Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

foldingathome: systemd cleanup, various fixues. #15145

Closed
wants to merge 1 commit into from
Closed

foldingathome: systemd cleanup, various fixues. #15145

wants to merge 1 commit into from

Conversation

ferringb
Copy link
Contributor

@ferringb ferringb commented Mar 28, 2020

  1. force the foldingathome user group for the process for obvious
    reasons.
  2. link in the video group and add it to the foldingathome user- this
    is necessary for GPU utilization.
  3. force nice=19 from systemd level. The batch processing attempts to
    do this for workers, but we might as well force it for the scheduler.
  4. Add explicit configuration directives to force- irregardless of host config-
    the scheduler to be foreground'd and running in a fashion that integrates w/
    systemd more sanely.
  5. Lockdown some basic systemd security while I'm in here.
  6. Finally, drop the pidfile directive for systemd. Foreground process-
    no pidfile to track (nor should we have the unit create it).

Bug: https://bugs.gentoo.org/712744
Signed-off-by: Brian Harring ferringb@gmail.com

@gentoo-bot
Copy link

Pull Request assignment

Submitter: @ferringb
Areas affected: ebuilds
Packages affected: sci-biology/foldingathome

sci-biology/foldingathome: @axs-gentoo, @gentoo/sci-biology

Linked bugs

Bugs linked: 712744

Missing GCO sign-off

Please read the terms of Gentoo Certificate of Origin and acknowledge them by adding a sign-off to all your commits.


In order to force reassignment and/or bug reference scan, please append [please reassign] to the pull request title.

Docs: Code of ConductCopyright policy (expl.) ● DevmanualGitHub PRsProxy-maint guide

@gentoo-bot gentoo-bot added assigned PR successfully assigned to the package maintainer(s). bug linked Bug/Closes found in footer, and cross-linked with the PR. no signoff One or more commits do not indicate GCO sign-off. labels Mar 28, 2020
@ferringb
Copy link
Contributor Author

ferringb commented Mar 28, 2020

/CC @juippis this is a followon to the systemd side. For systemd this is enough for my usage (or has been).

I'd suggest replicating what is relevant- the group usage for the process for example- to the openrc scripts. I cannot test that pathway nor have interest to do so (I use just systemd these days).

Also note that I already signed a copyright assignment a couple of decades back, so that's covered should it be part of the checklist.

1) force the `foldingathome` user group for the process for obvious
  reasons.
2) link in the video group and add it to the foldingathome user- this
  is necessary for GPU utilization.
3) force nice=19 from systemd level.  The batch processing attempts to
  do this for workers, but we might as well force it for the scheduler.
4) Add explicit configuration directives to force- irregardless of host config-
  the scheduler to be foreground'd and running in a fashion that integrates w/
  systemd more sanely.
5) Lockdown some basic systemd security while I'm in here.
6) Finally, drop the pidfile directive for systemd.  Foreground process-
  no pidfile to track (nor should we have the unit create it).

Bug: https://bugs.gentoo.org/712744
Signed-off-by: Brian Harring <ferringb@gmail.com>
@gentoo-repo-qa-bot
Copy link
Collaborator

Pull request CI report

Report generated at: 2020-03-28 05:32 UTC
Newest commit scanned: d8908c7
Status: ✅ good

