RPI with new ssd how to migrate to new hdd
and from savapage topic: paper-recycling-strategies
1 Like
Looks like the case design is now available for free on Thingiverse:
2 Likes
Ive almost got zabbix working with saml just in the process of getting a working metadata.xml once that’s done I’ll be able to template it for autogeneration
2 Likes
i ran into an error on the logs
Glib Lasso messages will not be catched (require Glib module)
which seems to be resolved by installing
glibmm24.armv7hl
1 Like
Ok good news i’ve finally managed to get glpi fusion inventory and flyve mdm working and have successfully enrolled an old mobile as a test ill post the steps in the coming days
2 Likes
fantastic news
Haven’t tested remote control extensively but during initial tests apon enrollment it automatically pulled down the model, serial, all installed apps (including there versions) os and version CPU type arch and assigned it to a user so it’s very promising
to enable nut for raspberry pi
wget http://repos.tilab.tuwien.ac.at/public/el7/armhfp/epel/nut-2.7.2-4.el7.armv7hl.rpm && yum install -y nut-client libusb.armv7hl freeipmi.armv7hl && rpm -i nut-2.7.2-4.el7.armv7hl.rpm
if needed cgi and xml are here
wget http://repos.tilab.tuwien.ac.at/public/el7/armhfp/epel/nut-cgi-2.7.2-4.el7.armv7hl.rpm
wget http://repos.tilab.tuwien.ac.at/public/el7/armhfp/epel/nut-xml-2.7.2-4.el7.armv7hl.rpm
also you can then get the nethserver-nut working by simply running
yum install nethserver-nut
After being frustrated with the imposed limitations of Chromebook (or at least the one I have) I decided to use a RPI 400 with raspian as a desktop for my daughter.
I managed to get it joined to the ad (nethserver as).
I’m going to make a script to automate the process and I’ll post it here as I couldn’t get CID to work with arm.
Update:
Ok here is the script,
The script simply asks for admin password and domain, then installs the prerequisites and edits the config files with required details.
Then it adds the active directory group to the sudoers file.
Once that’s done it issues the cmds to discover and join the realm.
joinad.sh
#!/usr/bin/env bash
echo -e
echo "Please enter the password for admin"
echo -e
wait
read -r adpass
echo -e
echo "Please enter your domain name"
echo -e
wait
read -r domain
#Updating file /etc/hosts
echo "127.0.0.1 localhost
::1 localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
127.0.1.1 $(cat /etc/hostname).$domain $(cat /etc/hostname)" > /etc/hosts
#Updating file /etc/sudoers
grep -qxF '%domain\ admins ALL=(ALL:ALL) ALL' /etc/sudoers || echo '%domain\ admins ALL=(ALL:ALL) ALL' >> /etc/sudoers
#Updating RPI
sudo apt -y update
#Installing krb-user
export DEBIAN_FRONTEND=noninteractive
sudo -E apt -y -qq install krb5-user
wait
#Updating file /etc/krb5.conf
echo "[libdefaults]
default_realm = AD.${domain^^}
[login]
krb4_convert = true
krb4_get_tickets = false" > /etc/krb5.conf
#Installing libpam-sss
export DEBIAN_FRONTEND=noninteractive
sudo -E apt -y -qq install libpam-sss
wait
#Installing libpam-mount
export DEBIAN_FRONTEND=noninteractive
sudo -E apt -y -qq install libpam-mount
wait
#Updating file /etc/pam.d/common-session
echo "#
# /etc/pam.d/common-session - session-related modules common to all services
#
# This file is included from other service-specific PAM config files,
# and should contain a list of modules that define tasks to be performed
# at the start and end of sessions of *any* kind (both interactive and
# non-interactive).
#
# As of pam 1.0.1-6, this file is managed by pam-auth-update by default.
# To take advantage of this, it is recommended that you configure any
# local modules either before or after the default block, and use
# pam-auth-update to manage selection of other modules. See
# pam-auth-update(8) for details.
# here are the per-package modules (the "Primary" block)
session [default=1] pam_permit.so
# here's the fallback if no module succeeds
session requisite pam_deny.so
# prime the stack with a positive return value if there isn't one already;
# this avoids us returning an error just because nothing sets a success code
# since the modules above will each just jump around
session required pam_permit.so
# and here are more per-package modules (the "Additional" block)
session required pam_unix.so
session optional pam_sss.so
session optional pam_systemd.so
session optional pam_chksshpwd.so
session required pam_mkhomedir.so skel=/etc/skel/ umask=0022
# end of pam-auth-update config" > /etc/pam.d/common-session
#Installing realmd
export DEBIAN_FRONTEND=noninteractive
sudo -E apt -y -qq install realmd
wait
#Updating file /etc/realmd.conf
echo "[active-directory]
os-name = Raspbian
os-version = $(cat /etc/debian_version)
[service]
automatic-install = yes
[users]
default-home = /home/%u
default-shell = /bin/bash
[ad.$domain]
user-principal = yes
fully-qualified-names = no" > /etc/realmd.conf
#Installing Prerequisites
sudo apt -y install ntp python3-pip sssd adcli libsss-sudo cifs-utils smbclient sssd-tools samba-common packagekit samba-common-bin samba-libs libnss-sss oddjob oddjob-mkhomedir packagekit
wait
#Updating file /etc/sssd/sssd.conf
echo "[sssd]
domains =
config_file_version = 2
services = nss, pam
[$domain/ad.$domain]
ad_domain = ad.$domain
krb5_realm = AD.${domain^^}
realmd_tags = manages-system joined-with-adcli
cache_credentials = True
id_provider = ad
krb5_store_password_if_offline = True
default_shell = /bin/bash
ldap_id_mapping = True
use_fully_qualified_names = True
fallback_homedir = /home/%u
access_provider = ad
auth_provider = ad
chpass_provider = ad
access_provider = ad
ldap_schema = ad
dyndns_update = true
dyndns_refresh_interval = 43200
dyndns_update_ptr = true
dyndns_ttl = 3600" > /etc/sssd/sssd.conf
#Updating file /etc/ntp.conf
echo "# /etc/ntp.conf, configuration for ntpd; see ntp.conf(5) for help
driftfile /var/lib/ntp/ntp.drift
# Leap seconds definition provided by tzdata
leapfile /usr/share/zoneinfo/leap-seconds.list
# Enable this if you want statistics to be logged.
#statsdir /var/log/ntpstats/
statistics loopstats peerstats clockstats
filegen loopstats file loopstats type day enable
filegen peerstats file peerstats type day enable
filegen clockstats file clockstats type day enable
# You do need to talk to an NTP server or two (or three).
server time.cloudflare.com
# pool.ntp.org maps to about 1000 low-stratum NTP servers. Your server will
# pick a different set every time it starts up. Please consider joining the
# pool: <http://www.pool.ntp.org/join.html>
pool 0.debian.pool.ntp.org iburst
pool 1.debian.pool.ntp.org iburst
pool 2.debian.pool.ntp.org iburst
pool 3.debian.pool.ntp.org iburst
# Access control configuration; see /usr/share/doc/ntp-doc/html/accopt.html for
# details. The web page <http://support.ntp.org/bin/view/Support/AccessRestrictions>
# might also be helpful.
#
# Note that "restrict" applies to both servers and clients, so a configuration
# that might be intended to block requests from certain clients could also end
# up blocking replies from your own upstream servers.
# By default, exchange time with everybody, but don't allow configuration.
restrict -4 default kod notrap nomodify nopeer noquery limited
restrict -6 default kod notrap nomodify nopeer noquery limited
# Local users may interrogate the ntp server more closely.
restrict 127.0.0.1
restrict -6 ::1
# Needed for adding pool entries
restrict source notrap nomodify noquery
# Clients from this (example!) subnet have unlimited access, but only if
# cryptographically authenticated.
#restrict 192.168.123.0 mask 255.255.255.0 notrust
# If you want to provide time to your local subnet, change the next line.
# (Again, the address is an example only.)
#broadcast 192.168.123.255
# If you want to listen to time broadcasts on your local subnet, de-comment the
# next lines. Please do this only if you trust everybody on the network!
#disable auth
#broadcastclient" > /etc/ntp.conf
#Restarting the NTP service
sudo systemctl restart ntp
#Discovering Realm
realm discover ad.$domain
echo "$adpass" | kinit -V admin
#Joining domain
echo "$adpass" | realm join -U admin@AD.${domain^^} ad.$domain
wait
echo -e
echo "Congratulations $(cat /etc/hostname) is now part of ad.$domain"
echo -e
This script uses time.cloudflare.com as NTP server
to leave domain simply run realm leave
if you need to change the hostname run sudo hostnamectl set-hostname youruniquehostname before running the script
6 Likes