From e88805947e1e4b9396f63969fc32a1aca0425d2f Mon Sep 17 00:00:00 2001
From: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
Date: Thu, 14 Sep 2023 15:45:43 +0200
Subject: [PATCH] Open ports in firewall of compute nodes

---
 m/module/slurm-firewall.nix | 8 ++++++++
 m/owl1/configuration.nix    | 1 +
 m/owl2/configuration.nix    | 1 +
 3 files changed, 10 insertions(+)
 create mode 100644 m/module/slurm-firewall.nix

diff --git a/m/module/slurm-firewall.nix b/m/module/slurm-firewall.nix
new file mode 100644
index 0000000..8f52022
--- /dev/null
+++ b/m/module/slurm-firewall.nix
@@ -0,0 +1,8 @@
+{ ... }:
+
+{
+  networking.firewall = {
+    # Required for PMIx in SLURM, we should find a better way
+    allowedTCPPortRanges = [ { from=1024; to=65535; } ];
+  };
+}
diff --git a/m/owl1/configuration.nix b/m/owl1/configuration.nix
index 8255898..5afda72 100644
--- a/m/owl1/configuration.nix
+++ b/m/owl1/configuration.nix
@@ -4,6 +4,7 @@
   imports = [
     ../common/main.nix
     ../module/ceph.nix
+    ../module/slurm-firewall.nix
   ];
 
   # Select the this using the ID to avoid mismatches
diff --git a/m/owl2/configuration.nix b/m/owl2/configuration.nix
index 0af3c40..9636760 100644
--- a/m/owl2/configuration.nix
+++ b/m/owl2/configuration.nix
@@ -4,6 +4,7 @@
   imports = [
     ../common/main.nix
     ../module/ceph.nix
+    ../module/slurm-firewall.nix
   ];
 
   # Select the this using the ID to avoid mismatches