Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Table of Contents

Before the Student Arrives

CIS Account

Link: https://action.isi.edu/services/new_cis_account

Default group: pegasus.

Group Number: 23

Office, Badge

Ask Lorna to find an office for the student. Try to avoid offices without a window.

Lorna will also get an ID badge for the student. Make sure they get a key that works for their office.

Ask Lorna to create a basic computer account for the student. He will need a project account to charge it to.

Laptop

Loaner or a new laptop

New Mac Setup: https://gist.github.com/mayani/7f55a3a6453fa6fbb9b540418ce5de49

Email

Create a CIS ticket to add the student to the ccg@isi.edu mailing list.

Welcome Bag

After the Student Arrives

Wired Access for Student's Laptop

Register student's wired NIC address with CIS from https://action.isi.edu/services/ip_address

AD Setup

https://action.isi.edu/help/ad_self_service

Action should have sent an email about the student's account along with a username and temporary password.

Change password

Set Duo

Set Okta

Add to Crowd

Add student to Crowd's isi directory with ccg-users, confluence-users, jira-users, bamboo-users groups

Sync user directories in JIRA, Confluence, Bamboo, etc.

Add to Salt

Add student to salt stack.

Add to Slack

Add to USC ISI Slack

Add to Pegasus-WMS Slack

Add to Pegasus-Users Slack

Add to other project specific Slack workspaces as applicable.

Add to CCG mailing list

Confluence

Give the student write access to Confluence via Crowd.

Email

Have the student set up their email client to access their ISI account.

Set up SSH Keys

  • Windows 10: Has OpenSSH support. To enable see https://youtu.be/iyLUTgyDkGI?t=40

    Code Block
    themeEmacs
    mkdir ~/.ssh
    
    cd ~/.ssh
    
    ssh-keygen -t ed25519 -C "$USER"
    # Enter a password when prompted
    
    # Execute on Student's Linux Desktop
    # cat id_ed25519.pub > authorized_keys

NSF RCR

NSF has a new requirement that all students (undergraduate, graduate, and postdoctoral) must have had training in Responsible Conduct in Research (RCR) *before* being supported (i.e., paid) by NSF.  

http://www.usc.edu/research/private/NSF_RCR_Mandate_Memo_121009.pdf 

Furthermore, an on-line RCR

An online RCR certification system has been set up for this purpose.   It is found here:

http://wwwresearch.usc.edu/research/about/policies/responsible_conduct_of_research_rcr/index.html

Please note the following requirements as they apply to all VSoE students:#      all

  • all currently NSF-supported students (undergraduate, graduate, and postdoctoral)

...

  • must

...

  • complete the on-line course this spring, as per the Provost's memo;

...

  • all new incoming PhD students and postdocs

...

  • must

...

  • complete the on-line course before being set up on payroll;

...

  • all undergraduates being put on an NSF support

...

  • must

...

  • complete the on-line course before being set up on payroll;

...

  • PIs who have or hope to have NSF funding are urged to have all their PhD students and postdocs complete the on-line course in any case, to avoid possible future delays in student payroll if students/postdocs are moved from one grant to another.

Before the students start reading any papers, especially the Globus paper Gaurang or Karan spend 45 minutes with the students

  • giving a high level overview of the Grids.
  • explaining the various globus components
  • terminology of grid sites / grid site layout / submit hosts etc
  • security in grid. certificates etc

...

Papers to Read

List of Pegasus papers:

Older Pegasus Papers ( for reference. not reqd to read on first go):

Globus and Condor Papers to Read

HTCondor Papers

Second Week

Papers to Read

Setting up of credentials

  • Help the students set up their ssh keys so that they can log on to ISI machines from their laptops/ home computers

    Setting up of SSH Keys on ISI Linux boxes

  • log on to your linux box using action provided username and password
  • cd bin
  • Create the following symbolic links
    • ln -s /usr/bin/scp scp
    • ln -s /usr/bin/ssh-add ssh-add
    • ln -s /usr/bin/ssh-agent ssh-agent
    • ln -s /usr/bin/ssh-keygen ssh-keygen
    • ln -s /usr/bin/ssh-keyscan ssh-keyscan
  • Create your private keys
    • mkdir ~/.ssh
    • ssh-keygen -t dsa -C "user isi key" -b 2048 -f ~/.ssh/isi_dsa_2048
      Code Block
      
      Enter passphrase (empty for no passphrase):
      Enter same passphrase again:
      Your identification has been saved in /nfs/asd2/username/.ssh/id_dsa_2048.
      Your public key has been saved in /nfs/asd2/username/.ssh/id_dsa_2048.pub.
      The key fingerprint is:
      14:f9:31:1a:2d:e0:11:86:cd:3a:3d:9f:35:73:24:8c user isi key
      93.340u 0.070s 4:55.37 31.6%    0+0k 0+0io 363pf+0w
      
      Make sure that you enter a passphrase
      
  • Now you have a private key/public key pair generated.
  • Setup of account to use the generated ssh key to log on to other isi machines from your linux box
    • Machines running an OpenSSH server
      • cd ~/.ssh
      • ln -s id_dsa_2048 id_dsa
      • cat id_dsa_2048.pub > authorized_keys2
      • ssh sukhna.isi.edu
      • It should ask for your passphrase key
    • Machines running an SSH Secure (IETF SSH) Server
      • mkdir ~/.ssh2
      • cd ~/.ssh2
      • ssh-keygen -e -f ~/.ssh/id_dsa_2048.pub > id_dsa_2048_open.pub
      • create a text file named authorization with following content (use emacs or vi )
        Code Block
        
        Key id_dsa_2048_open.pub
        
      • ssh darkstar.isi.edu
      • It should ask for your passphrase key

Help students to get grid certificates

Pegasus Tutorial

...

Optional grid papers: