Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
condor:installation:configuration [2011/07/21 13:08] – updated configuration files garrettheath4 | condor:installation:configuration [2011/07/28 19:14] – garrettheath4 | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ======Post-Install | + | ======Condor |
This page contains copies of the configuration files we use on our system. | This page contains copies of the configuration files we use on our system. | ||
Line 159: | Line 159: | ||
## Join the W&L CS Pool (Orion) | ## Join the W&L CS Pool (Orion) | ||
# Designate which machines are members of this pool. | # Designate which machines are members of this pool. | ||
- | PoolMembers = john.cs.wlu.edu, | + | # NOTE: In order to make it easy to automatically change this variable when |
- | CondorUsers = condor@john.cs.wlu.edu/ | + | # |
- | | + | # value should all be on one line (no line breaks). |
- | condor@fred.cs.wlu.edu/ | + | PoolMembers |
- | AdminUsers = koller@$(CONDOR_HOST)/ | + | |
- | RootUsers | + | |
- | root@carl.cs.wlu.edu/ | + | |
- | root@fred.cs.wlu.edu/fred.cs.wlu.edu | + | |
## FLOCK_FROM defines the machines where you would like to grant | ## FLOCK_FROM defines the machines where you would like to grant | ||
Line 201: | Line 197: | ||
## Please see the administrator' | ## Please see the administrator' | ||
## settings, what they' | ## settings, what they' | ||
+ | |||
+ | # Define fully-qualified usernames for users' right definitions | ||
+ | CondorUsers = condor@$(UID_DOMAIN)/ | ||
+ | condor@$(UID_DOMAIN)/ | ||
+ | condor@$(UID_DOMAIN)/ | ||
+ | AdminUsers = koller@$(UID_DOMAIN)/ | ||
+ | RootUsers = root@$(UID_DOMAIN)/ | ||
+ | root@$(UID_DOMAIN)/ | ||
+ | root@$(UID_DOMAIN)/ | ||
## What machines have administrative rights for your pool? This | ## What machines have administrative rights for your pool? This | ||
Line 233: | Line 238: | ||
## you install, configure or debug your Condor installation. | ## you install, configure or debug your Condor installation. | ||
## It is important to have this defined. | ## It is important to have this defined. | ||
- | ALLOW_READ = $(AdminUsers), | + | ALLOW_READ = $(AdminUsers), |
+ | | ||
#ALLOW_READ = *.your.domain, | #ALLOW_READ = *.your.domain, | ||
#DENY_READ = *.bad.subnet, | #DENY_READ = *.bad.subnet, | ||
Line 249: | Line 255: | ||
## machines to your pool and is a serious security risk. | ## machines to your pool and is a serious security risk. | ||
- | ALLOW_WRITE = $(AdminUsers), | + | ALLOW_WRITE = $(AdminUsers), |
+ | | ||
# | # | ||
#DENY_WRITE = bad-machine.your.domain | #DENY_WRITE = bad-machine.your.domain | ||
Line 266: | Line 273: | ||
## Negotiator access. | ## Negotiator access. | ||
## managers. | ## managers. | ||
- | ALLOW_NEGOTIATOR = condor@$(CONDOR_HOST)/ | + | #ALLOW_NEGOTIATOR = condor@$(CONDOR_HOST)/ |
+ | ALLOW_NEGOTIATOR = $(CONDOR_HOST) | ||
## Now, with flocking we need to let the SCHEDD trust the other | ## Now, with flocking we need to let the SCHEDD trust the other | ||
## negotiators we are flocking with as well. You should normally | ## negotiators we are flocking with as well. You should normally | ||
Line 320: | Line 328: | ||
# authentication methods when trying to communicate with the Condor | # authentication methods when trying to communicate with the Condor | ||
# system daemons. | # system daemons. | ||
- | SEC_CLIENT_AUTHENTICATION_METHODS = FS, PASSWORD | + | SEC_CLIENT_AUTHENTICATION = PREFERRED |
+ | SEC_CLIENT_AUTHENTICATION_METHODS = PASSWORD, | ||
+ | SEC_CLIENT_INTEGRITY = OPTIONAL | ||
# A daemon will accept these forms of authentication when | # A daemon will accept these forms of authentication when | ||
# communicating | # communicating | ||
- | SEC_DEFAULT_AUTHENTICATION_METHODS = FS, PASSWORD | + | SEC_DEFAULT_AUTHENTICATION = PREFERRED |
+ | SEC_DEFAULT_AUTHENTICATION_METHODS = PASSWORD, | ||
+ | SEC_DEFAULT_INTEGRITY = OPTIONAL | ||
# Password authentication | # Password authentication | ||
- | SEC_PASSWORD_FILE = / | + | # Note: TILDE refers to the ' |
- | SEC_DAEMON_AUTHENTICATION | + | SEC_PASSWORD_FILE = $(TILDE)/ |
- | SEC_DAEMON_INTEGRITY = REQUIRED | + | FS_REMOTE_DIR |
