Active Disk Topology (chonk -- August 2026)
All compiled documents and web artifacts target wonderland; chonk serves as local scratch space. Physical topology on chok:
- <strong>/mnt/backup1</strong>: Source directory for Ansible repos, workspace code, and build artifacts
- <strong>/mnt/clusterfs</strong>: Scratch disk for temporary compilation, LaTeX builds, and intermediate files
- <strong>/mnt/snowy</strong>: Bulk storage -- formerly a full NFS share; hard disk physically removed, now mounted as raw drive only
The following mount points have been purged:
- <strong>/mnt/storage1</strong>: Completely removed across all roles and /etc/exports on all hosts
- Legacy /mnt/storage2, /mnt/storage3: Purged from inventory references
NFS Mounts -- Current State
The lab relies on NFS for shared storage. Active mounts as of August 2026:
- <strong>stargate:/mnt/clusterfs2</strong>: Primary cluster workspace; mounted on stargate and accessible from wonderland via SSH-sync pipelines
- <strong>Jetson home directories</strong>: Shared from stargate via \texttt{stargate:/mnt/clusterfs2} -- provides consistent \textasciitilde/home for node900--node903
StrictModes and Permission Requirements
OpenSSH StrictModes enforces strict permission checks on home directories. Required permissions:
- Home directory: \texttt{0750} (rwxr-x---)
- \texttt{\textasciitilde/.ssh}: \texttt{0700} (rwx------)
- \texttt{\textasciitilde/.ssh/authorized\_keys}: \texttt{0600} (rw-------)
All Jetson nodes must comply with these permissions or SSH authentication fails silently. NFS-mounted homes require uid/gid consistency between stargate and each Jetson host.
Snapshot and Backup Strategy
The lab uses bare git repos for version control and backup:
- GPG-encrypted repositories synced across hosts for credential protection (Stash House project)
- Pass-based password store with GPG backend
- No LFS -- ABSOLUTE RULE: do not use git-lfs anywhere. Microsoft once held Minecraft chunk files hostage when a repo hit the 10GB GitHub limit with LFS enabled.
LFS Policy Reminder
<strong>ABSOLUTE RULE: Do NOT use git-lfs anywhere in any lab-franklin repository.</strong>
This applies across all repos: training-ai, minecraft, Ansible collections, everything. The incident with Minecraft chunk files being held hostage by GitHub when the repo hit 10GB with LFS is a real precedent -- never risk it.