CipherSpace Client Wiki - User contributions [en]

OpenVPN Guide Windows

2024-12-16T14:16:04Z

Client Admin:

[[Category:OpenVPN]]
[[Category:How To]]
[[Category:CloudInfrastructure]]

==Introduction==

This guide will explain how to install the OpenVPN client on your PC as well as how to execute it in order to access your virtual machines that aren’t accessible from the Internet.

This guide assumes that you have some experience with Windows and that you have administrative rights on the computer on which the client will be installed.

N.B.: This guide is for a Windows 10 operating system. For other Windows versions, the layout may be different, but the principles remain the same.

==OpenVPN Client Installation==

The OpenVPN Client Installer can be found at https://openvpn.net/index.php/open-source/downloads.html.

Once the download is finished, run the installer. You may get the following warning:

[[File:OpenVPN_Win_Install_1.png|400px|border]]

Click on “Yes” to continue. The following screen appears:

[[File:OpenVPN_Win_Install_2.png|500px|border]]

Click on “Next >”. The License Agreement screen is displayed:

[[File:OpenVPN_Win_Install_3.png|500px|border]]

Click on “I Agree” to continue.

The next screen asks you to choose components to install:

[[File:OpenVPN_Win_Install_4.png|500px|border]]

Leave the chosen components unchanged and click on “Next >”.

The next screen asks you for the installation location:

[[File:OpenVPN_Win_Install_5.png|500px|border]]

Click on “Install”. The installation starts:

[[File:OpenVPN_Win_Install_6.png|500px|border]]

The installer may ask you to confirm the installation of the TAP Virtual Ethernet Adapter:

[[File:OpenVPN_Win_Install_7.png|500px|border]]

Click on “Install”.

The installation continues:

[[File:OpenVPN_Win_Install_8.png|500px|border]]

Click on “Next >” to finish the installation:

[[File:OpenVPN_Win_Install_9.png|500px|border]]

Deselect the “Show Readme” and click on “Finish”.

==CipherSpace Configuration Installation==

Open a Windows Explorer window, go to <code>C:\Users\<user>\OpenVPN\config\</code>
(where <code><user></code> is your Windows username) and copy the file (or files) you have received from us.

[[File:OpenVPN_Win_Config_1.png|600px|border]]

==Running OpenVPN==
(including for the first time)

Double-click on the “OpenVPN GUI” icon on your desktop:

[[File:OpenVPN_Win_Run_1.png|37px]]

You should now see the following icon at the bottom right of your screen:

[[File:OpenVPN_Win_Run_3.png|37px]]

If you don’t, follow the instructions described [[#Make the OpenVPN Icon Visible|here]]

When you can see the OpenVPN GUI icon ([[File:OpenVPN_Win_Run_11.png|20px]]), double-click on it and the connection will start.

* Enter in the Username & Password provided to you

* Then type in the encryption passphrase: Type the password we sent you for the corresponding configuration file. If you want, you can store the password in your Keychain by checking the “Save in Keychain” box, so you don’t have to type it each time you use Tunnelblick. Click on OK.

[[File:OpenVPN_Win_Run_7.png|500px|border]]

You can also select "Save Password"

The connection continues.

[[File:OpenVPN_Win_Run_8.png|500px|border]]

Then the above window closes and you will see a similar message:

[[File:OpenVPN_Win_Run_9.png|250px|border]]

And the OpenVPN icon is now green.

You should now test the VPN connection by opening a command window, (Click on “Start” then under “Search programs and files” type “cmd”) and type “ping xxx.xxx.xxx.xxx”, where xxx.xxx.xxx.xxx is the IP address of a virtual machine, which is not published on the Internet. If you cannot access the virtual machine, please contact us.

To disconnect the VPN connection, double-click on the OpenVPN icon (green):

[[File:OpenVPN_Win_Run_10.png|500px|border]]

And click on “Disconnect”.

===Make the OpenVPN Icon Visible===

Open the “Control Panel”:

[[File:OpenVPN_Win_Run_12.png|600px|border]]

In the “Search Control Panel” field, type “Notification area”:

[[File:OpenVPN_Win_Run_13.png|600px|border]]

And click on “Taskbar and Navigation”.

[[File:OpenVPN_Win_Run_14.png|600px|border]]

Scroll until you find the “Notification area” and click on "Select which icons appear on the taskbar":

[[File:OpenVPN_Win_Run_15.png|400px|border]]

Look for "OpenVPN GUI for Windows", move the switch button to "on" and close the "Control Panel". The OpenVPN icon will be now visible at the bottom right of your screen.

OpenVPN Guide OSX

2024-12-16T14:14:48Z

Client Admin:

[[Category:OpenVPN]]
[[Category:How To]]
[[Category:CloudInfrastructure]]

== Introduction ==
This guide will explain how to connect to your virtual machines, which aren’t accessible from the Internet, using the OpenVPN protocol. It will explain how to install Tunnelblick (OpenVPN client for Mac) on your mac as well as how to use it.

This guide assumes that you have some experience with OSX and that you have administrative rights on the computer on which Tunnelblick will be installed.

==Installation==
Go to https://tunnelblick.net:

[[File:Tunnelblick_net.png|600px]]

And click on “Download Latest Stable Release”. The Tunnelblick disk image file (a “.dmg” file) will be stored in your downloads folder.

