Induction WeekInduction WeekOverview of Physics ComputingOverview of Physics Computing

Ian McArthur - Physics IT ManagerIan McArthur - Physics IT Manager

6th October 20146th October 2014

Organisation of Physics IT supportOrganisation of Physics IT support

Most of IT support is centralised, i.e. shared across the whole Most of IT support is centralised, i.e. shared across the whole department.department.Central covers general desktop support (windows, Mac OSX, Central covers general desktop support (windows, Mac OSX, Linux), email, network, databases, web etc – things that can be Linux), email, network, databases, web etc – things that can be effectively shared across the department.effectively shared across the department.There is some sub-department support which is generally for There is some sub-department support which is generally for computational work, Linux based. Some sub-departments such as computational work, Linux based. Some sub-departments such as PP have their own Linux support staff supporting their own PP have their own Linux support staff supporting their own computing clusters and subject specific applications.computing clusters and subject specific applications.

Particle Physics IT strategyParticle Physics IT strategy

Desktops as general purpose devices (mainly MS windows some Linux)Desktops as general purpose devices (mainly MS windows some Linux)Access to centralised compute and data servers – clients use X-windows, Access to centralised compute and data servers – clients use X-windows, SSH or RDP to connect to interactive sessions on the servers.SSH or RDP to connect to interactive sessions on the servers.Provides access to the widest range of applications – familiar desktop Provides access to the widest range of applications – familiar desktop interface.interface.Desktop systems are provided in the Oxford offices at remote sites (CERN), Desktop systems are provided in the Oxford offices at remote sites (CERN), laptops for those travelling regularly if they have a good case (usually year 2 laptops for those travelling regularly if they have a good case (usually year 2 onwards).onwards).Provide local compute farms for final-stage analyses, rapid turn around and Provide local compute farms for final-stage analyses, rapid turn around and interactive work (known as the local cluster, or tier-3) – large runs are done interactive work (known as the local cluster, or tier-3) – large runs are done on the grid.on the grid.Most of LHC reconstruction and Monte Carlo should be grid based.Most of LHC reconstruction and Monte Carlo should be grid based.Currently about 544 cores and 600TB in local cluster, about 1768 cores and Currently about 544 cores and 600TB in local cluster, about 1768 cores and 1300TB in local tier-2 grid resources.1300TB in local tier-2 grid resources.We make all necessary services available remotely, e.g. email (including We make all necessary services available remotely, e.g. email (including web based), ssh to compute servers, remote file access etc.web based), ssh to compute servers, remote file access etc.

PP Training and SupportPP Training and Support

• There is help for new Particle Physics students at There is help for new Particle Physics students at http://www2.physics.ox.ac.uk/research/particle-physics/particle-physics-computer-support

• Local PP coursesLocal PP courses• Two double Lectures starting in Mid October. These attempt to get you using Two double Lectures starting in Mid October. These attempt to get you using

the local facilities effectively and as quickly as possible. We try to the local facilities effectively and as quickly as possible. We try to concentrate on the specifics of PP applications and the Oxford systems . 1: concentrate on the specifics of PP applications and the Oxford systems . 1: Overview, 2:Local Cluster, 3:Large Scale Computing 4:Python and pyROOTOverview, 2:Local Cluster, 3:Large Scale Computing 4:Python and pyROOT

2 Introduction to Programming in C/C++ in weeks 1 and 2. 2 Introduction to Programming in C/C++ in weeks 1 and 2. Please sign up with s.brisbane1@physics.ox.ac.uk if interested)

More advanced object-orientated programming workshops in week 9.More advanced object-orientated programming workshops in week 9.

We will circulate information on other courses at IT services, RAL etc whenever we hear We will circulate information on other courses at IT services, RAL etc whenever we hear of them.of them.

Use generic email addresses to ask for help with PP Linux systemsUse generic email addresses to ask for help with PP Linux systems pp_unix_admin@physics.ox.ac.uk (Linux)

• See the See the Introductory Computing ManualIntroductory Computing Manual ((http://www-pnp.physics.ox.ac.uk/~west/intro_manual/intro_manual.html)http://www-pnp.physics.ox.ac.uk/~west/intro_manual/intro_manual.html) which you which you should work through online.should work through online.

• Library of computing books (Room 661)Library of computing books (Room 661)

Who does what in IT ?Who does what in IT ?

CentralCentral

Or PPOr PP

Main tasksMain tasks

Ian McArthurIan McArthur CC IT ManagerIT Manager

Pete GronbechPete Gronbech PP GridPP UK project managerGridPP UK project manager

Ewan MacMahonEwan MacMahon PP GridPP adminGridPP admin

Kashif MohammadKashif Mohammad PP PP & Grid SupportPP & Grid Support

Sean BrisbaneSean Brisbane PP PP system Admin and PP user supportPP system Admin and PP user support

Stig Topp-JorgensenStig Topp-Jorgensen PP PP data acquisition systemsPP data acquisition systems

John HarrisJohn Harris CC Windows System administrationWindows System administration

Richard SmithRichard Smith CC IT Support – Mainly OSX some WindowsIT Support – Mainly OSX some Windows

Russell AllcockRussell Allcock CC IT Support – windows desktops, printing, user support etcIT Support – windows desktops, printing, user support etc

Chris HunterChris Hunter CC Network Manager and Anti-VirusNetwork Manager and Anti-Virus

David NewtonDavid Newton CC Network supportNetwork support

Russell JonesRussell Jones CC IT Support - GeneralIT Support - General

John MacallisterJohn Macallister CC IT Support (Clarendon)IT Support (Clarendon)

Greg AgacinskiGreg Agacinski CC Web developmentWeb development

Martin CarterMartin Carter CC IT Support (Astrophysics)IT Support (Astrophysics)

Mark MunroMark Munro CC Linux system admin AOPP and central servicesLinux system admin AOPP and central services

Bernard WestBernard West CC Database and Web applicationsDatabase and Web applications

John Harris

Richard Smith Russell Allcock

Chris Hunter

David Newton

General IT Support, Desktops,Printing, laptops etc

Room 667

Network Support

Room 663

Pete Gronbech

Ewan Macmahon

Particle Physics Linux, Grid etc

Room 661

Data Acquisition

Room 662

Kashif Mohammad

Stig Topp-Jorgensen

Sean Brisbane

Physics IT Services (SLD)Physics IT Services (SLD)

IT ShopIT Shop

Client hardware support (standard systems)Client hardware support (standard systems)

Client Software Support (standardised installs)Client Software Support (standardised installs)

Client Application Support (common applications)Client Application Support (common applications)

Network ProvisionNetwork Provision

Anti-virusAnti-virus

Home folder storageHome folder storage

Shared services/applications (Email, printing, code repositories, remote access servers, Shared services/applications (Email, printing, code repositories, remote access servers, Wikis, Ticket tracking etc)Wikis, Ticket tracking etc)

Cost Recovered Services (Virtual machines, web servers, storage and compute servers)Cost Recovered Services (Virtual machines, web servers, storage and compute servers)

User support related to the above servicesUser support related to the above services

Web applications and databasesWeb applications and databases

Hardware support for Project based computing (advice on standard hardware)Hardware support for Project based computing (advice on standard hardware)

Software support for Project based computing (compilers etc)Software support for Project based computing (compilers etc)

Software Licensing – some can be used at home. Always check conditions with IT Software Licensing – some can be used at home. Always check conditions with IT support staff if you are unsure.support staff if you are unsure.

Media Media ServicesServices Unit Unit

Poster printingPoster printingBulk printingBulk printingPhotographyPhotographyMeeting Room/Lecture Theatre supportMeeting Room/Lecture Theatre supportVideoconferencing systems (room and desktop/laptop Videoconferencing systems (room and desktop/laptop based)based)Desktop and Laptop image loadingDesktop and Laptop image loading

Steve Lee Darren Wallace Duncan Vivian

General Training and General Training and SupportSupport• Courses at the University IT services(apply early)

• Use support information on the web. Please check FAQs before going to IT support staff – it’ll make you popular!

• We want to improve the web pages – please tell us what you’d like to see there. (start at http://www.physics.ox.ac.uk/it)

• Use generic email addresses to ask for helpitsupport@physics.ox.ac.uk (windows + general queries)network@physics.ox.ac.uk (network)

• OU IT services (OUCS) offer a number of computing courses suitable for various levels. You can browse these at http://www.it.ox.ac.uk/courses/.http://www.it.ox.ac.uk/courses/. Log-in requires your campus SSO account, (user name of the format abcd1234), which should have been provided to you by your college. None of you are signed up to any of these automatically.  

• For those of you that are quite new to Linux, we recommend that you sign up to one or more of their introduction to Linux courses.

