Changes

Jump to navigation Jump to search
Line 64: Line 64:  
== Usage guidelines (to be completed) ==
 
== Usage guidelines (to be completed) ==
 
Here is a few guides to follow for all new virtual machines:
 
Here is a few guides to follow for all new virtual machines:
# MUST: no direct root access on the nodes, even with SSH key.
+
# MUST: no SSH root login on the nodes, even with SSH key.
 
# MUST: sudoers (root access using sudo) limited to SSH key based authentication
 
# MUST: sudoers (root access using sudo) limited to SSH key based authentication
 
# SHOULD: use SSH keys published on Github: giving access to a server is then simple and secure: <pre>curl https://github.com/CharlesNepote.keys | tee -a ~/.ssh/authorized_keys</pre>
 
# SHOULD: use SSH keys published on Github: giving access to a server is then simple and secure: <pre>curl https://github.com/CharlesNepote.keys | tee -a ~/.ssh/authorized_keys</pre>
 
# SHOULD: take care of production resources: use "nice" / "ionice" for scripts manually launched. Stéphane's tip: just use <pre>nice ./mycommand whatever arguments</pre> (nice default to lower the priority). CPU and I/O priorities can be set if needed at the virtualization level.
 
# SHOULD: take care of production resources: use "nice" / "ionice" for scripts manually launched. Stéphane's tip: just use <pre>nice ./mycommand whatever arguments</pre> (nice default to lower the priority). CPU and I/O priorities can be set if needed at the virtualization level.
29

edits

Navigation menu