54 lines
3.1 KiB
Markdown
54 lines
3.1 KiB
Markdown
# Admin & Account Setup
|
|
|
|
One-time or occasional account/host setup tasks — not day-to-day
|
|
operation shortcuts, which live in the
|
|
[main cheat sheet](cheatsheet.md).
|
|
|
|
## Personal directories & sync
|
|
|
|
| Command | Description |
|
|
|---|---|
|
|
| `create_personal_dir` | Create/verify a personal working directory under `/sf/bernina/config/personal/<username>` |
|
|
| `setup-network-drives` | Mount `~/network_drives` (PSI home, group shares) now; asks for `kinit` if there is no Kerberos ticket. Run it first, in a terminal, when the network home is missing (gopass "not initialized", new empty Firefox shared profile, dangling `~/.ssh` links). PSI-provided, linked here from `/usr/local/bin` |
|
|
| `create-links-in-home` | Force-apply PSI's Partially Shared Home symlinks now (normally applied automatically at login) |
|
|
| `migrate_to_network_drive` | Move a local dotfile onto PSI's Partially Shared Home and register it for sync across hosts |
|
|
| `sync_personal_config` | Seed `.ipython`/`.condarc` onto PSI's Partially Shared Home for cross-host sync |
|
|
|
|
If `~/network_drives/home` is a plain directory instead of a link, something wrote there before the mount finished; `setup-network-drives` can't fix that by itself. Close what uses it, then
|
|
`mv ~/network_drives/home ~/network_drives/home.broken && setup-network-drives`.
|
|
|
|
## gopass secrets
|
|
|
|
| Command | Description |
|
|
|---|---|
|
|
| `gopass_bernina_setup` | One-shot onboarding for a human PSI account joining the gopass store |
|
|
| `gopass_bernina_service_setup` | One-shot setup: give a service account (e.g. `gac-bernina`) access to the gopass store |
|
|
|
|
## Launcher editor
|
|
|
|
| Command | Description |
|
|
|---|---|
|
|
| `launcher-editor` | Edit the Bernina launcher in your own copy (`~/launcher_config`), preview it (F5) and publish it live; `--live` views the deployed one read-only. On `gac-*` accounts it first asks for your user name and runs as you (`become`, password in a terminal) |
|
|
|
|
- The app is a checkout of `github.com/swissfel/launcher_editor` in
|
|
`/sf/bernina/applications/launcher_editor`, run without installing
|
|
(bpy312 Python). Update it with
|
|
`git -C /sf/bernina/applications/launcher_editor pull`.
|
|
- It edits the gitea repository `autodeploy_config/sf_bernina_launcher`;
|
|
Publish pushes to it, and gitea's autodeploy copies it to
|
|
`/sf/bernina/config/launcher`. Publishing needs a gitea account, your
|
|
SSH key in gitea and Write access on that repository. How to get them
|
|
(same for every area's `autodeploy_config/sf_<area>_launcher`):
|
|
[PSI: gitea and autodeploy](https://github.com/swissfel/launcher_editor#psi-gitea-and-autodeploy)
|
|
in the editor's README.
|
|
- On the consoles `~/.ssh/id_ed25519` links into `~/network_drives`: if
|
|
`ssh -T git@gitea.psi.ch` says `Permission denied (publickey)`, run
|
|
`setup-network-drives` first.
|
|
|
|
This is a hand-picked subset of the full script index (the "Scripts in
|
|
this directory" section of the main sheet still lists every one of
|
|
these too, alongside everything else) — pulled out here specifically
|
|
because they're setup/onboarding tasks a supporter reaches for
|
|
occasionally, not something to hunt for in the full operational
|
|
reference.
|