Re: [Condor-users] Running jobs as nobody on all machines

[Emir Imamagic <eimamagi@xxxxxxx>]

Hi,

> Have you considered using Condor's file transfer mechanism? It will  
> transfer the files from the execute machine to the submit machine.  
> That way, it doesn't matter what user the job is running under on the  
> execute machine.

I'm familiar with Condor file transfer mechanism. However, the 
application is generating large amount of files and we want the files to 
stay on the execute machine for later processing.


> Another option is to add a requirement to the job that it not run on  
> the machine it was submitted to.

This is not an option because we want to utilize submit machine as well.


There is also an option of using some other machine to submit job on the 
main submit machine, but we would really want to submit all tasks from 
one machine.

Can this be achieved in configuration?

Thanks,
emir


>   -- Jaime
>
> On Dec 5, 2005, at 10:04 PM, Emir Imamagic wrote:
>
>
> > Hi,
> >
> > we have a rather specific application which generates large
> > amount of permanent files in a specific directory on a machine  
> > where it
> > gets executed. Since the execute machine can in the same time be  
> > submit
> > machine, files are generated with ownerhip of actual user. In the  
> > worse
> > case scenario job fails because of lack of write permission on  
> > directory.
> >
> > First we solved this by setting changing group ownership and  
> > setting group
> > write permission manually. However, this is not really an elegant
> > solution, because we have to do it on all machines whenever we use new
> > specific directory.
> >
> > Anyway, now, we're changing the application to setuid to nobody  
> > itself.
> >
> > Still I would like to know how can I achieve this in a Condor
> > configuration (if it's possible).
> >
> > Thanks,
> > emir
> >
> > On Mon, 5 Dec 2005, Jaime Frey wrote:
> >
> >
> > > Is there some reason why you can't have UID_DOMAIN = FULL_HOSTNAME?
> > >
> > > -- Jaime
> > >
> > > On Dec 5, 2005, at 6:51 AM, Emir Imamagic wrote:
> > >
> > >
> > > > I found following explanation in documentation:
> > > > (http://www.cs.wisc.edu/condor/manual/v6.7/3_3Configuration.html)
> > > > -------------------------------------------------------------------- 
> > > > --
> > > > -----
> > > > You can also leave $(UID_DOMAIN) undefined. This will force  
> > > > Condor to
> > > > always run jobs as user nobody. Running standard universe jobs as  
> > > > user
> > > > nobody enhances your security and should cause no problems, because
> > > > the
> > > > jobs use remote I/O to access all of their files. ...
> > > > -------------------------------------------------------------------- 
> > > > --
> > > > -----
> > > >
> > > > However, when I leave UID_DOMAIN undefined in config files, Condor
> > > > sets
> > > > it to FULL_HOSTNAME.
> > > >
> > > > Cheers,
> > > > emir
> > > >
> > > >
> > > > Emir Imamagic wrote:
> > > >
> > > > > Hello to all,
> > > > >
> > > > > is there a way to force Condor to run jobs as user nobody even in
> > > > > case
> > > > > when UID_DOMAIN is same on submit and remote machine?
> > > > >
> > > > > Thanks in advance,
> > > > > emir
> > > > > _______________________________________________
> > > > > Condor-users mailing list
> > > > > Condor-users@xxxxxxxxxxx
> > > > > https://lists.cs.wisc.edu/mailman/listinfo/condor-users
> > > >
> > > > _______________________________________________
> > > > Condor-users mailing list
> > > > Condor-users@xxxxxxxxxxx
> > > > https://lists.cs.wisc.edu/mailman/listinfo/condor-users
> > >
> > > +---------------------------------- 
> > > +---------------------------------+
> > > |            Jaime Frey            |  Public Split on  
> > > Whether        |
> > > |        jfrey@xxxxxxxxxxx         |  Bush Is a  
> > > Divider              |
> > > |  http://www.cs.wisc.edu/~jfrey/  |         -- CNN Scrolling  
> > > Banner |
> > > +---------------------------------- 
> > > +---------------------------------+
> > >
> > >
> > > _______________________________________________
> > > Condor-users mailing list
> > > Condor-users@xxxxxxxxxxx
> > > https://lists.cs.wisc.edu/mailman/listinfo/condor-users
> >
> > _______________________________________________
> > Condor-users mailing list
> > Condor-users@xxxxxxxxxxx
> > https://lists.cs.wisc.edu/mailman/listinfo/condor-users
>
>
> +----------------------------------+---------------------------------+
> |            Jaime Frey            |  Public Split on Whether        |
> |        jfrey@xxxxxxxxxxx         |  Bush Is a Divider              |
> |  http://www.cs.wisc.edu/~jfrey/  |         -- CNN Scrolling Banner |
> +----------------------------------+---------------------------------+
>
>
> _______________________________________________
> Condor-users mailing list
> Condor-users@xxxxxxxxxxx
> https://lists.cs.wisc.edu/mailman/listinfo/condor-users