...
The hosts directly available through the Teleport gateway are:
- ECGATE (node ecgb11 only)
- CCA and CCB login nodes
- HPC2020 TEMS
| Show If |
|---|
|
- Linux VDI (both legacy OpenSUSE and CENTOS 8 beta)
- Physical office workstations
|
...
To access any other host, the ProxyJump feature allows chaining by using a comma, like so: | Code Block |
|---|
| ssh -J ab0@shell.ecmwf.int,ab0@ecgate |
ab0@cca |
...
You can also set password-less login, as below. |
| Show If |
|---|
|
Configuring password-less login| Info |
|---|
This configuration enables single-hop ssh (using ProxyJump) to CCA/CCB, LXC , or any other host. | | Info |
|---|
This configuration enables single-hop ssh to any host via ProxyJump. Not required for ECGATE, CCA/CCB login nodes, Linux physical workstations, Linux VDI, or HPC2020 TEMS. |
|
| Hide If |
|---|
|
Not required for ECGATE or HPC2020 TEMS. |
Add the Teleport certificate authority to your ~/.ssh/authorized_keys file: | Code Block |
|---|
| curl -fs https://nexus.ecmwf.int/repository/internal-teleport-configs/prod/teleport_user_ca.pub >> ~/.ssh/authorized_keys |
| Tip |
|---|
This configuration will allow access to any host which mounts the same $HOME directory. |
|
Terminal Access in a Web Browser
...
| Show If |
|---|
|
| Info |
|---|
Only available for ECGATE, CCA/CCB login nodes, Linux physical workstations, Linux VDI, and HPC2020 TEMS. |
|
...
| Hide If |
|---|
|
| Info |
|---|
Only available for ECGATE, CCA/CCB login nodes, and HPC2020 TEMS. |
|
Browse to http://webshell.ecmwf.int/destination-host/username (replacing destination-host and username with your selection).
...