Re: [Freesurfer] Trouble with ssh tunneling & Freeview

External Email - Use Caution

Hi R,

Thank you very much! We are consulting w/ EXPANSE's IT support staff over this question.

Sincerely, Yilei ________________________________ From: freesurfer-bounces@nmr.mgh.harvard.edu freesurfer-bounces@nmr.mgh.harvard.edu on behalf of fsbuild fsbuild@contbay.com Sent: Thursday, January 11, 2024 8:29 PM To: freesurfer@nmr.mgh.harvard.edu freesurfer@nmr.mgh.harvard.edu Cc: MacKelfresh, Andy amackelfresh@health.ucsd.edu Subject: Re: [Freesurfer] Trouble with ssh tunneling & Freeview

External Email - Use Caution

A remote connection working to display images from the glxgears or xeyes commands run on the linux host forwarded to your local machine does not mean Freeview graphics will do the same. If Freeview still displays an empty or black screen, then there could be issues with OpenGL graphics running on or being sent from the linux host. The system requirements for Freesurfer include the following for running Freeview,

Graphics card: 3D graphics card with its own graphics memory & accelerated OpenGL drivers

Updating the OpenGL drivers on the linux host will sometimes enable Freeview to display images remotely. My understanding is Linux servers need Mesa packages installed to support newer versions of OpenGL. If the Freesurfer Debian or RPM package installer was used to install the Freesurfer distribution on the Linux host, then at least some of those packages should now be installed, i.e., we do not recommend using the tar archive to “install” Freesurfer. We don’t know how EXPANSE installs/maintains Freesurfer or what their servers support for graphics hardware.

GLX is the X-windows extension for OpenGL graphics that can be tunneled thru a remote SSH connection. But GLX may not work with the newer versions of OpenGL over ssh. A workaround for this is to install and use VirtualGL on the Linux host. If VirtualGL is supported/installed on EXPANSE, try prefacing the freeview command with “vglrun” - see MailScanner has detected a possible fraud attempt from "secure-web.cisco.com" claiming to be https://secure-web.cisco.com/1PBuCZBvyNTXLnBAbUm04Q7YJLh_rdLhcjeVJgTzMWz_9Da...https://secure-web.cisco.com/1LbpWT4MUcd6pAHWgpXnVTroDcuB2zS_LVJNf1WfmO6zFE9dX9nOEWUajd1vopUK4BX7U--S9A5CXHv902f6e_XdsjjeRrMdg7KtvHRZWsWyCV3A8HDNGoFKHJZ_ap5k_fbWgN3jWExYpfDtAqWXJT_Z-03_pUbAONIPVO_cEhbW3S-QSjYQ_NVd6cu4kMIDKJnC_mzNI2jnmoQgvQK3i9WigsJgYXTnmxyWq1UUi64DNW0J9L_pvHYuve5NfQKwfKNPSutj1Gl-dHGqdW8ZrwkqZzWbi9ilSP1riQRLlgZU_mmCDKycsz32ukwU9OBRTyFLbihbBwG0UKBkmGBR_kQ/https%3A%2F%2Furldefense.com%2Fv3%2F__https%3A%2F%2Fsecure-web.cisco.com%2F10kzDiIcCSK5wSi3KZ4WHry8djBXAuam589oKZqs5TvrpZwtx_bg2pMLPYhP8Jy_MCc-EzDmY-dqikD_6634fXGIuWxPmIpVKc_7FvQJ1WLhxdWKQNREcPKVjjXtooJBwDbQMYGNkRFTt8kV6opy3zDRKCw2VFxn2ADZvwE-CJh_5FiVuijgz3-BKzUFkbC6C6v0BjwjdzAd3rvsTA-OMSKycamq6dtAADv6xzHGy1pd8-jWOBWz55-o6eUCbotpP3Xjkaj44Yj6JNn9W87mEonAk4nFRD7f8ZUJdi0BwhynYiOrU-XXN9NEleN4SBmflmdoT6sWwWvQHcooLyMlnww%2Fhttps*3A*2F*2Fwww.starnet.com*2Fhelp*2Fvirtualgl__;JSUlJSU!!LLK065n_VXAQ!kGlwFB8W5ycD4gdiSq6pd5hfMkIurnTmY-rH3QFV37h8kuxu3JWszagwT1HYSwFxaGy9x2-UrdzlG4wSETpL$. We use VirtualGL and graphics acceleration on a few Linux workstations to accommodate Freeview running on Linux and viewing its 3D graphics thru a remote VPN connection.

