search

ComputeCanada / puppet-magic_castle

Puppet Environment repo for Magic Castle - https://github.com/ComputeCanada/magic_castle
MIT License
12 stars 21 forks source link

Support for `urlpath_regex` in CVMFS squid configuration #244

Open ocaisa opened 1 year ago

ocaisa commented 1 year ago

Right now, squid for CVMFS only seems to support (a set of) specific domains. I get that this is more deterministic, but it is also a pity, as it would be nice if it could support EESSI and the Compute Canada stack at the same time. Typically, what I have seen in the CVMFS tutorials is:

acl CVMFSAPI urlpath_regex ^/cvmfs/[^/]*/api/
cache deny !CVMFSAPI

Of course this is very liberal, basically saying support all CVMFS repos...but is that so terrible?

Another problem with the current approach is that you are relying on the public Stratum 1's, but if CVMFS is configured to use a private Stratum1 it will not be cached by the squid. Even in the case of being more conservative, it would be good to allow the restriction based on cvmfs repo, not only on S1's.

ocaisa commented 1 year ago

One thing I would like to be able to do is to take the Desktop environment capabilities from the Alliance as we don't have support for this in EESSI right now.