Yeah, that makes sense. Was also thinking about using it as a basis for
some behind the scenes NX port forwarding and automated port management
(ie. pick the port for them). Could probably do that just as well with
a shell script.
Thanks,
ajk
Tim Wickberg wrote:
We've solved this (sort of) for a few users who need access to a
campus MATLAB license just by telling them to add an appropriate SSH
port forward in to their job scripts. As long as your nodes clean up
and kill that off when the job ends that's probably easier than
building a custom SPANK module to try to handle it.
Assuming your nodes can already SSH within the cluster without
passwords, and that you've enabled reverse port forwarding on the
login nodes, adding this to their job script would accomplish much the
same:
ssh -R 8130:localhost:8080 login01 &
Obviously, you have to encourage your users to pick a unique port for
this, and there are all sorts of security implications you'd want to
think about.
- Tim
--
Tim Wickberg
[email protected] <mailto:[email protected]>
Senior HPC Systems Administrator
The George Washington University
On Thu, Oct 30, 2014 at 12:09 PM, Aaron Kitzmiller
<[email protected] <mailto:[email protected]>> wrote:
Has anyone started / finished / thought about putting together a
port forwarding spank plugin? Something that does the following:
srun ... --tunnel 8888:8888,8080:8090 ...
allowing a client user to map ports all the way back to their
desktop from our login nodes. As you can probably tell from the
8888, it would be useful for iPython notebooks, among other things.
I've been experimenting a bit myself, but my C is, charitably,
underwhelming, and I'm a bit unsure about how to clean up afterward.
Aaron K.
