Re: [Beowulf] Security issues

2008-10-24 Thread Tim Cutts
On 25 Oct 2008, at 5:01 am, Matt Lawrence wrote: On Fri, 24 Oct 2008, Alan Ward wrote: Perhaps an alternative way to go for a cluster install disk would be a bog standard Debian/Ubuntu/Kubuntu/Xubuntu boot iso image, with a customized install script that pulls in a suplementary set of pa

Re: [Beowulf] OT: readers choice awards

2008-10-24 Thread Matt Lawrence
On Fri, 24 Oct 2008, Robert G. Brown wrote: Awe, surely I could be "Best HPC software product or technology" (rgb-bot, after all:-). Or maybe "Best HPC cluster solution" -- "Ask rgb..." ;-) Maybe, but I would still rather vote for cymk instead.. -- Matt It's not what I know that counts. It's

RE: [Beowulf] Security issues

2008-10-24 Thread Matt Lawrence
On Fri, 24 Oct 2008, Alan Ward wrote: Perhaps an alternative way to go for a cluster install disk would be a bog standard Debian/Ubuntu/Kubuntu/Xubuntu boot iso image, with a customized install script that pulls in a suplementary set of packages over the network and does some extra configurati

Re: [Beowulf] Security issues

2008-10-24 Thread Geoff Jacobs
Robert G. Brown wrote: > On Fri, 24 Oct 2008, Geoff Jacobs wrote: > >> Or package the source packages and submit them upstream. Volunteer for a >> life of servitude! > > Well, I was thinking more of site-specific custom cuts a la this sort > of thing: > >> Usually when I build a cluster, I make

Re: [Beowulf] OT: readers choice awards

2008-10-24 Thread Robert G. Brown
On Fri, 24 Oct 2008, Joe Landman wrote: Don't know if there is interest here, but HPCwire has their annual readers choice awards. Unfortunately they don't have a category for RGB, but they should. Here is the linky to the blog entry ... http://www.hpcwire.com/blogs/2008_HPCwire_Readers_Choic

[Beowulf] OT: readers choice awards

2008-10-24 Thread Joe Landman
Don't know if there is interest here, but HPCwire has their annual readers choice awards. Unfortunately they don't have a category for RGB, but they should. Here is the linky to the blog entry ... http://www.hpcwire.com/blogs/2008_HPCwire_Readers_Choice_Nominations_Are_Open.html Vote early .

Re: [Beowulf] NFS over RDMA

2008-10-24 Thread Nifty niftyompi Mitch
On Fri, Oct 24, 2008 at 03:31:19PM +0100, John Hearns wrote: > >Joe has just mentioned NFS over RDMA, a subject which I have somewhat >of a passing interest in. > >What's the perceived wisdom on it? Biggest, best shiny new thing on the >block? Works just fine? There are some hard

Re: [Beowulf] NFS over RDMA

2008-10-24 Thread Joe Landman
John Hearns wrote: Joe has just mentioned NFS over RDMA, a subject which I have somewhat of a passing interest in. What's the perceived wisdom on it? Biggest, best shiny new thing on the block? Works just fine? Or should it be in the basement inside a locked filing cabinet in a disused lavatory

Re: [Beowulf] Security issues

2008-10-24 Thread Robert G. Brown
On Fri, 24 Oct 2008, Geoff Jacobs wrote: Or package the source packages and submit them upstream. Volunteer for a life of servitude! Well, I was thinking more of site-specific custom cuts a la this sort of thing: Usually when I build a cluster, I make local builds of MPICH2 for each compiler

Re: [Beowulf] Security issues

2008-10-24 Thread Tim Cutts
On 24 Oct 2008, at 3:09 pm, Joe Landman wrote: Carsten Aulbert wrote: Hi Jon Jon Aquilina wrote: but why waste time sifting through all 26,000+ pkgs in the repos when u can have a distro with repos focused on clustering pkgs? Because you might/will save time later when you hit user requests

Re: [Beowulf] Security issues

2008-10-24 Thread Mark Hahn
did this person use the ssh exploit that red hat found a few months ago? are you referring to the event which caused them to change their rpm signing keys? I thought that was not an exploit, but rather that someone's ssh key got exposed one way or other. _

[Beowulf] NFS over RDMA

2008-10-24 Thread John Hearns
Joe has just mentioned NFS over RDMA, a subject which I have somewhat of a passing interest in. What's the perceived wisdom on it? Biggest, best shiny new thing on the block? Works just fine? Or should it be in the basement inside a locked filing cabinet in a disused lavatory with a sign saying Bew

Re: [Beowulf] Security issues

2008-10-24 Thread Carsten Aulbert
Hi Alan, Alan Ward wrote: > My point was that it may be easier to modify a Debian (or Ubuntu server) > edition than Kubuntu since Kubuntu is more desktop-oriented. As a starting point I would always use Ubuntu's server edition when you want to go with Ubuntu. http://www.ubuntu.com/products/whati

Re: [Beowulf] Security issues

2008-10-24 Thread Joe Landman
Carsten Aulbert wrote: Hi Jon Jon Aquilina wrote: but why waste time sifting through all 26,000+ pkgs in the repos when u can have a distro with repos focused on clustering pkgs? Because you might/will save time later when you hit user requests which want packages which are not pre-packaged i

RE: [Beowulf] Security issues

2008-10-24 Thread Alan Ward
It is much the same in the Debian world. As has been pointed out today, there are some differences between Ubuntu and Debian as to package versions (different kernel versions) and artwork packages, but you can often use packages from a Debian repository with a Ubuntu installation. Perhaps also

[Beowulf] Anyone going to SC08 up for an informal BOF on cluster security?

2008-10-24 Thread Joe Landman
Probably too late to get it onto the schedule, but I think it could be a useful discussion to get troubles and best practices talked about. Certainly away from areas where people may become unhappy with content or wording, and we can all have frank and open discussions. This would be a good t

Re: [Beowulf] Security issues

2008-10-24 Thread Geoff Jacobs
Robert G. Brown wrote: > On Fri, 24 Oct 2008, Jon Aquilina wrote: > >> true but if there is something that isnt in there i would be more then >> willing to add it to the repo. > > But what is the ADVANTAGE of reducing the number of packages in a > warehouse from which one pulls packages, when the

[Beowulf] Re: Active directory with Linux

2008-10-24 Thread Dave Love
Prentice Bisbal <[EMAIL PROTECTED]> writes: > The trust is that if you already have and AD installation and the AD > controllers have Microsoft Services for Unix (MSSFU, or just SFU) 3.5 or > later, you have everything you need to use your AD servers as Kerberos > and LDAP masters for your Linux c

[Beowulf] Re: Active directory with Linux

2008-10-24 Thread Dave Love
"John Hearns" <[EMAIL PROTECTED]> writes: > I have to confess my Google skills have failed me. > If I'm not wrong, there was a recent discussion in these parts re. using > Active Directory > with Linux. [I assume that means GNU/Linux.] You probably want to be more specific about the value of `us

[Beowulf] Re: Active directory with Linux

2008-10-24 Thread Dave Love
Chris Samuel <[EMAIL PROTECTED]> writes: > We were trying to do that for one of our members, but > were told by the AD admins that we could only use the > users credentials to bind to the AD server for queries > as they were using lockouts on failed password attempts > and so would not provide a "

Re: [Beowulf] Security issues

2008-10-24 Thread Robert G. Brown
On Fri, 24 Oct 2008, Jon Aquilina wrote: true but if there is something that isnt in there i would be more then willing to add it to the repo. But what is the ADVANTAGE of reducing the number of packages in a warehouse from which one pulls packages, when the filled warehouse already exists and

Re: [Beowulf] Security issues

2008-10-24 Thread Tim Cutts
On 24 Oct 2008, at 12:42 pm, Jon Aquilina wrote: but why waste time sifting through all 26,000+ pkgs in the repos when u can have a distro with repos focused on clustering pkgs? They're grouped according to purpose, so I didn't have to do any such sifting. That list I produced from a cur

Re: [Beowulf] Security issues

2008-10-24 Thread Jon Aquilina
true but if there is something that isnt in there i would be more then willing to add it to the repo. On Fri, Oct 24, 2008 at 1:49 PM, Carsten Aulbert <[EMAIL PROTECTED] > wrote: > Hi Jon > > Jon Aquilina wrote: > > but why waste time sifting through all 26,000+ pkgs in the repos when u > > can h

Re: [Beowulf] Security issues

2008-10-24 Thread Carsten Aulbert
Hi Jon Jon Aquilina wrote: > but why waste time sifting through all 26,000+ pkgs in the repos when u > can have a distro with repos focused on clustering pkgs? Because you might/will save time later when you hit user requests which want packages which are not pre-packaged in your cluster distro.

Re: [Beowulf] Security issues

2008-10-24 Thread Jon Aquilina
but why waste time sifting through all 26,000+ pkgs in the repos when u can have a distro with repos focused on clustering pkgs? On Fri, Oct 24, 2008 at 1:19 PM, Tim Cutts <[EMAIL PROTECTED]> wrote: > > On 24 Oct 2008, at 11:26 am, Alan Ward wrote: > > >> >> Kubuntu-derived? Would Debian not be a

[Beowulf] Idle core on overloaded CPU?

2008-10-24 Thread Carsten Aulbert
Hi, (I send this yesterday already to LKML, so sorry if you receive this twice), on Intel X3220 CPU based systems (4 physical cores) I came across the following thing (Debian etch, with vanilla kernel 2.6.25.9): starting the following: $ screen -d -m stress -c 2 $ nice -19 screen -d -m stress -c

Re: [Beowulf] Security issues

2008-10-24 Thread Tim Cutts
On 24 Oct 2008, at 11:26 am, Alan Ward wrote: Kubuntu-derived? Would Debian not be a better way to go, as in not installing any graphical stuff unless the user needs it? Ubuntu is a little ahead of Debian in terms of some of the cluster software it contains. For example, gluster is in

Re: [Beowulf] Security issues

2008-10-24 Thread Tim Cutts
On 24 Oct 2008, at 11:16 am, Jon Aquilina wrote: my response Im not goign to turn this into a distro war everyone is entitled to their opinions and preferences. that is not the problem packaing or repackaing everything. are there any debian based distros out there? You don't really ne

RE: [Beowulf] Security issues

2008-10-24 Thread Alan Ward
Kubuntu-derived? Would Debian not be a better way to go, as in not installing any graphical stuff unless the user needs it? As for testing, if you have a workstation with 1-2 Gigs of RAM, perhaps you could consider a "virtual cluster". Cheers, -Alan -Original Message- From: [EMAI

Re: [Beowulf] Security issues

2008-10-24 Thread Jon Aquilina
>>my response Im not goign to turn this into a distro war everyone is entitled to their opinions and preferences. that is not the problem packaing or repackaing everything. are there any debian based distros out there? >> from john hearns Oooh, here we go again. Distro wars :-) Jon, if I may b

RS: [Beowulf] Cases for DIY boxen

2008-10-24 Thread Alan Ward
Nowadays many exposition halls, restaurants etc. in Europe have stratified wood beams. These need to be treated with fire retardants by regulation, in which case they are actually more safe than steel (steel bends and bucles when warmed). You could take a look at whatever products they use to

Re: [Beowulf] Security issues

2008-10-24 Thread Jon Aquilina
now i see why the sudo approach adopted by debian and the kubuntu line is a good way to go. this is providing me with real motivation to start the development of my own kubuntu derived cluster distro. thing is i would need someone to give lists of pkgs that is used in a cluster and also testers and

RE: [Beowulf] Cases for DIY boxen

2008-10-24 Thread Dan.Kidger
I am not so sure that wood is as flammable as you think. Hard wood needs sustained heat for a reasonably long period of time to get going. And anyway for a computer system there is no reason why you can't do some fireproofing - get some borates, silicates or other salts to keep the organic mat

Re: [Beowulf] Active directory with Linux

2008-10-24 Thread Tim Cutts
On 24 Oct 2008, at 12:38 am, Chris Samuel wrote: - "Tim Cutts" <[EMAIL PROTECTED]> wrote: If you just want to authenticate against AD, you don't need anything commercial at all. You can just configure PAM on your Linux boxes to authenticate against AD, and configure your nsswitch.conf t

Re: [Beowulf] Security issues

2008-10-24 Thread Jon Aquilina
did this person use the ssh exploit that red hat found a few months ago? On Fri, Oct 24, 2008 at 9:22 AM, Nifty niftyompi Mitch < [EMAIL PROTECTED]> wrote: > On Fri, Oct 24, 2008 at 05:39:17AM +0200, B. Vincent Diepeveen wrote: > . > > hi Joe, > > > > Thanks for your post. Very interesting to

Re: [Beowulf] Security issues

2008-10-24 Thread Nifty niftyompi Mitch
On Fri, Oct 24, 2008 at 05:39:17AM +0200, B. Vincent Diepeveen wrote: . > hi Joe, > > Thanks for your post. Very interesting to see all this. Especially the > summary on what the > hacker tried. > > Note i was quite amazed that you mentioned Rocks distribution getting > used with you. > A few