Skip to content
Snippets Groups Projects
Commit 17bd8e82 authored by Michael Müller's avatar Michael Müller
Browse files

Merge branch 'putty' into 'preview'

Putty: Fix checks

See merge request zih/hpc-compendium/hpc-compendium!119
parents 88f81b64 d7bd662f
No related branches found
No related tags found
3 merge requests!322Merge preview into main,!319Merge preview into main,!119Putty: Fix checks
\<br /> # Prerequisites for Access to a Linux Cluster From a Windows Workstation
## Prerequisites for Access to a Linux Cluster From a Windows Workstation
To work at an HPC system at ZIH you need To work at an HPC system at ZIH you need
- a program that provides you a command shell (like \<a - a program that provides you a command shell (like \<a
href="<http://www.chiark.greenend.org.uk/%7Esgtatham/putty/download.html>" href="<http://www.chiark.greenend.org.uk/%7Esgtatham/putty/download.html>"
target="\_top">"putty"\</a> or \<a target="\_top">"putty"\</a> or \<a
href="<http://tu-dresden.de/die_tu_dresden/zentrale_einrichtungen/zih/dienste/datennetz_dienste/secure_shell/>" href="<http://tu-dresden.de/die_tu_dresden/zentrale_einrichtungen/zih/dienste/datennetz_dienste/secure_shell/>"
...@@ -13,34 +11,31 @@ To work at an HPC system at ZIH you need ...@@ -13,34 +11,31 @@ To work at an HPC system at ZIH you need
and if you would like to use graphical software from the HPC system and if you would like to use graphical software from the HPC system
- an X-Server (like \<a - an X-Server (like [X-Ming](<http://www.straightrunning.com/XmingNotes/)
href="<http://www.straightrunning.com/XmingNotes/>" or [CygWin32](http://www.cygwin.com/cygwin/)
target="\_top">X-Ming\</a> or \<a
href="<http://www.cygwin.com/cygwin/>" target="\_top">CygWin32\</a>)
at your local PC. Here, you can find installation descriptions for the X at your local PC. Here, you can find installation descriptions for the X
servers: \<a servers: [X-Ming Installation] **todo**
href="<https://doc.zih.tu-dresden.de/hpc-wiki/pub/Compendium/Login/install-Xming.pdf>" <!--href="<https://doc.zih.tu-dresden.de/hpc-wiki/pub/Compendium/Login/install-Xming.pdf>"-->
target="\_top">X-Ming Installation\</a>, \<a [CygWin Installation] **todo**
href="<https://doc.zih.tu-dresden.de/hpc-wiki/pub/Compendium/Login/cygwin_doku_de.pdf>" <!--https://doc.zih.tu-dresden.de/hpc-wiki/pub/Compendium/Login/cygwin_doku_de.pdf-->
target="\_top">CygWin Installation\</a>. \<br /> Please note: You have Please note: You have also to install additional fonts for X-Ming at your PC. (also to find at
also to install additional fonts for X-Ming at your PC. (also to find at [this website](http://www.straightrunning.com/XmingNotes/).
\<a href="<http://www.straightrunning.com/XmingNotes/>" If you would like transfer files between your PC and an HPC machine, you should also have
target="\_top">this website\</a>) If you would like transfer files
between your PC and an HPC machine, you should also have - [WinSCP](http://winscp.net/eng/docs/lang:de>) (an SCP program is also included in the
"Secure Shell ssh3.2" software; see above)
installed at your PC.
- \<a href="<http://winscp.net/eng/docs/lang:de>" We advice putty + Xming (+ WinSCP).
target="\_top">WinSCP\</a> (an SCP program is also included in the
"Secure Shell ssh3.2" software; see above)
installed at your PC.\<br /> We advice putty + Xming (+ WinSCP). \<br Please note: If you use software with OpenGL (like abaqus), please install "Xming-mesa" instead of
/>Please note: If you use software with OpenGL (like abaqus), please "Xmin".
install "Xming-mesa" instead of "Xmin".
After installation you have to start always at first the X-server. At After installation you have to start always at first the X-server. At the bottom right corner you
the bottom right corner you will get an new icon (a black X for X-Ming). will get an new icon (a black X for X-Ming). Now you can start putty.exe. A window will appear
Now you can start putty.exe. A window will appear where you have to give where you have to give the name of the computer and you have to switch ON the "X11 forwarding".
the name of the computer and you have to switch ON the "X11 forwarding".
(please look at the figures) (please look at the figures)
\<img alt="" src="%PUBURL%/Compendium/Login/putty1.jpg" title="putty: \<img alt="" src="%PUBURL%/Compendium/Login/putty1.jpg" title="putty:
...@@ -53,27 +48,27 @@ machine, where you can put your linux commands. If you would like to use ...@@ -53,27 +48,27 @@ machine, where you can put your linux commands. If you would like to use
commercial software, please follow the next instructions about the commercial software, please follow the next instructions about the
modules. modules.
## \<a name="Copy_Files_From_the_HRSK_Machines_to_Your_Local_Machine">\</a> Copy Files From the HRSK Machines to Your Local Machine ## Copy Files From the HRSK Machines to Your Local Machine
Take the following steps if your Workstation has a Windows operating Take the following steps if your Workstation has a Windows operating
system. You need putty (see above) and your favorite SCP program, in system. You need putty (see above) and your favorite SCP program, in
