Versions Compared

Old Version 124

changes.mady.by.user Michael Sleigh

Saved on

compared with

New Version 125

changes.mady.by.user Oliver Gorwits

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The hosts directly available through the Teleport gateway are:

  • ECGATE (node ecgb11 only)
  • CCA and CCB login nodes
  • HPC2020 TEMS
Show If
groupecmwf
  • Linux VDI (both legacy OpenSUSE and CENTOS 8 beta)
  • Physical office workstations

...

To access any other host, the ProxyJump feature allows chaining by using a comma, like so:

Code Block
languagebash
ssh -J ab0@shell.ecmwf.int,ab0@ecgate
ab0@cca

...

ab0@lxc

You can also set password-less login, as below.

Show If
groupecmwf

Configuring password-less login

Info

This configuration enables single-hop ssh (using ProxyJump) to CCA/CCB, LXC , or any other host.

Info

This configuration enables single-hop ssh to any host via ProxyJump.

Not required for ECGATE, CCA/CCB login nodes, Linux physical workstations, Linux VDI, or HPC2020 TEMS.

Hide If
groupecmwf

Not required for ECGATE or HPC2020 TEMS.

Add the Teleport certificate authority to your ~/.ssh/authorized_keys file:

Code Block
languagebash
curl -fs https://nexus.ecmwf.int/repository/internal-teleport-configs/prod/teleport_user_ca.pub >> ~/.ssh/authorized_keys


Tip

This configuration will allow access to any host which mounts the same $HOME directory.


Terminal Access in a Web Browser

...

Show If
groupecmwf


Info

Only available for ECGATE, CCA/CCB login nodes, Linux physical workstations, Linux VDI, and HPC2020 TEMS.


...

Hide If
groupecmwf


Info

Only available for ECGATE, CCA/CCB login nodes, and HPC2020 TEMS.


Browse to  http://webshell.ecmwf.int/destination-host/username (replacing destination-host and username with your selection).

...