bglug-it / server-config Goto Github PK

Please ensure modifications to the standard templates for NethServer are applied through template-custom method and not overriding the default template.

Installing a new server with only the interfaces renamed (as wan0 and lan0) leads to a broken server after all the configuration phases.

Forcing roles/settings at the beginning of the setup phase should avoid this breakage.

In domain.yml was indicated mirror_host: it.archive.ubuntu.com but the scripts generated a sources.list with archive.ubuntu.com.

System Administrator installing the server should configure the network cards before starting to use our playbooks. So if in the playbooks we assume wan0 interface as DHCP-enabled interface and this doesn't match (as it could be), we obtain a completely non working red interface, breaking the whole playbooks.

Please remove code to reconfigure the wan0 interface and let the sysadmin configure it by hand before launching the playbooks.

The admin user (which should be Domain Administrator and should be permitted to access anywhere the system) cannot access the user profile folders of users.

Please envision a method to limit quota for users.

Correct permissions should be 0440 for files within /etc/sudoers.d. Please correct.

For some strange reasons, latest versions of Ansible does not download the repository before applying the local.yml playbook.

Workaround

You can fix it manually downloading the first time the repository from the server with the following:

git clone -b <branch> git://pdc.<yourdomain>/client-pull-installation.git /var/lib/<yourdomain>/config

And then relaunching /var/lib/<yourdomain>/bin/ansible-pull.sh / restarting the client.

Please envision a method to locally provide gpg keys for repositories that will be added to local mirror, to improve independence on external networking on installation.

Please correctly configure the ssh access for admin user to be able to use sudo without further authentication.

A user can disable networking on any PC of the solution, isolating the client and not allowing domain users to access to the client.
To fix, an administrator has to log in with local user (bglug), then re-enable the network stack.

We need a way to disallow the user to disable networking on NetworkManager.

The sources.list file from the repoconfig tag does not honor the ansible_local.domain.mirror_host variable, thus breaking apt stack when mirror_host was set differently from default.

Please include within the preseeds for installation the following packages:

• ubuntu-restricted-extras (flashplayer, codecs for mp3 and other formats)
• geogebra
• gnome-search-tool
• ocrfeeder
• openshot
• freeplane
• gtk-recordmydesktop
• vokoscreen
• librecad (?)
• *-lts-xenial (LTS Hardware Enablement Stack from Canonical/Ubuntu), only on 14.04.

Also, please remove the following packages:

• webbrowser-app