Difference between revisions of "SPO600 Servers"
Chris Tyler (talk | contribs) (→Sudo Access) |
Chris Tyler (talk | contribs) (→Simplified SSH Access) |
||
Line 93: | Line 93: | ||
ssh betty-internal | ssh betty-internal | ||
ssh xerxes-internal | ssh xerxes-internal | ||
+ | |||
+ | {Admon/important|SSH Problems|Your ssh private key must be in your <code>~/.ssh</code> directory and have correct permissions (0600). If your SSH public key is not named <code>~/.ssh/id_rsa</code>, your SSH client may not automatically find it. You can specify the identity (private key) file using the <code>-i</code> argument to the SSH command.} | ||
== Sudo Access == | == Sudo Access == |
Revision as of 15:56, 17 January 2017
In SPO600, remote access to servers is provided for learning and project work. It is recommended that you also set up a personal Linux system.
Contents
Preparatory Steps
In order to gain access to these computers, you must send an SSH key to your professor.
- Follow the steps outlined under Using Public Keys with SSH to create your key.
- Copy the public key (
id_rsa.pub
orid_dsa.pub
) to a file namedyourUserId.pub
-- for example, if your Seneca user ID is "jldoe", save the key in the filejldoe.pub
using a command such as:cp ~/.ssh/id_rsa.pub jldoe.pub
- Attach that file to an e-mail message and send it to chris.tyler@senecacollege.ca including the course code "SPO600" somewhere in the subject line.
An account will be created within a few work days of sending the key.
Available Servers
AArch64
betty
The current ARMv8 AArch64 server system is known as betty (or bbetty). This system is located inside the EHL. To connect to this system, you need to connect through the EHL gateway on port 2201.
If you're using a command-line ssh system, and you are on the Seneca network, you can issue a command such as this:
ssh -p 2201 username@ehl.internal.cdot.systems
To connect from outside Seneca:
ssh -p 2201 username@ehl.cdot.systems
x86_64
xerxes
Our x86_64 server is known as xerxes.This system is located outside the EHL but is accessed through the EHL gateway from outside Seneca, using port 2202.
If you're using a command-line ssh system, and you are on the Seneca network, you can issue a command such as this:
ssh -p 2202 username@ehl.internal.cdot.systems
Or you can connect directly:
ssh xerxes.internal.cdot.systems
To connect from outside Seneca:
ssh -p 2201 username@ehl.cdot.systems
Simplified SSH Access
If you're using OpenSSH (the ssh client used on most Linux systems and other platforms), you can simplify complex ssh command lines by placing host connection details in the file ~/.ssh/config
:
Host "betty" hostname "ehl.cdot.systems" user "YourUserID" port 2201 Host "betty-internal" hostname "ehl.internal.cdot.systems" user "YourUserId" port 2201 Host "xerxes" hostname "ehl.cdot.systems" user "YourUserId" port 2202 Host "xerxes-internal" hostname "ehl.internal.cdot.systems" user "YourUserId" port 2202
Once you have added these lines (inserting your user ID where appropriate) and set the permission on that file (chmod 0600 ~/.ssh/config
) you can use these commands to access betty and xerxes from outside of Seneca:
ssh betty ssh xerxes
Or these commands to access betty and xerxes from inside Seneca:
ssh betty-internal ssh xerxes-internal
{Admon/important|SSH Problems|Your ssh private key must be in your ~/.ssh
directory and have correct permissions (0600). If your SSH public key is not named ~/.ssh/id_rsa
, your SSH client may not automatically find it. You can specify the identity (private key) file using the -i
argument to the SSH command.}
Sudo Access
To perform operations which require privilege, such as installing software, use the sudo
command to execute the desired instruction as the root
user.
For example, to install the software packaged ncurses-devel
, execute: sudo dnf install ncurses-devel
on xerxes or sudo yum install ncurses-devel
on betty. The commands are different because Xerxes is running Fedora, which has transitioned from the older yum system to dnf, while Betty is running LEAP (based on CentOS), which still uses the older system.
In order to use sudo
, you will need to know your password. An initial random password is provided in the file ~/password
(which is different on each server). Feel free to change this with the passwd
command -- not by editing the file, which is provided only for your information.
Multiuser Access
Remember that these machines are multi-user systems. Use the w
or who
commands to see who else is using them; you can also try using the write
command to communicate with another user if required.
Disconnect/Reconnect Ability
The screen utility provides disconnect/reconnect capability, which is very useful for unstable network connections, long interactive operations, and changing your work location.