Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
hpc-compendium
Manage
Activity
Members
Labels
Plan
Issues
Issue boards
Milestones
Wiki
Code
Merge requests
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Snippets
Deploy
Releases
Package Registry
Container Registry
Model registry
Operate
Terraform modules
Monitor
Incidents
Service Desk
Analyze
Value stream analytics
Contributor analytics
Repository analytics
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Terms and privacy
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
ZIH
hpcsupport
hpc-compendium
Commits
d7bd662f
Commit
d7bd662f
authored
3 years ago
by
Martin Schroschk
Browse files
Options
Downloads
Patches
Plain Diff
Putty: Fix checks
parent
88f81b64
No related branches found
No related tags found
3 merge requests
!322
Merge preview into main
,
!319
Merge preview into main
,
!119
Putty: Fix checks
Changes
2
Hide whitespace changes
Inline
Side-by-side
Showing
2 changed files
doc.zih.tu-dresden.de/docs/access/SSHMitPutty.md
+41
-46
41 additions, 46 deletions
doc.zih.tu-dresden.de/docs/access/SSHMitPutty.md
doc.zih.tu-dresden.de/docs/access/SecurityRestrictions.md
+20
-24
20 additions, 24 deletions
doc.zih.tu-dresden.de/docs/access/SecurityRestrictions.md
with
61 additions
and
70 deletions
doc.zih.tu-dresden.de/docs/access/SSHMitPutty.md
+
41
−
46
View file @
d7bd662f
\<
br />
## Prerequisites for Access to a Linux Cluster From a Windows Workstation
# Prerequisites for Access to a Linux Cluster From a Windows Workstation
To work at an HPC system at ZIH you need
-
a program that provides you a command shell (like
\<
a
-
a program that provides you a command shell (like
\<
a
href="
<http://www.chiark.greenend.org.uk/%7Esgtatham/putty/download.html>
"
target="
\_
top">"putty"
\<
/a> or
\<
a
href="
<http://tu-dresden.de/die_tu_dresden/zentrale_einrichtungen/zih/dienste/datennetz_dienste/secure_shell/>
"
...
...
@@ -13,34 +11,31 @@ To work at an HPC system at ZIH you need
and if you would like to use graphical software from the HPC system
-
an X-Server (like
\<
a
href="
<http://www.straightrunning.com/XmingNotes/>
"
target="
\_
top">X-Ming
\<
/a> or
\<
a
href="
<http://www.cygwin.com/cygwin/>
" target="
\_
top">CygWin32
\<
/a>)
-
an X-Server (like
[
X-Ming
](
<http://www.straightrunning.com/XmingNotes/)
or
[
CygWin32
](
http://www.cygwin.com/cygwin/
)
at your local PC. Here, you can find installation descriptions for the X
servers:
\<
a
href="
<https://doc.zih.tu-dresden.de/hpc-wiki/pub/Compendium/Login/install-Xming.pdf>
"
target="
\_
top">X-Ming Installation
\<
/a>,
\<
a
href="
<https://doc.zih.tu-dresden.de/hpc-wiki/pub/Compendium/Login/cygwin_doku_de.pdf>
"
target="
\_
top">CygWin Installation
\<
/a>.
\<
br /> Please note: You have
also to install additional fonts for X-Ming at your PC. (also to find at
\<
a href="
<http://www.straightrunning.com/XmingNotes/>
"
target="
\_
top">this website
\<
/a>) If you would like transfer files
between your PC and an HPC machine, you should also have
servers: [X-Ming Installation]
**todo**
<!--href="<https://doc.zih.tu-dresden.de/hpc-wiki/pub/Compendium/Login/install-Xming.pdf>
"-->
[CygWin Installation]
**todo**
<!--https://doc.zih.tu-dresden.de/hpc-wiki/pub/Compendium/Login/cygwin_doku_de.pdf-->
Please note: You have also to install additional fonts for X-Ming at your PC. (also to find at
[
this website
](
http://www.straightrunning.com/XmingNotes/
)
.
If you would like transfer files between your PC and an HPC machine, you should also have
-
[
WinSCP
](
http://winscp.net/eng/docs/lang:de>
)
(
an
SCP program is also included in the
"Secure Shell ssh3.2" software; see above)
installed at your PC.
-
\<
a href="
<http://winscp.net/eng/docs/lang:de>
"
target="
\_
top">WinSCP
\<
/a> (an SCP program is also included in the
"Secure Shell ssh3.2" software; see above)
We advice putty + Xming (+ WinSCP).
installed at your PC.
\<
br /> We advice putty + Xming (+ WinSCP).
\<
br
/>Please note: If you use software with OpenGL (like abaqus), please
install "Xming-mesa" instead of "Xmin".
Please note: If you use software with OpenGL (like abaqus), please install "Xming-mesa" instead of
"Xmin".
After installation you have to start always at first the X-server. At
the bottom right corner you will get an new icon (a black X for X-Ming).
Now you can start putty.exe. A window will appear where you have to give
the name of the computer and you have to switch ON the "X11 forwarding".
After installation you have to start always at first the X-server. At the bottom right corner you
will get an new icon (a black X for X-Ming). Now you can start putty.exe. A window will appear
where you have to give the name of the computer and you have to switch ON the "X11 forwarding".
(please look at the figures)
\<
img alt="" src="%PUBURL%/Compendium/Login/putty1.jpg" title="putty:
...
...
@@ -53,27 +48,27 @@ machine, where you can put your linux commands. If you would like to use
commercial software, please follow the next instructions about the
modules.
