Skip to content

Conversation

@JoschD
Copy link
Member

@JoschD JoschD commented Dec 15, 2025

No description provided.

@JoschD JoschD self-assigned this Dec 15, 2025
@JoschD JoschD added Type: Documentation Improvements, updates and fixes to the documentation. Priority: Medium Work on this. Estimate: Normal Straightforward, but might require some time. Probably needs additional tests. labels Dec 15, 2025
@JoschD JoschD requested a review from jgray-19 December 15, 2025 18:10
@JoschD
Copy link
Member Author

JoschD commented Dec 16, 2025

@fsoubelet if you want you can also give it a glance, but as Josh has had some run ins with the VMs I want to see if that makes sense to him. Feel free to correct typos and such. As Josh is on holidays I don't think this will merge before the YETS.

Copy link
Member

@fsoubelet fsoubelet left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What a thorough writeup! This will be great to have on the website.

I went through and left a comment + many suggestions here and there for some typos, nitpicks, clarity, consistency etc. Feel free to make of them what you will.

## Introduction

CERN provides an Infrastructure-as-a-Service as part of their private cloud, which any member can access.
Through [OpenStack][openstack]{target=_blank} CERN allows users to create virtual machines on their computing infrastructure.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I guess I would link to the CERN openstack directly maybe?


After following this guide you will have your own virtual machine running on CERN OpenStack.
This machine will be similar to your office desktop or the `lxplus` machines,
with access to `afs`, `eos` and `htcondor` yet come with some advatages and disadvantages:
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

advantages

**Advantages:**

- Full root access to your machine.
- Independence from Building 6/9/10 powercuts (in comparison to your office desktop machine).
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's not hardcode a building number considering 777 is around the corner.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is it? :P

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It actually is, yes. 2 years away according to the plan: https://building777.web.cern.ch/


- No automatic updates (you have to maintain your machine yourself).
- No external access, only via CERN network or lxplus-tunneling.
- Not a high-performace machine (compared to dev/optics servers and HPC clusters), especially when not part of a [project](#projects).
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would remove the anchor here. Firstly because it links to the next word, and more importantly because the next sentence also has a project word that links to a different place (and that one is important).

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It doesn't link to a word. It links to the title (any level) called projects, but sure, as it is directly the next section, I guess I can remove it ^^

Within a project more flavours and larger resource quotas are available, making it possible to create more powerful virtual machines.

!!! warning "Project Request"
You need to request a project through the CERN IT department directly from the [OpenStack portal][cern_openstack]{target=_blank}
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The link here does not format correctly. See my next comment for why and the fix.

Comment on lines +659 to +660
sudo dnf install perl-CPAN perl-Sys-Syslog # needed for running the script below
sudo dnf install perl-Authen-Krb5 # should install the perl Authen::Krb5 package
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
sudo dnf install perl-CPAN perl-Sys-Syslog # needed for running the script below
sudo dnf install perl-Authen-Krb5 # should install the perl Authen::Krb5 package
sudo dnf install -y perl-CPAN perl-Sys-Syslog # needed for running the script below
sudo dnf install -y perl-Authen-Krb5 # should install the perl Authen::Krb5 package

sudo rpm --import RPM-GPG-KEY-HTCondor

sudo dnf install -y https://research.cs.wisc.edu/htcondor/repo/current/htcondor-release-current.el9.noarch.rpm
sudo dnf install condor-all
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
sudo dnf install condor-all
sudo dnf install -y condor-all

Comment on lines +702 to +703
sudo dnf install http://galaxy4.net/repo/galaxy4-release-9-current.noarch.rpm -y # enable repo with new tmux versions
sudo dnf install tmux -y
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
sudo dnf install http://galaxy4.net/repo/galaxy4-release-9-current.noarch.rpm -y # enable repo with new tmux versions
sudo dnf install tmux -y
sudo dnf install -y http://galaxy4.net/repo/galaxy4-release-9-current.noarch.rpm # enable repo with new tmux versions
sudo dnf install -y tmux

sudo dnf install perl-Authen-Krb5 # should install the perl Authen::Krb5 package

echo "Testing the credentials via /usr/bin/batch_krb5_credential."
echo "If it failes, 'export KRB5CCNAME=/tmp/krb5cc_####' as seen in 'klist'."
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
echo "If it failes, 'export KRB5CCNAME=/tmp/krb5cc_####' as seen in 'klist'."
echo "If it fails, 'export KRB5CCNAME=/tmp/krb5cc_####' as seen in 'klist'."

# n (create new) -> as primary -> follow steps
# p (display new partition table)
# w (write to disk)
# $ lsblk -p /dev/vdb1 (verify new parition)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
# $ lsblk -p /dev/vdb1 (verify new parition)
# $ lsblk -p /dev/vdb1 (verify new partition)

Copy link
Member

@fsoubelet fsoubelet left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Somehow my review was double posted. Ignore this comment.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Estimate: Normal Straightforward, but might require some time. Probably needs additional tests. Priority: Medium Work on this. Type: Documentation Improvements, updates and fixes to the documentation.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants