ekklesiaandClaude Opus 5
6e4786f448
The install list loses the dock, the window helper, the Chrome window arbiter, the notification wrapper, the compositor and bar configs and the GTK icon and stylesheet machinery, and gains a look and feel package, a colour scheme, window rules, Kiosk restrictions and two supervised user services. Dependencies follow: Plasma and SDDM in, sway, waybar, mako and gtk-layer-shell out. Co-Authored-By: Claude Opus 5 <[email protected]>
91 lines
4.0 KiB
Docker
91 lines
4.0 KiB
Docker
# Classroom v2 test lab: a full Debian 13 Plasma 6 desktop, running under
|
|
# systemd, inside a container. It exists because the development host is
|
|
# itself a VM with no /dev/kvm, so a real virtual machine cannot be created
|
|
# here. See docs/classroom-v2-experiment.md.
|
|
#
|
|
# docker build -f tools/lab/Dockerfile.plasma -t classroom-v2-lab:plasma .
|
|
# tools/lab/lab up
|
|
#
|
|
FROM debian:trixie
|
|
|
|
ENV DEBIAN_FRONTEND=noninteractive
|
|
ENV container=docker
|
|
|
|
# systemd, so the session is supervised the way it would be on a real machine
|
|
RUN apt-get update && apt-get install -y systemd systemd-sysv dbus dbus-user-session \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# The desktop under test.
|
|
RUN apt-get update && apt-get install -y \
|
|
plasma-desktop plasma-workspace kwin-wayland \
|
|
plasma-nm plasma-pa \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Software rendering, X11 apps, fonts, and the tools the lab drives it with.
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
libgl1-mesa-dri libglx-mesa0 mesa-utils-bin libegl-mesa0 \
|
|
xwayland \
|
|
fonts-noto-core fonts-dejavu-core fonts-liberation \
|
|
kde-cli-tools qdbus-qt6 \
|
|
sway swaybg grim wtype foot \
|
|
python3 python3-gi gir1.2-gtk-3.0 \
|
|
curl ca-certificates gnupg procps psmisc less vim-tiny socat jq \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
RUN useradd -m -u 1000 -s /bin/bash classroom \
|
|
&& usermod -aG video,render,audio classroom \
|
|
&& passwd -d classroom \
|
|
&& mkdir -p /run/user/1000 && chown classroom:classroom /run/user/1000 \
|
|
&& systemctl enable systemd-logind
|
|
|
|
# Linger so the classroom user's systemd instance starts with the container,
|
|
# which is exactly how the appliance would run.
|
|
RUN mkdir -p /var/lib/systemd/linger && touch /var/lib/systemd/linger/classroom
|
|
|
|
STOPSIGNAL SIGRTMIN+3
|
|
CMD ["/sbin/init"]
|
|
|
|
# Screenshots. KWin's org.kde.KWin.ScreenShot2 only answers callers it
|
|
# recognises by path, and Spectacle is one of them, so this is the
|
|
# sanctioned way to capture a KWin session that has no outer compositor.
|
|
RUN apt-get update && apt-get install -y --no-install-recommends kde-spectacle \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# The classroom's browser, from Google's own repository, the same way a
|
|
# classroom machine gets it. Testing the browser question on a different
|
|
# browser would not answer it.
|
|
RUN apt-get update && apt-get install -y --no-install-recommends gnupg \
|
|
&& install -d -m 0755 /etc/apt/keyrings \
|
|
&& curl -fsS https://dl.google.com/linux/linux_signing_key.pub \
|
|
| gpg --dearmor --batch --yes --output /etc/apt/keyrings/google-chrome.gpg \
|
|
&& echo 'deb [arch=amd64 signed-by=/etc/apt/keyrings/google-chrome.gpg] https://dl.google.com/linux/chrome/deb/ stable main' \
|
|
> /etc/apt/sources.list.d/google-chrome.list \
|
|
&& apt-get update && apt-get install -y --no-install-recommends google-chrome-stable \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# VLC, CUPS and PipeWire: the rest of the classroom's runtime, so the
|
|
# desktop is judged with the room's real applications in it.
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
vlc vlc-plugin-base cups cups-client cups-filters \
|
|
pipewire pipewire-pulse wireplumber pulseaudio-utils \
|
|
libnotify-bin \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# seatd, so wlroots can open input devices without a login session. The lab
|
|
# compositor needs a seat before it can offer the session under test a
|
|
# pointer to be clicked with.
|
|
RUN apt-get update && apt-get install -y --no-install-recommends seatd \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# What a classroom would not install.
|
|
#
|
|
# plasma-desktop recommends a welcome tour, a software centre, a phone
|
|
# pairing daemon and a backup tool. None of them belong in a room a teacher
|
|
# walks into, and a classroom package would simply not pull them in; the lab
|
|
# removes them so it is testing the same desktop.
|
|
RUN DEBIAN_FRONTEND=noninteractive apt-get purge -y \
|
|
plasma-welcome plasma-discover plasma-discover-common \
|
|
plasma-discover-backend-fwupd kdeconnect kup-backup \
|
|
&& apt-get autoremove -y \
|
|
&& rm -rf /var/lib/apt/lists/*
|