Project

General

Profile

RemoteShift » History » Version 51

« Previous - Version 51/58 (diff) - Next » - Current version
Diana Patricia Mendez, 09/28/2020 12:02 PM


Remote Shift Connection Instructions

Below are brief instructions for getting connections to allow remote shifting. As usual, read the main wiki for more details on shifting in general.

A brief description of accounts at Fermilab can be found at the corresponding Wiki page.

The ICARUS Document Database (loging in as icarus) has additional useful information :
  • The Monitoring from Home document in DocDB 17136, has more detailed descriptions of items and pictures.
  • The ROC Document in DocDB 15944 has more details about connection instructions (e.g. Zoom room for shift).


What to do before every session

A shared requisite of all the connections is to have an FNAL VPN enabled. See how to here . See SBN's page about using the FNAL VPN for additional guidance.

Besides the FNAL VPN, there are specific pre-requisites for each of the connections that you'll need to set up for your shift. Those are listed in each of the subsections below.

You will also need a valid kerberos token before starting any connecting. For this, type the following in your terminal before every session:

kinit username@FNAL.GOV


NOTE: in the ssh commands on this page, sometimes the first ssh tunnel specifies only the machine name. If you have issues with permission denied errors from the commands, try appending your username (likely icarus as in most of the commands below) to the machine name. As an example, if you get a permission denied error, try

ssh -KL 9443:localhost:9443 username@icarus-gateway01.fnal.gov

or
ssh -KL 9443:localhost:9443 icarus@icarus-gateway01.fnal.gov

instead of

ssh -KL 9443:localhost:9443 icarus-gateway01.fnal.gov


Automating the connections

The commands to make the tunnels to the machines that run the Slow Controls and the DAQ, and to access Grafana are explicitly written in the sections below. However, those who wish to automate the steps can download this GitHub repository , or clone it with the command

git clone https://github.com/brucehoward-physics/SBN_CR.git

This repository contains scripts based on those used in the control rooms but with some modification. These scripts run to set up the tunnels once you have followed the prerequisites in of the given categories below. There is ./setup_tunnel for the DAQ VNC, ./setup_tunnel_dcs for the Slow Controls (DCS) VNC, and ./connect_grafana for the tunnel to set up the Grafana DAQ monitoring. For Linux users, there is also a script to setup clickable icons for creating the tunnels. See the slides in DocDB 17136 for more details.


Contacts

A couple of names are mentioned throughout this page, which contact information is found in the table below.

Liaison Email
Bruce Howard howard at fnal.gov
Wenqiang Gu wgu at bnl.gov



iFix

Pre-requisites

  • VPN enabled.
  • Fermi Windows domain account. You can request one via Fermilab's Service Desk.
  • iFix account. Please email the iFix liaisons well in advance to request one. The current liaisons are Bruce and Wenqiang.
  • A Remote Desktop program supported by your Operating System to view the iFix cryogenics display.
    For Windows, there is Remote Desktop Connection. For Mac, there is a Microsoft Remote Desktop program. For Scientific Linux, we have used Vinagre. For Ubuntu, try Remmina.

Instructions

1. Open the Remote Microsoft Desktop and click on Add PC
2. In PC name, type ppd-ifix2.fnal.gov
3. Login using your Fermi Windows Domain account and password. If you're receiving a credential error, try adding FERMI\ before your username.
4. Click on the iFix icon in located in the Microsoft Desktop.
5. Select SBN from the list of experiments
6. Select ICARUS

Recorded tutorial

An iFix tutorial for shifters can be found in the SBN DocDB 19190. You'll have to access like icarus. This video goes through the steps to connect to the iFix machine and it shows what to monitor during comissioning.

DCS (EPICS) VNC

Pre-requisites

  • VPN enabled.
  • Kerberos ticket.
  • Log-in permissions to the SBN-FD machines. Contact the person in charge of setups, currently Bruce and Wenqiang.

Instructions

From a terminal, do:

ssh -KL 9443:icarus-evb06:443 icarus@icarus-gateway01.fnal.gov

Then, in a browser, open https://localhost:9443. This will grant access to the noVNC. VNC password can be found on the SBN-FD elog Projects page

You will find below a back-up command. Try the command below if you cannot use the above, but make note that you are doing so in the ECL as this can cause port collisions.

Recorded tutorial

A PMT tutorial for shifters can be found in the SBN DocDB 19441. You'll have to access like icarus. This video goes through the steps to connect to the icarus evb 06 machine, which currently runs the PMT EPICS. A video showing what to monitor during commissioning will also be added soon.

DAQ VNC

Pre-requisites

  • VPN enabled.
  • Kerberos ticket.
  • Log-in permissions to the SBN-FD machines. Contact the person in charge of setups, currently Bruce and Wenqiang.

Instructions

From a terminal, do:

ssh -KL 8443:icarus-evb01:443 icarus@icarus-gateway01.fnal.gov

Then, in a browser, open https://localhost:8443. This will grant access to the noVNC. VNC password can be found on the SBN-FD Electronic Logbook Projects page

Note, you may need to zoom out in your browser in order to see the whole desktop. Firefox also should have a scroll bar that allows you to move around the part of the screen you see.

If for some reason this connection doesn't work, then try the "DAQ VNC backup command" listed at the very end of this page.


DAQ Grafana Page

Pre-requisites

  • VPN enabled.
  • Kerberos ticket.
  • Log-in permissions to the SBN-FD machines. Contact the person in charge of setups, currently Bruce and Wenqiang.

Instructions

From a terminal, do:

ssh -KL 10080:localhost:10080 icarus@icarus-gateway01.fnal.gov ssh -KL 10080:localhost:10080 icarus@icarus-evb01.fnal.gov

Then, in a browser, open http://localhost:10080 . This will grant access to the Grafana page. Login is "ICARUS-Shift". Password can be found on the SBN-FD Electronic Logbook Projects page.

If you get errors following the above, try breaking the step into two and going to db02 instead, so

ssh -KL 10080:localhost:10080 icarus@icarus-gateway01.fnal.gov

and then in the terminal this opens

ssh -KL 10080:localhost:10080 icarus@icarus-db02.fnal.gov

and then opening the web browser and going to http://localhost:10080 .


Other important pages




Backup commands

DAQ VNC

If for some reason the preferred method of connecting didn't work, try this:

ssh -KL 8443:localhost:8443 icarus-gateway01.fnal.gov ssh -KL 8443:localhost:443 icarus@icarus-evb01.fnal.gov

and post on the ECL that you connected with this command, as it may cause port collision with other users/experts.

DCS VNC

If for some reason the preferred method of connecting didn't work, try this:

ssh -KL 9443:localhost:9443 icarus-gateway01.fnal.gov ssh -KL 9443:localhost:443 icarus@icarus-evb06.fnal.gov

and post on the ECL that you connected with this command, as it may cause port collision with other users/experts.