ChRIS switch to single cluster user

[rudolphpienaar]

ChRIS switch to single cluster user

[rudolphpienaar]

ChRIS single cluster user

Overview

This task should "simplify" the general operation of ChRIS. Currently a validated user to the system preserves their uid/gid when running jobs on the backend cluster. The problem with this is that users can have all sorts of custom environments and setup scripts resulting in a lot of work to get a particular user working well.

Solution

Only a single backend user will now be used for all ChRIS users.

[NicolasRannou]

Feed controller

• do not update permissions, do not run as user, do not shell_exec for symlink (unlink($link_path) or symlink($new_path, $link_path)) https://github.com/FNNDSC/chrisreloaded/blob/master/controller/feed.controller.php#L452 https://github.com/FNNDSC/chrisreloaded/blob/master/controller/feed.controller.php#L456 https://github.com/FNNDSC/chrisreloaded/blob/master/controller/feed.controller.php#L462v https://github.com/FNNDSC/chrisreloaded/blob/master/controller/feed.controller.php#L712 https://github.com/FNNDSC/chrisreloaded/blob/master/controller/feed.controller.php#L822

Commits:

• https://github.com/FNNDSC/chrisreloaded/commit/5ab97ed1b0a14a87fa591e0187ae270dea1a425f
• https://github.com/FNNDSC/chrisreloaded/commit/25c38531846b1f90a515414fc53df51a3bcfeb2b
• https://github.com/FNNDSC/chrisreloaded/commit/2e2f86207660ab76e51c0131f074ceaf61ecf4b9

[NicolasRannou]

File controller

• do not run as user, do not update permissions, do not shell_exec https://github.com/FNNDSC/chrisreloaded/blob/master/controller/file.controller.php#L88-L92

Commits:

• https://github.com/FNNDSC/chrisreloaded/commit/ec4323b874f5a8a74fe44bffe46cc07745662ebd

[NicolasRannou]

Launcher

• check if passwordless ssh works (no more need of username or password) (might need to use sshkey for first login) https://github.com/FNNDSC/chrisreloaded/blob/master/controller/launcher.php#l186-L189

could user shell_exec('ssh something....') http://phpseclib.sourceforge.net/ssh/auth.html

Commits:

• https://github.com/FNNDSC/chrisreloaded/commit/e13dd45b292580691fe5fc9be573b1bd921e2bdc

[NicolasRannou]

Runner

• no more permissions/ownership related code https://github.com/FNNDSC/chrisreloaded/blob/master/controller/runner.php

Commits:

• https://github.com/FNNDSC/chrisreloaded/commit/6d78865bdc66d87c9600a96dc761e45246db22ee
• https://github.com/FNNDSC/chrisreloaded/commit/a51d60749adb3cfa5bb419c0a5726972f291d4a6
• https://github.com/FNNDSC/chrisreloaded/commit/95e92bdfb37a3f3d119e72cb9941aacd1a15ebb7
• https://github.com/FNNDSC/chrisreloaded/commit/a30b3dd7281a48bb6fe3eeabced580d27676be57

[NicolasRannou]

User controller

• not ssh setup (server/cluster) at all
• only need to create the .chris.conf file on login create it in /.chris/configuration
• add user to chris group on first login? https://github.com/FNNDSC/chrisreloaded/blob/master/controller/user.controller.php

Commits:

• https://github.com/FNNDSC/chrisreloaded/commit/7080ec26ad1237fbf32ed9cc0633762980d4164c
• https://github.com/FNNDSC/chrisreloaded/commit/30132764e993b21cf931dcdd8b612f8e7e6c0d83 Note: do not touch config file location yet because we need a folder chris can access to load assets (i.e. background image)
• https://github.com/FNNDSC/chrisreloaded/commit/5ef2b3a8ae280fa6bc15a4d3593550729c0b6b2d

[NicolasRannou]

Utils

• get configuration from user's home directory /.chris/configuration https://github.com/FNNDSC/chrisreloaded/blob/master/controller/_util.inc.php#L213-L221

Note: do not touch config file location yet because we need a folder chris can access to load assets (i.e. background image)

[NicolasRannou]

Api

• only use username and password to test login at very beginning https://github.com/FNNDSC/chrisreloaded/blob/master/api.php

Commmits:

• https://github.com/FNNDSC/chrisreloaded/commit/58d4a2fa9b6f4bdb75115adc3e4f2b5a2c24ba49
• https://github.com/FNNDSC/chrisreloaded/commit/bef621623a87fcc257302296d791921c99bda587

[NicolasRannou]

WIP: remote jobs (on the cluster).

Some issues with quotes escaping as PHP "magic quote is ON".

Will turn it off tomorrow morning (Boston night), so we can ensure production ChRIS not affected, and if affected, time to fix it.

chris@chris:/neuro/users/chris $>sudo vim /etc/php5/cli/php.ini
chris@chris:/neuro/users/chris $>sudo service apache2 restart

[NicolasRannou]

we didn't turn off magic quotes as it maybe have unexpected side effects, solution to deal with escaping hell it to have extra scripts (https://github.com/FNNDSC/chrisreloaded/commit/95e92bdfb37a3f3d119e72cb9941aacd1a15ebb7)