05
<vagrantc>
the one shipped by the foundation had a lot of features disabled ... that's why i ended up getting the linux-image-*-rpi packages available for raspbian
00:06
but those may require older firmwares, since they're linux version 3.2 vs. 3.6 (i think that's what they are now)
00:07
<gbaman>
so... this means... it will either work or will never work?
00:07
<vagrantc>
it's a work in progress :)
00:07
maybe i'll take a look at the state of things this weekend
00:08* vagrantc never did document running LTSP on the RPI like promised
00:08
<gbaman>
i need to present this to a local school in about 2 weeks time
00:08
persuade them to get raspberry pis
00:08
<vagrantc>
everyone's always in a rush...
00:08
<gbaman>
and this is something they will complain about
00:09
important coursework on raspberry pi sd cards never goes well
00:10
could one not just recompile the kernal with aufs enabled?
00:10
or is it a little more complicated than that?
00:11
take into account i am from a windows/mac environment and been using th pi as my intro to linux
00:11
so new to all this
00:12
<vagrantc>
you could recompile the kernel till you get all the needed features ... that'll take some long cycles.
00:13
<gbaman>
cycles?
00:13
<vagrantc>
you won't get it right the first try, and takes hours for each build
00:13
a slow development cycle
00:15
<gbaman>
what about?
00:15
<vagrantc>
compiling the kernel
00:15
<gbaman>
http://rpitc.blogspot.co.uk/p/kernel-rebuild.html?m=1
00:15
sorry, link wasnt copying
00:19warren_2 has left IRC (warren_2!~warren@2607:f278:4101:12:5054:ff:fe94:fc1a, Ping timeout: 245 seconds)
00:20komunista has left IRC (komunista!~slavko@87.244.209.121, Quit: Leaving.)
00:22
<gbaman>
is that looking right?
00:22
<vagrantc>
sorry, don't have time to go over more right now
00:24
<gbaman>
ok, well i will try the ltsp-client stuff first, if it fails i will try that guide, if it then fails i will come back.
00:24gentgeen__ has left IRC (gentgeen__!~kevin@c-98-239-202-150.hsd1.pa.comcast.net, Ping timeout: 272 seconds)
00:24
<gbaman>
and if it works, i will come back and let you know
00:25
anyways,i am off, thanks vagrantc, you have been very helpful
00:26gbaman has left IRC (gbaman!~gbaman@host81-130-88-58.in-addr.btopenworld.com, Quit: gbaman)
00:33warren has joined IRC (warren!~warren@fedora/wombat/warren)
00:43vagrantc has left IRC (vagrantc!~vagrant@freegeek/vagrantc, Quit: leaving)
00:51Enslaver has left IRC (Enslaver!~Enslaver@c-98-196-42-169.hsd1.tx.comcast.net, Ping timeout: 276 seconds)
01:34warren has left IRC (warren!~warren@fedora/wombat/warren, Ping timeout: 264 seconds)
01:41Enslaver has joined IRC (Enslaver!~Enslaver@c-98-196-42-169.hsd1.tx.comcast.net)
01:59monteslu_ has joined IRC (monteslu_!~monteslu@ip68-109-174-213.ph.ph.cox.net)
02:02monteslu has left IRC (monteslu!~monteslu@ip68-109-174-213.ph.ph.cox.net, Ping timeout: 252 seconds)
02:59Enslaver has left IRC (Enslaver!~Enslaver@c-98-196-42-169.hsd1.tx.comcast.net, Ping timeout: 245 seconds)
03:34andygraybeal_ has left IRC (andygraybeal_!~andy@h139.67.213.151.dynamic.ip.windstream.net, Ping timeout: 272 seconds)
04:06staffencasa has left IRC (staffencasa!~staffenca@8-220.ptpg.oregonstate.edu, Ping timeout: 260 seconds)
04:11Enslaver has joined IRC (Enslaver!~Enslaver@c-98-196-42-169.hsd1.tx.comcast.net)
04:36alkisg has joined IRC (alkisg!~alkisg@ubuntu/member/alkisg)
05:10alkisg has left IRC (alkisg!~alkisg@ubuntu/member/alkisg, Quit: Leaving.)
05:15warren has joined IRC (warren!~warren@fedora/wombat/warren)
05:22highvoltage has left IRC (highvoltage!~highvolta@ubuntu/member/highvoltage, Ping timeout: 260 seconds)
05:23highvoltage has joined IRC (highvoltage!~highvolta@ubuntu/member/highvoltage)
05:28highvoltage has left IRC (highvoltage!~highvolta@ubuntu/member/highvoltage, Remote host closed the connection)
05:28highvoltage has joined IRC (highvoltage!~highvolta@ubuntu/member/highvoltage)
05:33highvoltage has left IRC (highvoltage!~highvolta@ubuntu/member/highvoltage, Remote host closed the connection)
05:34highvoltage has joined IRC (highvoltage!~highvolta@ubuntu/member/highvoltage)
05:39highvoltage has left IRC (highvoltage!~highvolta@ubuntu/member/highvoltage, Remote host closed the connection)
05:39highvoltage has joined IRC (highvoltage!~highvolta@ubuntu/member/highvoltage)
05:44highvoltage has left IRC (highvoltage!~highvolta@ubuntu/member/highvoltage, Ping timeout: 264 seconds)
05:44highvoltage has joined IRC (highvoltage!~highvolta@ubuntu/member/highvoltage)
05:49highvoltage has left IRC (highvoltage!~highvolta@ubuntu/member/highvoltage, Ping timeout: 264 seconds)
05:50highvoltage has joined IRC (highvoltage!~highvolta@ubuntu/member/highvoltage)
05:54highvoltage has left IRC (highvoltage!~highvolta@ubuntu/member/highvoltage, Ping timeout: 246 seconds)
05:55highvoltage has joined IRC (highvoltage!~highvolta@ubuntu/member/highvoltage)
06:00highvoltage has left IRC (highvoltage!~highvolta@ubuntu/member/highvoltage, Remote host closed the connection)
06:00highvoltage has joined IRC (highvoltage!~highvolta@ubuntu/member/highvoltage)
06:05highvoltage has left IRC (highvoltage!~highvolta@ubuntu/member/highvoltage, Ping timeout: 256 seconds)
06:06highvoltage has joined IRC (highvoltage!~highvolta@ubuntu/member/highvoltage)
06:28work_alkisg has left IRC (work_alkisg!~alkisg@plinet.ioa.sch.gr, Ping timeout: 256 seconds)
06:32work_alkisg has joined IRC (work_alkisg!~alkisg@150.140.47.65)
06:52work_alkisg is now known as alkisg
07:22khildin has joined IRC (khildin!~khildin@ip-83-134-213-227.dsl.scarlet.be)
07:54dobber_ has joined IRC (dobber_!~dobber@89.190.199.210)
08:09andygraybeal_ has joined IRC (andygraybeal_!~andy@h139.67.213.151.dynamic.ip.windstream.net)
08:11dievel has joined IRC (dievel!~dievel@2-229-104-66.ip196.fastwebnet.it)
08:34ltspuser_49 has joined IRC (ltspuser_49!bcfc1ba5@gateway/web/freenode/ip.188.252.27.165)
09:27mikkel has joined IRC (mikkel!~mikkel@80-71-132-15.u.parknet.dk)
09:36Gremble has joined IRC (Gremble!~Ben@cpc35-aztw23-2-0-cust207.18-1.cable.virginmedia.com)
10:16Phantomas has joined IRC (Phantomas!~Phantomas@ubuntu/member/phantomas)
10:30dievel has left IRC (dievel!~dievel@2-229-104-66.ip196.fastwebnet.it, Remote host closed the connection)
10:31Phantomas has left IRC (Phantomas!~Phantomas@ubuntu/member/phantomas, Quit: Leaving.)
10:31Phantomas has joined IRC (Phantomas!~Phantomas@ubuntu/member/phantomas)
10:46Phantomas has left IRC (Phantomas!~Phantomas@ubuntu/member/phantomas, Ping timeout: 252 seconds)
11:02Phantomas has joined IRC (Phantomas!~Phantomas@ubuntu/member/phantomas)
11:34Phantomas has left IRC (Phantomas!~Phantomas@ubuntu/member/phantomas, Ping timeout: 240 seconds)
11:36JuJuBee has joined IRC (JuJuBee!~mike_knic@24-148-112-102.ip.mhcable.com)
11:36JuJuBee has left IRC (JuJuBee!~mike_knic@24-148-112-102.ip.mhcable.com)
11:46[GuS] has joined IRC ([GuS]!~MysT@213-117-16-190.fibertel.com.ar)
11:46[GuS] has joined IRC ([GuS]!~MysT@unaffiliated/gus/x-663402)
11:49alkisg is now known as work_alkisg
11:49gentgeen__ has joined IRC (gentgeen__!~kevin@c-98-239-202-150.hsd1.pa.comcast.net)
11:52Phantomas has joined IRC (Phantomas!~Phantomas@ubuntu/member/phantomas)
11:53work_alkisg has left IRC (work_alkisg!~alkisg@150.140.47.65, Ping timeout: 245 seconds)
12:10work_alkisg has joined IRC (work_alkisg!~alkisg@plinet.ioa.sch.gr)
12:13ltspuser_81 has joined IRC (ltspuser_81!c31772ca@gateway/web/freenode/ip.195.23.114.202)
12:13
<ltspuser_81>
Hi
12:13
I want to mount a windows share at user's login
12:13
I'm using Ubuntu 12.04
12:13
and a ldm session
12:14
I want to know if it's possible to add the command to a file where I have the login information
12:14
when the user insert the credentials at the greeter I want to use that and mount the share
12:15
it's possible?
12:15
where I can add the mount command?
12:24Gremble has left IRC (Gremble!~Ben@cpc35-aztw23-2-0-cust207.18-1.cable.virginmedia.com, Quit: I Leave)
12:27Phantomas has left IRC (Phantomas!~Phantomas@ubuntu/member/phantomas, Ping timeout: 252 seconds)
12:27dievel has joined IRC (dievel!~dievel@host190-176-static.240-95-b.business.telecomitalia.it)
12:30
<dievel>
Hi Hyperbyte. Dumb question...can my LTSP act as a a gateway between the thin client network and the "local" network?
12:31
<laurense>
my edubuntu installation did that automatically
12:33
hmm, maybe i am incorrect
12:33
don't mind me
12:33* laurense sneaks away
12:37
<Hyperbyte>
dievel, sure.
12:37
<ltspuser_81>
where are the LDM init scripts?
12:38
the ones that starts with I, S or K depending on when you want them to run
12:38
<Hyperbyte>
dievel, you have two network cards in your server, configured for both networks?
12:38
ltspuser_81, /usr/share/ldm/ in the client chroot.
12:38
<ltspuser_81>
thks Hyperbyte
12:38
did you saw my last question?
12:39
<Hyperbyte>
Yep.
12:39
<ltspuser_81>
do you know anything about that?