this example WinSCP. this example WinSCP.
- Make a connection to login1.zih.tu-dresden.de\<br /> \<img - Make a connection to login1.zih.tu-dresden.de\<br /> \<img
alt="tunnel1.png" src="%PUBURL%/Compendium/Login/tunnel1.png" alt="tunnel1.png" src="%PUBURL%/Compendium/Login/tunnel1.png"
width="300" /> width="300" />
- Setup SSH tunnel (data from your machine port 1222 will be directed - Setup SSH tunnel (data from your machine port 1222 will be directed
to deimos port 22)\<br /> \<img alt="tunnel2.png" to deimos port 22)\<br /> \<img alt="tunnel2.png"
src="%PUBURL%/Compendium/Login/tunnel2.png" width="300" /> src="%PUBURL%/Compendium/Login/tunnel2.png" width="300" />
- After clicking on the "Add" button, the tunnel should look like - After clicking on the "Add" button, the tunnel should look like
that\<br /> \<img alt="tunnel3.png" that\<br /> \<img alt="tunnel3.png"
src="%PUBURL%/Compendium/Login/tunnel3.png" width="300" /> src="%PUBURL%/Compendium/Login/tunnel3.png" width="300" />
- Click "Open" and enter your login and password (upon successful - Click "Open" and enter your login and password (upon successful
login, the tunnel will exist)\<br /> \<img alt="tunnel4.png" login, the tunnel will exist)\<br /> \<img alt="tunnel4.png"
src="%PUBURL%/Compendium/Login/tunnel4.png" width="300" /> src="%PUBURL%/Compendium/Login/tunnel4.png" width="300" />
- Put the putty window in the background (leave it running) and open - Put the putty window in the background (leave it running) and open
WinSCP (or your favorite SCP program), connect to localhost:1222\<br WinSCP (or your favorite SCP program), connect to localhost:1222\<br
/> \<img alt="tunnel5.png" /> \<img alt="tunnel5.png"
src="%PUBURL%/Compendium/Login/tunnel5.png" width="300" /> src="%PUBURL%/Compendium/Login/tunnel5.png" width="300" />
- After hitting "Login" and entering your username/password, you can - After hitting "Login" and entering your username/password, you can
access your files on deimos. access your files on deimos.
# Security Restrictions on Taurus # Security Restrictions on Taurus
As a result of the security incident the German HPC sites in Gau As a result of the security incident the German HPC sites in Gau Alliance are now adjusting their
Alliance are now adjusting their measurements to prevent infection and measurements to prevent infection and spreading of the malware.
spreading of the malware.
The most important items for HPC systems at ZIH are: The most important items for HPC systems at ZIH are:
- All users (who haven't done so recently) have to [change their ZIH - All users (who haven't done so recently) have to
password](https://selfservice.zih.tu-dresden.de/l/index.php/pswd/change_zih_password). [change their ZIH password](https://selfservice.zih.tu-dresden.de/l/index.php/pswd/change_zih_password).
**Login to Taurus is denied with an old password.** **Login to Taurus is denied with an old password.**
- All old (private and public) keys have been moved away. - All old (private and public) keys have been moved away.
- All public ssh keys for Taurus have to be re-generated \<br /> - All public ssh keys for Taurus have to
- using only the ED25519 algorithm (`ssh-keygen -t ed25519`) - be re-generated using only the ED25519 algorithm (`ssh-keygen -t ed25519`)
- **passphrase for the private key must not be empty** - **passphrase for the private key must not be empty**
- Ideally, there should be no private key on Taurus except for local - Ideally, there should be no private key on Taurus except for local use.
use. Keys to other systems must be passphrase-protected! - Keys to other systems must be passphrase-protected!
- **ssh to Taurus** is only possible from inside TU Dresden Campus - **ssh to Taurus** is only possible from inside TU Dresden Campus
(login\[1,2\].zih.tu-dresden.de will be blacklisted). Users from (login\[1,2\].zih.tu-dresden.de will be blacklisted). Users from outside can use VPN (see
outside can use VPN (see [here](https://tu-dresden.de/zih/dienste/service-katalog/arbeitsumgebung/zugang_datennetz/vpn)).
[here](https://tu-dresden.de/zih/dienste/service-katalog/arbeitsumgebung/zugang_datennetz/vpn)). - **ssh from Taurus** is only possible inside TU Dresden Campus.
- **ssh from Taurus** is only possible inside TU Dresden Campus. (Direct ssh access to other computing centers was the spreading vector of the recent incident.)
(Direct ssh access to other computing centers was the spreading
vector of the recent incident.)
Data transfer is possible via the taurusexport nodes. We are working on Data transfer is possible via the taurusexport nodes. We are working on a bandwidth-friendly
a bandwidth-friendly solution. solution.
We understand that all this will change convenient workflows. If the We understand that all this will change convenient workflows. If the measurements would render your
measurements would render your work on Taurus completely impossible, work on Taurus completely impossible, please contact the HPC support.
please contact the HPC support.
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment