ekklesiaandClaude Opus 5.5
cd798a33a1
The kernel memory killer's "Memory Shortage Avoided" notice carried a Configure button that ran kcmshell6 and opened KDE's whole Notifications settings under the teacher's account. Reproduced in the lab. Plasma draws that button without consulting the Kiosk policy, but kcmshell6 and System Settings do: every settings module Debian 13's Plasma 6.3 installs (90) is now refused in the classroom's immutable kdeglobals, so the same click shows only "disabled by the system administrator". The clock's Configure Digital Clock goes with plasma/allow_configure_when_locked=false; Configure Audio Devices disappears on its own; the disabled window's Help button opened KDE Help Center, which the package now conflicts with (plasma-desktop only recommends it). The maintenance terminal runs outside the classroom's configuration and still opens every module, verified. converged-check fails if any module on a machine is ever left unrestricted: 126 passed in the lab. Co-Authored-By: Claude Opus 5.5 <[email protected]>
70 lines
4.3 KiB
Plaintext
70 lines
4.3 KiB
Plaintext
Package: ekklesia-classroom
|
|
Version: @VERSION@
|
|
Section: misc
|
|
Priority: optional
|
|
Architecture: amd64
|
|
Maintainer: Ekklesia
|
|
Depends: pkexec, polkit-kde-agent-1, plasma-desktop, plasma-workspace, kwin-wayland, plasma-nm, plasma-pa, plasma-widgets-addons, konsole, sddm, dbus-user-session, xwayland, fonts-dejavu, fonts-noto, network-manager, pipewire, pipewire-audio, wireplumber, pulseaudio-utils, cups, cups-client, cups-filters, foomatic-db-compressed-ppds, python3-gi, python3-gi-cairo, gir1.2-gtk-3.0, gir1.2-gtklayershell-0.1, libnotify-bin, curl, gnupg, ca-certificates, python3-paho-mqtt, python3-pyqt6.qtwebengine, python3-pyqt6, libreoffice-impress, libreoffice-core, poppler-utils, fonts-liberation, fonts-liberation-sans-narrow, fonts-croscore, fonts-crosextra-carlito, fonts-crosextra-caladea, fonts-urw-base35, fonts-roboto, fonts-open-sans, fonts-lato, fonts-montserrat, fonts-noto-extra
|
|
Recommends: vlc
|
|
Conflicts: plasma-welcome, plasma-discover, kdeconnect, kup-backup, khelpcenter
|
|
Description: Ekklesia managed classroom environment
|
|
A classroom appliance built on Debian's own Plasma desktop. The room's
|
|
panel, window behaviour, notifications, palette and lockdown are
|
|
configuration for that desktop rather than a shell of our own; what is
|
|
left here is the church's own subject matter — Wonder Ink, the browser,
|
|
the DVD player, the printer, the audio policy and the updater.
|
|
.
|
|
konsole is here for one chord. It is the local recovery route for a
|
|
technical administrator standing at a machine when SSH is not
|
|
available; it is hidden from every application list and reachable only
|
|
by Meta+Ctrl+Alt+Shift+K.
|
|
.
|
|
plasma-widgets-addons is here for one widget: Quick Launch, which is
|
|
the only stock way to put a single launcher on the panel that reads
|
|
/usr/share/applications live. The Icon widget copies the entry into the
|
|
user's home, so an update could never change it.
|
|
.
|
|
python3-gi and gtk-layer-shell are still here because the DVD player
|
|
draws its own loading cover and control bar as layer-shell surfaces.
|
|
They are no longer here for a dock.
|
|
.
|
|
python3-pyqt6.qtwebengine is Wonder Ink. Teachers prepare a lesson across
|
|
several tabs and Chrome cannot be asked for tabs without an address bar,
|
|
so the tab strip is the classroom's and the engine is Debian's Chromium.
|
|
Measured on Debian 13 before it was chosen: H.264 and AAC both decode,
|
|
which is the usual and correct objection to QtWebEngine and is not true
|
|
of this build. Chrome stays exactly where it was, for the ordinary
|
|
browser.
|
|
.
|
|
libreoffice-impress and poppler-utils are Presentations, and neither is
|
|
ever shown to a teacher. LibreOffice runs once per import, headless,
|
|
with no window on any screen, to turn a PPT or PPTX into a PDF; poppler
|
|
turns that PDF into one picture per slide; the classroom's own library
|
|
shows the pictures. Measured before it was chosen: `soffice --show`
|
|
does start a real slideshow and then leaves the Impress editor on
|
|
screen when it ends, and `okular --presentation` opens its own document
|
|
window and an information dialog behind the slides. Neither is
|
|
something a teacher may be left looking at, and converting once at
|
|
import costs 0.34s for a ten-slide deck and nothing at all afterwards.
|
|
libreoffice-gtk3 is deliberately NOT here: nothing interactive runs.
|
|
.
|
|
The fonts are what a Google Slides export asks for. The metric
|
|
compatible families cover the Microsoft names — Liberation for Arial,
|
|
Times New Roman and Courier New, Carlito for Calibri, Caladea for
|
|
Cambria, Croscore for the same three under their Chrome OS names — and
|
|
Roboto, Open Sans, Lato and Montserrat are the web fonts Google Slides
|
|
itself offers. Every one is in Debian main and installs without a
|
|
question. ttf-mscorefonts-installer is deliberately absent: it is in
|
|
contrib, it downloads from a third party at install time and it shows
|
|
an EULA prompt, and an unattended classroom upgrade cannot answer one.
|
|
.
|
|
The Conflicts line is deliberate. A welcome tour, a software centre and
|
|
a phone pairing daemon are all things plasma-desktop recommends and a
|
|
room a teacher walks into should not have.
|
|
.
|
|
khelpcenter is there for the same reason, found the hard way: a
|
|
settings window's Help button opens it directly, whatever the Kiosk
|
|
restrictions say, and it is a browser of the machine's manual pages with
|
|
file dialogs of its own. plasma-desktop only recommends it, and nothing
|
|
else installed needs it.
|