[Eastern Time]
Security Topics and Discussion
Security topics bullet
[Enrico Fermi Institute] 11:58:49
Yeah.
[Enrico Fermi Institute] 11:58:55
Need. Yeah, So the next slide was just placeholder for that.
[Dirk Hufnagel] 11:59:02
And then another question from the charge was, what new facility features the policies would help use.
[Dirk Hufnagel] 11:59:09
Atlas and Usc. Adopt Commercial Cloud and Hbc.
[Dirk Hufnagel] 11:59:13
Resources, one thing that we had in here was security Don't we invited some security folks, But I don't think anyone actually managed to connect.
[Dirk Hufnagel] 11:59:24
So that's a little bit of a pity. But one big problem.
[Dirk Hufnagel] 11:59:31
Why, apart from the elsef restriction with the no outbound Internet, from the worker notes also most of the Hpc these days have some saw of Alright Mfa login procedure, so you cannot really connect from the outside to to the to desk systems without going through some
[Enrico Fermi Institute] 11:59:37
Yeah.
[Dirk Hufnagel] 11:59:52
mfa process, and that usually would mean that we cannot really integrate things in an automated provisioning systems and things like that.
[Dirk Hufnagel] 12:00:01
But mfa some Hbc's a bit more flexible.
[Dirk Hufnagel] 12:00:06
What they allow Mfa to meet like at at Lcfs.
[Enrico Fermi Institute] 12:00:08
Yeah.
[Dirk Hufnagel] 12:00:12
It's basically strict hardware talking. So phone apps, so you can't do anything unless you and any kind of outside connection goes through that step.
[Dirk Hufnagel] 12:00:20
So cannot be automated. The Nsfunded Hbc.
[Dirk Hufnagel] 12:00:26
So far at least more forgiving. They'll they can say, Okay, M.
[Dirk Hufnagel] 12:00:30
If it can mean that that the system that locks in remotely is comes from a certain Ip or or or things like that or they allow Mfa to be bypassed at the moment, still in general as as a policy, question and then fernando you want to say something on
[Dirk Hufnagel] 12:00:47
the the cloud issues with the with the Cas
[Fernando Harald Barreiro Megino] 12:00:51
yeah. So they are. The problem. Is that so? The Oh, the group on Amazon.
[Fernando Harald Barreiro Megino] 12:01:01
They use the their own certificate authorities, and those are not trusted by Igtf.
[Fernando Harald Barreiro Megino] 12:01:11
And in particular, if you want to do a third party transfer, it means great spite.
[Fernando Harald Barreiro Megino] 12:01:15
The cloud, The cloud ca is not trusted, and then the transfer phase, and you need to do some.
[Fernando Harald Barreiro Megino] 12:01:23
I put something in front of the this storage with another certificate, and this is it it?
[Fernando Harald Barreiro Megino] 12:01:34
It it can become a bottleneck. It could be preferable if if the third party transfers would work, This is being discussed already in the Wcg.
[Fernando Harald Barreiro Megino] 12:01:47
But I heard that they that probably there will not be a solution in the next.
[Fernando Harald Barreiro Megino] 12:01:55
Yes, but this is some to long term problem
[Enrico Fermi Institute] 12:02:02
So? Is the is the issue that that the the Wcg.
[Enrico Fermi Institute] 12:02:05
Would need to accept the the certificate authorities of the of the Commercial Cloud Providers
[Fernando Harald Barreiro Megino] 12:02:12
Yes, they would have to become part of the ittf, and I don't know exactly what are the the policies to get into the igts, and I understand it also require some effort from the from the Cloud Button for them.
[Fernando Harald Barreiro Megino] 12:02:31
Maybe it's not. It's not worth it. So that's why there is.
[Fernando Harald Barreiro Megino] 12:02:37
There is not really a solution. This will tell me, as far as I understand.
[Enrico Fermi Institute] 12:02:43
I'll just point out that it's but the ittf is is bigger than just the Wcg.
[Enrico Fermi Institute] 12:02:47
So it's not necessarily Wcg. Has to. It's a It's a step above them that we would have to convincing to do it
[Dirk Hufnagel] 12:03:02
Oh! And that I just wanted to. I skipped the Federated Identity point because I think, without a security person from Lap here, there's no point discussing that I I just to to mention what it is before I to Eric that basically, the labs have been working on, kind of
[Dirk Hufnagel] 12:03:24
federating the systems in terms of logins, and and so on.
[Dirk Hufnagel] 12:03:28
but I'm not sure if this will help, because I, as far as I know, Mfa, is still required on top of that, so I might be able to log into an to argon with my firmelap id but I still would have to go for the mfa step as far as I know I I just don't
[Dirk Hufnagel] 12:03:44
know if that's something that eventually could dropped with some, maybe private networks between the the the the national apps.
[Dirk Hufnagel] 12:03:51
But that's I wanted to get seek back from it.
[Dirk Hufnagel] 12:03:54
Security. I guess we have to offline Eric
[Eric Lancon] 12:03:58
yes, I wanted to comment. I have 2 points. So when you come to me fair identification and cloud cas, that's a price to pay when you don't own the resources.
[Eric Lancon] 12:04:16
So instead of complaining, we should find innovative solution whenever it's possible to use better those solutions on the Federated it.
[Eric Lancon] 12:04:30
I I invited the people online for this meeting.
[Eric Lancon] 12:04:35
That's so. If there are no the feminine people, or we can have a the Dnn perspective Your home is on the line wanted to to remind that me Fair will certainly become a Stand up everywhere.
[Eric Lancon] 12:04:56
Well, it's a 5 years time scale, so we should adapt to and foresee that we'd have to work with it.
[Eric Lancon] 12:05:06
So on, federated id If you want to say a few words, but
[Jerome Lauret (he/him)] 12:05:10
cool, sure. Let Let Let me write away. Jump in the nfa topic and close.
[Jerome Lauret (he/him)] 12:05:19
This in general, any services that we have put in place, that are cloud inspired, or port provide access for a wide variety of people from multiple different organization.
[Jerome Lauret (he/him)] 12:05:35
Required. Mfa. There is. There's been no no escape to it So far we have been able to set up.
[Jerome Lauret (he/him)] 12:05:43
Of course you know a few services, and Gp. To Herb, and things like that.
[Jerome Lauret (he/him)] 12:05:47
But has been essentially the prerequisite.
[Jerome Lauret (he/him)] 12:05:53
do you the other comment on federated Id is that, of course it all depends on the Federation, and we have been basically somewhat allowed to proceed with many of the Trusted Federation.
[Jerome Lauret (he/him)] 12:06:10
Of what Dewey sees it as trusted. So that is, for example, people coming from all the national labs.
[Jerome Lauret (he/him)] 12:06:18
we have an exemption for certain federation as well.
[Jerome Lauret (he/him)] 12:06:23
but in general, for example, we have had a consistent message that Google, for example, is not a trusted and acceptable federation and the reason for that is just that anybody anytime can impersonate anyone And and a live here on our side to we saw something kind of funny funny identity so
[Jerome Lauret (he/him)] 12:06:47
that's all I wanted to say. But of course there's a lot of Paul guys already seeing the the fact that we are being told.
[Jerome Lauret (he/him)] 12:06:55
Okay, please. Proceed with directed, Id is very encouraging. But this is a long road, and I think that early on someone mentioned also that you know the and Mfa.
[Jerome Lauret (he/him)] 12:07:09
Or Sfa could be bypassed in some ways.
[Jerome Lauret (he/him)] 12:07:10
That's yes, that's true. And there is a lot of work here.
[Enrico Fermi Institute] 12:07:12
Okay.
[Jerome Lauret (he/him)] 12:07:13
to also add trusted metadata. You know, as part of the certificate; but this is indeed not an immediate E immediate, development.
[Jerome Lauret (he/him)] 12:07:24
So that's why, perhaps right now do we prefer to have only trusted Federation, just to be sure that you know everybody is essentially the same kind of whole of engagement
[Enrico Fermi Institute] 12:07:40
So? There. 1 One question I had is, you know, security perspective.
[Enrico Fermi Institute] 12:07:45
Is is it? Is it the case that Mfa is fundamentally analogous to the that you want to have some human interaction to authenticity with a resource, or you know does the mfa.
[Enrico Fermi Institute] 12:08:04
Just mean that you you know, you really just need these multiple facts, right?
[Enrico Fermi Institute] 12:08:09
It's it's not sufficient just to have a key or password, or whatever you need to have some additional factor
[Jerome Lauret (he/him)] 12:08:15
Cool. Cool. Go back. It's a second. It's a simple, and in fact, you know in some cases well, even required to have a secret handshake.