12:39
<Hyperbyte>
Nope.
12:39
<ltspuser_81>
ok
12:39
<Hyperbyte>
Else I would've answered. :)
12:39
<ltspuser_81>
thks anyway ;)
12:39
:)
12:39
<Hyperbyte>
You could ask your question again later, when alkisg is around.
12:39
He's the LTSP oracle.
12:39
<ltspuser_81>
ok
12:39
I will try
12:39
I know :P
12:42Phantomas has joined IRC (Phantomas!~Phantomas@ubuntu/member/phantomas)
12:43
<ltspuser_81>
what it means the I,X,S and K on /uss/share/ldm/rc.d/ of the chroot?
12:44
<dievel>
Hyperbyte, I have basically the default configuration. One interface on a local lan and the second one (eth1) on a separate network with the thin client.
12:46
On the Thin client network I have a printer that I should make available to the lan clients.
12:47
Normally I can do this but I'm not sure it's wise in a LTSP environment :)
12:49ltspuser_81 has left IRC (ltspuser_81!c31772ca@gateway/web/freenode/ip.195.23.114.202, Quit: Page closed)
12:57
<Hyperbyte>
dievel, I don't think it will matter
12:58
But, have you considered just making the LTSP server a print server?
13:02
<dievel>
No, I did not considered that. But in the same way, a notebook that connect to the Thin Client network is asked to reach the Internet.
13:02ltspuser_50 has joined IRC (ltspuser_50!5182583a@gateway/web/freenode/ip.81.130.88.58)
13:02
<dievel>
So the needed routing is in both ways :)
13:02ltspuser_50 has left IRC (ltspuser_50!5182583a@gateway/web/freenode/ip.81.130.88.58, Client Quit)
13:02
<Hyperbyte>
dievel, well you could just enable ipv4 routing. Since you said you can do this normally, I figure you know how?
13:03
<dievel>
Hyperbyte, I see /proc/sys/net/ipv4/ip_forward is already at "1". Is there something else?
13:03
<Hyperbyte>
Routing is always both ways, by the way, network communication involves a lot of negotiating between devices back-and-forth. One way routing is not useful. :)
13:04
dievel, shouldn't be. Can you ping hosts in network B from network A?
13:05
<dievel>
Hyperbyte You are right :) I'm doing some test now.
13:06
<Hyperbyte>
If you can't ping from A to B and vice-versa, the hosts probably do not have the correct default route gateway set.
13:07ltspuser_70 has joined IRC (ltspuser_70!5182583a@gateway/web/freenode/ip.81.130.88.58)
13:08
<ltspuser_70>
hey guys, where is the lts.conf meant to be stored when ltsp-client is installed on an already in place OS?
13:08ltspuser_22 has joined IRC (ltspuser_22!2ee12088@gateway/web/freenode/ip.46.225.32.136)
13:08
<ltspuser_22>
hi
13:09
i want no know about xp booting via ltsp
13:09
<dievel>
Hyperbyte...well...I need more time because I have also another firewall between me and my LTSP. Nothing is easy :) As usual!
13:09
<ltspuser_22>
is there any commercial product based on ltsp?
13:10komunista has joined IRC (komunista!~slavko@87.244.209.121)
13:11ltspuser_22 has left IRC (ltspuser_22!2ee12088@gateway/web/freenode/ip.46.225.32.136, Client Quit)
13:36alkisg has joined IRC (alkisg!~alkisg@ubuntu/member/alkisg)
13:37ltspuser_70 has left IRC (ltspuser_70!5182583a@gateway/web/freenode/ip.81.130.88.58, Quit: Page closed)
13:37gbaman has joined IRC (gbaman!5182583a@gateway/web/freenode/ip.81.130.88.58)
13:38
<gbaman>
anyone had experience with an LTSP fat client on an installed OS, aka not netbooting?
13:39designbybeck has joined IRC (designbybeck!~quassel@x175y164.angelo.edu)
13:39
<gbaman>
using the ltsp-client packages
13:41jammcq has joined IRC (jammcq!~jam@c-69-245-75-255.hsd1.mi.comcast.net)
13:41
<jammcq>
good morning friends
13:41
<gbaman>
anyone?
13:45
<alkisg>
Hi jammcq
13:45
gbaman: it's just a matter of a few lines in the initramfs
13:45
But that's not what you want
13:45
What you want is central authentication + home, not central configuration from lts.conf etc etc
13:46
So you're basically looking for setting up NFS /home, and for sbalneav's libpam_sshauth
13:46
That one will allow you to use server-side users, locally
13:46
<gbaman>
I think that is what I want...
13:46
<alkisg>
And for handling updates etc, I suggest you look at cluster-ssh
13:47
libpam_sshauth is a very new project, but it does exactly what you need
13:47
So I'd suggest you start with NFS /home first, and then follow the LTSP wiki page for libpam_sshauth
13:48ltspuser_41 has joined IRC (ltspuser_41!c122cd02@gateway/web/freenode/ip.193.34.205.2)
13:50
<alkisg>
The LTSP approach to what you're saying, would be to (1) netboot a client, (2) copy i386.img locally, and (3) use the local i386.img copy for subsequent boots, for low-speed networks
13:50
<sbalneav>
Morning all
13:50
<ltspuser_41>
I create Two Images and ı want to delete one of them , any one have an Idea how to delete ımage after creatıon wıth "ltsp-build-client-
13:51
<sbalneav>
ltspuser_41: Using rm?
13:52
<ltspuser_41>
rm -r the dırectory that conatine the image
13:52
<sbalneav>
jammcq: Morning
13:52
alkisg: Morning.