AccountsAccounts

Physics Network accountPhysics Network account Login to most central physics services (all operating systems)Login to most central physics services (all operating systems)

MS Windows , Apple OSX and Linux desktopsMS Windows , Apple OSX and Linux desktopsVPN (remote tunnelling into our network)VPN (remote tunnelling into our network)web pages that require authentication or for editingweb pages that require authentication or for editingConnection to the department’s wireless network (physics_s)Connection to the department’s wireless network (physics_s)Etc etcEtc etc

PP Unix loginPP Unix login Only required to log in to older PP Linux servers and desktops in the cryo lab.Only required to log in to older PP Linux servers and desktops in the cryo lab.

Grid certificateGrid certificate To allow you access to grid resources worldwide (and local)To allow you access to grid resources worldwide (and local)

University Single Sign On (SSO)University Single Sign On (SSO) University mail system (nexus)University mail system (nexus) Various campus wide services (e.g. VPN, WebLearn, HFS backups, wireless Various campus wide services (e.g. VPN, WebLearn, HFS backups, wireless

services etc)services etc)

Never share account details with anyone, including us!!Never share account details with anyone, including us!!

SecuritySecurity

Access to the building – first physical barrier – Obey the rules.Access to the building – first physical barrier – Obey the rules.Personal – don’t leave your valuables about – insurance never covers the Personal – don’t leave your valuables about – insurance never covers the cost of laptops because of excesses. Insure your own.cost of laptops because of excesses. Insure your own.Network – Never reveal your passwords to anyone.Network – Never reveal your passwords to anyone.Client SecurityClient Security

Centralisation of management wherever possibleCentralisation of management wherever possible Reduces manpower requiredReduces manpower required Ensures minimum acceptable patch levelsEnsures minimum acceptable patch levels Un-trusted machines (e.g. self-managed laptops) are placed on a separate Un-trusted machines (e.g. self-managed laptops) are placed on a separate

network and given similar access right to systems anywhere on the internet.network and given similar access right to systems anywhere on the internet.Backups (data security)Backups (data security)

Windows and UNIX system backed up weekday nightsWindows and UNIX system backed up weekday nights Data disks are often too large to be backed up. So keep your data in the right Data disks are often too large to be backed up. So keep your data in the right

place to take advantage of this valuable service.place to take advantage of this valuable service. Don’t be tempted to keep your files on local system disks or laptops.Don’t be tempted to keep your files on local system disks or laptops. If you aren’t sure, please ask, don’t wait for a disaster.If you aren’t sure, please ask, don’t wait for a disaster.

EmailEmail

The Department has own Exchange system but this is running down The Department has own Exchange system but this is running down over the next few years in favour of the campus system NEXUS. All over the next few years in favour of the campus system NEXUS. All new mailboxes after Sep 2014 (including yours !) will be on NEXUS.new mailboxes after Sep 2014 (including yours !) will be on NEXUS.You will probably have been given a college email address and you You will probably have been given a college email address and you will also have an @physics.ox.ac.uk address which we set to will also have an @physics.ox.ac.uk address which we set to forward to the same mailbox on NEXUS.forward to the same mailbox on NEXUS.Nonetheless, please be careful to make sure you’re reading all your Nonetheless, please be careful to make sure you’re reading all your mailboxes, or forwarding all to one place.mailboxes, or forwarding all to one place.Please assume that your physics.ox.ac.uk will always be forwarded Please assume that your physics.ox.ac.uk will always be forwarded to NEXUS. If you want to forward onto some external provider such to NEXUS. If you want to forward onto some external provider such as gmail, hotmail etc, then this can be done on NEXUS.as gmail, hotmail etc, then this can be done on NEXUS.

Do’s and Don’tsDo’s and Don’ts

• Get to know the IT support staff. They are here to help you to do your work more Get to know the IT support staff. They are here to help you to do your work more effectively. Help the IT support staff to help you. Feedback is very important !effectively. Help the IT support staff to help you. Feedback is very important !

• Always contact IT support staff if you need Always contact IT support staff if you need • More network connectionsMore network connections• A system movedA system moved• A system fixed or upgradedA system fixed or upgraded• New software installedNew software installed• Make IT related purchases (software or hardware)Make IT related purchases (software or hardware)

• Never attempt to connect any system to the wired network without permission of IT Never attempt to connect any system to the wired network without permission of IT support staff who will provide the necessary configuration details.support staff who will provide the necessary configuration details.

• Use the web pages (FAQs) to try to solve problems. TryUse the web pages (FAQs) to try to solve problems. Tryhttp:///www.physics.ox.ac.uk/it ORhttp:///www.physics.ox.ac.uk/it ORhttp://www2.physics.ox.ac.uk/research/particle-physics/particle-physics-computer-support

• Check licensing terms and conditions before running any software on your privately Check licensing terms and conditions before running any software on your privately owned systemsowned systems

• Be aware of all the rules and policies in place…….Be aware of all the rules and policies in place…….

MisuseMisuse

Unacceptable behaviour includes but isn’t limited toUnacceptable behaviour includes but isn’t limited to

attempting to gain attempting to gain unauthorised accessunauthorised access to a facility; to a facility; making making offensive materialoffensive material available over the Web; available over the Web; generating, sending or downloading/viewing generating, sending or downloading/viewing pornographicpornographic material; material; using someone else's using someone else's usernameusername and/or password; and/or password; disregarding the disregarding the privacyprivacy of other people's files; of other people's files; giving your giving your usernameusername or password to someone else, or being otherwise careless with or password to someone else, or being otherwise careless with them; them; generating messages which appear to originate with someone else, or otherwise generating messages which appear to originate with someone else, or otherwise attempting to attempting to impersonateimpersonate someone else; someone else; sending messages which are sending messages which are abusiveabusive or a nuisance or otherwise distressing; or a nuisance or otherwise distressing; displaying displaying offensive materialoffensive material in a public place; in a public place; introducing programs with introducing programs with malicious intentmalicious intent; ; trying to trying to interfereinterfere with someone else's use of the facilities; with someone else's use of the facilities; disregard for "disregard for "computer etiquettecomputer etiquette"; "; sending sending chain emailchain email; ; being being wastefulwasteful of resources; of resources; software piracysoftware piracy (including infringement of (including infringement of software licencessoftware licences or or copyrightcopyright provisions) provisions) never download copyrighted material, it could end up with you being sent down!) never download copyrighted material, it could end up with you being sent down!)using the facilities for using the facilities for commercial gaincommercial gain without explicit authorisation; without explicit authorisation; physically physically damagingdamaging or otherwise interfering with facilities. or otherwise interfering with facilities.

IT PoliciesIT Policies

All University policies are on the web at All University policies are on the web at http://www.admin.ox.ac.uk/lso/statutes/

SeeSee• Computer Usage Rules and Etiquette• Data Protection: University Policy• Freedom of Information Policy• Information Security Policy (more info will be circulated shortly)• Information Technology: Regulations Relating to the Use of Information Technology

Facilities

These refer to legal requirements and other external policies such as use of the academic network (JANET) and software licensing agreements.

Physics Department policy adopts the above and adds a few internal policies. Please see

http://www.physics.ox.ac.uk/IT/general/policies/

3 RESPONSIBILITIES 5Council 5PRAC ICT sub-committee (PICT) 5Heads of department 5Users and External Parties 5

4 RISK ASSESSMENT AND THE CLASSIFICATION OF INFORMATION 6

Risk assessment of information held 6Personal Data 6

5 PROTECTION OF INFORMATION SYSTEMS AND ASSETS6 PROTECTION OF CONFIDENTIAL INFORMATION 7

6.1 Storage 76.2 Access 76.3 Remote access 86.4 Copying 86.5 Disposal 86.6 Use of portable devices or media 86.7 Exchange of Information and use of Email 86.8 Cryptographic controls 96.9 System planning and acceptance 96.10 Backup 96.11 Further information 96.12 Hard Copies 9

Protective marking 9Storage 9Removal 9Transmission 10Disposal 10

6.13 Enforcement 107 COMPLIANCE 10

Information Security Policy

Department must

1.Put policy and structure in place deal with reviews and issues (a small group has been formed)2.Identify all sensitive information and perform risk assessments.3.Take necessary steps to protect sensitive or valuable information.4.Provide advice on when safeguards are required and how best to use them.

If you have data of this type, please contact Ian McArthur.

Contents of University Policy Doc

ChecklistChecklist

Done ? Task

Check your Physics and SSO credentials, activate SSO, change passwords.

Check Email to all accounts, forward where necessary.

Understand University and Department policies concerning use of IT.

Learn how to use the web site.http://www2.physics.ox.ac.uk/it-new/central-physics-website/newcomers-guide-to-the-web

Update profile on web site (login to your pages).

Update personal details/contact informationhttps://www.physics.ox.ac.uk/administration/login/

Visit new user and getting started web siteshttp://www.physics.ox.ac.uk/it/newusers.htmhttp://www2.physics.ox.ac.uk/research/particle-physics/particle-physics-computer-support

Work through the computing introductory manual online.http://www-pnp.physics.ox.ac.uk/~west/intro_manual/intro_manual.html

AnyAny QuestionsQuestions ? ?