Open the downloaded disk image file (which mounts the disk image):

[[File:Tunnelblick_Install_1.png|500px]]

And double-click the “Tunnelblick” icon (it may be labeled “Tunnelblick.app”):

You may get the following warning:

[[File:Tunnelblick_Install_2.png|600px]]

Click on “Open” to continue.

The following screen appears:

[[File:Tunnelblick_Install_3.png|500px]]

Type your password and click on “OK”.

[[File:Tunnelblick_Install_4.png|500px]]

Click on “Launch”:

[[File:Tunnelblick_Launch_1.png|700px]]

Click on “I have configuration files”. You will see the following screen:

[[File:Tunnelblick_Launch_2.png|600px]]

Before you can click on “OK”, the following screen appears:

[[File:Tunnelblick_Launch_3.png|700px]]

Click on “Do not check for a change”. The next screen appears:

[[File:Tunnelblick_Launch_4.png|500px]]

Click on “Check Automatically”.

Now you can click on OK on the previous screen. The Tunnelblick installation is complete.

==Configuration==

To install the necessary configuration files, open the folder where you have stored the files we sent you:

[[File:Tunnelblick_Conf_1.png|700px]]

And double-click on the “.ovpn” file. The following screen appears:

[[File:Tunnelblick_Conf_2.png|500px]]

If you have several users on this machine, who need to access the virtual machines, click on “All Users”, otherwise click on “Only Me”:

[[File:Tunnelblick_Conf_3.png|500px]]

Type your password and click on OK:

[[File:Tunnelblick_Conf_4.png|600px]]

Click on OK. The configuration file has been copied from your folder into Tunnelblick and are not needed anymore.

==Running Tunnelblick==

If Tunnelblick isn’t already launched, double-click on the “Tunnelblick” app located in your “Applications” folder. The following icon appears on the top right of your screen:

[[File:Tunnelblick_Run_1.png|border]]

Put the mouse pointer on the icon (without clicking). The connection window appears:

[[File:Tunnelblick_Run_2.png|300px]]

And click on “Connect”:

* Enter in the Username & Password provided to you

* Then type in the encryption passphrase: Type the password we sent you for the corresponding configuration file. If you want, you can store the password in your Keychain by checking the “Save in Keychain” box, so you don’t have to type it each time you use Tunnelblick. Click on OK.

[[File:Tunnelblick_Run_3.png|500px]]

You will see the status changing until it says “Connected” and the connection window disappears. The Tunnelblick icon will be as follows:

[[File:Tunnelblick_Run_4.png|border]]

If you cannot get connected, please contact us.

You may get the following warning:

[[File:Tunnelblick_Run_5.png|500px]]

If you do, check the “Do not check for IP address changes” box and click on OK.

Another method to connect is to click on the Tunnelblick icon ([[File:Tunnelblick_Run_1.png|border|25px]] ):

[[File:Tunnelblick_Run_6.png|200px]]

And in the drop-down menu select “Connect <Customer-User>” (where <Customer-User> corresponds to your VPN configuration).

You should now test the VPN connection by opening a terminal window, (Click on the [[File:Tunnelblick_Run_7.png|border|20px]] icon on the top right of your screen, type “Terminal” and select the application) and type “ping xxx.xxx.xxx.xxx”, where xxx.xxx.xxx.xxx is the IP address of a virtual machine, which is not published on the Internet. If you cannot access the virtual machine, please contact us.

To disconnect from the VPN, put the mouse pointer on the Tunnelblick icon ([[File:Tunnelblick_Run_4.png|25px]]) (without clicking). The connection window appears:

[[File:Tunnelblick_Run_8.png|300px]]

And click on “Disconnect”.

You can also click on the Tunnelblick icon ([[File:Tunnelblick_Run_4.png|25px]]):

[[File:Tunnelblick_Run_9.png|200px]]

And select “Disconnect <Customer-User>” (where <Customer-User> corresponds to your VPN configuration).

Vantage User Guides

2023-07-25T14:44:04Z

Client Admin:

[[Category:Telephony]]
[[Category:Vantage]]
[[Category:UserGuide]]
=== The following are guides for the Vantage MAX Core Platform ===

#Web Portal - Contact CipherSpace for the specific web portal address

#Vantage Wiki/Help Guides - https://help.maxcore.io/
#Voicemail User Guides - https://help.maxcore.io/category-5.html

Provision Polycom VVX Phones:
#Press Home
#Press Settings
#Press Advanced
#Password - 456 by default or xxxx (ask CipherSpace as it is client specific)
#Press Admin Settings
#Press Network Config
#Press Provisioning Server
#Press DHCP Menu
#Edit Boot Server to Static
#Press Back
#Edit Server type to HTTPS
#Edit Server Address to a.maxcore.io
#Press Back until Save config.

For the Older C3 Platform
#*[[Media:Vantage_Web_User_Guide.pdf|Vantage Web User Guide]]
#[[Media:Vantage_Voicemail_Menu_User_Guide.pdf|Voicemail Menu User Guide]]
#Cisco Phone Information
#*[[Media:Vantage_Cisco_Phone_MAXcore_Quick_Start_Guide.pdf|MAX Core Phone Quick Start Guide]]
#*[[Media:Vantage_Cisco_Voicemail_Guide.pdf|Voicemail Guide]]
#Polycom Phone Information
#*[[Media:Vantage_Polycom_MAXcore_Quick_Start_Guide.pdf|MAX Core Phone Quick Start Guide]]
#*[[Media:Vantage_Polycom_Voicemail_Guide.pdf|Voicemail Guide]]
#Configuration Guides for provisioning phones:
#:https://resource.vantage.com/display/C3/Knowledge+Articles
#Quickstart Guides for all the phones:
#:https://resource.vantage.com/display/C3/Phone+Quick+Start+Guides

Vantage User Guides

2023-07-25T14:42:00Z

Client Admin: /* The following are guides for the Vantage C3 - MAX Core Platform */

[[Category:Telephony]]
[[Category:Vantage]]
[[Category:UserGuide]]
=== The following are guides for the Vantage MAX Core Platform ===

#Web Portal - Contact CipherSpace for the specific web portal address

#Vantage Wiki/Help Guides - https://help.maxcore.io/
#Voicemail User Guides - https://help.maxcore.io/category-5.html

For the Older C3 Platform
#*[[Media:Vantage_Web_User_Guide.pdf|Vantage Web User Guide]]
#[[Media:Vantage_Voicemail_Menu_User_Guide.pdf|Voicemail Menu User Guide]]
#Cisco Phone Information
#*[[Media:Vantage_Cisco_Phone_MAXcore_Quick_Start_Guide.pdf|MAX Core Phone Quick Start Guide]]
#*[[Media:Vantage_Cisco_Voicemail_Guide.pdf|Voicemail Guide]]
#Polycom Phone Information
#*[[Media:Vantage_Polycom_MAXcore_Quick_Start_Guide.pdf|MAX Core Phone Quick Start Guide]]
#*[[Media:Vantage_Polycom_Voicemail_Guide.pdf|Voicemail Guide]]
#Configuration Guides for provisioning phones:
#:https://resource.vantage.com/display/C3/Knowledge+Articles
#Quickstart Guides for all the phones:
#:https://resource.vantage.com/display/C3/Phone+Quick+Start+Guides

How To Instantiate Virtual Machine

2019-05-24T18:51:09Z

Client Admin: Created page with "Category:OpenNebula Category:How To Category:CloudInfrastructure =How to Instantiate a virtual machine using Appliance (image) from CipherSpace AppMarket in OpenNe..."

[[Category:OpenNebula]]
[[Category:How To]]
[[Category:CloudInfrastructure]]
=How to Instantiate a virtual machine using Appliance (image) from CipherSpace AppMarket in OpenNebula=

# Login to Sunstone (Sunstone URLs) ([https://wiki.cipherspace.com/index.php/OpenNebula_Administrative_Functions https://wiki.cipherspace.com/index.php/OpenNebula_Administrative_Functions] - useful info with additional help for admin functions via UI)
# Select Datacenter/Zone (RHS Top corner) in which you want to create VM (ZH4, NY7, DW2) – This option might not be available to non-privileged users.
# Download an appliance (app) from CipherSpace App Market. You also have option download from OpenNebula AppMarket if needed.
## Select appliance you want to download (import) to OpenNebula
### Storage -> Apps
### Filter by 'CipherSpace AppMarket'
### Select the 'App' you want to download (e.g: CentOS7, Debian Linux 9)
## To download selected App to OpenNebula
### Click on OpenNebula ->
### Enter Name (has to be unique) and VM Template Name (defaults to Name)
### Select ON datastore in which this App will be downloaded (should select ‘Images-qcow2’ unless there is a strong reason to use something else)
### Click on Download to begin download
## Check status of downloaded Image
### Storage -> Images
### Status will show as 'LOCKED'
### Once it changes to 'READY', image is ready to use
## ( [https://wiki.cipherspace.com/index.php/How_To_Use_OpenNebula_AppMarket https://wiki.cipherspace.com/index.php/How_To_Use_OpenNebula_AppMarket] - Dummies guides for step 3 )
# Modify Template of the downloaded App/Image
## Templates -> VMs, Select the template which you just downloaded
## Click 'Update'
### General Tab-> Adjust Memory, CPU and VCPU value as needed, select 'KVM' as hypervisor
### Storage Tab -> Select the image you just downloaded, add additional Disks and select images to be used for Disk if required
### Network Tab -> Select one of the pre-created network (if unsure to begin with select 'Internet' and check with ‘someone in the know’ - if you are reading this document, you should know who that is) to select the appropriate virtual network
### Context Tab -> Add SSH contextualization and ‘Add Network contextualization’ should be selected. Add the public key of users who will access this VM. (For windows users – HowTo for generating SSH Key pair [https://wiki.cipherspace.com/index.php/Using_PuTTY_with_SSH_Key_Pair https://wiki.cipherspace.com/index.php/Using_PuTTY_with_SSH_Key_Pair] -
### Leaving rest of the options to default – you are just about ready to instantiate an ‘internet facing VM’
### Click on 'Update' to save these parameters
# Instantiate VM
## Templates -> VM
## Select the Template which you want to instantiate as VM
## Click 'Instantiate'
# Check Status of VM
## Instances -> VMs
## Status will start with 'PENDING' and change 'RUNNING'
## Once it is 'RUNNING', VM is ready to use.
## Once running, note the assigned IP address to SSH into using your preferred SSH client
# For additional information to manage running VM (start, stop, pause, terminate, power off, etc.) [https://wiki.cipherspace.com/index.php/How_To_Manage_OpenNebula_Virtual_Machines https://wiki.cipherspace.com/index.php/How_To_Manage_OpenNebula_Virtual_Machines]

