1. 23 Oct, 2017 1 commit
  2. 13 Oct, 2017 2 commits
    • Leigh B Stoller's avatar
      78dc9fea
    • Leigh B Stoller's avatar
      Changes for automatic lockdown of experiments: · 8f4e3191
      Leigh B Stoller authored
      1. First off, we no longer do automatic lockdown of experiments when
         granting an extension longer then 10 days.
      
      2. Instead, we will lockdown experiments on case by case basis.
      
      3. Changes to the lockdown path that ask the reservation system at the
         target cluster if locking down would throw the reservation system
         into chaos. If so, return a refused error and give admin the choice
         to override. When we do override, send email to local tbops informing
         that the reservation system is in chaos state.
      8f4e3191
  3. 11 Oct, 2017 1 commit
  4. 10 Oct, 2017 1 commit
  5. 04 Oct, 2017 4 commits
  6. 02 Oct, 2017 1 commit
    • Mike Hibler's avatar
      Enable FreeBSD resource limits. · af1fd023
      Mike Hibler authored
      This was blocked waiting for ops.emulab.net to need a reboot so that
      we could turn on resource accounting. Now that happened and I have
      done some testing, defined some arbitrary limits for other resources,
      done some more testing, and here we are!
      
      This should enable issue #247 to be closed.
      af1fd023
  7. 14 Sep, 2017 2 commits
  8. 07 Sep, 2017 1 commit
  9. 01 Sep, 2017 1 commit
  10. 18 Aug, 2017 1 commit
  11. 14 Aug, 2017 1 commit
  12. 08 Aug, 2017 8 commits
  13. 10 Jul, 2017 1 commit
  14. 07 Jul, 2017 2 commits
    • Leigh B Stoller's avatar
      Deal with user privs (issue #309): · d1516912
      Leigh B Stoller authored
      * Make user privs work across remote clusters (including stitching). I
        took a severe shortcut on this; I do not expect the Cloudlab portal
        will ever talk to anything but an Emulab based aggregate, so I just
        added the priv indicator to the user keys array we send over. If I am
        ever proved wrong on this, I will come out of retirement and fix
        it (for a nominal fee of course).
      
      * Do not show the root password for the console to users with user
        privs.
      
      * Make sure users with user privs cannot start experiments.
      
      * Do show the user trust values on the user dashboard membership tab.
      
      * Update tmcd to use the new privs slot in the nonlocal_user_accounts
        table.
      
      This closes issue #309.
      d1516912
    • Leigh B Stoller's avatar
      Stop leaving temp files behind. · b8a86a6a
      Leigh B Stoller authored
      b8a86a6a
  15. 06 Jul, 2017 5 commits
  16. 28 Jun, 2017 1 commit
  17. 26 Jun, 2017 2 commits
  18. 20 Jun, 2017 1 commit
    • Leigh B Stoller's avatar
      Work on firewall support: · 72fa735e
      Leigh B Stoller authored
      1. Get this working on the NS conversion path.
      
      2. Add support for additional firewall rules along the path,
         the CM never had support for firewall rules.
      
      3. Set the security_level to zapdisk when firewalling is on.
      72fa735e
  19. 15 Jun, 2017 1 commit
  20. 12 Jun, 2017 1 commit
  21. 09 Jun, 2017 2 commits