Todo

A more current editable pad here: https://pads.ccc.de/suda

1) securing the user

- removing the user from sudoers

- chrooting the user (allowed commands: cd, ls, cat, nano, xsetroot, suda scripts)

2) make everything run automatically

- already tried making a VNC systemd service (but it didn't work)

3) setup iso manufacturing plant

arch-based:

- archiso

debian-based:

- refracta tools - scripts work well with homefolder stuff

3.1) script the ISO manufacturing process

4) setup installer

- refracta installer (Debian)

5) what will suda be

- are we including the networking part into the manufactured ISOs?

- if we are we need to setup (document or script) SSL, and strip the SSL part from ISO generation

- mechanisms: once you run or install the ISO you decide if you want to setup SSL for it or even use the networked version at all (ideal)

5.1) remove SSL and leave the networked part running (VNC runs on boot), then if you want SSL run a script or read the docs

6) Write the documentation

7) Make docker version of suda?

- enables running it on Rpi

- also feasible to just make scripts to run on any linux machine