These are the instructions on how to install and configure your Teleport SSH access on Linux to connect to ECMWF services such as the Atos HPCF and ECGATE services
Here is a demonstration on how to set up Teleport to connect to our our Atos HPCF on Ubuntu 22.04. You can find the step by step guide below.
tsh
clientThe tsh
application is required to perform user authentication.
tsh
is open source, very portable, and has minimal dependencies.
Go to the Teleport website and follow the instructions to install it. Typically, if you have administrator permissions on your computer you can install it with:
curl https://goteleport.com/static/install.sh | bash -s <teleport_version> |
Click on "Alternative download options" where you may download and extract the corresponding tarball for your computer architecture, and place the |
Once every 12 hours, you will need to refresh your tokens with the To authenticate yourself, open a local terminal and run
Your default web browser will open. You should login with your email address, ECMWF password, and then the code from your Time-based One-Time-Password (TOTP) device or the 8-digit one-time passcode from your ActivIdentity (HID) security token if you have not configured your TOTP yet.
If the process is successful, you will see an output such as:
|
We strongly recommend setting up all the SSH options needed for the connection instead of passing them on the command line.
Edit the file ~/.ssh/config
on your computer and add the snippet below. You may create it if it does not exist. You should replace ecmwfusername
by your registered ECMWF user and user.address@somewhere.com
by your registered email address at ECMWF.
|
Once you have configured the appropriate settings, any SSH-based tools such as ssh
, scp
or rsync
should work out of the box without any additional options.
To test the connection you may ssh into hpc-login if you have access to ECMWF's HPCF:
% ssh hpc-login |
Or alternatively, if you only have access to ECMWF ECS service:
% ssh ecs-login |
Visit our HPCF User Guide for further information.
If using an Operating System with OpenSSH older than 7.3, you will not be able to use the ProxyJump feature. The typical error would be something like:
% ssh hpc-login /home/user/.ssh/config: line 10: Bad configuration option: proxyjump |
You must then replace the following line in your ~/.ssh/config
Host a?-* a??-* hpc-* hpc2020-* ecs-* ProxyJump jump.ecmwf.int |
by:
Host a?-* a??-* hpc-* hpc2020-* ecs-* ProxyCommand /usr/bin/ssh -q -o PubkeyAcceptedKeyTypes=+ssh-rsa* -oHostKeyAlgorithms=+ssh-rsa*,rsa-sha2-512 -i ~/.tsh/keys/jump.ecmwf.int/user.address@somwhere.com -W %h:%p ecmwfusername@jump.ecmwf.int |
You should replace ecmwfusername
by your registered ECMWF user and user.address@somewhere.com
by your registered email address at ECMWF.
If you cannot login to teleport or connect via SSH and you are not able to understand why, please raise an issue to our ECMWF Support portal and sending us the output of the commands:
You should also include information about your computer (Operating system) to help us narrow down the problem. |