External Email - Use Caution        

Hi R,

Thank you very much! We are consulting w/ EXPANSE's IT support staff over this 
question.

Sincerely,
Yilei
________________________________
From: freesurfer-boun...@nmr.mgh.harvard.edu 
<freesurfer-boun...@nmr.mgh.harvard.edu> on behalf of fsbuild 
<fsbu...@contbay.com>
Sent: Thursday, January 11, 2024 8:29 PM
To: freesurfer@nmr.mgh.harvard.edu <freesurfer@nmr.mgh.harvard.edu>
Cc: MacKelfresh, Andy <amackelfr...@health.ucsd.edu>
Subject: Re: [Freesurfer] Trouble with ssh tunneling & Freeview


        External Email - Use Caution

A remote connection working to display images from the glxgears or xeyes 
commands run on the linux host forwarded to your local machine does not mean 
Freeview graphics will do the same.  If Freeview still displays an empty or 
black screen, then there could be issues with OpenGL graphics running on or 
being sent from the linux host.   The system requirements for Freesurfer 
include the following for running Freeview,

Graphics card: 3D graphics card with its own graphics memory & accelerated 
OpenGL drivers

Updating the OpenGL drivers on the linux host will sometimes enable Freeview to 
display images remotely.  My understanding is Linux servers need Mesa packages 
installed to support newer versions of OpenGL.  If the Freesurfer Debian or RPM 
package installer was used to install the Freesurfer distribution on the Linux 
host, then at least some of those packages should now be installed, i.e., we do 
not recommend using the tar archive to “install” Freesurfer.  We don’t know how 
EXPANSE installs/maintains Freesurfer or what their servers support for 
graphics hardware.

GLX is the X-windows extension for OpenGL graphics that can be tunneled thru a 
remote SSH connection.  But GLX may not work with the newer versions of OpenGL 
over ssh.  A workaround for this is to install and use VirtualGL on the Linux 
host.  If VirtualGL is supported/installed on EXPANSE, try prefacing the 
freeview command with “vglrun” - see MailScanner has detected a possible fraud 
attempt from "secure-web.cisco.com" claiming to be 
https://secure-web.cisco.com/1PBuCZBvyNTXLnBAbUm04Q7YJLh_rdLhcjeVJgTzMWz_9DaAdOxlg1O81nN6p-7mNTEv-I1HRuKCflsfgqSht95jDeRn6bRH_k-cdc4Y-oP2HmOm4teBxG2aZbc-kh-PPcGe0hurDSJGbNY6DuMkY8LMVME-rpQEWHVKqViK5yJbNlK2XzcAmKKHwtthNPKbYFlcUVyH3ZRlnnOn689GjRtD7IcXO8unJjAk_EURa9I5eU6kKi6bKk0wFj4ZrSRbHEw6c2QOFQH3acnTjumVk9JhmCsLl0MDzNBntdqTPNva36cA8nUHJZcEv3Ou0Wg8NdM7Ce7UfNH8CCfw8Wmsl_g/https%3A%2F%2Fwww.starnet.com%2Fhelp%2Fvirtualgl<https://secure-web.cisco.com/1LbpWT4MUcd6pAHWgpXnVTroDcuB2zS_LVJNf1WfmO6zFE9dX9nOEWUajd1vopUK4BX7U--S9A5CXHv902f6e_XdsjjeRrMdg7KtvHRZWsWyCV3A8HDNGoFKHJZ_ap5k_fbWgN3jWExYpfDtAqWXJT_Z-03_pUbAONIPVO_cEhbW3S-QSjYQ_NVd6cu4kMIDKJnC_mzNI2jnmoQgvQK3i9WigsJgYXTnmxyWq1UUi64DNW0J9L_pvHYuve5NfQKwfKNPSutj1Gl-dHGqdW8ZrwkqZzWbi9ilSP1riQRLlgZU_mmCDKycsz32ukwU9OBRTyFLbihbBwG0UKBkmGBR_kQ/https%3A%2F%2Furldefense.com%2Fv3%2F__https%3A%2F%2Fsecure-web.cisco.com%2F10kzDiIcCSK5wSi3KZ4WHry8djBXAuam589oKZqs5TvrpZwtx_bg2pMLPYhP8Jy_MCc-EzDmY-dqikD_6634fXGIuWxPmIpVKc_7FvQJ1WLhxdWKQNREcPKVjjXtooJBwDbQMYGNkRFTt8kV6opy3zDRKCw2VFxn2ADZvwE-CJh_5FiVuijgz3-BKzUFkbC6C6v0BjwjdzAd3rvsTA-OMSKycamq6dtAADv6xzHGy1pd8-jWOBWz55-o6eUCbotpP3Xjkaj44Yj6JNn9W87mEonAk4nFRD7f8ZUJdi0BwhynYiOrU-XXN9NEleN4SBmflmdoT6sWwWvQHcooLyMlnww%2Fhttps*3A*2F*2Fwww.starnet.com*2Fhelp*2Fvirtualgl__;JSUlJSU!!LLK065n_VXAQ!kGlwFB8W5ycD4gdiSq6pd5hfMkIurnTmY-rH3QFV37h8kuxu3JWszagwT1HYSwFxaGy9x2-UrdzlG4wSETpL$>.
  We use VirtualGL and graphics acceleration on a few Linux workstations to 
accommodate Freeview running on Linux and viewing its 3D graphics thru a remote 
VPN connection.

XQuartz on the Mac is the equivalent of X-Windows on Linux.   The Mac should be 
using Xquartz 2.8.2 or newer for use with the Freesurtfer 7.4.X releases.  I 
think X-Quartz will open automatically to view X-Windows based graphics on the 
Mac.

If the EXPANSE linux machines are setup to support remote connections to view 
3D X-windows graphics then the IT support staff will know about the options 
above.  File/open a ticket with them, ask them what they support, and how to 
setup your environment.  If they do not support it, an alternative is to 
install Freesurfer on your Mac and download/copy over the data to view with 
Freeview.

- R.

On Jan 11, 2024, at 14:18, Dong, Yilei <yid...@health.ucsd.edu> wrote:

        External Email - Use Caution

Hi Freesurfer team,

I have Freesurfer installed on UCSD's Expanse HPC, which uses the Rocky Linux 8 
operating system. Whenever we try to do ssh tunneling and more specifically, 
logging into our HPC via ssh -X to open up Freeview's GUI, it always aborts. 
Prior to logging into my HPC from my Mac laptop's terminal, I always open up 
XQuartz. Another colleague of mine has also encountered similar issues, where 
they have managed to get X11 and Xeyes to run, but also Freeview's window keeps 
aborting.

We have also tried to follow instructions from the following links when it 
comes to getting ssh tunneling to work correctly in hopes of making Freeview's 
GUI pop up:
MailScanner has detected a possible fraud attempt from "secure-web.cisco.com" 
claiming to 
behttps://http://secure-web.cisco.com/1Ep0hZW1v0YhStTn91K4nrB82F8KY9ZlSfLdDkG341gyj1fqlmuYrrSUEGl8H_FDp5N4lfLUUiiXjUQIKF5Azi8fhPKpr4_mJQ_ftK0sAglZXZoYWgOAjbiA1YJysW40UtgUXEh3iq-_9A1IXGzk-r7_sq77kHX9dbOwUUIlH80RE9HtoOgfdewNZ5MgvcKjIMBYB5enhsfobFYFuop_mtRxe6sPo0aI164kznzmKgmCTYFYFpOTwak7Hu1oNXBoS-PNjjkrOXrC01ZLzAcVBan20dKJiYolxxcu4p1z1ay1uBTzXEG0e5i3AsE-_iSMh8oNbR68Y0O9R92T5v9LmRw/http%3A%2F%2Fwww.nmr.mgh.harvard.edu%2Fmartinos%2FuserInfo%2Fcomputer%2FremoteAccess.php%23graphics<https://secure-web.cisco.com/1cTBwiJDPQaF5QchaXZ0TVUv892OY_S9vDfvDl8A7DtSsAVR-fzaAXtCp_OcjKPIuymbLe2-W0KvuoyxPXAO8o5cpIlIKlXkGDnJZ0zHnzzGF70JL3fk2Nz0qasxlUm2OK9uJr_bI6xVoxtu2nX-LOXDqqEeI7b4wGiNgj5qxAq5eT8UPCZC-gdettLno1TbJOqm1j54-KxVswU9XUc3y-bJ1s8Rl_0TP4SbcTpUgtl5daFJPW050p-I8xwZN5eW7tTrt8eUdgDiWqPG5tCG3LvfQiO2lWeHrjFdxFq9WByo3b5X-wH2S8MEuxpyJLWhyGhCzq6G5hc8xzJ-UVGyaRA/https%3A%2F%2Furldefense.com%2Fv3%2F__https%3A%2F%2Fsecure-web.cisco.com%2F1R4ZWuowqG86V3YyoRGTRpJOHdknCViNdSnswxzgoNUJh-dzq8lXFWFrewhCa7KLVpJHMKXfgug_DSvbicGZ_4u4LWCrOmZq8ng3vJa2BzqWilNjwGC-Bg1QqScMvoJJdK26Y2KvpsyEDuTtvsMtfZoUuganA0x800M_z143jJ277akc3YQ3XUe_8JpUHFgBOVk_U05_AmkAlzEnn_U52evlBt3v5lyd2qf8619IHuWKOvGbUxCfN8sGJ9mb1Es_iKmvsWSaM_kx1bDjqNxCR9rjhSx0qG_5pKUvFBy8nsbCYcx2p-6FjhM493rdU4vMH%2Fhttps*3A*2F*2Fwww.nmr.mgh.harvard.edu*2Fmartinos*2FuserInfo*2Fcomputer*2FremoteAccess.php*23graphics__;JSUlJSUlJSU!!LLK065n_VXAQ!kGlwFB8W5ycD4gdiSq6pd5hfMkIurnTmY-rH3QFV37h8kuxu3JWszagwT1HYSwFxaGy9x2-UrdzlG7rCjVmD$>
MailScanner has detected a possible fraud attempt from "secure-web.cisco.com" 
claiming to be 
https://secure-web.cisco.com/1Hs3MGtCZW8l_nAGQRzjXj9-KeyvjdqTa7e_zeBNjuCNTVfKpLnc24paXmgd3W__whFnJyWpgb6SwuDUpYimFExp94V2obXCg4Ld3n4iFYyHa33fkzO5h9n0b_GTHiSzIVwZVpTzjkMAJx9-Eqn5uKJOxWuGXQ4ABzDUKPBVIiG4bdCdYpRywGq4Qb0_1Hfg_89kt3oXURoPOt_1JHqHZdTR-V926UEJzyqjY4NSf65Ld2vwXyse8ISZLV4yO_JMmIuG1qVuFZuxLpzJsW0RhPqv8zJPs6d628qJbCxH6_S_Q3JlN0z-CvQqc29zVOSBYTlY-RM9L49-X6uXa0sU0ng/https%3A%2F%2Fsurfer..nmr.mgh.harvard.edu%2Ffswiki%2FRemoteAccess<https://secure-web.cisco.com/19fSsdVIZ329BstwbjVp1VB7rfQ1p2g3XNsdHvYHm1hcnQJIph7ybHS1EfXJNq6fZ3AUEPpTSwB2MrOLxYIYKeIOFkn3I8r2VHpyEz9CDZ1ux1r3K2322cYT_ICg3KyTEMxqX8NGref792oikBOQLuXpGx8rSyYNCD3Z-kgWkenEV-jRTI22aqHAKcnoUxv9xHDkR2-lddDSyQMrQHehTh30vSIum7hPc6sAPvVZrxcPghUZPtuyiaXAdb2h3qK6NrcQKqngU8ifj5acJYl0x1_OnZHtsiL06aMirp-jADBi95FM53iibeOli6hXGVITIAbWlNyY8TckT4Ehx2nKilw/https%3A%2F%2Furldefense.com%2Fv3%2F__https%3A%2F%2Fsecure-web.cisco.com%2F1n_nrksVR91kPB04lGzr6COj_EYtJE9nZ9kVxcDWeDscsOzvYeGCCPT4t92zBd9yTjpcUwszme_vKbFhomviJ4O3Tt_bG2UxEwv9b3QcKztZM1vSrEzXFkXAfq7_IBbnjfj3acA3VU5oCkWdDpU_lQ23fTceaPH54gYtYMeWZmhROyh2g6y5JhWFHeKAbZaNbWxshlk9mZC6aveKIJi4nKyfnN2J_SXoXarWW_6Zy7RloE8UbC1ZCpcJS4DiREwXLjqhAcM74FUzRhmnFgclciHJtNiquU_rhoK3xFR8V8wl7J7bu-j1HlM78q6yDn5WG%2Fhttps*3A*2F*2Fsurfer..nmr.mgh.harvard.edu*2Ffswiki*2FRemoteAccess__;JSUlJSU!!LLK065n_VXAQ!kGlwFB8W5ycD4gdiSq6pd5hfMkIurnTmY-rH3QFV37h8kuxu3JWszagwT1HYSwFxaGy9x2-UrdzlG-5nLQ03$>.

