Alert.png The wiki is deprecated and due to be decommissioned by the end of September 2022.
The content is being migrated to other supports, new updates will be ignored and lost.
If needed you can get in touch with EGI SDIS team using operations @ egi.eu.

Difference between revisions of "Federated Cloud user support"

From EGIWiki
Jump to navigation Jump to search
(Use new template, update new page address)
 
(42 intermediate revisions by 5 users not shown)
Line 1: Line 1:
{{Fedcloud_Menu}} {{TOC_right}}  
{{Fedcloud_Menu}} {{TOC_right}}  


<br> <big>Consultancy and support is available via the [mailto:support@egi.eu EGI.eu Support Team]</big>
{{DeprecatedAndMovedTo|new_location=https://docs.egi.eu/users/cloud-compute/}}
 
 
== Introduction  ==
 
The [https://www.egi.eu/services/cloud-compute/ EGI Cloud Compute service] gives you the ability to deploy and scale virtual machines on-demand. It offers guaranteed computational resources in a secure and isolated environment without the overhead of managing physical servers. Cloud Compute offers the possibility to select pre-configured virtual appliances (e.g. CPU, memory, disk, operating system or software) from a catalogue replicated across all EGI cloud providers.
 
The EGI Cloud compute service is implemented as a hybrid, Infrastructure as a Service (IaaS) cloud composed by public, community and private cloud providers. These providers are federated with the use of the 'EGI Core Infrastructure Platform', offering a scalable compute and storage infrastructure for scientific applications, services and data- and compute-intensive workloads.
 
=== Main features ===
 
;Elastic computing infrastructure
:Execute compute and data intensive workloads (both batch and interactive), host long-running services (e.g. web servers, databases or applications servers), or create disposable testing and development environments in VMs and containers. Scale your application or service within a single provider, or across multiple providers of the federation (within providers of your virtual organisation). Select VM configurations (CPU, memory, disk) and ready-to-deploy application VMs that best fit your needs.
 
;VM image sharing and distribution
:Easily share and distribute customised VM images to multiple clouds via the open 'Applications Database' library of Virtual Appliances. Community curated VMs and VM appliances are securely and automatically replicated across the infrastructure. The EGI User Community Support Team provides generic, baseline VM images, user communities can offer more specialised VMs and applications.
 
;Unified view of federation
:The EGI Cloud provides: Single sing-on (SSO) for authentication and authorisation across all resource providers; Federated accounting with an integrated view of the the resource and service usage; Distributed information system for delivering a real-time view of the capabilities; and Federated monitoring to compute metrics for availability and reliability of the services.
 
;Beyond VMs
:Run docker applications on the EGI resources; Use one of the already integrated PaaS and SaaS solution; Follow our user guides to deploy Hadoop, Docker Swarm, to access Object Storage and many more...
 
=== Usage models and examples ===
 
The flexibility of the Infrastructure as a Service EGI cloud can benefit various use cases and usage models. Besides serving compute/data intensive analysis workflows, Web services and interactive applications can be also integrated with and hosted on this infrastructure. Contextualisation and other deployment features can help application operators fine tune services in the cloud, meeting software (OS and software packages), hardware (number of cores, amount of RAM, etc.) and other types of needs (e.g. orchestration, scalability).
 
Since the opening of the EGI Federated Cloud, the following typical usage models have emerged:
 
*'''Service hosting''': the EGI Federated Cloud can be used to hosts any IT service as web servers, databases, etc. Cloud features, as elasticity, can help users to provide better performance and reliable services.
** Example: [https://www.egi.eu/use-cases/scientific-applications-tools/nbis-toolkit/ NBIS Web services], [https://www.egi.eu/news/peachnote-in-unison-with-egi/ Peachnote analysis platform]
*'''Compute and data intensive''': applications needing considerable amount of resources in term of computation and/or memory and/or intensive I/O. Ad-hoc computing environments can be created in the FedCloud sites also to satisfy very hard HW resource requirements.
** Example: [https://www.egi.eu/news/new-egi-use-case-a-close-look-at-the-amatrice-earthquake/ VERCE platform], [https://www.egi.eu/use-cases/research-stories/the-genetics-of-salmonella-infections/ The Genetics of Salmonella Infections], [https://www.egi.eu/use-cases/research-stories/new-viruses-implicated-in-fatal-snake-disease/ The Chipster Platform]
*'''Datasets repository''': the EGI Federated Cloud can be used to store and manage large datasets exploiting the big amount of disk storage available in the Federation.
*'''Disposable and testing environments''': environments for training or testing new developments.
** Example: [[Training_infrastructure|Events conducted on the cloud-based EGI Training Infrastructure]]
 
 
<!--
=== Success Stories ===
Some links
 
-->
<!-- == Current Users and Communities  ==
 
EGI Federated Cloud already has a large use base, check the [[Federated Cloud Communities|FedCloud Users Communities]] page for more details.
 
