ping @jmchilton

At least the internal roles should switch to this. Trickier for the published roles since the SSL role isn't published and isn't quite as generalized as the others (or rather, we don't necessarily want people to be required to use our SSL role if they want to enable SSL when using our nginx role - but maybe that's ok).

When trying to connect to https://getgalaxy.org , Firefox generates the "Connection is not secure" page because the SSL certificate is for *.galaxyproject.org . See also https://www.sslshopper.com/ssl-checker.html#hostname=getgalaxy.org

Someday we should be running all tools this way, and when we have to disable tools for security problems it would be good to have a Dockerized destination we could send them to in order to keep them in the tool panel.

• SLURM worker node needs to have a Docker service running.
• Add <param id="docker_enable">True</param> to the destination for the tool.
• Use <param id="docker_container_id_override">XXX</param> to hardcode the image ID at first to use for the tool - the images will likely all exist on quay.io. Longer term we can let Galaxy find the image ID from the requirements but this reduces potential problems until we get things robust and running.

Alternatively we could use Singularity. I can provide instructions for that as well.

I added some queries to gx-admin to try to figure out what tools are broken, but we never figured out how to get them into Grafana.

These include:

• tools-likely-broken https://github.com/galaxyproject/gxadmin/blob/main/parts/22-query.sh#L2446
• tool-errors https://github.com/galaxyproject/gxadmin/blob/main/parts/22-query.sh#L2398
• tool-new-errors https://github.com/galaxyproject/gxadmin/blob/main/parts/22-query.sh#L2350

It would be cool to run these periodically and make the results available somewhere. Grafana would be good but I really like Alex's approach of depositing things to Github also:

• https://github.com/almahmoud/anvil-misc/tree/master/reports/anvil-production/

This would be pretty open and pretty ideal for reasoning about tools. An arbitrary static site with index available would be totally fine also.

Another useful query I'd like to deposited somewhere would be:

• tool-usage https://github.com/galaxyproject/gxadmin/blob/main/parts/22-query.sh#L44

I had to run npm install -g grunt-cli manually in order to get qunit tests working; this needs to be added to ansible