Working Environment at CC-IN2P3

LSST-France uses the computing resources and services provided by IN2P3 computing center (CC-IN2P3). You are invited to read CC-IN2P3 user documentation at:

https://doc.cc.in2p3.fr

Here you will find an overview of the CC-IN2P3 working environment, relevant for your activities as a member of the LSST-France community.

Overview

CC-IN2P3 computing environment is made up of several components that you can use:

  • a login farm, where you can connect and do interactive work
  • a batch farm, where you can submit jobs for asynchronous execution in CPU- or GPU-equipped compute nodes
  • several data storage services, where you can access data and software, and store your own

Below you can find more details on each of those components.

How to Get Help

You can get help by asking other LSST-France members via instant messaging (see Instant messaging).

In addition, for questions related to CC-IN2P3 operations, passwords, account support, group membership, storage quotas, etc. you can contact the help desk at:

https://support.cc.in2p3.fr

Account Setup

To use any of the computing resources allocated to LSST-France at CC-IN2P3 you need an individual account.

If you don’t have an account yet, please follow these instructions to apply for one.

If you already have an account and want it to be a member of the group lsst, one of the LSST-France representatives must formally approve your membership. You can trigger the process by creating a ticket (see How to Get Help for details).

More information on the administrative organization of CC-IN2P3 user accounts in laboratories and groups can be found in the generic end-user documentation, where you can also find details on the roles and responsibilities of those representatives.

Important

⚠️ As a user of CC-IN2P3 computing center services you are expected to comply with its charters. Please make sure you have read them and understand your rights and responsibilities before using those services.

Operations Status

You can get a live overview of the status of CC-IN2P3 computing services at:

http://cctools.in2p3.fr/services_status

There are 4 scheduled maintenance periods per year (about one per quarter), each one of them typically lasting 24 hours or less. The calendar of those periods is established one year in advance. To be informed when those periods are scheduled, configure your ICS-compatible calendar application to subscribe to the feed:

https://zimbra.in2p3.fr/home/usr6402@cc.in2p3.fr/MAINTENANCE%20CC.ics

Alternatively, you can regularly download this file into your calendar application. More details about scheduled outages can be found here.

During each maintenance period, a potentially different subset of the computing services are impacted. To get informed about the details of each outage, scheduled or otherwise, you may want to subscribe to the very low-traffic mailing list USERS-CC-L by sending an e-mail to listserv@in2p3.fr with the body of your message:

subscribe USERS-CC-L Your_Given_Name Your_Last_Name

You won’t be able to post to this list but will receive all announcements sent by the people in charge of CC-IN2P3 support and operations.

(See also the Monitoring and Dashboards section.)

Login Farm

The login farm is composed of a set of computers where you can connect via ssh using your individual user credentials. All the computers in this farm can access the data in your $HOME or in any other storage space (see Data Storage and File Systems).

You can use the computers in the login farm to perform interactive work (e.g. editing files, writing documents, compiling code, etc.) and to submit jobs to the batch farm (see Batch Farm).

LSST-France members use the computers in the login farm which run the CentOS 7 distribution of the Linux operating system. To connect to a computer in the login farm, use the generic host name cca.in2p3.fr (technically, it is a DNS alias), for instance:

ssh cca.in2p3.fr

Your connection request made through that generic host name will be dynamically directed to a concrete host (say cca001.in2p3.fr) depending on several parameters such as the number of connected users or the load of each host in the farm, etc. at the time of your request. Therefore, you are encouraged to use the generic host name instead of the name of a specific host.

See How to customize your SSH client to get detailed information on how to configure your SSH client for secure, passwordless connexion to the login farm.

You may also be interested in learning about How to execute LSST-enabled JupyterLab notebooks.

Batch Farm

The batch farm is composed of several hundred hosts devoted to compute- and data-intensive tasks executed mostly asynchronously.

CC-IN2P3 uses Univa GridEngine batch system. Some of the GridEngine commands you may find useful are:

  • qsub: to submit a batch job to Univa Grid Engine
  • qlogin: to submit submit an interactive login session
  • qstat: to show the status of jobs and queues
  • qacct: to report and account for Univa Grid Engine usage
  • qdel: to delete jobs from queues
  • qhold: to hold back jobs from execution
  • qrls: to release jobs from previous hold states
  • qalter: to modify a pending or running batch job
  • qresub: to submit a copy of an existing job
  • qmod: to modify a queue, running job or job class
  • qquota: to show current usage of resource quotas
  • qhost: to show the status of hosts, queues, jobs

To retrieve specific information about each one of them, connect to the Login Farm and then do:

man qsub

In addition, you may find useful to read an overview of the computing platform and more detailed information on how to submit jobs.

The batch farm is configured using execution queues each with its own characteristics. You may also want to browse the hardware configuration and operating system of the compute nodes in the farm.

Unfortunately, because unfathomable restrictions imposed by Univa, we are not allowed to make the end user documentation available via a public web page (!). Therefore, to access the documentation of the currently deployed version of Univa GridEngine, you need first to connect to the login farm and then look for the available documents in the directory /opt/sge/doc.

