56 lines
3.1 KiB
Markdown
56 lines
3.1 KiB
Markdown
# Admin & Account Setup
|
|
|
|
One-time or occasional account/host setup tasks — not day-to-day
|
|
operation shortcuts, which live in the
|
|
[main cheat sheet](cheatsheet.md).
|
|
|
|
## Personal directories & sync
|
|
|
|
| Command | Description |
|
|
|---|---|
|
|
| `create_personal_dir` | Create/verify a personal working directory under `/sf/bernina/config/personal/<username>` |
|
|
| `setup-network-drives` | Mount `~/network_drives` (PSI home, group shares) now; asks for `kinit` if there is no Kerberos ticket. Run it first, in a terminal, when the network home is missing (gopass "not initialized", new empty Firefox shared profile, dangling `~/.ssh` links). PSI-provided, linked here from `/usr/local/bin` |
|
|
| `create-links-in-home` | Force-apply PSI's Partially Shared Home symlinks now (normally applied automatically at login) |
|
|
| `migrate_to_network_drive` | Move a local dotfile onto PSI's Partially Shared Home and register it for sync across hosts |
|
|
| `sync_personal_config` | Seed `.ipython`/`.condarc` onto PSI's Partially Shared Home for cross-host sync |
|
|
|
|
If `~/network_drives/home` is a plain directory instead of a link, something wrote there before the mount finished; `setup-network-drives` can't fix that by itself. Close what uses it, then
|
|
`mv ~/network_drives/home ~/network_drives/home.broken && setup-network-drives`.
|
|
|
|
## gopass secrets
|
|
|
|
| Command | Description |
|
|
|---|---|
|
|
| `gopass_bernina_setup` | One-shot onboarding for a human PSI account joining the gopass store |
|
|
| `gopass_bernina_service_setup` | One-shot setup: give a service account (e.g. `gac-bernina`) access to the gopass store |
|
|
|
|
## Launcher editor
|
|
|
|
| Command | Description |
|
|
|---|---|
|
|
| `launcher-editor` | Edit the Bernina launcher in your own copy (`~/launcher_config`), preview it (F5) and publish it live; `--live` views the deployed one read-only. On `gac-*` accounts it first asks for your user name and runs as you (`become`, password in a terminal) |
|
|
|
|
- The app is a checkout of `github.com/swissfel/launcher_editor` in
|
|
`/sf/bernina/applications/launcher_editor`, run without installing
|
|
(bpy312 Python). Update it with
|
|
`git -C /sf/bernina/applications/launcher_editor pull`.
|
|
- Publish pushes to `gitea.psi.ch:autodeploy_config/sf_bernina_launcher`,
|
|
which deploys to `/sf/bernina/config/launcher`. That needs, once per
|
|
person:
|
|
1. a gitea.psi.ch account (log in there once with PSI SSO),
|
|
2. your SSH key added at gitea.psi.ch → Settings → SSH/GPG Keys (same
|
|
as step 3a of [rhel9_onboarding.md](rhel9_onboarding.md)),
|
|
3. Write access on `autodeploy_config/sf_bernina_launcher`; ask the
|
|
admin (Henrik Lemke).
|
|
|
|
Check with `ssh -T git@gitea.psi.ch` (should greet you by name). On the
|
|
consoles `~/.ssh/id_ed25519` links into `~/network_drives`, so if it
|
|
says `Permission denied (publickey)`, run `setup-network-drives` first.
|
|
|
|
This is a hand-picked subset of the full script index (the "Scripts in
|
|
this directory" section of the main sheet still lists every one of
|
|
these too, alongside everything else) — pulled out here specifically
|
|
because they're setup/onboarding tasks a supporter reaches for
|
|
occasionally, not something to hunt for in the full operational
|
|
reference.
|