AWS - Ops

Search…
AWS
Ops can integrate with your existing Amazon Web Services (AWS) account. You can use the Ops CLI to create and upload an image in your AWS account. Once, you have uploaded the image, you can also create an instance with a particular image using CLI.
We currently automate installing a vmimport role (https://docs.aws.amazon.com/vm-import/latest/userguide/vmimport-troubleshooting.html). It needs to be tied to the bucket you use and uses an unique name. If you are having trouble you might wish to see if you have an existing vmimport role defined already.
Instance type Support
Nanos supports running on many of the AWS instance types including normal instance types like t2 and the newer Nitro based instances such as t3, c5, etc.
We recently introduced support for ARM based instances in the form of AWS Graviton instances 2 and 3. We also support SMP there.
Pre-requisites
1.Ensure your ~/.aws/credentials file is setup correctly - you can use the 'aws ec2' cli tools to verify this.
2.Create a bucket in S3 storage for ami creation.
Image Operations
Create Image
If you have already created an Ops project, you can update your existing config.json. You need to add CloudConfig which mentions specific details like ProjectID, BucketName.
1
{
2
    "CloudConfig" :{
3
        "ProjectID" :"prod-1000",
4
        "Zone": "us-west-1",
5
        "BucketName":"my-s3-bucket"
6
    }
7
}
Copied!
Once, you have updated config.json you can create an image in AWS with the following command:
For creating an image using a particular package, you need to provide the package name to ops image create command with -p option.
1
$ ops image create -t aws -c config.json -p node_v14.2.0 -a ex.js
Copied!
List Images
You can list existing images on AWS with ops image list.
1
$ ops image list -t aws -z us-west-1
2
​
3
+----------------+-----------+--------------------------+
4
|      NAME      |  STATUS   |         CREATED          |
5
+----------------+-----------+--------------------------+
6
| nanos-webg-ata | available | 2019-07-16T05:56:06.000Z |
7
+----------------+-----------+--------------------------+
8
| will-00        | available | 2019-08-07T20:21:19.000Z |
9
+----------------+-----------+--------------------------+
10
| nanos-webg     | available | 2019-07-16T05:01:44.000Z |
11
+----------------+-----------+--------------------------+
12
| node-image     | available | 2019-08-15T22:31:03.000Z |
13
+----------------+-----------+--------------------------+
Copied!
Delete Image
ops image delete -i <imagename> can be used to delete an image from AWS.
1
$ ops delete image -i nanos-main-image
Copied!
Instance Operations
Create Instance
After the successful creation of an image in AWS, we can create an instance from an existing image.
1
$ ops instance create <image_name>
Copied!
Alternatively, you can pass project-id and zone with cli options.
1
$ ops instance create <image_name> -p prod-1000 -z us-west-2
Copied!
You can also pass config, if you have mentioned project-id and zone in project's config.json.
1
$ ops instance create <image_name> -c config.json
Copied!
You can provide list of ports to be exposed on aws instance via config and command line.
CLI example
1
$ ops instance create <image_name> -p prod-1000 -z us-west-2 --port 80 --port 443
Copied!
Sample config
1
{
2
    "CloudConfig" :{
3
        "Platform" :"aws",
4
        "ProjectID" :"prod-1000",
5
        "Zone": "us-west-1",
6
        "BucketName":"my-s3-bucket"
7
    },
8
    "RunConfig": {
9
        "Ports" : [80, 443]
10
    }
11
}
Copied!
If you need to specify a specific zone when creating the instance use the Subnet config var.
This is necessary for certain operations such as when you want to mount a volume to an instance.
VPC and Security Group
By default, ops uses the first VPC found in aws and creates a security group per instance.
You can select a different VPC or use a existing security group using the configuration file. The keys to set are RunConfig.VPC and RunConfig.SecurityGroup.
1
{
2
    "RunConfig":{
3
        "VPC": "vpc-name",
4
        "SecurityGroup": "sg-name"
5
    }
6
}
Copied!
Private Static IP
By default, ops uses will rely on DHCP.
If you would like to set a static private ip you can use the following:
1
{
2
    "RunConfig":{
3
      "IPAddress": "172.31.33.7"
4
    }
5
}
Copied!
Note: You must choose an available IP that is within your chosen/default VPC.
List Instances
You can list instance on AWS using ops instance list command.
1
$ ops instance list -p prod-1033 -t aws -z us-west-2
2
​
3
$ ops instance list
4
+------+----+--------+---------+-------------+------------+
5
| NAME | ID | STATUS | CREATED | PRIVATE IPS | PUBLIC IPS |
6
+------+----+--------+---------+-------------+------------+
Copied!
Alternatively you can pass project-id and zone with cli options.
1
$ ops instance list -p prod-1000 -z us-west1-b
Copied!
Get Logs for Instance
You can get logs from serial console of a particular instance using ops instance logs command.
1
$ ops instance logs <instance_name>
Copied!
Alternatively you can pass project-id and zone with cli options.
1
$ ops instance logs -t aws -p prod-1033 -z us-west-2 i-08815dc4b29b44294
Copied!
Delete Instance
ops instance delete command can be used to delete instance on AWS.
1
$ ops instance delete my-instance-running
Copied!
Alternatively you can pass project-id and zone with cli options.
1
$ ops instance delete -p prod-1000 -z us-west1-b my-instance-running
Copied!
Create Instance with Instance Group
OPS has initial support for putting an instance into an AWS auto scaling group. This allows you to load balance a handful of instances and scale up/down on demand.
The instance group must already be created to use this feature. When deploying through 'instance create' OPS will create a new launch template, apply it to the AWS auto scaling group, and then attach it to the instance when creating.
1
$ ops instance create <image_name> -t aws -z us-west1-a --instance-group my-instance-group
Copied!
Elastic IP:
If you have already provisioned an elastic ip you may use it by setting it in the Cloud Config:
1
"CloudConfig" :{
2
  "StaticIP": "1.2.3.4"
3
}
Copied!
IPV6 Networking
IPV6 support differs from cloud to cloud. On AWS DHCPV6 is used. You can have an ip auto-assigned or you can set one yourself but you must be aware that a subnet must have IPv6 enabled.
A sample config for assigning an ip:
1
➜  g cat config.json
2
{
3
  "CloudConfig" :{
4
    "Zone": "us-west-1",
5
    "BucketName":"my-bucket",
6
    "EnableIPv6": true,
7
    "VPC":"test-ipv6-test-2"
8
  },
9
  "RunConfig": {
10
    "IPv6Address": "2600:1f1c:604:9a00:7a34:8c37:5b08:f104",
11
    "Ports": [
12
      "80",
13
      "8080",
14
      "443"
15
    ]
16
  }
17
}
Copied!
To test:
1
[[email protected] ~]$ ping6 2600:1f1c:604:9a00:7a34:8c37:5b08:f104
2
PING 2600:1f1c:604:9a00:7a34:8c37:5b08:f104(2600:1f1c:604:9a00:7a34:8c37:5b08:f104) 56 data bytes
3
64 bytes from 2600:1f1c:604:9a00:7a34:8c37:5b08:f104: icmp_seq=1 ttl=255 time=0.573 ms
4
64 bytes from 2600:1f1c:604:9a00:7a34:8c37:5b08:f104: icmp_seq=2 ttl=255 time=0.419 ms
5
^C
Copied!
Be aware that you might not have IPV6 connectivity from the laptop/server you are testing from. You can verify within an instance on AWS to test connectivity.
Volumes
When you mount a volume to an AWS instance you must specify the zone modifier for the region. So instead of using:
1
"Zone": "us-west-1",
Copied!
Use
1
"Zone": "us-west-1c",
Copied!
OPS will strip the zone 'c' from other operations that only require/desire region.