From 5f055388a5ac29b2f01afc73ed28d14ef509ce48 Mon Sep 17 00:00:00 2001 From: Rodrigo Arias Mallo Date: Fri, 13 Jun 2025 10:26:59 +0200 Subject: [PATCH 1/5] Enable SSH X11 forwarding MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Reviewed-by: Aleix Boné --- m/fox/configuration.nix | 2 ++ 1 file changed, 2 insertions(+) diff --git a/m/fox/configuration.nix b/m/fox/configuration.nix index ea793e76..076cd2fc 100644 --- a/m/fox/configuration.nix +++ b/m/fox/configuration.nix @@ -22,6 +22,8 @@ # Use performance for benchmarks powerManagement.cpuFreqGovernor = "performance"; + services.openssh.settings.X11Forwarding = true; + networking = { timeServers = [ "ntp1.upc.edu" "ntp2.upc.edu" ]; hostName = "fox"; -- 2.51.2 From c205fa4e34fb9ee7cd382d82f7479725f50a902b Mon Sep 17 00:00:00 2001 From: Rodrigo Arias Mallo Date: Fri, 13 Jun 2025 13:14:47 +0200 Subject: [PATCH 2/5] Load amd_uncore module in fox MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Needed for L3 events in perf. Reviewed-by: Aleix Boné --- m/fox/configuration.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/m/fox/configuration.nix b/m/fox/configuration.nix index 076cd2fc..cc0527e1 100644 --- a/m/fox/configuration.nix +++ b/m/fox/configuration.nix @@ -14,7 +14,7 @@ swapDevices = lib.mkForce []; boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ]; - boot.kernelModules = [ "kvm-amd" ]; + boot.kernelModules = [ "kvm-amd" "amd_uncore" ]; hardware.cpu.amd.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; hardware.cpu.intel.updateMicrocode = lib.mkForce false; -- 2.51.2 From d45b7ea717dd527e855408dadc7bb9187bdd9966 Mon Sep 17 00:00:00 2001 From: Rodrigo Arias Mallo Date: Tue, 17 Jun 2025 14:04:46 +0200 Subject: [PATCH 3/5] Disable NUMA balancing in fox MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit See: https://www.kernel.org/doc/html/latest/admin-guide/sysctl/kernel.html#numa-balancing Reviewed-by: Aleix Boné --- m/fox/configuration.nix | 3 +++ 1 file changed, 3 insertions(+) diff --git a/m/fox/configuration.nix b/m/fox/configuration.nix index cc0527e1..a1a33fd0 100644 --- a/m/fox/configuration.nix +++ b/m/fox/configuration.nix @@ -22,6 +22,9 @@ # Use performance for benchmarks powerManagement.cpuFreqGovernor = "performance"; + # Disable NUMA balancing + boot.kernel.sysctl."kernel.numa_balancing" = 0; + services.openssh.settings.X11Forwarding = true; networking = { -- 2.51.2 From e660268661118177094de33c457ba1495910e6e1 Mon Sep 17 00:00:00 2001 From: Rodrigo Arias Mallo Date: Wed, 18 Jun 2025 11:07:19 +0200 Subject: [PATCH 4/5] Disable kptr_restrict in fox MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Reviewed-by: Aleix Boné --- m/fox/configuration.nix | 3 +++ 1 file changed, 3 insertions(+) diff --git a/m/fox/configuration.nix b/m/fox/configuration.nix index a1a33fd0..3fb9010e 100644 --- a/m/fox/configuration.nix +++ b/m/fox/configuration.nix @@ -25,6 +25,9 @@ # Disable NUMA balancing boot.kernel.sysctl."kernel.numa_balancing" = 0; + # Expose kernel addresses + boot.kernel.sysctl."kernel.kptr_restrict" = 0; + services.openssh.settings.X11Forwarding = true; networking = { -- 2.51.2 From cb05482b4f3f783443e2743e5260f63e7f7eddd1 Mon Sep 17 00:00:00 2001 From: Rodrigo Arias Mallo Date: Wed, 2 Jul 2025 15:02:57 +0200 Subject: [PATCH 5/5] Update access instructions MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit We no longer need to request a petition through BSC, as we will be in charge of the login. Remove link to the old repository as well and prefer only email. Reviewed-by: Aleix Boné --- web/content/access/index.md | 12 +++--------- 1 file changed, 3 insertions(+), 9 deletions(-) diff --git a/web/content/access/index.md b/web/content/access/index.md index 4006079f..4ee75643 100644 --- a/web/content/access/index.md +++ b/web/content/access/index.md @@ -5,18 +5,12 @@ description: "Request access to the machines" ![Cave](./cave.jpg) -Before requesting access to the jungle machines, you must be able to access the -`ssfhead.bsc.es` node (only available via the intranet or VPN). You can request -access to the login machine using a resource petition in the BSC intranet. - -Then, to request access to the machines we will need some information about you: +To request access to the machines we will need some information: 1. Which machines you want access to ([hut](/hut), [fox](/fox), owl1, owl2, eudy, koro...) -1. Your user name and user id (to match the NFS permissions) +1. Your user name (make sure it matches the one you use for the BSC intranet) 1. Your real name and surname (for identification purposes) 1. The salted hash of your login password, generated with `mkpasswd -m sha-512` 1. An SSH public key of type Ed25519 (can be generated with `ssh-keygen -t ed25519`) -Send an email to with the details, or directly open a -merge request in the [jungle -repository](https://pm.bsc.es/gitlab/rarias/jungle/). +Send an email to with the details. -- 2.51.2