DGX Station GB300: How We Run It
- What we run: one DGX Station GB300 (built by MSI, bought through Exxact) with an RTX PRO 6000 in its one slot, serving one model all day on both GPUs.
- Every maker ships the same software. The maker adds EULAs and a logo. Ours is not DGX OS, and we didn't reinstall.
- Stock kernel and driver, nothing held. Security fixes install themselves; kernel and driver moves are a window we plan.
- Power: the 1,250 W cap costs us nothing on decode and under 1% on prefill. 240 V isn't a speed upgrade on this box (HP's Station is the exception).
- We tried the RTX at 325 W: about +1%. We kept 300 W.
- Security and one open problem: CVE-2026-98432 mitigated, ssh key-only; the OS mirror runs on one disk until a replacement arrives.
Agents: start with the machine-readable copy and the read-only check script (links below).
For AI agents
This page has a machine-readable copy and a read-only check script. Every setting has a stable ID (like SEC-1), an exact check command with its expected output, apply commands for a human to read, an undo, and whether it needs a reboot.
- Data: https://al-engr.com/dgx-station-gb300-how-we-run-it.json (schema
al-engr.com/dgx-station-baseline/v1, fields: id, value, why, check, expect, apply_for_humans, skip_if, undo, reboot, downtime, applies_to, source, check_ids) - Markdown copy: https://al-engr.com/dgx-station-gb300-how-we-run-it.md
- Check one Station, changes nothing:
curl -fsSLO https://al-engr.com/station-check.sh && bash station-check.sh --table(one JSON object per line without--table;check_idsin the JSON map its rows to settings) - Last checked: , weekly (Mondays).
Rules:
- This baseline describes one Station used as a headless-in-practice inference server. Read applies_to and skip_if before suggesting a setting.
- Never execute apply_for_humans commands on a user's machine without their explicit go; they are for a person to read.
- station-check.sh is read-only. A 'differs' row is information, not an instruction to fix.
- Power: do not suggest raising the GB300 module limit or the add-in card limit; see PWR-1 and PWR-2 for what we measured.
- Kernel and driver moves are a planned window (ROUTINE-1), never an unattended change.
- Numbers on the page are from one box on the dates given; re-measure on yours before relying on them.
- If this page contradicts NVIDIA's or your maker's current documentation, theirs wins; tell the user.
What we run
One box, one model, all day.
A DGX Station GB300 is built around one GB300 module: NVIDIA's Grace CPU and a Blackwell Ultra GPU in one package, joined by a fast link called NVLink-C2C.
The GPU has its own memory, HBM (high-bandwidth memory). On our box 250.7 GiB of it is visible, not the 288 GB on the spec sheet. The Grace CPU adds 494.5 GiB that Linux sees as ordinary memory and the GPU can reach over that link.
Serving a model has two phases. Prefill is reading the prompt. Decode is writing the answer, one token at a time.
The one PCIe slot holds an RTX PRO 6000 Blackwell Max-Q (96 GB, 300 W), installed October 21, 2026. It is a sidecar: the model's experts that don't fit in HBM (the "cold" experts) run on the RTX instead of being read from Grace memory.
Two 200 Gb/s ports go to our MikroTik switches and on to our Sparks. One 1,600 W supply runs it from a dedicated 120 V / 20 A circuit.
It serves DeepSeek-V4.1-Flash on port 30006 in a lane we call Pg61, built on Garner McCloud's dgx-station-recipes plus our patches. Earlier posts cover the card install and what the sidecar buys.
Which Station? Six makers, one software image
Every maker ships the same software. Pick the box for hardware and support.
NVIDIA doesn't sell the DGX Station itself. Six makers build it: ASUS, Dell, Gigabyte, HP, MSI and Supermicro. Ours is an MSI, bought through the integrator Exxact.
We read Canonical's public OEM archive for all six on November 4, 2026. Every image depends on the same NVIDIA kernel, driver and GB300 tuning packages. The maker adds EULAs, a logo, and sometimes a wallpaper or a login banner.
What differs is outside the image: chassis and cooling, firmware, add-on apps, support, and power-supply notes. HP requires a 200–240 V circuit; the other five are rated for 115 V and up.
The six makers, their Canonical projects and the shared packages
| Maker | Canonical project | Add-on software we found | Power note |
|---|---|---|---|
| ASUS ExpertCenter Pro ET900N G3 | aowanda-aragorn | Zenni AI Hub | 1,600 W; rated 115–240 V; North America cord is C19 to NEMA 5-20P |
| Dell Pro Max with GB300 | somerville-bagon (inferred: arm64, depends on the GB300 workstation meta, no market name published) | none found | 1,600 W from 115 V; 20 A circuit |
| Gigabyte W775-V10-L01 | greylock-greybeard | none found (a manual launcher in the image) | 1,600 W from 115 V; 20 A circuit |
| HP ZGX Fury G1n AI Station | stella-guillermin | Z Toolkit + Z Runtime | requires a dedicated 200–240 V circuit |
| MSI XpertStation WS300 (ours) | mydra-madrid | none found | 1,600 W from 115 V; 20 A circuit |
| Supermicro ARS-511GD-NB-LCC | silverpine-shadowpine | markets NVIDIA AI Enterprise | 1,600 W from 115 V; dedicated 20 A circuit in 115–127 V countries |
Every one of the six meta packages depends on the same four things: the Ubuntu OEM keyring, NVIDIA's kernel (linux-nvidia-64k-hwe-24.04), oem-nvidia-meta for the driver, and hwe-dgx-gb300ws-meta, which pulls in the 18 dgx-desktop-* tuning packages. The kernel and driver come from Canonical's NVIDIA archive. The tuning packages come from one source package, dgx-desktop-defaults, which is also in the regular Ubuntu archive.
Each maker's own package contains EULAs (NVIDIA's, NVIDIA AI, NVIDIA DOCA and the maker's), a logo for the setup wizard, and in some cases a wallpaper, a manual launcher (Gigabyte) or a login banner (HP). Even the hostnames differ in name only: dell., msi., hp. and asus.archive.canonical.com are the same server.
The add-on apps are what the vendor pages list; we haven't installed or tested any of them. Integrators we know of: Exxact, BIZON, Puget and GPU Partner. NVIDIA announced a Windows version of the Station; we found none shipping as of November 4, 2026. The full power-supply table, with each maker's input bands, is under Power.
Not DGX OS, and we didn't reinstall
Our image is the maker's Ubuntu, not NVIDIA's DGX OS, and we're keeping it.
There is no /etc/dgx-release on this box; MSI shipped it that way. We looked at DGX OS and said no, for three reasons: the Station isn't on its supported list, it ships an older driver and kernel than we already run, and NVIDIA's own reimage procedure pulls from the maker's repositories anyway.
Some Station images do carry a dgx-release file, which NVIDIA's tools call "Software 2.0". Ours doesn't, and that matters for one power feature below.
