linux-admin.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Stephen Samuel <samnospam@bcgreen.com>
To: "Gustavo Guillermo Pérez" <gustavo@compunauta.com>
Cc: scott@dctchambers.com, linux-admin@vger.kernel.org
Subject: Re: Single purpose
Date: Tue, 01 Aug 2006 17:42:06 -0700	[thread overview]
Message-ID: <44CFF4DE.2090509@bcgreen.com> (raw)
In-Reply-To: <200607261342.07001.gustavo@compunauta.com>

Gustavo Guillermo Pérez wrote:
> El Sábado, 15 de Julio de 2006 15:04, Scott Taylor escribió:
>   
>> Hello admins,
>>
>> I have a client that wants a workstation that can do only one thing:
>> connect a browser to a website and that is all.  Only the one website too.
>>  I'm thinking something with Squid, maybe, or some IPTables entry, on a
>> stand alone workstation (probably CentOS).
>>
>> Does that sound do-able?
>>     
> Yes of course
>   
>> Any suggestions?
>>     
> Reasemble some kind of live distro, not just CentOs, like knoppix or Gentoo 
> Live DVD. Remove default gateway and add the name resolution of your webpage 
> to /etc/hosts, and of course add route just only for this webpage.
>
> I use to do it on my systems, and for me like other people suggest, a DVD4.3GB 
> is enough, no hard drive involved. or PXEBoot if you are on some kind of lan.
>
> :)
>   
in /cdrom/KNOPPIX/knoppix.sh , you can also turn off the shells on the 
consoles
(by replacing /etc/inittab) and change /etc/sudoers so that other stuff 
isn't available.
Since you ONLY want to be able to run the browser, then you may also 
want to run a more
limited desktop (like fvwm), and remove all of the mouse options. 
That'll make it reasonably
difficult to run anything other than the browser.

You might even set it up so that the browser is restarted whenever it dies.

Also note that, if you want a minimal system, you can set the 
workstation to pxeboot
and export the knoppix image from another UNIX workstation (I've had it 
running off
of both a knoppix box and an old FreeBSD box). Most cheap motherboards 
these days
allow you to pxeboot off of the built-in ethernet. That way you have a 
machine with
zero mechanical other than the fans and no way to boot strangely other 
than guessing
the BIOS password.

-- 
Stephen Samuel +1(778)861-7641             samnospam@bcgreen.com
		   http://www.bcgreen.com/
   Powerful committed communication. Transformation touching
     the jewel within each person and bringing it to light.

-
To unsubscribe from this list: send the line "unsubscribe linux-admin" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

      reply	other threads:[~2006-08-02  0:42 UTC|newest]

Thread overview: 10+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2006-07-15 20:04 Single purpose Scott Taylor
2006-07-15 20:28 ` shane
2006-07-17 14:30   ` Scott Taylor
2006-07-17 15:18     ` chuck gelm
2006-07-17 15:20       ` Scott Taylor
2006-07-17 15:44         ` chuck gelm
2006-07-17 21:00 ` Glynn Clements
2006-07-26 18:35 ` Gustavo Guillermo Pérez
2006-07-26 18:42 ` Gustavo Guillermo Pérez
2006-08-02  0:42   ` Stephen Samuel [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=44CFF4DE.2090509@bcgreen.com \
    --to=samnospam@bcgreen.com \
    --cc=gustavo@compunauta.com \
    --cc=linux-admin@vger.kernel.org \
    --cc=scott@dctchambers.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).