{"id":8713,"date":"2023-05-10T14:12:08","date_gmt":"2023-05-10T14:12:08","guid":{"rendered":"https:\/\/eslweb.epfl.ch\/extranet\/?page_id=8713"},"modified":"2023-05-11T15:44:53","modified_gmt":"2023-05-11T15:44:53","slug":"eslsrv13","status":"publish","type":"page","link":"https:\/\/eslweb.epfl.ch\/intranet\/eslsrv13\/","title":{"rendered":"eslsrv13"},"content":{"rendered":"\n\neslsrv13.epfl.ch\nOS: Centos 7.5\nArch: 64 bits\nProc: Dual AMD EPYC 7551 32-Core Processor\nCores: 2 * 32 (*2 threads)\nDisks: 2 * 250GB (OS)\u00a0\u00a0\u00a0 + 2 * 1TB (Scrap)\nRAM: 16 * 32GB = 512GB\nNetwork: 2 * 1Gb\nKernel: 3.10+\nhomedirs: local + automount\n\n<h3>general<\/h3>\n<p>eslsrv13 is a general purpose server running linux. It is open to every member of the ESL lab. The homedirs are a mix of a local 100GB disk and different NFS mounts.<\/p>\n<h3>Shell<\/h3>\n<p>The server applies some scripts during your first login. If your default shell is tcsh then you have to run &#8220;bash&#8221; at least one for the scripts to take effect. You don&#8217;t need to change your default shell. If your default shell is bash (90% of people) then you have nothing to do.<\/p>\n<h3>X2GO<\/h3>\n<p><strong>Important: In your X2GO configuration file, disable the client side printing system and the audio server <\/strong><\/p>\n<p>x2go, the remote desktop client\/server for linux is installed on eslsrv13. You can use x2go client on your desktops\/laptops to reach eslsrv13 in a more convivial session than just ssh.<\/p>\n<p>Among the recommended settings are to make sure that you disable the media redirection (sound) or you will quickly fill the admin logs with garbage, also disable the clientside printing to avoid incompatibilities with our container system. Also make sure to use the MATE environment as it is for now the most appropriate environment for a remote desktop.<\/p>\n<p><strong>Important:<\/strong> the reboot\/shutdown functions provided by the different window environment are not disabled. Do not use them or you will actually reboot\/restart the server. Just use the logout function. In case a mantenance is announced, please make sure to also logout from the x2go sessions, do not just close the session but completely logout from it.<\/p>\n<h3>Homedirs<\/h3>\n<p>Every homedirs is made of a local part which is where the generic (non research) files are stored, like the firefox cache, configuration files of the GUI tools, config and temp files related to x2go, etc. The local homedir is everything in $HOME which is not in your &#8220;shares&#8221; subfolder. You are supposed to store your research files and other important files in one of the &#8220;shares&#8221; listed in the $home\/shares subfolder. A system of symlink will point from your $home to the shares, like sti2files.epfl.ch for example. The quota of those shares is an independent quota.<\/p>\n<p>There is a 2TB local disk (made of 2 ssd&#8217;s in raid zero) used as a scrap space, fast and without backups. It is to be used for special projects. It is mounted in your shares in the local subfolder.<\/p>\n<p>In short, keep everything important in your shares, keep the bare minimum in your local homedir.<\/p>\n<p>For now, only the shares from sti1files and some shares from eslsrv6 are mounted.<\/p>\n<h3>EDA tools<\/h3>\n<p>The EDA shares from ielsrv01 are mounted on eslsrv13. The EDA tools can be used through the singularity container system. An image of the eda environment is located in \/files\/singularity\/eda.img. The image is generated using the def file located in the same folder. Contact me if you need a change to this file, or create your own img file based on the current def file including your changes.<\/p>\n<p>Since your homedir is empty, you need to re-create the .cshrc at the root of your homedir.<\/p>\n<h3>Reboot and maintenance<\/h3>\n<p>The reboot politic is based on the updates necessary to patch security problems. As long as the kernel and critical components are not vulnerable then the server won&#8217;t be rebooted. Still, it is a good practice to close your sessions (ssh\/x2go) if you know that you have finished your tasks. Some maintenance tasks will also require a reboot, we&#8217;ll try to group them with the updates as much as possible.<\/p>\n<p><strong>cgroups<\/strong><\/p>\n<p>The cgroup policy is to allow 95% of CPU to the users and 5% to root processes if required. A global jail limits memory consumption to 490GB.<\/p>\n<p><strong>Network<\/strong><\/p>\n<p>eslsrv13 is not open on diode, so you will have to launch your VPN client if you want to use it from outside EPFL.<\/p>\n<h3>Containers<\/h3>\n<p>The container runtime used in eslsrv13 is <em>singularity<\/em>.<\/p>\n<p><a href=\"http:\/\/singularity.lbl.gov\/user-guide\">http:\/\/singularity.lbl.gov\/user-guide<\/a><\/p>\n<p>Some images (like for EDA tools) are stored in \/files\/singularity. You can store your own images wherever you want. You can use the def files in this folder as a starting point for your own images.<\/p>\n<p>Users of the <em>screen<\/em> command must be careful while in a container, and should redirect the working directory of <em>screen<\/em> to a local folder in their homedir:<\/p>\nexport SCREENDIR=$HOME\/.screen\nmanually create the new folder with mkdir $\/.screen\nmake the folder 700\nchmod 700 $HOME\/.screen\nfor tcshell you can use add this to your .cshrc:\nsetenv SCREEN &#8220;$HOME\/.screen&#8221;\n\n<h3>Permissions<\/h3>\n<p>Most of the users have limited sudo, including the commands below. Contact your admin if you really need full sudo access.<\/p>\n<pre class=\"brush: css; title: ; notranslate\" title=\"\">&lt;br \/&gt;\n## Networking&lt;br \/&gt;\nCmnd_Alias NETWORKING = \/sbin\/route, \/sbin\/ifconfig, \/bin\/ping, \/sbin\/dhclient, \/usr\/bin\/net, \/sbin\/iptables, \/usr\/bin\/rfcomm, \/usr\/bin\/wvdial, \/sbin\/iwconfig, \/sbin\/mii-tool\n## Installation and management of software&lt;br \/&gt;\nCmnd_Alias SOFTWARE = \/bin\/rpm, \/usr\/bin\/up2date, \/usr\/bin\/yum\n## Services&lt;br \/&gt;\nCmnd_Alias SERVICES = \/sbin\/service, \/sbin\/chkconfig, \/usr\/bin\/systemctl start, \/usr\/bin\/systemctl stop, \/usr\/bin\/systemctl reload, \/usr\/bin\/systemctl restart, \/usr\/bin\/systemctl status, \/usr\/bin\/systemctl enable, \/usr\/bin\/systemctl disable\n## Updating the locate database&lt;br \/&gt;\nCmnd_Alias LOCATE = \/usr\/bin\/updatedb\n## Storage&lt;br \/&gt;\nCmnd_Alias STORAGE = \/sbin\/fdisk, \/sbin\/sfdisk, \/sbin\/parted, \/sbin\/partprobe, \/bin\/mount, \/bin\/umount\n## Processes&lt;br \/&gt;\nCmnd_Alias PROCESSES = \/bin\/nice, \/bin\/kill, \/usr\/bin\/kill, \/usr\/bin\/killall\n## Drivers&lt;br \/&gt;\nCmnd_Alias DRIVERS = \/sbin\/modprobe&lt;br \/&gt;\n<\/pre>\n\n\n","protected":false},"excerpt":{"rendered":"<p>eslsrv13.epfl.ch OS: Centos 7.5 Arch: 64 bits Proc: Dual AMD EPYC 7551 32-Core Processor Cores: 2 * 32 (*2 threads) Disks: 2 * 250GB (OS)\u00a0\u00a0\u00a0 + 2 * 1TB (Scrap) RAM: 16 * 32GB = 512GB Network: 2 * 1Gb Kernel: 3.10+ homedirs: local + automount general eslsrv13 is a [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-8713","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/eslweb.epfl.ch\/intranet\/wp-json\/wp\/v2\/pages\/8713","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eslweb.epfl.ch\/intranet\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/eslweb.epfl.ch\/intranet\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/eslweb.epfl.ch\/intranet\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eslweb.epfl.ch\/intranet\/wp-json\/wp\/v2\/comments?post=8713"}],"version-history":[{"count":3,"href":"https:\/\/eslweb.epfl.ch\/intranet\/wp-json\/wp\/v2\/pages\/8713\/revisions"}],"predecessor-version":[{"id":8774,"href":"https:\/\/eslweb.epfl.ch\/intranet\/wp-json\/wp\/v2\/pages\/8713\/revisions\/8774"}],"wp:attachment":[{"href":"https:\/\/eslweb.epfl.ch\/intranet\/wp-json\/wp\/v2\/media?parent=8713"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}