diff --git a/proposals/draft-nx-overview.drawio.svg b/proposals/draft-nx-overview.drawio.svg index ccaa3e1e..f7197776 100644 --- a/proposals/draft-nx-overview.drawio.svg +++ b/proposals/draft-nx-overview.drawio.svg @@ -1,13 +1,13 @@ - + - + - + -
+
http://rem-acc-ganglia.psi.ch @@ -15,20 +15,20 @@
- + http://rem-acc-ganglia.psi.ch - - + + - + -
+
rem-acc-1.psi.ch @@ -36,17 +36,17 @@
- + rem-acc-1.psi.ch
- + -
+
rem-acc.psi.ch @@ -54,19 +54,19 @@
- + rem-acc.ps... - - + + - + -
+
nx-proxy-1 @@ -74,20 +74,20 @@
- + nx-proxy-1
- - + + - + -
+
nx-proxy-2 @@ -95,17 +95,17 @@
- + nx-proxy-2
- + -
+
nomachine-proxy.psi.ch @@ -113,16 +113,16 @@
- + nomachine-pro... - + -
+
Extranet @@ -130,16 +130,16 @@
- + Extranet - + -
+
Intranet @@ -147,20 +147,20 @@
- + Intranet - - - - - + + + + + -
+
port 4000 @@ -168,17 +168,17 @@
- + port 4000 - - + + -
+
port 4000 @@ -186,16 +186,16 @@
- + port 4000 - + -
+
svc-nx @@ -203,21 +203,21 @@
- + svc-nx - - - - + + + + - + -
+
ra-nx-1 @@ -225,20 +225,20 @@
- + ra-nx-1
- - + + - + -
+
ra-nx-2 @@ -246,17 +246,17 @@
- + ra-nx-2
- + -
+
ra-nx.psi.ch @@ -264,19 +264,19 @@
- + ra-nx.psi.ch - - + + - + -
+
merlin-nx-1 ??? @@ -284,20 +284,20 @@
- + merlin-nx-1 ???
- - + + - + -
+
merlin-nx-2 ??? @@ -305,17 +305,17 @@
- + merlin-nx-2 ???
- + -
+
merlin-nx.psi.ch @@ -323,16 +323,16 @@
- + merlin-nx.psi... - + -
+
Ivano @@ -340,16 +340,16 @@
- + Ivano - + -
+
Marc @@ -357,16 +357,16 @@
- + Marc - + -
+
svc-cluster_ra @@ -374,16 +374,16 @@
- + svc-cluste... - + -
+
svc-cluster_merlin5 @@ -391,16 +391,16 @@
- + svc-cluste... - + -
+
svc-cluster_merlin6 @@ -408,17 +408,17 @@
- + svc-cluste... - - + + -
+
port 4000 @@ -426,17 +426,17 @@
- + port 4000 - - + + -
+
port 4000 @@ -444,19 +444,19 @@
- + port 4000 - - + + - + -
+
https:// @@ -466,17 +466,17 @@
- + https://...
- + -
+
can login to give access to certain consolse @@ -484,17 +484,17 @@
- + can login... - - + + -
+
mongo @@ -502,16 +502,16 @@
- + mongo - + -
+
Angular @@ -519,18 +519,18 @@
- + Angular - - - + + + -
+
Admins @@ -540,16 +540,16 @@
- + Admins... - + -
+
monitoring @@ -557,19 +557,19 @@
- + monitoring - - - - + + + + -
+
update access rules @@ -577,21 +577,21 @@
- + update acc... - - - - + + + + - + -
+
rem-acc-2.psi.ch @@ -599,17 +599,17 @@
- + rem-acc-2.psi.ch
- + -
+
centos7 @@ -617,16 +617,16 @@
- + centos7 - + -
+
pre-shared ssh keys - changes done via ssh commands @@ -638,21 +638,21 @@
- + pre-shared ssh keys - c... - - - - + + + + - + -
+
consoles ... @@ -660,18 +660,18 @@
- + consoles ...
- - + + -
+
port:4000 @@ -679,36 +679,36 @@
- + port:4000 - + -
+
- Rene + Rene/Dima
- - Rene + + Rene/Dima - - + + - + -
+
nx-node-1 @@ -716,20 +716,20 @@
- + nx-node-1
- - + + - + -
+
nx-node-2 @@ -737,20 +737,20 @@
- + nx-node-2
- - + + - + -
+
nx-node-3 @@ -758,20 +758,20 @@
- + nx-node-3
- - + + - + -
+
nx-node-4 @@ -779,17 +779,17 @@
- + nx-node-4
- + -
+
node randomly choosen @@ -799,35 +799,35 @@
- + node rando... - - - - - - - - - - - - - - - - - - + + + + + + + + + + + + + + + + + + - + -
+
login nodes @@ -837,20 +837,20 @@
- + login nodes...
- - + + - + -
+
login nodes @@ -860,12 +860,71 @@
- + login nodes...
+ + + + + +
+
+
+ 4000 or +
+ 22 +
+
+
+
+ + 4000 or... + +
+
+ + + + + + + +
+
+
+ duo +
+
+
+
+ + duo + +
+
+
+ + + + + +
+
+
+ read +
+
+
+
+ + read + +
+
diff --git a/proposals/draft-nx.md b/proposals/draft-nx.md index d9bc2772..e222b0d4 100644 --- a/proposals/draft-nx.md +++ b/proposals/draft-nx.md @@ -121,4 +121,46 @@ update of Mongo-DB for Rama (done by Dima) ---- -Checkout the app: Open OnDemand \ No newline at end of file +Checkout the app: Open OnDemand + + + +# Meeting + +- Enduser documentation maintained by Dima: https://www.psi.ch/en/photon-science-data-services/remote-interactive-access + +if you don't connect to rem-acc via the admin user a script is executed ... somewhere burried in /etc/sshd/sshd.config + +most of the stuff dima tries to do with puppet +hiera config: https://git.psi.ch/linux-infra/data-rem-acc + +There are no ansible script +- things not done by puppet is/was done manually + +rem-acc-1/2 still have access to repo00 and puppet server although it is in the extranet ... but not to git + + +cron jobs on remacc 1 to synchronize the internal state/database of nx-server! +cron jobs were placed manually!!! +no such cron jobs on rem-acc-2 + +/root/scripts on remacc1 is + +if remacc2 is master no sync and rama will not work +remacc2 only for short breakdowns +need to be discussed whether HA is really needed + + +we do not have nx-support package +response to tickets is few number of days (defined in license) +have access to portal to no-machine + +Dario can issue changes to nx-portal management: +www.nomachine.com +Account need to be done by Dario + +Portal used to download the rpms (need to be done one by one) for Linux and Windows +Portal used to issue tickets + + +https://intranet.psi.ch/de/daas contains some information why nomachine is used ... \ No newline at end of file