• KubeVirt on BCM 10

    This article will review a basic installation of KubeVirt on BCM 10 or later. These steps will not work for BCM 9.2 and earlier. This will be based on the instructions on the KubeVirt installation page and may change over time. Install libvirt packages on all worker nodes There are…

  • Installing and operating slurmrestd

    slurmrestd is a stateless REST compatible API to the slurm control plane. This article will go over the steps to install and configure basic operation of the service. Important Notes Instructions are based on Bright Cluster Manager 9.2 on a Rocky8 based cluster running slurm 21.08 although these steps should…

  • Upgrading Slurm

    This article will go over the steps needed to upgrade the Bright provided SLURM packages to a newer major version as well as the caveats and warnings necessary for a successful migration. These instructions have been tested on Bright versions 8.2, 9.0, 9.1, and 9.2. These instructions will retain all…

  • CVE-2021-4034: PwnKit

    A serious vulnerability has been discovered in the operating system package PolicyKit which may affect the users of Bright Cluster Manager. The information here is for reference only and users should refer to their operating system vendor for the most accurate and up-to-date information. Overview The proof of concept can…

  • Log4j CVE-2021-44228, CVE-2021-45046, and CVE-2021-45105 in Bright Cluster Manager

    The recent announcement and release of 0-day exploits for these issues makes this an important and highly visible topic. Based on a thorough review Bright Cluster Manager itself and the core integrations are unaffected by this bug. We strongly suggest customers review the workloads and services they are running. If…

  • Integrating 3rd Party LDAP clients with bind credentials

    Bright Cluster Manager provides a managed LDAP database for user and group management but, by default, it is protected with TLS certificates which limit the ability for some third party tools to access the directory. This article will go through the steps to reconfigure the Bright LDAP server to allow…

  • Scripting with cmsh

    Sometimes it’s useful to be able to run basic commands against cmsh in an automated way. We often take the tool for granted but there are a number of subtle tricks that can go a long way to making the use of the command more resilient. While this can be…

  • Firefox issue – Secure Connection Failed

    If you are using firefox and failing to reach services like BrightView or the user portal with an error of “Secure Connection Failed” with an error code similar to one of the following. NOTE: This issue likely applies to other browsers as well since they have client certificate functions. We…

  • How do I migrate users to a new cluster?

    Sometimes the administrator may wish to migrate users from one cluster to another. For example, when setting up a new cluster from scratch. Backup Since Bright’s LDAP uses standard Linux openldap, slapcat can be used to export the data from the old head node, with something like: /cm/local/apps/openldap/sbin/slapcat -f /cm/local/apps/openldap/etc/slapd.conf -l backup.ldif…