13:56
<gbaman>
alkisg, the reason I want to do it this way is I am wanting network users (like roaming profiles) for a classroom of raspberry pis
13:56
raspberry pis cant netboot
13:56
<jammcq>
sbalneav: Scotty !!!!!!!!!!!!!!!!!
13:57
<gbaman>
so building the OS for them and having it on their sd card is much smarter
13:57
<alkisg>
Hey Scotty
13:57awilliams has left IRC (awilliams!~awilliams@unaffiliated/mistik1, Ping timeout: 256 seconds)
13:57
<alkisg>
gbaman: what local storage do PIs have?
13:57* ogra_ is sure the RPi can netboot just as well as a beagleboard or a pandaboard ... you just need kernel and initrd locally
13:57
<gbaman>
And I have already looked into setting up network users with LDAP and samba etc but it is looking crazy complicated, LTSP already has a perfect system for it
13:57
they run of an sd card
13:58
<alkisg>
Which you pay separately?
13:58
<gbaman>
you mean buy seperately? yes
13:58
<alkisg>
Then it's not worth it, network root is better
13:58
<ogra_>
alkisg, it works the same way as any NANDless arm device
13:59monteslu__ has joined IRC (monteslu__!~monteslu@ip68-109-174-213.ph.ph.cox.net)
13:59
<ogra_>
put kernel and ltsp'ified initrd on the SD and be done
13:59* gbaman is still very new to linux and network root means nothing to him :)
13:59
<alkisg>
gbaman: how many clients?
13:59
<gbaman>
20ish
13:59
<ogra_>
(and set the proper boot options on the kernel cmdline)
13:59
<gbaman>
between 15-20
13:59
also, their ethernet ports are 10/100, not gigabit
13:59
<alkisg>
Do you have a server with a gigabit NIC, and some Gb space, and a switch with 1 gigabit port/
13:59
?
14:00
<gbaman>
yes
14:00
but
14:00
we dont want thin clients
14:00
<alkisg>
LTSP supports fat clients too
14:00
<gbaman>
just in case you were going that direction
14:00
fat clients with the pi?
14:00
<alkisg>
Sure
14:00
<dievel>
Hyperbyte, it works. Just to let you know. Thx ;)
14:00
<gbaman>
well, that is what I want, but the image to be stored on the pi
14:01
the entire OS on the pi
14:01
<alkisg>
Why? It'll be slower
14:01
<gbaman>
we want to use local power and local hardware
14:01
thin clients wouldnt work
14:01
<alkisg>
LTSP fat clients use local power and local hardware
14:01
<gbaman>
I also dont want to be hammering the network each time they turn on
14:02
<alkisg>
(although pi is very low-spec'ed to be a fat client, or for local os installations, but that's another story)
14:02
<gbaman>
they will be turned on all at one time
14:02monteslu_ has left IRC (monteslu_!~monteslu@ip68-109-174-213.ph.ph.cox.net, Ping timeout: 248 seconds)
14:02
<alkisg>
Yeah, it'll still be faster to netboot them than to boot them locally
14:02
<gbaman>
and the pi already has a slow boot
14:02
?
14:03
I would doubt netbooting a classroom of pis would be faster than local booting them
14:03
the server hardware available wont be fast
14:03
<alkisg>
The last real benchmarks I did with fat clients vs local installations: local boot 50 secs, netboot 12 secs. For a classroom of 12 fat clients.
14:03
That was with Ubuntu 10.04, now 12.04 is a bit slower.
14:04[GuS] has left IRC ([GuS]!~MysT@unaffiliated/gus/x-663402, Quit: Konversation terminated!)
14:04
<alkisg>
You don't need a fast server for fat clients. Just a bit of RAM to cache the i386.img image.
14:04
<gbaman>
raspberry pi is arm
14:04
<alkisg>
Right
14:04
<gbaman>
and runs rasbian (based off debian)
14:04
<alkisg>
Yup
14:05
<gbaman>
and some will have 256mb of ram
14:05
<alkisg>
Yup
14:05
<gbaman>
sigh
14:05
<alkisg>
And its CPU is very slow
14:05
<gbaman>
yes
14:05
<alkisg>
So they're not suited for local installations
14:05
They're much better as ltsp thin clients, but you don't want that
14:05
So, you're just comparing local installations vs ltsp fat clients
14:06
Which is the same thing, except that ltsp fat clients need less ram because they have some services disabled,
14:06
<gbaman>
Ok, lets just say I would prefer not to transfer the os across the network
14:06
<alkisg>
and have faster disk access compared to sd cards
14:06
<gbaman>
what are my options
14:06
<alkisg>
The one we were talking before I mentioned ltsp fat clients.
14:07
raspbian, nfs, and one of (ldap/nis/samba/libpam_sshauth)
14:07
But ltsp fat clients will get you better performance, and easier installation
14:07
so... up to you.
14:07
<gbaman>
vagrantc was talking with me yesterday on an idea he had
14:08
http://irclogs.ltsp.org./
14:08
about 20 mins before midnight we started
14:08
talking
14:08
so it is right at the top of the log
14:08
that involved installing ltsp-client packages on the pi
14:09
<alkisg>
No point in doing that, you only need /home + authentication, you're not looking for central configuration with lts.conf (and ltsp has nothing more to offer to you if you're not doing netbooting)
14:10
<gbaman>
other than its simplicity
14:10
<alkisg>
It's more hard to do it than setting up NIS or LDAP.
