rarias/jungle
2
0
Fork 3
Code Issues 57 Pull Requests 7 Actions Packages Projects Releases Wiki Activity

Add fox to SLURM #167

Manually merged
rarias merged 13 commits from fox-slurm into master 2025-09-03 12:14:38 +02:00
Conversation 3 Commits 13 Files Changed 28 +214 -66

13 Commits

Author SHA1 Message Date
Rodrigo Arias Mallo
52380eae59 Use 10.106.0.0/24 subnet to avoid collisions 
The 106 byte is the code for 'j' (jungle) in ASCII:

	% printf j | od -t d
	0000000         106
	0000001

Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
 2025-09-03 12:03:13 +02:00
Rodrigo Arias Mallo
2fe84c4cbc Update fox documentation for SLURM and FS 
Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
 2025-09-03 12:03:09 +02:00
Rodrigo Arias Mallo
3b16b41be3 Revert "Remove pam_slurm_adopt from fox" 
This reverts commit 64a52801ed.

Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
 2025-09-03 12:03:06 +02:00
Rodrigo Arias Mallo
ee481deffb Enable fail2ban in fox 
Protect fox against ssh bruteforce attacks:

fox% sudo lastb | head
root     ssh:notty    200.124.28.102   Mon Sep  1 11:25 - 11:25  (00:00)
root     ssh:notty    200.124.28.102   Mon Sep  1 11:25 - 11:25  (00:00)
root     ssh:notty    200.124.28.102   Mon Sep  1 11:25 - 11:25  (00:00)
root     ssh:notty    200.124.28.102   Mon Sep  1 11:25 - 11:25  (00:00)
root     ssh:notty    200.124.28.102   Mon Sep  1 11:25 - 11:25  (00:00)
root     ssh:notty    200.124.28.102   Mon Sep  1 11:25 - 11:25  (00:00)
root     ssh:notty    200.124.28.102   Mon Sep  1 11:25 - 11:25  (00:00)
root     ssh:notty    200.124.28.102   Mon Sep  1 11:25 - 11:25  (00:00)
root     ssh:notty    200.124.28.102   Mon Sep  1 11:24 - 11:24  (00:00)
root     ssh:notty    200.124.28.102   Mon Sep  1 11:24 - 11:24  (00:00)

Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
 2025-09-03 12:03:02 +02:00
Rodrigo Arias Mallo
b1bad25008 Accept connections from apex to fox slurmd 
Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
 2025-09-03 12:03:00 +02:00
Rodrigo Arias Mallo
85f38e17a2 Accept fox connection to slurm controller 
Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
 2025-09-03 12:02:59 +02:00
Rodrigo Arias Mallo
08ab01b89c Add fox machine to SLURM 
Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
 2025-09-03 12:02:57 +02:00
Rodrigo Arias Mallo
194a6fb7f6 Rekey secrets with trusted fox key 
Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
 2025-09-03 12:02:55 +02:00
Rodrigo Arias Mallo
365576778b Trust fox for compute node secrets 
Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
 2025-09-03 12:02:52 +02:00
Rodrigo Arias Mallo
e7490858c6 Make apex host specific to each machine 
Allows direct contact via the VPN when accessing from fox, but use
Internet when using the rest of the machines.

Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
 2025-09-03 12:02:49 +02:00
Rodrigo Arias Mallo
7606030135 Add local host fox in apex 
Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
 2025-09-03 12:02:46 +02:00
Rodrigo Arias Mallo
e55590f59e Enable wireguard in apex 
Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
 2025-09-03 12:02:43 +02:00
Rodrigo Arias Mallo
c3da39c392 Add wireguard server in fox 
Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
 2025-09-03 12:02:38 +02:00