Remote shell through a proxy jump
The proxy jump can be a "bastion host":
verdi.ens.frto access machines in the department of geosciences at ENSgurtu.lmd.jussieu.frto access machines in LMD-Jussieu
or a declared machine to access IDRIS or TGCC.

If you want to reach a computer at the department of geosciences from
outside ENS, ask for an account on verdi.ens.fr to the IT people of
the department of geosciences.
Add in the file ~/.ssh/config lines declaring spirit as a proxy to
reach jean-zay (see appendix).
Host jean-zay
HostName jean-zay.idris.fr
ProxyJump guez@spirit1.ipsl.fr
User rdzt899
(rdzt899 is my login name at IDRIS)
Then the command:
ssh jean-zay
automatically goes through spirit.
Also applies to scp and sftp. Also applies to dynamic port-forwarding.

We can also add in the file ~/.ssh/config lines declaring verdi as a
proxy to reach vierne (vierne is my personal desktop computer at ENS):
Host vierne
ProxyJump guez@verdi.ens.fr
User guez