ekklesiaandClaude Opus 5
926668dc9b
A real room upgraded to 0.1.45 and came up as stock Debian Plasma with the old Waybar across the top, mako still catching notifications, and a lock screen on an account that has no password. The cause was one line, and it was in the lab: the harness handed the session under test XDG_CONFIG_DIRS by hand, so every result it had ever produced was a result about a machine somebody had already configured. On a machine SDDM starts the session through PAM, PAM does not read /etc/environment.d, and Debian's own plasma-workspace env.sh then set the variable from scratch — so the classroom's settings directory was not in the cascade at all. No layout, no lock policy, no Kiosk restrictions. The settings now arrive the way Plasma delivers them, through a file in /etc/xdg/plasma-workspace/env. Around that: the look and feel is immutable on its own key so a stale profile cannot answer for it; the palette is composed into the package, because naming a colour scheme does not produce one and the dark bar had been coming from a technician's hand; the desktop reset converges another desktop's appearance state and keeps the room's own; and classroom-migrate stops, deactivates and masks the old shell, including the D-Bus activation that brought mako back while the panel was down — found only by killing the panel on a migrated machine. device.conf loses COMPOSITOR and comes off the hyprland channel, which would otherwise have handed the room the experiment back. The lab stops flattering the package: it restarts the machine, lets SDDM actually autologin, and asks a fresh install and a machine upgraded from the Hyprland package the same sixty questions. Both answer identically, twice, and the panel still comes back from eight SIGKILLs. Co-Authored-By: Claude Opus 5 <[email protected]>
129 lines
5.6 KiB
Bash
Executable File
129 lines
5.6 KiB
Bash
Executable File
#!/bin/bash
|
|
set -e
|
|
|
|
if ! id classroom >/dev/null 2>&1; then
|
|
adduser \
|
|
--disabled-password \
|
|
--gecos "" \
|
|
classroom
|
|
fi
|
|
|
|
|
|
# Commands the room's own parts install. Listing them by name went wrong
|
|
# once already, when a command that had been removed was still chmod'ed
|
|
# here and the whole postinst failed; the package is the list.
|
|
for command in /usr/local/bin/classroom-*; do
|
|
[ -e "$command" ] || continue
|
|
chmod 0755 "$command"
|
|
done
|
|
|
|
# Reading the optical drive needs group cdrom. Takes effect at the next
|
|
# login, which the OTA reboot provides.
|
|
if getent group cdrom >/dev/null 2>&1; then
|
|
adduser classroom cdrom >/dev/null 2>&1 || true
|
|
fi
|
|
|
|
# Create device.conf on a new endpoint, or append only settings an older
|
|
# endpoint does not yet know. The helper preserves every existing byte apart
|
|
# from the append, so per-room choices always survive an upgrade.
|
|
PYTHONPATH=/usr/local/lib/ekklesia-classroom python3 - <<'PY'
|
|
from classroom_config import ensure_device_config
|
|
|
|
ensure_device_config()