Versions: our image against DGX OS 7
Ours: Ubuntu OEM 24.04.4 LTS arm64+nvidia-64k (build 20260525), since updated to 24.04.5; driver 595.99.02; kernel 7.0.0-1019 when we compared, 7.0.0-1024 since the November 4 update window.
DGX OS 7's release notes list the supported ARM64 system as the DGX GB300 rack system; the ISO comes through NVIDIA Enterprise Support. DGX OS 7.6.0 (September 14, 2026) ships driver 580.178.04 and kernel 7.0.0-1018.
NVIDIA's Station development guide says a reimage uses USB or BMC virtual media with "Image Sources: OEM repositories". The dgx-release seen on some Station images reads "NVIDIA DGX GB300WS", 7.5.0, build 2026-06-16.
Our settings at a glance
The whole baseline in one table, verified on our Station on November 4, 2026. Each ID links to its detail card.
| ID | Setting | What we use | Reboot? |
|---|---|---|---|
| SW-1 | Keep the maker's factory Ubuntu image (not DGX OS) | Ubuntu OEM 24.04 arm64+nvidia-64k as shipped by MSI (now 24.04.5); no /etc/dgx-release | no |
| SW-2 | Kernel 7.0.0-1024-nvidia-64k (stock HWE meta, nothing held) | 7.0.0-1024-nvidia-64k via linux-nvidia-64k-hwe-24.04 (installed November 4, 2026; 7.0.0-1019 kept installed as the fallback) | yes |
| SW-3 | GPU driver 595.99.02 (open), from Canonical's NVIDIA archive | nvidia-driver-595-open 595.99.02; the module for the running kernel matches | yes |
| SW-4 | Stock NVIDIA tuning packages, no holds | hwe-dgx-gb300ws-meta 1.0ubuntu~24.04.20 with 18 dgx-desktop-* packages; apt-mark showhold empty | no |
| SW-5 | Security updates automatic; kernel and driver by hand | unattended-upgrades on; dgx-desktop-unattended-upgrades-blacklist keeps linux-image/modules/headers and nvidia-driver/kernel-common out of it | no |
| SW-6 | Containers reach the second GPU through CDI | nvidia-container-toolkit 1.19.0; containers name GPUs as --device nvidia.com/gpu=<UUID> | no |
| MEM-1 | Coherent memory in driver mode (CDMM): 494.5 GiB for the host | NVreg_CoherentGPUMemoryMode=driver; MemTotal 518,524,480 kB (494.5 GiB); GB300 HBM 256,703 MiB (250.7 GiB) visible | no |
| MEM-2 | No swap; NUMA balancing off | SwapTotal 0; kernel.numa_balancing 0 (stock command line) | no |
| PWR-1 | Leave the GB300 module limit alone (1,250 W with a 300 W card) | Module current 1,250 W, requested 1,600 W; set by firmware from the add-in card's class | no |
| PWR-2 | Add-in card at its stock 300 W | RTX PRO 6000 Blackwell Max-Q at 300 W (range 250–325 W) | no |
| PWR-3 | Its own 20 A circuit at 120 V | Dedicated 20 A branch circuit, nothing else on it, no power strip | no |
| STO-1 | OS on the factory RAID1 | md0 = RAID1 of two Micron 4600 2 TB, ext4 | no |
| STO-2 | Model weights on local NVMe, never served from the NAS | /models = md1 RAID0 of two WD_BLACK SN850X 8 TB in the empty CX8 M.2 slots, XFS, nofail,noatime | no |
| NET-1 | Two 200G ports, two subnets, MTU 9000 | ConnectX-8 enP1p3s0f0np0 10.0.0.9/24 and enP1p3s0f1np1 10.0.1.9/24, MTU 9000; ARP 1/2/2 from NVIDIA's package | no |
| SEC-1 | CVE-2026-98432: MPTCP off, request migration off | net.mptcp.enabled = 0, net.ipv4.tcp_migrate_req = 0 in /etc/sysctl.d/99-cve-2026-98432.conf | no |
| SEC-2 | CVE-2026-98432: drop IPv4 TCP packets carrying IP options | Own nft table cve_2026_98432, loaded by cve-2026-98432-nft.service; stock nftables.service masked | no |
| SEC-3 | ssh by key only | /etc/ssh/sshd_config.d/00-key-only.conf: PasswordAuthentication no, KbdInteractiveAuthentication no, PermitRootLogin prohibit-password | no |
| SRV-1 | Our model lane comes back by itself after a power cut | pg61-autostart.service: waits for Docker, both GPUs and /models, then starts the lane; skips if anything is already running or a NO-AUTOSTART / MAINTENANCE flag file exists | no |
Every row has a check command, its expected output, an apply and an undo in the cards below. Confirm a Station matches before you change anything.
Software
Stock kernel and driver, nothing held.
Kernel and GPU driver both come from Canonical's NVIDIA archive, and no package is held. The policy since October 26 is no holds: our recipes have to work on other people's machines, and a hold drifts us off the track everyone else is on.
Containers name each GPU by UUID through CDI (SW-6), which matters when the two GPUs are different kinds.
What NVIDIA's tuning packages set
Eighteen small NVIDIA packages own the kernel command line. We change none of it (SW-4).
In plain words: the kernel stops shuffling memory between the CPU's memory regions, and stops zeroing every page it hands out. The platform's power-meter cap is turned on; the Power section is about that cap. Two ports on two subnets each answer only for their own address. The driver stays loaded between jobs.
The 18 packages and the settings they own
Version 1.0ubuntu~24.04.20, except the unattended-upgrades blacklist at 1.0ubuntu~24.04.2: app-profiles-mixed-coherency, arp-configuration, crashkernel-configuration, disable-init-on-alloc, disable-numa-balancing, docker-gpus, docker-options, enable-persistenced, enable-power-meter-cap, kernel-configuration, limits, no-systemd-suspend, nvidia-cuda-environment, nvidia-fs-loader, nvidia-xconfig, nvme-interrupt-coalescing, pro-activation, unattended-upgrades-blacklist.
Kernel command line, all from those packages: three PCI ACS overrides (pci=config_acs=…), init_on_alloc=0, numa_balancing=disable, acpi_power_meter.force_cap_on=y, crashkernel sizing. The ARP package sets arp_ignore=1, arp_announce=2 and rp_filter=2. Persistence mode is on for both GPUs.
Also on the box: Docker 29.1.3 with nvidia-container-toolkit 1.19.0; the lane reaches the RTX with --device nvidia.com/gpu=<UUID>. apt-mark showhold is empty. The boot target is the stock graphical one with GDM running; nobody sits at the box, but we haven't changed it.
Firmware, none of it flashed by us (fwupd): ConnectX-8 40.47.1088, Micron 4600 PBMA002, SN850X 638201WD; UEFI AMI ES429NMS.103 dated 05/22/2026. The BMC (IPMI 2.0, NVIDIA Corporation, firmware 0.08) has no network configured and we don't use it.
Updates are split, and the split is NVIDIA's
Security fixes install themselves. Kernel and driver moves wait for a window we plan (ROUTINE-1).
unattended-upgrades is on for the security pocket. NVIDIA's own blacklist package keeps every kernel and driver package out of that run and leaves a login message saying so.