[Jerome Lauret (he/him)] 12:08:27
I mean, okay, essentially, know the point of contact from within the experiment that you are in order to have an account, and being approved because this is the level of confidence depends, of course, on the service that you access just yeah, just to be sure that you you you see the difference.
[Enrico Fermi Institute] 12:08:30
And
[Enrico Fermi Institute] 12:08:35
Sure.
[Enrico Fermi Institute] 12:08:41
Sure.
[Jerome Lauret (he/him)] 12:08:46
Is that if you access matter most, for example and book, even your federated Id is enough.
[Jerome Lauret (he/him)] 12:08:53
If you are issue accounts something that essentially allows you to make modification to the content.
[Jerome Lauret (he/him)] 12:09:02
Then me phase require you, and if you do access computing resource right now, things where you can eventually launch a large number of jobs that so the knee fumble Kevin, that's in the up here as being some kind of illegal activity then not only it's an but in order to have your account
[Jerome Lauret (he/him)] 12:09:20
approved. You need some extra steps and verification that we came up with a procedure that was actually acceptable by outside the team.
[Jerome Lauret (he/him)] 12:09:29
but you know, so there's some kind of like jail of acceptance
[Enrico Fermi Institute] 12:09:35
So so I guess then, is it fair to say that Mfa.
[Enrico Fermi Institute] 12:09:40
Does not. Fundamentally, you know, schoolude automation
[Jerome Lauret (he/him)] 12:09:47
I would say
[Enrico Fermi Institute] 12:09:47
Renton what you know that you know, For example, Tak has done where they where they consider, a you know, a trusted machine to be a factor on top of you know the the key that you provide
[Jerome Lauret (he/him)] 12:10:01
Right. So actually, actually, this is a excellent question, because, of course, for example, jobs, submission from a trusted host.
[Jerome Lauret (he/him)] 12:10:11
Right, for example, in Osg Land has been, of course, accepted right so.
[Enrico Fermi Institute] 12:10:16
Okay.
[Jerome Lauret (he/him)] 12:10:17
And that indeed, is somewhat what you are hinting, as you know, that host is trusted, and you know to access that host to submit.
[Jerome Lauret (he/him)] 12:10:30
Then you require, Then you have, additional you know, authentication.
[Jerome Lauret (he/him)] 12:10:35
You understand what I'm saying right? I mean you you Log, for example, to that host using your local credential.
[Jerome Lauret (he/him)] 12:10:40
Then you eventually issue a token, or whatever which is yet a second factor of then use to meet your job, and that that has been accepted for quite a while.
[Jerome Lauret (he/him)] 12:10:51
So you you You are right, that there may be some leeway there, some some home in in that sense.
[Jerome Lauret (he/him)] 12:10:58
Okay.
[Enrico Fermi Institute] 12:11:00
I think
[Enrico Fermi Institute] 12:11:09
Other other comments or questions about mfa or Cloud. Ca's httf sort of thing
[Dale Carder] 12:11:13
I know a nurse. There. There's a process to get long term keys instead of like the default.
[Dale Carder] 12:11:18
24 h key for Ssh. Proxy
[Dirk Hufnagel] 12:11:21
Yeah, it's it's up to a month, I think, to support
[Dale Carder] 12:11:24
Yeah.
[Dirk Hufnagel] 12:11:27
But you do need to get that key. You need to go through an mfa process, and then you're okay.
[Enrico Fermi Institute] 12:11:34
Sure.
[Dirk Hufnagel] 12:11:34
For 30 days. They They basically that's that's the compromise between.
[Dirk Hufnagel] 12:11:37
We don't want to allow automation when no one authenticates for a couple of years, and then an age will.
[Dirk Hufnagel] 12:11:42
If the that key gets compromised, then basically everyone can use it forever to you. At least you don't have to do this meeting, at least operational feasible.
[Dirk Hufnagel] 12:11:53
To go to to use, to use the system, even with the Mfa. Rules.
[Dirk Hufnagel] 12:11:57
Some place.
[Dirk Hufnagel] 12:12:01
And I mean globus online, is the same. That's what we're doing with the the rush. You online.
[Dirk Hufnagel] 12:12:06
Integration for the transfers, someone actually has to log in manually to the portal and renewed a key once a week so that the transfers can keep keep going But it's it's I mean once a week, once a month that's all that just means you roll it into cost it's
[Enrico Fermi Institute] 12:12:15
Right.
[Dirk Hufnagel] 12:12:23
it's it's it's a bump on the cost for the operations for the long term.
[Dirk Hufnagel] 12:12:26
Information
[Jerome Lauret (he/him)] 12:12:29
usually when you have those long term credentials, so you also have to demonstrate that you have a way to revoke it first.
[Dirk Hufnagel] 12:12:41
I don't know how to handle it. You would probably have to go through nurse, because I don't think the you can revoke it yourself.
[Jerome Lauret (he/him)] 12:12:48
yeah, exactly. So this may be a concern in a long term.
[Jerome Lauret (he/him)] 12:12:52
Yes, I'm just saying, in terms of visibility, people may not know the detail, but usually that's one of the things that would come when a long credentials appeal
[Robert Hancock] 12:13:05
yeah, and in our plan, with the vote, right? So the long-standing credentials would state the Volt.
[Robert Hancock] 12:13:11
Server, so we could just delete them from there, and then they wouldn't be able to pull any more short term credentials, you know.
[Robert Hancock] 12:13:15
Short term tokens, we access token
[Enrico Fermi Institute] 12:13:27
Okay.
[Dirk Hufnagel] 12:13:31
if you don't have any more comments on security topics, it could me move on to the allocations and that's more like acquiring the resources.
ALLOCATIONS
[Enrico Fermi Institute] 12:13:42
Okay.
[Dirk Hufnagel] 12:13:45
So an Hbc: you do it through. It's currently yearly.
[Dirk Hufnagel] 12:13:48
Our locations. So we are. It was mentioned already in the Hbc. Focus area discussions.
[Dirk Hufnagel] 12:13:55
This: if you had multi year locations, that would you reduce that, hey?
[Enrico Fermi Institute] 12:13:55
Okay.
[Dirk Hufnagel] 12:14:00
Reduce the effort to acquire the Hbc resources because you wouldn't have to constantly rejustified every year and B.
[Dirk Hufnagel] 12:14:09
It would also open up possibilities to include sizable Hbc.
[Dirk Hufnagel] 12:14:15
allocations in the in the planning process which you can do right now, because at the moment you write the proposal, you get the decision, and then, usually on the order of few months, later 1, 1, 2, few months later, you get that you actually have the resources, and you don't actually get the decision, until a few
[Dirk Hufnagel] 12:14:37
months before which is too late to actually include it in a name of the long term, in in in the long term, planning planning process for research use in the experiments, and the that's that's from that side independently of of any kind of pledging problems we have that's that's
[Dirk Hufnagel] 12:14:55
a That's a problem in in and being able to pledge.
[Dirk Hufnagel] 12:14:58
I mean, if you don't know that we have the resources we cannot pledge it, even if there would be procedures in place to be able to do so technically, and then what was mentioned also many times before is that a large stored allocations with connectivity to the white area network would
[Dirk Hufnagel] 12:15:14
allow, would simplify Hbc operations, which was basically would make some sinks possible.
[Dirk Hufnagel] 12:15:23
that might not be possible now, and it definitely would reduce the cost
[Enrico Fermi Institute] 12:15:29
Yeah, okay.
[Dirk Hufnagel] 12:15:30
And on the cloud side of Anando. You want to say something on the subscription model
[Fernando Harald Barreiro Megino] 12:15:37
well, I mean I'm not sure exactly how thing works.
[Fernando Harald Barreiro Megino] 12:15:44
At the end. The cloud, that's as long as they they get the check on the on the subscription is renewed, and also the there are come on like there is a common understanding out what is going to be the cost of the subscription.
[Fernando Harald Barreiro Megino] 12:16:02
It's okay. But then I don't know in in in Atlas how how the budgeting works will prepare those a yearly parts it for that
[Dirk Hufnagel] 12:16:18
But I'm really curious about what is what will happen after the it what is it?
[Dirk Hufnagel] 12:16:24
Fifth, 15 months.
[Fernando Harald Barreiro Megino] 12:16:25
Yes, it's around October 2023.
[Fernando Harald Barreiro Megino] 12:16:29
That's fine.
[Dirk Hufnagel] 12:16:30
We'll we'll see what I mean. I really would like to see what happens.
[Dirk Hufnagel] 12:16:32
Sand. If they just renew it at the same, or if they actually drilling into the into the billing data that they collect and and do some, I mean, it depends, I guess, on the billing data.
[Enrico Fermi Institute] 12:16:40
Okay.
[Dirk Hufnagel] 12:16:46
But but still I I'm curious.
HPC - CVMFS & Rucio compatible storage
[Dirk Hufnagel] 12:16:52
And then some specific topics, Here, on the Hpc.
[Dirk Hufnagel] 12:16:56
Side we we mentioned that the facilitating Cbm Fs access.
[Dirk Hufnagel] 12:17:01
I think this is small as a self problem, because see what as as Brian said, if excess is, is considered kind of stable, and the solution to provide.
[Enrico Fermi Institute] 12:17:03
Okay.
[Dirk Hufnagel] 12:17:12
Cdfs these days. So in that that basically immediately gets you to the second problem, you need to have the ability to or either have a some squid infrastructure in place, or the ability for to launch our own because that supports Cdm Fs exec And then there's frontier on top of it but
[Dirk Hufnagel] 12:17:33
the first of all access at facilities access to software. Oh, is it as a comment
[John Steven De Stefano Jr] 12:17:42
Yeah, I was just wondering in general, on the Hpc side when it comes to Cbn Fs access.
[John Steven De Stefano Jr] 12:17:48
What the the mean issue is with the native client. Is it just connectivity that's restricted on the
[Dirk Hufnagel] 12:17:54
It's usually that they don't want to install custom software for just one customer
[John Steven De Stefano Jr] 12:17:59
But they'll, and they'll use Cbm physics sick
[Dirk Hufnagel] 12:18:02
Well, that runs completely in user space. The latest versions It's it's becoming increasing to I mean, I've reached.
[John Steven De Stefano Jr] 12:18:05
True
[Dirk Hufnagel] 12:18:10
We've started using it like a year or 2 ago, like 2 years ago, and it's becoming increasingly easier to use it because the newer machines run new operating systems with newer kernel features.
[Enrico Fermi Institute] 12:18:16
Yeah.
[Dirk Hufnagel] 12:18:21
And it's basically with this at this level, you can run it completely in user space.
[Dirk Hufnagel] 12:18:27
You don't you? Really? The system dependencies are so small these days. If the kernel is new enough that that it kind of it just works
[Enrico Fermi Institute] 12:18:36
In in the past at least, you know, justified or not.
[Enrico Fermi Institute] 12:18:39
There there was certainly some paranoia I I have seen about, you know, running fuse file systems on a compute note.
[Enrico Fermi Institute] 12:18:48
some some sites were worried about that. Like doesn't have any
[Dirk Hufnagel] 12:18:53
Yeah, yeah, some sites, yeah, some some. Hpc: size, you log into a batch node, and like fuse amount, is not available.
[Dirk Hufnagel] 12:19:00
But that's not a If the kernel is new enough.
[Dirk Hufnagel] 12:19:02
See me, Xxx doesn't need fuse amount binary to do a fuse mount.
[Dirk Hufnagel] 12:19:07
You can do it directly through Yeah.
[John Steven De Stefano Jr] 12:19:11
Sure, and I understand the concern about views being another layer on top of, and already simplified or complex system.
[John Steven De Stefano Jr] 12:19:18
But I think the native client has proven fairly stable lately, so I understand the concerns.
[Enrico Fermi Institute] 12:19:24
So it's just it's just convincing the sites.
[Enrico Fermi Institute] 12:19:26
That's the case. Okay.
[John Steven De Stefano Jr] 12:19:27
Thanks.
[John Steven De Stefano Jr] 12:19:27
Yeah.
[Dirk Hufnagel] 12:19:33
And then another area. The Hbc. If you have it, makes so much simpler, if you, if they would provide right, rushio compatible storage we are we're currently working with with nurse on that Lcf: I don't think I mean there's there's no efforts
[Dirk Hufnagel] 12:19:51
there, and I I'm not sure if it will ever happen.
[Dirk Hufnagel] 12:19:54
But at least they support globus online. So we do have a grocery club gloves online integration.
[Dirk Hufnagel] 12:20:01
So it's it's doable
[Douglas Benjamin] 12:20:05
So then we just have to make sure that we call out that there's a hop that's required
[Dirk Hufnagel] 12:20:12
Yeah, I mean, we. We tried. I don't know if you ever tried.
[Dirk Hufnagel] 12:20:15
The multi hop. We We tried it through, nurse, and it just worked
[Dirk Hufnagel] 12:20:21
So we had nurse. Currently We have nurse currently integrated via the still existing good Ftp.
[Dirk Hufnagel] 12:20:25
Integration which will eventually go away. But it's still there, for now and then both nurse and hey, I'll see a data where integrated into be a global. Online. And then basically it's it's you can configure.
[Dirk Hufnagel] 12:20:41
Configure the roo system. So that when you, when you put in a rule, we create some data, theta it automatically. First, that's a good ftp trap transfer to nurse and then immediately global online transfer from nurse to theta
[Douglas Benjamin] 12:21:02
but will that work? When nurse goes to the next generation, or globus
[Dirk Hufnagel] 12:21:07
No, but that's that's what the work with nurse, where the work with nurse on the d interface is important, because that eventually hopefully will replace the good fft integration which which is deprecated since many years and will go away
[Douglas Benjamin] 12:21:28
So Sam, us is planning to keep nurse in the Hpc data flow path for essentially Nsf.
[Douglas Benjamin] 12:21:39
And other doe. Hpcs
[Douglas Benjamin] 12:21:44
Versus putting Fermi lab in the path, so that Fermi lab becomes the connector
[Dirk Hufnagel] 12:21:45
Yes, I'm
[Dirk Hufnagel] 12:21:53
where we exactly put the multi hop is still to be decided, and ask, is is an obvious candidate.
[Dirk Hufnagel] 12:21:58
But we also, I think we have tattoos with global online licenses.
[Dirk Hufnagel] 12:22:02
So that would be some that would be an alternative option that we have
[Douglas Benjamin] 12:22:11
because I have less uses, you know, as the Hop
[Dirk Hufnagel] 12:22:14
Yeah.
[Dirk Hufnagel] 12:22:23
I mean the at the moment, at the level of transfers, we need to do to the to the Lcf.
[Enrico Fermi Institute] 12:22:29
See.
[Dirk Hufnagel] 12:22:30
It's it's not that important where the hop location is.
[Dirk Hufnagel] 12:22:33
If we scale up Lcf Usage and we really looking at the future.
[Dirk Hufnagel] 12:22:38
That's like heavy on like data reconstruction, or so then it becomes, and more important question, because that's potentially a lot of traffic you have to multi-hop
[Enrico Fermi Institute] 12:22:54
Okay.
PEERINGS & ANYTHING ELSE
[Dirk Hufnagel] 12:23:08
and then we had a point here that we on on network traffic and pairings to improve connectivity and reduce the limited e rate cost.
[Dirk Hufnagel] 12:23:18
I think we had an interesting presentation from me, as not yesterday, about the connectivity side of things.
[Dirk Hufnagel] 12:23:22
I don't think we got anywhere with the reduce unlimited egret cost.
[Dirk Hufnagel] 12:23:26
That's kinda that's more. That's not so much a question of the how this, how the the networks are connected, and what peering how the peering is set up but more question of what type of cost model you have you have a subscription or you use a cloud that doesn't
[Dirk Hufnagel] 12:23:42
have egret. Yeah, it seems that's the outcome I get out of this Berkshire
[Dirk Hufnagel] 12:23:50
And then there's an open anded question, What else is there anything?
[Dirk Hufnagel] 12:23:54
We forgot to cover here that that could help with the without our Hbc.
[Enrico Fermi Institute] 12:24:12
and I think that's that's what we have for this session.
[Enrico Fermi Institute] 12:24:18
Call current standards.
[Enrico Fermi Institute] 12:24:23
Yeah, So you know, if there are other things that we that we should talk about, for you know, facility, features, and policies, or you know any of the the topics that we covered in previous days I think it, would be a good time, to bring them up now
[Enrico Fermi Institute] 12:24:44
otherwise we can. We can go about the session a little early
[Paolo Calafiura (he)] 12:24:54
when do we reconnect? If we
[Enrico Fermi Institute] 12:24:57
the next session will be at at one o'clock central time.
[Paolo Calafiura (he)] 12:25:03
Okay.
[Enrico Fermi Institute] 12:25:17
seeing people disconnect. So maybe we'll just go ahead and and and close out, and then resume in an hour and a half
[Dirk Hufnagel] 12:25:23
sounds good
[Enrico Fermi Institute] 12:25:24
Okay, So it's guessing
[Paolo Calafiura (he)] 12:25:24
hi folks.
[Fernando Harald Barreiro Megino] 12:25:25
okay.