[Lerftest-ctrls] ssh tunnelling back to SLAC

[Luchini, Kristi L.]

Hi Bruce,

> Sonya, Kristi, Patrick, et al:
> Can you confirm if you'll need to build linuxRT ioc's on lclsapp1?
Yes they will need to build linuxRT on lclsapp1. 

> Normally you'd use cram and build on the SLAC dev network but it may
> be tricky to use cram via the ssh tunnel.   Has anyone tried that?
I my opinion developers don't need cram as they will build in place and not deploy. However, Sonya and Jingchen have defined the requirements. I do think you will need eco to easily grab git and cvs applications remotely from lclsapp1 for a build. Developers will also need to remotely commit changes.  I am assuming this is in the original requirements. Wes did say you needed to provide hostnames for SLAC machine you'll need to access from JLAB, because you'll have to go through a proxy server.

-Kristi 

-----Original Message-----
From: Sonya Hoobler [mailto:sonya at slac.stanford.edu] 
Sent: Tuesday, May 01, 2018 9:23 AM
To: Hill, Bruce
Cc: Pascual, Patrick James; Wesley Moore; lerftest-ctrls at jlab.org; Luchini, Kristi L.; Slepicka, Hugo Henrique; Williams Jr., Ernest L.
Subject: Re: [Lerftest-ctrls] ssh tunnelling back to SLAC

Hi Bruce,

> Sonya, Kristi, Patrick, et al:
> Can you confirm if you'll need to build linuxRT ioc's on lclsapp1?

Yes, we will need this. In addition to SLAC developers, JLab folks will 
likely also need to modify/compile at LERF.

Hopefully this doesn't add too much work for you.

Thanks,
Sonya



On Tue, 1 May 2018, Bruce Hill wrote:

> Hi Patrick,
>
> I was just about to give up and write back that I couldn't get this to work
> only to find that I'd mis-spelled jlabl1 in my tunnel setup. (needs 2 l's)
>
> I fixed the tunnel and was able to clone the SLAC AFS base.git repo.
> I've built R3.15.5-1.branch for rhel6 in my work area, but had to disable
> the vxWorks and linuxRT target arches.   Tomorrow I'll get it built as a 
> release.
>
> Can you confirm that we'd each need our own tunnel ports if more than
> one of us tried to setup a tunnel?     I used port 3333 for mine.
>
> Sonya, Kristi, Patrick, et al:
> Can you confirm if you'll need to build linuxRT ioc's on lclsapp1?
>
> Normally you'd use cram and build on the SLAC dev network but it may
> be tricky to use cram via the ssh tunnel.   Has anyone tried that?
>
> Cheers,
> - Bruce
>
>
> On 04/30/2018 03:38 PM, Pascual, Patrick James wrote:
>> I got the following to work from lclsapp1:
>> 
>> ssh -fNT -L <local_port>:rhel6-64.slac.stanford.edu:22 
>> <CUE_username>@jlabl1.jlab.org
>> 
>> where <local_port> is not an in-use or privileged port (e.g., NOT 22).
>> 
>> The above command says, "Establish an SSH tunnel in the background such 
>> that all connections to localhost:<local_port> are forwarded to 
>> rhel6-64.slac.stanford.edu:22 through jlabl1.jlab.org".
>> 
>> Then you can do:
>> 
>> git clone ssh://<SLAC_username>@localhost:<local_port>/path/to/git/repo
>> 
>> This can be further streamlined by editing your .ssh/config file and adding 
>> the appropriate Host/Port directives.
>> 
>> Patrick J. Pascual
>> Controls Software/Systems Engineer, EED
>> Bldg 034, Rm 208A
>> 2575 Sand Hill Rd., MS50
>> Menlo Park, CA 94025
>> (650) 926-3539
>> 
>> ________________________________________
>> From: Lerftest-ctrls <lerftest-ctrls-bounces at jlab.org> on behalf of Wesley 
>> Moore <wmoore at jlab.org>
>> Sent: Monday, April 30, 2018 9:59:28 AM
>> To: lerftest-ctrls at jlab.org
>> Subject: [Lerftest-ctrls] ssh tunnelling back to SLAC
>> 
>> Specifically asked by Bruce and Patrick:
>> 
>> The JLAB equivalent of public linux hosts (like rhel6-64.slac.stanford.edu) 
>> are:
>> 
>> RHEL6:
>>    jlabl1 - jlabl4
>> 
>> RHEL7:
>>    jlabl5
>> 
>> Using cue username/password, you should be able to tunnel from lcls* back 
>> out through one of those.  I don't have an example, so please reply with 
>> one if it works for you.
>> 
>> Wesley
>> _______________________________________________
>> Lerftest-ctrls mailing list
>> Lerftest-ctrls at jlab.org
>> https://mailman.jlab.org/mailman/listinfo/lerftest-ctrls
>> 
>> _______________________________________________
>> Mailing List: Lerftest-ctrls at jlab.org
>> List Info: https://mailman.jlab.org/mailman/listinfo/lerftest-ctrls
>> Wiki: https://wiki.jlab.org/lerf/index.php/Network
>
> -- 
> Bruce Hill
> Member Technical Staff
> SLAC National Accelerator Lab
> 2575 Sand Hill Road M/S 10
> Menlo Park, CA  94025
>