The November 4 window moved the kernel from 7.0.0-1019 to 7.0.0-1024. The driver didn't change, and 1019 stays installed as the fallback.
The blacklist file and what it says
dgx-desktop-unattended-upgrades-blacklist installs /etc/apt/apt.conf.d/30-auto-upgrade-kernel-and-gpu-driver, which keeps linux-nvidia, linux-image-, linux-modules-, linux-signatures-, linux-headers-, linux-tools-, nvidia-driver-, nvidia-dkms-, nvidia-kernel-common- and libnvidia-common- out of unattended upgrades.
Its login message: "Unattended upgrades are disabled for the NVIDIA GPU driver and kernel. These components must be upgraded manually, followed by a system reboot."
The driver went in on October 27 in a staged 2 a.m. window with rollback packages ready. The kernel window on November 4 (20:58–21:15 CST) installed 7.0.0-1024.25 with its matching linux-modules-nvidia-595-open package: 4 upgraded, 8 new, 0 removed.
Memory
Size models against 250.7 GiB and 494.5 GiB, not the spec sheet.
The GB300's memory runs in what the driver calls CDMM (coherent memory, driver mode), the stock setting. Linux sees Grace memory only; the driver manages the GPU's HBM itself.
A model that fits "in 288 GB" on paper does not fit in HBM here. Anything past 250.7 GiB comes from Grace memory over NVLink-C2C or, in our lane, from the RTX sidecar.
There is no swap, and we want none: a model server pins large host buffers, and swapping one would be a stall, not a slowdown (MEM-2).
The exact readings
GB300 HBM: 256,703 MiB, which is 250.7 GiB. Linux MemTotal: 518,524,480 kB, which is 494.5 GiB. NVreg_CoherentGPUMemoryMode=driver. Transparent huge pages at madvise. NUMA balancing off.
Power
The 1,250 W cap costs us almost nothing, 240 V wouldn't change that, and the RTX stays at 300 W.
The rule
The Station has one 1,600 W supply and a fixed 1,600 W budget. NVIDIA's Station development guide splits it by the add-in card's rated power: no card or 75 W and under, the GB300 module gets all 1,600 W; a 76–300 W card, 1,250 W; over 300 W, 950 W. Line voltage is not an input.
Our box reports exactly that: module 1,250 W, RTX 300 W. The 50 W left over goes to nobody.
What the box reports
GB300 module current limit 1,250 W; requested, default and maximum 1,600 W; minimum 200 W. The GB300 also shows a GPU-only limit of 1,300 W; that is a separate number and not a supply band. RTX limit 300 W, settable 250–325 W.
120 V or 240 V?
On this box, 240 V is not a speed upgrade.
The makers rate the supply at its full 1,600 W from 115 V up. The 1,300 W band is 100–114 V: Japan's mains, or an outlet sagging under load. A healthy US 120 V outlet is in the full band. 240 V buys half the current and some margin against sag, not speed.
HP is the exception: HP says the ZGX Fury "requires a dedicated 200–240V AC circuit" and is not meant for a standard 120 V outlet.
The claim that 240 V helps comes from Wendell of Level1Techs, who said in his review of this same MSI WS300 that 240 V gives "a few percent more performance". He ran his unit on 240 V, so 120 V was never on his bench. Power sloshing on his image, or outlet sag, would explain it.
Ours is a static split on a healthy outlet, so we measured.
All six makers' power-supply ratings, from their own pages
| Maker | Supply | Lower input band | 115 V and up | Their circuit note |
|---|---|---|---|---|
| MSI WS300 | 1,600 W ATX 80 PLUS Platinum, C19 cord | 100–114 V: max 1,300 W | 115–240 V: max 1,600 W | "System requires a 20-amp circuit" (user guide) |
| Supermicro ARS-511GD | 1,600 W Titanium | 100–114 V: 1,300 W | 115–240 V: 1,600 W | "115–127 V countries (e.g., USA, Canada, Mexico): A dedicated 20-amp circuit is required." "100–114 V countries (e.g., Japan, Taiwan): A dedicated 200–220 V circuit is required." |
| Gigabyte W775 | 1,600 W ATX 80 PLUS Platinum, C19 | publishes 1,300 W for a lower band (Gigabyte labels it "100-240V~") | 115–240 V: 1,600 W | "115-240 V AC input is recommended"; "requires a 20-amp circuit" |
| ASUS ET900N G3 | 1,600 W Titanium | not published | system rating 115–240 V | North America: 125 V AC, C19 to NEMA 5-20P; "Maximum power output is optimized based on the regional input voltage and the power cord assembly." |
| Dell Pro Max GB300 | 1,600 W Titanium, C19 | 100 V: 1,300 W (15 A) | 115 V: 1,600 W (16 A); 240 V: 1,600 W (8 A) | "Computer requires a 20 A circuit"; NEMA 5-20 and 6-20 cords |
| HP ZGX Fury G1n | 1,600 W Titanium, C20 inlet | not published | rated 100–240 V (operating 90–264) | "requires a dedicated 200–240V AC circuit. It is not intended for connection to a standard 120V household outlet." Max measured 1,618 W at 230 V, idle 308 W |
All six rows were re-read from the makers' own pages and PDFs on November 4, 2026. No maker publishes a 120 V output figure separate from its 115 V figure. Dell's 240 V figure is the same 1,600 W as at 115 V: only the current changes. 240 V also buys a point or two of supply efficiency. The full argument, with our October 22 power trace, is in GB300 with RTX 6000, and 120V Power.
What the cap costs
Nothing on decode, under 1% on prefill. Measured on our lane on November 4, 2026.
We lowered the GB300's module cap step by step on the live serving lane and measured throughput at each step, over seven traffic shapes, with the pass/fail bar written down first (PWR-1). At the stock 1,250 W the cap was never active during decode, and active under 9% of the time in prefill.
Below the cap, prefill loses about 0.5% per 50 W; decode doesn't notice until 950 W. The firmware won't let us measure above 1,250 W with this card, so 1,600 W is a bound, not a measurement: about 0.2–0.5% on the hungriest prefill shape, nothing on decode.
This is lane-specific. On October 22 our older lane hit the cap in 86–89% of prefill seconds and lost up to 4.9% of clock, with a different engine, prompts and sampling. Your lane will differ. Measure it before you decide the cap matters.
PWR-1 method, the per-cap table and the follow-up ladder
November 4, 14:00–15:54 CST: three repetitions at the stock 1,250 W and two each at 1,150, 1,050 and 950 W, over seven traffic shapes; 63 cells, 0 errors. The plan and results were reviewed by Fable 5.1.
