huang zuxing blog @ home the quieter you become, the more you are able to hear.

28Apr/17Off

fab7lsfhome uptime

fab7lsfhome

Filed under: IT Comments Off
3Jan/17Off

“听我的”, 服务的转变

N年前一个朋友在我家人面前描述他的工作内容,在总结时说“我是权威,我说了算”。当时我淡淡一笑而过。(心里在问,你的客户,你的学生,同意你的东西吗?)

去年2016在法国,到了一家全是盲人服务员的米其林三星餐馆吃晚饭,我们没有菜谱选择,餐厅没有灯光,全黑。坐下来,手摸到餐具;食物上来就吃,你看不见你将要吃到什么,只有到了嘴里,慢慢品尝,才知食材是什么,或者也有部分你吃不出它是什么。

如同那些私人私家菜馆,你去吃饭前,你不知厨师准备了什么,直到上菜后。大多数客人用好奇心去吃,满意而归。

也如同苹果手机,开始它不会问你需要什么功能,你买来用就行。(那么多人喜欢它)

同样现在罗振宇的节目逻辑思维,跨年演讲,如同文化的私房菜,听之前,你不需要知道他要讲什么,来听就行,包管你能得到或品尝到一些不同的文化信息,然后可能还想听下一场。

这些模式,要成功,就需要服务的提供者的诚信,努力,辛勤劳作。

此文就是记录描述一下,“听我的” 这种服务。(用这种服务时,我们求知探索, 但我们也不要放弃自己的判断。)

17Oct/16Off

Our cluster daily job throughput

After merged a few pools into a single cluster, daily job number throughput, average is around 150K.

image

Filed under: eda, IT Comments Off
17Oct/16Off

disable ssh/scp , configure freenx login only

Friend asked how to disable users ssh or scp to the machine which has freenx installed .   only allow users nxclient login.

1. enable access.so in /etc/pam.d/system-auth

access.so

 

 

 

 

 

2. configure /etc/security/access.conf ( please read this file,  follow the format)

below is a simple one, only allow user mike nxclient login; and allow user jackie ssh from 192.168.10.0/24

+ : root : ALL
+: jackie:192.168.10.0/24
+:mike:localhost
+:mike:localhost.localdomain
+ : nx : ALL
- : ALL : ALL

 

Filed under: IT Comments Off
6Jun/16Off

free_slot

In case EDA people search those key words,  I might help to answer the questions.

Since 2006, we use below concepts:

free_slot = total compute node cpu number in cluster

calibre_slot = calibre remote cpu number

tflex_slot =  brion tflex remote leaf cpu number

$oreng file , A signal in calibre host runfile

lsf_linux, tapeout_tflex , our scripts to submit mentor graphic calibre jobs and tflex jobs.

with this kind of concept, we can make sure EDA applications which use master and slave compute concept have enough cpu/licenses to run jobs.

26Apr/16Off

vsftpd and filezilla

After upgrade filezilla client version to 3.1.0 above,  user face error message:

received tls alert from the server handshake failed (40)

found filezilla refuses to support cipher rc4.

in vsftpd.conf add below:

ssl_ciphers=HIGH

restart vsftpd, issue solved.

 

 

14Aug/15Off

clean those 10+ years cables, improve air flow.

IMAG0460

8Aug/15Off

35

20140923044913583

18Jun/15Off

debug standalone samba server 3.6.9 on redhat 6.4 with ldap auth

in smb.conf, set log level to 7 , restart samba service.

use client to map share folders,  check the log,  found below related errors:

1Dec/14Off

This is the final how it looks like

rack_cable

23Nov/14Off

HP Apollo 6000 (2014)

After deployed HP Apollo 6000, like to high light below limitation as HP sale team  didn't mention those before :

1.  Putting 4 or 5 switches in the middle of rack is not a good idea,  hot air come out from the middle of rack and suck into top level chassis, hot spot creates ;  recommend to put switch on top of rack: [ updated this on 12/Dec/2014, at the end after read HP doc by ourselves, we found HP network team sent us the wrong fan model, which push hot air to front cold aisle although we have set fan direction " power to port" , after replaced the fan with correct model, no more such issue.]

17186-019a-Door-off-lo-res_apollo6000 IMAG3180_apollo_heatp

2.  APM reports node power wrongly, in the max load,  it reports every compute node uses 170w+ ; total 140 nodes  x 170w  = 23.8kw , but the actual is,  total whole rack , 140 nodes  use power 13kw only .

Apollo_APM_power_report1 Apollo_APM_total_power_report

 

3.  Power shelf limitation:  for PSU,  it is  N+N;  but if the AC to DC board is failed, all chassis which use this power shelf  will be power off,  each power shelf could connect 6 chassis, the impact is huge  .

001zu03_apollo_power

 

4.  Each Chassis has 5  fan modules, each  module has 2 fans; if one of module is down, whole chassis will be down.  if one of 10 fans is down,  to replace the fan module, engineer must put in new module within 60 seconds after remove the faulty fan module.  if not , the whole chassis might be down.

 

18Nov/14Off

Rear Door Heat Exchange from coolcentric Nov/2014

IMAG3190_DCIMAG2828_DC

18Nov/14Off

the simplest way to explain mapreduce

Below copy from internet:

下面这段话是网上其他人用最简短的语言解释MapReduce:

We want to count all the books in the library. You count up shelf #1, I count up shelf #2. That's map. The more people we get, the faster it goes.

我们要数图书馆中的所有书。你数1号书架,我数2号书架。这就是“Map”。我们人越多,数书就更快。

Now we get together and add our individual counts. That's reduce. 

现在我们到一起,把所有人的统计数加在一起。这就是“Reduce”。 

Filed under: IT Comments Off
22Apr/14Off

Inrack chilled water cooling system 2014

Site 1, chilled water is 13C, use Rittal LCP and Rittal CMC :
IMAG2211IMAG2261IMAG2259


Site 2, chilled water is 5C, use RC Group coolside, Rittal CMC:
IMAG2398IMAG2395IMAG2938

30Dec/12Off

转载:热量是数据中心电子设备的敌人

http://www.cento.cn/news/html/?584.html

热量是数据中心电子设备的敌人

热量是电子设备的敌人。根据 BCC, Inc. 的“Report GB-185R”,超过半数的电子故障由温度造成,并且由于这些热量源于不断升高的晶体管密度和运行速度,我们可以得出一个合乎逻辑的结论:在其他条件均相同的情况下,电子故障率也将不断攀升。

Filed under: IT Continue reading
3Mar/12Off

cc eal

Common Criteria的7级安全评估等级

评估等级

审验时间

内容

安全等级的说明

EAL 1

3个月

功能检测(Functionally Tested)

只检测一个产品最基础的功能,不包含任何安全性的评估,不保证安全性。取得EAL1验证等级,只表示这个产品能够开机、执行,不涉及任何安全性议题。

EAL 2

6个月

结构检测(Structurally Tested)

 EAL 2安全程度比EAL1高,EAL 2才开始会作安全上的检测。会用宽松的标准作适当的原始码检查,但严谨程度低于EAL 3。

EAL 3

9~12个月

系统测试及检查(Methodically Tested and Checked)

 EAL 3更严格检查程序代码,但不需要重新翻修程序,也不会打断整个开发流程。EAL 3不像EAL 4必须评估漏洞修补的成本,所以EAL3还是采用比EAL 4宽松的安全检测标准。

EAL 4

12~16个月

系统设计、测试及审查(Methodically Designed, Tested and Reviewed)

EAL 4是最常见的安全性验证标准,例如Windows 2000、NetWare等都取得EAL 4以上的认证。只有到EAL 4时,大家才会接受这个验 证,能有效确保系统的安全性,而供货商也会将漏洞修补包含在安全性检测基本项目中。

EAL 5

18~24个月

半正规设计和测试(Semiformally Designed and Tested)

EAL 5是一个比EAL 4要求更周延的的安全验证等级,必须经过非常严格的验证流程,花费的时间、成本都比EAL 4还高。但不见得需要取得EAL 5验证。

EAL 6

半正规查证设计和测试 (Semiformally Verified Design and Tested)

EAL 6验证如同是针对客户提出某些高风险、特殊的安全要求,不惜耗费时间、金钱,一定要达到客户的安全性要求。要取得EAL6的验证。安全是EAL 6的基本要求,这意味着,整个系统的开发都必须奠基在安全的要求上。

EAL 7

正规查证设计和测试 (Formally Verified Design and Tested)

 EAL 7只有用于极度高度风险的系统,对系统的要求不只是能用而已,还必须具有极度高度的风险性要求。金钱和时间花费难以想象,只会用在具有特殊安全功能的特定系统中。

Filed under: IT No Comments
8Feb/12Off

Beginning of 2012, we saw this.

Tagged as: , , No Comments
6Oct/11Off

”活着就是为了改变世界“ Steve Jobs

1997 got an apple notebook.

..ipod..

2010 got Ipad and Iphone for my baby girls.

感谢你带来的一切。

Tagged as: No Comments
23Apr/11Off

Isilon cluster

new toy

Filed under: IT No Comments
14Mar/11Off

apple kiss TSMC

苹果芯片代工选择与台积电合作。

Tagged as: No Comments
26Jan/11Off

the cabling I hate

going to take over one of department IT stuff, when saw their cabling, hate it.

Filed under: IT No Comments
7Nov/10Off

bee arrived

Arrived

box

Unpacked
blade

Mounted
blade center

Tagged as: , No Comments
26Aug/10Off

After Sun microsystem

sge6.2u6, come with a 90 day time limited eval license , no more free sge.

Tagged as: , No Comments
9Jun/10Off

top 2

"Nebulae, which is located at the newly build National Supercomputing Centre in Shenzhen, China, achieved 1.271 PFlop/s running the Linpack benchmark, which puts it in the No. 2 spot on the TOP500 behind Jaguar. In part due to its NVidia GPU accelerators, Nebulae reports an impressive theoretical peak capability of almost 3 petaflop/s – the highest ever on the TOP500."

我朝威武!

Tagged as: No Comments
16Apr/10Off

Install freeNX0.7.3 on redhat 5.4

NXserver  from nomachine.com  limits at 2 session using their free version,   after read the install doc in freeNX0.7.3,  the  way I install it:

Tagged as: , Continue reading
8Feb/10Off

opensuse and citrix linux client

Installed opensuse version 11.2 x86_64 on my hp6910p notebook,  download citrix  linuxx86-11.0,  failed to use wfcmgr, ldd shows missing libXm.so.4,  the citrix web site only has 32 bit  client binary download, dowload openmotif-libs-32bit-2.3.1-10.1.x86_64  to install.

the result:

Screenshot

Filed under: IT No Comments
4Dec/09Off

开复要什么人

记者:如何预先判断一份创业者的简历是否符合要求?

李开复:首先我看他做过什么,如果创过业,那我看是什么,为什么做,商业计划怎样,是否成功,效果好不好,失败之后是否总结了该学到的教训。然后看你周围的人、团队的人、用户、老板、客户怎么评估你。

2Dec/09Off

Vbox 3.1

Since last year, start to use Sun Virtual Box version 2.x.x.

Happy to know Version 3.1 come out.

"Version 3.1 of Sun's VirtualBox enables users to move running virtual machines between disparate physical hosts, including systems running different operating systems or different processors, such as Intel and AMD chips. In addition, the VMs can be moved between servers and clients"

Tagged as: , , , No Comments
24Nov/09Off

text 2 ps 2 pdf, encrypt pdf, mailx attached

If we have a text file , in Linux machine we want to convert it into encrypted pdf file and send it out by email.

convert text file to ps format

>enscript -p  abc.ps abc.txt

convert ps file to pdf format

>ps2pdf abc.ps abc.pdf

encrypt pdf file

>pdftk abc.pdf  output encrypt_abc.pdf  owner_pw foo user_pw abc

send email with attached file using mailx command

file "message" is the mail content you want to send, encrypt_abc.pdf is the attached file

>(cat message ; uuencode encrypt_abc.pdf  encrypt_abc.pdf) | mail -s test abc@abc.com

users abc get the email, use password abc  to open the encrypt_abc.pdf file.

Tagged as: , , , , No Comments