-
Notifications
You must be signed in to change notification settings - Fork 37
Add kiosk page #503
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Add kiosk page #503
Conversation
@agracey - is this ready for further review? |
This was discussed recently and it's currently blocked on publication of the chart/images |
I think we might be good now |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Some comments :) PTAL.
asciidoc/components/kiosk.adoc
Outdated
|
||
== Deployment | ||
|
||
The preferred way to deploy on Kubernetes is through the helm chart. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The preferred way to deploy on Kubernetes is through the helm chart. | |
The preferred way to deploy the kiosk solution on Kubernetes is through the helm chart. |
- `libX11-xcb1` | ||
- `libgtk-3-0` | ||
- `mozilla-nss` | ||
- `xorg-x11-fonts` | ||
- `libpulse0` | ||
- `libavcodec58` | ||
- `libasound2` | ||
- `libgbm1` | ||
- `libxshmfence1` | ||
- `libdrm` | ||
- `libgdm1` |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can we have a table with some small explanation on what they do and/or the versions we tested?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I feel like that's a lot of detail that would just cause confusion. Maybe what would be better is to just have an example Dockerfile?
|
||
There are several parts of the boot process that can be branded based on your individual needs. | ||
|
||
The Grub2 menu can be bypassed or branded as show in [https://documentation.suse.com/sles/15-SP6/html/SLES-all/cha-grub2.html] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I guess https://github.com/suse-edge/suse-edge.github.io/pull/503/files#r2313381394 is this. Can we perhaps link it?
asciidoc/components/kiosk.adoc
Outdated
|
||
Masking `console-getty.service` and `[email protected]` will remove the login prompt. | ||
|
||
Doing both of these will show a blank screen with a flashing cursor in the top-left corner. To show something on screen between the GRUB splash screen, you could use `plymouth` or just `cat` a raw framebuffer file to `/dev/fb0`. (Check out https://github.com/zqb-all/convertfb for a tool on converting images to the right format) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Doing both of these will show a blank screen with a flashing cursor in the top-left corner. To show something on screen between the GRUB splash screen, you could use `plymouth` or just `cat` a raw framebuffer file to `/dev/fb0`. (Check out https://github.com/zqb-all/convertfb for a tool on converting images to the right format) | |
Doing both of these will show a blank screen with a flashing cursor in the top-left corner. To show something on screen between the GRUB splash screen, you could use `plymouth` or just `cat` a raw framebuffer file to `/dev/fb0`. (Check out https://github.com/zqb-all/convertfb for a tool on converting images to the right format). |
|
||
=== Turning off key combinations | ||
|
||
To disallow closing the application or otherwise tampering with the kiosk, it can be useful to remap or turn off certain keys. This can be done using (xmodmap)[https://linux.die.net/man/1/xmodmap] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
To disallow closing the application or otherwise tampering with the kiosk, it can be useful to remap or turn off certain keys. This can be done using (xmodmap)[https://linux.die.net/man/1/xmodmap] | |
To disallow closing the application or otherwise tampering with the kiosk, it can be useful to remap or turn off certain keys. This can be done using (xmodmap)[https://linux.die.net/man/1/xmodmap]. |
|
||
Like any kubernetes workload, the kiosk workload can access resources that are available to the pod. This includes other services in the same kubernetes cluster through `<svc_name>.<ns>.<svc>.cluster.local` and can be controlled through the cluster's NetworkPolicies. | ||
|
||
Note: If you need to access services on the node that are outside of the cluster (such as Cockpit for local administration), you need to either know your node's ip address or provide a loopback address that's not already assigned. For example, you could add the non-routable address of `172.16.0.1` to each of your nodes' `lo` device. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
how? :D Also, what about firewalld and/or selinux?
|
||
To build a full stack kiosk installation image, you can use Edge Image Builder (EIB) with the following steps: | ||
|
||
1. Setup a basic EIB project according to the documentation at [https://github.com/suse-edge/edge-image-builder/blob/main/docs/building-images.md] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
can we link to the official docs instead of the github ones?
Here's the start of some documentation for the kiosk containers.