operation-bin/cheatsheet_admin.md

Admin & Account Setup

One-time or occasional account/host setup tasks — not day-to-day operation shortcuts, which live in the main cheat sheet.

Personal directories & sync

Command	Description
create_personal_dir	Create/verify a personal working directory under /sf/bernina/config/personal/<username>
setup-network-drives	Mount ~/network_drives (PSI home, group shares) now; asks for kinit if there is no Kerberos ticket. Run it first, in a terminal, when the network home is missing (gopass "not initialized", new empty Firefox shared profile, dangling ~/.ssh links). PSI-provided, linked here from /usr/local/bin
create-links-in-home	Force-apply PSI's Partially Shared Home symlinks now (normally applied automatically at login)
migrate_to_network_drive	Move a local dotfile onto PSI's Partially Shared Home and register it for sync across hosts
sync_personal_config	Seed .ipython/.condarc onto PSI's Partially Shared Home for cross-host sync

If ~/network_drives/home is a plain directory instead of a link, something wrote there before the mount finished; setup-network-drives can't fix that by itself. Close what uses it, then mv ~/network_drives/home ~/network_drives/home.broken && setup-network-drives.

gopass secrets

Command	Description
gopass_bernina_setup	One-shot onboarding for a human PSI account joining the gopass store
gopass_bernina_service_setup	One-shot setup: give a service account (e.g. gac-bernina) access to the gopass store

Launcher editor

Command	Description
launcher-editor	Edit the Bernina launcher in your own copy (~/launcher_config), preview it (F5) and publish it live; --live views the deployed one read-only. On gac-* accounts it first asks for your user name and runs as you (become, password in a terminal)

• The app is a checkout of github.com/swissfel/launcher_editor in /sf/bernina/applications/launcher_editor, run without installing (bpy312 Python). Update it with git -C /sf/bernina/applications/launcher_editor pull.

• Publish pushes to gitea.psi.ch:autodeploy_config/sf_bernina_launcher, which deploys to /sf/bernina/config/launcher. That needs, once per person:

  1. a gitea.psi.ch account (log in there once with PSI SSO),
  2. your SSH key added at gitea.psi.ch → Settings → SSH/GPG Keys (same as step 3a of rhel9_onboarding.md),
  3. Write access on autodeploy_config/sf_bernina_launcher; ask the admin (Henrik Lemke).

  Check with ssh -T git@gitea.psi.ch (should greet you by name). On the consoles ~/.ssh/id_ed25519 links into ~/network_drives, so if it says Permission denied (publickey), run setup-network-drives first.

This is a hand-picked subset of the full script index (the "Scripts in this directory" section of the main sheet still lists every one of these too, alongside everything else) — pulled out here specifically because they're setup/onboarding tasks a supporter reaches for occasionally, not something to hunt for in the full operational reference.