- ISG-news - lists.phys.ethz.ch

[ISG News] New service: single sign-on
by Christian Herzog 26 Aug '26

26 Aug '26

ISG News has posted a new item, 'New service: single sign-on' We're pleased to announce the release of a new feature: single sign-on for D-PHYS services. It will allow you to reuse an existing login session from one website to authenticate additional services. It will also give you the option to use passkeys to further simplify your login experience. In order to improve account security, password logins will require an MFA step (the same TOTP mechanism ETH ID uses). Here's the timeline: the Authentik auth provider website is available immediately. in order to give you ample time to prepare your TOTP and passkeys and familiarize yourself with the auth flow, there's a 3 week grace period in which only two minor services (the LTS dashboard and [later this week] the MAC registration) use the new auth method. This way, you won't be surprised by essential services suddenly requiring MFA while still giving you two websites to play with. after September 21, we will start moving services from the current LDAP login to Authentik auth via OIDC. Since this migration can be quite complicated and requires thorough testing, we will perform it one service at a time, starting with Backupbox, the D-PHYS events and the mailing list interface. Afterwards, we'll migrate Roundcube webmail. if we encounter issues with any service, we can immediately revert to LDAP login. So please head over to Authentik and set up your MFA token. Authentik will guide you through the process during your first login. Just use the same authenticator app you already have in place for your ETH account. If you'd like to give passkeys a go, our service documentation has all the details. You may view the latest post at https://isg.phys.ethz.ch/2026/08/26/new-service-single-sign-on/ You received this e-mail because you asked to be notified when new updates are posted. Best regards, Christian Herzog daduke(a)phys.ethz.ch

1 0

[ISG News] group-data server maintenance, July 27
by Christian Herzog 21 Jul '26

21 Jul '26

ISG News has posted a new item, 'group-data server maintenance, July 27' Scheduled maintenance will be taking place on our group-data.phys.ethz.ch server on Monday, July 27, starting at 16:30. The service will be down for approximately 5 hours. We will be replacing some hardware and upgrade the base system. All group shares will be affected except IPA and IGP. For emergency cases, you'll have read-only access to the backups as described here. You may view the latest post at https://isg.phys.ethz.ch/2026/07/21/group-data-server-maintenance-july-27/ You received this e-mail because you asked to be notified when new updates are posted. Best regards, Christian Herzog daduke(a)phys.ethz.ch

1 0

[ISG News] Upgrade of Debian Linux workstations
by Sascha Giger 23 Apr '26

23 Apr '26

ISG News has posted a new item, 'Upgrade of Debian Linux workstations' Between May and June 2026, all Debian Linux workstations will be upgraded to the latest stable version, 'Trixie'. This is because the current version, “Bookworm”, will reach the end of its life on 9 June 2026. What does this mean for you? Almost nothing will change in your daily work routine. Your familiar work environment will remain the same and no major changes are expected. The upgrade will primarily update the installed software to a newer version. Do you need to do anything? No, you don't need to do anything. We will perform the upgrade in the background. Please note that your system will restart after the upgrade. When will the upgrade take place? The upgrade is scheduled to take place between May and June 2026. The time of each upgrade will be coordinated in advance. Please note that, due to the upcoming end of life (EOL), it is not possible to delay this indefinitely. Migration is mandatory for all workstations. Beta test If you have a spare workstation that could participate in beta testing, please get in touch with us now. Questions or issues? If you have any questions before or after the upgrade, please contact us at isg(a)phys.ethz.ch. You may view the latest post at https://isg.phys.ethz.ch/2026/04/23/upgrade-of-debian-linux-workstations/ You received this e-mail because you asked to be notified when new updates are posted. Best regards, Sascha Giger giger(a)phys.ethz.ch

1 0

[ISG News] new ISG staff member
by Christian Herzog 17 Dec '25

17 Dec '25

ISG News has posted a new item, 'new ISG staff member' It is my pleasure to welcome Ludwig Bellstedt into our group. He joins us to complete the Linux team. Welcome Ludwig! You may view the latest post at https://isg.phys.ethz.ch/2025/12/17/new-isg-staff-member-9/ You received this e-mail because you asked to be notified when new updates are posted. Best regards, Christian Herzog daduke(a)phys.ethz.ch

1 0

[ISG News] 2025 in review
by Christian Herzog 11 Dec '25

11 Dec '25

ISG News has posted a new item, '2025 in review' This post is meant to give you a short overview of what has been accomplished in D-PHYS IT by ISG this year. We’ve been hard at work to further improve and extend our services for you, our customers. Some highlights of 2025: Lab networks: in order to assist the research groups with their increasingly complex networking requirements, we introduced a new isolated networking scheme. Managed workstations: the migrations to Windows 11 and Debian Bookworm have been completed. Storage and backup: we modernized the backup infrastructure and implemented significant behind-the-scenes improvements. The disk space occupied by data and backup grew only slightly from 5.3 PiB to 5.4 PiB. Infrastructure work: our Debian and Ubuntu mirror has been migrated to new hardware. Windows software deployment: we're currently beta-testing the Baramundi service to replace our long-established Windows software deployment. Security (Linux): we had to develop tooling to detect and protect from DDOS/AI scraping. Our firewall now limits connections from 90+ cloud hosting providers on servers and is more restricted on workstations. Matrix/Element: usage almost doubled to 1461 active users. Knowledge management: together with 3 research groups we're currently evaluating an AI system to interactively explore the knowledge hidden in lab journals and publications. Outages: apart from some short-term network interruptions, our systems were very stable in 2025. Apprentice: our apprentice Vanessa successfully completed her training in August. Her successor Alessio will start in February. I would like to take this opportunity to thank my whole team for their hard and dedicated work all year long. Happy Holidays and see you in 2026! You may view the latest post at https://isg.phys.ethz.ch/2025/12/11/2025-in-review/ You received this e-mail because you asked to be notified when new updates are posted. Best regards, Christian Herzog daduke(a)phys.ethz.ch

1 0

[ISG News] groupdata downtime
by Stephan Mueller 01 Dec '25

01 Dec '25

ISG News has posted a new item, 'groupdata downtime' Upcoming downtime: XFSv5 on groupdata network shares There will be a larger maitainance downtime for all D-PHYS grouphares. Other shares like Web, IPA, ... are not affected. The downtime is scheduled for: Saturday, January 3rd 2026 20:00 -- Sunday, January 4th 2026 10:00 You will not be able to access any shares on groupdata during this time. Afterwards everything will just work as before. If this will disrupt any essential operation, let us know asap! There will be another reminder closer to the downtime. Technical background: We need to upgrade the XFS filesystem metadata. This cannot be done in place, so we have to backup, reformat and restore all shares. We need to sync roughly 180TB so it will just take some time. You may view the latest post at https://isg.phys.ethz.ch/2025/12/01/groupdata-downtime/ You received this e-mail because you asked to be notified when new updates are posted. Best regards, Stephan Mueller stephan.mueller(a)phys.ethz.ch

1 0

[ISG News] The end of Windows 10 is coming…
by Christian Ringger 30 Jun '25

30 Jun '25

ISG News has posted a new item, 'The end of Windows 10 is coming…' The time has come to upgrade your Windows 10 computer to Windows 11 or a Windows 10 LTSC version - the extended support for Windows 10 ends on October 14, 2025 (Windows lifecycle) Why can I no longer use Windows 10 on the ETH network after the end of 2025? Only operating systems with vendor-provided security support are allowed to connect to the ETH network. ETH Zurich Acceptable Use Policy for IT Resources (BOT) and Appendix What should I do now? If you are using a computer with preinstalled Windows 10 for your daily work, please upgrade it to Windows 11 by the end of this year at the latest. The easiest way is to use the "Microsoft Media Creation Tool" available here. This process is called an "in-place upgrade". All applications and configuration settings should be preserved. If your computer is installed with the Windows 10 Education license from the ETH IT Shop, order Windows 11 Education from the IT Shop and use it for the upgrade. If your computer is located in a lab and needs to be highly available for collecting measurement data, you may use a Windows 11 LTSC version instead of the Education version. Please contact the IT administrator within your group. They should be able to assist you or contact us if further help is needed. If you believe you cannot upgrade your computer or need help choosing the right upgrade path, please refer to our README for possible solutions or contact us. ⚠️ Please note: At some point, the network security group of Informatikdienste will begin scanning for remaining Windows 10 computers. These devices will then be disconnected from the network. You may view the latest post at https://isg.phys.ethz.ch/2025/06/30/the-end-of-windows-10-is-coming/ You received this e-mail because you asked to be notified when new updates are posted. Best regards, Christian Ringger ringger(a)phys.ethz.ch

