Disable IPMI watchdog in fox

Fixes: rarias/jungle#231

CONTRIBUTING.md

@@ -0,0 +1,24 @@
+# Contributing guidelines for jungle
+
+We welcome contributions from other people, provided that they follow these
+guidelines.
+
+## Git commit rules
+
+The commit title must be strictly 50 character or less, the commit body must
+wrap at 72 characters.
+
+Every commit to be merged in master must be reviewed by at least one other
+member and have the corresponding `Reviewed-by: John Doe <jd@ema.il>` git
+trailer with their name and email.
+
+Commits that fix a particular issue must include the **full URL** to the issue
+in the `Fixes: <url>` trailer.
+
+## LLM are banned
+
+Contributions generated fully or partially by LLMs won't be accepted, you must
+write the code yourself and fully understand what every part does.
+
+Using LLMs to help preparing a contribution is strongly discouraged, as it will
+likely cause you to have gaps of understanding.

README.md

@@ -7,3 +7,5 @@ This repository provides two components that can be used independently:
 
 - NixOS configurations for jungle machines. Use `nixos-rebuild switch --flake .`
   to upgrade the current machine.
+
+Before contributing, please read the [guidelines](CONTRIBUTING.md).

m/apex/configuration.nix

@@ -7,6 +7,7 @@
     ../module/ceph.nix
     ../module/hut-substituter.nix
     ../module/slurm-server.nix
+    ../module/nfs-home-bind.nix
     ./nfs.nix
     ./wireguard.nix
   ];
@@ -68,6 +69,7 @@
 
   # Disable SSH login with password, allow only keypair
   services.openssh.settings.PasswordAuthentication = false;
+  services.openssh.settings.X11Forwarding = true;
 
   networking.firewall = {
     extraCommands = ''

m/common/base/users.nix

@@ -108,7 +108,7 @@
         home = "/home/Computational/dbautist";
         description = "Dylan Bautista Cases";
         group = "Computational";
-        hosts = [ "apex" "hut" "tent" "raccoon" ];
+        hosts = [ "apex" "hut" "tent" "raccoon" "owl1" "owl2" ];
         hashedPassword = "$6$a2lpzMRVkG9nSgIm$12G6.ka0sFX1YimqJkBAjbvhRKZ.Hl090B27pdbnQOW0wzyxVWySWhyDDCILjQELky.HKYl9gqOeVXW49nW7q/";
         openssh.authorizedKeys.keys = [
           "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAb+EQBoS98zrCwnGKkHKwMLdYABMTqv7q9E0+T0QmkS dbautist@bsc-848818791"

m/fox/configuration.nix

@@ -25,6 +25,9 @@
   boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ];
   boot.kernelModules = [ "kvm-amd" "amd_uncore" "amd_hsmp" ];
 
+  # Disable IPMI watchdog as the BMC is not stable
+  boot.blacklistedKernelModules = [ "ipmi_watchdog" ];
+
   hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
   hardware.cpu.intel.updateMicrocode = lib.mkForce false;
 

m/module/nfs-home-bind.nix

@@ -0,0 +1,8 @@
+{
+  # Alias nfs home
+  fileSystems."/nfs/home" = {
+    device = "/home";
+    fsType = "none";
+    options = [ "bind" ];
+  };
+}

m/module/slurm-common.nix

@@ -5,8 +5,8 @@
     controlMachine = "apex";
     clusterName = "jungle";
     nodeName = [
-      "owl[1,2]  Sockets=2 CoresPerSocket=14 ThreadsPerCore=2 Feature=owl"
-      "fox       Sockets=8 CoresPerSocket=24 ThreadsPerCore=1"
+      "owl[1,2]  Sockets=2 CoresPerSocket=14 ThreadsPerCore=2 MemSpecLimit=4096 RealMemory=128797"
+      "fox       Sockets=8 CoresPerSocket=24 ThreadsPerCore=1 MemSpecLimit=4096 RealMemory=773659"
     ];
 
     partitionName = [
@@ -41,9 +41,9 @@
       # multiple hardware threads (or CPUs).
       SelectType=select/cons_tres
 
-      # Ignore memory constraints and only use unused cores to share a node with
-      # other jobs.
-      SelectTypeParameters=CR_Core
+      # Both cores and memory are consumable resources, so we can put a limit in
+      # memory as well.
+      SelectTypeParameters=CR_Core_Memory
 
       # Required for pam_slurm_adopt, see https://slurm.schedmd.com/pam_slurm_adopt.html
       # This sets up the "extern" step into which ssh-launched processes will be
@@ -58,7 +58,9 @@
 
     extraCgroupConfig = ''
       CgroupPlugin=cgroup/v2
-      #ConstrainCores=yes
+      ConstrainRAMSpace=yes
+      ConstrainSwapSpace=yes
+      AllowedRAMSpace=99
     '';
   };
 

m/owl1/configuration.nix

@@ -9,6 +9,7 @@
     ../module/slurm-firewall.nix
     ../module/debuginfod.nix
     ../module/hut-substituter.nix
+    ../module/nfs-home-bind.nix
   ];
 
   # Select the this using the ID to avoid mismatches

m/owl2/configuration.nix

@@ -9,6 +9,7 @@
     ../module/slurm-firewall.nix
     ../module/debuginfod.nix
     ../module/hut-substituter.nix
+    ../module/nfs-home-bind.nix
   ];
 
   # Select the this using the ID to avoid mismatches

pkgs/intel-oneapi/deb/update.hs

@@ -1,3 +1,24 @@
+-- Copyright (c) 2026 Barcelona Supercomputing Center (BSC)
+-- SPDX-License-Identifier: MIT
+--
+-- Permission is hereby granted, free of charge, to any person obtaining a copy
+-- of this software and associated documentation files (the "Software"), to deal
+-- in the Software without restriction, including without limitation the rights
+-- to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+-- copies of the Software, and to permit persons to whom the Software is
+-- furnished to do so, subject to the following conditions:
+--
+-- The above copyright notice and this permission notice shall be included in
+-- all copies or substantial portions of the Software.
+--
+-- THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+-- IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+-- FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+-- AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+-- LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+-- OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+-- SOFTWARE.
+
 {-# LANGUAGE LambdaCase #-}
 {-# LANGUAGE OverloadedStrings #-}