Difference between revisions of "Hardware servers"

From Cncz
Jump to: navigation, search
m (Linux [loginservers|login servers])
(lilo en stitch omgewisseld)
 
(47 intermediate revisions by 6 users not shown)
Line 22: Line 22:
  
 
[nl]
 
[nl]
Er zijn twee secure shell servers beschikbaar voor studenten en medewerkers van FNWI (iedereen met een [https://wiki.science.ru.nl/cncz/Nieuwe_studenten#.5BScience_naam_.28vachternaam.29_.5D.5BScience_name_.28isurname.29.5D Science account)]. De standaard loginserver is:
+
Er zijn enkele [[SSH|secure shell]] servers beschikbaar voor studenten en medewerkers van FNWI (iedereen met een [[Login|Science account]]).
 +
 
 +
Deze zijn voor algemeen gebruik: iedereen mag ze gebruiken zoals men wil, *zolang het geen overlast voor anderen oplevert*.
 +
 
 +
De standaard loginserver is:
 
  lilo.science.ru.nl
 
  lilo.science.ru.nl
  
Line 28: Line 32:
 
  stitch.science.ru.nl
 
  stitch.science.ru.nl
  
Op dit moment wijst lilo naar ene machine met de naam lilo4. Stitch wijst naar lilo3.
+
Op dit moment wijst lilo naar een machine met de naam lilo6. Stitch wijst naar lilo5 Ubuntu 16.04, deze is niet de default lilo, omdat we standaard Ubuntu 18.04 op desktops installeren.
 
 
De ssh vingerafdrukken van lilo3 en lilo4 zijn:
 
2048 3e:b9:89:4d:53:9b:8f:4a:97:b2:a1:c3:0d:74:34:2c  root@lilo3 (RSA)
 
2048 aa:ad:c0:2e:60:9d:d3:cd:ca:a4:59:7d:d0:d8:4c:68  root@lilo4 (RSA)
 
  
ISP's met beperkte Internet-toegang:
+
De ssh vingerafdrukken van lilo5 en lilo6 zijn:
  
Als je achter een firewall zit die geen uitgaan verkeer op de standaard ssh poort 22 toestaat, dan is ook poort 80 en 443 voor ssh naar lilo/stitch te gebruken, omdat ze ook op die poorten een verbindeing toestaan.
 
 
Aangeraden ssh client software:
 
* Linux: ssh is standaard geïnstalleerd. Als dat niet zo is, installeer dan het pakket openssh-client.
 
* OS X: ssh is standaard geïnstalleerd op de Mac.
 
* Windows: Gebruik [http://mobaxterm.mobatek.net/ MobaXterm], [http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html PuTTY] of de OpenSSH client van [https://www.cygwin.com/ Cygwin].
 
* Android: [https://connectbot.org/ ConnectBot]
 
 
Aangeraden file transfer clients:
 
* Linux: scp
 
* Windows en OS X: [https://cyberduck.io/ Cyberduck]
 
* Windows: [http://mobaxterm.mobatek.net/ MobaXterm] of [https://winscp.net WinSCP]
 
 
[/nl]
 
[/nl]
 
[en]
 
[en]
Two secure shell servers are available for Students and Staff of the Faculty (everyone with a [https://wiki.science.ru.nl/cncz/Nieuwe_studenten#.5BScience_naam_.28vachternaam.29_.5D.5BScience_name_.28isurname.29.5D Science account]). The primary login server can be reached with the following address:
+
A few [[SSH|secure shell]] servers are available for Students and Staff of the Faculty (everyone with a [[Login|Science account]]). You can use it just as you like, *as long as you do not cause problems for other users*.
 +
 
 +
The primary login server can be reached with the following address:
 
  lilo.science.ru.nl
 
  lilo.science.ru.nl
  
Line 56: Line 46:
 
  stitch.science.ru.nl
 
  stitch.science.ru.nl
  
At the moment, lilo points to a machine called lilo4. Stitch points to lilo3.
+
At the moment, lilo points to a machine called lilo6. Stitch points to lilo5, running Ubuntu 16.04, it is not the default, because the default desktop Linux is Ubuntu 18.04, which is installed on lilo6.
  
The ssh finger prints for lilo3 and lilo4 are:
+
The ssh fingerprints for lilo5 and lilo6 are:
2048 3e:b9:89:4d:53:9b:8f:4a:97:b2:a1:c3:0d:74:34:2c  root@lilo3 (RSA)
+
[/en]
2048 aa:ad:c0:2e:60:9d:d3:cd:ca:a4:59:7d:d0:d8:4c:68  root@lilo4 (RSA)
 
  
Restricted ISP's:
+
1024 SHA256:g/LY9oywiXFi5jrO93JFImvm5fwYrRxlloefHH1yU2s  root@lilo5 (DSA)
 +
2048 SHA256:VK8+B+OuT+n8JSjoy9uWYw5COb+cZ+01S/pWiAteEtA  root@lilo5 (RSA)
 +
  256 SHA256:NeO+rdPufkFYEgLs6YMWPvMJzOBK9pNlxdjMJzK3OBY  root@lilo5 (ECDSA)
 +
  256 SHA256:zViYANQchkRs6QNPSSoxOkVyA8Ixe7aZCvzcSQEZK7s  root@lilo5 (ED25519)
 +
1024 MD5:2c:ae:19:79:9c:23:7b:f3:d0:49:7a:cb:fa:30:68:c5  root@lilo5 (DSA)
 +
2048 MD5:66:18:8e:fa:bd:d9:83:91:86:f3:0e:35:d1:f5:31:2a  root@lilo5 (RSA)
 +
  256 MD5:7d:08:27:61:ac:c8:f1:05:4f:c9:91:2a:83:e5:c3:4f  root@lilo5 (ECDSA)
 +
  256 MD5:a4:6c:15:3b:c8:01:7f:d2:65:89:74:c6:32:7f:7e:c6  root@lilo5 (ED25519)
  
In case you are behind a firewall the does not permit outgoing connections to the standard ssh port 22. Our login servers also allow connections to ports 80 and 443.
+
1024 SHA256:JVE0FA1fFGtzbuqP1D6cW8V3fkmqxdCL5H3xRMsiJxc  lilo6 (DSA)
 +
2048 SHA256:c+kPQDMuzf+1uKIJt8RIFOUume0Z1g2UjUOpxXXyCuY  lilo6 (RSA)
 +
  256 SHA256:dRvKM7qcQF8wGZZofYT3/JbSGUXA3l3nadzzqrHvWhE  lilo6 (ECDSA)
 +
  256 SHA256:5PBNahtMibQTmjQgDlBM4OVEJ4fo9vJv/4JTJ1XfXB8  lilo6 (ED25519)
 +
1024 MD5:e7:2c:39:51:18:7a:17:26:c8:55:a1:f8:61:5d:fa:d8  lilo6 (DSA)
 +
2048 MD5:f9:8a:5f:16:7b:2b:6c:42:26:78:c5:bc:a3:94:ed:33  lilo6 (RSA)
 +
  256 MD5:d6:2a:8b:7a:7d:ab:f6:4b:99:5c:9f:be:1e:98:ae:0e  lilo6 (ECDSA)
 +
  256 MD5:39:6c:c9:da:a6:3b:3b:48:0e:a0:26:b5:7a:ea:a6:89  lilo6 (ED25519)
  
Recommended ssh client software:
+
[nl]
* Linux: Your computer should have ssh installed by default. Otherwise, install the openssh-client package.
+
===== ISP's met beperkte Internet-toegang =====
* OS X: the ssh client should be available on your Mac.
 
* Windows: Use [http://mobaxterm.mobatek.net/ MobaXterm], [http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html PuTTY] or the OpenSSH client provided by [https://www.cygwin.com/ Cygwin].
 
* Android: [https://connectbot.org/ ConnectBot]
 
 
 
Recommended file transfer clients:
 
* Linux: scp
 
* Windows and OS X: [https://cyberduck.io/ Cyberduck]
 
* Windows: [http://mobaxterm.mobatek.net/ MobaXterm] or [https://winscp.net WinSCP]
 
[/en]
 
  
=== Windows terminalserver ===
+
Als je achter een firewall zit die geen uitgaand verkeer op de standaard ssh poort 22 toestaat, dan is ook poort 80 en 443 voor ssh naar lilo/stitch te gebruiken, omdat ze ook op die poorten een verbinding toestaan.
 
