đŸ›ïž openDesk: ComfortĂĄilteach agus SĂĄbhĂĄrlacht?

🎓 openDesk Edu — Sábhárlacht Dhigiteach in Ollscoileanna

Chemnitzer Linux-Tage 2026 · 28.03.2026

Tobias Weiß · HRZ Zentrale Systeme · UniversitĂ€t Marburg

SĂĄbhĂĄrlacht Dhigiteach — Na Ceithre CholĂșn

  • SĂĄbhĂĄrlacht Bhonagair đŸ–„ïž
    Freastalaithe agus lĂ­onraĂ­ a oibriĂș go neamhspleĂĄch
  • SĂĄbhĂĄrlacht SonraĂ­ đŸ’Ÿ
    RialĂș ar stĂłrĂĄil agus rochtain sonraĂ­
  • SĂĄbhĂĄrlacht BhogearraĂ­ đŸ’»
    BogearraĂ­ foinse oscailte gan spleĂĄchais phrĂ­obhĂĄideacha
  • SĂĄbhĂĄrlacht OibriĂșchĂĄin 🔧
    RialĂș iomlĂĄn ar nuashonruithe agus cothabhĂĄil

Cad Ă© openDesk?

  • Rogha foinse oscailte do M365 agus Google Workspace 🐧
  • Ag an Rialtas don Rialtas (BMI / ZenDiS) đŸ›ïž
  • Deimhnithe ag BSI (sĂĄbhĂĄrlacht na GearmĂĄine) 📜
  • Bunaithe ar scamall: Ionad oibre bunaithe ar Kubernetes ☁
  • ComhphĂĄirteanna modĂșlacha:
    • ComhrĂĄ, Comhaid, VicipĂ©id, BainistĂ­ocht tionscadail
    • RĂ­omhphost, LĂ©arĂĄidĂ­, Oifig grĂ©asĂĄin, FĂ­s
  • ÓstĂĄilte fĂ©in nĂł SaaS đŸ–„ïž

ForbhreathnĂș na gComhphĂĄirteanna

ComhphĂĄireann BogearraĂ­
Comhrá 💬 Element / Synapse
Comhaid ☁ Nextcloud
VicipĂ©id 📖 XWiki
Tionscadal ✅ OpenProject
RĂ­omhphost ✉ OX App Suite
LĂ©arĂĄidĂ­ 📊 CryptPad
Oifig grĂ©asĂĄin 📄 Collabora
FĂ­s đŸ“č Jitsi

StaitisticĂ­ Tionscadail openDesk

Forbairt 🔀 Pobal đŸ‘„
TĂșs: IĂșil 2023 RannphĂĄirtitheoirĂ­: ~ 70
Fad: ~ 3 bliana EagraĂ­ochtaĂ­: ~ 27
Commitanna: ~ 1,500
EisiĂșintĂ­: ~ 150

OpenCode.de đŸ›Ąïž | Slabhra SolĂĄthair 🔒
ardán maoinithe ag BMI | Íomhánna coimeádáin sínithe
Bonagair scamall sĂĄbhĂĄilte | SBOM do gach comhphĂĄireann

ForbhreathnĂș Bonagair

Tomhas Luach
NĂłidĂ­nĂ­ 9 (3 Rialaithe + 6 Oibrithe)
DĂĄileadh K3s v1.32.3
CĂłras Debian 12
CPU (Íoslaghad) 16 croí
RAM (Íoslaghad) 64 GB
StĂłrĂĄil 4+ TB Ceph

FĂ­orĂș le Proxmox

Helmfile agus Timpeallacht HRZ

# Seoladh le Helmfile
helmfile apply -e hrz
  • OrceadrĂș Helmfile ⚓
    • CumraĂ­ocht fhĂłgrach i helmfile_generic.yaml.gotmpl
    • SĂĄrĂș sonrach don timpeallacht i environments/hrz/
    • CĂșltaca spleĂĄchais uathoibrĂ­och
  • Timpeallacht HRZ cruthaithe đŸ–„ïž
    • CĂłip de staging le coigeartuithe
    • CumraĂ­ocht shonrach don Ollscoil Marburg
    • CĂłras tĂĄstĂĄla don oibriĂș pĂ­olĂłta

Forbairt Chart ÁitiĂșil

# ClĂłnĂĄil/pull chartanna go hĂĄitiĂșil
python3 dev/charts-local.py --match intercom
python3 dev/charts-local.py --revert
  • Forbairt agus TĂĄstĂĄil Chart ÁitiĂșil đŸ’»
  • ClĂłnĂĄil/pull i charts-<branch>/ âŹ‡ïž
  • TagairtĂ­ Helmfile do chosĂĄin ĂĄitiĂșla 📄
  • CĂșltaca agus Aisghairm le --revert ↩

