f74ec2bce1
Split xeon specific configuration from base
...
To accomodate the raccoon knights workstation, some of the configuration
pulled by m/common/main.nix has to be removed. To solve it, the xeon
specific parts are placed into m/common/xeon.nix and only the common
configuration is at m/common/base.nix.
Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
2025-10-01 16:40:16 +02:00
ededd2083b
Control user access to each machine
...
The users.jungleUsers configuration option behaves like the users.users
option, but defines the list attribute `hosts` for each user, which
filters users so that only the user can only access those hosts.
Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
2025-10-01 16:40:16 +02:00
35b4a30f2e
Move slurm client in a separate module
...
Reviewed-by: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
2025-10-01 16:40:16 +02:00
845adfc937
Use tmpfs in /tmp
...
The /tmp directory was using the SSD disk which is not erased across
boots. Nix will use /tmp to perform the builds, so we want it to be as
fast as possible. In general, all the machines have enough space to
handle large builds like LLVM.
Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
2025-10-01 16:40:16 +02:00
34628c0e39
BSC packages are no longer in bsc attribute
...
Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
2025-10-01 16:40:16 +02:00
4e333dca21
Don't log SLURM connection attempts from ssfhead
2025-10-01 16:40:16 +02:00
beae9d240e
Enable direnv integration
2025-10-01 16:40:16 +02:00
e925b00489
Remove bscpkgs from the registry and nixPath
...
This is done to prevent accidental evaluations where the nixpkgs input
of bscpkgs is still pointing to a different version that the one
specified in the jungle flake. Instead use jungle#bscpkgs.X to get a
package from bscpkgs.
2025-10-01 16:40:16 +02:00
87871de141
Don't fetch registry flakes from the net
2025-10-01 16:40:16 +02:00
a992b266bb
Enable fstrim service
2025-10-01 16:40:16 +02:00
1b5469af13
Add encrypted munge key with agenix
2025-10-01 16:40:16 +02:00
78c883a274
Remove unused large port hole in firewall
2025-10-01 16:40:16 +02:00
241b888a7c
Allow only some ports for srun
2025-10-01 16:40:16 +02:00
b7aba3d15c
Block ssfhead from reaching our slurm daemon
2025-10-01 16:40:16 +02:00
e35b51cd00
Poweroff idle slurm nodes after 1 hour
2025-10-01 16:40:16 +02:00
2e460f49bd
Add IB and IPMI node host names
2025-10-01 16:40:16 +02:00
e7aa2d3fe3
Add agenix to all nodes
2025-10-01 16:40:16 +02:00
224bafd20d
Reorganize secrets and ssh keys
...
The agenix tools needs to read the secrets from a standalone file, but
we also need the same information for the SSH keys.
2025-10-01 16:40:16 +02:00
8b1fa938ea
Add anavarro user
2025-10-01 16:40:16 +02:00
94b110dc57
Set zsh inc_append_history option
2025-10-01 16:40:16 +02:00
0c5207bd2d
Set zsh shell for rarias
2025-10-01 16:40:16 +02:00
4200e6162d
Enable zsh and fix key bindings
2025-10-01 16:40:16 +02:00
c0ae33fbb5
Keep a log over time with the config commits
2025-10-01 16:40:16 +02:00
ff00c2be8d
Store nixos config in /etc/nixos/config.rev
2025-10-01 16:40:16 +02:00
ad491140f4
Enable watchdog
2025-10-01 16:40:16 +02:00
9f71aae1ff
Also enable monitoring in lake2
2025-10-01 16:40:16 +02:00
a48ae143cc
Move pkgs overlay to overlay.nix
2025-10-01 16:40:16 +02:00
5f2fe97cd4
Add the lake2 hostname to the hosts
2025-10-01 16:40:16 +02:00
71000731c0
Add ceph metrics to prometheus
2025-10-01 16:40:16 +02:00
503a63539c
Add the bay host name
2025-10-01 16:40:16 +02:00
8cb7cf087c
Don't set all_proxy
2025-10-01 16:40:15 +02:00
d92e06d7b7
GRUB version no longer needed
2025-10-01 16:40:15 +02:00
a096a386a0
Kill slurmd remaining processes on upgrade
2025-10-01 16:40:15 +02:00
b30f2bfdd7
Add koro node
2025-10-01 16:40:15 +02:00
9097811cc0
Enable NTP using the BSC time server
2025-10-01 16:40:15 +02:00
83acd40880
Add the ssfhead node as gateway
2025-10-01 16:40:15 +02:00
ba75bf8249
Use our host names first by default
2025-10-01 16:40:15 +02:00
e9845cc76a
Add DNS tools to resolve hosts
2025-10-01 16:40:15 +02:00
d5951483ee
Lower perf_event_paranoid to -1
2025-10-01 16:40:15 +02:00
937d8a7637
Set perf paranoid to 0 by default
2025-10-01 16:40:15 +02:00
798e01f9e6
Add perf to packages
2025-10-01 16:40:15 +02:00
2ca7e7383e
Allow srun to specify the cpu binding
...
The task/affinity plugin needs to be selected.
2025-10-01 16:40:15 +02:00
b610f12133
Move authorized keys to users.nix
2025-10-01 16:40:15 +02:00
b6aaeb8158
Add rpenacob user
2025-10-01 16:40:15 +02:00
3d0f86ac07
Add osumb to the system packages
2025-10-01 16:40:15 +02:00
45d7b31c0a
Use explicit order in overlays
2025-10-01 16:40:15 +02:00
bae3c75222
Add mpich overlay
2025-10-01 16:40:15 +02:00
f51e910aff
Add coments in slurm config
2025-10-01 16:40:15 +02:00
8b7ffc914a
Add eudy host key to known hosts
2025-10-01 16:40:15 +02:00
afb2bea1c9
Rename xeon08 to eudy
...
From Eudyptula, a little penguin.
2025-10-01 16:40:15 +02:00
