Re-purposing laptops for schools - Revision history

EdmondLascaris: /* Preventing access to parent folders in Apache */

2025-03-17T17:20:43Z

Preventing access to parent folders in Apache

← Older revision		Revision as of 17:20, 17 March 2025
Line 1,005:		Line 1,005:

	Now, users on your local network can browse folders and download files just like a lightweight file server! Let me know if you need further refinements.		Now, users on your local network can browse folders and download files just like a lightweight file server! Let me know if you need further refinements.

			=DOSBox Settings for Screen Size=

			To make DOSBox run in full screen on Lubuntu, follow these steps:

			==1. Toggle Full-Screen Mode Manually==
			Press Alt + Enter to toggle between windowed and full-screen modes. If this doesn't work, continue with the steps below.

			==2. Edit the DOSBox Configuration File==
			Open a terminal and type:

			<syntaxhighlight lang="bash">
			nano ~/.dosbox/dosbox-*.conf
			</syntaxhighlight>

			(Replace * with the version number, e.g., dosbox-0.74.conf.)
			Find the line that says:

			<syntaxhighlight lang="bash">
			fullscreen=false
			</syntaxhighlight>

			Change it to:

			fullscreen=true
			Locate the output= setting. If it's set to surface, change it to:

			<syntaxhighlight lang="bash">
			output=opengl
			</syntaxhighlight>

			or

			<syntaxhighlight lang="bash">
			output=overlay
			</syntaxhighlight>

			(These options work better on Linux.)
			If the screen is still small in full-screen mode, adjust the scaling by modifying:

			<syntaxhighlight lang="bash">
			windowresolution=original
			</syntaxhighlight>

			Change it to:

			<syntaxhighlight lang="bash">
			windowresolution=1280x960
			</syntaxhighlight>

			or another suitable resolution.
			Save the file (Ctrl + X, then Y, then Enter).


			==3. Restart DOSBox==
			Close and reopen DOSBox for the changes to take effect. Try pressing Alt + Enter again if needed.

			Let me know if you need further adjustments!

EdmondLascaris: /* How to Implement This Project */

2025-03-13T06:25:24Z

How to Implement This Project

@@ Line 112: / Line 112: @@
 ✅ Strengthens Local IT Infrastructure – Local governments and schools become less dependent on external services and cloud-based subscriptions.
 ✅ Protects Against Internet Outages – Even if the internet is down, schools and government offices can still install and update essential software.
 =Why local servers are more energy efficient=

EdmondLascaris: /* 5. Write the Lubuntu ISO to the USB */

2025-03-13T06:10:50Z

5. Write the Lubuntu ISO to the USB

← Older revision		Revision as of 06:10, 13 March 2025
Line 43:		Line 43:

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">
	sudo dd if=~/Downloads/lubuntu.iso of=/dev/rdisk2 bs=1m		sudo dd if=/Users/edmond/Downloads/lubuntu.iso of=/dev/rdisk2 bs=1m
	</syntaxhighlight>		</syntaxhighlight>

	* if=~/Downloads/lubuntu.iso → Path to the Lubuntu ISO.		* if=/Users/edmond/Downloads/lubuntu.iso → Path to the Lubuntu ISO.
	* of=/dev/rdisk2 → Use rdisk2 instead of disk2 for faster writing.		* of=/dev/rdisk2 → Use rdisk2 instead of disk2 for faster writing.
	* bs=1m → Writes in 1MB chunks for efficiency.		* bs=1m → Writes in 1MB chunks for efficiency.

EdmondLascaris: /* Create Lubuntu USB Boot disk on Mac */

2025-03-12T19:04:20Z

Create Lubuntu USB Boot disk on Mac

← Older revision		Revision as of 19:04, 12 March 2025
Line 9:		Line 9:
	Download the latest Lubuntu ISO from:		Download the latest Lubuntu ISO from:

			<syntaxhighlight lang="bash">
	https://lubuntu.me/downloads/		https://lubuntu.me/downloads/
			</syntaxhighlight>

	===2. Insert the USB Drive===		===2. Insert the USB Drive===
Line 20:		Line 22:
	Run this command to find your USB device name:		Run this command to find your USB device name:

			<syntaxhighlight lang="bash">
	diskutil list		diskutil list
			</syntaxhighlight>

	Look for the USB device (e.g., /dev/disk2).		Look for the USB device (e.g., /dev/disk2).

