Versions Compared

Old Version 29

changes.mady.by.user Fredrik Wetterhall

Saved on

compared with

New Version 30

changes.mady.by.user Xavier Abellan

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: tidied up the ssh key section

sFrom From outside ECMWF, you may use Teleport through our gateway in Bologna, jump.ecmwf.int. Direct access through ECACCESS service is not available.

...

You may also connect via SSH from another ECMWF platform . If you do so from ECGATE or the Cray HPCF you will not need a password to log insuch as the Linux VDI.

No Format
$> ssh hpc-login
# or for users with no formal access to HPC service:
$> ssh ecs-login

...


Generic namesPer-complex
HPCF Interactive Login

hpc-login

hpc2020-login

aa-login

ab-login

ac-login

ad-login

ECS Interactive Loginecs-loginecs-login
HPCF Remote batch job submission

hpc-batch

hpc2020-batch

aa-batch

ab-batch

ac-batch

ad-batch

ecs-batch

ECS Remote batch job submissionecs-batchecs-batch
HPCF Cron jobs

hpc-cron

hpc2020-cron

-
ECS Cron jobsecs-cron-

Password-less access

...

between Atos HPCF nodes and other platforms

Info

This step is required for many tools and applications to work well, such as ecinteractive, ecflow, and ecaccess jobs.

If connecting from a different platform at ECMWF and to enable password-less connections and transfers between different platforms, you will need to enable ssh key authentication.

  1. Log into an Atos HPCF or ECS login nodes.

  2. Once there, check Check if you already have an existing ssh key pair on other ECMWF platforms:

    No Format
    $> ls ~/.ssh/id_*
~/.ssh/id_rsa    ~/.ssh/id_rsa.pub

    If you don't, you may generate them like so:

    No Format
    $> ssh-keygen                         # press 'enter' 3 more times

    Make sure it is added into the different platforms to be used


  3. Add your public key into your authorized_keys file with:

    No Format
    $> cat
    Note

    If the key was already present in the ~/.ssh/authorized_keys file, it will be duplicated.

    No Format
    $> ssh-copy-id -i ~/.ssh/id_rsa.pub ecgate  # also gives access to lxc and linux workstation
$> ssh-copy-id -i ~/.ssh/id_rsa.pub cca
$> ssh-copy-id -i ~/.ssh/id_rsa.pub hpc-login
# or for users with no formal access to HPC service:
$> ssh-copy-id -i ~/.ssh/id_rsa.pub ecs-login

    Copy your key pair onto those platforms so you can make the connections in both directions:

    No Format
    $> rsync -av ~/.ssh/id_rsa* cca:.ssh/
$> rsync -av.pub >> ~/.ssh/id_rsa* hpc-login:.ssh/
# or for users with no formal access to HPC service:
$> rsync -av ~/.ssh/id_rsa* ecs-login:.ssh/authorized_keys