Re: [HTCondor-users] setgroup feature for startd

["Beyer, Christoph" <christoph.beyer@xxxxxxx>]

Hi Jaime,

sorry for short delay :( 

I did not think we would need this when I started migrating to HTCS in the first place but it turned out it is important  to some people. 

I think the most common case is that people are in both groups - say atlas & cms but on the worker only one of the group can be the primary one which will be used as group ownership when it comes to writing files.

Hence if user a writes file in a CMS directory tree but his primary groupid is atlas on the EP the files will show up as owned by group atlas despite being in the CMS dir tree. 

File reading is more elegant and does not give any problems as the primary group ownership does not play any role there. 

At DESY we have a variable called 'myproject' that can be set at submit time by the user or is set via a job transform on the sched the 'myproject' equals to valid netgroups and in the wrapper the bash script checks if 'myproject' equals to the primary group of that ID - if not a 'sg' command is performed. 

Does that make any sense ? 

Best
christoph



-- 
Christoph Beyer
DESY Hamburg
IT-Department

Notkestr. 85
Building 02b, Room 009
22607 Hamburg

phone:+49-(0)40-8998-2317
mail: christoph.beyer@xxxxxxx

----- UrsprÃngliche Mail -----
Von: "Jaime Frey via HTCondor-users" <htcondor-users@xxxxxxxxxxx>
An: "HTCondor-Users Mail List" <htcondor-users@xxxxxxxxxxx>
CC: "Jaime Frey" <jfrey@xxxxxxxxxxx>
Gesendet: Freitag, 10. Februar 2023 21:23:07
Betreff: Re: [HTCondor-users] setgroup feature for startd

That sounds like a fairly simple feature to add. Whoâs deciding the group name in your case? The job owner or the EP admin?
 
 - Jaime

> On Feb 10, 2023, at 4:17 AM, Beyer, Christoph <christoph.beyer@xxxxxxx> wrote:
> 
> Hi,
> 
> in Cuneo we discussed a little bit the necessity of wrappers and the fact that they shall be damned ;) 
> 
> I checked my wrapper and the most important thing right now that is does is performing an 'sg' to to change the default group of the user to what he or she opted for - we do pretty much: 
> 
> exec sg $GROUP "$0 $COMMAND $*" 
> 
> If I remeber it right a 'sg-feature' in HTCS would not be too elaborate to implement ? 
> 
> Best
> christoph


_______________________________________________
HTCondor-users mailing list
To unsubscribe, send a message to htcondor-users-request@xxxxxxxxxxx with a
subject: Unsubscribe
You can also unsubscribe by visiting
https://lists.cs.wisc.edu/mailman/listinfo/htcondor-users

The archives can be found at:
https://lists.cs.wisc.edu/archive/htcondor-users/