- | SEC_DAEMON_AUTHENTICATION_METHODS = PASSWORD | + | |
- | SEC_NEGOTIATOR_AUTHENTICATION | + | SEC_ADMINISTRATOR_AUTHENTICATION |
- | SEC_NEGOTIATOR_INTEGRITY | + | SEC_CONFIG_AUTHENTICATION |
- | SEC_NEGOTIATOR_AUTHENTICATION_METHODS | + | SEC_READ_AUTHENTICATION |
Line 351: | Line 363: | ||
## uncomment the following setting and change the value to " | ## uncomment the following setting and change the value to " | ||
## Note: changing this requires a restart not just a reconfig. | ## Note: changing this requires a restart not just a reconfig. | ||
- | ENABLE_RUNTIME_CONFIG = False | + | ENABLE_RUNTIME_CONFIG = True |
## Do you want to allow condor_config_val -set to work at all? | ## Do you want to allow condor_config_val -set to work at all? | ||
Line 371: | Line 383: | ||
## prior to version 6.3.3. | ## prior to version 6.3.3. | ||
## should leave this commented out. | ## should leave this commented out. | ||
- | #SETTABLE_ATTRS_CONFIG = * | + | SETTABLE_ATTRS_CONFIG = * |
## Attributes that can be set by hosts with " | ## Attributes that can be set by hosts with " | ||
Line 551: | Line 563: | ||
## default for this setting is False, since it is more secure this | ## default for this setting is False, since it is more secure this | ||
## way. | ## way. | ||
- | TRUST_UID_DOMAIN = True | + | TRUST_UID_DOMAIN = False |
## If you would like to be informed in near real-time via condor_q when | ## If you would like to be informed in near real-time via condor_q when | ||
Line 631: | Line 643: | ||
## interface if one is available. If it cannot decide which of two interfaces | ## interface if one is available. If it cannot decide which of two interfaces | ||
## to choose from, it will pick the first one. | ## to choose from, it will pick the first one. | ||
- | # | + | # |
+ | # | ||
## | ## | ||
Line 641: | Line 654: | ||
## | ## | ||
- | ALL_DEBUG | + | #TODO |
+ | ALL_DEBUG | ||
MAX_COLLECTOR_LOG = 1000000 | MAX_COLLECTOR_LOG = 1000000 | ||
Line 771: | Line 785: | ||
## By default, RANK is always 0, meaning that all jobs have an equal | ## By default, RANK is always 0, meaning that all jobs have an equal | ||
## ranking. | ## ranking. | ||
- | RANK = $(GreedyUserRank) | + | RANK = $(GreedyUserRank) + ((TotalSlots > 1) * (SlotID / TotalSlots)) + ((KeyboardIdle > 15 * 60) * (5)) + (1 - LoadAvg) |
Line 789: | Line 803: | ||
# When should we only consider SUSPEND instead of PREEMPT? | # When should we only consider SUSPEND instead of PREEMPT? | ||
- | WANT_SUSPEND = $(UWCS_WANT_SUSPEND) | + | #WANT_SUSPEND = $(UWCS_WANT_SUSPEND) |
+ | WANT_SUSPEND = ( $(SmallJob) || $(KeyboardNotBusy) \ | ||
+ | || $(IsVanilla) ) \ | ||
+ | && ( $(SUSPEND) | ||
# When should we preempt gracefully instead of hard-killing? | # When should we preempt gracefully instead of hard-killing? | ||
- | WANT_VACATE = $(UWCS_WANT_VACATE) | + | # |
+ | WANT_VACATE = | ||
+ | || $(IsVanilla) | ||
## When is this machine willing to start a job? | ## When is this machine willing to start a job? | ||
- | START = ($(UWCS_START) || $(IsGreedyUser)) | + | #Note: START is redefined in the local config file of ' |
+ | #START = ($(UWCS_START) || $(IsGreedyUser)) | ||
+ | START = ( $(CPUIdle) || \ | ||
+ | (State != " | ||
## When should a local universe job be allowed to start? | ## When should a local universe job be allowed to start? | ||
Line 804: | Line 826: | ||
## When to suspend a job? | ## When to suspend a job? | ||
- | SUSPEND = ($(UWCS_SUSPEND) && ($(IsGreedyUser) == False)) | + | #SUSPEND = ($(UWCS_SUSPEND) && ($(IsGreedyUser) == False)) |
+ | SUSPEND = ( (CpuBusyTime > 2 * $(MINUTE)) \ | ||
+ | && $(ActivationTimer) > 90 ) | ||
## When to resume a suspended job? | ## When to resume a suspended job? | ||
- | CONTINUE = ($(UWCS_CONTINUE) || $(IsGreedyUser)) | + | #CONTINUE = ($(UWCS_CONTINUE) || $(IsGreedyUser)) |
+ | CONTINUE = ( $(CPUIdle) && ($(ActivityTimer) > 5) ) | ||
## When to nicely stop a job? | ## When to nicely stop a job? | ||
## (as opposed to killing it instantaneously) | ## (as opposed to killing it instantaneously) | ||
- | PREEMPT = ($(UWCS_PREEMPT) && ($(IsGreedyUser) == False)) | + | #PREEMPT = ($(UWCS_PREEMPT) && ($(IsGreedyUser) == False)) |
