Cpk | C&CZ News

CPK messages are initially sent to the CPK mailing list, you can (un)subscribe via this link. You can also follow the service interruption messages via RSS using the link in the title under the RSS icon. If the CPK takes more time to resolve, any updates are published on this website.

For RU wide service interruption see meldingen.ru.nl.

Service Interruptions

1407: NFS problems under investigation

When we moved the gateways of our networks from the old location to the new firewalls, we have received some complaints about NFS filesystems having slowness, longer delays or unavailability. In general NFS should never be a requirement for a clusternode job if you can avoid it, because this I/O is always much slower than local I/O from /scratch. We are investigating how we can optimise the network to resolve this issue, but we are hard pressed to know the exact cause of the problem....

Resolved Reports

1390: Authentication downtime

Following the recent update of our LDAP servers certificates, multiple users have reported authentication failures when attempting to log in via RADIUS. The issue appears to affect only users with RADIUS-based authentication, while LDAP-based authentication continues to function successfully. Affected users typically include HFML technicians, guest console users, and Science logins with Wi-Fi access.

1389: Servers unreachable

In the transition from the older 25Gbit switches to newer switches, two blocks of 4 connections were temporarily unavailable due to a peculiarity of the switches where ports are operated in blocks of 4. The removal of an unused cable triggered a disabling of the other ports in the bunch, reseating one of these connections in one case and re-inserting the unused cable fixed the block of ports to start working again....

1388: /vol/astro2 and /vol/astro5 unavailable

Due to errors on the /vol/astro2 filesystem, we had to reboot the fileserver comas1 and take it offline to perform repairs. During this process, both /vol/astro2 and /vol/astro5 have been unavailable.

1387: /vol/astro6 and /vol/astro7 unavailable

Due to errors on the filesystem /vol/astro7, we had to reboot the fileserver comas2, and take in offline to run repairs on the filesystems. During those repairs /vol/astro7 and /vol/astro6 are not available. Last time this happend it took 24 hours to complete

1386: Gitlab/Mattermost/Pages offline after package updates

After the package for gitlab was updated, the service did not come up again, due to a problem with post-install scripts. After rebooting the package installation could finish and service was restored.

1385: DHCP on 25Gbit not working

Due to a change in the network setup the dhcp servers for the 25 gbit networks (which are being changed to new switches and a new management method) the dns servers were unreachable by the dhcp servers. This caused the dhcp servers to be unable to resolve the names in the configuration to their ip addresses. It was fixed by a change in the central firewall.

1384: ubuntu 20 docker broken

A package upgrade broke the internal networking on our ubuntu 20.04 docker container VMs. Internal name resolution does not work anymore.

1383: lilo7 access with managed SSH keys

We have updated the authentication process for login server lilo7 (lilo7.science.ru.nl) as part of a test. As of now, your ~/.ssh/authorized_keys file on lilo7 is ignored. This change is designed to prevent bad actors from easily gaining persistent access. The good news is that we can now grant access to lilo7 from outside the previously very restricted IP ranges. To gain access from a new IP range, you will need to provide us with your public SSH key and the IP range you will be connecting from....

1382: Science services behind eduVPN

De following Science services will be placed behind eduVPN. This means if you want to have continued access, you must use this VPN. De volgende Science services worden achter eduVPN gezet. DHZ/DIY SMTP (mail sending) LILOs Webmail If you have questions are experience problems with setting up eduVPN, please contact our helpdesk.

1381: Science VPN offline with immediately effect

Due to circumstances we are forced to shut the Science VPN with immediately effect. See this news article where we previously said this would happen on December the 1st. If you have questions are experience problems with setting up EduVPN, please contact our helpdesk.