[[Image:Fedclouduclogos.png|center|550px|Fedclouduclogos.png]]
-->
 
== Getting started  ==
 
=== Access to the resources ===
 
EGI Infrastructure as a Service (IaaS) Cloud Resources can be accessed through '''''Virtual Organizations''''' (VOs). A VO is a grouping of IaaS cloud provider from the EGI federation, who allocate capacity for a specific user group. Users with similar interest/requirements can join or form a VO to gather resources from EGI cloud providers - typically for a given project, experiment or use case. There are generic VOs too, for example the <code>fedcloud.egi.eu</code> VO, which is open for any user who wants to experiment with the EGI Federated Cloud. You have to join a VO before you can interact with EGI IaaS cloud resources, while higher level services (PaaS, SaaS) do not always require VO membership.
 
VO membership is controlled in EGI by X.509 certificates. To access the EGI IaaS cloud you need to:
 
# [https://www.eugridpma.org/members/worldmap/ Obtain a personal X.509 access certificate] from a recognised Certification Authority (unless you have one already).
# Join an existing VO, or form a VO if none of the existing ones suit your purpose:
## The [https://perun.metacentrum.cz/cert/registrar/?vo=fedcloud.egi.eu fedcloud.egi.eu] Virtual Organisation serves as a test ground for users to try the EGI cloud and to prototype and validate applications. It can be used for up to 6 month by any new user.
## You can search for and join other [http://operations-portal.egi.eu/vo/search established VOs]. (Filter for '''cloud''' in the middleware column)
 
Remarks:
* After the 6-month long membership in the fedcloud.egi.eu VO, you will need to move to a production VO, or establish a new VO.
* Pre-existing VOs of EGI can be also extended with cloud resources. Consult with your VO manager. 
* If none of the existing VOs matches your use case, then a new VO can be created. Please follow [[PROC14_VO_Registration|VO Registration procedure]]. We can invite sites from the infrastructure to support your VO.
 
=== Basics ===
 
The basic user workflow in the EGI Federated Cloud is summarised in the following picture:
 
[[Image:Fedcloud.png|center|650px|Fedcloud.png]] <br>
 
* The '''IaaS Cloud user''' (or a user gateway that acts on behalf of the users) is responsible for managing the virtual infrastructure on top of the IaaS provider. He/she spins up Virtual Machines, Block Storage and Object Storage on the providers. The Federated Cloud is composed of a set of providers distributed all across Europe.
 
* The VM instances are started using the images available as Virtual Appliances (VA) at [http://appdb.egi.eu EGI Applications Database (AppDB)]. Virtual Appliances are the templates for the root volume of the running instances (Operating System and applications). EGI offers a set of basic images with minimal configuration that can get you started easily, but you can also find complete application stacks. See for example these images:
**[https://appdb.egi.eu/store/vappliance/egi.ubuntu.14.04 EGI Ubuntu 14], a basic [http://www.ubuntu.com/ Ubuntu 14.04] image
**[https://appdb.egi.eu/store/vappliance/egi.centos.6 EGI Centos 6], a basic [https://www.centos.org/ CentOS 6] image
**[https://appdb.egi.eu/store/software/compss.framework COMPSs], a VM for using [[HOWTO14_How_to_use_COMPSs|COMPSs]] programming framework
**[https://appdb.egi.eu/store/vappliance/biovel.portal BioVel Portal], for executing a http://www.biovel.eu/ biodiversity virtual e-Laboratory]
 
* New Virtual Appliances can be registered by '''Cloud Developers''' that have the knowledge to create and package images and make them available for a wider community. These VAs are then managed in the AppDB with the help of the special VO members that curate which appliances are available to their VO.
 
* Virtual infrastructure managed by the IaaS cloud user will provide some services to be accessed by '''Service Users''' (could be the very same IaaS user but also other VO members or unrelated users). The method of accessing the services vary greatly from one service to another.
 
