HOW TO CREATE A SLICE IN GENI?

Transcription

1 HOW TO CREATE A SLICE IN GENI? Ahmet Can Babaoglu Computer Science, North Carolina State University July, 2012 *Notice that all the steps are tested on Ubuntu platform only. Step by step: How to create and use a GENI slice using ORCA-Flukes GUI This is a simplified version of 1) On command line, first do sudo apt-get install build-essential to install basic packages. 2) Get a GENI credential from via to GENI GPO and advisor confirmation. Make sure all passwords are same. So that you will have an account and will be able to see the following page by logging into 2) From Download link above you will have the SSL certificate and should be saved as a.pem file (acbabaog-ssl.pem). You can double check the X509 certificate via Run openssl x509 -text -in acbabaog-ssl.pem on command line and you should see the credential belongs to you.

2 3) Java6SE needs to be installed. To install Java 6 JDK on Linux, html Run a sh jdk-6u33-linux-i586.bin and copy the inflated directory /usr/java and set $JAVA_HOME to java executable and $PATH to Java bin. Type java -version to verify. 4) ORCA Flukes uses java key store (JKS) and in order to import certificate into it, a tool called Portecle is used. From click on Launch to download. This may not work if browser is not recognizing Java. In that case, download portecle.jnlp manually from Run javaws portecle.jnlp. 4a) Click on new keystore and select JKS, and click OK. 4b) Click on Import key pair and select the downloaded.pem certificate file and enter the password for it. Click ok on the key pair and select the alias as your name (example: acbabaog) 4c) Save the keystore as a.jks file and enter the same password used before. The 4a,b,c) steps can be also seen from the screen capture of how to import is shown below: This may require a plugin and it can be automatically searched and installed. 5) Having imported the certificate and saved the file as acbabaog.jks, click on the red link label to download flukes.jnlp

3 6) Notice that running the command with root account versus a user account DOES MATTER because ssh keys belong to the user account, therefore log in as your regular user name (such as john ). Launch Flukes via javaws flukes.jnlp. From Help -> Preferences, you will see the settings. These settings usually needs to be changed. Typical changes are JKS, SSH, XTERM, image and orca.xmlrpc address. In order to make the changes, create a file at $HOME/.flukes.properties and paste the following; # Path to XTerm executable on your system xterm.path=/usr/bin/xterm # Default comment character used in post-boot scripts script.comment.separator=# # SSH Private Key to use to access VM instances(public will be installed into instances). You can use ~ to denote user home directory. ssh.key=~/.ssh/id_dsa # SSH Public key to install into VM instances ssh.pubkey=~/.ssh/id_dsa.pub # Options for invoking SSH (the default set turns off checking.ssh/known_hosts ssh.options=-o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no # URL of the ORCA actor registry to query orca.registry.url= # MD5 fingerprint of the certificate used by the registry orca.registry.certfingerprint=78:b6:1a:f0:6c:f8:c7:0f:c0:05:10:13:06:79:e0:ac # Keystore containing your private key and certificate issued by GPO, Emulab or BEN user.keystore=~/.ssl/acbabaog.jks # Comma-separated list of URLs of the ORCA XMLRPC controllers where you can submit slice requests orca.xmlrpc.url= # Name of a known image, you can add more images by adding image1.name, image2.name etc. To see defined images click on 'Client Images' button. image.name=regression-i386-debian # URL of a known image description file, you can add more images by adding image1.url, image2.url etc. image.url= # SHA-1 hash of the image description file, you can add more images by adding image1.hash, image2.hash etc. image.hash=ea80af6601a2a000ec5b050d7e7701f26db096fc

4 7) Also, SSH keys need to be generated. On terminal (with regular user account), ssh public/private keys are created via ssh-keygen -t dsa. These are NOT related to Emulab account at step 1). 8) Now exit Flukes and start Flukes again. You can create node(s) by clicking on the panel and selecting a domain, then enter your slice name and click on Submit button. Once you have created the node and submitted slice request, click on Manifest View and after a few minutes, query the manifest with slice name. Slice should be in active status, and you can ssh into a node by right clicking and logging in via an xterm console. In addition, using the IP and Port number, a node can be also SSH ed and SCP ed to download files easily. You can get the details by right clicking on node details. (for example: ssh -p acbabaog@ or scp similarly). You should have a screen similar to below;

