...
User inputted variables will be formatted with angle brackets:
...
Code Block <instance_name>, <security_group_name>, <description>
If there are pre-determined choices, they will be formatted with parentheses:
...
Code Block (chocolate, strawberry, vanilla)
Commands to be entered at a command prompt will be prefixed with a ‘$’
File name paths are indicated as
/path/to/<some_file_or_command>
...
Modify the default security group
Launch an instance
Allocate and associate a floating IP
Log in
Create a volume
Attach a volume
- Use a volume
...
Create Account
Access to the Rapid Access Cloud is provided by third-party Federated identity providers: Google Identity Platform and Canadian Access Federation.
...
Log-in to the Rapid Access Cloud dashboard at https://cloud.cybera.ca.
In the left-hand panel under “Compute”, click “Access & Security”.
Click the “Key Pair” tab, then click “+Create Key Pair”.
Enter a
<key_pair_name>, then click “Create Key Pair”. The browser will automatically download a file named<key_pair_name>.pem.Move or save this file on your computer somewhere you will remember. It will be used when accessing instances created with this key pair.
| Status | ||||
|---|---|---|---|---|
|
...
Note If this key file is saved to an operating system that uses file-system permissions (Unix, Linux, BSD, OSX) then make sure the permissions are set appropriately. Typically,
...
the
.ssh
...
directory permissions ought to be set
...
to
700 (drwx------)
...
and the private
...
key
(*.pem)
...
should be
600 (-rw-------).Code Block $ chmod 600 /path/to/<key_pair_name>.pem
About key pairs
Key pairs are a set of mathematically generated strings, one is the private key and the other is the public key. The key pairs that are used in the Rapid Access Cloud are ssh keys generated by the OpenStack dashboard, keeping the public key to be injected as needed into new instances, and the private key is the *.pem file automatically downloaded by the browser in the steps above. If you already have a key pair suited for use, import that key by following the steps in the Advanced Guide.
...
| Note |
|---|
The private key generated in the step above is not recoverable if it is lost. It is highly recommended that a backup of the key is made and kept safe, ideally on a separate hard drive or USB key. |
A detailed explanation of public-key cryptography is out of the scope of this document; this will help you understand it better.
...
Security Groups
Security groups are the policies that deny access to the network ports of an instance. Security groups are therefore firewalls for instances, with a set of default policies that block all access to each port from any source, including the computer you are using to access the Rapid Access Cloud dashboard. Before an instance can be accessed the appropriate ports will need to be opened and a source IP address or range of addresses will need to be configured.
There is a default security group that cannot be deleted, however it can have rules added and removed from it. Additional security groups can also be created depending on need. When a new Rapid Access Cloud account is created, the default security group has four rules. The Egress rules, traffic going out from the instance, is permitted to go out by default. The Ingress rules, traffic going in to the instance, is denied by default since it does not specify any network as seen in the Remote IP Prefix. Thus, a few rules are required to permit basic access.
Modify the default security group
Log-in to the Rapid Access Cloud dashboard at https://cloud.cybera.ca.
In the left-hand panel under “Compute”, click “Access & Security”.
Click the “Security Groups” tab, click the “Manage Rules” button on the right hand side associated with the “default” security group. The list is initially empty, however we are going to add rules that:
permit ICMP for ping and traceroute, from any IPv4 or IPv6 address
permit ssh from any IPv4 or IPv6 address
Click “+Add Rule” in the top right. We are going to be adding four rules. For each rule input the values, then click the blue “Add” button. Note, the first and third rules are for IPv4 access, while the second and fourth are for IPv6:
...
5. Verify the new security group rules in the “default” security group.
...
Instances
Instances are the virtual machines that run in the Rapid Access Cloud, and they are provisioned with a set of specifications not unlike traditional bare-metal hardware with processors, memory and storage being the primary configurable elements. The Rapid Access Cloud utilizes flavors or pre-configured templates that determine the number of virtual CPU (vCPU), available memory (RAM) and disk space. There are six flavours to choose from with the details of each available during the instance creation process.
Launch an instance
Log-in to the Rapid Access Cloud dashboard at https://cloud.cybera.ca.
In the left-hand panel under “Compute”, click “Instances”.
Click on “Launch Instance” in the top right corner.
In the “Details” tab, specify the following parameters. Do not yet click “Launch”:
...