Linux at SLAC

Overview

SLAC IT utilizes Chef to centrally manage Linux computers. Chef automates the configuration, deployment, and management of Linux systems across SLAC, ensuring consistent software environments and security standards. This management includes handling software updates, security policies, and compliance.
Scientific research computing systems are supported separately by TID-Scientific Computing Systems (SCS).

Operating Systems Supported

(*End-of-Life systems (RHEL5/6/7, CentOS7, Ubuntu 16.04-20.04) are no longer supported. ReImaging the Operating System or replacement hardware is required for network connectivity.)

(*RHEL5/6/7 and CentOS7 using Heimdal Unix accounts are being phased out in favor of Active Directory.

(*RHEL9 installations may be requested for business-specific reasons. Rocky Linux is recommended as it is fully compatible with RHEL. Please open a support ticket for assistance.)

What is Chef?

Chef is SLAC’s central infrastructure management system for Linux. It is responsible for

• Automating the configuration and deployment of Linux systems across SLAC.
  
  
• Ensuring consistent system environments through standardized Chef Cookbooks.
  
  
• Managing software updates and enforcing security policies.
  
  
• Maintaining compliance with DoE & NSA standards.
  
  
• Ensuring the installation and operation of security solutions, including Crowdstrike antivirus software.
  
  
• Chef's automated processes help streamline system administration, reduce manual intervention, and enhance overall system reliability and security.

Support

• What is Supported?

1. 1. Operating System troubleshooting and resolution for officially supported Linux distributions (Ubuntu 24.04 LTS, Rocky 9).
      
      
   2. Diagnosis and resolution of hardware issues (note: limited support is available for older hardware, specifically PC8xxxx and PC9xxxx, due to aging components and warranty).
      
      
   3. Consultation and advice on hardware selection and compatibility for Linux deployments.
      
      
   4. Regular software updates, security patches, and overall software maintenance.
      
      
   5. Remote graphical access solutions, including NoMachine(officially recommended by SLAC IT) and Fastx.
      
      

• What is not supported?
  1. Management or troubleshooting of SCS Filesystem mounts:
     
     1. AFS
     2. GPFS
     3. NFS
     4. WEKA
        
        
  2. Automatic mounting and configuration of SLAC IT's TNAS (SITSP) on desktops.
     
     
  3. Installation, configuration, or management of AFS client software.
     
     
  4. Custom or non-standard Linux configurations outside the scope of officially supported systems
     • example, Rocky 9 with latest Linux kernel.

Helpful Information

X11 Forwarding GUI

• NoMachine
  
  
• Fastx

SSH

• Linux remote login access at SLAC
  
  
• SSHFS

Network Access

• Connecting to SLAC VPN Using Linux
  
  
• SLAC VPN Cisco AnyConnect Installation Packages
  
  
• Installing and using ClamAV on Linux

Graphics Card Drivers

• Installing proprietary Nvidia drivers on Ubuntu

TID-SCS Links

• S3DF
  
  
• TID

Tips and Other Information

• Printing on Linux Endpoints
  
  
• Using GitHub Enterprise Cloud at SLAC

Troubleshooting

• Troubleshooting SSH
  
  
• Ubuntu Recovery Mode | Access to Previous Kernel

Projects:

• SSH Inbound Connections Reduction
  
  
• SLAC IT Storage Platform and AFS Migration

Contact

If you have questions or need assistance, please contact the IT Service Desk.

For the IT Service Desk to quickly triage or resolve your ticket, it would be great if you could include

• PC number or hostname
  
  
• Operating system and version
  
  
• Brief description of your Linux issue