-
Notifications
You must be signed in to change notification settings - Fork 0
Archive Trac jetstream new
Legacy Trac archive page imported from
jetstream_new. Source: https://genapp.rocks/wiki/wiki/jetstream_new. Review age, links, and examples before treating as current.
- need secgroup localall
nova secgroup-create sshlocalall "ssh & icmp enabled, all local ports open"
nova secgroup-add-rule sshlocalall tcp 22 22 0.0.0.0/0
nova secgroup-add-rule sshlocalall tcp 1 65535 10.0.0.0/8
nova secgroup-add-rule sshlocalall udp 1 65535 10.0.0.0/8
nova secgroup-add-rule sshlocalall icmp -1 -1 0.0.0.0/0
-
[alexey] intel compiler versions
-
[alexey] globus updates for new namd.jetstream bits
-
test shutdown/reboot
- make snapshot of working system
- share for jetstream/iu
-
test email verify / admin approval with globus oauth login
-
regular backups of critical stuff on website
-
backup of user data to jetstream/iu?
-
collect diff to make https work
- each project will have a volume store, how will we 'mount' their shares ?
- click ws to reconnect if red?
- postfix // seems to be working, a .rocks domain might get put into spam regularly
-
[done] perf_cli hourly test runs
-
[done] new certs / namd.jetstream-cloud.org
-
[done] optionally remove regular login
-
[done] performance evaluation
- -> slightly slower
-
[done] need to store project id
- [done] add it to user configuration
- [done] get data back to browser in sys_user_config, sys_login, sys_status[do we need it here?] & clear on logoff, store in ga.xsede.data
- [done] flag for resource requiring project ? appconfig:resource:properties:xsedeproject
- [done] then, if resource is has xsedeproject flag, select
- [done] on xsedeproject submission type, select project id and add to submit
- [done] one step more on submit in this case, and add javascript selection
- [done] return structure in sys_status
- [done] add selection screen for choice if multiple
- [done] _xsedeproject as project override in os_cluster, return error if no xsedeproject
- [done] need to check os_header, os_delete etc since each project is "nova" independent
- [done] check well "cancel" functions
- [done] os_integrity
- [done] add project/application to global mongo db
- [done] os_*_cli
-
[done] copy over namd from namdrunner.iu and test
-
[done] lower textarea ws message size cap
-
[done] add globus login/registration
-
websocket seems to die a lot on tacc
- maybe place an indicator and retry ... done
- it was a 10m idle websocket tcp close on tacc
- fixed with msg-keepalive service (which sends a message to keepalive subscribers every so often - default 30s, but can be overridden in appconfig:messaging:keepalive.
-
apache/cert stuff
- websocket and old cert notes
- digicert's implementation notes
- examine cert
- openssl x509 -in /etc/ssl/certs/namd.genapp.rocks.cer -noout -subject
- openssl crl2pkcs7 -nocrl -certfile /etc/ssl/certs/namd.genapp.rocks-fullchain.cer | openssl pkcs7 -print_certs -text -noout
- acme free cert
- restart apache
- service httpd24-httpd restart
- logs in /var/log/httpd/