Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

It is a replacement for the ecAccess SSH service, and is operated by the CD Apps team and User Services.

Warning

This service is feature complete, but not classed as operational (it is not monitored).
ecAccess will continue to run in Shinfield, and this service only will be deployed in Bologna.


Show If
matchall
groupecmwf


Tip

Visit the Teams channel for this service to discuss and provide feedback!



Table of Contents
maxLevel1

...

Your default web browser will open and you should login with your email address,  workstation ECMWF password, and then HID Token code.

...

The hosts directly available through the Teleport gateway are:

Show If
groupecmwf
  • Linux VDI (both legacy OpenSUSE and CENTOS 8 beta)
  • Physical office workstations
  • ecGate ECGATE (node ecgb11 only)
  • HPC2020 TEMS

...

Code Block
languagebash
ssh -J ab0@shell.ecmwf.int,ab0@ecgate ab0@lxcab0@cca

Configuring password-less login

Show If
groupecmwf


Info

This configuration enables single-hop ssh to legacy OpenSuSE physical or virtual workstations, or any other host via ProxyJump.

Not required for ECGATE

 Not required for ecgate

, CENTOS 8 Linux VDI beta, or HPC2020 TEMS.



Hide If
groupecmwf


Info

This configuration enables single-hop ssh to

...

any

...

host via ProxyJump.

Not required for ECGATE or HPC2020 TEMS.


Add the Teleport certificate authority to your ~/.ssh/authorized_keys file:

...

You can open a tabbed terminal in the web browser, with support for SCP upload and download.

Note

For legacy OpenSuSE physical or virtual workstations For hosts not supporting password-less login, you must first set up password-less login.

...