Alert.png The wiki is deprecated and due to be decommissioned by the end of September 2022.
The content is being migrated to other supports, new updates will be ignored and lost.
If needed you can get in touch with EGI SDIS team using operations @ egi.eu.

Difference between revisions of "FAQ10 EGI Federated Cloud User"

From EGIWiki
Jump to navigation Jump to search
(Replaced content with "{{Template: Op menubar}} {{Template:Doc_menubar}} Category:Operations Manuals {{TOC_right}} {{Template:Block-comment | name=Warning | text=This FAQ is no longer ma...")
Tag: Replaced
 
(56 intermediate revisions by 8 users not shown)
Line 1: Line 1:
{{Fedcloud-tf:Menu}} {{TOC_right}}  
{{Template: Op menubar}}
{{Template:Doc_menubar}}  


= EGI FedCloud Users FAQs =
[[Category:Operations Manuals]]
{{TOC_right}}


== How can I get access to the EGI.eu Federated Cloud? ==
{{Template:Block-comment
The information is available [[Fedcloud-tf:Users#How_to_get_access_to_the_FedCloud|here]].
| name=Warning
 
| text=This FAQ is no longer maintained, please check the new documentation at https://egi-federated-cloud.readthedocs.io/en/latest/faq.html
== How can I get the list of the FedCloud sites? ==
  }}
The federated cloud is currently in testbed phase. The list of the testbed FedCloud sites is available [[Fedcloud-tf:Testbed|here]]
 
== How can I choose which FedCloud site to use? ==
FedCloud sites offers their resources voluntary to all the FedCloud user comunities. Anyway, they may assign you higher or lower priorities according to your particular user community and research field. To find the better site for your need, it is recommended to send an email to the [mailto:ucst@egi.eu  EGI.eu UCST Team], with a small description of your needs and your field of research.
 
== How can I get the list of the resource templates available on a site? ==
In a command line environment, using the rOCCI client (a guide on how to install it is available [[Fedcloud-tf:CLI Environment|here]]), you can run the following command
 
occi --endpoint ''site_occi_endpoint'' --action list --resource resource_tpl --auth x509 --user-cred ''proxy_certificate'' --voms
 
where ''site_occi_endpoint'' is the site OCCI endpoint and ''proxy_certificate'' is the path to your VOMS proxy certificate (obtained via the voms-proxy-init commands, see [[Fedcloud-tf:CLI Environment#Create_a_proxy_certificate|here]])
 
== How can I get the list of the OS templates available on a site? ==
In a command line environment, using the rOCCI client (a guide on how to install it is available [[Fedcloud-tf:CLI Environment|here]]), you can run the following command
 
occi --endpoint ''site_occi_endpoint'' --action list --resource os_tpl --auth x509 --user-cred ''proxy_certificate'' --voms
 
where ''site_occi_endpoint'' is the site OCCI endpoint and ''proxy_certificate'' is the path to your VOMS proxy certificate (obtained via the voms-proxy-init commands, see [[Fedcloud-tf:CLI Environment#Create_a_proxy_certificate|here]])
 
== How can I get information about the available VM images ==
The [http://marketplace.egi.eu EGI Marketplace] and the [http://appdb.egi.eu EGI Application Database] contains information about the VM images available in the EGI Federated Cloud.
 
== How can I publish my own VM image? ==
Direct publish of custom VMs implies an authorization and verification phase. If you want to use your custom VM, the main steps to follow are:
*Create a custom VM image
**Tip: The format of the virtual machine image that the site you have access to can accept may be specific to the site. Check the required image format in the [[Fedcloud-tf:Testbed|sites overview table]] before preparing your image!
**Tip: To create the image, you can follow the guide [http://docs.openstack.org/trunk/openstack-compute/admin/content/creating-custom-images.html Creating custom images (OpenStack manual)]
*Upload the image and register it into the [http://marketplace.egi.eu EGI marketplace] and [http://appdb.egi.eu EGI Application Database].
**Tip: A guide (beta) on doing so is [[Fedcloud-tf:Users:VMUpload|here]].
*Contact the site to endorse your image (trusting you as VM custom images producer on the EGI Federated Cloud).
**Tip: Best way to do so is to contact the [mailto:ucst@egi.eu EGI.eu UCST Team]. The team will contact the EGI site for you.
 
For more detailed information about the procedure, please send an email to [mailto:ucst@egi.eu EGI.eu UCST Team].
 