##
\<a name="Copy_Files_From_the_HRSK_Machines_to_Your_Local_Machine">\</a>
Copy Files From the HRSK Machines to Your Local Machine
## Copy Files From the HRSK Machines to Your Local Machine
Take the following steps if your Workstation has a Windows operating
system. You need putty (see above) and your favorite SCP program, in
this example WinSCP.
-
Make a connection to login1.zih.tu-dresden.de
\<
br />
\<
img
alt="tunnel1.png" src="%PUBURL%/Compendium/Login/tunnel1.png"
width="300" />
-
Setup SSH tunnel (data from your machine port 1222 will be directed
to deimos port 22)
\<
br />
\<
img alt="tunnel2.png"
src="%PUBURL%/Compendium/Login/tunnel2.png" width="300" />
-
After clicking on the "Add" button, the tunnel should look like
that
\<
br />
\<
img alt="tunnel3.png"
src="%PUBURL%/Compendium/Login/tunnel3.png" width="300" />
-
Click "Open" and enter your login and password (upon successful
login, the tunnel will exist)
\<
br />
\<
img alt="tunnel4.png"
src="%PUBURL%/Compendium/Login/tunnel4.png" width="300" />
-
Put the putty window in the background (leave it running) and open
WinSCP (or your favorite SCP program), connect to localhost:1222
\<
br
/>
\<
img alt="tunnel5.png"
src="%PUBURL%/Compendium/Login/tunnel5.png" width="300" />
-
After hitting "Login" and entering your username/password, you can
access your files on deimos.
-
Make a connection to login1.zih.tu-dresden.de
\<
br />
\<
img
alt="tunnel1.png" src="%PUBURL%/Compendium/Login/tunnel1.png"
width="300" />
-
Setup SSH tunnel (data from your machine port 1222 will be directed
to deimos port 22)
\<
br />
\<
img alt="tunnel2.png"
src="%PUBURL%/Compendium/Login/tunnel2.png" width="300" />
-
After clicking on the "Add" button, the tunnel should look like
that
\<
br />
\<
img alt="tunnel3.png"
src="%PUBURL%/Compendium/Login/tunnel3.png" width="300" />
-
Click "Open" and enter your login and password (upon successful
login, the tunnel will exist)
\<
br />
\<
img alt="tunnel4.png"
src="%PUBURL%/Compendium/Login/tunnel4.png" width="300" />
-
Put the putty window in the background (leave it running) and open
WinSCP (or your favorite SCP program), connect to localhost:1222
\<
br
/>
\<
img alt="tunnel5.png"
src="%PUBURL%/Compendium/Login/tunnel5.png" width="300" />
-
After hitting "Login" and entering your username/password, you can
access your files on deimos.
This diff is collapsed.
Click to expand it.
doc.zih.tu-dresden.de/docs/access/SecurityRestrictions.md
+
20
−
24
View file @
d7bd662f
# Security Restrictions on Taurus
As a result of the security incident the German HPC sites in Gau
Alliance are now adjusting their measurements to prevent infection and
spreading of the malware.
As a result of the security incident the German HPC sites in Gau Alliance are now adjusting their
measurements to prevent infection and spreading of the malware.
The most important items for HPC systems at ZIH are:
-
All users (who haven't done so recently) have to
[
change their ZIH
password
](
https://selfservice.zih.tu-dresden.de/l/index.php/pswd/change_zih_password
)
.
**Login to Taurus is denied with an old password.**
-
All old (private and public) keys have been moved away.
-
All public ssh keys for Taurus have to be re-generated
\<
br />
-
using only the ED25519 algorithm (
`ssh-keygen -t ed25519`
)
-
**passphrase for the private key must not be empty**
-
Ideally, there should be no private key on Taurus except for local
use. Keys to other systems must be passphrase-protected!
-
**ssh to Taurus**
is only possible from inside TU Dresden Campus
(login
\[
1,2
\]
.zih.tu-dresden.de will be blacklisted). Users from
outside can use VPN (see
[
here
](
https://tu-dresden.de/zih/dienste/service-katalog/arbeitsumgebung/zugang_datennetz/vpn
)
).
-
**ssh from Taurus**
is only possible inside TU Dresden Campus.
(Direct ssh access to other computing centers was the spreading
vector of the recent incident.)
-
All users (who haven't done so recently) have to
[
change their ZIH password
](
https://selfservice.zih.tu-dresden.de/l/index.php/pswd/change_zih_password
)
.
**Login to Taurus is denied with an old password.**
-
All old (private and public) keys have been moved away.
-
All public ssh keys for Taurus have to
-
be re-generated using only the ED25519 algorithm (
`ssh-keygen -t ed25519`
)
-
**passphrase for the private key must not be empty**
-
Ideally, there should be no private key on Taurus except for local use.
-
Keys to other systems must be passphrase-protected!
-
**ssh to Taurus**
is only possible from inside TU Dresden Campus
(login
\[
1,2
\]
.zih.tu-dresden.de will be blacklisted). Users from outside can use VPN (see
[
here
](
https://tu-dresden.de/zih/dienste/service-katalog/arbeitsumgebung/zugang_datennetz/vpn
)
).
-
**ssh from Taurus**
is only possible inside TU Dresden Campus.
(Direct ssh access to other computing centers was the spreading vector of the recent incident.)
Data transfer is possible via the taurusexport nodes. We are working on
a bandwidth-friendly
solution.
Data transfer is possible via the taurusexport nodes. We are working on
a bandwidth-friendly
solution.
We understand that all this will change convenient workflows. If the
measurements would render your work on Taurus completely impossible,
please contact the HPC support.
We understand that all this will change convenient workflows. If the measurements would render your
work on Taurus completely impossible, please contact the HPC support.
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment