#language en #refresh 999999 ## nearly two weeks until an update occurs [[TableOfContents(2)]] = Overview = == Basic data == || Hostname || `gs2.fluid.tuwien.ac.at` || || Model || [https://www.supermicro.com/en/products/motherboard/X10SRW-F Supermicro X10SRW-F] S/N: NM154S015315|| || Purpose || graphics server || || Operating system || debian || || Management interface || http://mgs2.fluid.tuwien.ac.at || || Operator credentials || user: e322 (@mgs2; allowed to power on/off gs2) || || || !Re2300PrandtlTaylor || || Authentication options || TU password || == Hardware == || CPU || [https://ark.intel.com/content/www/us/en/ark/products/82763/intel-xeon-processor-e51620-v3-10m-cache-3-50-ghz.html Intel(R) Xeon(R) CPU E5-1620 v3 @ 3.50GHz (4 cores)]; Socket: FCLGA2011-3 || || RAM || 32 GiB; up to 256 GB DDR4-2400MHz || || Storage || 500 GB (/) Samsung SSD 850 EVO 500GB || || Graphics card || !GeForce GTX 960 || || BMC || AST2400 controller || || Motherboard battery type || CR2032 || == Firmware == || BIOS || Version 3.4, Build Date 2021-06-05 || || BMC || Version 03.93, Build Date 2021-05-28 || User's manuals for [:gs1?action=AttachFile&do=get&target=MNL-1570.pdf: motherboard/BIOS] and [:gs1?action=AttachFile&do=get&target=IPMI_Users_Guide.pdf: BMC/IPMI]. == Configuration == All customized configuration files are usually marked by group `oswat`, sometimes also user `oswat`,[[BR]] `find /etc -user oswat -o -group oswat` == BIOS == press DEL to enter BIOS, F11 for boot menu == Admins == * Thomas Loimer * Rudolf Ladner (ZID) = Firmware update = == Baseboard Management Controller (BMC) == Update firmware, because newer version provides iKVM/HTML5 virtual console and [https://en.wikipedia.org/wiki/Redfish_(specification) Redfish].[[BR]] Initially, IP Address of BMC was set to static 128.131.183.xxx - needed to go to the server room and access BMC from the console. On 2024-04-24, download firmware BMC_X10AST2400-32M_20210528_03.93_STD.zip from https://www.supermicro.com/en/support/resources/downloadcenter/firmware/MBD-X10SRW-F/BMC [[BR]] Unzip, trying to dump current firmware with binary `AlUpdate` contained in zip-file resulted in core dump.[[BR]] Log in into GUI of BMC -> Maintenance -> Update Firmware[[BR]] upload exactly 32 MiB file BMC_X10AST2400-32M_20210528_03.93_STD.bin '''Uncheck''' box `Preserve configuration`; Network settings thankfully remain. == BIOS == Download firmware on 2024-04-24 from https://www.supermicro.com/en/support/resources/downloadcenter/firmware/MBD-X10SRW-F/BIOS, file X10SRW1.605.zip, unzip. BIOS update needs an activation key, get one by using the tool from https://github.com/bwachter/supermicro-ipmi-key.[[BR]] Generate activation key, `./supermicro-ipmi-key 0c:c4:7a:37:57:9d`, output: `90d4 cdb7 ab21 0cf7 33d0 96fa`. Log in into GUI of BMC -> BIOS Update, Choose file (exactly 16 MiB) `X10SRW1.605`, uncheck any preserve-boxes (ME region, NVRAM, SMBIOS). Click Start Upgrade. === BIOS Settings === Advanced -> PCIe/PCI/PnP Configuration: [[BR]] `RSC-R1UW-E8R SLOT1 PCI-E X8 OPROM`, `RSC-R1UW-2E16 SLOT1 PCI-E X16 OPROM`, `RSC-R1UW-2E16 SLOT1 PCI-E X16 OPROM`: Set type to `EFI`, was `Legacy`. [[BR]] `Onboard LAN OPROM Type`: `EFI`, was `Legacy`.[[BR]] Boot: Set boot type to `EFI`, was `Dual`. = Installation of the base system (2024-04-29) = Boot - the only boot media present is PXE booting - choose[[BR]] Linuxe Network Installs -> Debian -> Text Based Install == Debian Installer == Language: C - no localization[[BR]] Select your location: Europe -> Austria[[BR]] keymap to use: American English (since this is the keymap on the virtual iKVM/HTML5 keyboard)[[BR]] Configure the network: eno1 (yields a dhcp address during installation) -> hostname: gs2[[BR]] -> domain name: fluid.tuwien.ac.at[[BR]] Choose a mirror of the Debian archive: enter information manually[[BR]] -> mirror hostname: gd.tuwien.ac.at[[BR]] -> mirror directory: /opsys/linux/debian[[BR]] -> proxy information: (blank)[[BR]] Set up users and passwords: -> root password: ***[[BR]] -> Full name for user account: (blank)[[BR]] -> username: oswat[[BR]] -> Password for the new user: (same as root)[[BR]] Partition disks:[[BR]] -> Guided - use entire disk[[BR]] -> Select disk to partition: SCSI5 (0,0,0) (sda) - 500.1 GB ATA Samsung SSD 850[[BR]] -> All files in one partition ... then, change partition to[[BR]] #1 267.4 MB B f ESP efi_fs EFI System Partition, bootable (choose 265 MiB)[[BR]] #2 465 GB f ext4 root_fs /[[BR]] #3 34.8 GB f swap [[BR]] Configuring popularity-contest: Yes[[BR]] Software selection: (nothing except)[[BR]] [*] SSH server[[BR]] [*] standard system utilities[[BR]] '''Reboot''' == Network == Remove legacy ifupdown, use systemd-networkd and systemd-resolved. {{{ ssh oswat@dhcp1 # Log in to the temporary address # some network details are already set chgrp oswat /etc/hostname # the static IP address cat >/etc/systemd/network/20-gs2.network </root/.ssh/authorized_keys }}} == Package sources == Use the local mirror gd.tuwien.ac.at, as entered during installation.[[BR]] Do not install recommended packages. {{{ chgrp oswat /etc/apt/sources.list echo 'APT::Install-Recommends "false";' >/etc/apt/apt.conf.d/90recommended_false chgrp oswat /etc/apt/apt.conf.d/90recommended_false }}} == Have sshd not accept user's environment == Do not forward the client's locale, since there is only C/POSIX on gs1. {{{ apt install patch patch /etc/ssh/sshd_config <>/etc/nslcd.conf </etc/motd </tmp/authorized_keys" # as root on b, copy authorized_keys to its final destination root@b$ install -m 600 -o gs2-root -g gs2-root /tmp/authorized_keys /mnt/backup/gs2/.ssh/ \ && rm /tmp/authorized_keys # daily backup git clone oswat@b.fluid.tuwien.ac.at:backup-scripts.git /opt/borgscripts cat >>/etc/cron.d/borg-backup </etc/packages/install` and `apt-mark showmanual >/etc/packages/manual` each time /var/log/apt/history.log is modified. {{{ mkdir /etc/packages chgrp oswat /etc/packages cat >/etc/systemd/system/packages-@.path </etc/systemd/system/packages-@.service <