Announcements Piggybank For anyone asking if systems are up again, the piggy bank is located at br2.2.150 2025 01 www acc.gsi.de The aco webserver www acc.gsi...
Network Spezifikation Dieses Dokument beschreibt grob die von ACO Infrastruktur betreuten Ethernet basierten Netzwerke. Diese Spezifikation wird nach Bedarf angep...
Software FAQ rough guideline for available software Distribution We are currently (as of 2023) running rocky linux 9 can i have ...? we follow the packages of ...
News from CSCOIN jenkins 2.387.1 jenkins https://builder.acc.gsi.de/ and all plugins have been updated. this is the last jenkins update announcement. graylog ce...
User Account ACO has it's own identity management system. To request an account have your group leader or gsi contact person send an email to acctech at gsi.de wi...
Diagnostic Logging System The diagnostic logging services is provided by acoinn by running a opensearch, opendashboards, logstash cluster to receive and store dia...
Kubernetes Ingress In KubernetesServices we learned how to expose an application using a service and a loadbalancer. If the application is http based we can a...
Kubernetes Certificates Handling SSL Certificate generation and renewal in Kubernetes can be automated. The tool used is cert manager definition create a certifi...
Artifact Repository We are using a Nexus Repository Server. Reachable at https://artifacts.acc.gsi.de/. Read Access is anonymous. To deploy artifacts you require ...
Diagnostic Logging System Legacy notes, see DiagnosticLogging The diagnostic logging services is provided by CSCOIN by running a graylog cluster to receive an...
Mattermost The mattermost server is run by C IT. All issues including logins, teams, permissions to the user helpdesk. aco bot disabled as of 2023 08 experimenta...
Legacy System acc7 is unsupported as of July 2023 IT (acoinn) support ended july 2023. Upstream (operating system) ends Q3 2024. Systems will be powered off. ...
Single Sign On for Webservices we are switching over to a openid connect based single sign on system. Accessing an oidc enabled webservice will redirect to https:...
Certificates CSCO:IN Most of our webservices use SSL encryption. For example our website, buildservice, artifact repository, rpm repository, etc. Only the public ...
SSH Legacy old cryptograhic standards and what to do no matching host key type something like Unable to negotiate with ... port 22: no matching host key type fo...
Git ACO is running https://git.acc.gsi.de a gitea installation for controls related software. Authentication The server is only available inside the GSI Network....
Maven A preconfigured version of maven is installed on the development servers. Just type mvn. If you want to take a look at the configuration /opt/maven/conf. M...
Jetty default (since 2022) servlet container for user managed services (ClusterAcc9). Installation INN will install Jetty by user request on service hosts. It wi...
SSH Agent do not use unencrypted ssh private keys! The basic security scan will automatically delete them. But typing in the password for the key is annoying. D...
Systems common systems for interactive user logins. acc9 current (as of 2023) linux cluster. Provides ssh and rdp access. Development on asl751.acc.gsi.de to asl...
Cluster acc6 is unsupported as of November 2020 Note: SshLegacy Cluster acc6 is the legacy computational computer cluster virtual machines. It's used to develop ...
Please Note that their is also a MailingList * .AlexanderSchwinn: Announcement * .AndreasSchaller: WebHome * .BenjaminPeter: Announcement WebHome Con...
Kubernetes Services This document assumes you already read Kubernetes Now that we know how to build containers and deploy them to Kubernetes we want to ac...
Kubernetes Managing a lot of containers leads to the need of a management tool. Kubernetes is one of them (not the only one, but the most famous, other exampl...
Known IP Ports The following non standard IP ports are used by GSI Services. All Programs should be capable to use a different port without a recompile (config fi...
Target Platform 2022 Has been discussed in the FAIR.CCT/Minutes230321 INN summary Target platform 2022 will be a Redhat Enterprise Linux 8 clone. We will go ...
Kubernetes DNS name decoder NAME.SPACE.TYPE.CLUSTER.K8S.ACC.GSI.DE NAME is the name of the object SPACE is the kubernetes namespace you are working with. For ...
Kubernetes Hints Java Java and Kuberentes is a bit complicated. Java tries to autodetect various system information (for example Memory, Cpu count) and autotunes...
Kubernetes Monitoring is done with prometheus. Webinterface is grafana. https://prometheus.acc.gsi.de/grafana/ Service Metrics Prometheus is doing auto discovery...
Container Continuous Integration Automatic building of container images using jenkins. Security To enable deployment from jenkins to the container registry we ne...
Container Building This document assumes you already read ContainerIntroduction . Our tool to build images is podman together with a Containerfile describing t...
Remote Access Is only available from within the ACC and Campus network. Remote access via internet is only possible using hops provided by core it (lx pool, citr...
Kubernetes debug how to debug application running in kubernetes? access running container get a shell inside the running container. kubectl exec my app ti /b...
Container Policy Running Containers is still (04 2020) in evaluation. Here are the current restrictions * not productive * no backup * no high availabili...
Container Introduction This document tries to give a rough overview what containers are and how to use them. For some Policies see ContainerPolicies. For more inf...
Kubernetes Resource Limits Container and pods in Kubernetes are dynamically distributed on the available nodes. Processes in a container consume cpu cycles and me...
Container Registry We are running our own container registry. https://registry.acc.gsi.de It's not high available, there is no backup, it might change to a differ...
Migration NFS Server to rocky 8 the nfs server fsl00c will be migrated to a rocky 8 based system. The nfs server provides filesystems /common/home, /common/export...
Xrdp xrpd provides graphical remote access to servers. Internal systems with xrdp listen on the default rdp port 3389. For linux clients, something like xfreerdp...
Subversion Subversion wurde im Januar 2021 deaktiviert Subversion wird zur Strahlzeit 2019/2020 (Nov 2019) auf readonly gesetzt. Subversion wird zur Strahlzeit 2...
Kubernetes Limitations kubernetes has some limitations. They result in our current setup, or policies or are builtin * total of about 2700 external services ov...
graylog queries graylog changed the model of saved queries. The queries could not be migrated. Here is a list of all saved queries of graylog before 2020 06 22 so...
Central Syslog Service The central logging server also provides a syslog socket. See DiagnosticLogging Please do not use the syslogserver without consulting I...
Artifact Naming Guideline All Artifacts produced at gsi should follow this guideline. This helps to find them in the Repository and prevents clash of names on the...
Build Service We are running a jenkins build service at https://builder.acc.gsi.de It provides multiple build configuration. The current configurations can be see...