Welcome to edhar! This document contains both instructions and the "house rules." Please read it carefully. ===== Step 1 : login password ===== Please reset your login password. Your login password has been randomly generated. The cleartext password can be found in the file named PASSWORD in your home directory. To change it, type $ cat PASSWORD InseOksAd1 $ passwd If you want to log into this machine from more than one place, just create ssh keys for each of those machines : $ ssh-keygen $ ssh-copy-id You'll want to get this done before I disable password login! Once you're done that, please send me an email to ryneches@ucdavis.edu saying you've changed your login password and you're done setting up key-based login for your other machines so I can disable password-based login for your user. If I don't hear from you in a day or two, I'll disable it anyway! If you need it re-enabled (say, for example, you accidentally deleted your ssh keys), send me an email. This way, I can let you back onto the machine without having to trust that your email was authentic. (If a bad guy asks me to reset your password, all they will get is the opportunity to try to guess the password you set today.) ===== Step 2 : web password ===== You have a public web directory in your home directory called 'public_html'. You can access files placed in this directory at the URL http://edhar.genomecenter.ucdavis.edu/~/ Inside this directory, there is a folder called 'private.' This folder is intended as a sort of semi-private drop box. You can set a basic HTTP password to prevent the general public and search engines from rummaging through the stuff you put in there, but you should not treat it as 'secure.' The password you set will go across the internet un-encrypted, and can be seen by anyone with a packet sniffer. Use only throw-away passwords (though, if it's too easy to guess, you may as well just use your public folder). If you want to informally share a large file with a few people, you can share your web password with them. Think of it as your cubbyhole. I've created a script to set the HTTP password for you called 'web_password.py'. Just run this script and follow the directions. ===== Group directories ===== If you are in Eisenlab, you have read/write access to the group directory /var/opt/eisenlab If you are in the iSEEM group, you have read/write access to the group directory /var/opt/iseem ===== Backups ===== WARNING :: There is *NO* backup system in place for data on this system. Please do not use it to store the only copy of your thesis. ===== Extra goodies! ===== If you want to access journal articles, or if you are traveling in a country that filters the web, you can use the local squid proxy on this machine via ssh. Simply use the following extra arguments for ssh : ssh -L 3128:localhost:3128 @edhar.genomecenter.ucdavis.edu Then, change the settings of your web browser to use a proxy server on the localhost on port 3128. The -L argument makes the proxy server on edhar appear to be running on port 3128 on your own computer. ===== Full disk and runaway process policy ===== We have implemented group quotas to prevent a full disk from bringing down the machine. However, this means that an individual user can consume the quota for the whole group. I decided to do it this way because edhar is a big machine. If I sliced it up into little chunks, there wouldn't be much point in having a big machine. If you need to unpack a big file, or run a process that creates a lot of data, I want you to be able to do that. However, it is your responsibility to make sure you aren't preventing other users from doing what they want to do. If your data is preventing other users from getting their work done, I will TRY to ask you to clean it up before I delete it. I make no promises, though. The same goes for processes. This machine is for collaboration, not computation. That doesn't mean computational tasks are against the rules. However, the same general principle applies -- if your process is preventing other users from getting their work done, I will kill it. I will try to ask you first, but again, I make no promises. ===== Other bad things ===== Don't do anything destructive, annoying or illegal. This machine would make an awesome bittorrent hub. Please resist the temptation. If I notice something that violates the Acceptable Use Policy for the University of California, I will disable your account. I'd rather do it myself than have Network Operations order me to do it. ===== Guest accounts ===== I'm willing to create "guest" accounts for people who are affiliated with either Eisenlab or iSEEM, but only if they ask me in person, and are vouched for by someone in Eisenlab. Guest accounts will have a smallish per-user disk quota, and will be automatically disabled after three months.