RICH Computing environment at IP8

Access to the IP8 computing infrastructure is only via the gateways ( lbgw for Linux, lbts for Windows). Direct connection to online systems from outside the IP8 network is blocked. Note that the LHCb gateways are only visible from inside the CERN network/firewall: to connect from outside it one must log onto the CERN network before logging into the LHCb network.

Users have personal logins on the LHCb network. Request one from lhcb-online-admins@cernNOSPAMPLEASE.ch. The login and all computing infrastructure is common across both linux (including CCPCs) and windows systems.

Note that from inside the LHCb network the external world is not, in general, accessible as well: only the gateways are connected to the CERN network.

There is an area set aside for common RICH software. The same area is visible from Linux and Windows at /group/rich/ and G:\rich respectively.

This area is currently organised as follows (alphabetically sorted):

• /group/rich/HV/ RICH HV software (CCPC)
• /group/rich/oper/ RICH ECS operation tools (shortcuts to operation programs)
• /group/rich/pvss/ RICH PVSS components (strictly reserved for production projects only)
• /group/rich/pvss/shared RICH PVSS common most-used components
• /group/rich/sw/ other software
• /group/rich/sw/cmtuser/ CMT managed software (user release area)
• /group/rich/Utils/ folder containing miscellaneous programs used for RICH ECS operation

There is a group-wide login profile for the linux systems at /group/rich/scripts/rich_login.sh.

We are currently experimenting with ACLs on the filesystem which provide better control over file access than standard UNIX permissions. A plus character is appended to the directory access mode for directories with ACLs. Bear this in mind if you are having difficulties with file permissions. To view or manipulate ACLs from Linux, use the commands getfacl and setfacl.

Please, if you create directories in /group/rich, make sure that the ACLs and file permissions are correctly applied. To help you, there is an alias doperm that recursively applies the correct ACL to all files owned by you starting at /group/rich.

-- StephenWotton - 23 Nov 2007