 
[nl]
 
Voor het gebruik van bepaalde applicaties is een PC met MS Windows vereist. Voor gebruikers van een ander besturingssysteem is er een [[Windows_Terminal_Server|Windows Terminal Server]] ingericht.
 
 
[/nl]
 
[/nl]
 
[en]
 
[en]
Some applications require a PC with MS Windows installed. If you use another operating system, you can make use of a [[Windows_Terminal_Server|Windows Terminal Server]].
+
==== Restricted ISP's ====
 +
 
 +
In case you are behind a firewall that does not permit outgoing connections to the standard ssh port 22: our login servers also allow ssh connections to ports 80 and 443.
 
[/en]
 
[/en]
  
Line 90: Line 83:
  
 
[nl]
 
[nl]
C&CZ beheert een aantal rekenclusters, waarbij afdelingen hun eigen compute nodes aangeschaft hebben. In enkele gevallen hebben afdelingen een apart cluster gemaakt door ook hun eigen headnode (master) aan te schaffen. Het grootste <tt>cn</tt>-cluster heeft een door C&CZ aangeschafte headnode.
+
C&CZ beheert een aantal rekenclusters, waarbij afdelingen hun eigen compute nodes aangeschaft hebben. In enkele gevallen hebben afdelingen (Astrofysica, Neuroinformatica) een apart cluster gemaakt door ook hun eigen headnode (master) aan te schaffen. Het grootste <tt>cn</tt>-cluster heeft ook een door C&CZ aangeschafte node, waar FNWI-afdelingen na overleg met C&CZ gebruik van kunnen maken.
Voor afdelingen van FNWI is de housing en het beheer van clusternodes gratis. Het <tt>cn</tt>-cluster is heterogeen. De nieuwste nodes gebruiken [[Slurm|SLURM]] als clustersoftware, alle andere zullen daarop overgaan. Oudere nodes de oudste nodes hebben nog [http://www.adaptivecomputing.com/products/open-source/torque/ Torque] / [http://www.adaptivecomputing.com/products/open-source/maui/ MAUI]. In 2006 werd begonnen met [http://fedoraproject.org/nl/ Fedora Linux] met [http://en.wikipedia.org/wiki/Oracle_Grid_Engine Sun GridEngine] als [[Software_cluster|voormalige clustersoftware]]. Per oktober 2015 telde het cn-cluster 1220 cores en 8266 GB RAM. Diverse clusternodes hebben een GPU met CUDA cores. De [http://cricket.science.ru.nl/grapher.cgi?target=%2Fclusternodes CPU-load van de cn-clusternodes] wordt automatisch bijgehouden.  
+
Voor afdelingen van FNWI is de housing en het beheer van clusternodes gratis. Het <tt>cn</tt>-cluster is heterogeen. De nieuwste nodes gebruiken [[Slurm|SLURM]] als clustersoftware, alle andere zullen daarop overgaan. Oudere nodes de oudste nodes hebben nog [http://www.adaptivecomputing.com/products/open-source/torque/ Torque] / [http://www.adaptivecomputing.com/products/open-source/maui/ MAUI]. Per februari 2018 telde het cn-cluster 60 nodes met 1560 cores en 8 TB RAM. Diverse clusternodes hebben een GPU met CUDA cores. De [https://cricket.science.ru.nl/grapher.cgi?target=%2Fclusternodes%2Foverview CPU-load van de cn-clusternodes] wordt automatisch bijgehouden.  
  
Het coma-cluster van Sterrenkunde met (per oktober 2015) 920 cores, 7360 GB RAM, 600 TB fileserver storage, GPU's en snelle [http://nl.wikipedia.org/wiki/InfiniBand Infiniband] interconnectie is een apart cluster. Ook voor de RU-afdelingen [http://www.ru.nl/cls/ Centre for Language Studies] en [http://www.ru.nl/donders/ Donders Centre for Cognition] worden aparte rekenclusters beheerd.
+
Het coma-cluster van Sterrenkunde met (per februari 2018) 920 cores, 7360 GB RAM, 600 TB fileserver storage, GPU's en snelle [http://nl.wikipedia.org/wiki/InfiniBand Infiniband] interconnectie is een apart cluster. Ook voor de RU-afdelingen [http://www.ru.nl/cls/ Centre for Language Studies] en [http://www.ru.nl/donders/ Donders Centre for Cognition] worden aparte rekenclusters beheerd.
  
 
Soms worden ook de PC's in de [http://wiki.science.ru.nl/cncz/Sleutelprocedure_terminalkamers#.5BOverige_afspraken.5D.5BOther_issues.5D terminalkamers] buiten de openingstijden gebruikt als rekencluster.  
 
Soms worden ook de PC's in de [http://wiki.science.ru.nl/cncz/Sleutelprocedure_terminalkamers#.5BOverige_afspraken.5D.5BOther_issues.5D terminalkamers] buiten de openingstijden gebruikt als rekencluster.  
 
[/nl]
 
[/nl]
 
[en]
 
[en]
C&CZ manages a number of compute clusters, with compute nodes that departments have purchased. In a few cases, departments have created a separate cluster by also purchasing their own head node (master). The largest <tt>cn</tt>-cluster has a head node purchased by C&CZ.
+
C&CZ manages a number of compute clusters, with compute nodes that departments have purchased. In a few cases, departments have created a separate cluster by also purchasing their own head node (master). The largest <tt>cn</tt>-cluster also has a node purchased by C&CZ, so FNWI departments may use that after approval by C&CZ.
For departments of FNWI the housing and management of clusternodes is free of charge. The <tt>cn</tt>-cluster is heterogeneous. The newest nodes have [[Slurm|SLURM]] as cluster software, other nodes wil be moved from [http://www.adaptivecomputing.com/products/open-source/torque/ Torque] / [http://www.adaptivecomputing.com/products/open-source/maui/ MAUI] to SLURM. In 2006 the cluster started with [http://fedoraproject.org/ Fedora Linux] and [http://en.wikipedia.org/wiki/Oracle_Grid_Engine Sun GridEngine] as [[Software_cluster|previous clustersoftware]]. As of October 2015, the cn-cluster totalled 1220 cores and 8266 GB RAM. Several clusternodes have a GPU with CUDA cores. The [http://cricket.science.ru.nl/grapher.cgi?target=%2Fclusternodes CPU-load of the clusternodes] is being monitored.
+
For departments of FNWI the housing and management of clusternodes is free of charge. The <tt>cn</tt>-cluster is heterogeneous. The newest nodes have [[Slurm|SLURM]] as cluster software, other nodes wil be moved from [http://www.adaptivecomputing.com/products/open-source/torque/ Torque] / [http://www.adaptivecomputing.com/products/open-source/maui/ MAUI] to SLURM. As of February 2018, the cn-cluster totalled 60 nodes with 1560 cores and 8 TB RAM. Several clusternodes have a GPU with CUDA cores. The [https://cricket.science.ru.nl/grapher.cgi?target=%2Fclusternodes%2Foverview CPU-load of the clusternodes] is being monitored.
  
The Astrophysics coma cluster with 920 cores, 7360 GB RAM, 600 TB fileserver storage (as of October 2015), GPU's and Infiniband interconnect is a separate cluster. Separate clusters are also managed for the RU departments [http://www.ru.nl/cls/ Centre for Language Studies] en [http://www.ru.nl/donders/ Donders Centre for Cognition].
+
The Astrophysics coma cluster with 920 cores, 7360 GB RAM, 600 TB fileserver storage, GPU's and Infiniband interconnect is a separate cluster. Separate clusters are also managed for the RU departments [http://www.ru.nl/cls/ Centre for Language Studies] en [http://www.ru.nl/donders/ Donders Centre for Cognition].
  
 
Sometimes outside of opening hours also the pcs in the [http://wiki.science.ru.nl/cncz/Sleutelprocedure_terminalkamers#.5BOverige_afspraken.5D.5BOther_issues.5D computer labs] are used as a compute cluster.
 
