Changelogs for full kiosk releases

Please be aware that as the times goes the stable releases may become affected by a known security vulnerabilities which are resolved in real time in the kiosk current branch. These issues remain unfixed in full releases until new kiosk version is out.

We encourage everybody to subscribe to an automatic updates service as it lets you be safe all the time.

13th of March 2016

Changes implemented in Porteus Kiosk 4.3.0:

Upgraded system components to latest version from Gentoo stable branch including Linux kernel 4.9.14, Xorg Server 1.19.2, Mozilla Firefox 45.8.0, Adobe Flash and Google Chrome 55.0.2883.87. Full list of packages used for creating this release can be found under this link.

Porteus Kiosk changes including Cloud and ThinClient variants:

- paramter 'client_id=automatic' will automatically asign the client ID to the kiosk - no need for manual configuration per device. This parameter makes client installation easier and faster especially for large deployments.

- activated 'serial' backend for CUPS printing service by default. Some usb printers require it for direct connection.

- if kiosk installation fails then debug info will be displayed in the browser in order to help identifying the problem, e.g. I/O errors on target device

- added warning when there may be not enough RAM available on the PC to perform system installation. Kiosks with 512MB of RAM may fail the installation if large components (e.g. Java) are enabled in the wizard.

- system reconfiguration/upgrade will be skipped if ISO is burned on non writable media

- system reconfiguration/upgrade will eb skipped if ISO was manually burned on a partition (e.g. /dev/sda1) while it should be burned on a device (e.g. /dev/sda)

- added OpenDNS as secondary DNS server in the installation wizard for static IP configurations. It will be used as a fallback to Google DNS.

- if bookmark name is not defined in the 'managed_bookmarks=' parameter and the page title is not available then default to the raw URL for the bookmark name

- set hostname before starting rsyslog so proper kiosk hostname is saved in the logs

- dropped obsolete Chrome policies: DisableSpdy, DnsPrefetchingEnabled from default Chrome configuration

- rotate /var/log/x11vnc.log every day so it wont grow in size too much

- other fixes and improvements

Porteus Kiosk Server version "Premium" changes:

- added 'Tools' menu to the Administration Panel with backup and restore utilities which allows to create and restore system snapshots containing all custom server files

- its possible to filter client list by specific string, e.g. hostname, browser, kernel version

- allow hiding the clients which are currently offline

- display PCID, MAC and hostname in the client list also for the clients which are currently offline so its possible to identify each kiosk

- display newest client logs on the top of the monitoring window and not the bottom

- added an option to disable minitoring of the client logs

- added function to view archived (rotated) client logs

- automatically create backup files for the client configs which are edited directly on the server. Its possible to restore previous version of the config using 'Restore' button in the editing window.

- detach windows from the Administration Panel so its possible to copy data between viewed and edited files

- open client's debug log in the browser which makes easier to search for specific info

- always use numerical order for the client list (sort by client ID)

- fixed column sizes in the client list, also for older clients going back to 3.6.0 release which do not report kernel and browser version to the server

- reduced the size of clients logs displayed in the Administration Panel from 1MB to last 1000 events (approx 300KB) as larger logs may affect server performance in case of many new entries addedd to the log at the same time

- use 'Unknown' string instead of an empty value if client wont report its system version properly

- calculate client VNC port which needs to be opened on the server side in more reliable way to avoid "not a RFB server" error

Additional information about the changes introduced in Porteus Kiosk 4.3.0 can be found in this news post: link.

All changes can be also tracked in the 'automatic updates' changelogs: link and link.

5th of December 2016

Changes implemented in Porteus Kiosk 4.2.0:

  • Upgraded all system components to latest version from Gentoo stable branch including Linux kernel 4.4.36, Xorg Server 1.18.4, Mozilla Firefox 45.5.1 and Google Chrome 54.0.2840.100. Full list of packages used for creating this release can be found under this link.
  • Client files: wallpaper, screensaver slideshow images, browser preferences, proxy pac config can be hosted directly on Porteus Kiosk Server - no need to use 3rd party web hosting service anymore. Clients must be configured with relevant parameters and utilize 'server://file_name' parameter value syntax.
  • Its possible to toggle between browser tabs at specific time interval. This feature is available only when navigation bar of the browser is disabled (kiosk works in digital signage mode).
  • Screensaver slideshow can display images in random order instead of alphabetic order.
  • 'C++' and 'C--' keyboard shortcuts are deactivated when 'disable_zoom_controls=yes' parameter is used.
  • Fixed 'vga_driver=modesetting' parameter which works properly now.
  • Recompiled xf86-video-intel driver without DRI3 support as it causes issues on older Intel Alviso (gen3) GPUs.
  • Make sure the SSH tunnel connection is established fully before trying to download remote config from Porteus Kiosk Server.
  • Other fixes and improvements.
  • Porteus Kiosk Server changes:
  • - allow rotating Server logs more often than once in a day

    - use Conky to monitor Server resources: CPU, RAM, storage and network utilization

    - removed 'grep' alias from /etc/bash/bashrc as grep applet from bysybox does not support '--colour=auto' option

    - make possible editing of the remote config through the Administration Panel

    - added parcellite utility which works as clipboard manager

    Additional information about the changes introduced in Porteus Kiosk 4.2.0 can be found in this news post: link.

    All changes can be also tracked in the 'automatic updates' changelog: link

    5th of September 2016

    Changes implemented in Porteus Kiosk 4.1.0:

  • Upgraded all system components to latest version from Gentoo stable branch including Linux kernel 4.4.19, Mozilla Firefox 45.3.0 and Google Chrome 52.0.2743.116. Full list of packages used for creating this release can be found under this link.
  • In this release we have introduced two new spins of our Porteus Kiosk system: variant Cloud and variant ThinClient
  • Kiosk config can be hosted directly on Porteus Kiosk Server - no need to use 3rd party web hosting service anymore. Clients must be configured with 'kiosk_config=' parameter and utilize 'server://config_name' protocol.
  • Its possible to define custom persistence level for the guest's home folder.
  • When enabled, password manager allows remembering logins and passwords to the websites.
  • Default search engine for the browser has been changed to the Google although its still possible to set DuckDuckGo if privacy is the top priority.
  • Linux kernel used in our system can be tweaked with the help of additional kernel parameters.
  • Its possible to control the slide duration (time between loading new image) for the screensaver slideshow.
  • Managed bookmarks allows to define the bookmark name.
  • DMPS is no longer forced to turn off the monitor after 10 minutes of inactivity and you may define the time after which the monitor goes off.
  • Session idle parameter will restart whole session (Xorg) for the variants Cloud and ThinClient.
  • Wizard: Added option to preserve persistent partition, perform a quick format or completely erease the hard drive before the installation.
  • Enabled bootsplash by default for the post installation ISO.
  • Clients behind the proxy can connect to Porteus Kiosk Server properly.
  • Rsyslog replaced metalog as default logging daemon - its more configurable and supports logging to remote destinations.
  • If association with Porteus Kiosk Server is enabled then bind remote rsyslog port locally (over SSL tunnel). System logs in severity warning and above will be logged on the Server side - this is useful for proactive support.
  • Screensaver slideshow will sort the pictures according to their filename
  • Session idle: notify the user in case when activity was detected and session wont be restarted.
  • If hostname is not specified and if Kiosk Server association is enabled then use client_id as hostname.
  • Automatically eject optical disc after successful installation.
  • Add '--disable-pinch' to Chrome flags if 'disable_zoom=yes' parameter is used.
  • Kiosk config can be hosted on FTP servers.
  • List touch devices in debug report.
  • If SSH service is enabled then allow login to Porteus Kiosk Server as kiosk user only from localhost interface (force using SSL tunnel).
  • When multiple homepages are defined and 'homepage_check=' parameter is enabled then query only first homepage to prevent "homepage is not available" message.
  • Fixed 'scheduled_actions=' parameter not working correctly when hour or minute was staring with '0' number (e.g. 09:04).
  • Make sure that authorized_keys file was copied correctly from Porteus Kiosk Server.
  • Fixed character conversion issue for Citrix Receiver.
  • Stunnel: reduced logging level from "warning" to "critical" to get rid of warning entries flooding the log when remote server is down.
  • Block 'Ctrl+p' key combination if printing component is not enabled.
  • Update DNS settings properly when dialup connection is used.
  • Session idle: prevent very first browser restart if no user activity is detected.
  • Blocked Shift+Enter key combination by default as it was opening a new Firefox window when user clicked on download link and then pressed Shift+Enter.
  • Do not mount removable device and start the browser if session is locked by the "session password" window.
  • Recompiled hplip package with scanner and fax support.
  • Make sure that ssh tunnel was established properly before forwarding client's data to the Server. This is to avoid 'password not found' error which could appear when establishing VNC connection from Administration Panel to the client.
  • Escape '?' character for Firefox's whitelist/blacklist functions so URLs containing this characters are handled correctly.
  • Do not start splash screen if 'debug' kernel parameter is used.
  • Disabled geolocation and OCSP services for Firefox as they make troubles for kiosks which uses proxies with authentication (long wait for a timeout when connecting to Mozilla services).
  • Keep cron logs in a separate file so they wont be flooding main system log.
  • Added following new packages: c_rehash, hicolor-icon-theme, json-c, libestr, liblogging, net-snmp, rsyslog, sane-backends, startup-notification.
  • Enabled new busybox applets: eject, mktemp.
  • Other fixes and improvements.
  • Porteus Kiosk Server changes:
  • - added 'Remote Management' tab to the Administration Panel for handling kiosk configs through the Server

    - added second tab for logging system events (warnings and above) from the kiosk clients.

    - added 'Reconnect' button which temporarily drops all client connections to the server. This is useful in case of having connection problems or to update clients data.

    - display browser version in the browser column of the Administration Panel

    - display client's kernel version in the Administration Panel

    - enabled startup notifications for the launchers

    - custom commands are preceded with 'nohup' so they continue executing even when ssh is disconnected

    - added back 'restart session' option (client must run latest kiosk version from automatic updates channel in order to support this feature properly)

    - added confirmation window to 'reboot/shutdown client' options

    - Administration Panel can be resized and maximized. Useful when you want to monitor many clients without scrolling the window.

    - added 'Help' button to the 'Client Logs' and 'Remote Management' tabs in the Administration Panel which points to the webpage which explains how these features work

    - removable devices are mounted with read-write access

    Extended information about the changes introduced in Porteus Kiosk 4.1.0 can be found in this news post: link.

    All changes can be also tracked in the 'automatic updates' changelog: link

    28th of May 2016

    Changes implemented in Porteus Kiosk 4.0.0:

  • Upgraded all system components to latest version from Gentoo stable branch including Linux kernel 4.4.11, Mozilla Firefox 45.1.1 and Google Chrome 50.0.2661.102. Full list of packages used for creating this release can be found under this link.
  • Kernel and userland packages are compiled for x86_64 architecture, that means Porteus Kiosk in current and future versions wont support 32bit CPUs anymore. If your PC does not have 64bit capable CPU then you still will be able to install last kiosk release in 32bit line: Porteus Kiosk 3.7.0.
  • Added support for setting default microphone in case you have multiple capture devices in the system.
  • Its possible to download screensaver slideshow ZIP archive every X minutes. This is useful if you need to update the slideshow often and want to do this quickly without rebooting the kiosk.
  • Import certificates function has been extended to support also Citrix Receiver certificates.
  • Added 'launch network wizard' applet to the first run wizard which allows to cancel waiting on the connection and repeat network setup procedure.
  • You may record a message to test selected capture device before installing the kiosk.
  • Display /media location in the filepicker left side panel so its easier to find where removable media were mounted.
  • Use 'uvesafb' driver to display splash screen during boot when native framebuffer driver is not available.
  • When booting fails show an info how to burn the kiosk ISO correctly on the usb sticks.
  • Fixed installation on SD cards which broke after switching to the GRUB bootloader.
  • Disabled 'horizontal overscroll' in Chrome as this feature may cause privacy concerns.
  • Added OpenGL info to the debug report.
  • 'persistence=session' parameter should not depend on 'disable_private_mode=yes'.
  • Allow for filepicker in Chrome when support for removable media is enabled.
  • Enable shared VNC access by default.
  • Enabled logging for x11vnc daemon.
  • Disabled access to four chrome:// facilities which slipped through our blacklist filter.
  • When in debug mode unset homepage_append parameter so debug report can be displayed in the browser correctly.
  • Keep screensaver window on top when browser works with navigation bar disabled and is restarted by 'browser_idle=' parameter.
  • Wizard: remote management 'test config' button downloads the config using wget and displays in gtkdialog window rather than the browser.
  • Wizard: display link quality info after AP name in the scanning result.
  • Kernel confg: enabled x86_64 architecture by default. Enabled drivers for hardware monitoring, PVSCSI SCSI Controller and added support for POSIX Message Queues.
  • Added following new packages: conky, cronbase, cronie, dosfstools, e2fsprogs, e2fsprogs-libs, fuse, gsimplecal, libertine, libpcre, lm_sensors, logrotate, mc, mesa-progs, metalog, ncurses, noto, popt, rsync, tint2, tslib, volumeicon, xcb-util, xev, xf86-input-tslib, xf86-video-fbdev, xfsprogs
  • Other fixes and improvements.
  • Porteus Kiosk Server changes:
  • - VNC viewer: lowered JPEG compression from 9 to 4 which helps slower connections and keeps image quality on relatively good level.

    - wait up to 5 seconds for VNC connections as sometimes they are slow to initialize

    - chroot kiosk user into /var/jail properly when making initial client -> server connection

    - reduced logging for stunnel to level 4 (warning) and disabled /var/log/stunnel.log. Metalog looks after stunnel messages now.

    Extended information about the changes introduced in Porteus Kiosk 4.0.0 can be found in this news post: link.

    All changes can be also tracked in the 'automatic updates' changelog: link

    29th of February 2016

    Changes implemented in Porteus Kiosk 3.7.0:

  • Upgraded all system components to latest version from Gentoo stable branch including Linux kernel 4.4.3, xorg-server 1.17.4, Mozilla Firefox 38.6.1 and Google Chrome 47.0.2526.111. We have moved early to kernel 4.4.x LTS line as we need better support for Intel Skylake processors. Full list of packages used for creating this release can be found under this link.
  • Kernel and userland packages are compiled for i586 architecture, that means Porteus Kiosk does not support i486 CPUs anymore.
  • Added support for RTC wake alarm which allows powering up the kiosk at certain hour:minute within each day of the week. PC motherboard must support this feature and 'Wake up events' must be enabled in the BIOS/EFI firmware in order to get this function working properly.
  • Its possible to protect the kiosk or server session with a password. Only authorized users can access the browser/administration panel and use the system.
  • Zoom controls and "pinch to zoom" touch gesture can be disabled to prevent the users from changing zoom level in the browser.
  • Added support for running custom command during system startup. It can be used for various purposes, e.g. configuring the touchpad, rsyncing offline content, displaying kiosk IP address.
  • In case of problems with the display its possible to use alternate 2D DDX driver: modesetting or vesa.
  • Import certificates function can load certificates directly from .crt and .pem files.
  • Porteus Kiosk Server changes:
  • - when version "Premium" is selected in the installation wizard then allow for setting following system parameters: time zone, keyboard layout, screen resolution, default sound card/sound volume, activate DPMS, disable UEFI support, additional fonts, allow accessing the server through the SSH and VNC protocols

    - increased support fo simultaneous VNC connections from 99 to 10k

    - handle VNC connections to the kiosk client properly when VNC access to the server is enabled

    - added 'Server docs' button to Administration Panel which opens the browser on (and server related documentation in the future)

    - added cifs package so its possible to mount SMB shares from server command line

    - check for server updates every 24h and display notification asking for reboot if new system version is found

    - added GUI option for sending custom command (e.g. notification) to the client

    - disabled VBox guest additions version check notification

  • Disabled system messages to make the kiosk booting process quieter. Warnings and errors are displayed only when something goes wrong. Notifications are displayed when kiosk reconfigures/upgrades itself.
  • Use 1MB for the block size when burning the ISO during installation/reconfiguration/upgrade making this operation significantly faster.
  • Added md5sum check of main system components after burning the ISO on the storage media. If md5sum does not match then burning is repeated up to 3 times.
  • Kiosk Wizard: added video tutorial button presenting how to save and load kiosk config/ISO from removable device,
  • PXE Boot: added statically linked SSL helper which allows downloading kiosk config or modules from SSL protected sites.
  • Wizard improvements: added possibility for restarting the main wizard window in case when configuration went wrong.
  • Kernel config: enabled i586 architecture by default, added support for Microsoft Hyper-V virtualization platform, enabled UVESA driver, CIFS protocol (Windows network shares), IP Multicast feature which is needed for receiving RTP/UDP video streams, compiled MPT drivers into kernel so its possible to install kiosk on SCSI/SAS hard drives in VMware and VirtualBox.
  • Enabled following busybox applets: gzip, gunzip, tty, zcat.
  • Added following new packages: attr, coreutils, fbv, libXv, libcap, liberation-fonts, libvncserver, openldap, wmctrl, v86d, xf86-video-amdgpu
  • Fixed kiosk client -> Porteus Kiosk Server communication when ssh services are working on non default ssh port.
  • Generate system report only once when debug mode is enabled.
  • Managed bookmarks: if bookmark title is not discovered automatically then use URL as a title instead of the generic 'Bookmark' name.
  • Eliminated a number of fault conditions when underscore sign was used in kiosk parameter values.
  • Kill the process which hides the mouse cursor properly when exiting screensaver slideshow/video.
  • Fixed touchscreen calibration/rotating for touch controllers which reports two input devices (e.g. PQLabs EN320006897).
  • Remote config: allow for [[GLOBAL]] and [[PCID]] strings with no space between the bracket and data.
  • 'browser_preferences=' parameter appends Firefox preferences to user.js instead of overwriting it.
  • Fixed time calculation in the screensaver script - it can run now continuously for 11 500 days.
  • Remove whitespaces at the end of the parameters in the kiosk config prior to parsing. This bug was breaking for example 'printer_connection=' parameter.
  • Kiosk Wizard: save manual edits to kiosk config when user clicks on the 'save config' button.
  • Run wget with '-U Mozilla' flag when doing the homepage check as some http servers reject connection when user agent is not set for the client.
  • Google Chrome: disable 'pinch to zoom' touch gesture by default when navigation bar is disabled.
  • Handle displays with dash in name (e.g. VGA-0) properly when 'screen_settings=' parameter is provided and screen positioning function is used.
  • Recompiled openbox without xinerama support so applications get maximized across all available screens in mulit seat setup (e.g. video wall).
  • Inject 'file:///tmp' to the whitelist automatically if 'screensaver_video=' parameter is used.
  • Start screensaver video with 'always on top' attribute so its not covered by restarted browser when 'browser_idle=' function is active.
  • Mozilla Firefox: disabled 'restore previous session' feature which shows up when session persistence is enabled and browser crashes or is restarted by the 'browser_idle=' parameter.
  • Other fixes and improvements.

  • Extended information about the changes introduced in Porteus Kiosk 3.7.0 can be found in this news post: link.

    All changes can be also tracked in the 'automatic updates' changelog: link

    30th of November 2015

    Changes implemented in Porteus Kiosk 3.6.0:

  • Upgraded all system components to latest version from Gentoo stable branch including Linux kernel 4.1.13, Mozilla Firefox 38.4.0 and Google Chrome 46.0.2490.86_p1. Full list of packages used for creating this release can be found under this link.
  • Implemented support for Porteus Kiosk Server which allows monitoring, accessing and managing the clients even if they are placed behind a NAT, proxy or firewall.
  • Added support for injecting or replacing default browser preferences with a text file hosted on the network. For Firefox you may use all preferences listed in "about:config", Chrome policies can be found here: link.
  • Online video file can be used as a screensaver instead of the 'Ripples' screensaver or the slideshow.
  • Added support for session persistence which prevents wiping user data during browser restarts.
  • Right mouse click state (enabled/disabled) can be controlled through the wizard.
  • Its possible to share kiosk printer in the network so other PCs could use it.
  • Added opensource 3D drivers for playing online games and other WebGL usage.
  • Firefox: enabled mp4 (h264 codec) playback in the html5 "video" tag by default.
  • Added support for remote management when kiosk is booted over network.
  • Display OS version during PXE boot.
  • Added /etc/rc.d/local_net.d folder for local scripts which should be run once networking is initialized, e.g: start LAMP services, download file from the network, mount remote share.
  • Added /etc/rc.d/local_shutdown.d folder for local commands which should be executed during system reboot/shutdown, e.g: killing processes gracefully, stopping LAMP services, unmounting remote share or persistent storage.
  • Compare kernel and kernel modules version and stop booting when they do not match as networking would not be initialized anyway.
  • Display warning when battery reaches 10% and repeat every 60 secs until AC is connected.
  • Restart network service after 5 failed download attempts of the additional components.
  • Increased Kiosk Wizard window size
  • Wizard improvements: added new window which appears after setting up the network with 4 buttons: a) launch wizard (first run - no previous kiosk config exist), b) point device to existing remote kiosk configuration, c) load config from the network, d) load config from removable device, added possibility to test printing before burning the ISO, added support for nested configurations when loading the config from the network/removable device.
  • Kernel config: added support for VMware virtual machines and mounting NFS shares
  • Enabled following busybox applets: reset, time, arping, uptime, pgrep.
  • Added following new packages: elfutils, ffmpeg, libepoxy, libva, libva-intel-driver, libvdpau, llvm, mesa, sshpass, stunnel, xf86-video-sis, xf86-video-virtualbox, xf86-video-vmware
  • Run the screensaver slideshow with 'always on top' attribute so its never covered by other windows (e.g. browser could be automatically restarted through the browser_idle* parameter and cover the slideshow).
  • Improved compatibility of old wifi drivers and WPA2 Enterprise encryption scheme.
  • Blocked Shift+F8 key combination by default.
  • Start "scheduled tasks" with 40 sec delay to avoid situation when system is restarted twice within the same minute (kiosk reboots very fast).
  • Use default network interface instead of first one listed in /sys/class/net when determining MAC addres for the 'homepage_append=mac' function.
  • Fixed Google Chrome not starting during PXE boot.
  • Fixed the 'homepage check' function preventing the browser from starting in some rare cases.
  • Removed user agent parameter from wget flags ('-U Mozilla') as it breaks compatibility with remote management.
  • 'localhost' is resolved to '' address properly.
  • Added 'localhost,' to proxy exceptions by default to resolve printing problems when proxy is used.
  • Other fixes and improvements.

  • Extended information about the changes introduced in Porteus Kiosk 3.6.0 can be found in these news posts: link and link.

    All changes can be also tracked in the 'automatic updates' changelog: link

    2nd of September 2015

    Changes implemented in Porteus Kiosk 3.5.0:

  • Upgraded all system components to latest version from Gentoo stable branch including Linux kernel 4.1.6, Mozilla Firefox 38.2.1 and Google Chrome 44.0.2403.157. Full list of packages used for creating this release can be found under this link.
  • Implemented support for nested configurations in remote management.
  • Added support for managed bookmarks which enables bookmarks bar in the browser with with predefined set of webpages.
  • SSL certificates can be imported automatically from provided URLs.
  • Slideshow of images can be used instead of default screensaver.
  • Video outputs can be disabled or set in certain position to create for example a 'video wall' for digital signage.
  • Touchscreen calibration can be performed directly through the wizard.
  • Implemented support for "static IP to address mappings" to resolve problems with non fully qualified domain names.
  • Mac address or hostname can be appended to the homepage url - useful for kiosk tracking purposes.
  • Homepage check function will check availiablity of the homepage prior to launching the browser. Predefined notification message is displayed when when the homepage is not available.
  • Added support for restarting the browser periodically when user activity is not detected.
  • Mouse cursor can be hidden after certain number of seconds.
  • Silent printing prevents the users from changing printing related settings.
  • Added support for proxy exceptions.
  • Wizard improvements: its possible to setup keyboard layout early as the very first step of kiosk configuration, MAC address of the wifi card is displayed in the wizard, its possible to setup hardware clock to current date/time, you can test additional functions (default sound card, sound volume level, shutdown menu, screen settings, screensaver ripples/slideshow) before creating final configuration, printers list is as split per manufacturers brand, its possible to generate short system report before installing the kiosk.
  • When private mode is disabled for Google Chrome then following functions are enabled by default: form autofilling, editing bookmarks (bookmark bar is always enabled), applications, spellcheck, sync, translate, signing into the profile.
  • Integrated Foomatic database with support for over 4k of new printer drivers and added extra drivers for thermal printers: Bematech, Bixolon, Sato, Star, Zebra.
  • Remote kiosk config is downloaded with PC ID string appended to the kiosk config URL.
  • Touchscreen input is rotated automatically to the position of the screen.
  • Automatically activate touch gestures in Chrome if touch capable device is found.
  • Save in real time to the kiosk config when doing manual edits in the wizard (*Save Edits* button is no longer needed).
  • Enabled native 'print preview' window for Chrome.
  • If support for removable media is enabled then whitelist 'file:///media' URL automatically.
  • Kernel config: added support for Virtio, namespaces (NET_NS, PID_NS, USER_NS) which are required for Google Chrome sandbox to work, enabled Tun/Tap driver, enabled userspace parallel port printer drivers.
  • EFI support: renamed bootx32.efi to bootia32.efi to make possible direct booting from isohybrid images (no need for EFI shell workaround).
  • Resolved PXE boot issues with gateway not being set by dhcpcd.
  • SSH keys are generated automatically with 'ssh-keygen -A' command
  • Blocked access to Firefox preferences through 'about:preferences#preferences' URL.
  • If kiosk is signed to the 'automatic updates' service then download components directly from such channel to avoid double reburn.
  • Fixed download progress not being displayed on slow networks (20 KB/s and below).
  • Do not download during installation if booting from UEFI ISO.
  • Apply proxy/proxypac settings immediately during installation so its possible to use browsers through proxy.
  • Blocked 'view-source:' protocol in Firefox which was giving an access to some system files (the ones readable by the user 'guest') despite of the 'file://' protocol being disabled. Blocked accessing the Firefox menu through the 'Alt' key when new browser window is opened with the tab dragging gesture.
  • Firefox tweaks: browser is started as maximized rather than fullscreen by default (this allows to launch HTML5 apps like pdf viewer, youtube video player and other in real fullscreen with no firefox navigation bar visible at the top), to restart the browser users must close its last tab - same as in Google Chrome, stop/refresh buttons are back in their original position (right side of the URL bar), disabled openh264 plugin which is needed only for video chats (Firefox Hello communication client) and would have to be downloaded during every browser restart due to license restrictions, disabled Enhanced Tiles by default, disabled HeartBeat rating system and Google SafeBrowsing service, when private mode is disabled then open new tab as 'about:newtab' rather than 'about:blank'.
  • Chrome tweaks: all preferences are managed now through the Group Policy Objects, master_preferences and chrome flags, locked down all browser settings (including chrome://*) so users can not change enything even when navigation bar is enabled, popup windows will open as maximized and decorated so its possible to close them, disabled developer tools, disabled following plugins by default: Chrome Remote Desktop Viewer, Native Client, Widevine Content Decryption Module, enabled controling of the 'file://' protocol through the 'enable_file_protocol=yes' kiosk setting, enabled blacklisting/whitelisting through the 'blacklist=' and 'whitelist=' kiosk settings.
  • Close 'shutdown menu' when going back from sleep.
  • Removed Chinese/Japanese/Korean layouts from the keyboard mapping list in the wizard as they need external input method application not supported in kiosk by default.
  • Other fixes and improvements.

  • Extended information about the changes introduced in Porteus Kiosk 3.5.0 can be found in these news posts: link and link.

    All changes can be also tracked in the 'automatic updates' changelog: link

    1st of June 2015

    Changes implemented in Porteus Kiosk 3.4.0:

  • Upgraded all system components to latest version from Gentoo stable branch including linux kernel-3.18.14, mozilla-firefox-31.7.0 and google-chrome-43.0.2357.81. Full list of packages used for creating this release can be found under this link.
  • Added possibility of selecting Google Chrome as alternative browser to Mozilla Firefox. Please mind that supported features vary between the browsers.
  • Updated UEFI component to support PCs equipped with 32bit EFI firmware. Some 32bit EFI implementations do not support booting from isohybrid ISOs and its necessary to setup 'Internal EFI shell' as default for booting.
  • Kiosk Wizard offers now possibility of loading and saving the kiosk config on removable devices.
  • Its also possible to save the actual kiosk ISO generated by the wizard on the same removable device. This function should work much faster and be less confusing than uploading generated ISO to the online storage.
  • Set custom resolution on all active displays and not just the first one.
  • Inject PC ID to /etc/version when 'automatic updates' are enabled so its possible to identify the kiosk through this file.
  • If 'shutdown menu' feature is not enabled in the wizard then allow powering off the PC by pressing the power button. If user has a physical access to the PC then can force kiosk shutdown by holding the button for 5 secs anyway and its better to power off the machine gently.
  • Allow access to 'about:config' when in debug mode.
  • Run all 'user made' custom scripts from /etc/rc.d/local_cli.d (when in runlevel 3) and /etc/rc.d/local_gui.d (when in runlevel 4) during startup.
  • Automount ISO9660 and UDF formatted CDs and DVDs when 'removable devices' support is enabled in the wizard.
  • Switched to 'ripples' screensaver which looks nicer and does not leave any distortions on the screen when running for longer period.
  • Scale smaller screen automatically when second monitor is connected and there is a mismatch in resolution between internal/external outputs.
  • Disabled 'search for text when i start typing' in Firefox preferences so kiosk can work with bar code scanners out of the box.
  • Screensaver runs now in fullscreen mode rather than maximized+undecorated, this tweak allows to have all other applications decorated in kiosk.
  • Kernel config: added UDF filesystem support required for mounting of DVDs formatted with this fs, compiled XFS into kernel as this module is not loaded automatically when mounting device formatted with XFS filesystem, added many new drivers for better support of the tablets and x86 embedded/industrial devices.
  • Added following packages: google-chrome, ntfs3g, nspr, nss, pacparser, sqlite.
  • Scale only connected and initialized video outputs (skip cases when crtc cant be find).
  • No matter which option user selects in the wizard - keep navigation/address bar enabled when in debug mode.
  • When kiosk data is not found then display debug info and drop to the shell only after key press (wait 10 secs for it). If no action is taken by the user then shutdown the PC.
  • Whitelisted 'about:blank' by default so 'access denied' image is not shown on a new tab when URL filter is enabled.
  • Set default sound level to 90% as 75% may be too low in some cases.
  • Default to port 80 for PXE boot if PORT variable is missing in the 'http_server=' parameter passed by the bootloader.
  • Fixed handling of SSIDs with whitespaces in name.
  • Timeout after 10 secs when waiting on wifi interface so other NICs can be initialized by dhcpcd (wired connection can be used as a fallback for wifi).
  • Initialize brightness by default on all supported outputs to resolve 'dark screen' bug affecting some Intel GPUs.
  • Setup automatic proxy configuration separately for kiosk config and wallpaper URLs as they may be handled by the proxy exceptions.
  • Setup sound level later in the boot process to allow all sound devices initialize properly.
  • Fixed 'remote management' feature not working with UEFI PCs.
  • Firefox: fixed a bug which prevented having address bar disabled and navigation bar hidden at the same time.
  • Firefox: removed tiny white line displayed on top of the screen when navigation bar was disabled.
  • Restart vnc service automatically in case it crashes.
  • Changed default font size to 12 for system notification messages.
  • Fixed downloading of kiosk remote configs/wallpaper from some SSL protected sites (sslv3 alert handshake failure)
  • Export 'https_proxy=' and 'ftp_proxy=' environmental variables properly and apply settings from the proxy pac files to all applications which are proxy aware.
  • Further improvements to handling of the usb wifi dongles.
  • Clear boot screen early so system version is not visible when Xorg is restarted or when system goes down.
  • Run ntpdate even when clock is set to Factory and save the time to the hardware clock if ntpdate succeeded pulling date from the network.
  • Other fixes and improvements.

  • Extended information about the changes introduced in Porteus Kiosk 3.4.0 can be found in these news posts: link and link.

    All changes can be also tracked in the 'automatic updates' changelog: link

    2nd of March 2015

    Changes implemented in Porteus Kiosk 3.3.0:

  • Upgraded all system components to latest version from Gentoo stable branch including linux kernel-3.18.8, xorg-server-1.16.4 and mozilla-firefox-31.5.0. Full list of packages used for creating this release can be found under this link.
  • Introduced Central Management which allows to control multiple kiosks from one configuration file stored on your server.
  • Implemented support for WPA2 Enterprise (EAP-PEAP) wireless authentication method and 2G/3G dialup connections. Special thanks to Danielle Otto from University of Wisconsin Whitevater and Dr Viral Bhatt for helping with implementation of these features.
  • Added support for automounting of removable devices formatted with FAT*, NTFS, XFS and ISO9660 filesystems under the /media folder. Internal volumes stays hidden, removable devices are mounted as 'read-only' and opened in a separate firefox tab. This feature allows to view or upload pictures/pdf/text files in kiosk. It's not possible to save anything on removable devices by default.
  • Implemented 'scheduled tasks' which allows to shutdown/reboot the PC or do any other atcion at certain day/hour/minute in the week.
  • Citrix Receiver is now available as an additional component in the wizard. Right mouse click is re-enabled when working with remote applications and stays disabled for other kiosk components.
  • Added an option to allow popup windows in firefox.
  • Its possible to disable 'private mode' for firefox so logins, passwords, cookies, caches, etc are saved during the session. Browser restart still brings a clean session.
  • Added an option to select default system soundcard. This feature comes useful for digital signage purposes when external display is connected to kiosk and you want to pass the sound through the HDMI or Display Port.
  • Added support for automatic proxy configuration through the PAC files.
  • Added possibility for setting custom NTP server which will be used for syncing PC hardware clock.
  • Introduced kiosk 'debug mode' which generates system report during startup.
  • Display EULA prior to activation of additional components in the wizard containing proprietary software (Adobe Flash, Citrix Receiver).
  • Display PC ID directly on the 'automatic updates' page in the wizard.
  • script: show a warning about proper 'mkisofs' version needed for UEFI ISO creation.
  • Kernel config: added support for debug messages, printk, enabled PAT support which improves 2D/3D performance in some cases, enabled PPP protocol which is needed for 3g connections, enabled USB serial drivers, enabled support for more than 4 com ports which is needed for some touchscreen controllers, enabled usblp kernel module which is needed by some non standard CUPS drivers.
  • Enabled additional busybox applets: env, dirname, dmesg, fgrep, nohup, pkill, printenv, printf, pwd, realpath, seq, touch, uniq, usleep, which, whoami, xargs
  • Added following packages: ca-certificates, dbus-python, gmp, gnutls, icaclient, jimtcl, libevdev, libtasn1, libXxf86vm, nettle, ppp, python, rfkill, tofrodos, usb_modeswitch, wvdial, wvstreams
  • Fixed bug when wifi interface was named as eth1 (ipw220 driver) and kiosk could not initialize wireless connection.
  • Remove /var/log/Xorg.0.log during boot as it contains some important system information: kernel, Xorg, DDX driver version.
  • Fixed bug where homepage could not be set to a webpage chapter: homepage://some_url/#tag or when URL string contain ampersand '&' character.
  • Display notification during installation in case when never version of Porteus Kiosk ISO is available for download.
  • Allow HTML5 fullscreen api on all pages by default.
  • Set system localization to en-US.UTF8.
  • Do not create new ISO prior to installation but burn it 'on the fly'. This allows to install base kiosk ISO (no extra modules added) on a PCs with as little as 128MB of RAM.
  • Hide status bar when navigation bar is disabled.
  • Clear /tmp folder on each firefox restart to make sure that nothing persists there.
  • Unblock all wifi devices during boot with rfkill.
  • Disabled 'slow script' dialog window in firefox preferences.
  • Display a warning that kiosk needs to be reconfigured during last 10 days of the 'automatic updates' trial.
  • Set volume on all audio channels except for "*Mic*" and "*Boost*" to prevent a noise from the speakers.
  • Improved handling of network interfaces which are showing late in the system, e.g.: usb wifi dongle.
  • Save kiosk version in /etc/version so it can be checked through ssh or from URL bar if file:// protocol is enabled.
  • Enabled all firefox plugins (vlc, libreoffice, mozplugin, npica, etc) by default even if they are not available in kiosk.
  • Moved home button on the right side of the URL bar.
  • Allow insecure ntlm authentication which was disabled by upstream in firefox 30.x.
  • Reintroduced 'back/forward' buttons when address bar is disabled.
  • Do not accept VNC passwords longer than 8 characters (upstream limit) in the wizard and keep asking until shorter password is provided.
  • Check for Porteus Kiosk server accessibility before performing system update.
  • Rotate screen on all connected displays and not only on default one.
  • Switched to system proxy so all applications can use it and not only firefox.
  • Allowed outgoing traffic in the firewall on all ports by default. Incoming/forwarded traffic is still blocked as before. This is needed for proxy autoconfiguration service, browsing ftp shares, flovplayer video support, etc ...
  • Fixed listing of devices with spaces in name on the installation page in the wizard.
  • Fixed handling of WPA passwords containing spaces.
  • Fixed race condition between ssh/vnc services during kiosk startup.
  • Other fixes and improvements.

  • Extended information about the changes introduced in Porteus Kiosk 3.3.0 can be found in these news posts: link and link.

    All changes can be also tracked in the 'automatic updates' changelog: link

    8th of December 2014

    Changes implemented in Porteus Kiosk 3.2.0:

  • Upgraded all system components to latest version from Gentoo stable branch including linux kernel-3.14.26, mozilla-firefox-31.3.0, adobe-flash-, icedtea-bin-, openssh-6.7_p1 etc. Full list of packages included in Porteus Kiosk 3.2.0 can be found under this link.
  • "IP filter" (iptables based) has been replaced with new "URL filter" which supports blacklist/whitelist functions, does not depend on the firewall and bases on a URL keyword (is flexible).
  • Added Wake On LAN function which allows the kiosks to be powered up remotely.
  • Input devices can be disabled to prevent user interaction with the PC - useful when kiosk works in a 'digital signage' mode.
  • Added possibility to rotate the screen on left, right or by a 180 degrees.
  • Added possibility to adjust default sound volume - when set to '0' the sound is muted completely.
  • Added UEFI component to ensure that Porteus Kiosk can be booted on PCs equipped with an EFI firmware instead of a traditional BIOS.
  • If swap support is not enabled in the wizard the system will spin down all block media (hd, CD, usb, SD/MMC cards) to save energy and make the kiosk environment friendly.
  • Added 'ntpdate' utlity to sync hardware clock with remote ntp server ( if timezone was enabled in the wizard.
  • Added dymo-cups-drivers, splix, xerox-drivers and hplip packages to the printing module doubling the number of drivers available in the kiosk wizard database.
  • Primary and secondary keyboard layouts have been extended with variants.
  • Added notification that keyboard layout was switched to 'layout:variant' and how to toggle between the layouts. Please mind that toggling shortcut has changed from 'Atl+Shift' to 'Ctrl+Space'. This comes handy when layout was switched by the user by accident.
  • Improved 'automatic updates' subscription which now can be performed directly on the wizard level.
  • Fixed a bug when wireless connection could not be establish in some cases.
  • Australis UI changes: moved refresh/stop buttons on the right side of the address bar, removed '100%' button from the zoom controls.
  • Firefox config: allowed java plugin by default so it wont ask for confirmation before running.
  • Disabled keyboard shortcuts introduced in firefox-31.x ESR line.
  • Refreshed kiosk wizard icon theme and updated descriptions to most of the functions.
  • Other fixes and improvements.

  • Extended information about the changes introduced in Porteus Kiosk 3.2.0 can be found in these news posts: link and link.

