Switch to using SSL (Secure Socket Layer)

Message boards : News : Switch to using SSL (Secure Socket Layer)

To post messages, you must log in.

Previous · 1 · 2 · 3 · 4 · 5 · 6 · 7 . . . 11 · Next

AuthorMessage
Sid Celery

Send message
Joined: 11 Feb 08
Posts: 1966
Credit: 38,188,338
RAC: 11,005
Message 95851 - Posted: 2 May 2020, 20:35:38 UTC

For those so inclined, if you simply "Abort" all unstarted tasks rather than let them all start, run and complete, they'll all show as aborted rather than abandoned and, under the way the credit system has been changed recently, you get 10 credits for each of them without running for a second.

If anyone asks, it wasn't me that told you that...

<cough>
ID: 95851 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
AndyG

Send message
Joined: 1 May 20
Posts: 4
Credit: 401,121
RAC: 0
Message 95861 - Posted: 2 May 2020, 21:10:11 UTC - in response to Message 95835.  

there is a Pi4 thread, there are probably better hints in there for other Pi4 related stuff
https://boinc.bakerlab.org/rosetta/forum_thread.php?id=13732

I ran the Raspbian image from www.raspberrypi.org, i'm using that as i think there'd be more support of the Pi4 including some of the proprietary features of the Broadcom soc


Thank you. I'll have a look. Was thinking of going back to Rasparian. Cheers - Andy
ID: 95861 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile Boulybud

Send message
Joined: 3 Apr 20
Posts: 11
Credit: 351,250
RAC: 0
Message 95871 - Posted: 2 May 2020, 21:47:53 UTC - in response to Message 95824.  

I have just done the following steps in my 2 Linux Laptops managed by BAM.

Step 1 - Modify the file account_boinc.bakerlab.org_rosetta.xml
<master_url>https://boinc.bakerlab.org/rosetta/</master_url>

Step 2 - Modify the file all_projects_list.xml
<url>https://boinc.bakerlab.org/rosetta/</url>
<web_url>https://boinc.bakerlab.org/rosetta/</web_url>

Step 3 - Restart boinc manager
systemctl restart boinc-client.service

I didn't need to remove the projet and attach it again.


Have you thought about also changing the URL in the statistical file?

/var/lib/boinc/statistics_boinc.bakerlab.org_rosetta.xml
<master_url>https://boinc.bakerlab.org/rosetta/</master_url>


Your solution actually looks very simple, however, I'm not sure you'll spend all your files settings in HTTPS with this method. What do you think?
ID: 95871 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Sid Celery

Send message
Joined: 11 Feb 08
Posts: 1966
Credit: 38,188,338
RAC: 11,005
Message 95875 - Posted: 2 May 2020, 21:55:39 UTC - in response to Message 95851.  

For those so inclined, if you simply "Abort" all unstarted tasks rather than let them all start, run and complete, they'll all show as aborted rather than abandoned and, under the way the credit system has been changed recently, you get 10 credits for each of them without running for a second.

Having done that and cleared my cache on both laptop and desktop, all seems to have gone well.
484Mb database came down quickly enough with 2x85Mb program files.
Only a few tasks came down - about 2 per core - mainly because the expected runtime on the new laptop tasks was 7h 49m and on the desktop tasks 6h 55m. Near enough is good enough.

My stats tab is looking a bit lonely, but to be expected.
ID: 95875 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
PaoloNasca

Send message
Joined: 13 Jul 19
Posts: 9
Credit: 606,824
RAC: 311
Message 95888 - Posted: 2 May 2020, 23:41:16 UTC - in response to Message 95871.  

Hi Boulybud
I don’t understand your suggestion “I'm not sure you'll spend all your files settings in HTTPS with this method”. Could you explain me better?

About modifying the statistics_boinc.bakerlab.org_rosetta.xml file, I think it’s a good idea to change it but I’d like to share my today experience.
I didn’t change the statistics xml file and, after the restart:
*) I lost the Rosetta historical graph in the Boinc Manager GUI Statistics Tab
*) I found “https” written in statistics xml file

I’d like to share also the following steps I did in my first experience:
STEP 0 – Reset Projet
STEP 4 – After downloading project files, execute a second restart
ID: 95888 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Jim Delaney
Avatar

Send message
Joined: 1 May 20
Posts: 1
Credit: 1,145,401
RAC: 0
Message 95889 - Posted: 3 May 2020, 0:17:00 UTC - in response to Message 95724.  

Thanks from my wife and I. Think I did it but notices still says this project is using old URL. Will that go away eventually?
ID: 95889 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile yoerik
Avatar

Send message
Joined: 24 Mar 20
Posts: 128
Credit: 169,525
RAC: 0
Message 95890 - Posted: 3 May 2020, 1:11:30 UTC - in response to Message 95889.  

Thanks from my wife and I. Think I did it but notices still says this project is using old URL. Will that go away eventually?

If you look at the Project's properties, you can see what the URL is. Although, they went away the second I switched URLs - so you probably didn't. Check the project properties, and if it's not https://, try again.
ID: 95890 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile Boulybud

Send message
Joined: 3 Apr 20
Posts: 11
Credit: 351,250
RAC: 0
Message 95903 - Posted: 3 May 2020, 6:50:52 UTC - in response to Message 95888.  
Last modified: 3 May 2020, 6:51:40 UTC

Hi Boulybud
I don’t understand your suggestion “I'm not sure you'll spend all your files settings in HTTPS with this method”. Could you explain me better?

About modifying the statistics_boinc.bakerlab.org_rosetta.xml file, I think it’s a good idea to change it but I’d like to share my today experience.
I didn’t change the statistics xml file and, after the restart:
*) I lost the Rosetta historical graph in the Boinc Manager GUI Statistics Tab
*) I found “https” written in statistics xml file

I’d like to share also the following steps I did in my first experience:
STEP 0 – Reset Projet
STEP 4 – After downloading project files, execute a second restart


Sorry, I use a translator :(

In doing so, I thought that with your method, it was not going to change the other rosetta files with the right URL in HTTPS

But obviously, in your case, he spotted that the URL contained in the file "statistics_boinc.bakerlab.org_rosetta.xml" was not the right one so he rewrote the file with the right URL in HTTPS (which probably explains why you lost your graphics)

My question was rather, isn't it safer to delete/add the project after changing the master URL in "all_projects_list.xml" so that they change the entire associated rosetta files by recreating them?
ID: 95903 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
plz_delete

Send message
Joined: 24 Mar 20
Posts: 4
Credit: 370,303
RAC: 0
Message 95904 - Posted: 3 May 2020, 6:52:41 UTC

I did what was recommended in the thread, requested no new tasks, aborted those that hadn't started yet and decided to wait on those that weren't finished yet. All tasks failed when I checked just now and show as abandoned in my profile. I decided to switch because the damage was done and when I tried to remove the BOINC client, it crashed.

After manually starting the download and update for the new project, the tasks do come in now.

I feel like I used a sledgehammer to make a ceramic bowl, would have appreciated a step by step guide with best practice. Or maybe the http tasks were cancelled from Rosetta's end?
ID: 95904 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
sgaboinc

Send message
Joined: 2 Apr 14
Posts: 282
Credit: 208,966
RAC: 0
Message 95905 - Posted: 3 May 2020, 7:22:13 UTC
Last modified: 3 May 2020, 7:25:53 UTC

well, i'd guess this won't happen too often chill, i think a small mistake to try to make the switch without cleanup would leave the jobs abandoned lol

but backup the statistics file it is
/var/lib/boinc/statistics_boinc.bakerlab.org_rosetta.xml
on Pi4
not sure where it is on Windows and others.
the statistics backup can be restored after the switch over
ID: 95905 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile Boulybud

Send message
Joined: 3 Apr 20
Posts: 11
Credit: 351,250
RAC: 0
Message 95906 - Posted: 3 May 2020, 7:25:49 UTC - in response to Message 95903.  
Last modified: 3 May 2020, 7:40:03 UTC

STEP 1 :REQUESTED no new tasks and WAITING all Tasks are finished

STEP 2 OPTIONAL [FOR SAVE STATISTICS FILES 1/4] :
backup /var/lib/boinc/statistics_boinc.bakerlab.org_rosetta.xml
e.g. copy that to home directory

cp /var/lib/boinc/statistics_boinc.bakerlab.org_rosetta.xml ~

STEP 3 : DELETE Rosetta project in Boinc Manager

STEP 4 : STOP boinc-client service

$ sudo systemctl stop boinc-client.service

STEP 5 : UPDATE url- and web_url-lines under Rosetta@home section in all_projects_list.xml

edit /var/lib/boinc/all_projects_list.xml

STEP 6 : START boinc client service
$ sudo systemctl start boinc-client.service


STEP 7: ADD Rosetta project in Boinc Manager

STEP 8 OPTIONAL ; [FOR SAVE STATISTICS FILES 2/4] : REPLACE the statistics file with your backup
sudo cp -i ~/statistics_boinc.bakerlab.org_rosetta.xml /var/lib/boinc/ 

STEP 9 OPTIONAL : [FOR SAVE STATISTICS FILES 3/4] : but EDIT your statistics file
/var/lib/boinc/statistics_boinc.bakerlab.org_rosetta.xml

<master_url>https://boinc.bakerlab.org/rosetta/</master_url>

STEP 10 OPTIONAL : [FOR SAVE STATISTICS FILES 4/4] : RESTART Boinc service
$ sudo systemctl restart boinc-client.service



Don't you think this method is the safest way for all of the Rosetta project files to be changed with the HTTPS URL ?
ID: 95906 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
floyd

Send message
Joined: 26 Jun 14
Posts: 23
Credit: 10,268,639
RAC: 0
Message 95908 - Posted: 3 May 2020, 8:47:59 UTC - in response to Message 95906.  

STEP 5 : UPDATE url- and web_url-lines under Rosetta@home section in all_projects_list.xml

edit /var/lib/boinc/all_projects_list.xml
Is there a reason for this, other than to be able to just pick the project from the list? If there is no such reason, don't do it. If there is a reason, remember that the list is updated regularly. Your changes will be reverted.

Don't you think this method is the safest way for all of the Rosetta project files to be changed with the HTTPS URL ?
The safest way is to stay away from the data directory and just do what you're told from the UI. There's some precautions though.

STEP 1: When convenient
Set the project to No New Tasks, then finish your work or abort it as you wish. IMPORTANT: Report your results, i.e. do a project update.

STEP 2: remove the project
Remove the project.

STEP 3: then add https://boinc.bakerlab.org/rosetta/
Precaution: Set a very small cache size or even set it to zero, to avoid being swamped with fresh work.
Add the project as you do usually. If you use the add project wizard, don't pick the project from the list but enter the URL directly. (You can even choose is from the list, but then don't hit Next right away but adjust the URL first. The only difference should be the s in https.)
ID: 95908 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
PaoloNasca

Send message
Joined: 13 Jul 19
Posts: 9
Credit: 606,824
RAC: 311
Message 95909 - Posted: 3 May 2020, 9:02:57 UTC
Last modified: 3 May 2020, 9:04:49 UTC

To all Boincstats Account Manager (BAM!) users.

The BAM! admin has made the change. We have just to wait 48 hours (2 polling cycles).
In the first cycle the Rosetta project will be removed.
In the second one it will be attached again.

The https will be present in all the files and in the right place with no human intervention.

The Rosetta request to enable https has a side effect: all the running WUs will be aborted.
ID: 95909 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
PaoloNasca

Send message
Joined: 13 Jul 19
Posts: 9
Credit: 606,824
RAC: 311
Message 95910 - Posted: 3 May 2020, 9:20:25 UTC - in response to Message 95908.  

About the need to modify the /var/lib/boinc/all_projects_list.xml file, I share what happened to me yesterday.

Without the changing, the Boinc Manager GUI Notices tabs was empty. Maybe I had to wait the exchanging of ssl keys or maybe not.

With the changing, the Notices tabs worked fine again.

You are very right.
If the all_progect_list,xml file will be distributed again by Boinc patch/release, we lose the modification.
ID: 95910 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
floyd

Send message
Joined: 26 Jun 14
Posts: 23
Credit: 10,268,639
RAC: 0
Message 95911 - Posted: 3 May 2020, 9:34:58 UTC - in response to Message 95910.  

If the all_progect_list,xml file will be distributed again by Boinc patch/release, we lose the modification.
Not only with a new release. As far as I know the list of BOINC projects is maintained at Berkeley and the clients update it from there as part of the normal operations. I don't remember the interval, maybe every 30 days or so. The one on the computer I'm writing from is dated 2020-04-25 and I haven't done anything to it. The Rosetta admin will need to get that central list updated.
ID: 95911 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Millenium

Send message
Joined: 20 Sep 05
Posts: 68
Credit: 184,283
RAC: 0
Message 95927 - Posted: 3 May 2020, 14:36:10 UTC - in response to Message 95904.  

I did what was recommended in the thread, requested no new tasks, aborted those that hadn't started yet and decided to wait on those that weren't finished yet. All tasks failed when I checked just now and show as abandoned in my profile. I decided to switch because the damage was done and when I tried to remove the BOINC client, it crashed.

After manually starting the download and update for the new project, the tasks do come in now.

I feel like I used a sledgehammer to make a ceramic bowl, would have appreciated a step by step guide with best practice. Or maybe the http tasks were cancelled from Rosetta's end?

Remove the BOINC client? There is no need to uninstall BOINC. Also were the completed tasks updated to the server before removing the project? I have no failures nor abandoned tasks in my profile.

Seriously, it's very easy:
Remove the project
Reattach to it with the new address
ID: 95927 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Mr P Hucker
Avatar

Send message
Joined: 12 Aug 06
Posts: 1600
Credit: 9,537,480
RAC: 776
Message 95940 - Posted: 3 May 2020, 18:19:54 UTC

This needs to be automatic. 90% of users will never see this thread. They will never know anything has to be done. Eventually when the old address stops working, they'll assume there's no work available and go to another project. Boinc needs to change the address itself with no user intervention.
ID: 95940 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile Boulybud

Send message
Joined: 3 Apr 20
Posts: 11
Credit: 351,250
RAC: 0
Message 95947 - Posted: 3 May 2020, 20:09:34 UTC - in response to Message 95911.  

Seriously, it's very easy:
Remove the project
Reattach to it with the new address


I agree with you. It's the simplest method.

There is still the statistics file, which is not specified. As far as I was concerned, having no interest for statistics I made the simplest method and obviously he kept me the statistics on BoincTasks


This needs to be automatic. 90% of users will never see this thread. They will never know anything has to be done. Eventually when the old address stops working, they'll assume there's no work available and go to another project. Boinc needs to change the address itself with no user intervention.


I also agree with you, this kind of manipulation can scare away some numbers of average users who are just there to participate it is absolutely necessary that Boinc try as far as possible to bring updates in a transparent way for the user even if it is true that this manipulation is not very complicated either.

In any case, I really enjoy participating in Rosetta, that allowed me to start Linux with Raspbian and design a case with a 3D printer to cool my Raspberry Pi 4 as best as possible.

This is a real project to do in a school for a class in order to learn how to design a useful project in computer science.

PS: Sorry for my english, y use a translator
ID: 95947 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Mr P Hucker
Avatar

Send message
Joined: 12 Aug 06
Posts: 1600
Credit: 9,537,480
RAC: 776
Message 95948 - Posted: 3 May 2020, 20:24:05 UTC - in response to Message 95947.  

There is still the statistics file, which is not specified. As far as I was concerned, having no interest for statistics I made the simplest method and obviously he kept me the statistics on BoincTasks


I didn't know there was a statistics file, I use Boincstats for statistics. It's nice to know how much work I'm doing and how I compare to other people. It encourages competitiveness and makes me buy more hardware.

I'm now building TWO 24 core Xeon machines - it should have been one, but some of the parts I acquired from useless Ebay sellers were for the wrong model (an R410 and an R510 Dell server only share some of the parts), so I decided to keep them all and build two.


I also agree with you, this kind of manipulation can scare away some numbers of average users who are just there to participate it is absolutely necessary that Boinc try as far as possible to bring updates in a transparent way for the user even if it is true that this manipulation is not very complicated either.


Yip, in this century we expect updates to everything to be automatic. Just as long as reboots don't occur when I'm not looking! [Glares at Microsoft]
ID: 95948 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Admin
Project administrator

Send message
Joined: 1 Jul 05
Posts: 4805
Credit: 0
RAC: 0
Message 95961 - Posted: 3 May 2020, 23:00:53 UTC
Last modified: 4 May 2020, 0:34:57 UTC

This switch is optional and can be done at your convenience. It is not required to detach and reattach. The project will still serve via http. If you want to use SSL, you can switch. If you don't care, you can skip it and just ignore the client message, "This project is using an old URL..."

I've contacted BOINC and hopefully they will update the project url from the list of projects shown on the client for new users so for new users, this will be transparent since they will attach using the https url.
ID: 95961 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Previous · 1 · 2 · 3 · 4 · 5 · 6 · 7 . . . 11 · Next

Message boards : News : Switch to using SSL (Secure Socket Layer)



©2024 University of Washington
https://www.bakerlab.org