ekklesiaandClaude Opus 5
926668dc9b
A real room upgraded to 0.1.45 and came up as stock Debian Plasma with the old Waybar across the top, mako still catching notifications, and a lock screen on an account that has no password. The cause was one line, and it was in the lab: the harness handed the session under test XDG_CONFIG_DIRS by hand, so every result it had ever produced was a result about a machine somebody had already configured. On a machine SDDM starts the session through PAM, PAM does not read /etc/environment.d, and Debian's own plasma-workspace env.sh then set the variable from scratch — so the classroom's settings directory was not in the cascade at all. No layout, no lock policy, no Kiosk restrictions. The settings now arrive the way Plasma delivers them, through a file in /etc/xdg/plasma-workspace/env. Around that: the look and feel is immutable on its own key so a stale profile cannot answer for it; the palette is composed into the package, because naming a colour scheme does not produce one and the dark bar had been coming from a technician's hand; the desktop reset converges another desktop's appearance state and keeps the room's own; and classroom-migrate stops, deactivates and masks the old shell, including the D-Bus activation that brought mako back while the panel was down — found only by killing the panel on a migrated machine. device.conf loses COMPOSITOR and comes off the hyprland channel, which would otherwise have handed the room the experiment back. The lab stops flattering the package: it restarts the machine, lets SDDM actually autologin, and asks a fresh install and a machine upgraded from the Hyprland package the same sixty questions. Both answer identically, twice, and the panel still comes back from eight SIGKILLs. Co-Authored-By: Claude Opus 5 <[email protected]>
77 lines
2.8 KiB
Plaintext
77 lines
2.8 KiB
Plaintext
# Ekklesia Classroom session policy.
|
|
#
|
|
# Installed to /etc/xdg/kdeglobals, where it is the bottom of Plasma's
|
|
# configuration cascade. Every group is marked [$i] — immutable — so a
|
|
# teacher, a stray click or a misbehaving application cannot override it
|
|
# from the user's own configuration. This is KDE's own Kiosk mechanism:
|
|
# nothing here is achieved by deleting a binary or hiding a menu entry.
|
|
#
|
|
# Lifting a restriction for maintenance is a one-line edit to this file
|
|
# followed by a session restart, which is what makes the appliance
|
|
# serviceable rather than merely locked.
|
|
|
|
[KDE Action Restrictions][$i]
|
|
# No way to reach a shell, a command line, or an arbitrary program.
|
|
action/kdesktop_rmb=false
|
|
action/kwin_rmb=false
|
|
action/openwith=false
|
|
action/switch_user=false
|
|
action/start_new_session=false
|
|
action/lock_screen=false
|
|
run_command=false
|
|
shell_access=false
|
|
logout=false
|
|
# The desktop and the panel are a fixed part of the appliance.
|
|
editable_desktop_icons=false
|
|
editable_bookmarks=false
|
|
movable_toolbars=false
|
|
plasma/plasmashell/unlockedDesktop=false
|
|
plasma-desktop/scripting_console=false
|
|
# Nothing in the classroom should offer to file a bug or open a manual.
|
|
action/help_report_bug=false
|
|
action/help_about_kde=false
|
|
action/help_contents=false
|
|
|
|
# Not immutable. Marking this group [$i] froze the colour scheme so hard
|
|
# that `classroom-theme light` changed the running session and then lost
|
|
# the change at the next start — measured. These are defaults for a room
|
|
# that has no settings application anyway; the lock belongs on the
|
|
# restrictions above, not on the palette.
|
|
[General]
|
|
ColorScheme=EkklesiaDark
|
|
AccentColor=79,179,168
|
|
# The teacher's own words are not decoration: keep text rendering plain
|
|
# and readable rather than styled.
|
|
XftAntialias=true
|
|
XftHintStyle=hintslight
|
|
XftSubPixel=rgb
|
|
|
|
[KDE]
|
|
widgetStyle=Breeze
|
|
# One key, marked immutable on its own rather than by freezing the group.
|
|
#
|
|
# This is the name plasmashell reads to decide which layout script builds a
|
|
# panel for a session that has none, so it decides whether the room comes
|
|
# up as the classroom or as stock Plasma. A migrated machine reached this
|
|
# experiment with a user profile that had been through other desktops, and
|
|
# a user's own kdeglobals sits ahead of every system directory in the
|
|
# cascade. Immutable here means no leftover profile, and no stray write by
|
|
# a settings dialog that does not exist in this room anyway, can answer
|
|
# that question differently. The palette below stays writable, because
|
|
# classroom-theme is allowed to change it.
|
|
LookAndFeelPackage[$i]=org.ekklesia.classroom.desktop
|
|
SingleClick=false
|
|
AnimationDurationFactor=0.5
|
|
|
|
[Icons]
|
|
Theme=breeze-dark
|
|
|
|
[KFileDialog Settings][$i]
|
|
Allow Expansion=false
|
|
Automatically select filename extension=true
|
|
Show Bookmarks=false
|
|
Show Full Path=false
|
|
Show Inline Previews=false
|
|
Show Speedbar=false
|
|
Sort directories first=true
|