Difference between revisions of "Users"

From Mufasa (BioHPC)
Jump to navigation Jump to search
 
(105 intermediate revisions by the same user not shown)
Line 1: Line 1:
Only Mufasa users (i.e., people with a user account on Mufasa) can [[System#Accessing Mufasa|access the machine]] and interact with it.
= Requesting a new user of Mufasa =


Only people with a '''Linux user account''' on Mufasa can [[System#Accessing Mufasa|access the machine]] and interact with it. Only Linux users registered to SLURM's accounting system can [[System#The_SLURM_job_scheduling_system|use SLURM]] to run jobs.


= Creating new Mufasa users =
All requests for the creation of new users and their registration to SLURM's accounting must be '''authorized by a member of the academic staff''' in charge of Mufasa.
In order to provide a physical person with the possibility of running jobs on Mufasa, two operations are required:


# the person must be [[Users#Creating a new Linux user|'''assigned a new Linux user''']] on Mufasa
Requests are done by writing an email
# the new Linux user must be [[Users#Providing a user with access to SLURM|'''registered in SLURM's accounting system''']]


The first operation only enables the person to interact with Mufasa via SSH and to execute basic activities, such as uploading data and code in their <code>/home</code> directory.
: '''TO:''' [[User:GiulioFontana|Giulio Fontana]]
: '''CC:''' the person who authorizes the request


The second operation is needed to enable the person to fully exploit Mufasa's computational resources, which requires using [[System#The SLURM job scheduling system|The SLURM job scheduling system]].
The email must provide the following 5 pieces of information:


== Creating a new Linux user ==
# '''name and surname''' of the person that the new Linux user is associated to
Creation of new Linux users is done either by [[Roles|Job Administrators]] or by specially designated users within each research group. If you are not one of these, see [[Users#Requesting user creation and/or registration|Requesting user creation and/or registration]].
# (POLIMI) '''email address''' of the person
# '''user category''', which can be either ''student'' (for M.Sc. students) or ''researcher'' (for everyone else, including Ph.D. students)
# '''research group''' that the person belongs to (see [[Users#Usernames and group names|below]])


Mufasa users who have the power to create new users do so with command
= Usernames and group names =
Mufasa usernames have the form <code>xyyyyyyyy</code> (all lowercase), where <code>x</code> is the first letter of the first name of the person, and <code>yyyyyyyy</code> is their surname (or part of it if it's too long). For instance, a person called Giuseppe Brambilla will be assigned username <code>gbrambill</code>.


<pre style="color: lightgrey; background: black;">
On Linux machines, users belong to ''groups''. On Mufasa, groups are used to identify research groups. Assigment of Mufasa's users to groups follow these rules:
sudo  /opt/share/sbin/add_user.sh -u <username> -g users,<research_group>
</pre>


where <code><username></code> and <code><research_group></code> are chosen as explained below (see [[Users#Usernames|Usernames]] and [[Users#Group names|Group names]]).
* All users corresponding to physical people belong to group <code>'''users'''</code>
* Additionally, each user must belong to ''one and only one'' of the following groups:
** <code>'''cartcas'''</code>, i.e. [http://www.cartcas.polimi.it/ CartCasLab] (prof. Cerveri);
** <code>'''biomech'''</code>, i.e. [http://www.biomech.polimi.it/ Biomechanics Research Group] (prof. Votta);
** <code>'''nearmrs'''</code>, i.e. [https://nearlab.polimi.it/medical/ Medical Robotics Section of NearLab] (prof. De Momi);
** <code>'''nearnes'''</code>, i.e. [https://nearlab.polimi.it/neuroengineering/ NeuroEngineering Section of NearLab] (prof. Ferrante);
** <code>'''bio'''</code>, for BioEngineering users not belonging to any of the research groups listed above.


For instance, in order to create a user on Mufasa for a person named Mario Rossi belonging to research group CartCasLab, the following command will be used:
The person cited within brackets is the faculty who is in charge of Mufasa for each research group.


: <code>sudo  /opt/share/sbin/add_user.sh -u mrossi -g users,cartcas</code>
= Removing inactive usernames =
Mufasa usernames that are not in use anymore '''must be removed'''. Typically, these correspond either to M.Sc. students who graduated or to researchers who left POLIMI.


At first login, new users will be asked to change the password initially assigned to them. For security reason, it is important that such first login occurs as soon as possible after user creation.
Removing a username means:
* '''deleting the username''' from the Linux system
* '''deleting the home directory''' from the filesystem


=== Usernames ===
Removing inactive usernames is necessary to preserve Mufasa's safety and to avoid wasting resources (e.g., disk space).
Mufasa usernames have the form <code>xyyy</code> (all lowercase), where <code>x</code> is the first letter of the first name of the person, and <code>yyy</code> is their complete surname. For instance, a person called Mario Rossi will be assigned username <code>mrossi</code>.  