14:10
Or, libpam_sshauth
14:10
Because you're not using a stock ltsp installation, you're customizing it
14:10
<gbaman>
I have yet to be able to find any help on other of them
14:11
*either
14:11
<alkisg>
Btw did you actually use raspbian on a pi? Were you satisfied by its performance?
14:11
<gbaman>
I always use it
14:11
it is fine
14:11
great to have all the debian packages
14:11
and i normally overclock it anyway
14:12
<alkisg>
What's the output of this command? su -; hdparm -tT /dev/sda
14:12
<gbaman>
what does it do?
14:12
<alkisg>
It benchmarks the SD card
14:12
If it's less than 20 MB/sec, then LTSP fat clients will be faster.
14:13
(it might be something else than sda there, e.g. mmcp0something
14:13
<gbaman>
I am getting
14:13
su: Authentication failure -bash: hdparm: command not found
14:13
<alkisg>
Install hdparm
14:13
<gbaman>
I have not set up the root account on the pi, it is rather weirdly set up
14:14
<||cw>
it doesn't have sudo?
14:14
<gbaman>
when i do that i get
14:14
sudo: -: command not found -bash: hdparm: command not found
14:15
:)
14:15
<alkisg>
What do you do when you want to install programs?
14:15
(04:11:53 μμ) gbaman: great to have all the debian packages ==> ok, install the "hdparm" package :)
14:16
<gbaman>
sudo apt-get install hdparm
14:16
just ran it, installing now
14:17
<alkisg>
sudo blkid
14:17
This will tell you the device of / (root)
14:17
Then, sudo hdparm -tT /dev/<device of root>
14:18
<gbaman>
running
14:18
Timing cached reads: 320 MB in 2.00 seconds = 159.96 MB/sec Timing buffered disk reads: 52 MB in 3.00 seconds = 17.31 MB/sec
14:19
That is one of my smaller slower cards that I use for testing
14:19
but I doubt the others would be much faster
14:23
so... What is wrong with vagrantcs idea?
14:24
<alkisg>
17 MB/sec is about the same as ltsp fat clients with your network setup
14:25
<gbaman>
Main problem is, what he told me didnt exactly work
14:25
<alkisg>
With ltsp fat client also offering a single point to maintain the image, and less cost, and no need to worry about writes wearing out the sd cards
14:25
<gbaman>
:)
14:25
<alkisg>
The problem with vagrantc's idea is that you get the ...worse of both worlds
14:25awilliams has joined IRC (awilliams!~awilliams@unaffiliated/mistik1)
14:26
<alkisg>
You have to maintain local installations AND customize ltsp...
14:26
Anyways, decide what you want to do first and then you can ask for help on specific issues
14:29
<ltspuser_41>
haw many ımage can we create on one server
14:29
and how t swıtch between them for test
14:30
because ı delete ı386.img and ı create another ımage wıth kıosk name
14:30
<alkisg>
No limit. One quick way to switch between them is to rename the /opt/ltsp/xxx and /var/lib/tftpboot/ltsp/xxx dirs. Otherwise use a pxelinux menu.
14:30staffencasa has joined IRC (staffencasa!~staffenca@8-220.ptpg.oregonstate.edu)
14:30
<ltspuser_41>
thanks alkısg
14:30
<laurense>
alkisg: do you have a link to documentation abouw a pxelinux menu
14:30
<alkisg>
laurense: the syslinux wiki has full documentation
14:32alkisg has left IRC (alkisg!~alkisg@ubuntu/member/alkisg, Quit: Leaving.)
14:32komunista has left IRC (komunista!~slavko@87.244.209.121, Ping timeout: 240 seconds)
14:33alkisg has joined IRC (alkisg!~alkisg@ubuntu/member/alkisg)
14:33
<gbaman>
back, sorry about that
14:34
ok alkisg, say I was to go with a network version, the one you have been recommending
14:34
how do I go about doing that
14:34
<alkisg>
Ask vagrantc about configuring ltsp for raspbian
14:34
I think he plans on writing a wiki page about it anyway
14:35
There's nothing special there then, it's just a usual ltsp fat clients setup
14:44
<gbaman>
ok, I will try and grab him later
14:45
he told me to add the servers ssh keys onto the raspberry pi, I am completly new to this, where do I find them on the server?
14:45
I am going to try his method and see if it works anyway, good to have multiple options
14:47
<alkisg>
You'll need much customizations to make ltsp boot from local media, it's not just the ssh keys
14:48
<gbaman>
he told me to grab the ltsp-client package, then add some bootargs then add the servers ssh keys, then change a few things in the lts.conf file
14:48
<alkisg>
Patch the initramfs scripts, update-initramfs, modify kernel command line, modify init-ltsp.d scripts etc
14:48
Right, you'll need someone to take a couple of hours and guide you through all this if you're inexperienced with linux/ltsp
14:53
<gbaman>
why is nothing ever easy :)
14:53
I will try and grab vagrantc later today then
14:54
and get his opinion
14:55
We need some sort of roaming profile system for this classroom of raspberry pis that once set up is easy to maintain and add users, change passwords or remove users. So far I have found no easy way to do this or a guide anywhere on how to do it
14:59||cw has left IRC (||cw!~chris@phpgroupware/cw, Remote host closed the connection)
15:01
<Hyperbyte>
gbaman, that's what LTSP is. Problem is that LTSP is made for net booting, and raspberry pi doesn't support that. :)
15:01
<gbaman>
can the netbooting part not be turned off?
