Skip to content

Latest commit

 

History

History
37 lines (27 loc) · 1.96 KB

domains.md

File metadata and controls

37 lines (27 loc) · 1.96 KB

Domains

Domains are a set of computers running NightOS which are linked to each other. The way a domain's computers behave and interact are defined in the Domain Supervisor, which is only available to the domain administrator user.

It behaves like an extension of the parental control, though they are two completely distinct features and domains offer a lot more features, while being made not to manage a child's access to a computer but to manage thousands of comupters at once.

The concept

Domains enable all features of parental control (without the dedicated application though), as well as the following ones:

  • Mount a common storage between computers
  • Use remote user accounts for log in
  • Restrict access to applications
  • Restrict available permissions to users
  • Restrict installation and update of new applications
  • Manage how applications and the system are updated
  • Monitor CPU, RAM and storage usage on all computers
  • Get access to every user's storage (unless per-user encryption has been explicitly allowed)
  • Get remote terminal access to every running computer
  • Get virtual desktop access to every running computer
  • Put computers to sleep, hibernation, log out current user, power them off or reboot them
  • Start any computer remotely (if the computer does support it, e.g. through PoE)
  • Limit disk usage per user (in disk usage percentage or absolute value)
  • Limit the session duration per user
  • Limit the number of physical and virtual cores per user
  • Limit the amount of memory per user

Domain supervisor

The Domain Supervisor is a system application that shows up on any computer that is part of a domain. Only domain supervisor users can see it, but every user can run it through command line (though it will ask for a domain supervisor's username and password).

Here is the list of options the domain supervisor proposes:

TODO