Line 29:		Line 34:
	Replace disk2 with your USB disk:		Replace disk2 with your USB disk:

			<syntaxhighlight lang="bash">
	diskutil unmountDisk /dev/disk2		diskutil unmountDisk /dev/disk2
			</syntaxhighlight>

	===5. Write the Lubuntu ISO to the USB===		===5. Write the Lubuntu ISO to the USB===
Line 35:		Line 42:
	Replace lubuntu.iso with your actual Lubuntu ISO filename:		Replace lubuntu.iso with your actual Lubuntu ISO filename:

			<syntaxhighlight lang="bash">
	sudo dd if=~/Downloads/lubuntu.iso of=/dev/rdisk2 bs=1m		sudo dd if=~/Downloads/lubuntu.iso of=/dev/rdisk2 bs=1m
	if=~/Downloads/lubuntu.iso → Path to the Lubuntu ISO.		</syntaxhighlight>
	of=/dev/rdisk2 → Use rdisk2 instead of disk2 for faster writing.
	bs=1m → Writes in 1MB chunks for efficiency.		* if=~/Downloads/lubuntu.iso → Path to the Lubuntu ISO.
			* of=/dev/rdisk2 → Use rdisk2 instead of disk2 for faster writing.
			* bs=1m → Writes in 1MB chunks for efficiency.


Line 47:		Line 57:
	Once complete, eject the USB safely:		Once complete, eject the USB safely:

			<syntaxhighlight lang="bash">
	diskutil eject /dev/disk2		diskutil eject /dev/disk2
			</syntaxhighlight>

	Now your USB is ready to boot Lubuntu!		Now your USB is ready to boot Lubuntu!

Line 55:		Line 68:
	Download Balena Etcher		Download Balena Etcher

			<syntaxhighlight lang="bash">
	https://www.balena.io/etcher/		https://www.balena.io/etcher/
			</syntaxhighlight>

	* Insert the USB drive into your Mac.		* Insert the USB drive into your Mac.
Line 70:		Line 85:
	* Insert the USB into a PC, restart, and press F12, F2, or Esc to open the boot menu.		* Insert the USB into a PC, restart, and press F12, F2, or Esc to open the boot menu.
	* Select USB drive and start Lubuntu.		* Select USB drive and start Lubuntu.


	=Why Lubuntu project for schools=		=Why Lubuntu project for schools=

EdmondLascaris at 19:02, 12 March 2025

2025-03-12T19:02:04Z

← Older revision		Revision as of 19:02, 12 March 2025
Line 1:		Line 1:
			=Create Lubuntu USB Boot disk on Mac=
			To create a Lubuntu bootable USB on a Mac, follow these steps:

			==Method 1: Using the Terminal (Recommended)==
			This method does not require extra software.

			===1. Download Lubuntu ISO===

			Download the latest Lubuntu ISO from:

			https://lubuntu.me/downloads/

			===2. Insert the USB Drive===

			Plug in your USB drive (at least 4GB).
			Open Terminal (Cmd + Space, then type Terminal and press Enter).

			===3. Identify the USB Drive===

			Run this command to find your USB device name:

			diskutil list
			Look for the USB device (e.g., /dev/disk2).

			Make sure you pick the correct disk! Using the wrong disk number may erase your Mac’s hard drive.

			===4. Unmount the USB Drive===

			Replace disk2 with your USB disk:

			diskutil unmountDisk /dev/disk2

			===5. Write the Lubuntu ISO to the USB===

			Replace lubuntu.iso with your actual Lubuntu ISO filename:

			sudo dd if=~/Downloads/lubuntu.iso of=/dev/rdisk2 bs=1m
			if=~/Downloads/lubuntu.iso → Path to the Lubuntu ISO.
			of=/dev/rdisk2 → Use rdisk2 instead of disk2 for faster writing.
			bs=1m → Writes in 1MB chunks for efficiency.


