SSH Access (NFS Server)¶

This machine also acts as the NFS server, so it gets the SFTP-only policy — copied from SSH Access Control, kept in sync there.

• Make sure /raid_storage/SLURM/ is only accessible by root.
• chmod 755 /raid_storage/SLURM/home — users can then traverse the home directory and only enter their own.

Edit the config:

sudo nano /etc/ssh/sshd_config

Add:

Match Group slurmUsers
    ChrootDirectory /raid_storage/SLURM/home
    ForceCommand internal-sftp
    AllowTcpForwarding no
    X11Forwarding no
    PermitTTY no