...
Need to ask CHTC to allow gibson.aoc.nrao.edu (146.88.10.48) to flock and remove any rules for testpost-serv-1.aoc.nrao.edu (192.92.119.67).
Which hosts do the flocking?
Lustre is going to be a problem. Our new virtual CMs can't see lustre. Can just a submit host see lustre and not the CM in order to flock?
ANSWER: Only submit machines need to be configured to flock. It goes from a local submit host to a remote CM. So we could keep gibson as a flocking submit host. This means the new CMs don't need the firewall rules.
Authentication
Authentication
What is the recommended authentication system for HTCondor-9.x for a site planning to use both on-prem cluster and CHTC flocking? host_based? password? TokensWhat is the recommended authentication system for HTCondor-9.x for a site planning to use both on-prem cluster and CHTC flocking? host_based? password? Tokens? SSL? Munge? Munge might be my preferred method as Slurm already requires it.
...
You mentioned that the globus RPMs are going away. Yes?
ANSWER: They expect to drop globus support in 9.1 around May 2021.
VNC
Do you have any experience using VNC with HTCondor?
. Yes?
ANSWER: They expect to drop globus support in 9.1 around May 2021.
VNC
Do you have any experience using VNC with HTCondor?
ANSWER: no they don't have experience like this. But mount_under_scratch= will use the real /tmp
Which hosts do the flocking?
Lustre is going to be a problem. Our new virtual CMs can't see lustre. Can just a submit host see lustre and not the CM in order to flock?
ANSWER: Only submit machines need to be configured to flock. It goes from a local submit host to a remote CM. So we could keep gibson as a flocking submit host. This means the new CMs don't need the firewall rules.
Which hosts do the flocking?
Lustre is going to be a problem. Our new virtual CMs can't see lustre. Can just a submit host see lustre and not the CM in order to flock?
ANSWER: Only submit machines need to be configured to flock. It goes from a local submit host to a remote CM. So we could keep gibson as a flocking submit host. This means the new CMs don't need the firewall rules.ANSWER: no they don't have experience like this. But mount_under_scratch= will use the real /tmp