			Note: This process may take a few minutes. It will not show progress immediately.

			===6. Eject the USB===

			Once complete, eject the USB safely:

			diskutil eject /dev/disk2
			Now your USB is ready to boot Lubuntu!

			==Method 2: Using Balena Etcher (Easier)==
			If you prefer a graphical tool:

			Download Balena Etcher

			https://www.balena.io/etcher/

			* Insert the USB drive into your Mac.
			* Open Balena Etcher, select:
			** Lubuntu ISO
			** USB drive
			* Click "Flash".

			Wait for the process to complete and eject the USB.
			Now your USB is bootable with Lubuntu!

			==Next Steps==
			* Boot the Lubuntu USB:
			* Insert the USB into a PC, restart, and press F12, F2, or Esc to open the boot menu.
			* Select USB drive and start Lubuntu.


	=Why Lubuntu project for schools=		=Why Lubuntu project for schools=

EdmondLascaris: /* chmod Understanding the basics */

2025-03-11T03:58:20Z

chmod Understanding the basics

← Older revision		Revision as of 03:58, 11 March 2025
Line 940:		Line 940:

	Now, users on your local network can browse folders and download files just like a lightweight file server! Let me know if you need further refinements.		Now, users on your local network can browse folders and download files just like a lightweight file server! Let me know if you need further refinements.

	~~=chmod Understanding the basics=~~

	~~Understanding chmod Basics~~

	~~chmod modifies permissions for owner, group, and others using:~~

	~~Numeric mode (chmod 755 file)~~
	~~Symbolic mode (chmod u+r file)~~
	~~Each permission has a number:~~

	~~4 = Read (r)~~
	~~2 = Write (w)~~
	~~1 = Execute (x)~~
	~~A permission like chmod 755 means:~~

	~~7 (Owner: rwx → Full control)~~
	~~5 (Group: r-x → Read & execute)~~
	~~5 (Others: r-x → Read & execute)~~
	~~Example 1: Making a Script Executable~~

	~~Scenario: You have a Bash script (myscript.sh) that needs to be run but is not executable.~~
	~~Command:~~

	~~chmod 755 myscript.sh~~
	~~Why?~~

	~~7 (Owner: Read, write, execute → Can edit & run)~~
	~~5 (Group/Others: Read & execute → Can run but not edit)~~
	~~This ensures the script can be executed by anyone without allowing modification.~~

	~~Example 2: Protecting a Configuration File~~

	~~Scenario: A config file (config.cfg) should only be readable by the owner to prevent unauthorized access.~~
	~~Command:~~

	~~chmod 600 config.cfg~~
	~~Why?~~

	~~6 (Owner: Read & write → Can modify)~~
	~~0 (Group/Others: No access)~~
	~~This protects sensitive settings from being read or changed by others.~~

	~~Example 3: Allowing a Group to Edit a Shared File~~

	~~Scenario: A team is collaborating on a document (report.txt), and all team members (same group) should be able to edit it.~~
	~~Command:~~

	~~chmod 664 report.txt~~
	~~Why?~~

	~~6 (Owner: Read & write)~~
	~~6 (Group: Read & write → Team can edit)~~
	~~4 (Others: Read-only)~~
	~~This lets the team edit the file while preventing changes from outsiders.~~

	~~Example 4: Making a Folder Readable & Executable (but Not Writable) for Others~~

	~~Scenario: You have a public folder (/var/www/public_html) containing files that should be viewable but not modifiable.~~
	~~Command:~~

	~~chmod 755 /var/www/public_html~~
	~~Why?~~

	~~7 (Owner: Full access)~~
	~~5 (Group/Others: Read & execute, no write)~~
	~~This ensures users can access and list files inside the folder but not delete or add files.~~

	~~Example 5: Preventing Accidental Deletion of a Folder~~

	~~Scenario: A folder (/backups/) contains important backups that should not be modified or deleted accidentally.~~
	~~Command:~~

