Major fix: Audio and user permission issues for kiosk client

This commit addresses multiple critical issues that prevented the
kiosk client from working properly, especially regarding audio.

Issues Fixed:
1. Baresip config check error
   - Removed premature check for .baresip directory
   - Added option to install Baresip if not present
   - Improved user flow for client configuration

2. Audio completely lost after client installation
   - PTT service was starting even without PTT device configured
   - Added ConditionPathExists to PTT systemd service
   - Only enable PTT service when PTT device is actually configured
   - Ensured audio is unmuted for normal intercom operation

3. PipeWire/PulseAudio initialization
   - Added proper PipeWire and PipeWire-Pulse service dependencies
   - Explicitly enable and start PipeWire services for user
   - Added audio group membership check

4. Audio unmuting after installation
   - Created ensure_audio_unmuted() helper function
   - Automatically unmute microphone and speakers after install
   - Set reasonable volume levels (75%) if too low
   - Only applies when PTT is not configured

5. User permissions and ownership
   - Ensured all configs owned by kiosk user
   - Proper audio group membership
   - Clear messaging about needing to log out/reboot

6. Enhanced diagnostics
   - Added PipeWire service status checks
   - Show microphone/speaker mute status and volumes
   - Display PTT configuration status
   - Clear error message when microphone is muted
   - Added helpful instructions for troubleshooting

7. Improved user messaging
   - Added comprehensive post-install instructions
   - Clear explanation of audio configuration
   - Guidance on when to log out/reboot
   - Better error messages throughout

Key Changes:
- configure_local_client(): Offers to install Baresip if missing
- enable_client_services(): Only enables PTT when configured
- ensure_audio_unmuted(): New function to ensure audio works
- run_client_diagnostics(): Enhanced with audio status info
- install_client_only(): Added detailed audio setup message

The kiosk now works as a proper intercom out of the box, with
microphone and speakers unmuted and ready to use.

easy-asterisk-interactive-v1.28.sh

@@ -993,6 +993,30 @@ EOF
     chown -R ${KIOSK_USER}:${KIOSK_USER} "/home/${KIOSK_USER}/.config"
 }
 
+ensure_audio_unmuted() {
+    [[ -z "$KIOSK_USER" ]] && return
+    [[ -z "$KIOSK_UID" ]] && return
+
+    # Only unmute if PTT is not configured
+    if [[ ! -f /etc/easy-asterisk/ptt-device ]]; then
+        local user_dbus="XDG_RUNTIME_DIR=/run/user/${KIOSK_UID}"
+
+        # Wait a moment for PipeWire to initialize
+        sleep 2
+
+        # Unmute all sources and sinks
+        sudo -u "$KIOSK_USER" $user_dbus pactl set-source-mute @DEFAULT_SOURCE@ 0 2>/dev/null || true
+        sudo -u "$KIOSK_USER" $user_dbus pactl set-sink-mute @DEFAULT_SINK@ 0 2>/dev/null || true
+
+        # Set reasonable volume levels if they're at 0
+        local source_vol=$(sudo -u "$KIOSK_USER" $user_dbus pactl get-source-volume @DEFAULT_SOURCE@ 2>/dev/null | grep -oP '\d+%' | head -1 | tr -d '%')
+        local sink_vol=$(sudo -u "$KIOSK_USER" $user_dbus pactl get-sink-volume @DEFAULT_SINK@ 2>/dev/null | grep -oP '\d+%' | head -1 | tr -d '%')
+
+        [[ -n "$source_vol" && "$source_vol" -lt 50 ]] && sudo -u "$KIOSK_USER" $user_dbus pactl set-source-volume @DEFAULT_SOURCE@ 75% 2>/dev/null || true
+        [[ -n "$sink_vol" && "$sink_vol" -lt 50 ]] && sudo -u "$KIOSK_USER" $user_dbus pactl set-sink-volume @DEFAULT_SINK@ 75% 2>/dev/null || true
+    fi
+}
+
 # ================================================================
 # 6. DIAGNOSTICS & FIREWALL
 # ================================================================
@@ -1176,8 +1200,23 @@ configure_local_client() {
     fi
 
     if [[ ! -d "/home/${KIOSK_USER}/.baresip" ]]; then
-        print_error "Baresip config not found for $KIOSK_USER"
+        print_error "Baresip not installed for $KIOSK_USER"
-        return
+        echo ""
+        read -p "Install Baresip client now? [Y/n]: " install_it
+        if [[ ! "$install_it" =~ ^[Nn]$ ]]; then
+            install_baresip_packages
+            configure_baresip
+            enable_client_services
+            INSTALLED_CLIENT="y"
+            save_config
+            print_success "Baresip installed"
+            echo ""
+            echo "Audio configured for $KIOSK_USER"
+            echo "If audio doesn't work, log out and back in or reboot."
+            echo ""
+        else
+            return
+        fi
     fi
     
     read -p "Extension: " ext
@@ -1256,6 +1295,47 @@ run_client_diagnostics() {
     fi
     echo "---------------------------------------------------"
 
+    echo "Audio Services:"
+    local user_dbus="XDG_RUNTIME_DIR=/run/user/$t_uid"
+    if sudo -u "$t_user" $user_dbus systemctl --user is-active pipewire >/dev/null 2>&1; then
+        print_success "PipeWire RUNNING"
+    else
+        print_error "PipeWire STOPPED"
+    fi
+    if sudo -u "$t_user" $user_dbus systemctl --user is-active pipewire-pulse >/dev/null 2>&1; then
+        print_success "PipeWire-Pulse RUNNING"
+    else
+        print_error "PipeWire-Pulse STOPPED"
+    fi
+
+    echo ""
+    echo "Audio Status:"
+    local src_mute=$(sudo -u "$t_user" $user_dbus pactl get-source-mute @DEFAULT_SOURCE@ 2>/dev/null | awk '{print $2}')
+    local sink_mute=$(sudo -u "$t_user" $user_dbus pactl get-sink-mute @DEFAULT_SINK@ 2>/dev/null | awk '{print $2}')
+    local src_vol=$(sudo -u "$t_user" $user_dbus pactl get-source-volume @DEFAULT_SOURCE@ 2>/dev/null | grep -oP '\d+%' | head -1)
+    local sink_vol=$(sudo -u "$t_user" $user_dbus pactl get-sink-volume @DEFAULT_SINK@ 2>/dev/null | grep -oP '\d+%' | head -1)
+
+    echo "  Microphone: ${src_mute:-unknown} (Volume: ${src_vol:-unknown})"
+    echo "  Speaker:    ${sink_mute:-unknown} (Volume: ${sink_vol:-unknown})"
+
+    if [[ "$src_mute" == "yes" ]]; then
+        echo ""
+        print_error "MICROPHONE IS MUTED - No audio will be sent!"
+        echo "  To fix: pactl set-source-mute @DEFAULT_SOURCE@ 0"
+    fi
+
+    echo ""
+    echo "PTT Configuration:"
+    if [[ -f /etc/easy-asterisk/ptt-device ]]; then
+        echo "  PTT Mode: ENABLED"
+        source /etc/easy-asterisk/ptt-device 2>/dev/null
+        echo "  Device: ${PTT_DEVICE:-not set}"
+    else
+        echo "  PTT Mode: DISABLED (normal intercom mode)"
+    fi
+
+    echo "---------------------------------------------------"
+    
     echo "Network Interface:"
     grep "^net_interface" "/home/$t_user/.baresip/config" 2>/dev/null || echo "  Not set"
     
@@ -1743,12 +1823,17 @@ enable_client_services() {
     local systemd_dir="/home/${KIOSK_USER}/.config/systemd/user"
     mkdir -p "$systemd_dir"
 
