Public course previewThis is not your assigned passport. No identity, answers, or completion progress are stored here.How to start your passport
Guided lesson
01 / 01About 30 minutesdata handling

Use Blade For Graphical Work Without Losing Data

Verify Blade, the shared Windows computer, and one temporary-to-durable file round trip. Keep private paths and credentials out of the learning record.

Where you will workInside the remote Blade Windows desktop shown on your computer
  1. 1Understand
  2. 2Try it yourself
  3. 3Check and submit

Before you start#

Blade is a shared Windows computer reached through Remote Desktop Protocol (RDP). Use it for licensed graphical software, computer-aided design (CAD) and light pre/post-processing. Route heavy or unattended computation to Euler or another approved system.

Location inside Blade Role Lifetime
Assigned P: supervisor/username folder Approved durable project copy Owner decides access and retention
Your D: username folder Temporary fast working copy Preserve useful output in P: before cleanup
C: and user folders Operating-system/personal locations Not approved project storage

The Blade desktop is a different computer from the terminal on your laptop. Verify the hostname before running the file test there.

A useful result exists only on D:. Does copying it successfully into a folder called archive on D: make it durable? Decide the destination before the test.

Separate test cleanup from project retention

The probe verifies equal contents between D: and the approved P: boundary, then removes both random test files. Real useful output must instead remain verified in approved durable storage according to its owner's retention rule. A matching hash alone does not approve a location or verify backup.

Verify the remote desktop and preserve useful results in the approved durable location before cleanup.

Start the practice

Practice

Follow the steps

Follow in order

Steps

Use your computer's RDP client to reach Blade, verify the remote host then test the approved temporary/durable boundary. No heavy workload runs here.

Optional: using the terminal

A command is a line of text that tells a computer to do one task. You paste it into a terminal, the text application used for commands. A shell is the part inside that application that reads the command. PowerShell, zsh, and Bash are shells. Open only the application named for your computer below; it starts its configured shell. Follow the shell named below. You do not need to install a separate Bash or zsh application.

Your computer or local means the laptop or desktop in front of you. Remote means another computer reached through the network. A command affects whichever computer the step names, so check that label before pasting.

  • Windows: press the Windows key, type PowerShell, and open the result named PowerShell. Do not use Command Prompt, Git Bash, or WSL for a block labelled PowerShell.
  • macOS: press Command+Space, type Terminal, and press Return. Terminal normally starts the zsh shell. If it uses another shell, run zsh for this session.
  • Linux: open the app named Terminal from the applications menu. It normally starts the Bash shell. If it uses another shell, run bash for this session.

The prompt is the text beside the blinking cursor. For each card, check the named computer, choose Copy, paste only the command after the prompt, press Enter once, and wait for the prompt to return.

If you have never done this before, first run the harmless terminal-ready practice on the start page. It lets you practise copying, pasting, pressing Enter, and reading output before a setup command.

Practise one harmless command first

Blade card: first open the remote Blade Windows desktop, then open PowerShell inside Blade. Do not use PowerShell on your laptop for that card.

How to open a terminal and run a command
  1. 01

    Confirm Blade is the right system

    Read and answer on this web page

    Blade is a shared Windows computer reached through Remote Desktop Protocol (RDP). Use it for interactive licensed Windows software, computer-aided design (CAD), simulation pre-processing and post-processing, and light prototypes. Use Euler or another approved compute system for long or unattended heavy workloads.

    Look forYour task requires the shared graphical Windows environment.

    Explanation and help
    What this means
    Connect to the ETH network.
    Safe recovery
    Choose the appropriate compute or storage system instead.
  2. 02

    Connect to ETH network or VPN

    On your computer

    Use the campus network or connect ETH VPN before opening RDP. VPN means Virtual Private Network: the official secure connection used to reach ETH-only services from outside the campus network.

    Look forThe Blade hostname is reachable from your computer.

    Explanation and help
    What this means
    Open an RDP client.
    Safe recovery
    Fix network access before changing saved credentials.
  3. 03

    Connect from Windows

    On your computer

    Open Start, search for Remote Desktop Connection, and open it. Enter mavt-ide-s100w.d.ethz.ch as the computer. At the credential prompt choose More choices and Use a different account if needed, then sign in as d\<eth-username> with your own ETH password.

    Look forA Windows desktop opens for your personal ETH account.

    Explanation and help
    What this means
    Verify the remote hostname.
    Safe recovery
    Check VPN, the exact hostname, and d\username; remove a wrong saved account instead of using it.
  4. 04

    Connect from macOS

    On your computer

    Install Microsoft Windows App from the Mac App Store if it is absent. Open Windows App, select Devices, select +, choose Add PC, enter mavt-ide-s100w.d.ethz.ch in PC Name, and select Add. Double-click the new PC. At the credential prompt sign in as d\<eth-username> with your own ETH password; do not reuse another person's saved account.

    Look forA Windows desktop opens for your personal ETH account.

    Explanation and help
    What this means
    Verify the remote hostname.
    Safe recovery
    Check VPN, the exact hostname, and d\username before changing any remote setting.
  5. 05

    Connect from Linux

    On your computer

    Search your applications for Remmina. If it is installed, open it, choose RDP, enter mavt-ide-s100w.d.ethz.ch as the server, and sign in as d\<eth-username> with your own ETH password. If Remmina is absent on a personal Linux computer, use your distribution's Software application or the official Remmina installation guide; install the RDP client and plugin only. On an ETH-managed computer, request software installation instead. Do not install a remote-desktop server, change a firewall, or alter Blade security settings.

    Look forA Windows desktop opens for your personal ETH account.

    Explanation and help
    What this means
    Verify the remote hostname.
    Safe recovery
    Check VPN, protocol RDP, the exact hostname, and d\username. If the client or RDP plugin cannot be installed through the approved software source, use the Passport help form without including private information; do not install remote services.
  6. 06

    Verify the remote computer

    Use the Blade Windows desktop after Remote Desktop opens

    Open PowerShell inside the remote Blade desktop and run the block below. The hostname check is required. The GPU line is informational and may say that the query is unavailable.

    RunPowerShell inside the remote Blade Windows desktop
    & {
      $HostName = $env:COMPUTERNAME
      $HostName
      if ($HostName -ne 'mavt-ide-s100w') { throw "STOP: this is not the assigned Blade server" }
      if (Get-Command nvidia-smi -ErrorAction SilentlyContinue) {
          nvidia-smi --query-gpu=name,memory.total --format=csv,noheader
      } else {
          'GPU query unavailable; hostname is correct.'
      }
    }

    Look forThe first line is mavt-ide-s100w. A GPU line may follow, but it is not required to prove the Blade connection.

    If this differsDisconnect if the hostname is not the assigned Blade server.

    Explanation and help
    What this means
    Locate the approved P: project folder.
  7. 07

    Confirm P: and D: paths

    Use the Blade Windows desktop after Remote Desktop opens

    Use the D:/P: lifetime table above. Obtain the supervisor first name and approval before entering P:\SupervisorFirstName; your temporary folder is D:\eth-username. Create your exact ETH-username folder only if absent and authorized. D: is temporary. Do not use C:, Desktop, Documents, Downloads or other mapped drives for project storage.

    Look forThe approved P: username folder exists and the D: username folder is clearly temporary.

    Explanation and help
    What this means
    Run the harmless file round trip.
    Safe recovery
    Ask the supervisor or lab IT for the correct P: folder before creating project data.
  8. 08

    Copy, verify, and clean one test file

    Use the Blade Windows desktop after Remote Desktop opens

    Run the existing guarded PowerShell block inside Blade after the hostname check passes. It refuses files, shortcuts and junctions at either target, creates one random non-sensitive D: file, copies it to the approved P: folder, compares hashes and removes both probe files. This cleanup applies only to the test; retain useful real outputs under the owner's rules.

    RunPowerShell inside the remote Blade Windows desktop
    & {
      $Supervisor = (Read-Host "Supervisor first name").Trim()
      $EthUser = $env:USERNAME
      if ([string]::IsNullOrWhiteSpace($Supervisor) -or $Supervisor -in @('.', '..') -or $Supervisor -match '[\\/:*?"<>|]') { throw "STOP: invalid supervisor folder name" }
      if ($EthUser -notmatch '^[A-Za-z0-9._-]+$') { throw "STOP: invalid ETH username" }
      if (-not (Test-Path -LiteralPath 'P:\' -PathType Container)) { throw "STOP: P: is not available" }
      if (-not (Test-Path -LiteralPath 'D:\' -PathType Container)) { throw "STOP: D: is not available" }
      $Durable = Join-Path "P:\$Supervisor" $EthUser
      $Temporary = Join-Path "D:\" $EthUser
      if (-not (Test-Path -LiteralPath $Durable -PathType Container)) { throw "STOP: approved P: username folder not found" }
      $DurableItem = Get-Item -Force -LiteralPath $Durable
      if (-not $DurableItem.PSIsContainer -or ($DurableItem.Attributes -band [IO.FileAttributes]::ReparsePoint) -ne 0) { throw "STOP: approved P: path is not a real directory" }
      if (Test-Path -LiteralPath $Temporary) {
        $TemporaryItem = Get-Item -Force -LiteralPath $Temporary
        if (-not $TemporaryItem.PSIsContainer -or ($TemporaryItem.Attributes -band [IO.FileAttributes]::ReparsePoint) -ne 0) { throw "STOP: D: username path is not a real directory" }
      } else {
        New-Item -ItemType Directory -Path $Temporary -ErrorAction Stop | Out-Null
        $TemporaryItem = Get-Item -Force -LiteralPath $Temporary
        if (-not $TemporaryItem.PSIsContainer -or ($TemporaryItem.Attributes -band [IO.FileAttributes]::ReparsePoint) -ne 0) { throw "STOP: new D: username path is not a real directory" }
      }
      $Name = "passport-$([guid]::NewGuid().ToString('N')).txt"
      $TempFile = Join-Path $Temporary $Name
      $DurableFile = Join-Path $Durable $Name
      $CopyVerified = $false
      try {
        Set-Content -LiteralPath $TempFile -Value "IDEAL Passport synthetic Blade storage check" -ErrorAction Stop
        Copy-Item -LiteralPath $TempFile -Destination $DurableFile -ErrorAction Stop
        $CopyVerified = (Get-FileHash -LiteralPath $TempFile -ErrorAction Stop).Hash -eq (Get-FileHash -LiteralPath $DurableFile -ErrorAction Stop).Hash
      } finally {
        Remove-Item -LiteralPath $TempFile -Force -ErrorAction SilentlyContinue
        Remove-Item -LiteralPath $DurableFile -Force -ErrorAction SilentlyContinue
      }
      $TemporaryRemoved = -not (Test-Path -LiteralPath $TempFile)
      $ProbeRemoved = -not (Test-Path -LiteralPath $DurableFile)
      "copy_verified=$CopyVerified temporary_removed=$TemporaryRemoved probe_removed=$ProbeRemoved"
      if (-not ($CopyVerified -and $TemporaryRemoved -and $ProbeRemoved)) { throw "STOP: copy verification or probe cleanup failed" }
    }

    Look forThe final line says copy_verified=True, temporary_removed=True, and probe_removed=True.

    If this differsRead the first error. The finally block attempts to remove both random probe files even after a failure. If either remains, remove only the two displayed passport probe paths; do not broaden folder permissions or delete the username folder.

    Explanation and help
    What this means
    Confirm the successful copy in the Passport; no probe file remains.
  9. 09

    Leave heavy work off Blade

    Use the Blade Windows desktop after Remote Desktop opens

    Do not start overnight training, broad sweeps, or unscheduled heavy computation. Do not install a Windows Subsystem for Linux (WSL) distribution or enable Windows features without approval.

    Look forOnly the interactive graphical application or light prototype remains on Blade.

    Explanation and help
    What this means
    Return to the local Passport.
    Safe recovery
    Stop the workload safely and move it to an approved scheduled compute system.
  10. 10

    Record the safe result

    On your computer

    Enter only the hostname and yes/no storage confirmations in the local Passport. Do not publish the supervisor name, mapped path, credentials, or screenshot.

    Look forThe result confirms the correct host, durable copy, D: cleanup, and no C: usage.

    Explanation and help
    What this means
    Run Check my work and submit once.
    Safe recovery
    Reconnect and verify the exact missing condition before attesting.

Finish the lesson

Check and submit

Answer these 2 questions, then confirm the work you checked.

Both answers must be correct. Completion appears after the automatic GitHub check passes.

01Where does durable Blade project work belong?Safety-critical
02What is Blade primarily for?Safety-critical
Confirm the result you personally observed

These values are processed only by the local launcher. Private paths are not written to the public submission.

Before submitting
Open my real passport first

You can check sample answers here. Open your local Passport to check your practice files and submit the lesson.

Preview onlyYou can try the questions here. This page does not store or submit your answers.
Need help?Open recovery steps and AI-review guidance

If Blocked#

Check VPN, exact hostname, account format, and assigned supervisor folder. Do not use another person's saved credentials, install remote services, or select another mapped drive. Use the remote access guide.

Useful references:

Understand Before Accepting AI Output#

An agent must not install system features, choose another drive, or run a heavy local workload because Euler access is inconvenient. Verify host, storage, and shared-resource impact.