	~~chmod 555 /backups/~~
	~~Why?~~

	~~5 (Owner/Group/Others: Read & execute, no write)~~
	~~This ensures that files can be accessed but not modified or deleted.~~

	~~Example 6: Securely Storing Private SSH Keys~~

	~~Scenario: SSH keys (id_rsa) should only be accessible by the owner.~~
	~~Command:~~

	~~chmod 600 ~/.ssh/id_rsa~~
	~~Why?~~

	~~6 (Owner: Read & write)~~
	~~0 (No access for group or others)~~
	~~SSH requires this strict permission to prevent unauthorized access.~~

	~~Example 7: Creating a Public Upload Directory (Writable but Not Executable)~~

	~~Scenario: Users should be able to upload files but not execute scripts in /var/www/uploads/.~~
	~~Command:~~

	~~chmod 733 /var/www/uploads/~~
	~~Why?~~

	~~7 (Owner: Full control)~~
	~~3 (Group: Write & execute → Can add/remove files but not list them)~~
	~~3 (Others: Same as group)~~
	~~This allows uploads but prevents execution of malicious scripts.~~

	~~Example 8: Allowing a Group to Manage a Folder (but Not Others)~~

	~~Scenario: A group (developers) needs full access to /opt/project/, but others should only view files.~~
	~~Command:~~

	~~chmod 775 /opt/project/~~
	~~Why?~~

	~~7 (Owner: Full control)~~
	~~7 (Group: Full control)~~
	~~5 (Others: Read & execute)~~
	~~This ensures group members can work, while others can only view.~~

	~~Final Notes~~

	~~Use chmod -R to change permissions recursively:~~
	~~chmod -R 755 /var/www/~~
	~~(Applies permissions to all subdirectories and files.)~~
	~~Combine chmod with chown to set ownership:~~
	~~sudo chown user:group file.txt~~
	~~(Ensures the correct user/group has control.)~~
	~~Would you like examples related to specific use cases in Lubuntu?~~

EdmondLascaris: /* Step 2: Place Files in the Web Directory */

2025-03-11T03:57:35Z

Step 2: Place Files in the Web Directory

← Older revision		Revision as of 03:57, 11 March 2025
Line 801:		Line 801:
	</syntaxhighlight>		</syntaxhighlight>

	Step 3: Enable Directory Listing (Optional)		==Step 3: Enable Directory Listing (Optional)==

	If you want users to see a list of files in the browser:		If you want users to see a list of files in the browser:
Line 829:		Line 829:
	</syntaxhighlight>		</syntaxhighlight>

	* Step 4: Find Your Local IP Address		==Step 4: Find Your Local IP Address==

	Run:		Run:
Line 839:		Line 839:
	Look for an IP like 192.168.X.X under wlan0 (WiFi) or eth0 (Ethernet).		Look for an IP like 192.168.X.X under wlan0 (WiFi) or eth0 (Ethernet).

	* Step 5: Access the Files from Another Device		==Step 5: Access the Files from Another Device==

	On another device connected to the same WiFi network, open a web browser and go to:		On another device connected to the same WiFi network, open a web browser and go to:

EdmondLascaris: /* Step 3: Access Folders via a Browser */

2025-03-11T03:56:53Z

Step 3: Access Folders via a Browser

← Older revision		Revision as of 03:56, 11 March 2025
Line 926:		Line 926:

	To prevent users from navigating outside the shared directory:		To prevent users from navigating outside the shared directory:
	1. Open Apache’s security configuration:		* 1. Open Apache’s security configuration:

	<syntaxhighlight lang="bash">		<syntaxhighlight lang="bash">

EdmondLascaris: /* Preventing access to parent folders in Apache */

2025-03-11T03:56:27Z

Preventing access to parent folders in Apache

← Older revision		Revision as of 03:56, 11 March 2025
Line 869:		Line 869:
	By default, if you place a folder inside /var/www/html/, Apache will serve it. However, without directory listing enabled, visitors will get a “403 Forbidden” error unless an index.html file is inside the folder.		By default, if you place a folder inside /var/www/html/, Apache will serve it. However, without directory listing enabled, visitors will get a “403 Forbidden” error unless an index.html file is inside the folder.