== How can I start a VM? ==
In a command line environment, using the rOCCI client (a guide on how to install it is available [[Fedcloud-tf:CLI Environment|here]]), you can run the following command
 
occi --endpoint ''site_occi_endpoint'' --action create --resource compute --mixin ''os_template'' --mixin ''resource_template'' --attributes title="My rOCCI VM" --auth x509 --user-cred ''proxy_certificate'' --voms
 
where ''site_occi_endpoint'' is the site OCCI endpoint, ''proxy_certificate'' is the path to your VOMS proxy certificate (obtained via the voms-proxy-init commands, see [[Fedcloud-tf:CLI Environment#Create_a_proxy_certificate|here]]), ''os_template'' is your VM OS image disk (e.x. os_tpl#debian6) and ''resource_template'' is your resource template (ex. resource_tpl#small).
 
== How can I get the status of a VM? ==
 
In a command line environment, using the rOCCI client (a guide on how to install it is available [[Fedcloud-tf:CLI Environment|here]]), you can run the following command
 
occi --endpoint ''site_occi_endpoint'' --action describe --resource /compute/''VMID'' --auth x509 --user-cred ''proxy_certificate'' --voms
 
where ''site_occi_endpoint'' is the site OCCI endpoint, ''proxy_certificate'' is the path to your VOMS proxy certificate (obtained via the voms-proxy-init commands, see [[Fedcloud-tf:CLI Environment#Create_a_proxy_certificate|here]]) and ''VMID'' is the VMID obtained as output of the create VM action.
 
== How can I connect to a VM? ==
 
As first, you need to check that the VM is running and get its IP address. You can do that via a '''describe''' OCCI command (see [[#How can I get the status of a VM?]] for more info).
 
To access the VM via the shell, you can use an SSH client and connect to the VM IP address, port 22, root user with your own authorization key.
 
NOTE: The authorization public key to access the VM can be setup in the VO VOMS (ex. in [[https://perun.metacentrum.cz/perun-gui-cert/ Perun]]) or using contextualization as startup (see [[#How can I get the status of a VM?]])
 
== How can I inject my public SSH key into the machine? ==
Best way to login into the virtual server is to use SSH keys. To inject your public SSH key into the VM during startup, you can use CloudInit contextualization feature and contextualization (see [[#How can I use contextualization?]]). A sample user data script to setup an administrator user is
 
#cloud-config
users:
  - name: cloudadm
    sudo: ALL=(ALL) NOPASSWD:ALL
    lock-passwd: true
    ssh-import-id: cloudadm
    ssh-authorized-keys:
    - <your SSH key>
 
== How can I use contextualization? ==
If you have a contextualization script, you can run it using the following rOCCI command at VM creation:
 
occi --endpoint ''site_occi_endpoint'' --action describe --resource /compute/''VMID''  --context user_data="file://$PWD/contextulization_script.sh" --auth x509
 
NOTE: FedCloud supports [https://launchpad.net/cloud-init CloudInit] user data format. Using CloudInit you can easily inject your SSH private keys or run a set of deployment scripts. Full documentation about CloudInit is [http://cloudinit.readthedocs.org/ here].
 
== How can I get the list of running VM? ==
In a command line environment, using the rOCCI client (a guide on how to install it is available [[Fedcloud-tf:CLI Environment|here]]), you can run the following command
 
occi --endpoint ''site_occi_endpoint'' --action list --resource compute --auth x509 --user-cred ''proxy_certificate'' --voms
 
where ''site_occi_endpoint'' is the site OCCI endpoint and ''proxy_certificate'' is the path to your VOMS proxy certificate (obtained via the voms-proxy-init commands, see [[Fedcloud-tf:CLI Environment#Create_a_proxy_certificate|here]])
 
== How can I stop a VM? ==
 
In a command line environment, using the rOCCI client (a guide on how to install it is available [[Fedcloud-tf:CLI Environment|here]]), you can run the following command
 
occi --endpoint ''site_occi_endpoint'' --action delete --resource /compute/''VMID'' --auth x509 --user-cred ''proxy_certificate'' --voms
 
where ''site_occi_endpoint'' is the site OCCI endpoint, ''proxy_certificate'' is the path to your VOMS proxy certificate (obtained via the voms-proxy-init commands, see [[Fedcloud-tf:CLI Environment#Create_a_proxy_certificate|here]]) and ''VMID'' is the VMID obtained as output of the create VM action.
 
== How can I register to the FedCloud VO? ==
You can register to the FedCloud VO following the instruction in [[Fedcloud-tf:CLI_Environment#Join_the_FedCloud_Virtual_Organisation|this page]].
 
== How can I get a proxy certificate (for authorization)? ==
You can get a proxy certificate with the following command (NOTE: you need to be registered to the FedCloud VO):
  voms-proxy-init -voms fedcloud.egi.eu --rfc
 
== How can I install the rOCCI client? ==
You can setup the FedCloud User command line environment (which contains the rOCCI client) following the instructions in [[Fedcloud-tf:CLI_Environment|this page]].

Latest revision as of 16:39, 3 March 2020