These are the instructions on how to install and configure your Teleport SSH access on Linux to connect to ECMWF services such as the Atos HPCF and ECGATE services
...
Table of Contents |
---|
Demo
Here is a demonstration on how to set up Teleport to connect to our our Atos HPCF on Ubuntu 22.04
Multimedia | ||
---|---|---|
|
You can find the step by step guide described below.
Installing the tsh
client
The tsh
application is required to perform user authentication once every 12 hours.
tsh
is open source, very portable, and has minimal dependencies.
Go to the Teleport website and follow the instructions to install it. Typically, if you have administrator permissions on your computer you can install it with:
...
Tip | ||
---|---|---|
| ||
Click on "Alternative download options" where you may download and extract the corresponding tarball for your computer architecture, and place the |
Authenticating yourself
Once every 12 hours, you will need to refresh your tokens with the tsh
command. SSH connections may remain active for longer than 12 hours, but new connections will require re-authentication.
To authenticate yourself, run tsh
, giving the location of our Teleport gateway:
|
Your default web browser will open. You should login with your email address, ECMWF password, and then the code from your Time-based One-Time-Password (TOTP) device or the 8-digit one-time passcode from your ActivIdentity (HID) security token if you have not configured your TOTP yet.
Info | ||
---|---|---|
| ||
If you're already logged in to the ECMWF website, or have recently logged in to this service, the password prompt might be skipped. |
...
Info | ||
---|---|---|
| ||
If your computer does not have a browser or cannot display one, you may use the Teleport SSH access - Browserless Login Python Module for the authentication. |
If the process is successful, you will see an output such as:
No Format |
---|
> Profile URL: https://jump.ecmwf.int:443 Logged in as: user.address@somewhere.com Cluster: jump.ecmwf.int Roles: Logins: ecmwfusername Kubernetes: disabled Valid until: 2022-12-13 20:54:18 +0000 GMT [valid for 4h37m0s] Extensions: permit-X11-forwarding, permit-agent-forwarding, permit-port-forwarding, permit-pty |
...
Tip | ||
---|---|---|
| ||
Once you have logged int at least once, tsh will save your proxy settings so you can skip the extra argument next time:
|
Setup your SSH config
...