	Step 1: Enable Directory Listing for Folders		==Step 1: Enable Directory Listing for Folders==
	1. Open the Apache configuration file:		* 1. Open the Apache configuration file:

			<syntaxhighlight lang="bash">
	sudo nano /etc/apache2/apache2.conf		sudo nano /etc/apache2/apache2.conf
			</syntaxhighlight>

			* 2. Locate this section:

	~~2. Locate this section:~~		<syntaxhighlight lang="bash">

	<Directory /var/www/>		<Directory /var/www/>
	Options Indexes FollowSymLinks		Options Indexes FollowSymLinks
Line 882:		Line 884:
	Require all granted		Require all granted
	</Directory>		</Directory>
			</syntaxhighlight>

	If Indexes is missing, add it to the Options line:		If Indexes is missing, add it to the Options line:
Line 888:		Line 891:


	3. Save the file (Ctrl + X, then Y, then Enter).		* 3. Save the file (Ctrl + X, then Y, then Enter).
	4. Restart Apache:		* 4. Restart Apache:

			<syntaxhighlight lang="bash">
	sudo systemctl restart apache2		sudo systemctl restart apache2
			</syntaxhighlight>

	Step 2: Add Your Folders to /var/www/html/		==Step 2: Add Your Folders to /var/www/html/==

	You can now copy entire folders into /var/www/html/:		You can now copy entire folders into /var/www/html/:

			<syntaxhighlight lang="bash">
	sudo cp -r /path/to/folder /var/www/html/		sudo cp -r /path/to/folder /var/www/html/
			</syntaxhighlight>

	Ensure correct permissions:		Ensure correct permissions:

			<syntaxhighlight lang="bash">
	sudo chmod -R 755 /var/www/html/		sudo chmod -R 755 /var/www/html/
	sudo chown -R www-data:www-data /var/www/html/		sudo chown -R www-data:www-data /var/www/html/
			</syntaxhighlight>

	Step 3: Access Folders via a Browser		==Step 3: Access Folders via a Browser==

	On another device, open a browser and go to:		On another device, open a browser and go to:

			<syntaxhighlight lang="bash">
	http://<your-lubuntu-ip>/foldername/		http://<your-lubuntu-ip>/foldername/
			</syntaxhighlight>

	You should now see a directory listing of all files inside the folder.		You should now see a directory listing of all files inside the folder.
Line 917:		Line 928:
	1. Open Apache’s security configuration:		1. Open Apache’s security configuration:

			<syntaxhighlight lang="bash">
	sudo nano /etc/apache2/conf-available/security.conf		sudo nano /etc/apache2/conf-available/security.conf
			</syntaxhighlight>

			* 2. Set Options -Indexes outside the <Directory> block to prevent indexing outside /var/www/html/.
			* 3. Restart Apache:

	~~2. Set Options -Indexes outside the~~ <~~Directory~~> ~~block to prevent indexing outside /var/www/html/.~~		<syntaxhighlight lang="bash">
	~~3. Restart Apache:~~

	sudo systemctl restart apache2		sudo systemctl restart apache2
			</syntaxhighlight>

	Now, users on your local network can browse folders and download files just like a lightweight file server! Let me know if you need further refinements.		Now, users on your local network can browse folders and download files just like a lightweight file server! Let me know if you need further refinements.

EdmondLascaris: /* Apache file server */

2025-03-11T03:53:25Z

Apache file server

← Older revision		Revision as of 03:53, 11 March 2025
Line 769:		Line 769:
	Sure! Here’s how to set up Apache on Lubuntu for read-only file sharing over a local WiFi network.		Sure! Here’s how to set up Apache on Lubuntu for read-only file sharing over a local WiFi network.