    All changes can be also tracked in the 'automatic updates' changelog: link

    16th of November 2014

    Changes implemented in Porteus Kiosk 3.1.3:

  • Make sure that only .xzm modules are mounted to /union (aufs) and not other files or folders.
  • Added support for basic authentication for the homepage, e.g:
  • Added libwacom and libgudev libraries required by the xf86-input-wacom driver.
  • Disabled updates of firefox addons by default, we have none in kiosk but this setting comes handy when ISO is customized manually.
  • Support custom sound level through /etc/rc.d/rc.sound.
  • Prefer gutenprint drivers for printing but also accept other ones if gutenprint driver is not available for selected printer.
  • Fixed handling of the lpd:// printer URI containing authorization string.
  • Automatic updates: display notification that unauthorized component has been added to the ISO and kiosk can't be upgraded.
  • Automatic updates: display notification about current OS version when there are no updates to download.
  • 17th of October 2014

    Changes implemented in Porteus Kiosk 3.1.2:

  • Updated script to create 'eltorito EFI' images when efi component is present in the ISO.
  • PXE boot: improved compatibility with IIS and other http servers
  • Added quirk for loading 'broadcom' driver during PXE and normal boot when BCM57780 chipset is found.
  • Display kiosk version during boot.
  • Added a fix to clean the screen properly after counting (modules/seconds).
  • Kernel config: added FB_EFI support.
  • Kiosk wizard: added possibility for 3 months free trial of the 'automatic updates' commercial service.
  • Security fix: deactivated 'ctrl+l' keybinding by default. When firefox's 'address bar' is disabled the user could invoke an URL window by pressing 'ctrl+l' key combination and browse to other sites through it.
  • Switched to MAC based authorization for dhcpcd which is persistent (MAC never changes) unlike duid in kiosk.
  • Updated 'xzm download' function to resolve remaining md5sum issues. After this upgrade you should never experience them anymore (they may still occur only when there is something wrong with your connection).
  • Upgraded to mkisofs-3.01a24 for better UEFI compatibility.
  • 5th of August 2014

    Changes implemented in Porteus Kiosk 3.1.1:

  • Once kiosk is fully booted delete unneeded and potentially risky for the kiosk stability utilities like 'wget' or 'dd'.
  • Disabled 'Shift+left mouse button' combination to prevent opening new firefox windows when clicked on hyperlinks. This binding is especially dangerous when the navigation bar is disabled as there is no possibility to close any windows in this mode. Multiple firefox instances could slow down the kiosk or even make it unusable.
  • Disabled 'Ctrl+Shift+h' keybinding which displays firefox history menu (nothing there as kiosk runs in 'private mode' by default).
  • Disabled 'Ctrl+`' keybinding which allows to display previous kiosk notifications.
  • Export SSID as 'ssid_name=some-name' in the welcome wizard otherwise wifi networking wont be initialized.
  • Always put wifi interface up before scanning for available networks.
  • Alt+Ctrl+Del combination will kill only previous instance of the 'kiosk shutdown' utility and not every gtkdialog application (like e.g. welcome wizard).
  • Display wpa password and wep key on the welcome wizard config page.
  • Fixed non working hidden wifi SSIDs.
  • Added empty and non-executable /etc/rc.d/rc.local which can be used for running cli commands during boot.
  • Attended to fix a rare problem with md5sum mismatches caused by proxy which are caching and serving old kiosk components instead of letting the client download fresh ones from our server.

  • If md5sum problem is still not fixed then please contact for guidance.

    23rd of May 2014

    Changes implemented in Porteus Kiosk 3.1:

  • Upgraded all system components to latest stable version including linux kernel-3.12.20, xorg-server-1.15.0, busybox-1.22.1, mozilla-firefox-24.5.0, adobe-flash-, etc. For full packages list please visit this link.
  • Rewritten 'Kiosk Wizard' into gtk and included directly in the kiosk ISO. Gtk version offers unique features over the web version which are explained on the kiosk wizard page.
  • Introduced an 'Automatic Updates' commercial service which turns the kiosk into a 'rolling release' distribution. More info can be found at this link.
  • Implemented several new functions in the wizard:
  • - Added printing support for local and remote printers.
    - Added possibility of removing address bar from the firefox's UI layout. Buttons are still visible so it's possible to navigate back and forth, zoom-in, zoom-out, print, etc but it's not possible to switch to any other webpage than the home page.
    - Added possibility of controlling numlock behavior during boot.
    - Added possibility of enabling incoming ICMP protocol. This is useful when you want to monitor remotely if kiosk is up and running with the help of the ping utility.
    - Disabled DPMS (you can enable it in the wizard) as it's better to keep monitor turned on during kiosk session by default.
    - Added customizable firefox user agent which may be helpful in forcing layouts on some websites which are set to support certain browsers only (like e.g IE6) or identifying kiosk session with an unique string.
    - Added possibility of editing the config file generated by the wizard manually.
    - Added installer to the wizard so it's possible to burn the base kiosk ISO on a CD but install it on hard drive or usb stick after finishing the configuration part.

  • Changes implemented in the ISO:
  • - Enhanced security with md5sum check of every kiosk component when 'automatic updates' service is enabled. If md5sum wont match the registered value then booting will stop with a message that kiosk has detected an unauthorized access to it's components.
    - Backported multithreaded squashfs patches from kernel-3.13.x to make the kiosk even faster.
    - Updated initrdpxe.xz with firmware which may be necessary to initialize some network controllers.
    - Updated the code responsible for PXE boot which is more verbose now and it should be easier to find the reason of a failure (like http server being down).
    - Removed 'Public Fox' addon and replaced it's functionality with home grown solutions. Porteus Kiosk 3.1 does not contain any 3rd party addon by default to eliminate risk that one day they may get outdated and incompatible with firefox.
    - Added 000-kernel.xzm (split from 01-core.xzm) which should make easier to update/downgrade just the kernel in kiosk.
    - Forced 'copy2ram' by default. Kiosk ISO is very small so should fit into RAM nicely and this feature is needed for 'automatic updates' service to make sure that upgrade process wont be interrupted by the kiosk session.
    - Kiosk ISO content was simplified with three folders only: /boot, /docs and /xzm.
    - PXE boot does not support /rootcopy functionality so this folder was removed. From now on all files must be kept in the xzm modules.
    - Swapped Xdialog messages to dunstify notifications which looks more attractive.
    - Added possibility of rebooting, suspending the PC and restarting X session to the kiosk's shutdown utility.

  • Other fixes and improvements.