Proxam iso image

.github/workflows/build-iso.yml

@@ -0,0 +1,190 @@
+name: Build ProXam Exam ISO
+
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch:
+    inputs:
+      iso_variant:
+        description: 'ISO variant to build'
+        required: true
+        default: 'proxam-exam'
+        type: choice
+        options:
+          - proxam-exam
+          - moodle-rdp
+      debug:
+        description: 'Enable debug output'
+        required: false
+        default: 'false'
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Free up disk space
+        # GitHub Actions runners come with ~14 GB total but only ~3–4 GB free after
+        # preinstalled software. The ISO build needs ~10+ GB. We remove toolchains
+        # and SDKs we don't need to reclaim ~25 GB of space.
+        run: |
+          echo "==> Disk space before cleanup:"
+          df -h /
+          sudo rm -rf \
+            /usr/share/dotnet \
+            /usr/local/lib/android \
+            /opt/ghc \
+            /opt/hostedtoolcache \
+            /usr/local/share/powershell \
+            /usr/share/swift \
+            /usr/local/.ghcup \
+            /usr/lib/jvm \
+            /usr/local/graalvm \
+            /usr/local/share/chromium \
+            /usr/local/share/edge_driver \
+            /usr/local/share/gecko_driver \
+            /usr/local/share/vcpkg \
+            /usr/share/miniconda \
+            /usr/local/aws-cli \
+            /usr/local/aws-sam-cli \
+            /opt/az \
+            "$AGENT_TOOLSDIRECTORY" || true
+          sudo apt-get clean
+          docker image prune -af || true
+          echo "==> Disk space after cleanup:"
+          df -h /
+
+      - name: Checkout proxam-lernstick
+        uses: actions/checkout@v4
+
+      - name: Checkout proxam-exam-client
+        uses: actions/checkout@v4
+        with:
+          repository: Wojtasik-Lang-Consulting/proxam-exam-client
+          path: proxam-exam-client-src
+
+      - name: Create constants file
+        run: |
+          cat > constants <<'EOF'
+          BUILD_DIR=""
+          TMPFS=""
+          TMPFS_IMAGE=""
+          TMPFS_IMAGE_SIZE=0
+          TMPFS_IMAGE_MOUNT=""
+          MIRROR_BUILD="http://deb.debian.org/debian"
+          MIRROR_SYSTEM="http://deb.debian.org/debian"
+          MIRROR_SECURITY_SYSTEM="http://security.debian.org/"
+          SOURCE="false"
+          EOF
+
+      - name: Build proxam-exam-client .deb and place in packages.chroot
+        # Build the .deb from source inside a Trixie container so the package
+        # is available to live-build via config/packages.chroot/ — no GitHub
+        # Release required and no network access needed inside the chroot.
+        run: |
+          mkdir -p config/packages.chroot
+          docker run --rm \
+            -v "${{ github.workspace }}/proxam-exam-client-src:/src" \
+            -v "${{ github.workspace }}/config/packages.chroot:/out" \
+            debian:trixie \
+            bash -c "
+              set -e
+              apt-get update -qq
+              apt-get install -y --no-install-recommends \
+                build-essential \
+                devscripts \
+                debhelper \
+                config-package-dev \
+                gettext \
+                fakeroot \
+                dpkg-dev
+              cp -r /src /build
+              cd /build
+              dpkg-buildpackage -us -uc -b
+              cp /proxam-exam-client_*.deb /out/
+              ls -la /out/
+            "
+
+      - name: Select ISO variant
+        run: |
+          if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
+            ISO_VARIANT="${{ github.event.inputs.iso_variant }}"
+          else
+            ISO_VARIANT="proxam-exam"
+          fi
+
+          case "${ISO_VARIANT}" in
+            proxam-exam)
+              echo "ISO_VARIANT=${ISO_VARIANT}" >> "$GITHUB_ENV"
+              echo "ISO_BUILD_SCRIPT=build_proxam_exam_iso.sh" >> "$GITHUB_ENV"
+              echo "ISO_ARTIFACT_NAME=proxam-exam-iso" >> "$GITHUB_ENV"
+              echo "ISO_FILE_GLOB=proxam-exam_debian13_proxam_exam_*" >> "$GITHUB_ENV"
+              ;;
+            moodle-rdp)
+              echo "ISO_VARIANT=${ISO_VARIANT}" >> "$GITHUB_ENV"
+              echo "ISO_BUILD_SCRIPT=build_proxam_moodle_rdp_iso.sh" >> "$GITHUB_ENV"
+              echo "ISO_ARTIFACT_NAME=proxam-moodle-rdp-iso" >> "$GITHUB_ENV"
+              echo "ISO_FILE_GLOB=lernstick_debian13_moodle_rdp_*" >> "$GITHUB_ENV"
+              ;;
+            *)
+              echo "Unsupported ISO variant: ${ISO_VARIANT}" >&2
+              exit 1
+              ;;
+          esac
+
+      - name: Build ISO (privileged Debian container)
+        # live-build uses systemd-nspawn to run chroot hooks.
+        # systemd-nspawn requires kernel namespaces → must run in a
+        # --privileged container so it has full access to host kernel features.
+        # Using docker run directly (instead of GitHub Actions container: block)
+        # lets us pass --privileged and --cgroupns=host which the container: block omits.
+        run: |
+          docker run --privileged --cgroupns=host \
+            -v "${{ github.workspace }}:/build" \
+            -w /build \
+            debian:trixie \
+            bash -c "
+              set -e
+              apt-get update -qq
+              apt-get install -y --no-install-recommends \
+                live-build \
+                systemd-container \
+                rsync \
+                zsync \
+                gfxboot \
+                libhtml-parser-perl \
+                wget \
+                ca-certificates \
+                git \
+                debootstrap \
+                squashfs-tools \
+                xorriso \
+                isolinux \
+                syslinux \
+                syslinux-common \
+                grub-efi-amd64-bin \
+                grub-pc-bin \
+                mtools \
+                dosfstools
+              chmod +x "${ISO_BUILD_SCRIPT}"
+              ./${ISO_BUILD_SCRIPT}
+            "
+
+      - name: Upload ISO artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${{ env.ISO_ARTIFACT_NAME }}
+          path: |
+            ${{ env.ISO_FILE_GLOB }}.iso
+            ${{ env.ISO_FILE_GLOB }}.md5
+          retention-days: 14
+
+      - name: Create GitHub Release
+        if: startsWith(github.ref, 'refs/tags/')
+        uses: softprops/action-gh-release@v2
+        with:
+          files: |
+            ${{ env.ISO_FILE_GLOB }}.iso
+            ${{ env.ISO_FILE_GLOB }}.md5
+          generate_release_notes: true