IaaS cloud resources on EGI can expose two types of interfaces (one or the other or both - depending on the cloud provider):
* '''Open Standard interfaces''': OCCI ([http://occi-wg.org/ Open Cloud Computing Interface]) to manage compute, blocks storage and network resources. This interface set are currently exposed by all of the OpenNebula and Synnefo cloud providers, and some of the OpenStack providers.
* '''OpenStack interfaces''': The native OpenStack interfaces (with X.509 authentication). These interfaces are currently exposed by all of the OpenStack-based EGI cloud providers.
 
The user can interact with IaaS cloud resources via programming APIs, command line interfaces or Web dashboards. The different access modes are summarized in the following table:
 
{| cellspacing="5" cellpadding="5" border="0" class="wikitable"
|-
|
| '''Open Standards interface'''
| '''OpenStack interface'''
|-
| '''API level access'''
| [[Federated_Cloud_APIs_and_SDKs#API|OCCI]] with jOCCI (Java SDK) or rOCCI (ruby SDK)
| [[Federated_Cloud_APIs_and_SDKs#API_2|OpenStack Compute & Openstack Object Storage]]
|-
| '''Command Line access'''
| [[Federated_Cloud_APIs_and_SDKs#CLI|rOCCI-cli]]
| [[Federated_Cloud_APIs_and_SDKs#CLI_2|OpenStack CLI with VOMS authentication plugin]]
|-
| '''Web dashboard access'''
| [[Federated_Cloud_AppDB_VMOps_Dashboard |AppDB VMOps Dashboard (in final test, take a preview)]]
| OpenStack Horizon (production instance under deployment)
|}
 
=== Creating your first VM instance  ===
 
Follow this simple steps to start your first VM using the OCCI CLI:
 
# Get your environment ready to launch VMs. The [[HOWTO11|command line client HOWTO]] describes how to install on your machine the client tool or how to get a docker image or VM image for VirtualBox that can be used to run the commands. You will need your certificate on your client.
# Browse the [https://appdb.egi.eu/browse/cloud Application Database Cloud Marketplace] the available Virtual Appliances. You can use a bare OS like this [https://appdb.egi.eu/store/vappliance/egi.ubuntu.14.04 EGI Ubuntu 14] to get started.
#Get the IDs for starting the appliance at one of the sites supporting it in the "Availability and Usage" tab.
# Virtual Appliances in AppDB are ready to start on the EGI resources, but in order to use them, you will need to perform some '''''contextualisation'''''. Contextualisation is the process of customising the appliance when it is instantiated on the resources, e.g. entering some credentials to log into the VM.
#*Passwords are not allowed by default in EGI Federated Cloud for accessing VMs, you would likely need a ssh key to proceed. Check [[FAQ10#How_can_I_inject_my_public_SSH_key_into_the_machine.3F|the FAQ on how to create one]]
#*Most VAs in AppDB support cloud-init, the de-facto standard for contextualisation. Check the [https://cloudinit.readthedocs.io/en/latest/ documentation and examples].
# [[HOWTO11#Proxy_Generation|Create a VOMS proxy for getting access to the infrastructure]]
# Use the client to start the VM using the IDs obtained from AppDB.
#*Check the [[FAQ10#How_can_I_start_a_VM.3F|How can I start a VM?]] FAQ entry and the [[HOWTO11|command line client how to]] for more information.
# Now you can connect to the VM and start using it
#*You may need to allocate a public IP for the VM, check [[FAQ10#How_can_I_assign_a_public_IP_to_a_VM.3F|How can I assign a public IP to a VM]] in the Federated Cloud FAQ
#*Login using ssh: <code>ssh -i <your private key> ubuntu@<your vm ip></code> (ubuntu is the default username for the Ubuntu images in AppDB)
 
Check out these [https://documents.egi.eu/document/2622 tutorial slides] for a practical overview of these steps.
 
=== API and SDKs access to Federated Cloud resources ===
 
Besides the command line client, there are several [[Federated Cloud APIs and SDKs|APIs and SDK ready to be used with the EGI Federated Cloud]].Preferred API for EGI federated cloud is OCCI, which can be accesses using using a command-line client (rOCCI), high-level tools or directly implementing the ‘Open Cloud Computing Interface’ (OCCI) into your environment. OpenStack Nova API is also available for OpenStack sites belonging to the Federation.
 
A crash course on how to use programming interfaces of the EGI Federated Cloud, and how these APIs can be used to integrate high-level systems with it is available [https://indico.egi.eu/indico/event/3113/ here]. Please check the [[EGI Federated Cloud jOCCI APIs| EGI Federated Cloud for developers]] guide for details on how to use them.
 
=== Creating custom appliances ===
 
You can prepare fully customised Virtual Appliances and make them available to the sites supporting your VO.
 
# First, prepare a Virtual Machine Image (VMI) that encapsulates your application.
#* There are several methods for preparing the image, check  the [[Federated_Cloud_Virtual_Machine_Image_Preparation|VMI guide]] for tips
#* We use [https://packer.io packer] with [https://www.virtualbox.org VirtualBox], which can run easily on your computer
#* Beware images should not contain any credentials, use [https://cloudinit.readthedocs.io/en/latest/ cloud-init] and follow [[Virtual_Machine_Image_Endorsement#Hardening_guidelines |hardening guidelines]].
#Make the VMI available online, for example in the [http://appliance-repo.egi.eu/images/ EGI Appliance Repository]
#* See [[FAQ10#How_can_I_upload_a_VM_image_to_the_EGI_FedCloud_repository | How can I upload a VM image to the EGI FedCloud repository]] entry in the FAQ
#* If you don't use the EGI Appliance Repository, please ensure that the server used has enough bandwidth to allow sites download the image.
# Register the VMI as a new Virtual Appliance in the [http://appdb.egi.eu EGI Applications Database]
#* See  [https://wiki.appdb.egi.eu/main:faq:how_to_register_a_virtual_appliance AppDB how to register a virtual appliance documentation]
# Once your VA is published, inform your VO through Applications Database about it.
#*  [https://wiki.appdb.egi.eu/main:guides:guide_for_managing_virtual_appliance_versions_using_the_portal Check the guide for managing VA versions]
#* VO-wide image lists can be managed by users that have the ''VO Manager'', ''VO Expert'' or ''VO deputy'' roles within the VO.
# Once your appliance is in the VO-wide image list, it will be deployed on the Federated Cloud sites of your VO.
 
== User guides ==
 
=== Authorization and User roles in the EGI Federated Cloud ===
 
EGI Cloud resources are accessed through '''''Virtual Organizations''''' (VOs). Users that are members of a VO will have access to the providers supporting that VO: they will be able to manage VMs, block storage and object storage available to the VO. '''Resources (VMs and storage) in some providers may be shared across all members of the VO''', please do not interfere with the VMs of other users (specially do not delete them).
 
Additionally, there are roles in the VO that have special consideration in the EGI Federated Cloud, listed below:
* VO-wide image lists (the Virtual Appliances included in AppDB for the VO) can be managed by users that have the ''VO Manager'', ''VO Expert'' or ''VO deputy'' roles. Information about the VO members with these roles is fetched from Operations Portal or for certain VOs from specialised attribute authorities. Check the [https://wiki.appdb.egi.eu/main:guides:manage_vo-wide_image_lists AppDB guide on VO-wide image list management] for more information.
 
=== Storage and Data Management ===
 
Every instantiated VM has some disk space provided with it, if you need more storage or need to share data, you can use a cloud storage solution. There are two kind of services: Block Storage and Object Storage. Check the [[HOWTO09|EGI Federated Cloud Storage How To]] for more information.
 
The EGI OpenData platform is a solution allowing integration of various data repositories available in a distributed infrastructure, offering the capability to make data open, and link them to key open data catalogues following respective guidelines. The core enabling technology of OpenData platform is Onedata, a data management solution that allows a seamless and optimised access to data spread over a distributed infrastructure. Instructions on how to setup a OneData deployment in the EGI Federated Cloud are available [[EGI_Opendata_platform|here]].
 
=== Accessing EUDAT services from the EGI Cloud ===
From VMs instantiated in the EGI Federated Cloud, it is also possible interact with EUDAT services. Instructions on how to jointly use the EGI Federated Cloud and EUDAT services are available [[Jointly exploit EGI and EUDAT services|here]].
 
=== Containers ===
 
You can [[Federated Cloud Containers|run your docker applications on EGI's Cloud]]. EGI also provides a [[Federated_Cloud_Containers#EGI_Federated_Cloud_clients_docker_image|docker image with the clients]] so you can test them easily. Docker Swarm, Kubernetes and Apache Mesos can be easily used on the resources provided by EGI.
 
