1. How to access GLiCID Cluster
In order to request access to GLiCID you have to follow these steps:
-
Create an account on https://clam.glicid.fr (school account, or CRU account for external users).
-
The account will be validated by an administrator.
-
User has to generate and upload the pulblic SSH key to CLAM portal (in profile’s SSH Access tab).
-
Edit the .ssh/config file and add the defined configuration.
-
Finally, you can log in using SSH from terminal (on Linux and macOS) and PowerShell (on Windows).
2. Login using Secure Shell Protocol (SSH)
At GLiCID, we prohibit accessing our systems solely through a password. Instead, we employ key-based authentication using the Secure Shell Protocol (SSH). SSH, an open protocol, enables users to log into a remote server system from a local client system. In this section, we demonstrate how to configure this authentication on your system using both OpenSSH (compatible with GNU/Linux, macOS, Windows(PowerShell) etc.).
2.1. OpenSSH
OpenSSH stands as a widely used and freely accessible SSH client designed for UNIX-like operating systems like GNU/Linux and macOS. In macOS, OpenSSH is pre-installed. Moreover, it is available in the package repository of numerous GNU/Linux distributions, such as "openssh-client" on Debian and Ubuntu, or "openssh-clients" on Fedora, CentOS, and similar systems. Additionally, the source code for OpenSSH can be obtained from the OpenSSH website at http://www.openssh.com/portable.html.
2.2. OpenSSH Key Generation
As we rely on key-based authentication. It is important to generate secure key pairs. The current safest key type is ed25519. To generate a key, use the following command
ssh-keygen -t ed25519Note: Should the file ~/.ssh/id_ed25519 already exist, ssh-keygen will prompt for confirmation before overwriting it. It is advisable not to overwrite the file, especially if it serves as credentials for another system. Instead, opt for a distinct file name, such as ~/.ssh/id_glicid, and ensure consistency by using the same file name in all subsequent instructions provided in this document.
Following this, ssh-keygen will prompt you to create a passphrase. While it’s optional to enter a passphrase—simply pressing Enter allows you to proceed without one—it is advisable to provide a robust passphrase. In the future, you’ll need to enter this passphrase to unlock your private key. Using a password manager is recommended for securely storing your key and facilitating the use of complex passphrases.
Ensure the safety and confidentiality of the private key, located at ~/.ssh/id_ed25519, on your local host. Simultaneously, the generated public key, found at ~/.ssh/id_ed25519.pub, must be uploaded to the CLAM user portal at https://clam.glicid.fr.
2.3. OpenSSH Configuration
The SSH configuration on the user side serves the purpose of establishing shortcuts to targets/hosts and configuring connections. These shortcuts and options not only impact the behavior of SSH but also influence any program utilizing SSH as an underlying mechanism, including git, scp, and rsync.
For a comprehensive view of all available options, refer to "man ssh_config." Recognizing that this may be overwhelming, here are a few highlighted options and configurations.
To set-up, edit the .ssh/config file and add the following:
Host Bastion(1)
Hostname bastion.glicid.fr
User the-login-name(2)
IdentityFile ~/.ssh/id_ed25519(4)
ForwardAgent yes
Host Glicid(1)
Hostname login-001.glicid.fr
User the-login-name(2)
ProxyJump Bastion(3)
IdentityFile ~/.ssh/id_ed25519(4)
Host Nautilus(1)
Hostname nautilus-devel-001.nautilus.intra.glicid.fr
User the-login-name(2)
ProxyJump Bastion(3)
IdentityFile ~/.ssh/id_ed25519(4)| 1 | Please note that Nautilus (with a capital "N") is an alias. You must now use ssh Nautilus This is just an example, the alias can take any name. |
| 2 | To be replaced by the correct login assigned to you by clam, obviously. For example : doe-j@univ-nantes.fr : for Nantes University or doe-j@ec-nantes.fr for Nantes Central school or doe-j@univ-angers.fr for Angers University etc. |
| 3 | Requires OpenSSH client >= 7.3. For previous versions, ProxyCommand ssh le-nom-de-login@bastion.glicid.fr -W %h:%p can be used instead. |
| 4 | Be careful of the confusion, it is the private key that must be referenced here. |
The above entries establish shortcuts, enabling convenient logins to individual nodes such as glicid, nautilus, and philias (soon).
Subsequently, you can simply connect to the GLiCID Cluster login nodes from the terminal using the following commands:
ssh Glicidor
ssh NautilusAfter a successful SSH connection, a new prompt or window will appear, reflecting the environment of the connected system. For instance, if you logged into Nautilus, you should observe the corresponding command-line interface associated with Nautilus.
<username>:~$ ssh Nautilus
#################################################################
# This service is restricted to authorized users only. All #
# activities on this system are logged. #
# Unauthorized access will be fully investigated and reported #
# to the appropriate law enforcement agencies. #
#################################################################
Last login: Tue Nov 21 11:06:05 2023 from 194.167.60.11
_ _ _ _ _ lxkkdc
| \ | | | | (_) | kWNOdc
| \| | __ _ _ _| |_ _| |_ _ ___ kW0c
| . ` |/ _` | | | | __| | | | | / __| kW0c
| |\ | (_| | |_| | |_| | | |_| \__ \ kW0c
\_| \_/\__,_|\__,_|\__|_|_|\__,_|___/ cOWKl
cx0KXWMWXK0xc
ccllllloxXWMMMMMMMMMWKo
coooolc codxkO0KXXNNNWWWWWMMMMMMMMMMMMWOl
c0WWWWWO oxOKNWMMMMMMMMMMMMMMMMMMMMMMMMMMMMMWNKOxoc
lKMMMMMKxOXWMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMWXOdc
lKMMMMMWWMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMW0xdx0NMMWKx
lKMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMWO kWMMMWOc
lKMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMWOc kWMMMMNd
lKMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMWKkxkKWMMMMMNd
lKMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMXx
lKMMMMMNNWMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMWXkl
lKMMMMM0ookKNWMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMWNKOdc
ckKKKKKx ldkOKXNWMMMMMMMMMMMMMMMMMMMMMMMWNXK0kdl
clodxkkO000KKKKKKK000OOkxdolc
-----------------------------------------------------------------------------
Welcome to GLiCID HPC cluster Nautilus
=== Computing Nodes =========================================== #RAM/n = #C =
cnode[301-340] 40 BullSequana X440 (2 AMD EPYC 9474F@3.6GHz 48c) 384 3840
cnode[701-708] 8 BullSequana X440 (2 AMD EPYC 9474F@3.6GHz 48c) 768 768
visu[1-4] 4 BullSequana X450 (2 AMD EPYC 9474F@3.6GHz 48c) 768 384
with Nvidia A40 (48G) 2 GPUs per node
gnode[1-4] 4 BullSequana X410 (2 AMD EPYC 9474F@3.6GHz 48c) 768 384
with Nvidia A100 (80G) 4 GPUs per node
-----------------------------------------------------------------------------
Fast interconnect using InfiniBand 100 Gb/s technology
Shared Storage (scratch) : 427 TB (IBM/Spectrum Scale - GPFS)
Remote Visualization Apps through XCS portal @https://xcs.glicid.fr/xcs/
-----------------------------------------------------------------------------
User storage :
- user directory ......... /home/<username>
- project directory ...... /LAB-DATA/GLiCID/projects/<projectname>
- scratch directory ..... /scratch/users/<username>
- scratch SSD .......... /scratch-shared
- scratch Liger .......... /scratchliger/<old_liger_username> (temporary, ro)
- softwares directory .... /opt/software
-----------------------------------------------------------------------------
Softwares :
- use modules ......... module avail
- use GUIX ............ guix install <software> (documentation for details)
module load guix/latest first (Nautilus only)
-----------------------------------------------------------------------------
Useful Links :
- User DOC ........ https://doc.glicid.fr
- Support ......... https://help.glicid.fr or help@glicid.fr
- Chat ............ bottom right corner on CLAM when admins are available
- Admins .......... tech@glicid.fr
- Forum ........... coming soon
- Status page ..... https://ckc.glicid.fr
[<username>@nautilus-devel-001 ~]$To close the SSH connection, simply type
exitNote: If you are a Windows user and find the terminal interface less familiar, you have the option to use MobaXterm.