Issues already there before the PR (double-check them):
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#app-admin/consul-template
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#app-admin/puppet
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#app-admin/rsyslog
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#app-admin/system-tools-backends
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#app-editors/atom
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#app-emulation/bochs
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#app-emulation/virtualbox-additions
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#app-emulation/virtualbox-guest-additions
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#app-emulation/virtualbox-modules
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#app-i18n/tomoe
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#app-misc/cbrpager
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#app-misc/ignuit
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#app-office/libreoffice-l10n
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#app-shells/hstr
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#app-text/glosung
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#app-text/jo
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-cpp/tbb
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-db/etcd
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-db/mongodb
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-db/mysql-workbench
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-db/pgagent
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-dotnet/gnome-keyring-sharp
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-embedded/gnome-avrdude
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-java/swt
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-lang/lisaac
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-lang/qu-prolog
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-lang/rust
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-libs/gjs
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-libs/glib
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-libs/iniparser
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-perl/gnome2-perl
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-perl/gnome2-vfs-perl
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/Numdifftools
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/backports-functools-lru-cache
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/docker-py
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/falcon
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/flask-gravatar
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/flask-htmlmin
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/flask-security
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/gconf-python
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/genson
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/gnome-vfs-python
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/libbonobo-python
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/libgnome-python
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/libgnomecanvas-python
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/paste
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/pygtk
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/pyorbit
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/pyte
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/reflink
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/schedule
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/sphinx-gallery
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-python/yarl
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-util/electron
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-util/jenkins-bin
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#dev-vcs/subversion
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#games-board/gnono
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#games-board/grhino
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#games-board/gtkboard
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#games-board/mt_gtk_client
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#games-board/pioneers
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#games-board/sirius
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#games-board/teg
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#games-puzzle/gtetrinet
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#games-puzzle/skoosh
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#gnome-base/gdm
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#gnome-base/gnome-session
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#gnome-base/libbonobo
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#gnome-base/libbonoboui
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#gnome-base/libgnome
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#gnome-base/libgnome-keyring
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#gnome-base/libgnomeui
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#gnome-extra/cinnamon
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#gnome-extra/gnome-commander
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#mail-client/claws-mail
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#mail-client/mail-notification
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#mail-client/thunderbird
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#mail-mta/nullmailer
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#mate-extra/mate-power-manager
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#media-gfx/darktable
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#media-gfx/inkscape
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#media-libs/cogl
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#media-libs/libgpod
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#media-libs/mlt
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#media-libs/pymemphis
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#media-libs/tremor
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#media-sound/grip
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#media-sound/jack-rack
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#media-tv/kodi
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#media-video/unifi-video
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-analyzer/etherape
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-analyzer/ntopng
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-analyzer/wireshark
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-analyzer/zabbix
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-dns/bind
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-dns/unbound
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-ftp/lftp
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-im/teams
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-misc/grdesktop
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-misc/gwget
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-misc/lldpd
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-misc/openssh
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-misc/rabbitmq-server
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-misc/youtube-dl
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-nds/openldap
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-nntp/pan
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-p2p/fms
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-p2p/retroshare
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-proxy/dante
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-proxy/haproxy
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-voip/telepathy-haze
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-vpn/networkmanager-l2tp
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-vpn/networkmanager-openvpn
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-vpn/networkmanager-sstp
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-wireless/kismet
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#net-wireless/urh
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#sci-biology/foldingathome
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#sci-electronics/linsmith
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#sci-libs/ceres-solver
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#sci-libs/eccodes
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#sci-libs/openblas
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#sci-libs/spqr
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#sci-libs/suitesparse
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#sci-libs/umfpack
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#sci-physics/clhep
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#sci-physics/geant-data
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#sys-apps/agedu
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#sys-apps/coreutils
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#sys-apps/modutils
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#sys-devel/distcc
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#sys-fs/lvm2
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#sys-kernel/linux-firmware
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#sys-power/nut
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#www-apps/cgit
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#www-apps/jekyll
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#www-apps/netbox
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#www-apps/trac
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#www-client/firefox
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#www-client/seamonkey
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#www-client/seamonkey-bin
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#www-servers/nginx
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#www-servers/tomcat
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#www-servers/tornado
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#x11-misc/xnee
https://qa-reports.gentoo.org/output/gentoo-ci/4e05a70/output.html#x11-plugins/pidgin-opensteamworks

Copy link
Member

@juippis juippis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can't test this on systemd, but looks good, I trust it works. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
assigned PR successfully assigned to the package maintainer(s). bug linked Bug/Closes found in footer, and cross-linked with the PR. no signoff One or more commits do not indicate GCO sign-off.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants