Technical Support

Technical Notes: Endless Justice is Linux distribution built on Endless OS. Endless OS is based on Ubuntu Gnome, however the entire Endless filesystem is largely "read-only" except for user specific home folders. This means that individual applications are sandboxed as Flatpaks, through Flathub.

These features of Endless Justice are great at making a secure, relatively simple, operating system at low cost, but can make remote management or more complicated network administration impossible.

The original intent of this product is for corrections setting where little to no IT support exists (many youth correctional facilities, adult facility classrooms and libraries, county jails, etc). Recently, however, the devices have become part of larger state-wide programs and can be used in this context.

As a standalone device, Endless Justice Securebooks provide millions of free educational resources, inspirational videos, introductions to coding, digital literacy tools, a pathway for custom content, and much more.

If the limitations of Endless create more problems than they solve, Securebooks can always be repurposed with Windows (any standard distribution) or Chrome OS (via Neverware) however the free content and software will obviously not be included in those Operating Systems.

Endless Justice is created by non-profits World Possible and The Endless OS Foundation specifically for youth and adults in custody. We believe in building capacity for the students and staff to manage their own deployments and focus heavily on education. Endless Justice is currently only installed on Securebooks by Justice Tech Solutions.

For topics not covered in the presentations below, alternate sources of support include:

The Endless OS Forums: https://community.endlessos.com/

World Possible: info@worldpossible.org

Endless OS Deployments Team: deployment@endlessos.org

Individual App Issues: https://flathub.org/home

Layer 2 Deployments rely heavily on Kolibri created by the non-profit Learning Equality.

Kolibri Support: https://community.learningequality.org/

For issues with Securebook hardware, please use the "Ask a Question" section at Justice Tech Solutions

Techincal Support Resources

Create User Accounts

  • Make sure to only create "student" accounts for students

  • Student account passwords can be changed at anytime by an admin, no need to worry about a student changing their own password

  • Creating a new account for a student can often cure any issues as OS is read only

01 Create User Account

Distribute Docs to All Users

  • A manual process to upload new content for all user accounts of the Securebook to access

  • Requires putting the Securebook on a docking station

  • Requires formatting the USB to work across Linux and Windows (exFAT or FAT32)

02 Distrib Docs to All

Distribute Docs to Single User

  • A manual process to upload new content for all user accounts of the Securebook to access

  • Requires putting the Securebook on a docking station

  • Requires formatting the USB to work across Linux and Windows (exFAT or FAT32)

03 Indiv Distrib

View All User Documents

  • Must be logged in an admin account

  • Does not require the computer to be docked, easily done in the field

  • If a student has used the feature of Libre Office to password protect a document, this cannot be undone. Must get the student to release the password in order to view content. This should be addressed by policy and a user agreement

04 See User Files

Backup All User Documents

  • Must be logged in an admin account

  • Requires putting the Securebook on a docking station

  • Requires formatting the USB to work across Linux and Windows (exFAT or FAT32) as well as naming the USB: WORLDPOSSIB

  • Tool is named "jsync"

05 JSYNC Create a USB Stick of ALL User Documents

Backup Single User Documents

  • Can be logged in as an admin or the individual student account

  • Requires putting the Securebook on a docking station

  • Requires formatting the USB to work across Linux and Windows (exFAT or FAT32)

06 Create USB Stick for Individual User Documents

Delete a User Account

  • Must be logged in an admin account

  • Does not require the computer to be docked, easily done in the field

  • Recommend to remove files from the device unless there is any extremely compelling reason otherwise

07 Delete a User Account

Factory Reset or Update

  • This process will delete all user accounts, files, and customizations on your Securebook

  • Please plug the USB into the dock before adding the Securebook to the dock

  • Requires (1) BIOS password (not just admin rights), (2) USB from World Possible and (3) USB docking station

08 Reset to Factory Settings

Student Account Basics

  • Helpful to guide students through the basics of their desktop and content

  • Document can be printed and handed out to students or staff doing deployment work

09 Student Account Basics

Review Student Activity

  • Must be logged in an admin account

  • Does not require the computer to be docked, easily done in the field

  • Gives high level information on Student logins and logouts

10 Track Student Account Activity

Remove an App from Laptop

  • Must be logged in an admin account

  • Deleting an app from the Desktop does not formally remove an app from the computer

  • An app must be "uninstalled" from the app center to be deleted from the computer for all users

11 Remove App from Laptop

Change User Name

  • Does not require admin account

  • Students can do this on their own, it has no material affect on operation of the system

  • If this causes problems for admin, it will have to be addressed through the user agreement

12 Change User Name

Endless Justice HP Probook Only

The trainings below labeled "Probook Only" refer to our Probook 4.0 based on HP Hardware - these are in limited locations

Probook Only - WiFi Connect

  • Must be logged in an admin account

  • Requires computer by docked on HP Slimdock, power to the docking station, and Panda Wireless USB WiFI dongle

  • Log out when process is over

Probook Only - Connect to WiFi

Probook Only - Unlock WiFi

  • Must have BIOS password to enter BIOS

  • Should only be enabled once approved by the appropriate IT personnel

  • This feature is designed for students who must leave the facility for college or school

  • This process should only be completed by someone with the technical expertise to execute them appropriately

  • If you would like detailed instructions, please submit a support request below

Probook Only - Reset Device

  • This process will delete all user accounts, files, and customizations on your Securebook

  • Please plug the USB into the dock before adding the Probook to the dock

  • Requires (1) BIOS password (not just admin rights), (2) USB from World Possible and (3) HP slim docking station

  • This process should only be completed by someone with the technical expertise to execute them appropriately

  • Anyone who has access to the BIOS password can unlock features of these devices which present security risks

  • Boot to USB, press enter 2x, yes 2x, wait 30 min

  • If you would like detailed instructions, please submit a support request below

Advanced Technical Support Notes

There are many advanced ways for technically savvy individuals to manage Endless devices. The Endless community forums are the best place to start. Some particularly helpful tidbits using the terminal:

  • flatpaks are stored at: /var/lib/flatpak/app

  • flatpaks can be un-installed using the command: flatpak uninstall -y {app name}

  • flatpaks are creations of independent third parties hoping to deliver quality content for free, but they are not always high quality and are sometimes buggy. That is a drawback of the open resources community, but a reality outside facility walls as well. We provide extremely limited support for individual apps.

  • flatpaks in Endless do NOT share the user name or admin accounts of Endless, they operate entirely independently. We recommend that Virtual School and Kolibri be pre-registered with an admin username and password as these apps utilize admin accounts. Students may create other user names in other apps.

  • Endless by default has a wonderful help section pre-installed on the computer. It can be dated in some areas but is a good general resource when helping users troubleshoot

  • the default user desktop icon arrangement is stored at: /var/lib/eos-image-defaults/icon-grid/icon-grid-C.json

  • RACHEL, World Possible's offline content app, is merely a collection of HTML files stored at: /var/local/bin/rachel

  • if you have a regular process you follow the first time you boot up a computer, you can "script" this process to be relatively automated. This is requires understanding shell scripting but can be extraordinarily useful

  • if necessary, it is possible to find out what individuals have viewed what content. This is a difficult, manual process though, and should only be used if there is some PREA type concern about content viewing

  • an admin account in the wrong hands can be powerful and open things like changing other users passwords or entering WiFi passwords (if WiFi docks are available) - please keep these passwords safely guarded and change them from their default password upon arrival

  • once a layer 1 deployment is up and running, usually the biggest demand is finding an easy way to distribute new content to Securebooks. This is time to add a layer 2 deployment to your set-up


Video Library of Trainings

Many of the trainings above are also included in a YouTube video library here:

https://www.youtube.com/playlist?list=PLnkFbN6cji8qkgsPsV9ZFHYEC9zQa8-Pq

The first of these videos is available to the left of this text, however the full library is accessed by the above link.

Still Have Questions? - Submit a Support Request