IBM-Cloud / hpc-cluster-slurm

Apache License 2.0
1 stars 4 forks source link

Slurm README

Slurm on IBM Cloud enables customers to use Terraform as an automation tool to easily and quickly deploy Slurm clusters. The automation has been validated and tested for Slurm 21.08.5-2ubuntu1 Advanced Edition. For more details you can refer to our documentation

Support

Depending on the area where the issue is encountered use the following channels for getting help with the solution:

  1. If the issue is with automation code, you can create an issue on this git repository
  2. If the issue is with IBM Cloud infrastructure you can create a cloud support case here
  3. If the issue is with Slurm software, you can work with SchedMD corporation and get help here

Deployment with Schematics CLI on IBM Cloud

Initial configuration:

$ cp sample/configs/hpc_workspace_config.json config.json
$ ibmcloud iam api-key-create my-api-key --file ~/.ibm-api-key.json -d "my api key"
$ cat ~/.ibm-api-key.json | jq -r ."apikey"
# copy your apikey
$ vim config.json
# paste your apikey

You also need to generate github token if you use private Github repository.

Deployment:

$ ibmcloud schematics workspace new -f config.json --github-token xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
$ ibmcloud schematics workspace list
Name               ID                                            Description   Status     Frozen
hpcc-slurm-test       us-east.workspace.hpcc-slurm-test.7cbc3f6b                     INACTIVE   False

OK
$ ibmcloud schematics plan --id us-east.workspace.hpcc-slurm-test.7cbc3f6b

Activity ID b0a909030f071f51d6ceb48b62ee1671

OK
$ ibmcloud schematics apply --id us-east.workspace.hpcc-slurm-test.7cbc3f6b
Do you really want to perform this action? [y/N]> y

Activity ID b0a909030f071f51d6ceb48b62ee1672

OK
$ ibmcloud schematics logs --id us-east.workspace.hpcc-slurm-test.7cbc3f6b
...
 2023/04/26 08:20:37 Terraform apply | Apply complete! Resources: 34 added, 0 changed, 0 destroyed.
 2023/04/26 08:20:37 Terraform apply | 
 2023/04/26 08:20:37 Terraform apply | Outputs:
 2023/04/26 08:20:37 Terraform apply | 
 2023/04/26 08:20:37 Terraform apply | nfs_ssh_command = "ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -J root@158.177.2.7 root@10.243.0.36"
 2023/04/26 08:20:37 Terraform apply | region_name = "eu-de"
 2023/04/26 08:20:37 Terraform apply | ssh_command = "ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -J root@158.177.2.7  root@10.243.0.37"
 2023/04/26 08:20:37 Terraform apply | vpc_name = "marvel-slurm-vpc --  - r010-5d7c29b4-5585-49bc-bfde-ab145d9f104b"
 2023/04/26 08:20:37 Command finished successfully.

OK
$ ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -J root@158.177.2.7  root@10.243.0.37"

$ ibmcloud schematics destroy --id us-east.workspace.hpcc-slurm-test.7cbc3f6b
Do you really want to perform this action? [y/N]> y

Activity ID b0a909030f071f51d6ceb48b62ee1673

OK

Deployment with Schematics UI on IBM Cloud

  1. Go to https://cloud.ibm.com/schematics, select Workspaces and then select create workspace using Schematics.
  2. In the Specify template section:
    • Provide your GitHub, GitLab or Bitbucket repository URL where your Terraform files resides.
    • If you are using a private GitHub repository, provide your personal GitHub access token that you set up in Setting up the IBM Cloud Schematics prerequisites.
    • Select the terraform version, the version of the Terraform engine that's used in the Schematics workspace, and then click Next.
  3. In the workspace details section:
    • Specify the Name for your Schematics workspace
    • Define any Tags that you want to associate with the resources provisioned through the offering. The tags can later be used to query the resources in the IBM Cloud console.
    • Select a Resource group
    • Select a Location. Location determines where workspace actions will be executed
    • Provide a Description (optional) of the Schematics workspace.
    • Click on Next and Then click Create. The Schematics workspace is created with the name you specified.
  4. Go to Schematic Workspace Settings, under variable section, click on "burger icons" to update the following parameters:
    • ssh_key_name with your ibm cloud SSH key name such as "slurm-ssh-key" created in a specific region in IBM Cloud
    • api_key with the api key value and mark it as sensitive to hide the API key in the IBM Cloud Console
    • Update cluster_prefix value to the specific cluster prefix for your Slurm cluster
    • Update cluster_id the ID of the cluster used by Slurm for configuration of resources
    • Update the worker_node_count as per your requirement
  5. Click on "Generate Plan" and ensure there are no errors and fix the errors if there are any.
  6. After "Generate Plan" gives no errors, click on "Apply Plan" to create resources.
  7. When you click on "Apply plan" the post provisioning scripts run and the Slurm workload manager get installed.
  8. Click on Jobs then Activity and Show more to view the resource creation progress.
  9. Click on "Show more" if the "Apply Plan" activity is successful and copy the output SSH command to your laptop terminal to SSH to management node via a jump host public ip to SSH one of the nodes.
  10. Also use this jump host public ip and change the IP address of the node you want to access via the jump host to access specific hosts.

Storage Node and NFS Setup

The storage node is configured as an NFS server and the data volume is mounted to the /data directory which is exported to share with Slurm management nodes.

Steps to validate Cluster setups

How to login cluster nodes:
Storage Node
- On a local machine, ssh [-i <identity_file>] -J root@<floating_ip_of_bastion_node> ubuntu@<private_ip_of_storage_node>
  Example: ssh -J root@52.117.4.140  root@10.243.0.36 (or) ssh -i id_rsa -J root@52.117.4.140  root@10.243.0.36
Slurm Management / Slurm Worker / Scale Storage Node
- On a local machine, ssh [-i <identity_file>] -J root@<floating_ip_of_bastion_node> ubuntu@<private_ip_for_the_node>
  Example:ssh -J root@52.117.4.140  ubuntu@10.243.0.37 (or) ssh -i id_rsa -J root@52.117.4.140  ubuntu@10.243.0.37
1. To validate the NFS storage is setup and exported correctly
# exportfs -v
/data         <private_ip_of_storage_node>/27(sync,wdelay,hide,no_subtree_check,sec=sys,rw,secure,no_root_squash,no_all_squash)
2. Steps to validate the cluster status
3. Steps to validate the cluster status

Testing

Stop ufw firewall

This was run using Slurm version 21.08.5-2ubuntu1 Name Version
slurm 21.08.5-2ubuntu1

Authentication issues

Issues with munge => munge daemon or munge key not same on all nodes

Steps to validate spectrum scale integration

How to login Scale Storage nodes and Access Scale GUI:
Scale Storage Node
- On a local machine, ssh [-i <identity_file>] -L 22443:localhost:443 -J root@<floating_ip_of_bastion_node> ubuntu@<private_ip_of_scale_storage_node>
  Example: ssh -L 22443:localhost:443 -J root@52.117.4.140  root@10.243.0.39 (or) ssh -i id_rsa -L 22443:localhost:443 -J root@52.117.4.140  root@10.243.0.39
Access Scale Storage GUI
- On local machine, open a local browser window and go to this URL:  https://localhost:22443

Requirements

Name Version
http 3.4.0
ibm 1.55.0

Providers

Name Version
http 3.4.0
ibm 1.55.0
null 3.2.1
template 2.2.0

Modules

Name Source Version
inbound_sg_ingress_all_local_rule ./resources/ibmcloud/security/security_group_ingress_all_local n/a
inbound_sg_rule ./resources/ibmcloud/security/security_group_inbound_rule n/a
ingress_vpn ./resources/ibmcloud/security/vpn_ingress_sg_rule n/a
invoke_storage_playbook ./resources/scale_common/ansible_playbook n/a
login_fip ./resources/ibmcloud/network/floating_ip n/a
login_inbound_security_rules ./resources/ibmcloud/security/login_sg_inbound_rule n/a
login_outbound_security_rule ./resources/ibmcloud/security/login_sg_outbound_rule n/a
login_sg ./resources/ibmcloud/security/login_sg n/a
login_ssh_key ./resources/scale_common/generate_keys n/a
login_subnet ./resources/ibmcloud/network/login_subnet n/a
login_vsi ./resources/ibmcloud/compute/vsi_login n/a
management ./resources/ibmcloud/compute/vsi_management_server n/a
nfs_storage ./resources/ibmcloud/compute/vsi_nfs_storage_server n/a
nfs_volume ./resources/ibmcloud/network/nfs_volume n/a
outbound_sg_rule ./resources/ibmcloud/security/security_group_outbound_rule n/a
prepare_spectrum_scale_ansible_repo ./resources/scale_common/git_utils n/a
public_gw ./resources/ibmcloud/network/public_gw n/a
schematics_sg_tcp_rule ./resources/ibmcloud/security/security_tcp_rule n/a
sg ./resources/ibmcloud/security/security_group n/a
storage_cluster_configuration ./resources/scale_common/storage_configuration n/a
subnet ./resources/ibmcloud/network/subnet n/a
vpc ./resources/ibmcloud/network/vpc n/a
vpc_address_prefix ./resources/ibmcloud/network/vpc_address_prefix n/a
vpn ./resources/ibmcloud/network/vpn n/a
vpn_connection ./resources/ibmcloud/network/vpn_connection n/a
worker_bare_metal ./resources/ibmcloud/compute/bare_metal_worker_server n/a
worker_nodes_wait ./resources/scale_common/wait n/a
worker_vsi ./resources/ibmcloud/compute/vsi_worker_server n/a
write_storage_cluster_inventory ./resources/scale_common/write_inventory n/a

Resources

Name Type
null_resource.upgrade_jinja resource
http_http.fetch_myip data source
ibm_is_bare_metal_server_profile.worker_bare_metal_server_profile data source
ibm_is_image.management_image data source
ibm_is_image.stock_image data source
ibm_is_image.worker_image data source
ibm_is_instance_profile.login data source
ibm_is_instance_profile.management data source
ibm_is_instance_profile.storage data source
ibm_is_instance_profile.worker data source
ibm_is_region.region data source
ibm_is_ssh_key.ssh_key data source
ibm_is_subnet.subnet_id data source
ibm_is_volume_profile.nfs data source
ibm_is_vpc.existing_vpc data source
ibm_is_vpc.vpc data source
ibm_is_vpc_address_prefixes.existing_vpc data source
ibm_is_zone.zone data source
ibm_resource_group.rg data source
template_file.login_user_data data source
template_file.management_user_data data source
template_file.storage_user_data data source
template_file.worker_user_data data source

Inputs

Name Description Type Default Required
TF_WAIT_DURATION wait duration time set for the storage and worker node to complete the entire setup string "600s" no
api_key This is the API key for IBM Cloud account in which the Slurm cluster needs to be deployed. Learn more string n/a yes
cluster_id ID of the cluster used by Slurm for configuration of resources. This must be up to 39 alphanumeric characters including the underscore (_), the hyphen (-), and the period (.). Other special characters and spaces are not allowed. Do not use the name of any host or user as the name of your cluster. You cannot change it after installation. string "SlurmCluster" no
cluster_prefix Prefix that would be used to name Slurm cluster and IBM Cloud resources provisioned to build the Slurm cluster instance. You cannot create more than one instance of Slurm Cluster with same name, make sure the name is unique. Enter a prefix name, such as my-hpcc string "hpcc-slurm" no
login_node_instance_type Specify the VSI profile type name to be used to create the login node for Slurm cluster. Learn more string "cx2-16x32" no
management_node_image_name Name of the image that you want to use to create virtual server instances in your IBM Cloud account to deploy as worker nodes in the Slurm cluster. By default, the automation uses a stock operating system image. If you would like to include your application-specific binary files, follow the instructions in Planning for custom images to create your own custom image and use that to build the Slurm cluster through this offering. Note that use of your own custom image may require changes to the cloud-init scripts, and potentially other files, in the Terraform code repository if different post-provisioning actions or variables need to be implemented. string "hpcc-slurm-management-v1-03may23" no
management_node_instance_type Specify the VSI profile type name to be used to create the management node for Slurm cluster. Learn more string "cx2-16x32" no
remote_allowed_ips Comma-separated list of IP addresses that can access the Slurm instance through an SSH. For security purposes, provide the public IP addresses assigned to the devices that are authorized to establish SSH (for example, ["169.45.117.34"]). To fetch the IP address of the device, use https://ipv4.icanhazip.com/. list(string) n/a yes
resource_group Resource group name from your IBM Cloud account where the VPC resources should be deployed. Learn more string "Default" no
scale_filesystem_block_size File system block size. Spectrum Scale supported block sizes (in bytes) include: 256K, 512K, 1M, 2M, 4M, 8M, 16M. string "4M" no
scale_storage_cluster_filesystem_mountpoint Spectrum Scale storage cluster (owningCluster) file system mount point. The owningCluster is the cluster that owns and serves the file system to be mounted. For more information, see Mounting a remote GPFS file system. string "/gpfs/fs1" no
spectrum_scale_enabled Setting this to 'true' will enable Spectrum Scale integration with the cluster. Otherwise, Spectrum Scale integration will be disabled (default). By entering 'true' for the property you have also agreed to one of the two conditions. 1. You are using the software in production and confirm you have sufficient licenses to cover your use under the International Program License Agreement (IPLA). 2. You are evaluating the software and agree to abide by the International License Agreement for Evaluation of Programs (ILAE). NOTE: Failure to comply with licenses for production use of software is a violation of IBM International Program License Agreement. bool false no
ssh_key_name Comma-separated list of names of the SSH key configured in your IBM Cloud account that is used to establish a connection to the Slurm management node. Ensure the SSH key is present in the same resource group and region where the cluster is being provisioned. If you do not have an SSH key in your IBM Cloud account, create one by using the instructions given here. string n/a yes
storage_cluster_gui_password Password for storage cluster GUI string "" no
storage_cluster_gui_username GUI user to perform system management and monitoring tasks on storage cluster. string "" no
storage_node_instance_type Specify the VSI profile type name to be used to create the storage nodes for Slurm cluster. The storage nodes are the ones that would be used to create an NFS instance to manage the data for HPC workloads. Learn more string "bx2-2x8" no
volume_capacity Size in GB for the block storage that would be used to build the NFS instance and would be available as a mount on Slurm management node. Enter a value in the range 10 - 16000. number 100 no
volume_iops Number to represent the IOPS(Input Output Per Second) configuration for block storage to be used for NFS instance (valid only for volume_profile=custom, dependent on volume_capacity). Enter a value in the range 100 - 48000. Learn more number 300 no
volume_profile Name of the block storage volume type to be used for NFS instance. Learn more string "general-purpose" no
vpc_cidr_block Creates the address prefix for the new VPC, when the vpc_name variable is empty. Only a single address prefix is allowed. For more information, see Setting IP ranges. list(string)
[
"10.241.0.0/18"
]
no
vpc_cluster_login_private_subnets_cidr_blocks The CIDR block that's required for the creation of the login cluster private subnet. Modify the CIDR block if it has already been reserved or used for other applications within the VPC or conflicts with any on-premises CIDR blocks when using a hybrid environment. Provide only one CIDR block for the creation of the login subnet. Since login subnet is used only for the creation of login virtual server instance provide a CIDR range of /28. list(string)
[
"10.241.4.0/28"
]
no
vpc_cluster_private_subnets_cidr_blocks The CIDR block that's required for the creation of the cluster private subnet. Modify the CIDR block if it has already been reserved or used for other applications within the VPC or conflicts with any on-premises CIDR blocks when using a hybrid environment. Provide only one CIDR block for the creation of the subnet. Make sure to select a CIDR block size that will accommodate the maximum number of management, storage, and both static worker nodes that you expect to have in your cluster. For more information on CIDR block size selection, see Choosing IP ranges for your VPC. list(string)
[
"10.241.0.0/22"
]
no
vpc_name Name of an existing VPC in which the cluster resources will be deployed. If no value is given, then a new VPC will be provisioned for the cluster. Learn more string "" no
vpn_enabled Set to true to deploy a VPN gateway for VPC in the cluster (default: false). bool false no
vpn_peer_address The peer public IP address to which the VPN will be connected. string "" no
vpn_peer_cidrs Comma separated list of peer CIDRs (e.g., 192.168.0.0/24) to which the VPN will be connected. string "" no
vpn_preshared_key The pre-shared key for the VPN. string "" no
worker_node_count This is the number of worker nodes that will be provisioned at the time the cluster is created. Enter a value in the range 3 - 200. number 3 no
worker_node_instance_type Specify the virtual server instance or bare metal server profile type name to be used to create the worker nodes for the Slurm cluster based on worker_node_type. The worker nodes are the ones where the workload execution takes place and the choice should be made according to the characteristic of workloads. For more information, see virtual server instance and bare metal server profiles. Check ibmcloud target -r {region_name}; ibmcloud is dedicated-host-profiles. string "bx2-4x16" no
worker_node_type The type of server that's used for the worker nodes: virtual server instance or bare metal server. If you choose vsi, the worker nodes are deployed on virtual server instances, or if you choose baremetal, the worker nodes are deployed on bare metal servers. string "vsi" no
zone IBM Cloud zone name within the selected region where the Slurm cluster should be deployed. Learn more string n/a yes

Outputs

Name Description
nfs_ssh_command Storage Server SSH command
region_name n/a
scale_gui_web_link Scale GUI Web Link
ssh_command SSH Command
vpc n/a
vpn_config_info n/a