XQuartz on the Mac is the equivalent of X-Windows on Linux. The Mac should be using Xquartz 2.8.2 or newer for use with the Freesurtfer 7.4.X releases. I think X-Quartz will open automatically to view X-Windows based graphics on the Mac.

If the EXPANSE linux machines are setup to support remote connections to view 3D X-windows graphics then the IT support staff will know about the options above. File/open a ticket with them, ask them what they support, and how to setup your environment. If they do not support it, an alternative is to install Freesurfer on your Mac and download/copy over the data to view with Freeview.

- R.

On Jan 11, 2024, at 14:18, Dong, Yilei yid025@health.ucsd.edu wrote:

External Email - Use Caution

Hi Freesurfer team,

I have Freesurfer installed on UCSD's Expanse HPC, which uses the Rocky Linux 8 operating system. Whenever we try to do ssh tunneling and more specifically, logging into our HPC via ssh -X to open up Freeview's GUI, it always aborts. Prior to logging into my HPC from my Mac laptop's terminal, I always open up XQuartz. Another colleague of mine has also encountered similar issues, where they have managed to get X11 and Xeyes to run, but also Freeview's window keeps aborting.

We have also tried to follow instructions from the following links when it comes to getting ssh tunneling to work correctly in hopes of making Freeview's GUI pop up: MailScanner has detected a possible fraud attempt from "secure-web.cisco.com" claiming to behttps://http://secure-web.cisco.com/1Ep0hZW1v0YhStTn91K4nrB82F8KY9ZlSfLdDkG3...https://secure-web.cisco.com/1cTBwiJDPQaF5QchaXZ0TVUv892OY_S9vDfvDl8A7DtSsAVR-fzaAXtCp_OcjKPIuymbLe2-W0KvuoyxPXAO8o5cpIlIKlXkGDnJZ0zHnzzGF70JL3fk2Nz0qasxlUm2OK9uJr_bI6xVoxtu2nX-LOXDqqEeI7b4wGiNgj5qxAq5eT8UPCZC-gdettLno1TbJOqm1j54-KxVswU9XUc3y-bJ1s8Rl_0TP4SbcTpUgtl5daFJPW050p-I8xwZN5eW7tTrt8eUdgDiWqPG5tCG3LvfQiO2lWeHrjFdxFq9WByo3b5X-wH2S8MEuxpyJLWhyGhCzq6G5hc8xzJ-UVGyaRA/https%3A%2F%2Furldefense.com%2Fv3%2F__https%3A%2F%2Fsecure-web.cisco.com%2F1R4ZWuowqG86V3YyoRGTRpJOHdknCViNdSnswxzgoNUJh-dzq8lXFWFrewhCa7KLVpJHMKXfgug_DSvbicGZ_4u4LWCrOmZq8ng3vJa2BzqWilNjwGC-Bg1QqScMvoJJdK26Y2KvpsyEDuTtvsMtfZoUuganA0x800M_z143jJ277akc3YQ3XUe_8JpUHFgBOVk_U05_AmkAlzEnn_U52evlBt3v5lyd2qf8619IHuWKOvGbUxCfN8sGJ9mb1Es_iKmvsWSaM_kx1bDjqNxCR9rjhSx0qG_5pKUvFBy8nsbCYcx2p-6FjhM493rdU4vMH%2Fhttps*3A*2F*2Fwww.nmr.mgh.harvard.edu*2Fmartinos*2FuserInfo*2Fcomputer*2FremoteAccess.php*23graphics__;JSUlJSUlJSU!!LLK065n_VXAQ!kGlwFB8W5ycD4gdiSq6pd5hfMkIurnTmY-rH3QFV37h8kuxu3JWszagwT1HYSwFxaGy9x2-UrdzlG7rCjVmD$ MailScanner has detected a possible fraud attempt from "secure-web.cisco.com" claiming to be https://secure-web.cisco.com/1Hs3MGtCZW8l_nAGQRzjXj9-KeyvjdqTa7e_zeBNjuCNTVf...https://secure-web.cisco.com/19fSsdVIZ329BstwbjVp1VB7rfQ1p2g3XNsdHvYHm1hcnQJIph7ybHS1EfXJNq6fZ3AUEPpTSwB2MrOLxYIYKeIOFkn3I8r2VHpyEz9CDZ1ux1r3K2322cYT_ICg3KyTEMxqX8NGref792oikBOQLuXpGx8rSyYNCD3Z-kgWkenEV-jRTI22aqHAKcnoUxv9xHDkR2-lddDSyQMrQHehTh30vSIum7hPc6sAPvVZrxcPghUZPtuyiaXAdb2h3qK6NrcQKqngU8ifj5acJYl0x1_OnZHtsiL06aMirp-jADBi95FM53iibeOli6hXGVITIAbWlNyY8TckT4Ehx2nKilw/https%3A%2F%2Furldefense.com%2Fv3%2F__https%3A%2F%2Fsecure-web.cisco.com%2F1n_nrksVR91kPB04lGzr6COj_EYtJE9nZ9kVxcDWeDscsOzvYeGCCPT4t92zBd9yTjpcUwszme_vKbFhomviJ4O3Tt_bG2UxEwv9b3QcKztZM1vSrEzXFkXAfq7_IBbnjfj3acA3VU5oCkWdDpU_lQ23fTceaPH54gYtYMeWZmhROyh2g6y5JhWFHeKAbZaNbWxshlk9mZC6aveKIJi4nKyfnN2J_SXoXarWW_6Zy7RloE8UbC1ZCpcJS4DiREwXLjqhAcM74FUzRhmnFgclciHJtNiquU_rhoK3xFR8V8wl7J7bu-j1HlM78q6yDn5WG%2Fhttps*3A*2F*2Fsurfer..nmr.mgh.harvard.edu*2Ffswiki*2FRemoteAccess__;JSUlJSU!!LLK065n_VXAQ!kGlwFB8W5ycD4gdiSq6pd5hfMkIurnTmY-rH3QFV37h8kuxu3JWszagwT1HYSwFxaGy9x2-UrdzlG-5nLQ03$.