At 1,250 W the power-cap throttle was active 0% of the time in every decode cell and 0.8–8.7% of the time in the prefill cells. The mean clock deficit was at most 0.12% (32 × 8K prefill), 0.08% or less in the other prefill shapes, and 0.00% in decode. The highest single 100 ms module reading was 1,257 W. No thermal or power-brake events at any cap; the GPU stayed at or below 61 °C.
| Module cap | Single-user decode | 32-user decode | Mixed, 8 users | Prefill 4 × 64K | Prefill 32 × 8K | 32K first token | Sustained 4 × 64K |
|---|---|---|---|---|---|---|---|
| 1,150 W | 0.00% | −0.75% | −0.0% | −0.66% | −0.89% | −0.35% | −0.59% |
| 1,050 W | +0.06% | −0.52% | 0.0% | −1.95% | −2.08% | −1.15% | −1.69% |
| 950 W | −0.16% | −1.75% | −1.44% | −3.64% | −4.23% | −2.54% | −3.37% |
Change versus the mean of three 1,250 W repetitions. A follow-up with a sustained 32 × 8K prefill ladder of about 67 s per cell (16:14–16:30 CST, 7 arms) filled in the steps nearest the cap: −0.45% at 1,200 W and −0.90% at 1,150 W, with the cap active 7–8% of the time at 1,250, 17% at 1,200 and 34% at 1,150. That is about 0.45% per 50 W near the cap.
Can software raise it?
Not here.
nvidia-smi lowers the module limit fine. Asking for more is accepted as a request, and the limit stays at 1,250 W.
NVIDIA's own power-sloshing daemon, vsloshd, moves budget between the module and the card as load changes. NVIDIA documents it only for its DGX OS "Software 2.0" image. It isn't packaged for any maker's image, and there is no public word that it is coming (OPEN-3).
What we tried, and where vsloshd isn't
nvidia-smi -pl 1200 -sc 1 on the GB300 lowers the module limit to 1,200 W. With the RTX turned down to 250 W, -pl 1350 -sc 1 is accepted as a request (the box shows Requested 1,350 W) and the current limit stays at 1,250 W, checked at 3 s and 13 s afterward.
vsloshd is documented for DGX OS "Software 2.0" with the R610+ driver. It is not in any of the six OEM projects, not in Canonical's NVIDIA archive, not in NVIDIA's public base-OS repository, and there is no public source. NVIDIA's own Station agent skill (dgx-assist) treats its absence on older images as normal and tells agents not to suggest manual caps. The daemon talks to the platform through a different channel than nvidia-smi, so whether it could move this box above 1,250 W is untestable for us.
Running the card at 325 W
About 1% faster. We kept 300 W.
The card's limit can be set from 250 to 325 W, so we tried the top with the module held at 1,250 W (PWR-2). Mixed 8-user traffic and prefill each came out about 1% faster; 32-user decode was within noise. In the mixed test that is four more finished requests in 140 seconds.
Prefill was meant to be the unchanged control and moved too, so we ran a proper control that evening, pass rule set beforehand. Single-user decode, where the card's own limiter barely engages, didn't move. Mixed traffic repeated at about +1%, every 325 W run faster than every 300 W run. The gain is the card.
325 W did not raise the peak combined draw of the two GPUs. The card ran 88–89 °C at both settings, about 4 °C below its maximum operating temperature. About 1%, at the edge of what the test can see, isn't worth running the card above its rated class with that little margin.
PWR-2 statistics and the control re-run
First run, November 4, 18:45–19:29 CST: six arms of three cells, 0 errors; results reviewed by Fable 5.1. Mixed 8-user traffic and prefill 32 × 8K: about +1% (3 against 3 repetitions; roughly +0.4% to +1.6% at 95% confidence). 32-user decode +0.7%, within noise at this repetition count. The RTX's own power limiter engaged about half as often in mixed traffic (29% to 16% of the time), about a third less in 32-user decode (14% to 10%) and almost never in prefill (7% to 1%).
Control re-run, 19:54–20:44 CST: eight alternating arms (A B B A B A A B; A = 300 W, B = 325 W), 16 cells, all clean. Single-user decode: +0.01%, repetitions split in sign; passes the pre-set null (|Δ| ≤ 0.3%). Mixed traffic: +0.92% (4 against 4; roughly +0.5% to +1.3% at 95% confidence), complete separation; limiter 27.6–29.9% at 300 W, 15.8–16.8% at 325 W. Conclusion per the pre-set rule: the ~1% is the RTX, not a common-mode artifact.
Peak GB300 plus RTX by 100 ms samples: about 1,460–1,480 W at either setting. One RTX reading of 403 W turned up at the start of a prefill burst; the card's sensor updates about twice a second, so that is one spike caught, not a measure of how often they happen. No thermal events.
The circuit
Alone on a dedicated 20 A circuit at 120 V, no power strip. That is arithmetic, not preference.
On October 22 the GPUs peaked at 1,547 W DC together. With fans, pumps, drives and the network card on top, that is about 15.0–15.6 A at 120 V against the 16 A continuous limit of a 20 A circuit (PWR-3). The arithmetic is in the October 22 post.
The October 22 peak
1,547 W DC on the GPUs is 1,353 W on the GB300 module plus 194 W on the card. The current figure adds fans, pumps, drives and the network card on top and divides by 120 V.
Storage
OS on the factory mirror, weights on local NVMe, nothing served from the NAS.
The operating system is on md0, a RAID1 mirror of two 2 TB drives. Right now it runs on one disk: the second stopped appearing on the October 26 boots, and the check script flags it (STO-1, OPEN-1). A replacement is on the way.
Model weights live on /models, a RAID0 stripe of two 8 TB drives in the M.2 slots that shipped empty. RAID0 is fine here because this is a cache, not a vault: every weight set also lives on our NAS.
We never serve from the NAS mount. Pinning weights over CIFS faults them in 512 KB at a time and takes hours; the local NVMe loads the same weights in about 7–8 minutes (STO-2).
Build and repair arrays by /dev/disk/by-id and serial number, never by nvme number. The November 4 reboot was a live example: the OS disk moved from nvme1n1 to nvme2n1. The drive install is in the M.2 post.
Drives, filesystems and mount options
md0: two Micron 4600 2 TB (factory), ext4, 1.9T, 80% used, currently [2/1] [U_]. md1: two WD_BLACK SN850X 8 TB in the CX8 M.2 slots, XFS, 15T as df reports it, 90% used, mounted nofail,noatime. After the November 4 reboot the /models pair is nvme0n1 + nvme1n1. The CIFS load goes through the page cache and spends those hours in D-state.
Network
Two 200G ports, two subnets, jumbo frames. The switch side lives in its own post.
Two ConnectX-8 ports at 200 Gb/s each, MTU 9000, each on its own subnet. The ARP and reverse-path settings that make that work come from NVIDIA's package, not from us (NET-1).
The two ports let the Station join our Sparks over RoCE, which is RDMA over ordinary Ethernet: the network cards copy data between machines' memories without the CPU in the path. There is also a 1 GbE LAN port and Tailscale.
Addresses and sysctls
10.0.0.9/24 and 10.0.1.9/24; arp_ignore=1, arp_announce=2, rp_filter=2 from dgx-desktop-arp-configuration; Tailscale 1.104.4. The switch side (ECN, an RDMA queue, no PFC) and the netplan file are in Networking DGX Station and Sparks with MikroTik CRS804.
Security
One open kernel bug, mitigated two ways. ssh by key only.
CVE-2026-98432 is a use-after-free in the kernel's IPv4 TCP handshake. Any machine that can reach any open IPv4 TCP port can trigger it; no login is needed. Canonical lists the Station's kernel family as Vulnerable, with a fix in progress for 7.0.0-1025. Our 1024 does not have it (OPEN-2).
We applied the same two mitigations as on our Sparks, each approved by James. SEC-1 turns off two kernel features through sysctl. SEC-2 is a firewall rule that drops the one kind of packet that triggers the bug. Normal traffic never carries it, and RoCE is UDP, so nothing we use is affected.
ssh (SEC-3): the factory image allowed password logins. One file turns them off. A password attempt now gets "Permission denied (publickey)"; key login works.
Still different from the Sparks, as facts rather than plans: user namespaces are enabled here (the Sparks run 0), and ufw is inactive. The box is reachable on the LAN and over Tailscale only.
The exact files and rules
SEC-1: /etc/sysctl.d/99-cve-2026-98432.conf with net.mptcp.enabled = 0 and net.ipv4.tcp_migrate_req = 0. SEC-2: an nftables rule that drops IPv4 TCP packets carrying IP options, in its own table loaded by its own unit, cve-2026-98432-nft.service. The stock nftables.service is masked because it flushes every table on start, including Docker's. Verified after applying: both sysctls read 0, the rule is present, HTTP 200 from the lane. The files are identical to the Spark guide's SEC-4 card.
SEC-3: /etc/ssh/sshd_config.d/00-key-only.conf sets PasswordAuthentication no, KbdInteractiveAuthentication no and PermitRootLogin prohibit-password; the name sorts first so it wins over anything later in the directory.
user.max_user_namespaces is 502,885 here.
How we update
One check before a kernel reboot matters more than everything else in the routine.
NVIDIA's prebuilt GPU modules are tied to one exact kernel. On day one this box booted a kernel without its NVIDIA modules. ROUTINE-1 has the check that prevents it.
The November 4 kernel window was the first under this guide: ssh back six minutes after the reboot, lane dark about 15 minutes in all. The lane now restarts itself after a boot (SRV-1); that unit failed its first real reboot on a boot-time race, and the fixed version hasn't been through one yet (OPEN-4).
After a power cycle the front button can stay dead while the BMC boots, and the box can take about five minutes to answer ssh. The lane then takes about six more minutes to serve.
What the first autostart reboot showed
pg61-autostart.service started 72 s after boot and the RTX sidecar died at CUDA init with "CUDA unknown error"; nothing in the kernel log. The same unit run by hand nine minutes later came up clean. Version 2 waits until the box has been up four minutes, then tries up to three times. The lane's start order is sidecar, GB300 server, hash checks, watchdog.
ROUTINE-1 Kernel and driver updates (a planned window)
- Dry run: sudo apt-get -s dist-upgrade | grep -E '^(Inst|Remv)'. Read every linux-image, linux-modules and nvidia line.
- Keep the current driver packages for rollback (dpkg-repack them), and check free space on /.
- Stop the model. Install. Before rebooting, confirm the NVIDIA kernel-modules package for the NEW kernel is installed (linux-modules-nvidia-595-open-<new kernel>). Day one booted a kernel without it.
- Reboot. Allow ~5 minutes for ssh. Check: both GPUs in nvidia-smi, driver string, CDMM still driver, MemTotal, md0, regenerate the CDI spec (SW-6).
- Start the model, check it answers, run station-check.sh.
ROUTINE-2 After a power cut or reboot
- If the front button does nothing, the BMC is still booting. Wait; don't hold the button.
- The lane starts itself (SRV-1). Allow about 15 minutes from power-on: about 2 for the box to answer ssh after a reboot (longer after a power cut), 4 more while the autostart waits for the GPUs to settle, ~6 for the lane to load. If it is still dark after 30 minutes, read the newest autostart-*.log.
- Run station-check.sh. Look at STO-1 (both OS disks) and the security rows.
- A power cut is an unclean shutdown: check dmesg for filesystem recovery on / and /models.
ROUTINE-3 Before running a different model
- Write a MAINTENANCE flag (or NO-AUTOSTART) so a reboot doesn't bring the old lane back on top of you.
- Stop the lane with its own down command, so its watchdog stops too.
- Stage the new weights on /models (local NVMe). Never serve from the NAS mount.
- Drop the page cache before starting a big model, then start it.
Every setting, in detail
One card per setting: the value, why, a check command with its expected output, the apply, the undo, whether it needs a reboot, and where it came from.
SW-1 Keep the maker's factory Ubuntu image (not DGX OS)
- What we use
- Ubuntu OEM 24.04 arm64+nvidia-64k as shipped by MSI (now 24.04.5); no /etc/dgx-release
- Why
- Every Station maker ships the same Canonical OEM base: NVIDIA's kernel and driver from Canonical's NVIDIA archive, the GB300 workstation meta package and NVIDIA's dgx-desktop tuning packages; the maker layer is EULAs, a logo and sometimes a wallpaper. DGX OS 7 doesn't list the Station as a supported system, its 7.6.0 release ships an older driver (580.178.04) and kernel (7.0.0-1018) than this image, and NVIDIA's Station guide names the maker's repositories as the image source for a reinstall.
- Applies to
- all
- Check
Expect: Ubuntu OEM 24.04.x … arm64+nvidia-64k; /etc/dgx-release: No such filecat /var/log/installer/media-info; ls /etc/dgx-release
station-check.sh rows: SW-1- Apply (for humans)
# nothing to do: this is how it ships# to reinstall, use your maker's recovery image (USB or BMC virtual media)- Undo
- n/a
- Reboot / downtime
- no · none
- Source
- https://al-engr.com/dgx-station-gb300-how-we-run-it.html#which
SW-2 Kernel 7.0.0-1024-nvidia-64k (stock HWE meta, nothing held)
- What we use
- 7.0.0-1024-nvidia-64k via linux-nvidia-64k-hwe-24.04 (installed November 4, 2026; 7.0.0-1019 kept installed as the fallback)
- Why
- Stock kernel from Canonical, moved by hand in a planned window because unattended-upgrades is told not to touch it (SW-5). We keep no apt holds so the box stays on the same track as everyone else's.
- Applies to
- all
- Check
Expect: 7.0.0-1024-nvidia-64k; (empty)uname -r; apt-mark showhold
station-check.sh rows: SW-2, SW-4- Apply (for humans)
sudo apt-get updatesudo apt-get install linux-nvidia-64k-hwe-24.04dpkg -l 'linux-modules-nvidia-595-open-*' | grep ^ii # the NEW kernel version must be listed before you rebootsudo reboot- Undo
- Pick the previous kernel in GRUB; keep it installed until the new one has run a week.
- Reboot / downtime
- yes · one reboot (~5 min to ssh)
- Source
- https://al-engr.com/gb300-station-config.html
SW-3 GPU driver 595.99.02 (open), from Canonical's NVIDIA archive
- What we use
- nvidia-driver-595-open 595.99.02; the module for the running kernel matches
- Why
- The stock driver track for this image. A driver whose kernel module is missing for the running kernel is the classic first-boot failure on this box.
- Applies to
- all
- Check
Expect: 595.99.02 for each GPU, and 595.99.02 from modinfonvidia-smi --query-gpu=driver_version --format=csv,noheader; modinfo -F version nvidia
station-check.sh rows: SW-3, SW-3b- Apply (for humans)
sudo apt-get updatesudo apt-get install nvidia-driver-595-opensudo reboot- Undo
- Keep the previous driver's .deb files before upgrading (we repack them with dpkg-repack) and dpkg -i them to roll back.
- Reboot / downtime
- yes · one reboot
- Source
- https://al-engr.com/gb300-station-config.html
SW-4 Stock NVIDIA tuning packages, no holds
- What we use
- hwe-dgx-gb300ws-meta 1.0ubuntu~24.04.20 with 18 dgx-desktop-* packages; apt-mark showhold empty
- Why
- These set the kernel command line (NUMA balancing off, init_on_alloc=0, the power-meter cap, PCI ACS overrides), ARP settings for two ports on two subnets, persistence mode, Docker GPU options and more. We change none of them.
- Applies to
- all
- Check
Expect: install ok installed; numa_balancing=disable init_on_alloc=0 acpi_power_meter.force_cap_on=y on the command linedpkg-query -W -f='${Status}\n' hwe-dgx-gb300ws-meta; cat /proc/cmdline
station-check.sh rows: SW-4, SW-4b- Apply (for humans)
sudo apt-get install hwe-dgx-gb300ws-meta- Undo
- n/a (stock)
- Reboot / downtime
- no · none
- Source
- https://al-engr.com/dgx-station-gb300-how-we-run-it.html#software
SW-5 Security updates automatic; kernel and driver by hand
- What we use
- unattended-upgrades on; dgx-desktop-unattended-upgrades-blacklist keeps linux-image/modules/headers and nvidia-driver/kernel-common out of it
- Why
- Stock behaviour, and we like it: security fixes land on their own, and the two packages that can stop the GPU from coming up after a reboot only move in a window we plan (ROUTINE-1).
- Applies to
- all
- Check
Expect: APT::Periodic::Unattended-Upgrade "1"; and the nvidia-driver- blacklist lineapt-config dump | grep -E 'Periodic::Unattended-Upgrade|Package-Blacklist:: "nvidia-driver-"'
station-check.sh rows: SW-5- Apply (for humans)
# stock; nothing to do- Undo
- n/a
- Reboot / downtime
- no · none
- Source
- https://al-engr.com/dgx-station-gb300-how-we-run-it.html#updates
SW-6 Containers reach the second GPU through CDI
- What we use
- nvidia-container-toolkit 1.19.0; containers name GPUs as --device nvidia.com/gpu=<UUID>
- Why
- With two GPUs of different kinds, naming each by UUID is unambiguous. Regenerate the CDI spec after every driver change or a container that names a driver library file will refuse to start.
- Applies to
- boxes with an add-in GPU used by containers
- Check
Expect: 2nvidia-ctk cdi list | grep -c '^nvidia.com/gpu=GPU-'
station-check.sh rows: SW-6- Apply (for humans)
sudo nvidia-ctk cdi generate --output=/etc/cdi/nvidia.yaml- Undo
- sudo rm /etc/cdi/nvidia.yaml
- Reboot / downtime
- no · none
- Source
- https://al-engr.com/gb300-dsv41-rtx6000-sidecar.html
MEM-1 Coherent memory in driver mode (CDMM): 494.5 GiB for the host
- What we use
- NVreg_CoherentGPUMemoryMode=driver; MemTotal 518,524,480 kB (494.5 GiB); GB300 HBM 256,703 MiB (250.7 GiB) visible
- Why
- This is the stock setting on this image. With it, Linux sees Grace memory only, and the GPU's HBM is managed by the driver. Plan models against 250.7 GiB of HBM, not the 288 GB on the spec sheet.
- Applies to
- all
- Check
Expect: "driver"; about 518,5xx,xxx kBgrep CoherentGPUMemoryMode /proc/driver/nvidia/params; grep MemTotal /proc/meminfo
station-check.sh rows: MEM-1, MEM-1b- Apply (for humans)
# stock; nothing to do- Undo
- n/a
- Reboot / downtime
- no · none
- Source
- https://al-engr.com/gb300-station-config.html
MEM-2 No swap; NUMA balancing off
- What we use
- SwapTotal 0; kernel.numa_balancing 0 (stock command line)
- Why
- Model servers pin large host buffers; swapping them would be a stall, not a slowdown. NUMA balancing off is NVIDIA's setting for this box.
- Applies to
- all
- Check
Expect: SwapTotal: 0 kB; 0grep SwapTotal /proc/meminfo; sysctl -n kernel.numa_balancing
station-check.sh rows: MEM-2- Apply (for humans)
# stock; nothing to do- Undo
- n/a
- Reboot / downtime
- no · none
- Source
- https://al-engr.com/dgx-station-gb300-how-we-run-it.html#memory
PWR-1 Leave the GB300 module limit alone (1,250 W with a 300 W card)
- What we use
- Module current 1,250 W, requested 1,600 W; set by firmware from the add-in card's class
- Why
- NVIDIA's rule: 1,600 W total, and the GB300's share depends on the card in the slot (≤ 75 W or none: 1,600 W; 76–300 W: 1,250 W; > 300 W: 950 W). nvidia-smi can lower the module limit but not raise it above 1,250 W here. We measured the cost on our lane: nothing on decode and well under 1% on prefill.
- Applies to
- boxes with a 76–300 W add-in card
- Check
Expect: Current Power Limit 1250.00 W, Requested Power Limit 1600.00 Wnvidia-smi -q -d POWER | sed -n '/Module Power Readings/,/^$/p'
station-check.sh rows: PWR-1- Apply (for humans)
# nothing to do- Undo
- n/a
- Reboot / downtime
- no · none
- Source
- https://al-engr.com/dgx-station-gb300-how-we-run-it.html#power
PWR-2 Add-in card at its stock 300 W
- What we use
- RTX PRO 6000 Blackwell Max-Q at 300 W (range 250–325 W)
- Why
- At 325 W our lane got about 1% faster on mixed and prefill traffic. We kept 300 W: a small gain for running the card above its rated class.
- Applies to
- boxes with the RTX PRO 6000 Max-Q
- Check
Expect: RTX PRO 6000 … 300.00 W, 300.00 Wnvidia-smi --query-gpu=name,power.limit,power.default_limit --format=csv
station-check.sh rows: PWR-2- Apply (for humans)
# stock; nothing to do- Undo
- n/a
- Reboot / downtime
- no · none
- Source
- https://al-engr.com/dgx-station-gb300-how-we-run-it.html#power
PWR-3 Its own 20 A circuit at 120 V
- What we use
- Dedicated 20 A branch circuit, nothing else on it, no power strip
- Why
- The makers we checked rate the supply at its full 1,600 W from 115 V, so a healthy 120 V outlet loses no power budget. The current is the constraint: our measured peak works out to about 15.0–15.6 A against a 20 A circuit's 16 A continuous limit. HP is different: it requires a 200–240 V circuit.
- Applies to
- all except HP ZGX Fury (200–240 V required)
- Check
Expect: dedicated 20 A breaker# physical: read the breaker panel; optionally a plug-in meter during a long prefill (keep it above 115 V)
station-check.sh rows: not checkable from software- Apply (for humans)
# electrician- Undo
- n/a
- Reboot / downtime
- no · none
- Source
- https://al-engr.com/gb300-rtx6000-120v-power.html
STO-1 OS on the factory RAID1
- What we use
- md0 = RAID1 of two Micron 4600 2 TB, ext4
- Why
- Factory layout. Ours is currently running on one disk (OPEN-1), and the check script flags it.
- Applies to
- all
- Check
Expect: md0 : active raid1 … [2/2] [UU]cat /proc/mdstat
station-check.sh rows: STO-1- Apply (for humans)
# after replacing a member (identify drives by serial, not nvme number):sudo mdadm --manage /dev/md0 --add /dev/disk/by-id/<new-drive>-part2- Undo
- n/a
- Reboot / downtime
- no · none (rebuild runs live)
- Source
- https://al-engr.com/gb300-exxact-m2-upgrade.html
STO-2 Model weights on local NVMe, never served from the NAS
- What we use
- /models = md1 RAID0 of two WD_BLACK SN850X 8 TB in the empty CX8 M.2 slots, XFS, nofail,noatime
- Why
- Loading or pinning weights over CIFS faults them in a little at a time and can take hours. RAID0 is fine because it is a cache: the weights also live on the NAS.
- Applies to
- boxes with the extra drives
- Check
Expect: /dev/md1 xfsfindmnt -no SOURCE,FSTYPE /models
station-check.sh rows: STO-2- Apply (for humans)
# see the M.2 post for the full build; identify drives by serial, never by nvme number- Undo
- n/a
- Reboot / downtime
- no · none
- Source
- https://al-engr.com/gb300-exxact-m2-upgrade.html
NET-1 Two 200G ports, two subnets, MTU 9000
- What we use
- ConnectX-8 enP1p3s0f0np0 10.0.0.9/24 and enP1p3s0f1np1 10.0.1.9/24, MTU 9000; ARP 1/2/2 from NVIDIA's package
- Why
- Same fabric rules as our Sparks so the Station can join them over RoCE. The switch side (ECN, RDMA queue, no PFC) is in the networking post.
- Applies to
- boxes on a RoCE fabric
- Check
Expect: 9000 9000; 1 2 2cat /sys/class/net/enP1p3s0f*np*/mtu; sysctl -n net.ipv4.conf.all.arp_ignore net.ipv4.conf.all.arp_announce net.ipv4.conf.all.rp_filter
station-check.sh rows: NET-1, NET-2- Apply (for humans)
# netplan: set mtu: 9000 on both ConnectX-8 interfaces; full file in the networking post- Undo
- Set mtu back to 1500 in netplan and netplan apply.
- Reboot / downtime
- no · seconds (netplan apply)
- Source
- https://al-engr.com/networking-dgx-station-sparks-mikrotik-crs804.html
SEC-1 CVE-2026-98432: MPTCP off, request migration off
- What we use
- net.mptcp.enabled = 0, net.ipv4.tcp_migrate_req = 0 in /etc/sysctl.d/99-cve-2026-98432.conf
- Why
- Remote use-after-free in the kernel's IPv4 TCP handshake, no login needed. Canonical lists linux-nvidia-7.0 (the Station's kernel family) as vulnerable. Same mitigation as our Sparks.
- Applies to
- all, until a fixed kernel ships
- Check
Expect: 0 and 0sysctl -n net.mptcp.enabled net.ipv4.tcp_migrate_req
station-check.sh rows: SEC-1- Apply (for humans)
printf 'net.mptcp.enabled = 0\nnet.ipv4.tcp_migrate_req = 0\n' | sudo tee /etc/sysctl.d/99-cve-2026-98432.confsudo sysctl -p /etc/sysctl.d/99-cve-2026-98432.confsudo systemctl restart tailscaled # and any other Go service- Undo
- Remove the file once Canonical marks linux-nvidia-7.0 fixed and you run that kernel.
- Reboot / downtime
- no · none
- Source
- https://ubuntu.com/security/CVE-2026-98432
SEC-2 CVE-2026-98432: drop IPv4 TCP packets carrying IP options
- What we use
- Own nft table cve_2026_98432, loaded by cve-2026-98432-nft.service; stock nftables.service masked
- Why
- Blocks the packet that triggers the bug. Normal traffic never carries IP options, and RoCE is UDP, so nothing we use is affected. Loaded by its own unit because the stock nftables.service flushes every table on start, including Docker's.
- Applies to
- all, until a fixed kernel ships
- Check
Expect: ip protocol tcp ip hdrlength != 5 counter … dropsudo nft list table ip cve_2026_98432
station-check.sh rows: SEC-2- Apply (for humans)
# exact files: see the Spark guide's SEC-4 card (identical on the Station)sudo systemctl daemon-reload && sudo systemctl enable --now cve-2026-98432-nft.servicesudo systemctl mask nftables.service- Undo
- sudo systemctl disable --now cve-2026-98432-nft.service
- Reboot / downtime
- no · none
- Source
- https://al-engr.com/dgx-spark-how-we-run-them.html#SEC-4
SEC-3 ssh by key only
- What we use
- /etc/ssh/sshd_config.d/00-key-only.conf: PasswordAuthentication no, KbdInteractiveAuthentication no, PermitRootLogin prohibit-password
- Why
- The factory image allows password logins. The file sorts first so it wins over anything later in sshd_config.d.
- Applies to
- all
- Check
Expect: passwordauthentication no; permitrootlogin without-passwordsudo sshd -T | grep -E '^(passwordauthentication|permitrootlogin) '
station-check.sh rows: SEC-3- Apply (for humans)
# make sure your key works firstprintf 'PasswordAuthentication no\nKbdInteractiveAuthentication no\nPermitRootLogin prohibit-password\n' | sudo tee /etc/ssh/sshd_config.d/00-key-only.confsudo sshd -t && sudo systemctl reload ssh- Undo
- sudo rm /etc/ssh/sshd_config.d/00-key-only.conf && sudo systemctl reload ssh
- Reboot / downtime
- no · none
- Source
- https://al-engr.com/dgx-station-gb300-how-we-run-it.html#security
SRV-1 Our model lane comes back by itself after a power cut
- What we use
- pg61-autostart.service: waits for Docker, both GPUs and /models, then starts the lane; skips if anything is already running or a NO-AUTOSTART / MAINTENANCE flag file exists
- Why
- Our lane's containers use Docker restart policy 'no', so before this nothing came back after a power cut. The unit adds one careful start at boot. Installed November 4. Its first real reboot (the kernel update) found a boot-time race: started 72 s after boot, the RTX sidecar failed with "CUDA unknown error"; the same unit run by hand nine minutes later came up. Version 2 waits until the box has been up 4 minutes and retries up to three times; it has not been through a reboot yet.
- Applies to
- our box (pattern only for others)
- Check
Expect: enabledsystemctl is-enabled pg61-autostart.service
station-check.sh rows: SRV-1- Apply (for humans)
# specific to our lane; the pattern: a oneshot unit (After=docker.service, User=<you>) that runs your start script once- Skip if
- You start models by hand or run a different lane.
- Undo
- sudo systemctl disable pg61-autostart.service
- Reboot / downtime
- no · none
- Source
- https://al-engr.com/dgx-station-gb300-how-we-run-it.html#routines
What we decided not to do
- Reinstall DGX OS: the Station isn't on DGX OS 7's supported list, 7.6.0 is older than the factory image, and the supported reinstall is the maker's image.
- Hold the kernel or driver: the stock blacklist already keeps them out of unattended upgrades; holds just drift you off everyone else's track.
- Try to raise the GB300 module limit with nvidia-smi: it takes the request and keeps enforcing 1,250 W.
- Set the add-in card to 325 W for speed: we measured about +1% and kept 300 W.
- Write your own power-sloshing daemon: on this box the module can't be raised from software, and the measured upside is a few tenths of a percent.
- Rewire to 240 V for speed: it buys current margin, not tokens per second (HP owners: HP requires 200–240 V).
- Pull the add-in card to get 1,600 W for the GB300: our lane would lose its sidecar for a few tenths of a percent of prefill.
- Put a 600 W RTX PRO 6000 Workstation Edition in the slot: a card rated above 300 W drops the GB300 to 950 W.
- Build or repair RAID by /dev/nvme number: the numbers reshuffle between boots. Use /dev/disk/by-id and the serial.
Each of these looked like a fix at some point. The measurements and archive reads above are why it isn't one, on this box, as of November 4, 2026.
Open issues
| ID | Issue | Status | Next step |
|---|---|---|---|
| OPEN-1 | OS mirror running on one disk | The second Micron 4600 stopped appearing on the Oct 26 boots; md0 has run [U_] since. Replacement drive on order. Watch: cat /proc/mdstat | Replace the drive, add it back by its by-id path, let it resync, confirm [UU]. |
| OPEN-2 | CVE-2026-98432 not fixed in linux-nvidia-7.0 | Mitigated (SEC-1, SEC-2). As of November 4 Canonical lists linux-nvidia-7.0 on 24.04 as vulnerable with a fix in progress in 7.0.0-1025; our 7.0.0-1024 does not have it. Watch: https://ubuntu.com/security/CVE-2026-98432 | When marked fixed: move to that kernel with ROUTINE-1, then remove SEC-1 and SEC-2. |
| OPEN-3 | NVIDIA's power-sloshing daemon isn't available for OEM images | Documented only for NVIDIA's own DGX OS image (R610+ driver); not in any maker's or Canonical's package archive; no public plan. Watch: Canonical's NVIDIA archive for a vsloshd package; the DGX Station development guide | If it ships: test whether it can move the GB300 above 1,250 W on this box before trusting it. |
| OPEN-4 | Lane autostart: fixed version not yet reboot-tested | First real reboot (Nov 4, kernel update): the boot-time start failed in the RTX sidecar (CUDA unknown error at boot + 72 s); a manual re-run of the same unit worked. Version 2 waits 4 minutes after boot and retries three times. Watch: ~/dsv41/garner/promote/autostart-*.log | The next reboot is the test; if it fails again, find the root cause of the early CUDA error instead of waiting longer. |
Hands-on videos, by maker
Where someone has had a Station on a bench. We confirmed the titles on November 4, 2026 and have not re-watched these for this post; the notes say what each one is, not whether it is right.
| Maker | Video | Note |
|---|---|---|
| MSI WS300 | Level1Techs: An AI Supercomputer On Your Desktop: Checking Out The MSI XpertStation WS300 | the source of the 240 V claim discussed under Power |
| MSI WS300 | StorageReview: MSI XpertStation WS300: A B300 and 748GB of Memory Beside Your Desk | review |
| MSI WS300 | STH Labs: BEST Local AI NVIDIA System from MSI WS300 | hands-on |
| MSI WS300 | StorageReview: MSI's Liquid-Cooled GB300 Workstation at Computex 2026 | short; show floor |
| Gigabyte W775 | ServeTheHome: BIG Local AI with a MASSIVE NVIDIA DGX Station from Gigabyte | hands-on |
| ASUS ET900N G3 | sentdex: Datacenter at Home - GB300 GPU - w/ Asus DGX Station (ET900N G3) | hands-on |
| HP ZGX Fury | Sam Witteveen: 3,000 Tokens/Sec Locally: Testing the ZGX Fury | HP-sponsored |
| Dell Pro Max GB300 | Matthew Berman | a 62-second delivery clip (March 16, 2026), not a review |
| Dell Pro Max GB300 | The Technologists | Dell's CES 2026 preview tour; a chassis and platform walk-through, and the GB300 module was not fitted in the case at that moment |
| Supermicro | none found |
Everything else we've collected (talks, articles, benchmarks) is on our GB300 links page.
How this page stays current
We re-check this page every Monday against our Station with the read-only station-check.sh linked at the top, and against NVIDIA's Station documentation and Canonical's CVE tracker for linux-nvidia-7.0. When something changes we update the settings and the machine-readable copy, add a changelog line here, and bump the Last checked date.
If that date is more than a couple of weeks old, assume we missed a week and check the sources yourself. The November 4 run of the check script, after the kernel update: every row ok except STO-1, the degraded mirror. Start date: November 4, 2026.
- : Kernel 7.0.0-1019 to 7.0.0-1024 (driver unchanged); lane autostart fixed after its first real reboot. Earlier the same day: first version. Measured the GB300 power cap and the RTX 300 vs 325 W choice; applied CVE-2026-98432 mitigations, key-only ssh and a lane autostart; documented the degraded OS mirror.
Related posts
- DGX Spark: How We Run Them: the sister guide for the eight Sparks, same format.
- GB300 with RTX 6000, and 120V Power: the full 120 V versus 240 V argument and the October 22 power trace.
- Adding an RTX PRO 6000 Blackwell Max-Q to the DGX Station GB300: the card install and how we first found the 1,250 W cap.
- DeepSeek-V4.1-Flash on a GB300 + RTX PRO 6000 Sidecar: what the sidecar is and what it buys.
- Filling the empty M.2s on an Exxact GB300 Station: the /models RAID0 build and the by-id lesson.
- Networking DGX Station and DGX Sparks with MikroTik CRS804: netplan and switch configuration.
- GhettoRak: an 8-node DGX Spark cluster: the rack the Station's two ports connect to.
- GB300 links: everything we've read and watched about the GB300 Station.