Remote Shift Connection Instructions¶

Below are brief instructions for getting connections to allow remote shifting. As usual, read the main wiki for more details on shifting in general.

A brief description of accounts at Fermilab can be found at the corresponding Wiki page.

The ICARUS Document Database (loging in as icarus) has additional useful information :

• The Monitoring from Home document in DocDB 17136, has more detailed descriptions of items and pictures.
• The ROC Document in DocDB 15944 has more details about connection instructions (e.g. Zoom room for shift).

What to do before every session¶

A shared requisite of all the connections is to have an FNAL VPN enabled. See how to here . See SBN's page about using the FNAL VPN for additional guidance.

Besides the FNAL VPN, there are specific pre-requisites for each of the connections that you'll need to set up for your shift. Those are listed in each of the subsections below.

You will also need a valid kerberos token before starting any connecting. For this, type the following in your terminal before every session:

kinit username@FNAL.GOV

NOTE: in the ssh commands on this page, sometimes the first ssh tunnel specifies only the machine name. If you have issues with permission denied errors from the commands, try appending your username (likely icarus as in most of the commands below) to the machine name. As an example, if you get a permission denied error, try

ssh -KL 9443:localhost:9443 username@icarus-gateway01.fnal.gov

or

ssh -KL 9443:localhost:9443 icarus@icarus-gateway01.fnal.gov

instead of

ssh -KL 9443:localhost:9443 icarus-gateway01.fnal.gov

Automating the connections¶

The commands to make the tunnels to the machines that run the Slow Controls and the DAQ, and to access Grafana are explicitly written in the sections below. However, those who wish to automate the steps can download this GitHub repository , or clone it with the command

git clone https://github.com/brucehoward-physics/SBN_CR.git

This repository contains scripts based on those used in the control rooms but with some modification. These scripts run to set up the tunnels once you have followed the prerequisites in of the given categories below. There is ./setup_tunnel for the DAQ VNC, ./setup_tunnel_dcs for the Slow Controls (DCS) VNC, and ./connect_grafana for the tunnel to set up the Grafana DAQ monitoring. For Linux users, there is also a script to setup clickable icons for creating the tunnels. See the slides in DocDB 17136 for more details.

Contacts¶

A couple of names are mentioned throughout this page, which contact information is found in the table below.

Liaison	Email
Bruce Howard	howard at fnal.gov
Wenqiang Gu	wgu at bnl.gov

• Table of contents
• Remote Shift Connection Instructions
  • What to do before every session
  • Automating the connections
  • Contacts
  • iFix
    • Pre-requisites
    • Instructions
    • Recorded tutorial
  • DCS (EPICS) VNC
    • Pre-requisites
    • Instructions
    • Recorded tutorial
  • DAQ VNC
    • Pre-requisites
    • Instructions
  • DAQ Grafana Page
    • Pre-requisites
    • Instructions
  • Other important pages
  • Backup commands
    • DAQ VNC
    • DCS VNC

iFix¶

Pre-requisites¶

• VPN enabled.
• Fermi Windows domain account. You can request one via Fermilab's Service Desk.
• iFix account. Please email the iFix liaisons well in advance to request one. The current liaisons are Bruce and Wenqiang.
• A Remote Desktop program supported by your Operating System to view the iFix cryogenics display.
  For Windows, there is Remote Desktop Connection. For Mac, there is a Microsoft Remote Desktop program. For Scientific Linux, we have used Vinagre. For Ubuntu, try Remmina.

Instructions¶

1. Open the Remote Microsoft Desktop and click on Add PC
2. In PC name, type ppd-ifix2.fnal.gov
3. Login using your Fermi Windows Domain account and password. If you're receiving a credential error, try adding FERMI\ before your username.
4. Click on the iFix icon in located in the Microsoft Desktop.
5. Select SBN from the list of experiments
6. Select ICARUS

Recorded tutorial¶

An iFix tutorial for shifters can be found in the SBN DocDB 19190. You'll have to access like icarus. This video goes through the steps to connect to the iFix machine and it shows what to monitor during comissioning.

DCS (EPICS) VNC¶

Pre-requisites¶

• VPN enabled.
• Kerberos ticket.
• Log-in permissions to the SBN-FD machines. Contact the person in charge of setups, currently Bruce and Wenqiang.

Instructions¶

From a terminal, do:

ssh -KL 9443:icarus-evb06:443 icarus@icarus-gateway01.fnal.gov

Then, in a browser, open https://localhost:9443. This will grant access to the noVNC. VNC password can be found on the SBN-FD elog Projects page

You will find below a back-up command. Try the command below if you cannot use the above, but make note that you are doing so in the ECL as this can cause port collisions.

Recorded tutorial¶

A PMT tutorial for shifters can be found in the SBN DocDB 19441. You'll have to access like icarus. This video goes through the steps to connect to the icarus evb 06 machine, which currently runs the PMT EPICS. A video showing what to monitor during commissioning will also be added soon.

DAQ VNC¶

Pre-requisites¶

• VPN enabled.
• Kerberos ticket.
• Log-in permissions to the SBN-FD machines. Contact the person in charge of setups, currently Bruce and Wenqiang.

Instructions¶

From a terminal, do:

ssh -KL 8443:icarus-evb01:443 icarus@icarus-gateway01.fnal.gov

Then, in a browser, open https://localhost:8443. This will grant access to the noVNC. VNC password can be found on the SBN-FD Electronic Logbook Projects page

Note, you may need to zoom out in your browser in order to see the whole desktop. Firefox also should have a scroll bar that allows you to move around the part of the screen you see.

If for some reason this connection doesn't work, then try the "DAQ VNC backup command" listed at the very end of this page.

DAQ Grafana Page¶

Pre-requisites¶

• VPN enabled.
• Kerberos ticket.
• Log-in permissions to the SBN-FD machines. Contact the person in charge of setups, currently Bruce and Wenqiang.

Instructions¶

From a terminal, do:

ssh -KL 10080:localhost:10080 icarus@icarus-gateway01.fnal.gov ssh -KL 10080:localhost:10080 icarus@icarus-evb01.fnal.gov

Then, in a browser, open http://localhost:10080 . This will grant access to the Grafana page. Login is "ICARUS-Shift". Password can be found on the SBN-FD Electronic Logbook Projects page.

If you get errors following the above, try breaking the step into two and going to db02 instead, so

ssh -KL 10080:localhost:10080 icarus@icarus-gateway01.fnal.gov

and then in the terminal this opens

ssh -KL 10080:localhost:10080 icarus@icarus-db02.fnal.gov

and then opening the web browser and going to http://localhost:10080 .

Other important pages¶

• Webcams (require VPN): See pages listed in SBN-FD Electronic Logbook Projects page
• Monitoring (requires VPN): https://sbn-online.fnal.gov/cgi-bin/icarus-minargon/icarus-minargon.wsgi/introduction
• Slack: sbn.slack.com. Login and go to #icarus-shift-operations channel. It requires an invite so request one from your supervisor or Bruce if you haven’t got one.
• Zoom: use the shift Zoom room to coordinate shift take over, activities related to tests conducted by experts, etc. The connection details are at the beginning of DocDB 15944 (try this link if you don't use SSO to sign into docDB, Docdb 15944 alternate link)

Backup commands¶

DAQ VNC¶

If for some reason the preferred method of connecting didn't work, try this:

ssh -KL 8443:localhost:8443 icarus-gateway01.fnal.gov ssh -KL 8443:localhost:443 icarus@icarus-evb01.fnal.gov

and post on the ECL that you connected with this command, as it may cause port collision with other users/experts.

DCS VNC¶

If for some reason the preferred method of connecting didn't work, try this:

ssh -KL 9443:localhost:9443 icarus-gateway01.fnal.gov ssh -KL 9443:localhost:443 icarus@icarus-evb06.fnal.gov

and post on the ECL that you connected with this command, as it may cause port collision with other users/experts.