gitea-pages/pages/merlin7/02-How-To-Use-Merlin/transfer-data.md

title, keywords, last_updated, sidebar, permalink

title	keywords	last_updated	sidebar	permalink
Transferring Data	transferring data, data transfer, rsync, winscp, copy data, copying, sftp, import, export, hop, vpn	24 August 2023	merlin7_sidebar	/merlin7/transfer-data.html

Overview

Most methods allow data to be either transmitted or received, so it may make sense to initiate the transfer from either merlin or the other system, depending on the network visibility.

• Merlin login nodes are visible from the PSI network, so direct data transfer (rsync/WinSCP/sftp) is generally preferable.
  • Protocols from Merlin7 to PSI may require special firewall rules.
• Merlin login nodes can access the internet using a limited set of protocols:
  • HTTP-based protocols using ports 80 or 445 (https, WebDav, etc)
  • Protocols using other ports require admin configuration and may only work with specific hosts, and may require new firewall rules (ssh, ftp, rsync daemons, etc).
• Systems on the internet can access the PSI Data Transfer service datatransfer.psi.ch, using ssh-based protocols and Globus

SSH-based protocols using port 22 to most PSI servers and (rsync-over-ssh, sftp, WinSCP, etc.), are in general, not permitted

Direct transfer via Merlin7 login nodes

The following methods transfer data directly via the login nodes. They are suitable for use from within the PSI network.

Rsync

Rsync is the preferred method to transfer data from Linux/MacOS. It allows transfers to be easily resumed if they get interrupted. The general syntax is:

rsync -avAHXS <src> <dst>

For example, to transfer files from your local computer to a merlin project directory:

rsync -avAHXS ~/localdata $USER@login001.merlin7.psi.ch:/data/project/general/myproject/

You can resume interrupted transfers by simply rerunning the command. Previously transferred files will be skipped.

WinSCP

The WinSCP tool can be used for remote file transfer on Windows. It is available from the Software Kiosk on PSI machines. Add login001.merlin7.psi.ch or login002.merlin7.psi.ch as a host and connect with your PSI credentials. You can then drag-and-drop files between your local computer and merlin.

SWITCHfilesender

SWITCHfilesender is an installation of the FileSender project (filesender.org) which is a web based application that allows authenticated users to securely and easily send arbitrarily large files to other users.

Authentication of users is provided through SimpleSAMLphp, supporting SAML2, LDAP and RADIUS and more. Users without an account can be sent an upload voucher by an authenticated user. FileSender is developed to the requirements of the higher education and research community.

The purpose of the software is to send a large file to someone, have that file available for download for a certain number of downloads and/or a certain amount of time, and after that automatically delete the file. The software is not intended as a permanent file publishing platform.

SWITCHfilesender is fully integrated with PSI, therefore, PSI employees can log in by using their PSI account (through Authentication and Authorization Infrastructure / AAI, by selecting PSI as the institution to be used for log in).

{% comment %}

PSI Data Transfer

From August 2024, Merlin is connected to the PSI Data Transfer service, datatransfer.psi.ch. This is a central service managed by the Linux team. However, any problems or questions related to it can be directly reported to the Merlin administrators, which will forward the request if necessary.

The PSI Data Transfer servers supports the following protocols:

• Data Transfer - SSH (scp / rsync)
• Data Transfer - Globus

Notice that datatransfer.psi.ch does not allow SSH login, only rsync, scp and Globus access is allowed.

The following filesystems are mounted:

• /merlin/export which points to the /export directory in Merlin.
• /merlin/data/experiment/mu3e which points to the /data/experiment/mu3e directories in Merlin.
  • Mu3e sub-directories are mounted in RW (read-write), except for data (read-only mounted)
• /merlin/data/project/general which points to the /data/project/general directories in Merlin.
  • Owners of Merlin projects should request explicit access to it.
  • Currently, only CSCS is available for transferring files between PizDaint/Alps and Merlin
• /merlin/data/project/bio which points to the /data/project/bio directories in Merlin.
• /merlin/data/user which points to the /data/user directories in Merlin.

Access to the PSI Data Transfer uses Multi factor authentication (MFA). Therefore, having the Microsoft Authenticator App is required as explained here.

{{site.data.alerts.tip}}Please follow the Official PSI Data Transfer documentation for further instructions. {{site.data.alerts.end}}

Directories

/merlin/data/user

User data directories are mounted in RW.

{{site.data.alerts.warning}}Please, ensure proper secured permissions in your '/data/user' directory. By default, when directory is created, the system applies the most restrictive permissions. However, this does not prevent users for changing permissions if they wish. At this point, users become responsible of those changes. {{site.data.alerts.end}}

/merlin/export

Transferring big amounts of data from outside PSI to Merlin is always possible through /export.

{{site.data.alerts.tip}}The '/export' directory can be used by any Merlin user. This is configured in Read/Write mode. If you need access, please, contact the Merlin administrators. {{site.data.alerts.end}}

{{site.data.alerts.warning}}The use export as an extension of the quota is forbidden.
Auto cleanup policies in the export area apply for files older than 28 days. {{site.data.alerts.end}}

Exporting data from Merlin

For exporting data from Merlin to outside PSI by using /export, one has to:

• From a Merlin login node, copy your data from any directory (i.e. /data/project, /data/user, /scratch) to /export. Ensure to properly secure your directories and files with proper permissions.
• Once data is copied, from datatransfer.psi.ch, copy the data from /merlin/export to outside PSI

Importing data to Merlin

For importing data from outside PSI to Merlin by using /export, one has to:

• From datatransfer.psi.ch, copy the data from outside PSI to /merlin/export. Ensure to properly secure your directories and files with proper permissions.
• Once data is copied, from a Merlin login node, copy your data from /export to any directory (i.e. /data/project, /data/user, /scratch).

Request access to your project directory

Optionally, instead of using /export, Merlin project owners can request Read/Write or Read/Only access to their project directory.

{{site.data.alerts.tip}}Merlin projects can request direct access. This can be configured in Read/Write or Read/Only modes. If your project needs access, please, contact the Merlin administrators. {{site.data.alerts.end}}

Connecting to Merlin7 from outside PSI

Merlin7 is fully accessible from within the PSI network. To connect from outside you can use:

• VPN (alternate instructions)
• SSH hop
  • Please avoid transferring big amount data through hop
• No Machine
  • Remote Interactive Access through 'rem-acc.psi.ch'
  • Please avoid transferring big amount of data through NoMachine

Connecting from Merlin7 to outside file shares

merlin_rmount command

Merlin provides a command for mounting remote file systems, called merlin_rmount. This provides a helpful wrapper over the Gnome storage utilities, and provides support for a wide range of remote file formats, including

• SMB/CIFS (Windows shared folders)
• WebDav
• AFP
• FTP, SFTP
• others

More instruction on using merlin_rmount {% endcomment %}