If multiple users with the same surname ''and'' first letter of the first name exist, those created after the very first one are given usernames including a two-digit counter: <code>mrossi</code>, <code>mrossi01</code>, <code>mrossi02</code> and so on.
Whenever a person ceases to use Mufasa, '''the member of staff responsible for them''' (e.g.: professor, Ph.D) '''must''':
 
# (optional) check the home directory and copy any useful leftovers somewhere else
=== Group names ===
# write an email to [[User:GiulioFontana|Giulio Fontana]]
On Mufasa, Linux groups are used to identify the research group that a specific user is part of.
 
In the command [[Users#Creating a new Linux user|above]], <code><research_group></code> must be one of the following:
 
* <code>'''cartcas'''</code> for research group [http://www.cartcas.polimi.it/ CartCasLab] (prof. Cerveri);
* <code>'''biomech'''</code> for research group [http://www.biomech.polimi.it/ Biomechanics Research Group] (prof. Votta);
* <code>'''nearmrs'''</code> for research group [https://nearlab.polimi.it/medical/ Medical Robotics Section of NearLab] (prof. De Momi);
* <code>'''nearnes'''</code> for research group [https://nearlab.polimi.it/neuroengineering/ NeuroEngineering Section of NearLab] (prof. Ferrante);
* <code>'''bio'''</code>, for BioEngineering users not belonging to any of the research groups listed above.
 
The person cited within brackets is the faculty who is in charge of Mufasa for each group.
 
Note that by using the command [[Users#Creating a new Linux user|above]], all users are also assigned group <code>'''users'''</code>, which is common to all Mufasa users corresponding to physical people.
 
== Providing a user with access to SLURM ==
New users are not able to [[User Jobs#Executing jobs on Mufasa|execute jobs via SLURM]] until they are properly registered in SLURM's accounting system. This operation must necessarily be performed by  [[Roles|Job Administrators]].
 
See [[Users#Requesting user creation and/or registration|Requesting user creation and/or registration]] for details.
 
= Requesting user creation and/or registration =
To request the creation of a Linux user and/or to ask for its registration in SLURM's accounting system, a person belonging to the academic staff in charge of Mufasa should [[Special:Emailuser/GiulioFontana|write to Giulio Fontana]].
 
The request needs to specify what follows:
 
* name and surname of the person that the Linux user is associated to
* if such person is an M.Sc. student or a researcher (these include Ph.D. students)
* what research group the person belongs to, among those listed in [[Users#Group names|Group names]]
* (if already created) name of the Linux user corresponding to the person

Latest revision as of 16:40, 10 April 2024

Requesting a new user of Mufasa

Only people with a Linux user account on Mufasa can access the machine and interact with it. Only Linux users registered to SLURM's accounting system can use SLURM to run jobs.

All requests for the creation of new users and their registration to SLURM's accounting must be authorized by a member of the academic staff in charge of Mufasa.

Requests are done by writing an email

TO: Giulio Fontana
CC: the person who authorizes the request

The email must provide the following 5 pieces of information:

  1. name and surname of the person that the new Linux user is associated to
  2. (POLIMI) email address of the person
  3. user category, which can be either student (for M.Sc. students) or researcher (for everyone else, including Ph.D. students)
  4. research group that the person belongs to (see below)

Usernames and group names

Mufasa usernames have the form xyyyyyyyy (all lowercase), where x is the first letter of the first name of the person, and yyyyyyyy is their surname (or part of it if it's too long). For instance, a person called Giuseppe Brambilla will be assigned username gbrambill.

On Linux machines, users belong to groups. On Mufasa, groups are used to identify research groups. Assigment of Mufasa's users to groups follow these rules:

The person cited within brackets is the faculty who is in charge of Mufasa for each research group.

Removing inactive usernames

Mufasa usernames that are not in use anymore must be removed. Typically, these correspond either to M.Sc. students who graduated or to researchers who left POLIMI.

Removing a username means:

  • deleting the username from the Linux system
  • deleting the home directory from the filesystem

Removing inactive usernames is necessary to preserve Mufasa's safety and to avoid wasting resources (e.g., disk space).

Whenever a person ceases to use Mufasa, the member of staff responsible for them (e.g.: professor, Ph.D) must:

  1. (optional) check the home directory and copy any useful leftovers somewhere else
  2. write an email to Giulio Fontana