This page describes certain features of the "Linux Desktop 2.0" pilot/R&D project. While this project has been in progress for some time, these notes begin in July 2018.
...
| Package | Status | Date installed | Install Tool | Notes | |
|---|---|---|---|---|---|
| 1 | Linux | required | 7/13/2018 and 8/28/2018 | pxe boot | Basic CLI |
| 2 | X11 | required | 7/17/2018 and 9/28/2018 | note 1 below | X11+gnome+gazillion dependencies |
| 3 | window manager | required | 7/17/2018 and 9/28/2018 | " | gnome based - working on conf file |
| 4 | desktop | required | 7/17/2018 and 9/28/2018 | " | (various convenience apps) |
| 5 | chef-client | required | 11/13/2018 | (installed by KSA) | Needed for installing YFS |
| 6 | Windows Active Directory | new authentication model (old=kerberos) | |||
| 7 | printing | required | [10/4/2018] | sudo system-config-printer | Printing will be via Windows AD IP based printing. In the meantime, configure locally using built-in printing system. Configure B048F2COPIER as a generic postscript printer. This probably needs to be rethought. |
| 8 | YFS | required | 11/14/2018 | chef-client -o slac_yfs-client | Auristor's YFS (AFS) client. Use "kinit [<userID>]" followed by "aklog" to get a token |
| 9 | emacs | required | 7/19/2018 and 9/28/2018 | gnome-software | |
| 10 | chrome | required | 9/28/2018 | d/l + yum install | |
| 11 | thunderbird | required | 7/19/2018 and 9/28/2018 | gnome-software | |
| 12 | NX | required | 9/28/2018 | d/l + yum install | NoMachine client for use with NERSC |
| 13 | citrix client | TESTING INC0211099 not sure if it will work | |||
| 14 | fastx | required | 9/28/2018 | d/l + tar -xvf | https connection fails, but ssh connection works. KSA has opened ticket with vendor |
| 15 | slack | required | 9/28/2018 | d/l + yum install | |
| 16 | zoom | required | 9/28/2018 | d/l + yum install | (implies support for microphone, camera and speakers) |
| 17 | LibreOffice | required | 7/19/2018 and 9/28/2018 | gnome-software | calc,writer,base,draw,impress,CAD |
| 18 | python v3 | required | 9/28/2018 | yum install | |
| 19 | sshfs | required | 12/19/2018 | yum install | sudo yum install fuse-sshfs commands include: sshfs, fusermount |
| 20 | dev tools (gcc) | required | 9/28/2018 | yum install | sudo yum group install 'Development Tools' |
| 21 | filezilla | required | 10/1/2018 | gnome-software | GUI file transfer between comet2 and SLAC servers |
| 22 | Ksnapshot | required | 10/1/2018 | gnome-software | screen shot utility |
| 23 | DbVis | needed by Fermi/LSST app developers | |||
| 24 | NetBeans | needed by Fermi/LSST app developers | |||
| 25 | LSF client | convenient | 10/25/2018 | requires slac_yfs-client | requires desktop is in the lsf configuration file and allowed to run batch commands, if desktop name is not in LSF configuration, start a service now ticket to request addition Needs YFS to do run command a link for /etc/lsf.conf (likely a cookbook configured setting?) |
| 26 | VPN | required | 11/14/2018 | download | Must download from a current Cisco AnyConnect customer  , e.g., NCSA |
| 27 | clamav | not needed | sudo yum install clamav | Anti-virus (needed to access SLAC VPN, but not necessary on machine connected to internal network) | |
| 28 | media codecs | very strongly desired | 12/14/2018 | Many steps --> | Followed numerous "sudo yum install ..." commands from https://wiki.centos.org/TipsAndTricks/MultimediaOnCentOS7 |
| 29 | htop | very strongly desired | 12/14/2018 | yum install htop | in EPEL |
| 30 | gimp | elective | 12/17/2018 | desktop installer | Gnome installer accessed through the Window Manager menu: Applications -> System Tools -> Application Installer |
| 31 | code42 | required | 112/20/2018 | (via SU web) | Stanford supported disk backup (for local files) https://stanford.app.box.com/v/SU-SemiCustomized-CPPe-Install |
| 32 | nVidia driver/dashboard | possibly required | -- | -- | Needed to run dual monitors. On comet2, two (DVI) monitors connected to the two displayPorts on the Quadro 2000 board work just fine with the built-in (nouveau) driver seems to work fine. |
| 33 | |||||
| 34 |
Notes:
X11 & GUI installed in this way:
Code Block title X11 and GUI curl http://yum/centos-gui > /tmp/centos-gui /bin/sh /tmp/centos-gui
(very large set of packages, takes a long time...)
