1. 10 Jun, 2015 1 commit
    • Leigh B Stoller's avatar
      Fixes for exports_setup taking too long for geni user login. · 40154974
      Leigh B Stoller authored
      1. I removed exports_setup from tbacct, we seem to have fixed all the
         places where we were touching the user home directory during account
      2. I also removed exports_setup from web login for nonlocal (geni) users,
         since nothing on the Cloudlab path touches the user home directory,
         including starting a new experiment (geni users are not allowed to use
         any other part of the web interface, so Emulab Classic is off limits).
  2. 02 Jun, 2015 1 commit
  3. 26 May, 2015 1 commit
  4. 13 May, 2015 1 commit
  5. 27 Mar, 2015 1 commit
  6. 13 Feb, 2015 1 commit
  7. 04 Feb, 2015 1 commit
  8. 28 Jan, 2015 3 commits
  9. 27 Jan, 2015 1 commit
  10. 26 Jan, 2015 1 commit
  11. 25 Jan, 2015 1 commit
  12. 22 Jan, 2015 2 commits
  13. 17 Jan, 2015 1 commit
  14. 15 Jan, 2015 6 commits
  15. 13 Jan, 2015 1 commit
  16. 08 Jan, 2015 3 commits
  17. 03 Jan, 2015 1 commit
  18. 02 Dec, 2014 1 commit
  19. 25 Oct, 2014 1 commit
  20. 19 Sep, 2014 1 commit
  21. 15 Sep, 2014 2 commits
  22. 11 Sep, 2014 1 commit
  23. 02 Sep, 2014 1 commit
    • Leigh B Stoller's avatar
      Initial ZFS support. Just the runtime support, no support for actually · 328b61d8
      Leigh B Stoller authored
      creating the initial ZFS volumes, that is described in Mike's notes
      file on how to setup ZFS on ops. But once that is done, the runtime
      supports takes care of creating volumes for users and projects/groups.
      New configure variables, with defaults to:
  24. 28 Aug, 2014 1 commit
  25. 27 Aug, 2014 1 commit
    • Leigh B Stoller's avatar
      Large set of changes for using the Geni trusted signer tool, to · 980f6cbd
      Leigh B Stoller authored
      authenticate Geni users to CloudLab (who do not have Emulab accounts).
      CloudLab users must have an account to do anything (unlike APT which allows
      guest users). But instead of requiring them to go through the Emulab
      account creation (high bar), let then use their Geni credentials to prove
      who they are. We then build a local account for that new user, and save off
      the speaksfor credential so that we can act on their behalf when talking to
      the backend clusters (and their MA to get their ssh keys).
      These users do not have a local account password, so they cannot log into
      the web interface using the Emulab login page, nor do they have a shell on
      Once authenticated, we put the appropriate cookies into the browser via
      javascript, so they can use the Cloud (okay, APT) web interface (they
      appear logged in).
      I make use of the nonlocal_id field of the users table, which was not being
      used for anything else. Officially, these are "nonlocal" users in the code
      When a nonlocal user instantiates a profile, we use their speaksfor
      credential to ask their home MA for their ssh keys, which we then store in
      the DB, and then provide to the aggregate via the CreateSliver call.
      Note that no provision has been made for users who edit their profile and
      add keys; I am not currently expecting these users to stumble into the web
      interface (yet).
  26. 26 Aug, 2014 2 commits
  27. 20 Aug, 2014 1 commit
  28. 12 Jul, 2014 1 commit
    • Mike Hibler's avatar
      Make sure we use -i for sendmail when we pipe into it. · 355f5aa8
      Mike Hibler authored
      This prevents a line with a single "." from meaning EOF to sendmail.
      How arcane!
      I discovered this when I ran a create_image and I didn't get the complete
      log mailed to me. This is because create_image did a frisbee download of an
      image with a single chunk, which of course printed out:
        Using Multicast
        Joined the team after 0 sec. ID is 1586355915. File is 1 chunks (963200 bytes)
      Fortunately, "arcane" is my middle name, so it didn't take me long to find