README.md

@@ -8,3 +8,22 @@ packages needed on a Debian system to run this script:
 * live-build
 * rsync
 * zsync
+
+## Additional ISO variants
+
+### Minimal Moodle + RDP ISO
+
+Use `./build_proxam_moodle_rdp_iso.sh` to create a stripped-down GNOME-based image
+for Moodle exams and Windows Remote Desktop access.
+
+This build profile:
+- keeps only the shared core package lists required to boot the Lernstick image
+- removes the default desktop, education and flatpak package sets
+- skips the ProXam exam-client installation hook
+- adds Firefox ESR, Remmina and a small launcher that opens Moodle in kiosk mode
+	or starts the RDP client
+
+Before distributing the image, adjust the generated config file inside the image:
+- `/etc/proxam-moodle-rdp.conf`
+- set `MOODLE_URL` to your Moodle course or quiz URL
+- optionally set `REMMINA_PROFILE` to a pre-provisioned `.remmina` profile path

backports.txt

@@ -1,10 +1,10 @@
-# bookworm (64 Bit)
-sudo pbuilder --login --basetgz /var/cache/pbuilder/base-bookworm-bpo.tar.gz --bindmounts /home/debian12/lernstick/backports/bookworm
+# trixie (64 Bit)
+sudo pbuilder --login --basetgz /var/cache/pbuilder/base-trixie-bpo.tar.gz --bindmounts /home/debian13/lernstick/backports/trixie
 