Iompórtáil Úsáideoirí: Soláthar

  • UDM REST API — IompĂłrtĂĄil CSV/ODS, grĂșpaĂ­ LDAP đŸ‘€
  • Nascadh Cuntais — Nascadh aitheantais SAML 🔗
  • MĂłd TaispeĂĄna — Cuntais tĂĄstĂĄla, grianghraif phrĂłifĂ­le đŸ–Œïž

Iompórtáil Úsáideoirí: Dísholáthar

Próiseas Dísholåthair dhå chéim:

  • 1Ăș CĂ©im: ÚsĂĄideoir a DhĂ­chumasĂș
    • IAM API → UCS DhĂ­chumasĂș → Stampa ama sa tuairisc
    • Keycloak: SAML a bhaint + grĂșpaĂ­ a scaipeadh
  • 2Ăș CĂ©im: ÚsĂĄideoir a Scriosadh
    • TrĂ©imhse grĂĄ (6 mhĂ­) → Scriosadh buan
    • Aschur: deprovisioned-*, deleted-*

🎓 openDesk Edu — ForbhreathnĂș

  • SĂ­neadh openDesk CE do ollscoileanna đŸ«
  • ComhphĂĄirteanna Nua:
    • CĂłrais BainistĂ­ochta Foghlama (ILIAS, Moodle)
    • ComhdhĂĄlacha FĂ­se don MhĂșinteoireacht (BigBlueButton)
    • Sync Comhad Malartach (OpenCloud)
  • Gach ceann integrĂĄilte le Keycloak SSO 🔐
  • Gach rud a sheoladh le helmfile apply ⚡

GitHub: github.com/opendesk-edu/opendesk-edu

📚 ComhphĂĄirteanna OideachaisĂșla

ComhphĂĄireann StĂĄdas Cur SĂ­os
📖 ILIAS ✅ CobhsaĂ­ LMS le SAML SSO — CĂșrsaĂ­, SCORM, TĂĄstĂĄlacha
📖 Moodle 🔄 Beta LMS le Shibboleth — Breiseáin, Leabhar Grád
đŸŽ„ BigBlueButton 🔄 Beta ComhdhĂĄlacha fĂ­se don mhĂșinteoireacht — Taifeadadh, FĂĄn BĂĄn
☁ OpenCloud 🔄 Beta Sync comhad bunaithe ar CS3 — Rogha eile do Nextcloud

🔐 ILIAS SSO — Ailtireacht

Próiseas SSO 6 chéim:

  1. đŸ–„ïž PortĂĄl → TĂ©il ILIAS
  2. 🔄 ILIAS → Shibboleth SP
  3. 🔑 Keycloak → Uni-IdP
  4. 🎓 Logáil isteach (weblogin.uni-marburg.de)
  5. 📹 DearbhĂș SAML ar ais
  6. ✅ PainĂ©al ILIAS

Stack: Apache + Shibboleth SP + Keycloak Broker

🔧 Seoladh ILIAS — Ceachtanna Foghlamtha

Fadhb RĂ©iteach
Wrong Login or Password SAML NameFormat in easnamh in attribute-map.xml
Ainmneanna tréithe mícheart Uni-IdP a sheolann givenname/surname
handlerSSL → 404 TLS inmheánach: Apache SSL ar phort 8443 (v5)
Cuntais dĂ­chumasaithe shib_activate_new = 0
Teorainn ama SAML 60s → 300s
SeiceĂĄil SlĂĄinte CronJob: curl Atreo-SSO (go uair an chloig)

🚀 TĂșs Tapa - Seoladh i 3 ChĂ©im

# 1. ClĂłnĂĄil an stĂłr
git clone https://github.com/opendesk-edu/opendesk-edu.git
cd opendesk-edu

# 2. Cumraigh do thimpeallacht
# Cuir in eagar helmfile/environments/default/global.yaml.gotmpl
# Socraigh do fearann, fearann rĂ­omhphoist, agus reigistear Ă­omhĂĄnna

# 3. Seoladh
helmfile -e default apply

📖 DoicimĂ©adĂș iomlĂĄn: docs/getting-started.md

CumraĂ­ocht LĂ­onra

  • Rialaitheoir Ingress: haproxy-ingress
  • SeachfhreastalaĂ­: Traefik — CrĂ­ochĂș HTTP/HTTPS 🔄
  • LoadBalancer: MetalLB
  • Gach Ingress aistrithe go haproxy ✅