Finally, to know which version of GridEngine is currently in production, do:

cat /opt/sge/uge-version

Data Storage and File Systems

As a user of CC-IN2P3, you can use several storage areas for your data. Selecting one of those areas for your needs depend on several criteria such as the intended use of the data, their lifetime, desired accessibility, etc.

See also How to decide where to store my data.

Home directory: $HOME

Your account is configured with a home directory pointed to by the environment variable $HOME. That storage space is managed by NFS and it has a quota of a few tens of gigabytes.

You are strongly encouraged to not hardcode the path to your home directory and instead use $HOME (or, alternatively ~) in your scripts, including your batch jobs and shell profiles.

Your home directory is accessible in read/write mode from all the hosts in both the Login Farm and in the Batch Farm. In other words, a file created during an interactive session in your home directory will be visible by your jobs when executing in one compute node, using the same file path.

Files you store under your home directory are backed-up so may be retrieved in case of accidental deletion. There is no purge policy associated to your home directory but the storage quota is somehow low.

To manage the access rights to your files and directories with fine granularity, you can use the commands nfs4_getfacl(1) and nfs4_setfacl(1) which allow you to get and set access control entries, respectively. An introduction to how NFS access control lists work can be found using the command

man 5 nfs4_acl

Additional details on how to set access control lists to your data are available in the Manage ACLs section of the user documentation.

Intended use: source code, executables, configuration files, documents, etc. Optimized for small- to medium-sized files. It is not intended for storing the output of your application runs.

Shared group area: /pbs/throng/lsst

This storage space, with a higher quota than $HOME, is intended for storing and sharing small- to medium-sized files (e.g. software, code, scripts, documents, etc.) but not for large datasets. Although the namespace and usage of this area is under control, you have your own directory under /pbs/throng/lsst/users. The name of your subdirectory is identical to your user name (i.e. the output of the whoami command).

There is no purge policy associated to this area and it is backed-up, so it may be possible to recover files after accidental deletion. This area is visible from hosts both in the Login Farm and in the Batch Farm. The quota for this space is measured in hundreds of gigabytes for the entire group and can be adjusted to meet usage needs.

You can manage the access rights to your files and directories under /pbs/throng/lsst by using NFS access control lists, in an analogous way as you can do with your $HOME. Use the commands nfs4_getfacl(1) and nfs4_setfacl(1) to get and set access control entries, respectively. An introduction to how NFS access control lists work can be found via man 5 nfs4_acl. Additional details on how to set access control lists to your data are available in the Manage ACLs section of the user documentation.

Intended use: source code, executables, configuration files, documents, etc., in particular if you want to share them with other members of the group. Optimized for small- to medium-sized files. This space is not intended for storing the output of your application runs.

Shared group area (large datasets): /sps/lsst

This is a high performance, high volume storage area (managed by GPFS) used for storing large volumes of data, such as image datasets and catalogs (see Datasets: /sps/lsst/datasets). Like your home directory, it is accessible from nodes in both the Login Farm and the Batch Farm using the same path.

Warning

Unlike your $HOME directory, /sps/lsst is not backed-up. Although it is configured to be resilient to several kinds of hardware failures, if you accidentally remove some data from this area, it is very unlikely that the CC-IN2P3 helpdesk can do something to retrieve your data back.

The quota of this area for the group is measured in the hundreds of terabytes and is regularly adjusted to meet usage needs.

Intended use: data files, large data sets, both for your individual usage and for usage by other members of the group (see Individual user data: /sps/lsst/users and Topical group data: /sps/lsst/groups). It is optimized for high performance I/O of medium- to large-sized files. This space is ideal for storing the output of your application runs.

Individual user data: /sps/lsst/users

You can store data for your individual use in a subdirectory of /sps/lsst/users named after your login name (i.e. the output of the execution of the whoami command).

In addition, you can use your individual storage area under /sps/lsst/users to share data with your collaborators (see How to share data with your collaborators).

See also How to decide where to store my data for details about this area.

Topical group data: /sps/lsst/groups

Data of interest for a topical group composed of members of the lsst group can be stored in this area. See How to decide where to store my data for details.

Datasets: /sps/lsst/datasets

This storage area contains data (e.g. images, reference catalogs, calibration data, simulated data, tabular data) typically used as inputs for data processing or analysis tasks performed at CC-IN2P3 by members of the group. The permissions of those datasets are set read-only for most members of the group.

Data products: /sps/lsst/dataproducts

This storage area contains data produced or being produced by organized campaigns performed at CC-IN2P3. A few production accounts have write permissions for this area.

Interactive working area: /scratch

This storage area is useful for storing data while working in interactive sessions in the machines in the Login Farm. It is visible only from the hosts in the login farm: your batch job won’t be able to access files stored in this area.

Recommended practice is to create a subdirectory for your own needs named after your login name (i.e. the output of the whoami command). Please note that this area is not intended to permanently store data: files in this area are regularly purged based on usage criteria and space availability but typically last beyond a single interactive work session.