Software installed via the GUI, e.g., Thunderbird, emacs, LibreOffice
Code Block sudo gnome-software
Attempt to install FastX downloaded from www.starnet.com. Code is unpacked from a tar.gz file and run without any special installation. Attempt to configure SLAC but code fails with a relocation error associated with /lib64/libssl.so.10. Karl to the rescue! Use the "ssh" connection rather than "https" while he queries the vendor for a proper fix.
TRS should not be used as it currently requires the use of DES enctypes that are insecure. WE have a todo to remove the ability for this weak-key to work. And are working to make TRS more secure so it can be used on Centos.
...
| Date | uname -a | Notes |
|---|---|---|
| 7/13/2018 | 3.10.0-862.6.3.el7.x86_64 | |
| 8/8/2018 | 3.10.0-862.9.1.el7.x86_64 | |
| 8/28/2018 | 3.10.0-327.el7.x86_64 | Fresh install by ksa |
| 8/29/2018 | 3.10.0-862.11.6.el7.x86_64 | |
| 10/4/2018 | 3.10.0-862.14.4.el7.x86_64 | |
| 12/7/2018 | 3.10.0-957.1.3.el7.x86_64 |
Disk Partitioning
The following table indicates a "standard" suggested disk partitioning for centos5.
This is a work-in-progress!
| Partition | Type | Size | Notes |
|---|---|---|---|
| /boot | ext4 | ||
| / | ext4 | root | |
| /home | ext4 | local user $HOMEs | |
| swap | |||
| /opt | ext4 | 3rd party software | |
| /tmp | ext4 | don't let this fill up! | |
| /var | ext4 | logs | |
| /scratch | ext4 | yum! | |
| /scswork | ext4 | maybe combine with / ? | |
| /usr/vice/cache | ext4 | AFS/YFS only | |
| /afs | auristorfs | --- | empty mount point (AFS/YFS only) |
On a new build, old or new hardware
...
| Expand | ||
|---|---|---|
| ||
7/13/2018 - comet2 machine arrives in bldg 48 rm 248. Kerberos authentication (temporary). Initial pass at identifying and installing needed software packages (above table) 8/28/2018 - comet2 rebuilt, lose login ability 9/28/2018 - regain ability to login via local account. Re-install needed packages. Also move offending file which causes polkitd to consume too much CPU, "A workaround that I've been using is to remove /etc/xdg/autostart/org.gnome.SettingsDaemon.Account.desktop until the above mentioned bug is fixed." (but this does not clear up the issue - polkitd still consumes 7-6% of the CPU continuously) 11/13/2018 - chef client installed (by Karl). Unexpectedly (to TG), this also activated unix kerberos authentication, thus I begin to use the 'dragon' (SLAC) account in favor of the dragon1 (local) account on comet2. 12/17/2018 - Karl adds 'dragon1' and 'dragon' accounts to /etc/group 'wheel' group. This allows a user to run, for example, the software installation tool GUI launched from the Applications -> System Tools menu in the WM. 12/19/2018 - Karl adds 'dragon' to sudo list. 1/14/2019 - Add system monitor to "top panel" in Gnome3 (right-click in that area no allows one to add new widgets): Applications->System Tools->Application Installer->Add-ons 1/18/2019 - Erik Chavez kindly provided two displayPort-to-DVI adaptors and that seems to work just fine with default display driver, etc. |
References:
- SLAC minimum security requirements:
https://docs.slac.stanford.edu/sites/pub/Publications/701-I02-001-00_Min_Sec_Req_for_Comp.pdf Stanford minimum security requirements:
https://uit.stanford.edu/guide/securitystandardsSLAC support for Linux:
Ubuntu/CentOS 7 Desktop Scope of Support
...