Email Setup

2018-10-05T13:56:51Z

Client Admin:

[[Category:UCS]]
[[Category:UserGuide]]
[[Category:How To]]

In the following wiki article you will find Email Server Information necessary to access the webmail as well as setup your local email client:

Please replace, "abc.com" with your domain name (i.e. if your domain was cipherspace.com, please replace all instances of abc.com with cipherspace.com"

For all access, you will need to know the below information:

* Username = your full email address (i.e. xyz@abc.com)
* Password = Your email password

== Webmail ==
* URL: '''https://mail.abc.com/'''

== Incoming eMail ==
* Server: '''mail.abc.com'''
* Protocol / Server Type: '''IMAP''' or '''IMAP4'''
* Port '''143''' with '''StartTLS''' or
* Port '''993''' with '''SSL'''
* username/password see above

NOTE: For Outlook Users, please make sure that:
* Require SPA, secure password is UNCHECKED
* Under Advanced Settings for Ports you may have to use:
** Port '''143''' with '''SSL/TLS'''

== Outgoing eMail ==
* Server: '''mail.abc.com'''
* Protocol: '''SMTP'''
* Port '''587''' with '''StartTLS'''
* username/password see above
* Server requires Authentication (you can either select using incoming server settings or enter in your username and password)

== How to Change Your Password ==
* Login to Webmail (see above for url)
* If using the basic skin (default look), Click on the "Settings" Link.
*:[[File:Email_Setup_1.png|700px]]
* Then Click "Password"
*:[[File:Email_Setup_2.png|700px]]
* Enter in your current password, new password, and re-enter password and click Modify
*:[[File:Email_Setup_3.png|700px]]

Vantage User Guides

2018-09-11T14:45:41Z

Client Admin:

[[Category:Telephony]]
[[Category:Vantage]]
[[Category:UserGuide]]
=== The following are guides for the Vantage C3 - MAX Core Platform ===
#Web Portal - https://c3voice.vantageip.com
#*[[Media:Vantage_Web_User_Guide.pdf|Vantage Web User Guide]]
#[[Media:Vantage_Voicemail_Menu_User_Guide.pdf|Voicemail Menu User Guide]]
#Cisco Phone Information
#*[[Media:Vantage_Cisco_Phone_MAXcore_Quick_Start_Guide.pdf|MAX Core Phone Quick Start Guide]]
#*[[Media:Vantage_Cisco_Voicemail_Guide.pdf|Voicemail Guide]]
#Polycom Phone Information
#*[[Media:Vantage_Polycom_MAXcore_Quick_Start_Guide.pdf|MAX Core Phone Quick Start Guide]]
#*[[Media:Vantage_Polycom_Voicemail_Guide.pdf|Voicemail Guide]]
#Configuration Guides for provisioning phones:
#:https://resource.vantage.com/display/C3/Knowledge+Articles
#Quickstart Guides for all the phones:
#:https://resource.vantage.com/display/C3/Phone+Quick+Start+Guides

Vantage User Guides

2018-09-11T14:45:04Z

Client Admin:

[[Category:Telephony]]
[[Category:Vantage]]
[[Category:UserGuide]]
=== The following are guides for the Vantage C3 - MAX Core Platform ===
#Web Portal - https://c3voice.vantageip.com
#*[[Media:Vantage_Web_User_Guide.pdf|Vantage Web User Guide]]
#[[Media:Vantage_Voicemail_Menu_User_Guide.pdf|Voicemail Menu User Guide]]
#Cisco Phone Information
#*[[Media:Vantage_Cisco_Phone_MAXcore_Quick_Start_Guide.pdf|MAX Core Phone Quick Start Guide]]
#*[[Media:Vantage_Cisco_Voicemail_Guide.pdf|Voicemail Guide]]
#Polycom Phone Information
#*[[Media:Vantage_Polycom_MAXcore_Quick_Start_Guide.pdf|MAX Core Phone Quick Start Guide]]
#*[[Media:Vantage_Polycom_Voicemail_Guide.pdf|Voicemail Guide]]
#Quickstart Guides for all the phones:
#:https://resource.vantage.com/display/C3/Phone+Quick+Start+Guides

Category:Vantage

2018-08-14T18:24:18Z

Client Admin: Created page with "This is the Vantage Category page."

This is the Vantage Category page.

Category:Office365

2018-08-14T18:23:53Z

Client Admin: Created page with "This is the Office 365 Category page."

This is the Office 365 Category page.

Category:OpenVPN

2018-08-14T18:23:25Z

Client Admin: Created page with "This is the Open VPN Category page."

This is the Open VPN Category page.

Category:UserGuide

2018-08-14T18:22:02Z

Client Admin: Created page with "This is the User Guide Category page."

This is the User Guide Category page.

Category:OpenNebula

2018-08-14T18:21:18Z

Client Admin: Created page with "This is the Open Nebula Category page."

This is the Open Nebula Category page.

Category:Telephony

2018-08-14T18:19:34Z

Client Admin: Created page with "This is the Telephony Category page."

This is the Telephony Category page.

Category:UCS

2018-08-14T18:19:16Z

Client Admin: Created page with "This is the Unified Communications Category page."

This is the Unified Communications Category page.

Category:CloudInfrastructure

2018-08-14T18:18:47Z

Client Admin: Created page with "This is the Cloud Infrastructure Category page."

This is the Cloud Infrastructure Category page.

Category:How To

2018-08-14T18:17:54Z

Client Admin: Created page with "This the How To Category page. It contains all of the How To articles."

This the How To Category page. It contains all of the How To articles.

How To Resize An Image In OpenNebula

2018-08-13T16:39:46Z

Client Admin:

[[Category:OpenNebula]]
[[Category:How To]]
[[Category:CloudInfrastructure]]
#Open OpenNebula Sunstone and [[OpenNebula_Administrative_Functions | login]].
#Go to “Storage” in the left menu and click on “Images” in the drop down menu.
#:[[File:Img_menu.png|thumb|none|upright=0.5]]
#Click on the image you want to resize, and make sure is not persistent in "Info" tab.
#:[[File:Img_information.png|thumb|none|upright=1.5]]
#[[How_To_Manage_OpenNebula_Virtual_Machines#Instantiate_a_Virtual_Machine | Instantiate a Virtual Machine ]] attaching your image as Storage Disk.
#A flyout will appear. In the right side, under "Disks", you can resize the image. Once done, click Instantiate button.
#:[[File:disk_resize.png|thumb|none|upright=2]]
#As soon as the VM is running, [[How_To_Manage_OpenNebula_Virtual_Machines#Poweroff | Power it Off]].
#Click on your VM and Go to "Storage" tab.
#:[[File:storage_tab_resize.png|thumb|none|upright=2]]
#Click "Save As" Action next to the disk image information. Specify an Image name and click "Save As".
#:[[File:saveas_disk_resize.png|thumb|none|upright=2]]
#Go to “Storage” in the left menu and click on “Images” in the drop down menu. You should see the new image with a resized disk.
#:While OpenNebula is saving the image, it will be in "LOCKED" state. This image cannot be used until the state changes to "READY".
#:[[File:list_resized.png|thumb|none|upright=2.5]]
#:[[File:disk_info_resized.png|thumb|none|upright=1.3]]
#If the image before the resize process was persistent after the resize change it back from no persistent to persistent. Otherwise leave it as non persistent.
#If the resized image will be used for a existing template change it in the VM template section/storage

How To Resize An Image In OpenNebula

2018-08-13T16:38:46Z

Client Admin:

[[Category:OpenNebula]]
[[Category:How To]]
[[Category:CloudInfrastructure]]
#Open OpenNebula Sunstone and [[OpenNebula_Administrative_Functions | login]].
#Go to “Storage” in the left menu and click on “Images” in the drop down menu.
#:[[File:Img_menu.png|thumb|none|upright=0.5]]
#Click on the image you want to resize, and make sure is not persistent in "Info" tab.
#:[[File:Img_information.png|thumb|none|upright=1.5]]
#[[How_To_Manage_OpenNebula_Virtual_Machines#Instantiate_a_Virtual_Machine | Instantiate a Virtual Machine ]] attaching your image as Storage Disk (See [[OpenNebula_Template | How modify a VM Template]]).
#A flyout will appear. In the right side, under "Disks", you can resize the image. Once done, click Instantiate button.
#:[[File:disk_resize.png|thumb|none|upright=2]]
#As soon as the VM is running, [[How_To_Manage_OpenNebula_Virtual_Machines#Poweroff | Power it Off]].
#Click on your VM and Go to "Storage" tab.
#:[[File:storage_tab_resize.png|thumb|none|upright=2]]
#Click "Save As" Action next to the disk image information.Specify an Image name and click "Save As".
#:[[File:saveas_disk_resize.png|thumb|none|upright=2]]
#Go to “Storage” in the left menu and click on “Images” in the drop down menu. You should see the new image with a resized disk.
#:While OpenNebula is saving the image, it will be in "LOCKED" state. This image cannot be used until the state changes to "READY".
#:[[File:list_resized.png|thumb|none|upright=2.5]]
#:[[File:disk_info_resized.png|thumb|none|upright=1.3]]
#If the image before the resize process was persistent after the resize change it back from no persistent to persistent. Otherwise leave it as non persistent.
#If the resized image will be used for a existing template change it in the VM template section/storage

How To Use OpenNebula AppMarket

2018-08-13T16:33:44Z

Client Admin:

[[Category:OpenNebula]]
[[Category:How To]]
[[Category:CloudInfrastructure]]
#Open OpenNebula Sunstone and [[OpenNebula_Administrative_Functions | login]].
#Go to “Storage” in the left menu and click on “Apps” in the drop down menu.
#:[[File:Appmarket_menu.png|thumb|none|upright=0.5]]
#A list of all available appliances will appear.
#:[[File:appmarket page.png|thumb|none|900px]]
#: 
#:Every appliance contains an image and an example template. Click on one appliance to view more details.
#:[[File:Appmarket_info.png|thumb|none|upright=2.5]]
#:[[File:Appmarket_info1.png|thumb|none|upright=2.5]]
#: 
#To import an appliance, select it and click “Import” button.
#:[[File:appmarket select.png|thumb|none|900px]]
#: 
#:A flyout will appear asking for a new image and new template name. '''It is very important to change the proposed image and template names, otherwise the import may fail because an image or a template with the same name may already exist.'''
#:[[File:appmarket_import.png|thumb|none|900px]]
#: 
#Go to “Virtual Resources” in the left menu to see the image and the template just imported. '''Remember to adjust the template to your preferences before instantiating a new virtual machine.'''
#:[[File:appmarket_templates.png|thumb|none|900px]]
#:While OpenNebula is importing the image, it will be in "LOCKED" state. This image cannot be used until the state changes to "READY".
#:[[File:Appmarket_images.png|thumb|none|900px]]

Syncing Shared Files in OneDrive for Business

2018-01-24T13:56:11Z

Client Admin:

[[Category:UCS]]
[[Category:UserGuide]]
[[Category:How To]]
[[Category:Office365]]

== Pre-requisites ==

The OneDrive Desktop app is installed on your local machine.

You can download the OneDrive Desktop app [https://onedrive.live.com/about/en-us/download/ here].

== Instructions ==

* Connect to your [https://login.microsoftonline.com Office 365 account] via a web browser,
* Click on the OneDrive icon to start OneDrive:

[[File:od_1.png|500px|border]]

* A similar screen will appear

[[File:od_2.png|400px|border]]

* If you only see your files and no menu on the left-hand side, click on the top left corner of the window to get the menu. (You can also enlarge the size of your browser window to make the left-hand menu appear.)

[[File:od_3.png|250px|border]]

* In the menu, click on "Shared with me". You will see the list of files and folders which are shared with you. See the following example:

[[File:od_4.png|600px|border]]

* Click on the folder to see its contents:

[[File:od_5.png|600px|border]]

* And on the menu above, click on "Sync". Depending on the window's size, the option may be hidden, so click on the "..." to make it appear:

[[File:od_6.png|600px|border]]

* You may receive some warnings. Click on "Allow" for all warnings.

[[File:od_7.png|400px|border]]

[[File:od_8.png|400px|border]]

* The OneDrive Desktop app will then open and a similar window will appear:

[[File:od_9.png|600px|border]]

* Select all the files and folders you want to sync (they are all selected per default) and click on "Next" to continue.

* In your local user directory, you will see a new directory structure, where the files and folders have been synced.

[[File:od_10.png|700px|border]]

Email Setup

2017-11-21T22:54:08Z

Client Admin:

[[Category:UCS]]
[[Category:UserGuide]]
[[Category:How To]]

In the following wiki article you will find Email Server Information necessary to access the webmail as well as setup your local email client:

Please replace, "abc.com" with your domain name (i.e. if your domain was cipherspace.com, please replace all instances of abc.com with cipherspace.com"

For all access, you will need to know the below information:

* Username = your full email address (i.e. xyz@abc.com)
* Password = Your email password

== Webmail ==
* URL: '''https://mail.abc.com/'''

== Incoming eMail ==
* Server: '''mail.abc.com'''
* Protocol / Server Type: '''IMAP''' or '''IMAP4'''
* Port '''143''' with '''StartTLS''' or
* Port '''993''' with '''SSL'''
* username/password see above

== Outgoing eMail ==
* Server: '''mail.abc.com'''
* Protocol: '''SMTP'''
* Port '''587''' with '''StartTLS'''
* username/password see above
* Server requires Authentication (you can either select using incoming server settings or enter in your username and password)

== How to Change Your Password ==
* Login to Webmail (see above for url)
* If using the basic skin (default look), Click on the "Settings" Link.
*:[[File:Email_Setup_1.png|700px]]
* Then Click "Password"
*:[[File:Email_Setup_2.png|700px]]
* Enter in your current password, new password, and re-enter password and click Modify
*:[[File:Email_Setup_3.png|700px]]

File:Email Setup 3.png

2017-11-21T22:50:26Z

Client Admin:

File:Email Setup 2.png

2017-11-21T22:49:59Z

Client Admin:

File:Email Setup 1.png

2017-11-21T22:49:16Z

Client Admin:

Email Setup

2017-11-21T22:38:19Z

Client Admin:

[[Category:UCS]]
[[Category:UserGuide]]
[[Category:How To]]

In the following wiki article you will find Email Server Information necessary to access the webmail as well as setup your local email client:

Please replace, "abc.com" with your domain name (i.e. if your domain was cipherspace.com, please replace all instances of abc.com with cipherspace.com"

For all access, you will need to know the below information:

* Username = your full email address (i.e. xyz@abc.com)
* Password = Your email password

== Webmail ==
* URL: '''https://mail.abc.com/'''

== Incoming eMail ==
* Server: '''mail.abc.com'''
* Protocol / Server Type: '''IMAP''' or '''IMAP4'''
* Port '''143''' with '''StartTLS''' or
* Port '''993''' with '''SSL'''
* username/password see above

== Outgoing eMail ==
* Server: '''mail.abc.com'''
* Protocol: '''SMTP'''
* Port '''587''' with '''StartTLS'''
* username/password see above
* Server requires Authentication (you can either select using incoming server settings or enter in your username and password)

== How to Change Your Password ==
* Login to Webmail (see above for url)
* If using the basic skin (default look), Click on the "Settings" Link.
* Then Click "Password"
* Enter in your current password, new password, and re-enter password and click Modify

MediaWiki:Sidebar

2017-11-21T22:35:39Z

Client Admin:

Email Setup

2017-11-21T22:33:48Z

Client Admin:

Email Setup

2017-11-21T22:32:07Z

Client Admin: Created page with "Category:UCS Category:UserGuide In the following wiki article you will find Email Server Information necessary to access the webmail as well as setup your local email..."

[[Category:UCS]]
[[Category:UserGuide]]

In the following wiki article you will find Email Server Information necessary to access the webmail as well as setup your local email client:

Please replace, "abc.com" with your domain name (i.e. if your domain was cipherspace.com, please replace all instances of abc.com with cipherspace.com"

For all access, you will need to know the below information:

* Username = your full email address (i.e. xyz@abc.com)
* Password = Your email password

== Webmail ==
* URL: '''https://mail.abc.com/'''

== Incoming eMail ==
* Server: '''mail.abc.com'''
* Protocol / Server Type: '''IMAP''' or '''IMAP4'''
* Port '''143''' with '''StartTLS''' or
* Port '''993''' with '''SSL'''
* username/password see above

== Outgoing eMail ==
* Server: '''mail.abc.com'''
* Protocol: '''SMTP'''
* Port '''587''' with '''StartTLS'''
* username/password see above
* Server requires Authentication (you can either select using incoming server settings or enter in your username and password)

CipherSpace Support Wiki

2017-03-20T22:18:33Z

Client Admin:

'''Welcome to the CipherSpace Support Wiki'''

You will find '''How To''' articles on Cloud Infrastructure, Telephony, RequestTracker and more...

MediaWiki:Sidebar

2017-03-20T22:17:40Z

Client Admin:

MediaWiki:Sidebar

2017-03-20T22:16:27Z

Client Admin:

OpenVPN Guide Windows

2017-03-20T22:15:23Z

Client Admin:

[[Category:OpenVPN]]
[[Category:How To]]
[[Category:CloudInfrastructure]]

==Introduction==

This guide will explain how to install the OpenVPN client on your PC as well as how to execute it in order to access your virtual machines that aren’t accessible from the Internet.

This guide assumes that you have some experience with Windows and that you have administrative rights on the computer on which the client will be installed.

N.B.: This guide is for a Windows 7 operating system. For other Windows versions, the layout may be different, but the principles remain the same.

== OpenVPN Client Installation==

The OpenVPN Client Installer can be found at https://openvpn.net/index.php/open-source/downloads.html. Make sure to download the version corresponding to your Windows version as well as architecture (32-bit or 64-bit).

Once the download is finished, run the installer. You may get the following warning:

[[File:OpenVPN_Win_Install_1.png|400px]]

Click on “Yes” to continue. The following screen appears:

[[File:OpenVPN_Win_Install_2.png|450px]]

Click on “Next >”. The License Agreement screen is displayed:

[[File:OpenVPN_Win_Install_3.png|450px]]

Click on “I Agree” to continue.

The next screen asks you to choose components to install:

[[File:OpenVPN_Win_Install_4.png|450px]]

Leave the chosen components unchanged and click on “Next >”.

The next screen asks you for the installation location:

[[File:OpenVPN_Win_Install_5.png|450px]]

This guide assumes that you will install the OpenVPN client under <code>C:\Program Files\OpenVPN</code>, as it is going to refer to it later on. If you want to change the install location, make sure to remember it afterwards.

Click on “Install”. The installation starts:

[[File:OpenVPN_Win_Install_6.png|450px]]

The installer may ask you to confirm the installation of the TAP Virtual Ethernet Adapter:

[[File:OpenVPN_Win_Install_7.png|450px]]

Click on “Install”.

The installation continues:

[[File:OpenVPN_Win_Install_8.png|450px]]

Click on “Next >” to finish the installation:

[[File:OpenVPN_Win_Install_9.png|450px]]

Deselect the “Show Readme” and DO NOT select the “Start OpenVPN GUI” as there are a few more steps to be performed beforehand. Click on “Finish”.

==Configuration File Installation==

At this point, install (copy) the configuration file we sent you into the directory <code>C:\Program Files\OpenVPN\config</code>:

[[File:OpenVPN_Win_Config_1.png|600px]]

When installing the file, you may get the following warning:

[[File:OpenVPN_Win_Config_2.png|400px]]

Click on “Continue”:

[[File:OpenVPN_Win_Config_3.png|600px]]

Before you can use the OpenVPN client, you must make sure that the program will always be run as an administrator.

Navigate to the directory <code>C:\Program Files\OpenVPN\bin</code>:

[[File:OpenVPN_Win_Config_4.png|600px]]

Right-click on the file “openvpn-gui.exe”:

[[File:OpenVPN_Win_Config_5.png|600px]]

And select “Properties”.

[[File:OpenVPN_Win_Config_6.png|350px]]

Click on the tab “Compatibility”:

[[File:OpenVPN_Win_Config_7.png|350px]]

And under “Privilege Level” check the box “Run this program as an administrator”. If there are other users who need to access the OpenVPN client, click on “Change settings for all users”, otherwise click on “OK”.

