Install SSL CA Certificate

openssl genrsa -out example.com.key 2048

openssl req -new -key example.com.key -out example.com.csr \
-subj "/C=DE/ST=NRW/L=Cologne/O=My Inc/OU=IT/CN=192.168.1.1/emailAddress=webmaster@example.com"

mv example.com.crt /etc/ssl/certs/
mv example.com.key /etc/ssl/private/

https://www.startssl.com/
Express Lane
Register...
Create certificate...
openssl req -new -key /etc/ssl/private/example.com.key -out /root/example.com.csr
cat /root/example.com.csr
Save as:
example.com.crt

wget http://www.startssl.com/certs/sub.class1.server.ca.pem -O /etc/ssl/certs/sub.class1.server.ca.pe

LTSP configure local devices

# install packages
apt-get install -y ltspfs
# libfuse2 fuse-utils

# all all user to group fuse
for USER in $(ls /home/); do
if [ $USER != "lost+found" ]; then
usermod -a -G fuse $USER
fi
done

# load fuse module on boot
cat /etc/modules | grep fuse || echo fuse >> /etc/modules

# modify ltsp configuration
echo "LOCAL_STORAGE=Y" >> /var/lib/tftpboot/ltsp/*/lts.conf

# Links
https://wiki.ubuntu.com/DebugLocalDev

IPv6

# grub: /etc/default/grub
GRUB_CMDLINE_LINUX_DEFAULT="ipv6.disable=1"
update-grub

# sysctl
sudo echo "#disable ipv6" >> /etc/sysctl.conf
sudo echo "net.ipv6.conf.all.disable_ipv6 = 1" >> /etc/sysctl.conf
sudo echo "net.ipv6.conf.default.disable_ipv6 = 1" >> /etc/sysctl.conf
sudo echo "net.ipv6.conf.lo.disable_ipv6 = 1" >> /etc/sysctl.conf

sudo sed -i 's|udp6|#udp6|g' /etc/netconfig
sudo sed -i 's|tcp6|#tcp6|g' /etc/netconfig

# Links
https://askubuntu.com/questions/309461/how-to-disable-ipv6-permanently/337736#337736

Fix file permissions

#!/bin/bash

for DIR in /media/bilder /media/lagerliste /media/projekte /media/texte; do
echo ${DIR}

echo "set owner..."
find ${DIR} \! -user nobody -exec chown nobody {} \;
find ${DIR} \! -group nogroup -exec chgrp nogroup {} \;
# chown nobody:nogroup ${DIR} -R

echo "set directory permissions..."
find ${DIR} \! -perm 777 -type d -exec chmod 777 {} \;
# find ${DIR} -type d -exec chmod 777 {} \;

echo "set file permissions..."
find ${DIR} \!

Downgrade Libreoffice to 3.3.4

# remove current LibreOffice
sudo apt-get remove -y libreoffice*

# change repository
sudo rm /etc/apt/sources.list.d/libreoffice-ppa-oneiric.list*

sudo mv /etc/apt/sources.list /etc/apt/sources.list.oneiric

cat << EOF | sudo tee /etc/apt/sources.list.d/natty.list
deb http://archive.ubuntu.com/ubuntu natty main restricted universe multiverse
deb-src http://archive.ubuntu.com/ubuntu natty main restricted universe multiverse
deb http://archive.ubuntu.com/ubuntu natty-updates main restricted universe multiverse
deb-src http://archive.ubuntu.com/ubuntu natty-updates main restricted u

Build LTSP thin client

# OPTIONAL: update debootstrap first
http://www.panticz.de/update_debootstrap

# build thin client image
# ltsp-build-client --arch=i386 --dist=trusty
# ltsp-build-client --dist=xenial --base /opt/ltsp/amd64-xenial
ltsp-build-client

# disable encryption
#cat <> /var/lib/tftpboot/ltsp/i386/lts.conf

cat <> /var/lib/tftpboot/ltsp/amd64/lts.conf
[default]
LDM_DIRECTX=True
LDM_SESSION="gnome-session --session=gnome-fallback"
EOF

# local apps (nvidia, virtualbox and firefox)
export LTSP_HANDLE_DAEMONS=false
ltsp-chroot -p -a amd64
LANG=en_US.UTF-8
apt-get updat