From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp12.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms8.migadu.com with LMTPS id oEK+E/T0YmWQgQAAauVa8A:P1 (envelope-from ) for ; Sun, 26 Nov 2023 08:34:12 +0100 Received: from aspmx1.migadu.com ([2001:41d0:303:e224::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp12.migadu.com with LMTPS id oEK+E/T0YmWQgQAAauVa8A (envelope-from ) for ; Sun, 26 Nov 2023 08:34:12 +0100 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id A19F9315CA for ; Sun, 26 Nov 2023 08:34:11 +0100 (CET) Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20230601 header.b=ZS58CDyw; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-science-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-science-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1700984052; a=rsa-sha256; cv=none; b=tM4dvWVagqKIhn5IGRrBIp4u1gBpT77mRNidmfX/4BwlkrfdBKF/u+8mF4IR4PRHlwW6AD Ro0nswPYQZ78YvhA67PYUUnqZ5l/t9MqINnRLUlLId3dEsKAwZkTavN2e9+6hAxKrSB0Wm lfdfm1rc2woVgYR2jX7ZIRManSnZrl19rFG4rlhX98l/awsovdF5CdjPBZGW33qU6Mh7b9 QRqCgf1JAXfF2NHppuimt4rYvq94AlF/DR/S4hRivl0EoTdWKd3qStNB85xlq004JEKQXz e6R/jCKks0fpI/YuZhFVTdgZ9qDW2a4rwdNoz0b3kv69Bjsq7XPvQkMBh2WZbQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20230601 header.b=ZS58CDyw; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-science-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-science-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1700984052; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=3C4CAYYU/dInTfTqsxfmtbiLD2cOxKNqRT96+i/T5WA=; b=G5RgU+WBatqfR2OOPpkTDtxtMoSXPJSuCjFXmgmobUb5b3wP62yFPRab5W7GHwWA3TtS51 DLuuvVTuwTic3QLSSoBNI/TZgFm5AMZp1IUKvy/V0n0pH1rDzSAFlQ8FarTga9IKjWvbAX w6GgQGQI7sgP5Rkmi+lPeb+lKKiQGr/rfMDNm2YAzFtiagADCLLVCV8eHh1y3kpyeNjeWD mKgnGo3iU+cWvIiC3qgtEnKxPwYmKuMJRyLCKaisUUMe00aj1QZdyYZBAk1nM98UshODRC +4LWm/OHKc4mVMYVdtQ16j4mng10Rcb6aq8sZGJEe9vxrabii78QQML7SQo91A== Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1r79eO-00054N-19; Sun, 26 Nov 2023 02:33:56 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1r79eL-0004zw-1X; Sun, 26 Nov 2023 02:33:53 -0500 Received: from mail-lf1-x133.google.com ([2a00:1450:4864:20::133]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1r79eI-0006Au-Lv; Sun, 26 Nov 2023 02:33:52 -0500 Received: by mail-lf1-x133.google.com with SMTP id 2adb3069b0e04-50943ccbbaeso4481890e87.2; Sat, 25 Nov 2023 23:33:49 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1700984028; x=1701588828; darn=gnu.org; h=in-reply-to:content-disposition:mime-version:references :mail-followup-to:message-id:subject:cc:to:from:date:sender:from:to :cc:subject:date:message-id:reply-to; bh=3C4CAYYU/dInTfTqsxfmtbiLD2cOxKNqRT96+i/T5WA=; b=ZS58CDywrI4YinuHHaMZfCMap9B6CPZUIId4mcy5x6kjpb+blnPk4v06hmjf/QjDbs X1Vnn+o6XP30VGKlFeg3xxgktls5j+UCtlX2G6sC9g/h4TNM9R8W7qsBVriE+hVFDEYw TZ+ifemRQrtlV/xy5A0MibEO9E39HUSZ/TH6DES3uaSnxQ8QQ7Qj+P4pxphmcjX39rCK SLCKE9szMMafFLKkoXpnZ1cbvs6KNJgQW8LVXcwsVmiOFvE7+kgUMTCcC9G9rXrzNCoI mwJxloE8kV/gT0XQb/0KeWEmiG/An5yhpbjo9lQaCFRfhTj+OoiLZnaQjXX5o5mlNTXp G2hw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1700984028; x=1701588828; h=in-reply-to:content-disposition:mime-version:references :mail-followup-to:message-id:subject:cc:to:from:date:sender :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=3C4CAYYU/dInTfTqsxfmtbiLD2cOxKNqRT96+i/T5WA=; b=ay9vrYh3EA+qdhvQ9Z/855+MRSDNxUHy0Ax0G6/HZY3IFLl4vfOGF2pKN5qyo18OHD 2rirH2g6H/dorl+DJz/iahdbrJyc9bd+RrqLeCWK9z5yBQOz32wVFmww4sg7GZoHnIjW UKmFQ8Lk5STBJOs/ro8RKPlYsgfI4uDWfB/pe0+XgS1zdXF5LREra5pOBQoKBhSsrOID F4+Q6zwE7LphCUVRYeGns1n2rNdIZmrq97fMXA1YXkNBxWDc4hfXfvYCJkzGo52bNwcG 0eYxhSuPLhHc0V3Az1nMc3yOsNeYA4geJDVZI30Di6tEjUrN192nT9bFq90sRbFgJfEx Tg+g== X-Gm-Message-State: AOJu0YyoJnApCxLO7w5nJ80EnEb4YShkyWjCdtZglHXB6TaU9wDCL1om z28ZCSDe8+7dwF77QRFwuhU= X-Google-Smtp-Source: AGHT+IE4NWvBwy1o/fGSJwrEvusYNkyum9oTRGHYEoisZcZ490ptj0trpxjet+d3DaL9q3pk9fRaIw== X-Received: by 2002:a05:6512:b03:b0:50a:a5c6:35ea with SMTP id w3-20020a0565120b0300b0050aa5c635eamr6949596lfu.50.1700984027935; Sat, 25 Nov 2023 23:33:47 -0800 (PST) Received: from localhost ([176.12.138.93]) by smtp.gmail.com with ESMTPSA id v17-20020a05600c445100b0040b3d33ab55sm5496464wmn.47.2023.11.25.23.33.46 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 25 Nov 2023 23:33:46 -0800 (PST) Date: Sun, 26 Nov 2023 09:33:45 +0200 From: Efraim Flashner To: "Etienne B. Roesch" Cc: help-guix@gnu.org, guix-science@gnu.org Subject: Re: guix on nfs based systems Message-ID: Mail-Followup-To: "Etienne B. Roesch" , help-guix@gnu.org, guix-science@gnu.org References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="LALPQ1wdOStb4kX7" Content-Disposition: inline In-Reply-To: X-PGP-Key-ID: 0x41AAE7DCCA3D8351 X-PGP-Key: https://flashner.co.il/~efraim/efraim_flashner.asc X-PGP-Fingerprint: A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351 Received-SPF: pass client-ip=2a00:1450:4864:20::133; envelope-from=efraim.flashner@gmail.com; helo=mail-lf1-x133.google.com X-Spam_score_int: -14 X-Spam_score: -1.5 X-Spam_bar: - X-Spam_report: (-1.5 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FORGED_FROMDOMAIN=0.25, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.249, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: guix-science@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-science-bounces+larch=yhetil.org@gnu.org Sender: guix-science-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Queue-Id: A19F9315CA X-Migadu-Scanner: mx12.migadu.com X-Migadu-Spam-Score: -6.72 X-Spam-Score: -6.72 X-TUID: r0qdml1x2rCJ --LALPQ1wdOStb4kX7 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Nov 23, 2023 at 09:41:56AM +0000, Etienne B. Roesch wrote: >=20 > On Thu, Nov 23, 2023 at 6:32=E2=80=AFAM Efraim Flashner > wrote: >=20 > > On Wed, Nov 22, 2023 at 05:32:07PM +0000, Etienne B. Roesch wrote: > > > Hi, > > > > > > I have been successful in convincing our IT dept to provide guix as > > > standard on our vms and research clusters. We use this sophisticated > > > platform that allows users to spawn a vm at will, and also use this > > shared > > > ldap user database to allow for people to log on from computers/termi= nals > > > spread on campus. Home directories are basically pulled from the OS > > (mostly > > > ubuntu and centos) as a shared file system on the network, which then > > > synchronises changes live. Practically, that means a user will find i= ts > > > desktop, preferences and files as they move to different computers. > > > > > > Theoretically, a