From b60bc32391e097015fa06fa8016412c22a109054 Mon Sep 17 00:00:00 2001
From: Petar Cubela <mail@petarcubela.de>
Date: Tue, 14 Jul 2026 09:54:30 +0200
Subject: [PATCH] Add sftp config notes and GPU driver install notes

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 .../notes/20260130-sftp-config.md             | 21 +++++++
 .../phy-z-srv-gpu01/nvidia-driver-install.md  | 62 +++++++++++++++++++
 2 files changed, 83 insertions(+)
 create mode 100644 server/phy-z-dmz-sftp01/notes/20260130-sftp-config.md
 create mode 100644 server/phy-z-srv-gpu01/nvidia-driver-install.md

diff --git a/server/phy-z-dmz-sftp01/notes/20260130-sftp-config.md b/server/phy-z-dmz-sftp01/notes/20260130-sftp-config.md
new file mode 100644
index 0000000..be2593e
--- /dev/null
+++ b/server/phy-z-dmz-sftp01/notes/20260130-sftp-config.md
@@ -0,0 +1,21 @@
+
+## Base
+
+- ssh hardening
+- fail2ban
+- autoupdate
+
+## User and Groups
+
+- Group: `sftpusers`
+- User: `sftpuser` (default) (`sudo useradd -G sftpusers -s /sbin/nologin sftpuser`)
+- Path: `/home/sftpuser` for user key file
+
+## Notes
+
+- each user needs pub keys set in its home path `/home/<user>/.ssh/authorized_keys`
+- each user will be logged on to the sftp path `/sftp`
+- the default `sftpuser` has as shell `/sbin/nologin` so that it can not login via ssh
+- each user needs to be in the group `sftpusers` for sftp access.
+- users in the `sftpusers` group can not login via ssh
+- created group `admins` for ssh access. Only via Pub Key auth
\ No newline at end of file
diff --git a/server/phy-z-srv-gpu01/nvidia-driver-install.md b/server/phy-z-srv-gpu01/nvidia-driver-install.md
new file mode 100644
index 0000000..b7e8fa1
--- /dev/null
+++ b/server/phy-z-srv-gpu01/nvidia-driver-install.md
@@ -0,0 +1,62 @@
+## Manual nvidia driver, cuda driver and container toolkit
+
+### NVIDIA driver
+
+Check if GPUs are recognized by the base OS:
+```bash
+sudo lspci | grep -i nvidia
+```
+
+Which should some output if it finds nvidia deivces.
+
+Search for required drivers for your GPUs:
+```bash
+sudo ubuntu-drivers devices
+```
+
+Automatically install all drivers:
+```bash
+sudo ubuntu-drivers autoinstall
+```
+
+Reboot the system for changes to take effect:
+```bash
+sudo reboot
+```
+
+Shot GPU stats with:
+```bash
+nvidia-smi
+```
+
+### Cuda driver
+
+**Disable Secure Boot in BIOS**
+
+Install Cuda drivers:
+
+```bash
+wget https://developer.download.nvidia.com/compute/cuda/repos/ubuntu2404/x86_64/cuda-keyring_1.1-1_all.deb
+sudo dpkg -i cuda-keyring_1.1-1_all.deb  
+sudo apt update  
+sudo apt -y install cuda-toolkit-12-8  
+sudo apt install -y cuda-drivers
+```
+
+### Container toolkit
+
+Install the Nvidia Container toolkit:
+
+```bash
+curl -fsSL https://nvidia.github.io/libnvidia-container/gpgkey | sudo gpg --dearmor -o /usr/share/keyrings/nvidia-container-toolkit-keyring.gpg \
+  && curl -s -L https://nvidia.github.io/libnvidia-container/stable/deb/nvidia-container-toolkit.list | \
+    sed 's#deb https://#deb [signed-by=/usr/share/keyrings/nvidia-container-toolkit-keyring.gpg] https://#g' | \
+    sudo tee /etc/apt/sources.list.d/nvidia-container-toolkit.list
+apt update  
+apt install -y nvidia-container-toolkit
+```
+
+Test a simple cuda container and nvidia-smi command inside:
+```bash
+docker run --rm --gpus all nvidia/cuda:13.0.0-base-ubuntu24.04 nvidia-smi
+```