...
- We're currently using host based authentication. Is there a 'future proof' recommended authentication system for HTCondor-9.x for a site planning to use both on-premesis cluster and CHTC flocking and or glide-ins to other facitlities? host_based? password? Tokens? SSL? Munge? Munge might be my preferred method as Slurm already requires it.
- ANSWER: idtokens
- If we're using containers for submit hosts is there a preferred authentication scheme (host based doesn't scale well).
...
- Our environment has a complex network topology. We have a prototype rsync plugin but may want to specify a specific network interface for a host as a function of where the execute host resides.
- Do file transfer plugins have access to the JobAd, either internally or via an external command condor_q -l? For example can they tell what PoolName a job requested?
- Can we make use of logic during the match making where 'if execute host is in set of X, then set some variable to Y' and then the plugin inspects some variable to determine where it is toplogically and therefore which interface to use.
Containers
- Is HTC basically committed to distributing container implementations with each new release
- Is this migrating toward a recommended implementation method for things like the submit hosts and possibly even execute hosts where the transactions could be light weight.
...