December 2022 - Physics-Departmental-Computing

"Blwyddyn Newydd dda a" date of next meeting
by David Colling 04 Jan '23

04 Jan '23

Dear All, I hope that you are all having a wonderful break - I am - and I apologise for sending a work email in the middle of it. As you know we tend to have a Physics Computing Meeting in the week leading up to the the FoNS Researsh Computing Meeting (FRCC). The next FRCC is on 11th Jan 2023 so I have set up a doodle poll for the week leading up to this. As you know we tend to have the Physics Computing meetings at lunch time. The doodle poll is at: https://doodle.com/meeting/participate/id/dJy4zP9b I have invited Ingrid because one of the items I want on the agenda is managed devices. Nothing has caused so much consternation amongst the user community for many years but I think that we are reaching a good conclusion. Please send me suggestions for other agenda items - I have some in mind but I am sure that there are others. One last thing, something that Andrew brought up at the end of the last meeting. We know the dates of the FRCCs for the rest of the academic year. In the past I have have put up doodle polls for the dates of our meetings only a week or two in advance of the FRCC. My thinking was that people would best know their availability at that stage. I could easily either put up doodle polls now for future meetings or even simply set the dates of the Physics meetings (say) 1 week before the FRCCs. The reason that I haven't done so in the past is that those of us in large collaborations often have meetings that cause clashes introduced at a few weeks notice, however these appear to still cause problems even with the approach that I current approach. Anyway, I would welcome people's opinions as how best to organise things in the future. Happy New Year to all! Best, david

1 2

Re: [Physics-Departmental-Computing] Services needed on a research computing desktop and laptop
by Jaffe, Andrew H 09 Dec '22

09 Dec '22

Dear all, Apologies for this slightly spammy follow-up, but this seemed like a good group to ask about this: Until what I think was a few weeks ago, I was able to use ssh and screen-sharing (vnc) to access my machine at Imperial, on the wired network with a fixed host name and IP address. From on-campus I could do this directly, and from off campus it required the vpn. It was also possible to use ssh via the sshgw machine from off campus even without vpn. I had successfully done this from other macOS machines, as well as iPads and iPhone with appropriate ssh and screen-sharing software. Recently, all of these modes of access have become impossible. I do not think this is due to any changes on my machine itself. I have successfully been able to ssh from the machine to itself, but actually using its IP address, which I think at least means that it is accepting incoming ssh. But user error on my part certainly remains a possibility… Is anyone else experiencing this? Is it a known change? Is it related to Unified Access (Zscaler), which as far as I know has not yet been deployed? Did I miss a communication about this? (This page < https://www.imperial.ac.uk/admin-services/ict/self-service/connect-communic… <https://www.imperial.ac.uk/admin-services/ict/self-service/connect-communic…> > is unclear about whether any of this is currently possible.) Many thanks, Andrew ______________________________________________________________________ Professor Andrew Jaffe a.jaffe(a)imperial.ac.uk<mailto:a.jaffe@imperial.ac.uk> Astrophysics Group +44 207 594-7526 Blackett Laboratory, Room 1018B Imperial College, Prince Consort Road London SW7 2AZ UK http://imperial.ac.uk/people/a.jaffe On 30 Nov 2022, at 10:39, Bantges, Richard J <r.bantges(a)imperial.ac.uk> wrote: Hi David (and everyone else), Having consulted with members in SPAT (those that have responded in time), here is our overview of services required on a research class machine: (Below are my definitions of service classes, others may have different ones of course) Admin Services: ICIS Authentication Services: LDAP, Licence Servers (e.g. Matlab, IDL, etc.) Communication Services: SSH (typically Port 22), FTP (?), Zoom, Access to Remote Data centres, Remote Desktop Gateway, Unified Access, VPN Data Sharing Services: SMB Servers, HTTP / HTTPS servers, NFS Servers, File Exchange (retired in 2 days?), Sharepoint, Onedrive, etc. Information Services: DNS, Library Journals Productivity Services: Office365, HPC Interactive Services (e.g. Jupyter Notebook, etc.), Software Centre Teaching Services: Blackboard, Starfish, Panopto, Secure College Webpages The above is probably a non-exhaustive list, and I've no doubt once a clearer picture emerges of what a Research Class machine might look like, then there will be the hope that this can be iterated / fine-tuned to accommodate any niche requirements inherent with the breadth of research activities and their associated diverse requirements. Thanks for your efforts towards defining this David. Best wishes, Rich -----Original Message----- From: David Colling <d.colling(a)imperial.ac.uk> Sent: 22 November 2022 20:17 To: Bresme, Fernando <f.bresme(a)imperial.ac.uk>; French, Paul (PHOT) M W <paul.french(a)imperial.ac.uk>; Keaveny, Eric E <e.keaveny(a)imperial.ac.uk>; Sternberg, Michael J E <m.sternberg(a)imperial.ac.uk>; Staffell, Iain L <i.staffell(a)imperial.ac.uk>; Pengelly, Ellen <e.pengelly(a)imperial.ac.uk>; Buchaca-Domingo, Ester <e.buchaca-domingo(a)imperial.ac.uk>; Bantges, Richard J <r.bantges(a)imperial.ac.uk>; Michalickova, Katerina <k.michalickova(a)imperial.ac.uk>; physics-departmental-computing <physics-departmental-computing(a)imperial.ac.uk>; Bryce, Craig T <c.bryce(a)imperial.ac.uk>; Bearpark, Michael J <m.bearpark(a)imperial.ac.uk> Cc: David Colling <david.colling(a)gmail.com>; Pearse, Will <will.pearse(a)imperial.ac.uk>; Cucinotta, Clotilde <c.cucinotta(a)imperial.ac.uk> Subject: Services needed on a research computing desktop and laptop Hi All, I am sending this to the Physics Departmental Computing Committee and to the departmental members of the FRCC so that they can gather information from their departments. As some of you know ICT are increasingly confining what people can do on college machines, even those bought on research grants and used by individual researchers. This has been most noticed by the change in the management of Macs. In my years involved in departmental computing, no issue has annoyed more people. Behind this is the increased number of attacks on university computing system which is visible both at Imperial and elsewhere. Some universities have been badly hit and have ended up paying £Ms to ransomware attackers. Apparently this is one of the things that keeps our President awake at night. This is clearly a threat that we have to take seriously, but it is also not clear how much damage could be done to college systems by a laptop or desktop used by a single (or team of) researcher(s). In discussions with ICT the most sensible approach seems to be that we define a class of machine that is a research desktop or laptop that ICT don't manage but which also has limited access to college central systems. Most of us have no reason to access payroll (say) and in fact would view it as a security breach if we could. We have a meeting on the 30th November where we will discuss this proposed set up. What I need going into is the list of services that researchers would need access to from these research machines, how that access would them + any other thoughts/comments. For example the sort of thing that occurred to me are: service: Office365 (including sharepoint, email, OneDrive teams etc) Access: Is access through the secure web portal enough for most of these plus a mail client providing secure access the the email. [I use Office365 much less than almost anybody to whom this email is going so am the least qualified to answer this one] Service: ICIS (Payslips, expenses claims etc) Access: Secure web access should be enough. Service: Starfish Access: Secure web access is sufficient. What other services are needed and how? Other comments: - I don't think that it is unreasonable to have a requirement that the disks of all research laptops are encrypted in case they are lost when travelling. The performance hit is minimal and if that is important then running on a laptop might not be ideal. So please do send me your thoughts (on services mainly) and comments. For once I would not be against you sending to everybody as I would welcome debate on this. Best, david _______________________________________________ Physics-Departmental-Computing mailing list Physics-Departmental-Computing(a)imperial.ac.uk https://mailman.ic.ac.uk/mailman/listinfo/physics-departmental-computing

2 1

Feedback needed at short notice
by David Colling 07 Dec '22

07 Dec '22

Sorry for the short notice - completely my fault. Tomorrow afternoon there is a workshop on data storage in the future. The agenda is below and I would welcome any feedback from people. Basic questions/criteria for the workshop (not limited to): Active Data Storage · What volume of data do you need to store during the lifetime of an active research project? · Are you using or planning to use RDS active data storage in conjunction with the RCS HPC resources or for other data storage requirements? · Do you need to share data externally? · Do you need to transfer data in/out of the next generation RDS from external resources? Disaster Recovery · What volume of data do you need to protect during the lifetime of an active research project? · If the data storage platform was significantly affected what ‘time to restore’ could you accommodate? § I need instant access to data § OR Project would require data to be restorable within hours/days/weeks/months? Archive · What volume of data would you need to archive at the end of a research project? · For what time period would you need to retain data in an Archive? · Do you have sensitive data (e.g. personal/commercial/other) that would need to be archived and an archive meet certain information governance requirements?

1 2

Fwd: Fact Finding with ICT
by David Colling 01 Dec '22

01 Dec '22

Please forward to anybody who might be interested... -------- Forwarded Message -------- Subject: Fact Finding with ICT Date: Thu, 1 Dec 2022 09:57:52 +0000 From: Villamil, Juan <juan.villamil(a)imperial.ac.uk> To: Bryce, Craig T <c.bryce(a)imperial.ac.uk>, French, Paul (PHOT) M W <paul.french(a)imperial.ac.uk>, Colling, David J <d.colling(a)imperial.ac.uk>, Bresme, Fernando <f.bresme(a)imperial.ac.uk>, Keaveny, Eric E <e.keaveny(a)imperial.ac.uk>, Sternberg, Michael J E <m.sternberg(a)imperial.ac.uk>, Staffell, Iain L <i.staffell(a)imperial.ac.uk>, Buchaca-Domingo, Ester <e.buchaca-domingo(a)imperial.ac.uk>, Armstrong-Brown, Sophie <s.armstrong-brown(a)imperial.ac.uk>, Bantges, Richard J <r.bantges(a)imperial.ac.uk>, Michalickova, Katerina <k.michalickova(a)imperial.ac.uk>, Li, Yangna <yangna.li(a)imperial.ac.uk>, Pietzuch, Peter R <prp(a)imperial.ac.uk>, Bearpark, Michael J <m.bearpark(a)imperial.ac.uk>, McCann, Julie A <j.mccann(a)imperial.ac.uk>, Cantwell, Chris <c.cantwell(a)imperial.ac.uk>, Bangerter, Neal K <n.bangerter(a)imperial.ac.uk>, Del Rio Chanona, Antonio <a.del-rio-chanona(a)imperial.ac.uk>, Taborda, David M G <d.taborda(a)imperial.ac.uk>, Boyle, David <david.boyle(a)imperial.ac.uk>, Wickerson, John P <j.wickerson(a)imperial.ac.uk>, Gorman, Gerard J <g.gorman(a)imperial.ac.uk>, Angioletti-Uberti, Stefano <s.angioletti-uberti(a)imperial.ac.uk>, Galvan, Stefano <s.galvan(a)imperial.ac.uk>, Wright, Andrew G <andrew.wright1(a)imperial.ac.uk>, Cohen, Jeremy <jeremy.cohen(a)imperial.ac.uk>, Sandhu, Manjinder S <m.sandhu(a)imperial.ac.uk>, Richards, Andrew <a.j.richards(a)imperial.ac.uk>, Prescott-Jones, Steven <s.prescott-jones(a)imperial.ac.uk>, Pengelly, Ellen <e.pengelly(a)imperial.ac.uk> CC: Scholfield, Liz <e.scholfield(a)imperial.ac.uk>

1 0

Fwd: FoNS Device Management - Defining a research devices and user group
by David Colling 01 Dec '22

01 Dec '22

FYI ... Please feel free to send comments ... I have a very busy up to the meeting this afternoon and will not have really enough time time to scrutinise the attached (so far I have not even had a chance to open it) so your comments will be very useful. Best, david -------- Forwarded Message -------- Subject: FoNS Device Management - Defining a research devices and user group Date: Tue, 29 Nov 2022 18:22:48 +0000 From: Joannou, Ingrid <i.joannou(a)imperial.ac.uk> To: Hanham, Neil A <n.hanham(a)imperial.ac.uk>, Prescott-Jones, Steven <s.prescott-jones(a)imperial.ac.uk>, Taylor, James A <james.a.taylor(a)imperial.ac.uk>, Willson, Thomas H <t.willson(a)imperial.ac.uk>, Colling, David J <d.colling(a)imperial.ac.uk>, Bresme, Fernando <f.bresme(a)imperial.ac.uk>, Jaffe, Andrew H <a.jaffe(a)imperial.ac.uk>, Harrison, Nicholas M <nicholas.harrison(a)imperial.ac.uk>, Bearpark, Michael J <m.bearpark(a)imperial.ac.uk> CC: David Colling <david.colling(a)gmail.com>, Pengelly, Ellen <e.pengelly(a)imperial.ac.uk>, Richards, Andrew <a.j.richards(a)imperial.ac.uk>, Villamil, Juan <juan.villamil(a)imperial.ac.uk> Dear All, Apologies for the late sending of this. Attached is a draft proposal based on some of the discussion so far. We are hoping this can be the basis for our conversation tomorrow with the aim to define further that middle layer of research machine. David, please feel free to forward to anybody else that you think might need to be included in this discussion. Kind Regards, Ingrid Dear All, I hope you are well. As per our previous meeting, I am setting up this meeting so we can follow up on defining the research devices with services used and user group for FoNS. A few of us will be on site for this meeting so I have added the room number in ICT but also happy to go to you if you can book a room for us? Kind Regards, Ingrid ________________________________________________________________________________ Microsoft Teams meeting *Join on your computer or mobile app*** Click here to join the meeting <https://teams.microsoft.com/l/meetup-join/19%3ameeting_MmFlNzM4YWEtMmRhNy00…> Meeting ID: 328 697 732 543 Passcode: CgLPAv Download Teams <https://www.microsoft.com/en-us/microsoft-teams/download-app> | Join on the web <https://www.microsoft.com/microsoft-teams/join-a-meeting> Learn more <https://aka.ms/JoinTeamsMeeting> | Meeting options <https://teams.microsoft.com/meetingOptions/?organizerId=add04a20-8545-483d-…> | Legal <https://www.imperial.ac.uk/media/imperial-college/administration-and-suppor…> ________________________________________________________________________________

3 3