►
From YouTube: 3. Connecting to NERSC via SSH and NX
Description
Learn about how to connect to NERSC resources through SSH and NX.
Slides for all sessions can be downloaded from here: https://www.nersc.gov/users/training/events/new-user-training-june-21-2019/
A
Okay,
so
hey
I'm
Steve
leak,
I'm
part
of
the
user
engagement
group
I'm.
One
of
the
people
who
responds
when
you
send
a
ticket
in
to
help
darkness
gov,
so
a
little
bit
about
getting
connected
to
nurse
could
look
around
the
room.
How
many
people
have
already
successfully
logged
on
and
done
something
the
majority?
Actually
that's
good.
A
So
there
are
a
few
other
options
that
you
may
or
may
not
have
seen
yet
so
this
morning,
we'll
go
quickly
through
some
of
the
options
that
you
have
for
connecting
a
few
words
about
multi-factor
authentication
and
how
to
use
it.
So
Clayton
already
said
a
little
about
that
before
we'll
touch
briefly
on
the
perennial
question
of
I
forgot,
my
password
and
then
a
little
bit
more
detail
about
some
of
that.
The
key
options
for
connecting,
which
is
through
NX,
also
called
no
machine
and
SSH
all
right.
A
So
when
you're
connecting
to
nurse
this
diagrams
become
a
little
bit
simpler
in
there
in
recent
months
since
Edison
retired,
you
will
mostly
be
connecting
to
our
primary
machine
over
here,
which
is
Cori.
It
has
a
number
of
file
systems
available
to
it,
which
are
also
variously
available
to
the
outside
world
and
over
on
the
right-hand
side.
Here
you
can
see
there's
a
couple
of
ways
of
connecting
some
of
them
involved
going
through
your
web
browser,
some
of
them
involved
going
through
a
terminal
program
or
client.
A
Connecting
is
also
a
little
bit
separate
to
moving
data
around
you
can
move
data
around
with
SSH
through
the
same
means
that
you
connect,
but
you
can
also
move
data
around
separately
from
your
connection
that
can
be
quite
useful
when
you're
moving
a
large
amount,
so
first
of
all
multi-factor
authentication.
So
in
our
case,
multi-factor
authentication
means
your
name
password,
plus
a
one-time
password
that
you
get
from
Google
Authenticator
generally
on
your
phone.
A
We
do
have
an
alternative
to
backup
option,
which
is
handy
if
your
you
forgot
your
phone
for
instance,
or
if
you
change
phones
having
a
plan
B,
it's
quite
useful
and
that's
a
orthey
on
the
desktop
which
you
can
download
from
or
see
comm
there.
The
benefit
of
multi-factor
authentication.
Is
that
because
your
password
is
no
longer
enough,
it's
much
harder
for
somebody
to
hack
your
phone
they've
got
to
know
your
password
to
hack.
A
A
So
a
quick
look
of
what
it
looks
like
and
how
you
go
about
connecting
through
mfa,
so
using
the
Shibboleth
systems.
This
is
things
like
help.
Nurse
gov
you
go
to
the
web.
Page
you'll
see
a
place
for
a
login
name
and
password
you
type.
Those
in
in
this
example
we're
using
orthey
on
the
desktop.
This
is
what
it
looks
like.
So
we
type
in
the
password,
we
click
Next
and
then
the
system
will
ask
for
the
one-time
password.
A
A
A
A
A
All
right
so
ways
of
connecting
to
Naskh
we'll
talk
a
little
bit
about
some
of
the
options
available
through
the
web,
so
next
exercise
in
the
same
browser
window
or
a
new
tab
pointed
at
Gulf,
so
you'll
notice
that
there's
a
few
nice
gov
sites,
wws
gov,
is
kind
of
our
front
page
that
tends
to
be
static.
Information
about
nask
as
users,
the
ones
that
you'll
most
use
gov,
which
is
kind
of
dynamic,
live
information
about
nurse
in
your
account.
So
if
you've
pointed
your
browser
at
it
now,
you
should
see
something
like
this.
A
A
particularly
useful
thing
is
over
here.
On
the
left
hand,
right
hand,
side
of
the
screen
is
a
list
of
status
of
different
systems
and,
as
you
can
see,
this
is
a
rather
old
screenshot.
That
has
a
few
systems
that
are
no
longer
there
and
it
shows
that
everything's
up
other
useful
things,
if
you
sign
in
it,
will
take
you
to
the
same
sort
of
your
page
with
mfa
as
you've
seen
before,
but
once
you've
logged
in
you
can
see
things
like
yeah
how
you're
going
with
your
repo
usage.
A
What's
your
current
balance,
what
have
you
used
recently?
What
your
disk
usage
is
like
yeah,
whether
you're
coming
close
to
quota
project
disk
active
jobs,
you
scroll
down,
there's
a
bit
more,
and
you
know
this.
This
bar
on
the
left
hand.
Side
here
is
worth
exploring.
There's
a
lot
of
your
useful
and
interesting
information
about
the
state
of
the
system.
For
instance,
you
can
see
things
like.
A
What's
the
queue
wait
time
at
the
moment,
a
couple
of
particularly
interesting
ones
from
the
point
of
view
of
connecting
down
here,
you'll
see
an
X
desktop
and
Jupiter
hub.
So
NX
has
a
web
interface
as
well
as
a
desktop
client.
We
actually
recommend
that
you
use
the
desktop
client,
it's
generally
a
better
experience,
but
you
can
get
to
the
web
interface
through
gov.
A
A
You've
got
a
bunch
of
Windows
for
that
GUI
application
and
those
windows
being
displayed
on
your
laptop
and
the
X
protocol
is
how
the
client,
such
as
MATLAB
talks
to
the
window
manager
on
your
laptop
to
do
things
like
report,
your
mouse
movements
and
button
clicks
and
your
screen
updates,
and
so
on.
Like
that,
the
thing
is
that
X
is
a
really
talkative
protocol.
It
requires
low,
latency
and
high
bandwidth.
A
Otherwise
the
experience
can
be
quite
poor,
quite
slow,
and
this
is
fine.
If
you're
you
know
in
this
building
or
on
the
lab
and
you're
on
the
nurse
Network,
where
you've
got
a
fast
low,
latency
connection
to
Cory,
but
for
most
people.
That's
not
true,
where
you
know
off
in
other
labs
around
the
country
or
around
the
world
and
you've
got
to
go
through
the
Internet
and
the
Internet
is
slow.
A
So
we've
got
a
big
bottleneck
here.
Nx
helps
this.
By
running.
We
run
virtual
machines
with
desktops
inside
of
the
nurse
network,
and
then
you
can
use
the
NX
protocol
and
NX
client
to
connect
to
those
virtual
machines.
So
now,
when
you're
using
NX
that
talkative
susceptible
to
slowness,
stuff
is
all
happening
on
the
fast
network
and
a
much
faster
protocol
is
happening
over
the
slow
Network,
so
you
can
get
rid
of
the
bottleneck.
A
A
The
other
issue
with
GUI
applications
and
more
than
just
GUI
applications,
is
that
the
internet,
isn't,
you
know
especially
reliable,
and
if
your
connection
breaks,
you
know
that
can
cause
you
some
grief,
yo,
you
you
lose
state,
but
when
you're
using
NX
you're
running
on
a
desktop
or
a
virtual
desktop,
that's
you
know
running
here
inside
nurse.
So
if
your
connection
here
breaks
that
doesn't
actually
impact
your
GUI
programs,
you
can
just
reconnect
to
that
session.
A
So
it
means
there
that
will
survive
Network
breakages
as
well
as
things
that
you
need
to
kind
of
be
a
run
overnight.
For
instance,
you
want
to
shut
down
your
laptop
ok,
so
how
do
you
use
it?
It
will
run
on
any
desktop
or
laptop.
There
are
clients
for
Windows,
Linux
and
Mac,
and
you
know
if
you're,
if
you're,
really
in
a
bind,
there's
also
the
web
browser.
A
The
client
is
free,
you'll,
be
able
to
download
these
slides
later
and
click
on
these
links
to
get
it
or
you
can
just
search
for
NX
in
this
box
at
Doc's,
niece
gov.
So
if
there's
another
one,
another
good
site
to
bookmark
actually
is
Doc's
nurse
gov
lots
of
documentation
about
using
nursing
systems.
You'll
find
quite
often
that
when
you
have
a
question
you
can
find
the
answer
in
here
so
logging
into
NX
with
mfa
is
a
little
bit
different
to
all
of
the
other
systems,
and
this
is
because
it's
a
third-party
tool.
A
A
A
So
and
finally,
connecting
with
SSH
and
actually
once
you've
already
gone
in
with
an
X
you'll
use
SSH
on
the
terminal
to
take
the
next
step
and
and
attach
to
Cori
connector
Cori
all
nurse
nurse
systems,
which
currently
means
Cori
accessible
by
SSH.
You
need
some
sort
of
a
terminal
program
if
you
use
Mac
or
Linux.
This
is
fairly
easy.
It's
you
have
a
terminal
program
already
on
your
system.
If
you
use
Linux
chances,
are
you
already
know
all
this?
If
you
use
Windows,
there
are
a
few
more
steps.
A
You'll
need
to
download
some
sort
of
a
application
to
connect.
Putty
is
popular
and
quiet
usable.
You
can
also
download
X
win32,
which
has
got
a
much
bigger
sort
of
suite
of
things
or
git
bash
is
a
nice
client
for
it
too.
Another
one
there's
not
mentioned
here
is
that
if
you
go
to
Jupiter
Denis
gov,
you
can
actually
launch
a
terminal
from
Jupiter
as
well,
and
that
will
take
you
into
quarry
if
you're
gonna
use
xox
forwarding,
which
kinda
happens
automatically
with
NX,
but
if
you're
not
using
NX.
A
A
Linux
is
built-in
you
already
have
one
so
when
you
SSH
in
this
is
what
it
looks
like.
The
text
here
is
a
little
bit
small,
but
so
you
have
a
prompt
on
your
laptop
you
type
SSH,
l,
username,
Corey,
nice
guv
you'll,
see
a
big
warning
notice
that
yeah
this
is
a
government
system
and
Terms
&
Conditions.
A
Essentially,
and
then
you
should
see
a
prompt
that
says
password
plus
OTP
and
you
do
exactly
what
it
says
you
put
in
your
name
password
and
then
the
numbers
that
came
off,
Google,
Authenticator
or
authy
directly
with
no
spaces
in
between
and
you'll,
see
a
whole
lot
more
text
which,
if
you
stop
and
actually
look
at
for
a
few
minutes,
contains
some
useful
information.
Things
like
which
systems
are
up
at
the
moment
in
command
which
file
systems
are
up
at
the
moment.
Most
importantly,
upcoming
outages
is
good
information
to
know
and
past
outages.
A
So
if
you
are
using
exporting,
you
need
to
add
in
this
extra
option
why
so
SSH
L
my
username
capital
y
quarry
nice
golf
once
you've
done
that
you
should
be
able
to
yellow
the
next
program,
such
as
watch
a
load
MATLAB.
You
can
test
it
by
raining
X
term,
if
it's
a
relatively
lightweight
thing
to
test
with,
but
once
again,
if
you're,
using
X
programs,
GUI
programs
you're
better
off
generally
speaking,
using
NX.
A
A
So
after
you've
done
this
a
few
times,
you'll
probably
find
that
you're
getting
fed
up
with
typing
your
password
all
the
time
and
particularly
typing
your
password
and
getting
Google
Authenticator
out.
So
we
have
a
solution
for
this
tool
called
SSH
proxy,
and
what
that
gives.
You
is
a
short
term
certificate
that
you'll
need
to
update
once
per
day.
So
you
only
need
to
type
in
your
password
and
your
MFA
once
per
day.
A
A
So,
first
you
need
to
install
SSH
proxy
on
your
system,
so
you
can
go
to
the
nurse
web
page
connecting
to
nurse
SSH.
Look
for
installing
the
client
and
cut
and
paste
that
line.
It's
an
S
copy,
basically
as
copying
it
from
Cori
back
to
your
desktop
into
your
terminal.
You'll
need
to
edit
it
to
put
your
username
instead
of
the
word.
Your
username.
A
A
So
after
you've
done
that,
you
now
have
SSH
proxy
on
your
desktop.
If
you
do
LS
dash
L,
you
should
see
it
and
if
you
run
it
with
Shh,
it
will
give
options
that
you
can
use
and
some
particularly
useful
ones.
Is
you
and
your
nurse
username,
because
your
nurse
username
might
not
be
the
same
as
your
laptop
username
and
a
which
adds
it
to
your
SSH
key
chain.
A
Yeah,
that's
quite
convenient.
It
means
that
now
your
laptop
knows
who
you
are
at
nurse.
So
when
you,
this
is
a
gene
that
will
automatically
use
the
right
thing
and
then,
after
that
you
can
just
SSH
L
my
username
correos
gov
enter
and
the
key
from
the
keychain
from
SSH
proxy
will
take
you
straight
through
and
you
shouldn't
be
asked
for
anything
more.
A
B
A
So,
for
essentially
historical
reasons,
the
way
that
we
have
account
bash,
RC
and
bash
profile
files
is
that
we
have
kind
of
a
site-wide
one
that
everybody
uses
and
that
calls
one
called
bash.
Rc
e
xt,
&
bash
underscore
profile,
DHT
HT,
like
extension,
and
those
you
should
have
a
template
in
there.
You
can
do
LS
dash,
L,
eight
and
you
can
go
in
and
edit
those
and
add
your
personalization
into
those
those.
B
A
So
the
chief
for
the
audio,
the
the
question
was,
the
map
shows
a
bee
scratch
as
well
as
the
sea
spray.
So
there
are
a
few
scratch
file
systems
that
particularly
jgi
users,
use
that
are
separate
to
Corey's
central
scratch
system
and
they're
actually
implemented
using
the
NDF
file
system,
so
so
they're
in
a
different
location.
B
A
If
you
close
the
desktop
session
yeah,
then
your
UI
state
will
be,
you
know,
still
sort
of
running
I.
Think
after
after
a
certain
period
of
time,
a
couple
of
days
or
something
the
the
VM
gets
reset,
but
you
can
also
within
the
VM.
You
can
click
on
kind
of
beard.
If
we
look
at
the
start
button,
then
log
out
of
the
VM
and
close
the.