5 Step by step: How to create a GENI slice using ProtoGENI-FLACK GUI * This is a simplified version and screenshots of Flack on 1) Flack requires a browser with Adobe Flash (at least version 11) installed on your web browser. In order to install Adobe Flash 11 on Mozilla, on terminal do a sudo apt-get install flashplugin-nonfree, then close all Mozilla tabs and start Mozilla again. Another way is to install Chrome from Synaptic Manager (by searching Chrome) and it comes with Adobe Flash. Having install Adobe Flash Player, go to website, as shown below; 2a) To create the SSH keys, on your desktop/laptop machine, do a ssh-keygen -f acbabaog-protogeni-key to create a public key called acbabaogprotogeni-key.pub and private key called acbabaog-protogeni-key. 2b) Go to pgeni.gpolab.bbn.com/ and log in using your GENI credentials. Upload ONLY the public key (not private key) generated at 2a) to pgeni.gpolab.bbn.com/ site as shown below. This will enable your public key to be downloaded automatically to VMs when you create a slice later. Notice that this public key is dependent on your local machine and its account, therefore when you use another machine, you may need to create a different public/private key pair.

6 3) Now at website, click log in. You can use your GENI credentials to simplify logging in, by first selecting the authorithy (pgeni.gpolab.bbn.com in this case) and it will show your pgeni.gpolab.bbn.com/ SSL certificate. Then enter your password and click get user credential button, as shown below;

7 4) You can click on your account name acbabaog in this case and verify your SSL certificates and SSH public key (on the right) are there. 5) To create a slice, select a slice name and drag resources and click submit as shown below. Utah resources have worked fine so far. Detailed steps can be followed at When it s all green, you are ready!

8 6) To SSH into a machine, click on i (information) button, and you can see the hostname/portname of it. In this case, it s pc403.emulab.net:30522 with username acbabaog. Web based visit or ssh links have not worked for me yet, so I use traditional linux terminal ssh in the next step. 7) To SSH into it from local machine, the SSH public/private key pair generated at step 2) must be put into /home/can/.ssh/ folder with names id_dsa.pub and id_dsa respectively. Then we can ssh as follows: ssh -p acbabaog@pc403.emulab.net. If this does not work change id_dsa.pub and id_dsa to id_rsa.pub and id_rsa respectively.

9 Step by step: How to create a GENI slice by OMNI Command-Line Tool * This is a simplified version and screenshots of OMNI at 1) OMNI tool (gcf 1.6.2) can be downloaded from and extract it (no need to install). 2) Install packages via sudo apt-get install python-m2crypto python-dateutil \ python-pyopenssl libxmlsec1 xmlsec1 \ libxmlsec1-openssl libxmlsec1-dev and then test OMNI as more detailed in 3) Put your SSL certificate into $HOME/.ssl folder exactly as geni_cert.pem name and at omni gcf folder run python src/omni-configure.py. This will create a.gcf folder and omni_config file as well as ssh public/private key pair as shown below;

10 4) Now you are ready to run omni commands to manage your slice and slivers. First you need to have your resources. To retrieve Protogeni resources, do a python src/omni.py -a -o -t ProtoGENI 2 listresources. This will take a while to download a large xml file. 5) You can create a new slice via python src/omni.py createslice your-new-slice. * Notice that as of now, you can NOT delete a slice, you should delete its slivers (resources) and slice will be removed automatically after it expires (typically a day). 6) In order to create a sliver (resource) in your slice, you need a rspec (resource specification). You may use the following sample rspec and copy/paste into a file called emulab.rspec <?xml version="1.0"?> <!-- Resources at AM: URN: unspecified_am_urn URL: --> <rspec type="request" xmlns=" xmlns:emulab=" xmlns:xsi=" xsi:schemalocation=" <node client_id="geni1" exclusive="true"> <sliver_type name="raw-pc" /> </node> <node client_id="geni2" exclusive="true"> <sliver_type name="raw-pc" /> </node> </rspec> 7) Now you can use the rspec above and create a slice at Protogeni via python src/omni.py -a -o createsliver yournew-slice emulab.rspec 8) You may check the sliver status via python src/omni.py -a sliverstatus your-new-slice. The result is saved in a.json file in omni-gcf folder. 9) In order to log in to the slice machines, the sliver must be in ready state to be used. Check the.json file in 8) to see if it s ready. Once you see it s ready and assuming you have done SSH key generation at step 2) and 7) of FLACK steps. You should be

11 able to SSH into machines. You can find the IP addresses and username at.json file as follows; (for example below it can be ssh -p 22 * Normally it should recognize your SSH keys and be able to login without a password (or only at the first time). 10) You may also list all resources of your slice via python src/omni.py -a -o -t ProtoGENI 2 listresources your-new-slice The result output file should be saved as your-new-slice-rspec-www-emulab-netprotogeni.xml 11) You may also delete a sliver via python src/omni.py -a deletesliver your-new-slice 12) You can also add PlanetLab resources into your slice. For more details about these steps, visit