Sometimes outside of opening hours also the pcs in the [http://wiki.science.ru.nl/cncz/Sleutelprocedure_terminalkamers#.5BOverige_afspraken.5D.5BOther_issues.5D computer labs] are used as a compute cluster.
Line 110: Line 103:
 
[nl]
 
[nl]
 
Op welke mail-server de mail voor een bepaalde gebruiker afgeleverd wordt (en dus te lezen is), kan die gebruiker zijn op de [http://dhz.science.ru.nl/ Doe-Het-Zelf website]. Mail is toegankelijk via IMAP over SSL. POP3 wordt ondersteund, maar niet aangeraden. De alias <tt>smtp.science.ru.nl</tt> wijst naar de machine waar mail afgeleverd kan worden met het SMTP-protocol. ''N.B.'': Wanneer men via een andere (niet-RU) Internet-provider aangesloten is, zal onze mailserver alleen mail voor onze (RU) gebruikers accepteren en veel andere mail weigeren ("Relaying Denied!"). Men kan dit voorkomen door de smtp-server van de Internet-provider te gebruiken of door gebruik te maken van [[Email_authsmtp|Authenticated SMTP]].
 
Op welke mail-server de mail voor een bepaalde gebruiker afgeleverd wordt (en dus te lezen is), kan die gebruiker zijn op de [http://dhz.science.ru.nl/ Doe-Het-Zelf website]. Mail is toegankelijk via IMAP over SSL. POP3 wordt ondersteund, maar niet aangeraden. De alias <tt>smtp.science.ru.nl</tt> wijst naar de machine waar mail afgeleverd kan worden met het SMTP-protocol. ''N.B.'': Wanneer men via een andere (niet-RU) Internet-provider aangesloten is, zal onze mailserver alleen mail voor onze (RU) gebruikers accepteren en veel andere mail weigeren ("Relaying Denied!"). Men kan dit voorkomen door de smtp-server van de Internet-provider te gebruiken of door gebruik te maken van [[Email_authsmtp|Authenticated SMTP]].
 
De [http://cacti.science.ru.nl/graph_view.php?action=tree&tree_id=2&leaf_id=234 hoeveelheid mail en spam] wordt automatisch bijgehouden.
 
 
[/nl]
 
[/nl]
 
[en]
 
[en]
 
On the [http://diy.science.ru.nl/ Do-It-Yourself website] each user can see which mail server will store incoming mail for his account. Mail can be accessed with IMAP over SSL. The use of POP3 is supported, but not advised. In every domain managed by C&amp;CZ the alias  <tt>smtp.science.ru.nl</tt> points to the machine that accepts mail with the SMTP-protocol. ''N.B.'': If one uses a (non-RU) Internet provider, our mail server will only accept mail for our (RU) mail-addresses.  Most other mail will not be accepted ("Relaying Denied!"). One can prevent this by using the smtp-server of the Internet-provider or by using [[Email_authsmtp|Authenticated SMTP]].
 
On the [http://diy.science.ru.nl/ Do-It-Yourself website] each user can see which mail server will store incoming mail for his account. Mail can be accessed with IMAP over SSL. The use of POP3 is supported, but not advised. In every domain managed by C&amp;CZ the alias  <tt>smtp.science.ru.nl</tt> points to the machine that accepts mail with the SMTP-protocol. ''N.B.'': If one uses a (non-RU) Internet provider, our mail server will only accept mail for our (RU) mail-addresses.  Most other mail will not be accepted ("Relaying Denied!"). One can prevent this by using the smtp-server of the Internet-provider or by using [[Email_authsmtp|Authenticated SMTP]].
 
The [http://cacti.science.ru.nl/graph_view.php?action=tree&tree_id=2&leaf_id=234 amount of mail and spam] is being logged.
 
 
[/en]
 
[/en]
  
Line 122: Line 111:
  
 
[nl]
 
[nl]
Er zijn verschillende WWW-servers met websites en web-applicaties.
+
Er zijn verschillende WWW-servers met websites en web-applicaties. Een beschrijving van de [[ApacheSetup|setup van de Apache webservers]] is beschikbaar.  
 
[/nl]
 
[/nl]
 
[en]
 
[en]
There are several WWW-servers with websites and web applications.
+
There are several WWW-servers with websites and web applications. A description of the [[ApacheSetup|Apache webserver setup]] is available.
 
[/en]
 
[/en]
 +
 +
=== GitLab[-][ ] servers ===
 +
 +
[nl]
 +
De [https://wiki.science.ru.nl/cncz/GitLab GitLab] service maakt het mogelijk om gezamenlijk broncode te ontwikkelen, git repositories te beheren, issues te traken en broncode te reviewen.
 +
 +
De ssh vingerafdrukken van gitlab zijn:
 +
 +
[/nl]
 +
[en]
 +
The [https://wiki.science.ru.nl/cncz/GitLab GitLab] service provides a source code collaboration platform, git repository manager, issue tracker and code reviewer.
 +
 +
The ssh fingerprints for gitlab.science.ru.nl:
 +
 +
[/en]
 +
  256 SHA256:BSSXi19WgCSpZu5AQkUTtwm+5zAMioQJpFE3oxBrIMQ root@gitlab (ECDSA)
 +
  256 SHA256:7G/4WD/tUE8H0k9MkBznlcx+ZWgUxnn3KazKm1XQwRk root@gitlab (ED25519)
 +
2048 SHA256:NgZ9HciXlwG5JNPSFbem7bBbDbhqaNAO7JHag8rwi/I root@gitlab (RSA)
 +
 +
gitlab.pep.cs.ru.nl fingerprints:
 +
 +
  256 SHA256:pBFiBobAQTozB0xeeMCp3Du2PFtX7YIXw6XRFJSAGH0 root@gitlab (ECDSA)
 +
  256 SHA256:iWfwGvGZ/hdFImBzzG5Bu/y5gqhUkLOdSTYmzl1+k2w root@gitlab (ED25519)
 +
2048 SHA256:lWWFUfhwODG0bBuQJUR8ymlVfqpNHrXk0xbFAoDpTIg root@gitlab (RSA)
  
 
=== Printer[-][ ]servers ===
 
=== Printer[-][ ]servers ===
Line 165: Line 178:
  
 
[nl]
 
[nl]
Om het aanbieden van grote bestanden aan anderen eenvoudig te maken, is er een  FTP-service. De service is zowel toegankelijk via [ftp://ftp.science.ru.nl/pub het originele FTP-protocol] als via [http://ftp.science.ru.nl het HTTP-protocol van het web]. Iedereen met een Science-account die [[Contact|via postmaster]] een map (directory) op deze server heeft gekregen, kan op verschillende manieren daar bestanden naartoe kopi&euml;ren:
+
Om het aanbieden van grote bestanden aan anderen eenvoudig te maken, is er een  FTP-service. De service is zowel toegankelijk via [ftp://ftp.science.ru.nl/pub het originele FTP-protocol] als via [https://ftp.science.ru.nl het HTTPS-protocol van het web]. Iedereen met een Science-account die [[Contact|via postmaster]] een map (directory) op deze server heeft gekregen, kan op verschillende manieren daar bestanden naartoe kopi&euml;ren:
 
* via een loginserver als <tt>lilo</tt> op <tt>/vol/ftp/pub/</tt><em>uweigenmap</em>.
 
* via een loginserver als <tt>lilo</tt> op <tt>/vol/ftp/pub/</tt><em>uweigenmap</em>.
 
* door de netwerkschijf aan te koppelen: <tt>\\ftp.science.ru.nl\ftp</tt>
 
* door de netwerkschijf aan te koppelen: <tt>\\ftp.science.ru.nl\ftp</tt>
Line 171: Line 184:
 
[/nl]
 
[/nl]
 
[en]
 
[en]
To make the transfer of large files to others simple, there is an FTP service. It can be accessed through [ftp://ftp.science.ru.nl/pub the original FTP protocol] as well as through [http://ftp.science.ru.nl the web HTTP protocol]. Anyone with a Science-account who acquired a directory on this server [[Contact| through postmaster]], can copy files to that directory in several ways:
+
To make the transfer of large files to others simple, there is an FTP service. It can be accessed through [ftp://ftp.science.ru.nl/pub the original FTP protocol] as well as through [https://ftp.science.ru.nl the web HTTPS protocol]. Anyone with a Science-account who acquired a directory on this server [[Contact| through postmaster]], can copy files to that directory in several ways:
 
* by logging in to a login server like <tt>lilo</tt> in <tt>/vol/ftp/pub/</tt><em>yourdirectory</em>.
 