-# bookworm (32 Bit)
-sudo pbuilder --login --architecture i386 --basetgz /var/cache/pbuilder/base-bookworm32-bpo.tar.gz --bindmounts /home/debian12/lernstick/backports/bookworm
+# trixie (32 Bit)
+sudo pbuilder --login --architecture i386 --basetgz /var/cache/pbuilder/base-trixie32-bpo.tar.gz --bindmounts /home/debian13/lernstick/backports/trixie
 
-# bookworm
+# trixie
 apt update; apt --yes upgrade; apt --yes install devscripts fakeroot pbuilder sudo; /usr/lib/pbuilder/pbuilder-satisfydepends --continue-fail
 
 

build_binary_release.sh

@@ -7,19 +7,19 @@ fi
 clear
 
 # build edu version
-git checkout debian12
+git checkout debian13
 ./build_tmpfs.sh
 ./build_edu-mini_iso.sh
 ./build_tmpfs.sh
 ./build_edu_iso.sh
 
 # build exam version
-git checkout exam-debian12
+git checkout exam-debian13
 ./build_tmpfs.sh
 ./build_exam_iso.sh
 
 # checkout main repo
-git checkout debian12
+git checkout debian13
 
 # final shutdown?
 if [ -n "$SHUTDOWN_AFTER_BUILDING" ]

build_proxam_exam_iso.sh

@@ -0,0 +1,77 @@
+#!/bin/bash
+# ProXam Exam ISO Build Script
+# Builds a Lernstick-based exam ISO with the proxam-exam-client pre-installed.
+#
+# Usage:
+#   ./build_proxam_exam_iso.sh
+#
+# Requirements:
+#   - Debian 13 (Trixie) host or container
+#   - live-build, rsync, zsync, gfxboot, libhtml-parser-perl installed
+#   - constants file present (copy from constants.example and adapt)
+
+set -e
+
+. ./functions.sh
+check_and_source_constants
+
+init_build
+
+ISO_SUFFIX="_proxam_exam"
+SOURCE="false"
+
+echo "==> Building ProXam Exam ISO (suffix: ${ISO_SUFFIX})"
+echo "==> Build started: $(date)"
+
+# Override distribution to trixie for debian13 branch
+build_image_proxam()
+{
+    TODAY=$(date +%Y-%m-%d)
+
+    rm -f config/binary config/bootstrap config/build config/chroot config/common config/source
+    lb clean
+
+    lb config \
+        --apt-indices false \
+        --apt-recommends true \
+        --architectures amd64 \
+        --archive-areas "main contrib non-free non-free-firmware" \
+        --bootloaders "syslinux,grub-efi" \
+        --chroot-squashfs-compression-level 22 \
+        --chroot-squashfs-compression-type zstd \
+        --debootstrap-options "--include=ca-certificates,openssl" \
+        --distribution trixie \
+        --firmware-chroot false \
+        --iso-volume "proxam-exam ${TODAY}" \
+        --mirror-binary "${MIRROR_SYSTEM}" \
+        --mirror-binary-security "${MIRROR_SECURITY_SYSTEM}" \
+        --mirror-bootstrap "${MIRROR_BUILD}" \
+        --security true \
+        --source false \
+        --updates true \
+        --verbose
+
+    lb build 2>&1 | tee logfile.txt
+
+    ISO_FILE="live-image-amd64.hybrid.iso"
+    if [ -f "${ISO_FILE}" ]; then
+        PREFIX="proxam-exam_debian13${ISO_SUFFIX}_${TODAY}"
+        IMAGE="${PREFIX}.iso"
+        mv "${ISO_FILE}" "${IMAGE}"
+        rm -f ./*.zsync
+        zsyncmake -C "${IMAGE}" -u "${IMAGE}"
+        md5sum "${IMAGE}" > "${IMAGE}.md5"
+
+        if [ -d "${BUILD_DIR}" ]; then
+            mv "${PREFIX}"* "${BUILD_DIR}"
+            mv logfile.txt "${BUILD_DIR}"
+        fi
+
+        echo "==> ISO built successfully: ${IMAGE}"
+    else
+        echo "ERROR: ISO was not built. Check logfile.txt for details." | tee -a logfile.txt
+        exit 1
+    fi
+}
+
+build_image_proxam