1 0

[ISG News] 2024 in review
by Christian Herzog 16 Dec '24

16 Dec '24

ISG News has posted a new item, '2024 in review' This post is meant to give you a short overview of what has been accomplished in D-PHYS IT by ISG this year. We’ve been hard at work to further improve and extend our services for you, our customers. Some highlights of 2024: Infrastructure work: the Vaultwarden password manager was introduced as a new service. Email: As part of our continous email server improvements, we updated the Mailman mailing list software to a new major release and drastically increased IMAP search performance. Linux workstations: we overhauled the managed Linux workstations setup and migrated almost all Ubuntu workstations to Debian Bookworm. Storage: we streamlined the storage infrastructure and implemented significant behind-the-scenes improvements. The disk space occupied by data and backup grew from 5.1 PiB to 5.3 PiB. ISG lecture series: we teamed up with our SIS colleagues and managed to increase attendance of the Basics of Computing Environments for Scientists lecture series. Matrix/Element: We started collaborating with EPFL who joined the federation. We also received the first spam and implemented countermeasures and additional logging. This year we counted 819 active users on 2978 devices (1014 Windows, 472 Mac, 370 Linux, 534 Android, 276 iPhone, 105 iPad), who sent 1'158'897 messages in 6'740 rooms created on our server. Our users also participated in 1'746 other (and 1'563 spam) rooms with 1'790'894 messages. Outages: apart from some short-term network interruptions, our systems were very stable in 2024. OS upgrades: almost all managed Windows workstations have been upgraded to Windows 11 and the first Macs to Sequoia. Apprentice: we take part in the new Wayup apprenticeship pilot project and could welcome first Eric and now Vanessa into our team. I would like to take this opportunity to thank my whole team for their hard and dedicated work all year long. Happy Holidays and see you in 2025! You may view the latest post at https://isg.phys.ethz.ch/2024/12/16/2024-in-review/ You received this e-mail because you asked to be notified when new updates are posted. Best regards, Christian Herzog daduke(a)phys.ethz.ch

1 0

[ISG News] niche PSA: disabling SMB wide links
by Christian Herzog 07 Oct '24

07 Oct '24

ISG News has posted a new item, 'niche PSA: disabling SMB wide links' This announcement will probably not affect too many users, but it might have some impact and we can't narrow down the recipient space. For some time now, our group shares on groupdata.phys.ethz.ch, when mounted via SMB, allowed so-called wide links - they point from one group share to a place outside of this share (usually to another share). For $complicated_reasons we have to disable those wide links. This will break redirection to the target share. We believe this is mainly a convenience issue, but we might not be aware of legitimate use cases. So if you find something broken after Tuesday, October 8, 2024 please get in touch so that we can find a solution. Links within a particular share will still work, but link targets have to be relative (../../papers/thesis.tex) instead of absolute (/home/sharename/documents/papers/thesis.tex). Thanks. You may view the latest post at https://isg.phys.ethz.ch/2024/10/07/niche-psa-disabling-smb-wide-links/ You received this e-mail because you asked to be notified when new updates are posted. Best regards, Christian Herzog daduke(a)phys.ethz.ch

1 0

[ISG News] Network renovation in HPT
by Christian Herzog 02 Oct '24

02 Oct '24

ISG News has posted a new item, 'Network renovation in HPT' This one goes out to all HPT inhabitants. As you might have noticed, the HPT network infrastructure is currently being remodelled. In order to be able to take full advantage of the new uplink cables and access switches, ideally all grey patch cables (from the wall sockets to the devices) should be replaced as well (the blue ones are OK). We do realize that this is not realistic in many (lab) settings, but please swap them out for new cat6 cables whenever you can (they're available in the D-PHYS Shop). Don't hesitate to contact us if you have questions. You may view the latest post at https://isg.phys.ethz.ch/2024/10/02/network-renovation-in-hpt/ You received this e-mail because you asked to be notified when new updates are posted. Best regards, Christian Herzog daduke(a)phys.ethz.ch

1 0