* by logging in to a login server like <tt>lilo</tt> in <tt>/vol/ftp/pub/</tt><em>yourdirectory</em>.
 
* by attaching the network drive: <tt>\\ftp.science.ru.nl\ftp</tt>
 
* by attaching the network drive: <tt>\\ftp.science.ru.nl\ftp</tt>

Latest revision as of 15:25, 4 September 2019

Servers and Workstations

C&CZ manages ca. 900 Linux workstations and servers, and ca. 900 servers and workstations with MS-Windows, primarily in the domain science.ru.nl. Dual boot Windows/Linux machines are counted twice.


Workstations

C&CZ manages (for departments) workstations with Ubuntu Linux or MS-Windows. There are also workstations in the PC-rooms and Study area for general use by anybody with a Science login, but also by all RU employees and students and guests with a temporary login. Almost all those machines are dual boot, the user can choose to boot Ubuntu Linux or MS-Windows.

Linux login servers

A few secure shell servers are available for Students and Staff of the Faculty (everyone with a Science account). You can use it just as you like, *as long as you do not cause problems for other users*.

The primary login server can be reached with the following address:

lilo.science.ru.nl

The name of the backup login server is:

stitch.science.ru.nl

At the moment, lilo points to a machine called lilo6. Stitch points to lilo5, running Ubuntu 16.04, it is not the default, because the default desktop Linux is Ubuntu 18.04, which is installed on lilo6.

The ssh fingerprints for lilo5 and lilo6 are:

1024 SHA256:g/LY9oywiXFi5jrO93JFImvm5fwYrRxlloefHH1yU2s   root@lilo5 (DSA)
2048 SHA256:VK8+B+OuT+n8JSjoy9uWYw5COb+cZ+01S/pWiAteEtA   root@lilo5 (RSA)
 256 SHA256:NeO+rdPufkFYEgLs6YMWPvMJzOBK9pNlxdjMJzK3OBY   root@lilo5 (ECDSA)
 256 SHA256:zViYANQchkRs6QNPSSoxOkVyA8Ixe7aZCvzcSQEZK7s   root@lilo5 (ED25519)
1024 MD5:2c:ae:19:79:9c:23:7b:f3:d0:49:7a:cb:fa:30:68:c5  root@lilo5 (DSA)
2048 MD5:66:18:8e:fa:bd:d9:83:91:86:f3:0e:35:d1:f5:31:2a  root@lilo5 (RSA)
 256 MD5:7d:08:27:61:ac:c8:f1:05:4f:c9:91:2a:83:e5:c3:4f  root@lilo5 (ECDSA)
 256 MD5:a4:6c:15:3b:c8:01:7f:d2:65:89:74:c6:32:7f:7e:c6  root@lilo5 (ED25519)
1024 SHA256:JVE0FA1fFGtzbuqP1D6cW8V3fkmqxdCL5H3xRMsiJxc   lilo6 (DSA)
2048 SHA256:c+kPQDMuzf+1uKIJt8RIFOUume0Z1g2UjUOpxXXyCuY   lilo6 (RSA)
 256 SHA256:dRvKM7qcQF8wGZZofYT3/JbSGUXA3l3nadzzqrHvWhE   lilo6 (ECDSA)
 256 SHA256:5PBNahtMibQTmjQgDlBM4OVEJ4fo9vJv/4JTJ1XfXB8   lilo6 (ED25519)
1024 MD5:e7:2c:39:51:18:7a:17:26:c8:55:a1:f8:61:5d:fa:d8  lilo6 (DSA)
2048 MD5:f9:8a:5f:16:7b:2b:6c:42:26:78:c5:bc:a3:94:ed:33  lilo6 (RSA)
 256 MD5:d6:2a:8b:7a:7d:ab:f6:4b:99:5c:9f:be:1e:98:ae:0e  lilo6 (ECDSA)
 256 MD5:39:6c:c9:da:a6:3b:3b:48:0e:a0:26:b5:7a:ea:a6:89  lilo6 (ED25519)

Restricted ISP's

In case you are behind a firewall that does not permit outgoing connections to the standard ssh port 22: our login servers also allow ssh connections to ports 80 and 443.

Compute servers/clusters

C&CZ manages a number of compute clusters, with compute nodes that departments have purchased. In a few cases, departments have created a separate cluster by also purchasing their own head node (master). The largest cn-cluster also has a node purchased by C&CZ, so FNWI departments may use that after approval by C&CZ. For departments of FNWI the housing and management of clusternodes is free of charge. The cn-cluster is heterogeneous. The newest nodes have SLURM as cluster software, other nodes wil be moved from Torque / MAUI to SLURM. As of February 2018, the cn-cluster totalled 60 nodes with 1560 cores and 8 TB RAM. Several clusternodes have a GPU with CUDA cores. The CPU-load of the clusternodes is being monitored.

The Astrophysics coma cluster with 920 cores, 7360 GB RAM, 600 TB fileserver storage, GPU's and Infiniband interconnect is a separate cluster. Separate clusters are also managed for the RU departments Centre for Language Studies en Donders Centre for Cognition.

Sometimes outside of opening hours also the pcs in the computer labs are used as a compute cluster.

Mail server

On the Do-It-Yourself website each user can see which mail server will store incoming mail for his account. Mail can be accessed with IMAP over SSL. The use of POP3 is supported, but not advised. In every domain managed by C&CZ the alias smtp.science.ru.nl points to the machine that accepts mail with the SMTP-protocol. N.B.: If one uses a (non-RU) Internet provider, our mail server will only accept mail for our (RU) mail-addresses. Most other mail will not be accepted ("Relaying Denied!"). One can prevent this by using the smtp-server of the Internet-provider or by using Authenticated SMTP.

WWW servers

There are several WWW-servers with websites and web applications. A description of the Apache webserver setup is available.

GitLab servers

The GitLab service provides a source code collaboration platform, git repository manager, issue tracker and code reviewer.

The ssh fingerprints for gitlab.science.ru.nl:

 256 SHA256:BSSXi19WgCSpZu5AQkUTtwm+5zAMioQJpFE3oxBrIMQ root@gitlab (ECDSA)
 256 SHA256:7G/4WD/tUE8H0k9MkBznlcx+ZWgUxnn3KazKm1XQwRk root@gitlab (ED25519)
2048 SHA256:NgZ9HciXlwG5JNPSFbem7bBbDbhqaNAO7JHag8rwi/I root@gitlab (RSA)

gitlab.pep.cs.ru.nl fingerprints:

 256 SHA256:pBFiBobAQTozB0xeeMCp3Du2PFtX7YIXw6XRFJSAGH0 root@gitlab (ECDSA)
 256 SHA256:iWfwGvGZ/hdFImBzzG5Bu/y5gqhUkLOdSTYmzl1+k2w root@gitlab (ED25519)
2048 SHA256:lWWFUfhwODG0bBuQJUR8ymlVfqpNHrXk0xbFAoDpTIg root@gitlab (RSA)

Printer servers

Several servers are used to print jobs. See the printer webpage to see which server is advised in which situation.

Disk servers

These servers share different types of files, e.g. home-directories, application-software and disks for departments and groups. All modern servers only have redundant disks, sometimes by using "mirroring", sometimes by use of a "RAID-array". That means that loss of only 1 disk will not cause any problem for users.

For more information, e.g. about renting disc space for departments, see our disc space page.

VPN server

To make it possible for users anywhere on the Internet to use servers and services as if one is connected to the campus network, a VPN service is available.

FTP server

To make the transfer of large files to others simple, there is an FTP service. It can be accessed through the original FTP protocol as well as through the web HTTPS protocol. Anyone with a Science-account who acquired a directory on this server through postmaster, can copy files to that directory in several ways:

  • by logging in to a login server like lilo in /vol/ftp/pub/yourdirectory.
  • by attaching the network drive: \\ftp.science.ru.nl\ftp

By using an unreadable upper directory containing a secret directory, one can even transfer somewhat sensitive data.

License servers

For several software packages there is a license server, that allows use of the software on all pc's, while making sure that the total number of licenses uses is not more than what has been bought. Most of these license servers use FlexNet by Flexera.

Backup servers

Almost all disks that are managed by C&CZ, are being backupped regularly, in order to be able to restore data in case of small or large calamities.


Lijn.png