slurm: correctly configure StateSaveLocation and SlurmdSpoolDir

Signed-off-by: Francesco De Martino <[email protected]>

Author: demartinofra

CHANGELOG.md

@@ -32,6 +32,7 @@ This file is used to list changes made in each version of the AWS ParallelCluste
 - Fix issue with slurmd daemon not being restarted correctly when a compute node is rebooted
 - Fix errors causing Torque not able to locate jobs, setting server_name to fqdn on master node
 - Fix Torque issue that was limiting the max number of running jobs to the max size of the cluster
+- Slurm: configured StateSaveLocation and SlurmdSpoolDir directories to be writable only to slurm user
 
 2.5.1
 -----

recipes/_compute_slurm_config.rb

@@ -15,6 +15,13 @@
 # OR CONDITIONS OF ANY KIND, express or implied. See the License for the specific language governing permissions and
 # limitations under the License.
 
+# Create directory configured as SlurmdSpoolDir
+directory '/var/spool/slurmd' do
+  user 'slurm'
+  group 'slurm'
+  mode '0700'
+end
+
 # Mount /opt/slurm over NFS
 nfs_master = node['cfncluster']['cfn_master']
 mount '/opt/slurm' do

recipes/_master_slurm_config.rb

@@ -29,6 +29,13 @@
   mode '0755'
 end
 
+# Create directory configured as StateSaveLocation
+directory '/var/spool/slurm.state' do
+  user 'slurm'
+  group 'slurm'
+  mode '0700'
+end
+
 template '/opt/slurm/etc/slurm.conf' do
   source 'slurm.conf.erb'
   owner 'root'

templates/default/slurm.conf.erb

@@ -21,8 +21,8 @@ SlurmdPort=6818
 AuthType=auth/munge
 #JobCredentialPrivateKey=
 #JobCredentialPublicCertificate=
-StateSaveLocation=/tmp
-SlurmdSpoolDir=/tmp/slurmd
+StateSaveLocation=/var/spool/slurm.state
+SlurmdSpoolDir=/var/spool/slurmd
 SwitchType=switch/none
 MpiDefault=none
 SlurmctldPidFile=/var/run/slurmctld.pid