Login Node PoliciesThe login nodes are shared resources intended for editing and managing files, submitting and monitoring jobs, as well as compiling and linking. Use of scp, sftp, or rsync for large file transfers should be avoided. Details on acceptable use of Blue Waters login nodes and methods to enforce these policies, are discussed below. Accpetable useages are those which do not violate the terms of use agreement and do not impact the login experience for other Blue Waters users. Use of the Blue Waters login nodes that does not fit within the terms of use or impacts other users will be cause for review by the Blue Waters Project Office. Long running processesTo regulate the use of the login nodes (h2ologin[1-4]) a process watcher has been implemented. The process watcher monitors processes running on the login nodes recording the CPU utilization per task per user per login node. The policy for long running user tasks are:
Idle Session LimitsUnattended/idle sessions have an ssh session timeout of 4 hours. Screen sessions may persist longer, but left unattended/idle, will timeout and be terminated after 3 days. These policies exist for both security and resource management purposes. [Update 5/14/2020]
RsyncThe use of rsync can impact the experience of all users of a login node if used improperly. Rsync is recommended for transfer of source code and small amounts of data between Blue Waters and other systems. Large data transfers should use the recommended method of Globus Online. To regulate usage, user rsync processes utilizing Blue Waters login nodes [h2ologin1-4] as a source or destination are restricted to one instance per user per login node. An error message will be displayed with our policy details for rsync processes originating from Blue Waters login nodes. External rsync processes above our limit of one will be denied connection with an error message "protocol version mismatch -- is your shell clean? (see the rsync man page for an explanation) rsync error: protocol incompatibility (code 2) at compat.c(171) [sender=3.0.4]" CrontabThe use of crontab tool is not allowed on Blue Waters. This policy is implemented to prevent the potential interference of user processes with maintenance work, and to improve the transparency of processes running on the service nodes. Upon execution of crontab tool, a message will be printed "You (username) are not allowed to use this program (crontab)". |