Initial commit

config/simplefiles/CONTESTANT/etc/dconf/db/local.d/00-disable-idle

@@ -0,0 +1,3 @@
+# Disable blank screen
+[org/gnome/desktop/session]
+idle-delay=uint32 0

config/simplefiles/CONTESTANT/etc/dconf/db/local.d/00-disable-screensaver-lock

@@ -0,0 +1,3 @@
+# Disable lock on blank screen
+[org/gnome/desktop/screensaver]
+lock-enabled = false

config/simplefiles/CONTESTANT/etc/dconf/db/local.d/00-disable-suspend

@@ -0,0 +1,4 @@
+# Disable suspend when inactive
+[org/gnome/settings-daemon/plugins/power]
+sleep-inactive-ac-type = 'nothing'
+sleep-inactive-battery-type = 'nothing'

config/simplefiles/CONTESTANT/etc/dconf/db/local.d/00-disallow-updates

@@ -0,0 +1,3 @@
+# This prevents "Updates available" notifications
+[org/gnome/software]
+allow-updates = false

config/simplefiles/CONTESTANT/etc/dconf/db/local.d/00-gnome-shell-extensions

@@ -0,0 +1,2 @@
+[org/gnome/shell]
+enabled-extensions = ['contest-lock@soi.ch', 'user-indicator@soi.ch']

config/simplefiles/CONTESTANT/etc/dconf/db/local.d/00-lock-screen

@@ -0,0 +1,3 @@
+# Disable locking the screen
+[org/gnome/desktop/lockdown]
+disable-lock-screen=true

config/simplefiles/CONTESTANT/etc/firefox/policies/policies.json

@@ -0,0 +1,23 @@
+{
+  "policies": {
+    "OverrideFirstRunPage": "",
+    "NoDefaultBookmarks": true,
+    "DisableProfileImport": true,
+    "Preferences": {
+      "datareporting.policy.dataSubmissionPolicyBypassNotification": true,
+      "security.default_personal_cert": "Select Automatically"
+    },
+    "Homepage": {
+      "URL": "https://finals.soi.ch/",
+      "StartPage": "homepage"
+    },
+    "DisplayBookmarksToolbar": true,
+    "Bookmarks": [
+      {
+        "Title": "Grader",
+        "URL": "https://finals.soi.ch/",
+        "Placement": "toolbar"
+      }
+    ]
+  }
+}

config/simplefiles/CONTESTANT/etc/hosts

@@ -0,0 +1,33 @@
+127.0.0.1	localhost
+
+# The following lines are desirable for IPv6 capable hosts
+::1     ip6-localhost ip6-loopback
+fe00::0 ip6-localnet
+ff00::0 ip6-mcastprefix
+ff02::1 ip6-allnodes
+ff02::2 ip6-allrouters
+
+10.0.0.8 finals.soi.ch
+10.0.0.9 contestserver
+
+10.0.0.10 contestant10
+10.0.0.11 contestant11
+10.0.0.12 contestant12
+10.0.0.13 contestant13
+10.0.0.14 contestant14
+10.0.0.15 contestant15
+10.0.0.16 contestant16
+10.0.0.17 contestant17
+10.0.0.18 contestant18
+10.0.0.19 contestant19
+10.0.0.20 contestant20
+10.0.0.21 contestant21
+10.0.0.22 contestant22
+10.0.0.23 contestant23
+10.0.0.24 contestant24
+10.0.0.25 contestant25
+10.0.0.26 contestant26
+10.0.0.27 contestant27
+10.0.0.28 contestant28
+
+10.0.0.40 test40

config/simplefiles/CONTESTANT/etc/nftables.conf

@@ -0,0 +1,45 @@
+#!/usr/sbin/nft -f
+
+flush ruleset
+
+table inet filter {
+    chain input {
+        type filter hook input priority 0;
+
+        ct state invalid drop
+        ct state { established, related } accept
+
+        # Accept loopback
+        iif lo accept
+
+        # Accept ICMP
+        ip protocol icmp accept
+        ip6 nexthdr icmpv6 accept
+
+        # Accept incoming connections to these ports
+        tcp dport { ssh } accept
+
+        reject
+    }
+    chain forward {
+        type filter hook forward priority 0;
+        reject
+    }
+    chain output {
+        type filter hook output priority 0;
+
+        ct state invalid drop
+        ct state { established, related } accept
+
+        # Accept loopback
+        oif lo accept
+
+        # Accept outgoing connections to these addresses
+        ip daddr { 10.0.0.1-10.0.0.9 } accept
+
+        # Accept any connections by root user
+        #meta skuid root accept
+
+        reject
+    }
+}

config/simplefiles/CONTESTANT/etc/polkit-1/localauthority/20-org.d/rules.pkla

@@ -0,0 +1,11 @@
+# Show a root password prompt for these actions:
+# - change network settings
+# - hibernate
+# - change package download proxy
+# - mount removable storage, perform other disk operations
+[Disallow actions]
+Identity=unix-user:*
+Action=org.freedesktop.ModemManager1.*;org.freedesktop.NetworkManager.*;org.freedesktop.login1.hibernate;org.freedesktop.packagekit.system-network-proxy-configure;org.freedesktop.udisks2.*
+ResultActive=auth_admin
+ResultInactive=auth_admin
+ResultAny=auth_admin

config/simplefiles/CONTESTANT/etc/systemd/timesyncd.conf.d/ntp-server.conf

@@ -0,0 +1,3 @@
+[Time]
+NTP=finals.soi.ch
+FallbackNTP=10.0.0.9