.SH "DESCRIPTION" \fBsackd\fR is the Slurm Auth and Cred Kiosk Daemon. It can be used on login nodes that are not running slurmd daemons to allow authentication to the cluster. The program will run as the \fISlurmUser\fR. When running in Slurm's "configless" mode, in which case configuration files are retrieved and written under the /run/slurm/conf directory (unless \fBRUNTIME_DIRECTORY\fR is set). .SH "OPTIONS" .TP \fB\-\-ca\-cert\-file <file>\fR Absolute path to CA certificate used for fetching configuration when running configless in a TLS enabled cluster. .IP .TP \fB\-\-conf\-server host[:port]\fR Retrieve configs from slurmctld running at \fIhost[:port]\fR. Requires slurmctld support provided by setting \fBenable_configless\fR in SlurmctldParameters. .IP .TP \fB\-D\fR Run \fBsackd\fR in the foreground with logging copied to stderr. .IP .TP \fB\-\-disable\-reconfig\fR Fetch configurations in configless mode once, but do not register with slurmctld for further reconfiguration updates. .IP .TP \fB\-f config\fR Read configuration from the specified file. .IP .TP \fB\-h\fR Help; print a brief summary of command options. .IP .TP \fB\-\-jwks\-file <file>\fR Read auth/slurm JWKS information from the specified file. Default value is slurm.jwks located in the same directory as slurm.conf. .IP .TP \fB\-\-key\-file <file>\fR Read auth/slurm authentication key from the specified file. Default value is .TP \fB\-v\fR Verbose mode. Multiple \-v's increase verbosity. .IP .SH "ENVIRONMENT VARIABLES" The following environment variables can be used to override settings compiled into sackd. .TP \fBABORT_ON_FATAL\fR When a fatal error is detected, use abort() instead of exit() to terminate the process. This allows backtraces to be captured without recompiling Slurm. .IP .TP \fBRUNTIME_DIRECTORY\fR Absolute path governing the location for both the configuration cache sackd maintains, and the sack.socket unix socket used to provide authentication services. If multiple sackds need to be started on the same login node, the \fBRuntimeDirectory\fR systemd unit option should be set to \fBslurm-<clustername>\fR. Systemd v240+ automatically sets \fBRUNTIME_DIRECTORY\fR to \fB/run/$RuntimeDirectory\fR for each sackd service, otherwise it requires manual setting (i.e. via \fBEnvironmentFile\fR unit option). If this is not set, the default value is \fB/run/slurm/\fR. .IP .TP \fBSACKD_DEBUG\fR Set debug level explicitly for syslog and stderr. Valid values are 0\-9, or the same string values as the debug options such as SlurmctldDebug in slurm.conf(5). .IP .TP \fBSACKD_DISABLE_RECONFIG\fR Same as \fB\-\-disable\-reconfig\fR. .IP .TP \fBSACKD_PORT\fR Same as \fB\-\-port\fR. .IP .TP \fBSACKD_STDERR_DEBUG\fR Set debug level explicitly for stderr. Valid values are 0\-9, or the same .TP \fBSLURM_DEBUG_FLAGS\fR Specify debug flags for sackd to use. See DebugFlags in the \fBslurm.conf\fR(5) man page for a full list of flags. The environment variable takes precedence over the setting in the slurm.conf. .IP .SH "SIGNALS" .TP 6 \fBSIGINT\fR \fBsackd\fR will shutdown cleanly. .IP .TP \fBSIGHUP\fR \fBsackd\fR will reconfigure. .IP .TP \fBSIGUSR2 SIGPIPE\fR This signal is explicitly ignored. .IP .SH "COPYING" Copyright (C) SchedMD LLC. .LP This file is part of Slurm, a resource management program. For details, see <https://slurm.schedmd.com/>. .LP Slurm is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. .LP Slurm is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. .SH "SEE ALSO" \fBslurm.conf\fR(5), \fBslurmctld\fR(8)