If we operate from a Mac computer, is it better to use a VNC or XQuartz for ssh tunneling? In addition, can we find an error log in Freesurfer's directory to find out exactly why Freeview keeps aborting in our circumstance?

Thank you.

Sincerely, Yilei

<Screen Shot 2024-01-11 at 11.01.27 AM.png>_______________________________________________ Freesurfer mailing list Freesurfer@nmr.mgh.harvard.edumailto:Freesurfer@nmr.mgh.harvard.edu MailScanner has detected a possible fraud attempt from "secure-web.cisco.com" claiming to be https://secure-web.cisco.com/1faXa85PVUxPcNmGtR8HU4eaKKn5Zvz3kGu5h2-vuvsy2LP...https://secure-web.cisco.com/1RBDZYaDIdp_pP9G8lm2IPm-vs87zNdQhCCckctOH6cIOR8sszW4p-SwHrRsuK1wNz426T9vVRcaXJGZzwFBfiNwPoHOHONZv69PzIo4uUCoXPHk86qVC6kb81Xcjz3TY3jQov1Pzkde1m9iGqyvPfMOW4uRxcYWkaxYLfcx3-jhSGvZ3VB7nqYMse0bNublO-9leNWkZiLjTsXQiyqJ3_Mcmtv9WpAPYNjNKD5oGZWhdb3xlFFcRas8lMTo0V_UyE_aol-6rPU4AStK8pxRc12ecVv5hxNQSRiInKbSpu5kGdbXFKu1gGETudL8RPVyNzy2voGPXeltsiQb1UAiGag/https%3A%2F%2Furldefense.com%2Fv3%2F__https%3A%2F%2Fsecure-web.cisco.com%2F1oRAi904qpnmB7H183lf0fvtulvM28NJWJqgmJIsNkt7zxbVFjpYIhy8QG4tD9lmK62N1_2FuapZsSZUyneheakxCLy5TKEOhR8t43P2GshoQ8O-j3sefIABInpV_BKAI-QY67qbKQs4OMK9Q8ju5VtVLMWRCZ6C3HSvEVtfY5FbQYLy8jENUcZ_hOqNkVHxJsDunx8oTXC520KmlsIslZuqdItx1BNlcoD_KRWuz-Rk8oT3xX8KtkOMhz7If_T1ysuE4Nfoe8EzszDb-TwwpmJQjfOLJHp743yF8nc6YiM7qurGjUJp4UZLt8wPu-TVwR_6kz6eJYZMRK3sVQKvpQQ%2Fhttps*3A*2F*2Fmail.nmr.mgh.harvard.edu*2Fmailman*2Flistinfo*2Ffreesurfer__;JSUlJSUl!!LLK065n_VXAQ!kGlwFB8W5ycD4gdiSq6pd5hfMkIurnTmY-rH3QFV37h8kuxu3JWszagwT1HYSwFxaGy9x2-UrdzlG_dnGcjl$