15:02
skip the netbooting
15:02
then have the pi authenticate like normal to the server
15:03
I am sure we arnt the only school that would significantly benefit from something like that
15:03||cw has joined IRC (||cw!~chris@gateway.wilsonmfg.com)
15:03||cw has joined IRC (||cw!~chris@phpgroupware/cw)
15:04
<alkisg>
That's libpam_sshauth
15:04
You don't need the other ltsp parts then
15:05
<gbaman>
how much setup is required for libpam_sshauth?
15:05
and what else is required
15:05
<Hyperbyte>
alkisg, didn't you also say you could do this with grub and ipxe?
15:05
<alkisg>
ipxe is x86 specific
15:05
<Hyperbyte>
alkisg, and just make the client netboot capable?
15:05
<alkisg>
Won't run on arm
15:05
<Hyperbyte>
Oh
15:05
:|
15:05
<alkisg>
You need a local kernel + initramfs
15:05ltspuser_41 has left IRC (ltspuser_41!c122cd02@gateway/web/freenode/ip.193.34.205.2, Ping timeout: 245 seconds)
15:10alkisg has left IRC (alkisg!~alkisg@ubuntu/member/alkisg, Quit: Leaving.)
15:24Phantomas has left IRC (Phantomas!~Phantomas@ubuntu/member/phantomas, Quit: Leaving.)
15:36dobber_ has left IRC (dobber_!~dobber@89.190.199.210, Remote host closed the connection)
15:45telex has left IRC (telex!~telex@freeshell.de, Remote host closed the connection)
15:46telex has joined IRC (telex!~telex@freeshell.de)
15:53highvolt1ge has joined IRC (highvolt1ge!~highvolta@196-215-197-79.dynamic.isadsl.co.za)
15:55highvoltage has left IRC (highvoltage!~highvolta@ubuntu/member/highvoltage, Ping timeout: 240 seconds)
15:57alkisg has joined IRC (alkisg!~alkisg@ubuntu/member/alkisg)
15:59andygraybeal_ has left IRC (andygraybeal_!~andy@h139.67.213.151.dynamic.ip.windstream.net, Quit: Ex-Chat)
15:59andygraybeal_ has joined IRC (andygraybeal_!~andy@h139.67.213.151.dynamic.ip.windstream.net)
16:07Phantomas has joined IRC (Phantomas!~Phantomas@ubuntu/member/phantomas)
16:31dievel has left IRC (dievel!~dievel@host190-176-static.240-95-b.business.telecomitalia.it, Quit: Leaving)
16:41designbybeck has left IRC (designbybeck!~quassel@x175y164.angelo.edu, Read error: Connection reset by peer)
16:42alkisg has left IRC (alkisg!~alkisg@ubuntu/member/alkisg, Quit: Leaving.)
16:48gvy has left IRC (gvy!~mike@altlinux/developer/mike, Quit: mv /proc/self /dev/train)
17:19komunista has joined IRC (komunista!~slavko@87.244.209.121)
17:19designbybeck has joined IRC (designbybeck!~quassel@x175y164.angelo.edu)
17:23vagrantc has joined IRC (vagrantc!~vagrant@75-150-46-245-Oregon.hfc.comcastbusiness.net)
17:23vagrantc has joined IRC (vagrantc!~vagrant@freegeek/vagrantc)
17:28alexqwesa__ has joined IRC (alexqwesa__!~alex@109.172.12.47)
17:29alexqwesa_ has left IRC (alexqwesa_!~alex@109.172.12.47, Ping timeout: 264 seconds)
17:32alexqwesa__ has left IRC (alexqwesa__!~alex@109.172.12.47, Client Quit)
17:43alkisg has joined IRC (alkisg!~alkisg@ubuntu/member/alkisg)
17:52
<alkisg>
Hyperbyte: did you put "implement story removals" in your TODO list? Any planned dates for that? :D :D
18:01Phantomas1 has joined IRC (Phantomas1!~Phantomas@ubuntu/member/phantomas)
18:01Phantomas has left IRC (Phantomas!~Phantomas@ubuntu/member/phantomas, Disconnected by services)
18:01Phantomas1 is now known as Phantomas
18:31Phantomas has left IRC (Phantomas!~Phantomas@ubuntu/member/phantomas)
18:39gbaman has left IRC (gbaman!5182583a@gateway/web/freenode/ip.81.130.88.58, Ping timeout: 245 seconds)
18:43Parker955_Away is now known as Parker955
18:45monteslu__ is now known as monteslu
18:53
<sbalneav>
vagrantc, alkisg, got a sec?
18:54
<alkisg>
sbalneav: sure, shoot!
18:54
<sbalneav>
So, for ssh key authentication, here's my thoughts
18:54
you wouldn't do, as far as I can see, ssh key authentication, except for "autologin" accounts that are installed in the chroot.
18:55
Since the key will have to be installed in the chroot somewhere anyway
18:55
so, here, in my mind, is a rough flowchart:
18:55
1) User enters userid
18:55
2) Check if user is available locally
18:55
3) Check if they have a $USER_HOME/.id_dsa,id_rsa,or what have you
18:56
4) If they do: -> public key authentication
18:56
5) if not -> remote password authentication
18:56
Seem reasonable?
18:56
<alkisg>
Is that in shell or in .c?
18:57
With a "pre-ssh" phase in shell, we could do fancy things
18:57
<sbalneav>
That would be in C in the pam_sshauth. Creating the keys and stuff for localdevs comes later in shell.