	Step 1: Install Apache		==Step 1: Install Apache==

	Open a terminal and run:		Open a terminal and run:

			<syntaxhighlight lang="bash">
	sudo apt update && sudo apt install apache2 -y		sudo apt update && sudo apt install apache2 -y
			</syntaxhighlight>

	This installs and starts the Apache web server.		This installs and starts the Apache web server.
Line 779:		Line 781:
	To ensure Apache runs on startup:		To ensure Apache runs on startup:

			<syntaxhighlight lang="bash">
	sudo systemctl enable apache2		sudo systemctl enable apache2
			</syntaxhighlight>

	Step 2: Place Files in the Web Directory		==Step 2: Place Files in the Web Directory==

	Apache serves files from /var/www/html/ by default.		Apache serves files from /var/www/html/ by default.
	1. Copy your files to the web directory:		* 1. Copy your files to the web directory:

			<syntaxhighlight lang="bash">
	sudo cp -r /path/to/files /var/www/html/		sudo cp -r /path/to/files /var/www/html/
			</syntaxhighlight>

			* 2. Set the correct permissions:

	~~2. Set the correct permissions:~~		<syntaxhighlight lang="bash">

	sudo chmod -R 755 /var/www/html/		sudo chmod -R 755 /var/www/html/
	sudo chown -R www-data:www-data /var/www/html/		sudo chown -R www-data:www-data /var/www/html/
			</syntaxhighlight>

	Step 3: Enable Directory Listing (Optional)		Step 3: Enable Directory Listing (Optional)

	If you want users to see a list of files in the browser:		If you want users to see a list of files in the browser:
	1. Open the Apache configuration file:		* 1. Open the Apache configuration file:

			<syntaxhighlight lang="bash">
	sudo nano /etc/apache2/apache2.conf		sudo nano /etc/apache2/apache2.conf
			</syntaxhighlight>


	2. Find the block that starts with <Directory /var/www/> and modify it:		* 2. Find the block that starts with <Directory /var/www/> and modify it:

			<syntaxhighlight lang="bash">
	<Directory /var/www/html/>		<Directory /var/www/html/>
	Options +Indexes		Options +Indexes
Line 809:		Line 819:
	Require all granted		Require all granted
	</Directory>		</Directory>
			</syntaxhighlight>


	3. Save and exit (Ctrl + X, then Y, then Enter).		* 3. Save and exit (Ctrl + X, then Y, then Enter).
	4. Restart Apache for the changes to take effect:		* 4. Restart Apache for the changes to take effect:

			<syntaxhighlight lang="bash">
	sudo systemctl restart apache2		sudo systemctl restart apache2
			</syntaxhighlight>

	Step 4: Find Your Local IP Address		* Step 4: Find Your Local IP Address

	Run:		Run:

			<syntaxhighlight lang="bash">
	ip a \| grep inet		ip a \| grep inet
			</syntaxhighlight>

	Look for an IP like 192.168.X.X under wlan0 (WiFi) or eth0 (Ethernet).		Look for an IP like 192.168.X.X under wlan0 (WiFi) or eth0 (Ethernet).

	Step 5: Access the Files from Another Device		* Step 5: Access the Files from Another Device

	On another device connected to the same WiFi network, open a web browser and go to:		On another device connected to the same WiFi network, open a web browser and go to:

			<syntaxhighlight lang="bash">
	http://<your-lubuntu-ip>/		http://<your-lubuntu-ip>/
			</syntaxhighlight>

	If you enabled directory listing, users can browse and download files.		If you enabled directory listing, users can browse and download files.
Line 836:		Line 853:
	• If you don’t want public access, you can restrict it using a firewall:		• If you don’t want public access, you can restrict it using a firewall:

			<syntaxhighlight lang="bash">
	sudo ufw allow from 192.168.1.0/24 to any port 80		sudo ufw allow from 192.168.1.0/24 to any port 80
			</syntaxhighlight>

	(Replace 192.168.1.0/24 with your actual network range.)		(Replace 192.168.1.0/24 with your actual network range.)

	This is a lightweight solution, perfect for sharing files on Lubuntu! Let me know if you need any tweaks.		This is a lightweight solution, perfect for sharing files on Lubuntu! Let me know if you need any tweaks.


	= Preventing access to parent folders in Apache =		= Preventing access to parent folders in Apache =