=== High level tools: Orchestrators, Platforms/Software as a Service ===
 
Read ''[[Federated Cloud PaaS|this guidance]]'' about strategies of porting applications to the EGI Federated Cloud. The guide also includes references to high level user environments (orchestrators, Platform/Software as a Service) that can simplify the application integration and operation process for you. These environments offer high level abstractions and services on top of the baseline 'Infrastructure as a Service' cloud.
 
=== Specialised Software ===
 
==== Access the Chipster tested with CSG ====
 
With the [https://csg.egi.eu CSG] members of the Infrastructure can access the Chipster tested to run bioinformatics applications on top of Infrastructure as a Service Clouds. For further details, please check this [[Access Chipster with CSG | Access Chipster with CSG ]] guide.
 
==== Running Galaxy workflows with EC3 ====
 
Using the [http://servproject.i3m.upv.es/ec3/ EC3] open-source software platform, users can deploy elastic clusters on demand and dynamically deploy complex scientific virtual computing infrastructures on top of Infrastructure as a Service Clouds. More details on how to use Galaxy workflows on the platform are described in this wiki. Please check the [[Galaxy workflows with EC3 | Galaxy workflows in EGI with EC3]] guide for further details.
 
==== Computer-Aided Engineering (CAE) ====
Please check how SMEs can use [[Computer-Aided Engineering (CAE) in the EGI Federated Cloud | Computer-Aided Engineering (CAE) in the EGI Federated Cloud]], with the example of OpenFOAM software containers.
 
==== Running Hadoop applications ====
 
Using a WS-PGRADE gateway that is connected to the EGI Federated cloud, it is possible to deploy Hadoop clusters on EGI Federated Cloud resources, to execute Hadoop applications on those clusters and finally to release resources after application execution. The concept is outlined on [https://indico.egi.eu/indico/event/2931/material/slides/ these PPT slides]. A user manual is [https://indico.egi.eu/indico/event/2931/material/0/ available here (v1.3)].
 
==== Running Jupyter Notebook with EC3 ====
 
Using the [http://servproject.i3m.upv.es/ec3/ EC3] open-source software platform, users can deploy a Jupyter Notebook on top of EGI Federated Cloud resources. For further details, please check the [[Jupyter Notebook with EC3 | Jupyter Notebook with EC3]] guide.
 
==== Running Beaker Notebooks in the EGI FedCloud ====
 
Check how to use [[Beaker | Beaker in the EGI Federated Cloud ]] Infrastructure.
 
=== GPGPUs (pre-production!) ===
 
'''PRE-PRODUCTION''' GPGPUs-enabled cloud resources are available in selected sites of the EGI Federated Cloud. Check the [[Federated_Cloud_GPGPU|GPGPU guide on FedCloud]] for details on how to access them.
 
== Useful resources  ==
 
*[[FAQ10|FedCloud FAQ page]]
*[http://www.egi.eu/how-to/get_a_certificate.html How to get a certificate (to access Federated Cloud resources)]
*[https://wiki.appdb.egi.eu/ How to use the Applications Database Cloud Marketplace]
*[[HOWTO10|Porting your application/web service to the EGI Federated Cloud]]
*[[Federated_Cloud_infrastructure_status|List and details about certified cloud resource providers]]
*[[Cloud_SAM_tests|Monitor tests performed by EGI on cloud resources]]
**[http://argo.egi.eu/lavoisier/status_report-site?report=Critical&Fedcloud=true&accept=html Status of cloud sites in the EGI federated cloud in the ARGO system]
 
== User support  ==
 
=== Technical support  ===
 
Users' technical support is provided via the [mailto:support@egi.eu EGI support contact].
 
=== Helpdesk  ===
 
Technical problems and questions relating to the use of the EGI Federated Cloud can be reported and dealt with through the [https://ggus.eu/ EGI Helpdesk ticketing system].
 
'''Note: '''Please choose 'Federated cloud' in the 'Type of problem' field of the ticket submission form!
 
== Technical background  ==
 
Cloud providers in the EGI Federated Cloud use hardware virtualization technologies to host software on their resources. The cloud management platforms that make this possible can [[Federated_Cloud_Operation#Current_Resource_Providers|vary from site to site]], but they all enable the provisioning of virtualized computing, storage and networking resources, thus they empower scientific groups to setup and operate domain specific services, applications and simulations on these resources. Read more about the [[Federated Cloud Technology|technology that drives the Federated Cloud]].

Latest revision as of 13:37, 13 October 2020