<!-- 
RSS generated by JIRA (8.3.4#803005-sha1:1f96e09b3c60279a408a2ae47be3c745f571388b) at Sat Feb 10 16:20:42 JST 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>PFS-JIRA</title>
    <link>https://pfspipe.ipmu.jp/jira</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>8.3.4</version>
        <build-number>803005</build-number>
        <build-date>13-09-2019</build-date>
    </build-info>


<item>
            <title>[INSTRM-22] [ICD] Standard configuration (uid/gid/NFS) of summit ICS hosts</title>
                <link>https://pfspipe.ipmu.jp/jira/browse/INSTRM-22</link>
                <project id="10300" key="INSTRM">Instrument control development</project>
                    <description>&lt;p&gt;from github@ics_doc&lt;/p&gt;

&lt;p&gt;At summit, most of all ICS hosts are supposed to mount one NFS storage for saving data, e.g. FITS image from &lt;span class=&quot;error&quot;&gt;&amp;#91;BR&amp;#93;&lt;/span&gt;CU, log files, archived data. We need to define standard configuration on them.&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://pfspipe.ipmu.jp/jira/secure/ViewProfile.jspa?name=fmadec&quot; class=&quot;user-hover&quot; rel=&quot;fmadec&quot;&gt;fmadec&lt;/a&gt; &lt;a href=&quot;https://pfspipe.ipmu.jp/jira/secure/ViewProfile.jspa?name=cloomis&quot; class=&quot;user-hover&quot; rel=&quot;cloomis&quot;&gt;cloomis&lt;/a&gt; if you have any preference on uid issue, comment here.&lt;/p&gt;

&lt;p&gt;Just to keep the reference configuration both visible and updatable, I&apos;ll add what we are using to this description. Obviously this will become a proper doc sometime, somewhere.&lt;/p&gt;
&lt;ol&gt;
	&lt;li&gt;Due to Subaru LDAP constraints, the &lt;tt&gt;pfs&lt;/tt&gt; user has user and group IDs of 2085 (NOT 1000 as we had earlier)&lt;/li&gt;
	&lt;li&gt;All operational PFS hosts mount &lt;tt&gt;/software&lt;/tt&gt; and &lt;tt&gt;/data&lt;/tt&gt;&lt;/li&gt;
	&lt;li&gt;All operational software must run from &lt;tt&gt;/software&lt;/tt&gt;&lt;/li&gt;
	&lt;li&gt;All data files must be written to &lt;tt&gt;/data&lt;/tt&gt;&lt;/li&gt;
	&lt;li&gt;All MHS software must be run by the &lt;tt&gt;pfs&lt;/tt&gt; user for operations, and by the developer for development.&lt;/li&gt;
	&lt;li&gt;Image files will be written by the &lt;tt&gt;pfs-data&lt;/tt&gt; user (uid/gid 2087) for the actors which write into &lt;tt&gt;/data&lt;/tt&gt;]&lt;/li&gt;
	&lt;li&gt;All users must have their own group ids, be in the &lt;tt&gt;pfs&lt;/tt&gt; group, and have a umask of 002.&lt;/li&gt;
	&lt;li&gt;All shared directories must be group &lt;tt&gt;pfs&lt;/tt&gt; and have &lt;tt&gt;g+rwx&lt;/tt&gt;.&lt;/li&gt;
&lt;/ol&gt;
</description>
                <environment></environment>
        <key id="11339">INSTRM-22</key>
            <summary>[ICD] Standard configuration (uid/gid/NFS) of summit ICS hosts</summary>
                <type id="3" iconUrl="https://pfspipe.ipmu.jp/jira/secure/viewavatar?size=xsmall&amp;avatarId=10518&amp;avatarType=issuetype">Task</type>
                                            <priority id="10000" iconUrl="https://pfspipe.ipmu.jp/jira/images/icons/priorities/medium.svg">Normal</priority>
                        <status id="10002" iconUrl="https://pfspipe.ipmu.jp/jira/images/icons/statuses/generic.png" description="The issue is resolved, reviewed, and merged">Done</status>
                    <statusCategory id="3" key="done" colorName="green"/>
                                    <resolution id="10000">Done</resolution>
                                        <assignee username="cloomis">cloomis</assignee>
                                    <reporter username="atsushi.shimono">shimono</reporter>
                        <labels>
                    </labels>
                <created>Thu, 17 Nov 2016 16:53:09 +0000</created>
                <updated>Fri, 17 Mar 2023 20:52:13 +0000</updated>
                            <resolved>Fri, 17 Mar 2023 20:52:12 +0000</resolved>
                                                                        <due></due>
                            <votes>0</votes>
                                    <watches>2</watches>
                                                                <comments>
                            <comment id="11589" author="cloomis" created="Thu, 17 Nov 2016 18:03:14 +0000"  >&lt;p&gt;We have been using the following rules at LAM, and pretty much at JHU:&lt;/p&gt;
&lt;ol&gt;
	&lt;li&gt;user pfs with uid=1000 gid=1000 holds the anaconda/eups product trees.&lt;/li&gt;
	&lt;li&gt;user pfs-data with uid=1001 gid=1001, also in group pfs. This is the only user which can write to data directories, The ccd actors run as as pfs-data, we have not settled on whether all actors should. In practice at LAM, they do.&lt;/li&gt;
	&lt;li&gt;development/modification is done by named users (e.g. cloomis, alefur, fmadec) in the pfs group. Identify who to blame!!&lt;/li&gt;
	&lt;li&gt;Obviously all users must have umask=2, and the pfs directories must be g+sxw&lt;/li&gt;
&lt;/ol&gt;
</comment>
                            <comment id="13384" author="atsushi.shimono" created="Mon, 7 May 2018 12:13:38 +0000"  >&lt;p&gt;&lt;a href=&quot;https://pfspipe.ipmu.jp/jira/secure/ViewProfile.jspa?name=philip&quot; class=&quot;user-hover&quot; rel=&quot;philip&quot;&gt;philip&lt;/a&gt;&lt;a href=&quot;https://pfspipe.ipmu.jp/jira/secure/ViewProfile.jspa?name=kyono&quot; class=&quot;user-hover&quot; rel=&quot;kyono&quot;&gt;kyono&lt;/a&gt; could you give a guideline(s) related on subaru ldap for accounts (incl, uid=20000-2004 things?) here?&lt;/p&gt;</comment>
                            <comment id="21715" author="hassan" created="Thu, 22 Jul 2021 12:55:53 +0000"  >&lt;p&gt;&lt;a href=&quot;https://pfspipe.ipmu.jp/jira/secure/ViewProfile.jspa?name=cloomis&quot; class=&quot;user-hover&quot; rel=&quot;cloomis&quot;&gt;cloomis&lt;/a&gt;: I think this ticket has already been addressed, correct?&lt;/p&gt;</comment>
                            <comment id="32423" author="arnaud.lefur" created="Fri, 17 Mar 2023 20:52:13 +0000"  >&lt;p&gt;has been done for each new system delivered to the mountain.&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10000">
                    <name>Blocks</name>
                                            <outwardlinks description="blocks">
                                        <issuelink>
            <issuekey id="11607">INSTRM-112</issuekey>
        </issuelink>
                            </outwardlinks>
                                                        </issuelinktype>
                            <issuelinktype id="10003">
                    <name>Relates</name>
                                            <outwardlinks description="relates to">
                                        <issuelink>
            <issuekey id="13228">INSTRM-592</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="12321">INSTRM-349</issuekey>
        </issuelink>
                            </outwardlinks>
                                                        </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                <customfield id="customfield_10500" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                            <customfield id="customfield_10010" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0|ii010f:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                        </customfields>
    </item>
</channel>
</rss>