The main mission of the Digital Data and Operations Engineering Department (INDEx) is to develop the information systems, IT services and IT and audiovisual infrastructure required to achieve the laboratory’s strategic objectives. These missions are articulated around 4 axes:
NDEx, via the recruitment of a “Full Stack” developer on a fixed-term contract, is responsible for the development of the laboratory’s Information System and associated processing, the basis of our future Intranet.
We manage most of the transversal services offered to the whole community. Obviously, the “technical” services that are essential but not very visible to users, such as virtualisation platforms, DHCP, DNS, supervision software and all server operating systems.
But also services that are essential for all users, in particular authentication (LDAP & Active Directory), mail and associated services (imap, webmail, Sympa mailing lists), disk space and centralised backup.
In response to new needs, we have also deployed cloud-based solutions to host a shared storage service (owncloud) and enable collaborative work.
Services dedicated to research teams:
We assist LIRMM research projects with their dedicated computing resources needs. In particular, we formalise hardware architectures adapted to the needs and budgets of the teams, while ensuring the homogeneity of the installations. We provide operating systems adapted to the specific needs of these research platforms, and contribute to the deployment of business applications more and more frequently;
INDEx supports all the laboratory’s users, from the use of administrative workstations to the support of the business applications of the research platforms, not forgetting the many video-conferencing tools made available.
The INDEx service takes care of all aspects of digital security, from recommendations on the use of tools to emergency intervention in the event of an incident being detected. We pay particular attention to the following aspects
Encryption of all the laboratory’s workstations: since the beginning of 2019 we encrypt all the laboratory’s workstations (in accordance with the CNRS note of Nov 2018). In order to cover the whole park, we have to adapt the techniques used to the specific needs of certain research teams (dual boot, variety of Linux distributions).
Deployment of software updates on all servers, centralisation of traces and conservation for 1 year.
At the network level, implementation of functional vlans and management of firewalls, in particular security rules and flow analysis (IPS) towards the laboratory’s external connection (HDMON-Renater).
In view of the laboratory’s transition to ZRR, we are finalising the laboratory’s PSSI and its implementation.
The RéseauX department manages all of the laboratory’s computer equipment, from the server room to most of the workstations, including the data network, printers and videoconferencing equipment.