Painéal Grafana

PrĂłiseas Nuashonraithe

# Luchtaigh eisiĂșintĂ­ is dĂ©anaĂ­
git checkout -b myrelease upstream/tags/v1.12.2
git pull

# AthbhreithniĂș na n-athruithe
helmfile diff -e hrz

# Cuir na nuashonruithe i bhfeidhm
helmfile apply -e hrz

# Aisghairm mĂĄs gĂĄ
helmfile rollback -e hrz
  • Nuashonruithe rialaithe trĂ­d an Helmfile 🔄
  • Cumais aisghairm Ă©asca ↩

UasghrĂĄdĂș HRZ: AistriĂș Ingress

  • AistriĂș: nginx → haproxy-ingress 🔀
    • v1.11.2 → v1.13.x (brainse uniapps)
    • Gach Ingress aistrithe go haproxy ✅
  • Aicmeanna Ingress:
    • ingressClassName: haproxy
    • nginx as feidhm go hiomlĂĄn
  • CumraĂ­ocht:
    • replicaCount: 2, LoadBalancer
    • tune.bufsize: 65536, tune.http.maxhdr: 256

UasghrĂĄdĂș HRZ: CĂșltaca DĂșbailte

  • Spriocanna: StĂłrĂĄil chĂșltaca iomadĂșil đŸ—„ïž
  • StraitĂ©is: ComhoiriĂșnach le SAML le cĂșl-taic restic 🔄
    • Bunscoth: s3.example.org:9000/backup-primary
    • TĂĄnaisteach: s3-backup.example.org:9000/backup-secondary
    • Sceideal: LaethĂșil ag 00:42, SeiceĂĄil seachtainiĂșil, Glanadh DĂ© Domhnaigh ⏰
  • CoinnĂ­oll: 14 LaethĂșil, CoinneĂĄil na 5 deireanacha 📩

BacainnĂ­ InstitiĂșideacha

  • Roinn DlĂ­ ⚖
    • GDPR, conarthaĂ­ AVV, ComhlĂ­onadh ceadĂșnas
  • Comhairle na dFostaithe đŸ‘„
    • ComhaontĂș seirbhĂ­se, ComhchinneĂĄil do chĂłrais IT
  • RiarachĂĄn 🏱
    • Roghanna Microsoft, ComhoiriĂșnacht formĂĄidĂ­
  • DoicimĂ©id Riachtanacha 📄
    • DSFA, RĂ­omh TCO

Chéad Chéimeanna Eile agus Moltaí

  1. TĂșs a chur le hoibriĂș pĂ­olĂłta ▶
  2. Roll-amach cĂ©im ar chĂ©im (10 → 100 → 1000 ĂșsĂĄideoir) đŸ‘„
  3. DealĂș soilĂ©ir Ăł chĂłrais tĂĄirgeachta 🔗
  4. MeasĂșnĂș: CatagĂłirigh cĂĄsanna ĂșsĂĄide de rĂ©ir riachtanais sĂĄbhĂĄrlachta ✅
  5. BuisĂ©ad do fhoireann oibriĂșchĂĄin (nĂ­ hamhĂĄin cur i bhfeidhm) 💰

đŸ€ BĂ­ pĂĄirteach!

Cabhraigh linn openDesk Edu a thĂłgĂĄil do ollscoileanna!

  • ⭐ RĂ©alt an stĂłr: github.com/opendesk-edu/opendesk-edu
  • đŸ§Ș TĂĄstĂĄil go hĂĄitiĂșil: Seoladh le Helmfile agus tabhair aiseolas
  • 🐛 Tuairiscigh fadhbanna: Issues le haghaidh fabhtanna nĂł iarratais ghnĂ©ithe
  • đŸ’» RannchuidiĂș: PRs fĂĄilte — fĂ©ach CONTRIBUTING.md

DĂ©anamis bogearraĂ­ ollscoile sĂĄbhĂĄilte le chĂ©ile! 🎓

AcmhainnĂ­ TeicniĂșla

AcmhainnĂ­ EagraĂ­ocha

  • Moladh HBDI (MeasĂșnĂș M365):
    PDF
  • Hessischer Digitalpakt Hochschulen:
    PDF
  • EVB-IT Open Source (ZenDiS):
    zendis.de
  • EVB-IT & BVB (digitale-verwaltung.de):
    digitale-verwaltung.de
  • SĂĄbhĂĄrlacht Dhigiteach in Ollscoileanna:
    PDF
  • CoCreate-WerkstattgesprĂ€ch:
    PDF