<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<div dir="ltr">Thank you everyone!
<div><br>
</div>
<div>We will Spank it first</div>
<div><br>
</div>
<div>
<div>
<div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div>
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr" style="font-size:small">Thanks,</div>
<div dir="ltr" style="font-size:small"><br>
Douglas Duckworth, MSc, LFCS<br>
HPC System Administrator<br>
<span style="font-size:12.8px"><a href="https://scu.med.cornell.edu" target="_blank">Scientific Computing Unit</a></span></div>
<div dir="ltr" style="font-size:small">Weill Cornell Medicine</div>
<div style="font-size:small">1300 York Avenue</div>
<div style="font-size:small">New York, NY 10065</div>
<div dir="ltr" style="font-size:small">
<div>E: <a href="mailto:doug@med.cornell.edu" target="_blank">doug@med.cornell.edu</a><br>
O: 212-746-6305<br>
F: 212-746-8690<br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Thu, Jul 11, 2019 at 11:52 AM Lloyd Brown <<a href="mailto:lloyd_brown@byu.edu">lloyd_brown@byu.edu</a>> wrote:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div bgcolor="#FFFFFF">
<p>We've taken the per-user-namespace approach, as my boss documented here: <a class="gmail-m_-5904776017099288788moz-txt-link-freetext" href="https://urldefense.proofpoint.com/v2/url?u=http-3A__tech.ryancox.net_2013_07_per-2Duser-2Dtmp-2Dand-2Ddevshm-2Ddirectories.html&d=DwMDaQ&c=lb62iw4YL4RFalcE2hQUQealT9-RXrryqt9KZX2qu2s&r=2Fzhh_78OGspKQpl_e-CbhH6xUjnRkaqPFUS2wTJ2cw&m=FtlmwwKvdNwTOpt7NYn5qNv3nnM1n_gPKkLKRf9sU2M&s=smITWE_yRmXkwcUHR-dtK5ud2wpxfEgo7GN10lr9Zw8&e=" target="_blank">
http://tech.ryancox.net/2013/07/per-user-tmp-and-devshm-directories.html</a></p>
<p>This setup makes sure that all user processes are in their own namespace, whether they're launched by slurm or not. We do put them inside a subdir of /tmp, but you could probably do something similar that puts them into /scratch.</p>
<p>Lloyd</p>
<p><br>
</p>
<div class="gmail-m_-5904776017099288788moz-cite-prefix">On 7/11/19 9:19 AM, Douglas Duckworth wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hello
<div><br>
</div>
<div>I am wondering if it's possible to hide a file system, that's world writable on compute node, logically within Slurm. That way any job a user runs cannot possible access this file system.</div>
<div><br>
</div>
<div>Essentially we define $TMPDIR as /scratch, which Slurm cleans up in epilogue scripts, but some users still keep writing to /tmp instead which we do not want. We would use tmpwatch to clean up /tmp but I would rather just prevent people from writing to
it within Slurm.</div>
<div><br>
</div>
<div>Thanks</div>
<div>Doug</div>
<div><br clear="all">
<div>
<div dir="ltr" class="gmail-m_-5904776017099288788gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div>
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr">
<div dir="ltr" style="font-size:small">Thanks,</div>
<div dir="ltr" style="font-size:small"><br>
Douglas Duckworth, MSc, LFCS<br>
HPC System Administrator<br>
<span style="font-size:12.8px"><a href="https://scu.med.cornell.edu" target="_blank">Scientific Computing Unit</a></span></div>
<div dir="ltr" style="font-size:small">Weill Cornell Medicine</div>
<div style="font-size:small">1300 York Avenue</div>
<div style="font-size:small">New York, NY 10065</div>
<div dir="ltr" style="font-size:small">
<div>E: <a href="mailto:doug@med.cornell.edu" target="_blank">doug@med.cornell.edu</a><br>
O: 212-746-6305<br>
F: 212-746-8690<br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
<pre class="gmail-m_-5904776017099288788moz-signature" cols="72">--
Lloyd Brown
HPC Systems Administrator
Office of Research Computing
Brigham Young University
<a class="gmail-m_-5904776017099288788moz-txt-link-freetext" href="https://urldefense.proofpoint.com/v2/url?u=http-3A__marylou.byu.edu&d=DwMDaQ&c=lb62iw4YL4RFalcE2hQUQealT9-RXrryqt9KZX2qu2s&r=2Fzhh_78OGspKQpl_e-CbhH6xUjnRkaqPFUS2wTJ2cw&m=FtlmwwKvdNwTOpt7NYn5qNv3nnM1n_gPKkLKRf9sU2M&s=IFnSJ4lm3f_je9hWbeJLXW_HSs6pfoWmQIEc6kdi6KE&e=" target="_blank">http://marylou.byu.edu</a></pre>
</div>
</blockquote>
</div>
</body>
</html>