There are several ways of accessing your system and data remotely on the Theoretical Physics systems.

How to access Theoretical Physics computers via SSH

Systems within the Physics network may be accessed via the ssh proxy server ssh.physics.ox.ac.uk

On Mac or Linux, edit the file ~/.ssh/config and add the lines

Host * 
ForwardAgent no 
VisualHostKey yes 
HostKeyAlgorithms=ssh-ed25519 
TcpKeepAlive yes 
ServerAliveInterval 60

Host bastion.physics.ox.ac.uk 
User your_physics_username

Host tplxdt* !*.physics.ox.ac.uk
Hostname %h.nat.physics.ox.ac.uk 

Host tplxdt*
User your_physics_username 
Hostname %h.nat.physics.ox.ac.uk 
ProxyJump your_physics_username@bastion.physics.ox.ac.uk

(don't forget to change "your_physics_username")

If you are running code then we strongly recommend that you use screen. This will allow you to disconnect and reconnect from both the remote system and the ssh gateway without stopping your code from running. Use ctrl-a ? for help, ctrl-a d to detach, "screen -x" to reattach, "screen" from within screen to create another screen, ctrl-a N where N = 0...9 to switch screens, ctrl-a F to resize to current terminal. For a quick reattach after a dropped internet link, use ssh -t tplxdt123 screen -x

Please Note: It is not possible to log in to the ssh gateway, bastion.physics.ox.ac.uk. You must use it as a jump proxy, e.g. by using ssh -J or the ProxyJump option which is already set in the configuration file above. For details, see man ssh_config, man ssh, or follow the steps above.

The host key fingerprint is as below.

Host key fingerprint is SHA256:l3/khU/E+6BbJstls9883ldQFlh4u1416QDzTHlKhmg
+--[ED25519 256]--+
|          . . =o.|
|         E + B +o|
|        .   O +o=|
|           . =.*o|
|        S o   *o*|
|         . . + B+|
|            + X =|
|           . X *+|
|            + ooB|
+----[SHA256]-----+

(the last key is as below, which you may have previously stored in your ~/.ssh/known_hosts file)

SHA256:B3rVd78/alhgZUs3yt6gqPDLkhRFTqKtZhvvX1Y9gGk

Note that this page may be accessed via SSL.

You can then ssh to your system with e.g.
ssh tplxdt123

to run graphical applications, use

ssh tplxdt123 -X

This is quite slow, however. If you need faster access, use x2goclient with bastion.physics.ox.ac.uk as an ssh proxy (tick the box to enable that), and the same username and password boxes ticked. Set the session type to XFCE.

Troubleshooting ssh

If the second login hangs, try

ssh tplxdt123 -oPubkeyAuthentication=no

If you log in but cannot see your files, try kinit and enter your password.

Virtual Private Network (VPN)

A Virtual Private Network (VPN) is a way of extending our internal network out to systems connected on the internet. Once connected via a VPN, a remote system appears to be connected locally to our network thereby getting all the facilities available to local users and avoiding blocks placed in intervening firewalls. All data passed via a VPN is encrypted.

Instructions for setting up VPN can be found here.

Once you have established a VPN connection then you can ssh directly into your desktop system.

Virtual Network Computing to Apple desktops

VNC allows you to take control of the Graphical interface of your Apple desktop remotely. Instructions on how to setup VNC can be found here

Linux Remote desktop

The Linux interactive machines can be accessed via x2go (Download)
This can be set up on your Linux desktop by request. Set the ssh gateway to bastion.physics.ox.ac.uk, use the same username and password. Set the session type to XFCE.

Troubleshooting

If you see the message "QSocketNotifier: Can only be used with threads started with QThread" start x2go with QT_QPA_PLATFORM=xcb x2goclient
x2goclient is not yet fully compatible with Wayland.