user can connect to several computers at the same ti= me, > > > which can lead to conflict issues at times, e.g. firefox doesn't like > > > parallel access to its preferences. I haven't fully tested it, but we > > think > > > that a guix profile is specific to a given computer, because of the w= ay > > it > > > links to the store, which is (currently) local to the vm, which isn't > > > ideal: the whole point of using vms is for users to kill them when th= ey > > > don't need them. > > > > > > What would be the recommended way of solving this? Has anybody had a > > > similar situation? > > > I am thinking we could either: > > > - leave it as is, and train users to recreate their profiles whenever > > they > > > use a new vm/computer (after all, that's what guix is for) but it cou= ld > > > take some time to recompile if binaries aren't available > > > - maybe turn /gnu/store as a shared nfs folder > > > > CCing guix-science > > > > One thing we do on the small cluster at UTenn is /gnu and /var/guix (in > > addition to the home directories) are exported across NFS and then any > > profiles that are installed in the users' home directories have their > > symlinks not dangling. > > > > I also have a snippet in my .profile to use GUIX_DAEMON_SOCKET to ssh > > back to the head node to use the guix-daemon there, which keeps all the > > guix stuff on one machine and easier to manage and make sure the same > > software is available on all the machines. > > > Thanks! That's really helpful! How robust is your system to bandwidth > fluctuations and network hiccups? > How big is your store, /gnu, /var/guix? >=20 > How many users do you have? >=20 > Etienne We have about a dozen users, with about 100GB for /gnu. It'd probably be better with a larger store, but that's what we've partitioned for it. /var/guix is rather small and not really worth worrying about. We started with gigabit ethernet which seems to be fast enough for accessing files from /gnu/store but could be faster when it comes to the shared storage so we have a local scratch SSD on each system for local files while doing computations. --=20 Efraim Flashner =D7=A8=D7=A0=D7=A9=D7=9C=D7=A4 = =D7=9D=D7=99=D7=A8=D7=A4=D7=90 GPG key =3D A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351 Confidentiality cannot be guaranteed on emails sent or received unencrypted --LALPQ1wdOStb4kX7 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEoov0DD5VE3JmLRT3Qarn3Mo9g1EFAmVi9NgACgkQQarn3Mo9 g1FWnA/+LeZhUTq0dwJ3yC/lfY/7MwyPR+I851kPqKFaKqPV4WafT47pani3rKbu iWJTyH6IAXHa/FpGkwmmuZCYO6sPCvT3jfPOVsMB2eosh81LyyzEpTyhGzU1Ulie 0GABgryKV/dD4vTkJak4pDz/pLFidfeZYOp37ZH0GMs7nN4SiZ8ht2Ur1pOGOqCJ x7GsD1oodkkH+bammfr5jtdRn7//7HYiIvoAw82fuKskm53vcYDS1YdTwv8U6NbO 8j/17fHclphZWFzw1z7hDvWrQGy0TDeiyNlpjCmrvWf+8HJ34s2856Fh+LhtRSYO wwbpd2ORC3spstm9yAcChAdO11b/S9eWCK3NxjKsgo31eN/249zszswMRZoqZG2t 4s9NOejPqATtzGZ6BkmytPyWObrut8aKNJS9jxS8QXMlZtKFOkFAY6fkOwtJQfSu /wyAzQYoiYJoPzGKmrlrdYITK/qf7drSs/snd4rwQ/NOn/7LttXmnx8TT0qUxXOS aDuody8iyAA4EmWKoxMZ33PVvB4/dGKUv9/jfFSW7SD1zxgWjGZqHPaJS8EpjFzz g0o/vtNOYm9lw1RzNRXYbp2rGbcEU7vpDtHr1f7snFdg0/n7+gQJGHzPiTR/JOii tVDnTEnZG8NqlViDQIB008lo7iwx6J2VPtSMOVmnKIUNjAjEklM= =CwBs -----END PGP SIGNATURE----- --LALPQ1wdOStb4kX7--