+ | PREEMPT = ( ((Activity == " | ||
+ | ($(ActivityTimer) > $(MaxSuspendTime))) \ | ||
+ | || (SUSPEND && (WANT_SUSPEND == False)) ) | ||
## When to instantaneously kill a preempting job | ## When to instantaneously kill a preempting job | ||
## (e.g. if a job is in the pre-empting stage for too long) | ## (e.g. if a job is in the pre-empting stage for too long) | ||
- | KILL = | + | KILL = $(UWCS_KILL) |
PERIODIC_CHECKPOINT = $(UWCS_PERIODIC_CHECKPOINT) | PERIODIC_CHECKPOINT = $(UWCS_PERIODIC_CHECKPOINT) | ||
Line 1016: | Line 1044: | ||
SPOOL = $(LOCAL_DIR)/ | SPOOL = $(LOCAL_DIR)/ | ||
#EXECUTE = $(LOCAL_DIR)/ | #EXECUTE = $(LOCAL_DIR)/ | ||
- | EXECUTE = | + | # Note: TILDE refers to the ' |
+ | EXECUTE = | ||
BIN = $(RELEASE_DIR)/ | BIN = $(RELEASE_DIR)/ | ||
LIB = $(RELEASE_DIR)/ | LIB = $(RELEASE_DIR)/ | ||
Line 1141: | Line 1170: | ||
## different port ranges for incoming and outgoing connections by | ## different port ranges for incoming and outgoing connections by | ||
## using IN_HIGHPORT/ | ## using IN_HIGHPORT/ | ||
- | #HIGHPORT = 9700 | + | HIGHPORT = 9700 |
- | #LOWPORT = 9600 | + | LOWPORT = 9600 |
## If a daemon doens' | ## If a daemon doens' | ||
Line 1534: | Line 1563: | ||
## but you still want jobs to start right away on some of your SMP | ## but you still want jobs to start right away on some of your SMP | ||
## nodes, just increase this parameter. | ## nodes, just increase this parameter. | ||
- | #DISCONNECTED_KEYBOARD_IDLE_BOOST = 1200 | + | DISCONNECTED_KEYBOARD_IDLE_BOOST = 1200 |
###### | ###### | ||
Line 1596: | Line 1625: | ||
## How often should the schedd send an update to the central manager? | ## How often should the schedd send an update to the central manager? | ||
- | SCHEDD_INTERVAL = | + | SCHEDD_INTERVAL = |
## How long should the schedd wait between spawning each shadow? | ## How long should the schedd wait between spawning each shadow? | ||
Line 1603: | Line 1632: | ||
## How many concurrent sub-processes should the schedd spawn to handle | ## How many concurrent sub-processes should the schedd spawn to handle | ||
## queries? | ## queries? | ||
- | SCHEDD_QUERY_WORKERS | + | SCHEDD_QUERY_WORKERS |
## How often should the schedd send a keep alive message to any | ## How often should the schedd send a keep alive message to any | ||
Line 1699: | Line 1728: | ||
## How often should the shadow update the job queue with job | ## How often should the shadow update the job queue with job | ||
## attributes that periodically change? | ## attributes that periodically change? | ||
- | SHADOW_QUEUE_UPDATE_INTERVAL = 15 * 60 | + | SHADOW_QUEUE_UPDATE_INTERVAL = 10 * 60 |
## Should the shadow wait to update certain job attributes for the | ## Should the shadow wait to update certain job attributes for the | ||
Line 1731: | Line 1760: | ||
## exit with an error. | ## exit with an error. | ||
## job with the specified UID, even if it's not in the passwd file? | ## job with the specified UID, even if it's not in the passwd file? | ||
- | #SOFT_UID_DOMAIN = FALSE | + | SOFT_UID_DOMAIN = FALSE |
## honor the run_as_owner option from the condor submit file. | ## honor the run_as_owner option from the condor submit file. | ||
Line 1792: | Line 1821: | ||
## site, uncomment these entries. | ## site, uncomment these entries. | ||
# | # | ||
- | # | + | # |
## If you want expressions only appended for either standard or | ## If you want expressions only appended for either standard or | ||
Line 2613: | Line 2642: | ||
## name node (see HDFS_SERVICES) then the specified port will be used | ## name node (see HDFS_SERVICES) then the specified port will be used | ||
## to run name node. | ## to run name node. | ||
- | HDFS_NAMENODE = hdfs:// | + | #HDFS_NAMENODE = hdfs:// |
- | HDFS_NAMENODE_WEB = example.com: | + | #HDFS_NAMENODE_WEB = example.com: |
- | HDFS_BACKUPNODE = hdfs:// | + | #HDFS_BACKUPNODE = hdfs:// |
- | HDFS_BACKUPNODE_WEB = example.com: | + | #HDFS_BACKUPNODE_WEB = example.com: |
## You need to pick one machine as name node by setting this parameter | ## You need to pick one machine as name node by setting this parameter |