Batch job working area: $TMPDIR

Jobs submitted for execution in the Batch Farm can use a temporary storage area. This area is local to the compute node where your job executes (i.e. it is allocated in the compute node’s local disks) and is volatile: the files and directories you create there in will dissappear when your job finishes its execution.

Recommended practice is to use this compute node’s local storage area for storing files produced by your job. As your job’s execution progresses and before it finishes, you can copy the data you want to keep to other storage areas intended for permanent storage. In a similar way, if your job needs to repeatedly read some files, you may want to consider copying those files into the temporary storage of your job and process those files locally.

The path to this area is unique for each job and is prepared by the batch system. Recommended practice is to access it via the environmental variable $TMPDIR.

Archival storage

CC-IN2P3 uses HPSS for data archival purposes. Data on this area are physically stored on magnetic tape cartridges in an automated tape library. You can find more information in the Mass storage section of the CC-IN2P3 User Documentation.

Summary: overview of available storage areas

Overview of the storage areas available for LSST users.
Storage area Visibility File system type Backed-up Quota Purge policy
$HOME login and batch farms NFS yes a few 10s GB No
/pbs/throng/lsst login and batch farms NFS yes a few TB No
/sps/lsst login and batch farms GPFS and CephFS no hundreds of TB No
/scratch login farm only NFS no N/A Yes
$TMPDIR compute node only Local file system (typically XFS) no a few 10s GB per job Yes

See also the Monitoring and Dashboards section for getting additional information about those areas.

Software

Software deployed by CC-IN2P3 staff

General purpose software tools such as file editors, typsetting tools, compilers, interpreters, source code management tools, etc. are available for you to use on hosts in both the Login Farm and the Batch Farm. They are installed and maintained by CC-IN2P3 staff.

You will find more information on what packages are available and how to activate a specific version of one them in the software section of the CC-IN2P3 user documentation.

Software deployed by members of the group

Software deployments under the responsibility of members of the lsst group are available under

/pbs/throng/lsst/software

There you will find a subdirectory for each available software package or software environment. Generally speaking, the owner of each directory is the maintainer of the deployment unless stated otherwise in the README file inside each directory.

Your contribution is welcome if you are willing to install and commit to maintain software packages other members of the group can rely on. Before proceeding, you are encouraged to discuss your intentions with other members and ask for guidance via Instant messaging.

DESC software environment

The LSST Dark Energy Science Collaboration (DESC) sofware environment is installed under

/pbs/throng/lsst/software/desc

See How to activate the DESC software environment for details on how to use it.

LSST science pipelines

The LSST science pipelines are installed under

/cvmfs/sw.lsst.eu

See How to use the LSST science pipelines for a description of what you can find in that directory and details on how to use the software.

Monitoring and Dashboards

Several tools are provided for monitoring your individual activity and the activity of the members of LSST at CC-IN2P3.

User Portal

You can get an overall view of your individual activity by visiting

https://portail.cc.in2p3.fr/?langage=en

You will be presented a login page like the one below:

../_images/sso.png

Once authenticated with your individual credentials (the same user name and password that you use for logging in to the Login Farm) you will be presented with information about your own batch jobs and those of your group, the storage capacity you are using, the computing ressources asked by the groups you belong to, how to contact the help desk and pointers to several other services provided by CC-IN2P3 that you as a member of LSST could use (e.g. Indico, gitlab, Atrium, etc.)

Operations Dashboard

You can have an overall view of the computing activity at CC-IN2P3 induced by members of LSST by visiting

https://mon.lsst.eu

You will be presented a dialog similar to:

../_images/signin.png

Type in your individual credentials, that is, the same user name and password that you use for logging in to the Login Farm.

Once authenticated, you will be presented an interactive dashboard like the one below:

../_images/mon-lsst-eu.png

You will be able to drill down and get specific real-time information about the activities related to storage, batch processing, data exchange and the catalog database.

Storage usage

In this section you can find ways to get information about the usage of storage areas used by LSST.

Storage usage /sps/lsst and /sps/lsstcest

The table below presents the locations where you can find information of storage used per individual for the storage areas under /sps/lsst and /sps/lsstcest:

Storage area Usage details
/sps/lsst per group member per top level directory
/sps/lsstcest per group member per top level directory

This information is refreshed daily: see at the top right corner of the target page for information on when it was last updated.

The images below present the storage allocated vs the storage used for several ranges of file ages, for both /sps/lsst and /sps/lsstcest. Click on one the images below to explore other visualizations via the pull down menus at the top of the target page: you will be able to select the specific metric and the timeframe you want to get information about.

https://ccspsmon.in2p3.fr/filestats/lsst-sfre-yearly.png

Evolution of storage allocation and usage for /sps/lsst. Click on the image to get more details.

https://ccspsmon.in2p3.fr/filestats/lsstcest-sfre-yearly.png

Evolution of storage allocation and usage for /sps/lsstcest. Click on the image to get more details.

Storage usage /pbs/throng/lsst

The figure below shows the allocated (blue) vs used (green) storage under /pbs/throng/lsst. Click on the image to get more detailed information.

http://cctools.in2p3.fr/mrtguser/mrtguser/lsst/lsst_pbs-day.png