How to safely transfer an educational institution to Linux and OSS?

Good day.
From the very beginning I will make a reservation: the transition to Linux and the open source software package is not a completely painless thing, and not all software remains free at the end of the transition. But more about that later.

So, let's begin.
Perhaps, many already know that in schools the license for MS Windows expires. The exact date is January 1, 2011. Somewhere above it was decided that extending licenses for Microsoft OSs is too expensive, and it is much easier to switch to the free software package. Translation of computers in schools to Linux began long before January 1, and AltLinux 4 and then 5.1 crashed on the school machines with the first wave. The main features of this particular distribution is its free (well, of course) and a package of pre-installed educational programs. However, AltLinux also has plenty of shortcomings, but let's not talk about them, this is a topic for a completely different post.
The second Linux-wave has not yet followed, but not yet evening.

In general, I personally do not want to sit back and wait until "it" surges and flood our cars with another low-quality Alt. Therefore, in the institution where I have the pleasure to work, it was decided to transfer the machines to Linux and open source software in advance and throw this aspect out of my head. Next in order.
')

Distribution Requirements

Some requirements were put forward for the Linux distribution that replaces AltLinux and the remaining Windows. Namely:
- humanity, proximity to the user, ease of use;
- the ability to run a number of educational programs, including those written for Winodws;
- ease of system administration.

What is not suitable AltLinux?

On the first point - the user, who first sat behind a Linux-machine, is lost in KDE firmly and permanently. The desktop is quite acceptable, but what is the root and home folder? Why is everything so annoyingly shining and iridescent? Why white text on light blue wallpaper? Let's not talk about holivars, but this is really inconvenient.
On the second point, no complaints, because this is the main task of the distribution.
On the third - everything is just monstrous. To block all ryushechki and panels in sneakers have to sit for a week or two, periodically testing the results obtained on children. In addition, it was not possible to adequately block the “View folder” widget. Perhaps the hands are crooked, of course, who knows.
Well, in general - do not like. That's the point.

What are we changing?

Here we have a question about choosing a distribution kit. I did not have to go far, as if Linux Mint 9 Rosinka was recently released specifically for our needs. Unfortunately, the domain is currently blocked by RuCentre. Why did we choose Rosinka?
It was originally planned to stop at Ubuntu and independently install all the necessary software on it and optimize it for the needs of students. But, as it turned out, Rosinka is the same Ubuntu, only something is already worth it, and working with it is a bit more pleasant. The only thing that could strain is the price of 350 rubles for a license for an unlimited number of computers. But here everything, as you understand, is within reason.
So, the license is purchased, the distribution is recorded on the disc, let's begin. Next - the most interesting ...

What did we do?

First, install all the necessary software, among which:
Pascal ABS - Virtualization with Wine
Compass 3D LT 5.10 (school license already exists) - virtualization with Wine
Kturtle
Gambas
QBasic - Virtualization with DosBox
Kumir - preset
OpenOffice.org - preinstalled

Second, they created the necessary users of the OS - Pupil and Administrator - and optimized the entrance to the OS. Passwords from the Pupil and the Administrator are not known to ordinary users, this is important.
After the student turns on the computer, a grub (forced delay for possible restoration work) occurs for 1 second, then Rosinka is loaded. The user selection window with automatic login hangs for another 2 seconds (again, for possible recovery and administrative work), after which the user logs in without a password into the system under the Apprentice account. The user (student) is waiting for the desktop with wallpaper, selected by the teacher, the necessary shortcuts on the desktop and one panel at the bottom with applets from the main menu, minimizing all windows and notification area. Looking ahead: no matter what the student changes, after restarting the computer, the exact same desktop will be waiting for him.
This is a view from a student, now let's look at all this disgrace from the administrator ...
Children - a dangerous phenomenon. Especially if they get something new in their hands, for example, the distribution kit of the unprecedented Rosinka. All they want to touch, touch, change, poudalat. Dangerous areas, as shown by testing - desktop wallpaper, themes, panels, desktop icons, animation windows. All possible changes were taken into account and a script was written that returns the panels to a working state, restores the necessary wallpaper, themes, and desktop backgrounds.
To minimize the hassle with your home folder - perform the following actions (on behalf of the Administrator):
$ cd /home/uchenik
$ rm -r *
After that we go as a Pupil into the home folder - it is empty there. Until you press Ctrl + H, of course (hidden files, eh). That is, places where you can spoil is becoming less. Now, by the way, the desktop becomes a home folder, so it’s very easy to close access to hidden files in your home folder — just remove it from the desktop. How? To do this, the system already has Ubuntu Tweak, which will allow us to disable the display of any system shortcuts on the desktop (Computer, Home folder). Everything! Now the system is safe. But its adequate performance is not yet. Laptops in the class are not the newest, ahem, and iron there is something else. Therefore, if you create a couple of dozen panels and beat them to capacity with applets tracking the memory of a computer and something similar, the OS will hang tightly. And our local students have a cool excuse - “I have no such label on the desktop, I can’t do it”. This is where bash comes to our rescue.
So, I present to your attention ...