+    # Ensure audio group membership
+    if ! id -nG "$KIOSK_USER" | grep -qw "audio"; then
+        usermod -aG audio "$KIOSK_USER"
+    fi
+
     # Baresip service
     cat > "${systemd_dir}/baresip.service" << EOF
 [Unit]
 Description=Baresip SIP Client
-After=pipewire.service network-online.target
+After=pipewire.service pipewire-pulse.service network-online.target
-Wants=network-online.target pipewire.service
+Wants=network-online.target pipewire.service pipewire-pulse.service
 
 [Service]
 Type=simple
@@ -1761,11 +1846,12 @@ Environment=XDG_RUNTIME_DIR=/run/user/${KIOSK_UID}
 WantedBy=default.target
 EOF
 
-    # PTT service
+    # PTT service - only create if PTT is configured
     cat > "${systemd_dir}/kiosk-ptt.service" << EOF
 [Unit]
 Description=PTT Button Handler
 After=pipewire.service
+ConditionPathExists=/etc/easy-asterisk/ptt-device
 
 [Service]
 Type=simple
@@ -1784,9 +1870,24 @@ EOF
     if [[ -n "$KIOSK_USER" ]]; then
         loginctl enable-linger $KIOSK_USER 2>/dev/null || true
         local user_dbus="XDG_RUNTIME_DIR=/run/user/${KIOSK_UID}"
+
+        # Enable and start PipeWire services for the user
         sudo -u "$KIOSK_USER" $user_dbus systemctl --user daemon-reload
-        sudo -u "$KIOSK_USER" $user_dbus systemctl --user enable baresip kiosk-ptt
+        sudo -u "$KIOSK_USER" $user_dbus systemctl --user enable pipewire pipewire-pulse 2>/dev/null || true
-        sudo -u "$KIOSK_USER" $user_dbus systemctl --user restart baresip kiosk-ptt
+        sudo -u "$KIOSK_USER" $user_dbus systemctl --user restart pipewire pipewire-pulse 2>/dev/null || true
+
+        # Enable baresip
+        sudo -u "$KIOSK_USER" $user_dbus systemctl --user enable baresip
+
+        # Only enable PTT if configured
+        if [[ -f /etc/easy-asterisk/ptt-device ]]; then
+            sudo -u "$KIOSK_USER" $user_dbus systemctl --user enable kiosk-ptt
+            sudo -u "$KIOSK_USER" $user_dbus systemctl --user restart baresip kiosk-ptt
+        else
+            sudo -u "$KIOSK_USER" $user_dbus systemctl --user restart baresip
+            # Ensure audio is unmuted for normal kiosk operation
+            ensure_audio_unmuted
+        fi
     fi
 }
 
@@ -2069,10 +2170,6 @@ install_client_only() {
     KIOSK_USER="${target_user:-$default_user}"
     KIOSK_UID=$(id -u "$KIOSK_USER")
 
-    if ! id -nG "$KIOSK_USER" | grep -qw "audio"; then
-        usermod -aG audio "$KIOSK_USER"
-    fi
-
     read -p "Server (IP or domain): " ASTERISK_HOST
     read -p "SIP Password: " SIP_PASSWORD
     
@@ -2096,7 +2193,25 @@ install_client_only() {
     configure_baresip
     enable_client_services
     save_config
+
     print_success "Client installed"
+    echo ""
+    echo "════════════════════════════════════════════════════════"
+    echo "  IMPORTANT: Audio Configuration"
+    echo "════════════════════════════════════════════════════════"
+    echo "  User: $KIOSK_USER"
+    echo "  - Audio group: Added"
+    echo "  - PipeWire services: Enabled"
+    echo "  - Microphone: Unmuted (for intercom mode)"
+    echo ""
+    echo "  If audio doesn't work immediately:"
+    echo "  1. Log out and log back in as '$KIOSK_USER'"
+    echo "  2. Or reboot the system"
+    echo "  3. Check audio with: pactl list sources short"
+    echo ""
+    echo "  PTT Mode: Not configured (normal intercom operation)"
+    echo "  To configure PTT: Main Menu > Configure PTT"
+    echo "════════════════════════════════════════════════════════"
 }
 
 collect_common_config() {