Discussion:
- The only problem of the DESY DLaaS is the OIDC authentication as it needs to go through the ESCAPE IAM
- A couple of things changed in th datalake singleuser Docker image for DESY wrt ESCAPE one:
- configure_jupyter scripts
- DESTINATION_RSE is DESY-DCACHE
- RUCIO_CONFIG had to be slightly changed to adapt to the linux user id specific to dcache
- permissions on config files
- Paul Millar: Could we edit the Docker file to be more universal and adapt to everyone's needs so that only some env variables need to be changed? Martin Barisits: yes we can accept some pull requests but in the long run we should identify someone taking care of this.
- The authentication is done through X509 as a rucio client, if this happens anyone can access the ESCAPE Rucio services
- Not any short temr plans to run heavy workloads there, rather connect to external batch system/slurm