Magic script

#! / bin / bash
notify-send "Wait until this prompt disappears" "The desktop is being cleaned and configured ..."
#echo "Clearing the desktop ..."
#cd / home / uchenik / Work *
#rm -r *
echo "Clearing the home folder ..."
cd / home / uchenik
rm -r *
echo "Customize your desktop wallpaper ..."
# Desktop wallpaper: wall.jpg (/ usr / share / backgrounds)
gconftool-2 --type string --set / desktop / gnome / background / picture_filename "/usr/share/backgrounds/wall.jpg"
echo "Customizing themes ..."
Themes GTK2, Metacity, Icons: Mint-X
gconftool-2 --type string --set / desktop / gnome / interface / gtk_theme "Mint-X"
gconftool-2 --type string --set / desktop / gnome / interface / icon_theme "Mint-X"
gconftool-2 --type string --set / apps / metacity / general / theme "Mint-X"
# Customize standard panels
echo “I am setting up the panels ...”
gconftool-2 --load "/.scripts/data/Gnome_Panel.xml"
# Reset Compiz settings
echo “Resetting Compiz Settings ...”
gconftool-2 --recursive-unset / apps / compizcompiz --replace
compiz --replace
#echo "I set up the network ..."
# Reloading network applet
#killall nm-applet
nm-applet
echo "I customize desktop icons ..."
# Copy the necessary shortcuts to the user's desktop
cd "/.scripts/data"
# Comment out unnecessary shortcuts (# before line)
cp "alacarte-made-9.desktop" / home / uchenik
cp “There is no start menu?” / home / uchenik
cp "gambas2.desktop" / home / uchenik
cp "kturtle.desktop" / home / uchenik
cp "kumir-suse10x.desktop" / home / uchenik
cp "Millioner (another copy) .desktop" / home / uchenik
cp "Millioner (copy) .desktop" / home / uchenik
cp "Pascal ABC.desktop" / home / uchenik
cp "QBasic.desktop" / home / uchenik
cp "Excel.desktop" / home / uchenik
cp "Word.desktop" / home / uchenik
cp "PowerPoint.desktop" / home / uchenik
cd /.scripts
cp "Clear Desktop" / home / uchenik
#cd / home / uchenik
#mv * .desktop "Desktop"
echo "Finishing work ..."
killall gnome-panel
notify-send "Everything is ready!" "Enjoy your work"
echo "Done!"

So, most of the explanations in the comments. Any kind of echo added for debug. Unless: Excel, Word and PowerPoint - this is how Rosinka is called, you guessed it, the well-known applications from the OpenOffice.org package. Apparently, this is clearer and easier for children. And a few words about nm-applet. With a small amount of RAM, as shown by the results of using two completely different machines, nm-applet sometimes does not start, and sometimes it starts, but it does not work. However, the solution, as you can see, is true, it needs some work.

So, why did I write this topic? Why I do not sell this script, which certainly seems very useful to many educational institutions, but simply publish it on the network? It's simple. Because the script is still damp. The same nm-applet will not work without sudo, and the Student is not included in the list of sudoers. Of course, we can do everything through:
$ echo 'password' | sudo -S whatever
But this means that we show the root password to everyone, what if there is a person who finds the right directory and looks at the script in gedit, for example? Well and everything, to the system end:
$ cd /
$ sudo rm -r *
In addition, the script is in autoload, and remove a check mark from there or see where the link goes to anyone who does not have the Student password. Yes, and you can return your home folder through Ubuntu Tweak - the program does not blow a password.
I’m actually sharing my own work and materials found on the net for free to make it easier for someone to administer a school Linux system. In return, I ask from you, dear residents of Habr, this is what:
Please point me to possible errors, pitfalls, etc., as well as help with OS improvements. All the same, it is necessary to completely limit the access of students to system files and settings. From me - periodic testing and free distribution of these developments.

Thank you for your attention, I hope that at least something helped you!