-
Notifications
You must be signed in to change notification settings - Fork 7
Virtual Machine Setup #234
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: master
Are you sure you want to change the base?
Conversation
|
@fsoubelet if you want you can also give it a glance, but as Josh has had some run ins with the VMs I want to see if that makes sense to him. Feel free to correct typos and such. As Josh is on holidays I don't think this will merge before the YETS. |
fsoubelet
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What a thorough writeup! This will be great to have on the website.
I went through and left a comment + many suggestions here and there for some typos, nitpicks, clarity, consistency etc. Feel free to make of them what you will.
| ## Introduction | ||
|
|
||
| CERN provides an Infrastructure-as-a-Service as part of their private cloud, which any member can access. | ||
| Through [OpenStack][openstack]{target=_blank} CERN allows users to create virtual machines on their computing infrastructure. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I guess I would link to the CERN openstack directly maybe?
|
|
||
| After following this guide you will have your own virtual machine running on CERN OpenStack. | ||
| This machine will be similar to your office desktop or the `lxplus` machines, | ||
| with access to `afs`, `eos` and `htcondor` yet come with some advatages and disadvantages: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
advantages
| **Advantages:** | ||
|
|
||
| - Full root access to your machine. | ||
| - Independence from Building 6/9/10 powercuts (in comparison to your office desktop machine). |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Let's not hardcode a building number considering 777 is around the corner.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
is it? :P
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It actually is, yes. 2 years away according to the plan: https://building777.web.cern.ch/
|
|
||
| - No automatic updates (you have to maintain your machine yourself). | ||
| - No external access, only via CERN network or lxplus-tunneling. | ||
| - Not a high-performace machine (compared to dev/optics servers and HPC clusters), especially when not part of a [project](#projects). |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I would remove the anchor here. Firstly because it links to the next word, and more importantly because the next sentence also has a project word that links to a different place (and that one is important).
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It doesn't link to a word. It links to the title (any level) called projects, but sure, as it is directly the next section, I guess I can remove it ^^
| Within a project more flavours and larger resource quotas are available, making it possible to create more powerful virtual machines. | ||
|
|
||
| !!! warning "Project Request" | ||
| You need to request a project through the CERN IT department directly from the [OpenStack portal][cern_openstack]{target=_blank} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The link here does not format correctly. See my next comment for why and the fix.
| sudo dnf install perl-CPAN perl-Sys-Syslog # needed for running the script below | ||
| sudo dnf install perl-Authen-Krb5 # should install the perl Authen::Krb5 package |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| sudo dnf install perl-CPAN perl-Sys-Syslog # needed for running the script below | |
| sudo dnf install perl-Authen-Krb5 # should install the perl Authen::Krb5 package | |
| sudo dnf install -y perl-CPAN perl-Sys-Syslog # needed for running the script below | |
| sudo dnf install -y perl-Authen-Krb5 # should install the perl Authen::Krb5 package |
| sudo rpm --import RPM-GPG-KEY-HTCondor | ||
|
|
||
| sudo dnf install -y https://research.cs.wisc.edu/htcondor/repo/current/htcondor-release-current.el9.noarch.rpm | ||
| sudo dnf install condor-all |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| sudo dnf install condor-all | |
| sudo dnf install -y condor-all |
| sudo dnf install http://galaxy4.net/repo/galaxy4-release-9-current.noarch.rpm -y # enable repo with new tmux versions | ||
| sudo dnf install tmux -y |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| sudo dnf install http://galaxy4.net/repo/galaxy4-release-9-current.noarch.rpm -y # enable repo with new tmux versions | |
| sudo dnf install tmux -y | |
| sudo dnf install -y http://galaxy4.net/repo/galaxy4-release-9-current.noarch.rpm # enable repo with new tmux versions | |
| sudo dnf install -y tmux |
| sudo dnf install perl-Authen-Krb5 # should install the perl Authen::Krb5 package | ||
|
|
||
| echo "Testing the credentials via /usr/bin/batch_krb5_credential." | ||
| echo "If it failes, 'export KRB5CCNAME=/tmp/krb5cc_####' as seen in 'klist'." |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| echo "If it failes, 'export KRB5CCNAME=/tmp/krb5cc_####' as seen in 'klist'." | |
| echo "If it fails, 'export KRB5CCNAME=/tmp/krb5cc_####' as seen in 'klist'." |
| # n (create new) -> as primary -> follow steps | ||
| # p (display new partition table) | ||
| # w (write to disk) | ||
| # $ lsblk -p /dev/vdb1 (verify new parition) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
| # $ lsblk -p /dev/vdb1 (verify new parition) | |
| # $ lsblk -p /dev/vdb1 (verify new partition) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Somehow my review was double posted. Ignore this comment.
No description provided.