Scalable SOE deployments

Abstract

PrisonPC is designed as a secure PILS (Prisoner Information and Learning System) which, among many other things, is based around PXE-bootable SOEs running on diskless desktops. This talk is centred around how we build and upgrade those SOEs, and how we assign them to “realms” allowing us to alter large quantities of desktops’ SOEs at once.

Depending on time constraints, I may also delve into some of the security features we include, such as whitelisting optical media for users, and blacklisting USB storage.

Video

Open video in new page

Slides

Open slides in new page