18:57
<alkisg>
The DM gets username/pass and passes it to pam
18:57
Then pam generates a pressh event
18:58
At that point, shell scripts ask ltspd for something like "an lts.conf for the login event"
18:58
Which would contain the appropriate server if load balancing is used, or the appropriate server for that user, etc etc,
18:58
And might even contain ssh keys
18:59
The pressh scripts can then prepare whatever libpam_sshauth needs for the real login phase
19:00
<sbalneav>
That would require changes to the dm. Pam doesn't work that way, unfortunately. Once you pass control to pam via the module, you're in, and can't drop out until the stack's finished.
19:00
<alkisg>
We don't want to get out of the stack
19:00
Just execute shell scripts as part of the stack
19:01
They should be finished in less than half a sec, and return to libpam_sshauth so that it continues with the real ssh login try, to create the socket etc
19:04
<vagrantc>
sbalneav: right now, i just use a shared ssh key for all accounts in /root/.ssh/id_rsa or whatever
19:04
since ldm runs as root
19:04
i wouldn't want to have to configure it with each user.
19:05
<alkisg>
You could put that under [Default], no problem there
19:05
In the pressh phase we can also implement LDM_ALLOW_USER
19:05
I.e. tell libpam that we don't want to allow specified users, so that it doesn't try ssh'ing at all
19:05
And I'm sure we'll find a lot of other things that are easier to implement in pressh
19:07
<sbalneav>
vagrantc: OK, so if I included a "ssh_key_file=" pam command line argument, would that work?
19:09* vagrantc ponders.
19:09
<sbalneav>
Should, that duplicates what you're doing now.
19:10
<vagrantc>
what i'm doing now isn't very flexible :)
19:11
but i don't really see a good way to improve upon it
19:11
<sbalneav>
Well, how about having both your way and my way? :)
19:12
If we supply the pam command line option, use that
19:12
if not, check the local user
19:12
if not -> password.
19:12
That gives you both options.
19:14
<vagrantc>
if there's already a local account with a local key, what are we getting by trying to connect with pam_sshauth?
19:15
also, it seems like just using whatever conventions (open)ssh is using, rather than hard-coding various key files ...
19:16
in a typical ssh connection, i think it usually looks for keys in ~/.ssh/id_* in a particular order, tries each one of those, and if that fails, falls back to password auth
19:17
that way we can support or not support whatever key types ssh supports without code changes to pam_sshauth
19:18
and if the keys fail, fall back to password auth ...
19:18
also, could see it being useful to support passworded keys
19:28
<alkisg>
It's easy to autogenerate unique+static ssh keys for each client based on e.g. dmidecode output, plus some salt.
19:28dead_inside has joined IRC (dead_inside!~dead_insi@76.75.3.174)
19:29
<alkisg>
Also, a pressh script can store keys and other configuration wherever libpam_sshauth would look for them, the filenames/paths don't matter much there...
19:29
<dead_inside>
hey guys, on FAT clients, has anyone tried running the screensaver as a remoteapp to get around the fact running locally can not authenticate
19:31
<vagrantc>
sbalneav: sorry i don't have a lot of time at the moment to give it proper thinkover
19:33|Paradox| has left IRC (|Paradox|!~iamparado@c-71-206-132-62.hsd1.va.comcast.net, Read error: No route to host)
19:33|Paradox| has joined IRC (|Paradox|!~iamparado@c-71-206-132-62.hsd1.va.comcast.net)
19:39mgariepy_ has joined IRC (mgariepy_!mgariepy@nat/revolutionlinux/x-nmgxgpwohqrruqgp)
19:39mgariepy has left IRC (mgariepy!mgariepy@ubuntu/member/mgariepy, Quit: Leaving)
19:39mgariepy_ has left IRC (mgariepy_!mgariepy@nat/revolutionlinux/x-nmgxgpwohqrruqgp, Read error: Connection reset by peer)
19:40dsugar100 has left IRC (dsugar100!~dsugar@columbia.tresys.com, Remote host closed the connection)
19:47Phantomas has joined IRC (Phantomas!~Phantomas@ubuntu/member/phantomas)
19:48mgariepy has joined IRC (mgariepy!mgariepy@ubuntu/member/mgariepy)
19:52mgariepy has left IRC (mgariepy!mgariepy@ubuntu/member/mgariepy, Remote host closed the connection)
19:53mgariepy has joined IRC (mgariepy!mgariepy@ubuntu/member/mgariepy)
20:01Gremble has joined IRC (Gremble!~Ben@cpc35-aztw23-2-0-cust207.18-1.cable.virginmedia.com)
20:32khildin has left IRC (khildin!~khildin@ip-83-134-213-227.dsl.scarlet.be, Quit: I'm gone, bye bye)
20:33mgariepy has left IRC (mgariepy!mgariepy@ubuntu/member/mgariepy, Remote host closed the connection)
20:34mgariepy has joined IRC (mgariepy!mgariepy@ubuntu/member/mgariepy)
20:46Gremble has left IRC (Gremble!~Ben@cpc35-aztw23-2-0-cust207.18-1.cable.virginmedia.com, Quit: I Leave)
20:50alexqwesa__ has joined IRC (alexqwesa__!~alex@109.172.12.47)
20:52ghc has joined IRC (ghc!~iamparado@c-71-206-132-62.hsd1.va.comcast.net)
20:52|Paradox| has left IRC (|Paradox|!~iamparado@c-71-206-132-62.hsd1.va.comcast.net, Read error: Connection reset by peer)
20:53ghc is now known as |Paradox|
20:56ltspuser_00 has joined IRC (ltspuser_00!5038468a@gateway/web/freenode/ip.80.56.70.138)
20:57
<Enslaver>
Question, how big is debian/ubuntu's chroot for thin clients?
