Hi,

At BSC we use a spank plugin to open an ssh tunnel from computing node to
the login node to forward X. I think it works similar to the CEA plugin,
but we are using environment variables and the ssh is started from compute
node instead of login node, as we don't allow users to ssh to compute nodes.

regards,
Carles

On Sat, Sep 8, 2012 at 7:27 AM, Michael Gutteridge <
[email protected]> wrote:

>
> On Fri, Sep 7, 2012 at 7:18 PM, Evren Yurtesen IB <[email protected]> wrote:
> >
> > It appears it is enough to set X11UseLocalhost=no on login node only.
> >
> > Now the question is, how secure is this? :) or what is the downside?
>
> It's not terribly secure.  Basically you're allowing X11 clients to
> connect from any host.
>
> As Aaron indicates, Slurm doesn't do X forwarding.  The DISPLAY
> variable you're getting in the interactive session is from the
> environment on your login node.
>
> srun.x11  works by creating a screen session via an ssh connection to
> the node.  We have been working with a X11 spank plugin- so far so
> good.  There seem to be a few forks on github- IIRC, we started with
> the contribution from here:
>
>
> http://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=3&cad=rja&ved=0CDgQFjAC&url=http%3A%2F%2Fgroups.google.com%2Fgroup%2Fslurm-devel%2Fbrowse_thread%2Fthread%2F8a4f7eedacf8d476%2Fccf84be0a5e4b57a&ei=t9JKUP_kC8eLiwL04YD4Dw&usg=AFQjCNGSkQcT-C9fzlVSVnC-AGAxGHbneg
>
>
> > On Fri, 7 Sep 2012, Aaron Knister wrote:
>
> >
> >> Hi Evren,
> >
> >> I'm not sure if --pry plays a significant role here. The DISPLAY
> variable,
> >> by default, is set to localhost:port_offset. SLURM itself doesn't do
> any x11
> >> forwarding so when your remote application attempts to connect to the
> x11
> >> server on the submission node, unless they're the same, the connection
> will
> >> fail. The solution is to set X11UseLocalhost to no in your
> sshd_config's on
> >> your clusters nodes, restart sshd and login again.
> >
> >
> >>
> >
> >> Sent from my iPhone
> >
> >
> >>
> >
> >> On Sep 7, 2012, at 6:36 PM, Evren Yurtesen IB <[email protected]> wrote:
> >
> >
> >>
> >
> >>>
> >
> >>> Hello,
> >
> >
> >>>
> >
> >>> I am trying to run programs with graphical output using slurm.
> >
> >
> >>>
> >
> >>> I tried srun's --pty option to start a shell. Everything looks fine and
> >>> DISPLAY variable is set, yet programs are not able to connect to the
> >>> DISPLAY. I get error stating failed to connect to localhost:11.0 from
> node1
> >
> >
> >>>
> >
> >>> Then I tried using P. Anderssons scripts and they seem to work fine:
> >
> >
> >>> https://computing.llnl.gov/linux/slurm/faq.html#terminal
> >
> >
> >>>
> >
> >>> So, am I understanding correctly that --pty option should allow X11
> >>> forwarding? Is there a trick to get it working?
> >
> >
> >>>
> >
> >>> Thanks,
> >
> >
> >>> Evren
> >
> >
>
>
>
> --
> Hey! Somebody punched the foley guy!
>    - Crow, MST3K ep. 508




-- 
--
Carles Fenoy

Reply via email to