Adapting ATLAS@Home to trusted and semi-trusted resources
ATLAS@Home is a volunteer computing project which enables members of the public to contribute computing power to run simulations of the ATLAS experiment at CERN’s Large Hadron Collider. The computing resources provided to ATLAS@Home increasingly come not only from traditional volunteers, but also fr...
| Main Authors: | , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
EDP Sciences
2020-01-01
|
| Series: | EPJ Web of Conferences |
| Online Access: | https://www.epj-conferences.org/articles/epjconf/pdf/2020/21/epjconf_chep2020_03027.pdf |
| _version_ | 1818362323564232704 |
|---|---|
| author | Cameron David Garonne Vincent Millar Paul Sun Shaojun Wu Wenjing |
| author_facet | Cameron David Garonne Vincent Millar Paul Sun Shaojun Wu Wenjing |
| author_sort | Cameron David |
| collection | DOAJ |
| description | ATLAS@Home is a volunteer computing project which enables members of the public to contribute computing power to run simulations of the ATLAS experiment at CERN’s Large Hadron Collider. The computing resources provided to ATLAS@Home increasingly come not only from traditional volunteers, but also from data centres or office computers at institutes associated to ATLAS. The design of ATLAS@Home was built around not giving out sensitive credentials to volunteers, which means that a sandbox is needed to bridge data transfers between trusted and untrusted domains. As the scale of ATLAS@Home increases, this sandbox becomes a potential data management bottleneck. This paper explores solutions to this problem based on relaxing the constraints of sending credentials to trusted volunteers, allowing direct data transfer to grid storage and avoiding the intermediate sandbox. Fully trusted resources such as grid worker nodes can run with full access to grid storage, whereas semi-trusted resources such as student desktops can be provided with “macaroons”: time-limited access tokens which can only be used for specific files. The steps towards implementing these solutions as well as initial results with real ATLAS simulation tasks are discussed along with the experience gained so far and the next steps in the project. |
| first_indexed | 2024-12-13T21:30:45Z |
| format | Article |
| id | doaj.art-132e22d79a8f4d71b0242efee44ba523 |
| institution | Directory Open Access Journal |
| issn | 2100-014X |
| language | English |
| last_indexed | 2024-12-13T21:30:45Z |
| publishDate | 2020-01-01 |
| publisher | EDP Sciences |
| record_format | Article |
| series | EPJ Web of Conferences |
| spelling | doaj.art-132e22d79a8f4d71b0242efee44ba5232022-12-21T23:30:50ZengEDP SciencesEPJ Web of Conferences2100-014X2020-01-012450302710.1051/epjconf/202024503027epjconf_chep2020_03027Adapting ATLAS@Home to trusted and semi-trusted resourcesCameron David0Garonne Vincent1Millar Paul2Sun Shaojun3Wu Wenjing4University of OsloUniversity of OsloDeutsches Elektronen-Synchrotron (DESY)University of Wisconsin-MadisonUniversity of MichiganATLAS@Home is a volunteer computing project which enables members of the public to contribute computing power to run simulations of the ATLAS experiment at CERN’s Large Hadron Collider. The computing resources provided to ATLAS@Home increasingly come not only from traditional volunteers, but also from data centres or office computers at institutes associated to ATLAS. The design of ATLAS@Home was built around not giving out sensitive credentials to volunteers, which means that a sandbox is needed to bridge data transfers between trusted and untrusted domains. As the scale of ATLAS@Home increases, this sandbox becomes a potential data management bottleneck. This paper explores solutions to this problem based on relaxing the constraints of sending credentials to trusted volunteers, allowing direct data transfer to grid storage and avoiding the intermediate sandbox. Fully trusted resources such as grid worker nodes can run with full access to grid storage, whereas semi-trusted resources such as student desktops can be provided with “macaroons”: time-limited access tokens which can only be used for specific files. The steps towards implementing these solutions as well as initial results with real ATLAS simulation tasks are discussed along with the experience gained so far and the next steps in the project.https://www.epj-conferences.org/articles/epjconf/pdf/2020/21/epjconf_chep2020_03027.pdf |
| spellingShingle | Cameron David Garonne Vincent Millar Paul Sun Shaojun Wu Wenjing Adapting ATLAS@Home to trusted and semi-trusted resources EPJ Web of Conferences |
| title | Adapting ATLAS@Home to trusted and semi-trusted resources |
| title_full | Adapting ATLAS@Home to trusted and semi-trusted resources |
| title_fullStr | Adapting ATLAS@Home to trusted and semi-trusted resources |
| title_full_unstemmed | Adapting ATLAS@Home to trusted and semi-trusted resources |
| title_short | Adapting ATLAS@Home to trusted and semi-trusted resources |
| title_sort | adapting atlas home to trusted and semi trusted resources |
| url | https://www.epj-conferences.org/articles/epjconf/pdf/2020/21/epjconf_chep2020_03027.pdf |
| work_keys_str_mv | AT camerondavid adaptingatlashometotrustedandsemitrustedresources AT garonnevincent adaptingatlashometotrustedandsemitrustedresources AT millarpaul adaptingatlashometotrustedandsemitrustedresources AT sunshaojun adaptingatlashometotrustedandsemitrustedresources AT wuwenjing adaptingatlashometotrustedandsemitrustedresources |