20:58
<ltspuser_00>
Hello i have a qestion about ltsp. Can somebody tell me how to instal a program on a client?
21:00
Is somebody there ?
21:00
<vagrantc>
Enslaver: i think a default thin client chroot is 0.8-1GB, approximately
21:00
ltspuser_00: typically you install programs on the server, if using thin clients
21:01
ltspuser_00: but do be patient, people may not respond immediately
21:01
<ltspuser_00>
If i install a program on the server it dus not run on the client.
21:02
<vagrantc>
ltspuser_00: are you using fat clients?
21:02
<ltspuser_00>
Yes
21:02
<vagrantc>
ltspuser_00: ltsp-chroot -m apt-get install YOURPROGRAM (at least with debian/ubuntu variants)
21:03
ltspuser_00: what distro and verison?
21:03
it may also require running ltsp-update-image
21:03
<ltspuser_00>
Is there not a simpel way to do this in the normal interface of ubuntu?
21:04
<vagrantc>
if you're running ltsp-pnp, you can just install it on the server and rebuild the image with ltsp-update-image --cleanup / (or is it ltsp-update-image / --cleanup)
21:05
<ltspuser_00>
12.04
21:05
<vagrantc>
ltspuser_00: do you have a directory in /opt/ltsp/amd64 or /opt/ltsp/i386 ?
21:06
<ltspuser_00>
i386
21:06
<vagrantc>
ltspuser_00: so yeah, you'll need to use the commandline to install packages
21:07
and then run ltsp-update-image
21:07
i.e. sudo ltsp-chroot -m apt-get install firefox ; sudo ltsp-update-image
21:08
<ltspuser_00>
I did that and then it make's a new image for the amd 64.
21:08
<vagrantc>
replace firefox with whatever you want to install in the image.
21:08
ltspuser_00: maybe try: ltsp-update-image -a i386
21:08
<ltspuser_00>
I dont want to replace that
21:08
<vagrantc>
ltspuser_00: or ltsp-update-image /opt/ltsp/i386
21:09
<ltspuser_00>
That's sems to work.
21:09
It is not a simple thing to work with.
21:10
<vagrantc>
the ltsp-pnp approach might work better for you, then.
21:11
you build an image of your server exported to the clients
21:12
<ltspuser_00>
I want to use it for a simple smal internet cafe that we use on ower foundation. but i am wondering if it is the raid thing for this .
21:12
<vagrantc>
it is very flexible, but isn't 100% point-and-click.
21:14
<ltspuser_00>
I am not so good with the terminal yet. I think thats the problem.
21:15Parker955 is now known as Parker955_Away
21:19
<ltspuser_00>
I will try some more. and if i run in to problems I will put them on this channel. Thanks for now.
21:21ltspuser_00 has left IRC (ltspuser_00!5038468a@gateway/web/freenode/ip.80.56.70.138, Quit: Page closed)
21:23dead_inside has left IRC (dead_inside!~dead_insi@76.75.3.174, Quit: Leaving...)
21:33
<vagrantc>
Enslaver: i can get real numbers for you in a bit...
21:37bobby_C has joined IRC (bobby_C!~bobby@188.20.161.210)
21:38mikkel has left IRC (mikkel!~mikkel@80-71-132-15.u.parknet.dk, Quit: Leaving)
21:45
<alkisg>
Enslaver: ubuntu 12.04 thin => 631 MB uncompressed, 284 compressed (gzip), wheezy thin => 749 uncompressed, 261 compressed (xz)
21:48komunista has left IRC (komunista!~slavko@87.244.209.121, Quit: Leaving.)
21:49
<vagrantc>
or someone else will.
22:04
782 /opt/ltsp/amd64
22:04
771 /opt/ltsp/i386
22:04
both uncompressed for wheezy..
22:04
which is a little different from alkisg's numbers
22:05* alkisg used the cleanup on those chroots, exporting them via nbd
22:05
<vagrantc>
ah, mine was: du -smc
22:06
probably save some space turning them into NBD images.
22:06vagrantc has left IRC (vagrantc!~vagrant@freegeek/vagrantc, Quit: leaving)
22:07vagrantc has joined IRC (vagrantc!~vagrant@75-150-46-245-Oregon.hfc.comcastbusiness.net)
22:07vagrantc has joined IRC (vagrantc!~vagrant@freegeek/vagrantc)
22:18Phantomas has left IRC (Phantomas!~Phantomas@ubuntu/member/phantomas)
22:18alkisg has left IRC (alkisg!~alkisg@ubuntu/member/alkisg, Quit: Leaving.)
22:46gbaman has joined IRC (gbaman!~gbaman@host81-130-88-58.in-addr.btopenworld.com)
22:48alexqwesa__ has left IRC (alexqwesa__!~alex@109.172.12.47, Quit: Хана X'ам !!!)
22:48alexqwesa__ has joined IRC (alexqwesa__!~alex@109.172.12.47)
23:05awilliam1 has joined IRC (awilliam1!~awilliams@unaffiliated/mistik1)
23:06awilliams has left IRC (awilliams!~awilliams@unaffiliated/mistik1, Ping timeout: 240 seconds)
23:06awilliam1 is now known as awilliams
23:10bobby_C has left IRC (bobby_C!~bobby@188.20.161.210, Ping timeout: 240 seconds)
23:20gbaman has left IRC (gbaman!~gbaman@host81-130-88-58.in-addr.btopenworld.com, Ping timeout: 240 seconds)
23:22gbaman has joined IRC (gbaman!~gbaman@host81-130-88-58.in-addr.btopenworld.com)