If we operate from a Mac computer, is it better to use a VNC or XQuartz for ssh 
tunneling? In addition, can we find an error log in Freesurfer's directory to 
find out exactly why Freeview keeps aborting in our circumstance?

Thank you.

Sincerely,
Yilei

<Screen Shot 2024-01-11 at 11.01.27 
AM.png>_______________________________________________
Freesurfer mailing list
Freesurfer@nmr.mgh.harvard.edu<mailto:Freesurfer@nmr.mgh.harvard.edu>
MailScanner has detected a possible fraud attempt from "secure-web.cisco.com" 
claiming to be 
https://secure-web.cisco.com/1faXa85PVUxPcNmGtR8HU4eaKKn5Zvz3kGu5h2-vuvsy2LP_sBgP1iUuTy7M_mtBeKfrYuatffCsXIfHN_kkULsewo6FNjoZYbUIqbXHk_BpmeSQuynmG3CFD1xIQf0cA7GCXWsHqO9Mi-IflM5-CwrLVrmauhYNxotMdvop4Oyblx9o9DtaLCfpju0yWI2ELSH_byK-wCapz-vF8wCu9DlZA-38Fao3GYnytWyHTw4-Lq5HafDBIoLwOcupbf8poSnbBEP6Yd5xaOGJIQ_trOBt67U6MeNkhyjhhoXxomtq1no9jr3vaF7ALmH6litJcKg0ZQVS38jqMxn0mun-tiQ/https%3A%2F%2Fmail.nmr.mgh.harvard.edu%2Fmailman%2Flistinfo%2Ffreesurfer<https://secure-web.cisco.com/1RBDZYaDIdp_pP9G8lm2IPm-vs87zNdQhCCckctOH6cIOR8sszW4p-SwHrRsuK1wNz426T9vVRcaXJGZzwFBfiNwPoHOHONZv69PzIo4uUCoXPHk86qVC6kb81Xcjz3TY3jQov1Pzkde1m9iGqyvPfMOW4uRxcYWkaxYLfcx3-jhSGvZ3VB7nqYMse0bNublO-9leNWkZiLjTsXQiyqJ3_Mcmtv9WpAPYNjNKD5oGZWhdb3xlFFcRas8lMTo0V_UyE_aol-6rPU4AStK8pxRc12ecVv5hxNQSRiInKbSpu5kGdbXFKu1gGETudL8RPVyNzy2voGPXeltsiQb1UAiGag/https%3A%2F%2Furldefense.com%2Fv3%2F__https%3A%2F%2Fsecure-web.cisco.com%2F1oRAi904qpnmB7H183lf0fvtulvM28NJWJqgmJIsNkt7zxbVFjpYIhy8QG4tD9lmK62N1_2FuapZsSZUyneheakxCLy5TKEOhR8t43P2GshoQ8O-j3sefIABInpV_BKAI-QY67qbKQs4OMK9Q8ju5VtVLMWRCZ6C3HSvEVtfY5FbQYLy8jENUcZ_hOqNkVHxJsDunx8oTXC520KmlsIslZuqdItx1BNlcoD_KRWuz-Rk8oT3xX8KtkOMhz7If_T1ysuE4Nfoe8EzszDb-TwwpmJQjfOLJHp743yF8nc6YiM7qurGjUJp4UZLt8wPu-TVwR_6kz6eJYZMRK3sVQKvpQQ%2Fhttps*3A*2F*2Fmail.nmr.mgh.harvard.edu*2Fmailman*2Flistinfo*2Ffreesurfer__;JSUlJSUl!!LLK065n_VXAQ!kGlwFB8W5ycD4gdiSq6pd5hfMkIurnTmY-rH3QFV37h8kuxu3JWszagwT1HYSwFxaGy9x2-UrdzlG_dnGcjl$>

_______________________________________________
Freesurfer mailing list
Freesurfer@nmr.mgh.harvard.edu
https://mail.nmr.mgh.harvard.edu/mailman/listinfo/freesurfer
Please note that this e-mail is not secure (encrypted).  If you do not wish to 
continue communication over unencrypted e-mail, please notify the sender of 
this message immediately.  Continuing to send or respond to e-mail after 
receiving this message means you understand and accept this risk and wish to 
continue to communicate over unencrypted e-mail. 

Reply via email to