User Tools

Site Tools


guide:cloud:practices

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
guide:cloud:practices [2020/08/19 21:41]
lphukungoane [Best Practice and Policies]
guide:cloud:practices [2025/06/24 17:32] (current)
bbarsch
Line 12: Line 12:
 ---- ----
  
-======Best Practice======+======Best Practices======
  
  
  
-  * Spin up a VM instance corresponding to your needs.+  * Spin up a VM instance corresponding to your needs and ensure that we properly manage cloud compute resources.
  
   * Always start using virtual machine/instance by applying latest security updates   * Always start using virtual machine/instance by applying latest security updates
Line 29: Line 29:
  
   * If you DO have to allow SSH access to your publicly accessible instances from 0.0.0.0/0 (entire Internet), make sure that only SSH key-based authentication is allowed by editing SSH's config file and restarting the ssh service afterwards:   * If you DO have to allow SSH access to your publicly accessible instances from 0.0.0.0/0 (entire Internet), make sure that only SSH key-based authentication is allowed by editing SSH's config file and restarting the ssh service afterwards:
 +
 +Edit the file **///etc/ssh/sshd_config//** , using text editors such as **vim** or **nano**
  
         PasswordAuthentication no         PasswordAuthentication no
         ChallengeResponseAuthentication no         ChallengeResponseAuthentication no
 +
 +And then, restart the sshd service: **//systemctl restart sshd.service//**
  
   * Do not share SSH keys or other credentials.   * Do not share SSH keys or other credentials.
Line 54: Line 58:
  
   * Make use of cloud utilities for automating provisioning steps. Cloud-init is a package pre-installed in most modern Linux distributions that allows (among other things) execution of a script upon the initial boot of the instance. More information about using cloud-init and useful examples are available at https://cloudinit.readthedocs.io/en/latest/   * Make use of cloud utilities for automating provisioning steps. Cloud-init is a package pre-installed in most modern Linux distributions that allows (among other things) execution of a script upon the initial boot of the instance. More information about using cloud-init and useful examples are available at https://cloudinit.readthedocs.io/en/latest/
 +
 +
 +----
 +====== Acceptable User Policy (AUP)======
 +
 +The cloud project account will be created and login credentials provided as soon as the registration on the Cloud Database has been approved, to register for cloud resources please following the link https://sebowausers.nicis.ac.za/
 +
 +An initial vm user account will be setup with sudo privileges. 
 +
 +User accounts / usernames are set up using the standard CHPC user account creation policy, a user’s name consists of the first letter of your name and your surname/last name.
 +
 +By default projects have limited resources as specified below , unless a request for more resources has been submitted and approved: 
 +  *  Total storage  = 400G 
 +  *  CPU = 16
 +  *  Memory = 32G
 +   
 +The Initial computing resources are determined by a selected resource flavor, each project is allowed a 
 +maximum of 400GB of storage by default.
 +   The storage options are CEPH and local storage. The local storage comes with/derived from the selected
 +   flavor when launching a virtual machine (VM). The Ceph storage is from creating a separate volume attachable
 +   to your VM.
 +   **Note : Ceph = 400GB - local storage**
 +
 +Should more resources be required when the project  has reached the usage limit, project owners should apply for the resource top up by uploading their motivation on the cloud database for a series of approvals. 
 +
 +**Users should please note: the allocation of more resources is subjected to resource availability thus not guaranteed.
 +**
 +
 +VM snapshots are provided on request.
 +
 +For security reasons as passwords are subjected to compromise, please add/use ssh keys
 +for adding ssh keys to your vm, follow the [[guide:cloud:start| getting started]]
 +         
 +For paying customers/users the invoices for the previous calendar month  are sent on the 5th of every month. If no invoice received on the 5th please email CHPC on [[https://users.chpc.ac.za/helpdesk/ | helpdesk@chpc.ac.za]] 
 +
 +CHPC does not provide windows licences, users requesting windows images should produce/ provide their own windows license
 +
 +To minimize/ prevent data loss CHPC has implemented a ceph storage running on the chpc 
 +production cloud that is setup to keep 3 replicas of each set of data on each storage node.
 +
  
/app/dokuwiki/data/attic/guide/cloud/practices.1597866089.txt.gz · Last modified: 2021/12/09 16:42 (external edit)