|
|
PY
|
|
|
|
# The broker password lives here, so the file stops being world readable.
|
|
# Everything that reads it runs as root or as the classroom user.
|
|
chown root:classroom /etc/ekklesia-classroom/device.conf 2>/dev/null || true
|
|
chmod 0640 /etc/ekklesia-classroom/device.conf
|
|
|
|
# Converge a machine that was something else: the old bar and notification
|
|
# daemon stopped and deactivated, the login shell that used to start sway
|
|
# removed, and device.conf moved off settings this package cannot carry
|
|
# out. Runs on every install, does nothing on a machine that is already
|
|
# this classroom.
|
|
/usr/local/bin/classroom-migrate || true
|
|
|
|
systemctl daemon-reload || true
|
|
|
|
# The power button stops working immediately rather than at the next
|
|
# boot. Verified in the lab: logind re-reads its drop-ins on reload and
|
|
# reports ignore afterwards, and the running graphical session is not
|
|
# disturbed by it.
|
|
systemctl reload systemd-logind >/dev/null 2>&1 || true
|
|
|
|
# Autologin into the classroom, and back into it if the session ever ends.
|
|
systemctl enable sddm.service >/dev/null 2>&1 || true
|
|
|
|
# The room's own user services: the audio policy, and the drop-in that stops
|
|
# Plasma giving up on a repeatedly crashing panel.
|
|
systemctl --global enable ekklesia-classroom-audio.service >/dev/null 2>&1 || true
|
|
systemctl --global enable ekklesia-classroom-desktop.service >/dev/null 2>&1 || true
|
|
|
|
# Match the bar to this machine now, so the first login already has the
|
|
# right one rather than waiting for the next provisioning run.
|
|
/usr/local/bin/classroom-desktop-layout >/dev/null 2>&1 || true
|
|
|
|
# NetworkManager ships nmtui and deliberately leaves interfaces declared in
|
|
# /etc/network/interfaces under ifupdown's control (managed=false). This gives
|
|
# administrators saved, auto-reconnecting Wi-Fi without taking over an
|
|
# existing static Ethernet setup. No classroom service needs to hold boot for
|
|
# NetworkManager's online wait, so keep that waiter disabled.
|
|
systemctl enable NetworkManager.service || true
|
|
systemctl disable NetworkManager-wait-online.service || true
|
|
systemctl start NetworkManager.service || true
|
|
|
|
# CUPS is ready at boot, but no queue is created until an administrator runs
|
|
# classroom-printer-setup. cups-browsed is unnecessary here and would expose
|
|
# every advertised printer on the church network if installed independently.
|
|
systemctl enable cups.socket cups.service || true
|
|
systemctl disable --now cups-browsed.service || true
|
|
# Direct DNS-SD destinations still appear through Avahi even when
|
|
# cups-browsed is inactive. Nothing else in this appliance uses Avahi, so stop
|
|
# both activation paths and keep unrelated church printers out of print lists.
|
|
systemctl disable --now avahi-daemon.socket avahi-daemon.service || true
|
|
systemctl mask avahi-daemon.socket avahi-daemon.service || true
|
|
systemctl start cups.socket || true
|
|
|
|
systemctl enable ekklesia-classroom-update.timer || true
|
|
systemctl start ekklesia-classroom-update.timer || true
|
|
|
|
# Google Chrome, and the DVD codecs when the room has a drive, are
|
|
# fetched by the provisioning service at the next boot.
|
|
#
|
|
# Deliberately enabled but not started here. It cannot run during this
|
|
# script anyway, because dpkg holds the apt lock throughout. Starting it
|
|
# straight afterwards would race the reboot that an OTA update performs
|
|
# the moment this install finishes, and an apt run killed by that reboot
|
|
# leaves dpkg half-configured. Every OTA reboots, so waiting for the next
|
|
# boot costs nothing and cannot corrupt anything.
|
|
#
|
|
# Provisioning is still enabled at boot so machines that were offline or
|
|
# interrupted get another chance automatically.
|
|
systemctl enable ekklesia-classroom-provision.service || true
|
|
|
|
# Also schedule provisioning after this package installation completes.
|
|
# Do not start it synchronously from postinst: dpkg/apt still owns its locks.
|
|
# A short delayed systemd job lets the outer apt transaction finish first.
|
|
#
|
|
# If an OTA reboot happens before this fires, the normal enabled boot service
|
|
# handles provisioning on the next boot instead.
|
|
systemd-run \
|
|
--unit=ekklesia-classroom-provision-after-install \
|
|
--on-active=15s \
|
|
--property=Type=oneshot \
|
|
/bin/systemctl start ekklesia-classroom-provision.service \
|
|
>/dev/null 2>&1 || true
|
|
|
|
# Gives Chrome a chance to close properly on reboot, so its profile is
|
|
# not marked as crashed. Best effort: it must never hold a shutdown up.
|
|
systemctl enable ekklesia-classroom-shutdown.service || true
|
|
|
|
# The room's link to the church broker. Enabled always; it does nothing
|
|
# at all until a broker is configured in device.conf.
|
|
systemctl enable ekklesia-classroom-mqtt.service || true
|
|
systemctl restart ekklesia-classroom-mqtt.service || true
|
|
systemctl start ekklesia-classroom-shutdown.service || true
|
|
|
|
exit 0
|