Machine Room github

A school, its servers, and the notes

Linux, written down before it is forgotten.

Twenty years of building the Linux side of a school: one directory for identity, one home directory per student, and a lab fleet that can be rebuilt from a playbook. The configuration is in here, not just the summary.

ldap · sssd · nfs4 · autofs OpenLDAP · Debian 3 posts · last one Oct 2026

Latest writing

Three notes to start

All writing

Fig. 1 — the shape of it

One directory. One home. A lab you can rebuild.

Students authenticate once, against one directory, and their files follow them to any machine in the building. Nothing is stored on the machine in front of them, which is why re-imaging a room takes an evening and not a week.

How the pieces fit

Diagram: an LDAP server and an NFS server serving a room of lab clients, with identity via sssd and home directories via autofs. ldap1 389 / 636 nfs1 /srv/home · 2049 LAB CLIENTS lab-a lab-b lab-c sssd · autofs <n> more rooms sssd ldaps :636 autofs nfs4 :2049 mount or map authenticated lookup