You are now ready to run the OpenVPN client.

==Running OpenVPN==
(including for the first time)

Double-click on the “OpenVPN GUI” icon on your desktop:

[[File:OpenVPN_Win_Run_1.png|37px]]

You may get the following warning:

[[File:OpenVPN_Win_Run_2.png|400px]]

Click on “Yes” to continue.

You should now see the following icon at the bottom right of your screen:

[[File:OpenVPN_Win_Run_3.png|37px]]

If you don’t, follow the instructions described [[#Make the OpenVPN Icon Visible|here]]

When you can see the OpenVPN GUI icon ([[File:OpenVPN_Win_Run_11.png|20px]]), double-click on it and the connection will start.

[[File:OpenVPN_Win_Run_7.png]]

Type the password you have received from us in the “Enter Password” and click on “OK”.

The connection continues.

[[File:OpenVPN_Win_Run_8.png]]

Then the above window closes and you will see a similar message:

[[File:OpenVPN_Win_Run_9.png]]

And the OpenVPN icon is now green.

You should now test the VPN connection by opening a command window, (Click on “Start” then under “Search programs and files” type “cmd”) and type “ping xxx.xxx.xxx.xxx”, where xxx.xxx.xxx.xxx is the IP address of a virtual machine, which is not published on the Internet. If you cannot access the virtual machine, please contact us.

To disconnect the VPN connection, double-click on the OpenVPN icon (green):

[[File:OpenVPN_Win_Run_10.png]]

And click on “Disconnect”.

===Make the OpenVPN Icon Visible===

Open the “Control Panel”:

[[File:OpenVPN_Win_Run_4.png]]

In the “Search Control Panel” field, type “Notification”:

[[File:OpenVPN_Win_Run_5.png]]

And click on “Notification Area Icons”. Scroll until you find the “OpenVPN GUI for Windows” icon:

[[File:OpenVPN_Win_Run_6.png]]

Under “Behaviors”, select “Show icon and notifications” and then "OK". The OpenVPN icon will be now visible at the bottom right of your screen.

OpenVPN Guide OSX

2017-03-20T22:15:07Z

Client Admin:

[[Category:OpenVPN]]
[[Category:How To]]
[[Category:CloudInfrastructure]]

== Introduction ==
This guide will explain how to connect to your virtual machines, which aren’t accessible from the Internet, using the OpenVPN protocol. It will explain how to install Tunnelblick (OpenVPN client for Mac) on your mac as well as how to use it.

This guide assumes that you have some experience with OSX and that you have administrative rights on the computer on which Tunnelblick will be installed.

==Installation==
Go to https://tunnelblick.net:

[[File:Tunnelblick_net.png|600px]]

And click on “Download Latest Stable Release”. The Tunnelblick disk image file (a “.dmg” file) will be stored in your downloads folder.

Open the downloaded disk image file (which mounts the disk image):

[[File:Tunnelblick_Install_1.png|500px]]

And double-click the “Tunnelblick” icon (it may be labeled “Tunnelblick.app”):

You may get the following warning:

[[File:Tunnelblick_Install_2.png|600px]]

Click on “Open” to continue.

The following screen appears:

[[File:Tunnelblick_Install_3.png|500px]]

Type your password and click on “OK”.

[[File:Tunnelblick_Install_4.png|500px]]

Click on “Launch”:

[[File:Tunnelblick_Launch_1.png|700px]]

Click on “I have configuration files”. You will see the following screen:

[[File:Tunnelblick_Launch_2.png|600px]]

Before you can click on “OK”, the following screen appears:

[[File:Tunnelblick_Launch_3.png|700px]]

Click on “Do not check for a change”. The next screen appears:

[[File:Tunnelblick_Launch_4.png|500px]]

Click on “Check Automatically”.

Now you can click on OK on the previous screen. The Tunnelblick installation is complete.

==Configuration==

To install the necessary configuration files, open the folder where you have stored the files we sent you:

[[File:Tunnelblick_Conf_1.png|700px]]

And double-click on the “.ovpn” file. The following screen appears:

[[File:Tunnelblick_Conf_2.png|500px]]

If you have several users on this machine, who need to access the virtual machines, click on “All Users”, otherwise click on “Only Me”:

[[File:Tunnelblick_Conf_3.png|500px]]

Type your password and click on OK:

[[File:Tunnelblick_Conf_4.png|600px]]

Click on OK. The configuration file has been copied from your folder into Tunnelblick and are not needed anymore.

==Running Tunnelblick==

If Tunnelblick isn’t already launched, double-click on the “Tunnelblick” app located in your “Applications” folder. The following icon appears on the top right of your screen:

[[File:Tunnelblick_Run_1.png|border]]

Put the mouse pointer on the icon (without clicking). The connection window appears:

[[File:Tunnelblick_Run_2.png|300px]]

And click on “Connect”:

[[File:Tunnelblick_Run_3.png|500px]]

Type the password we sent you for the corresponding configuration file. If you want, you can store the password in your Keychain by checking the “Save in Keychain” box, so you don’t have to type it each time you use Tunnelblick. Click on OK. You will see the status changing until it says “Connected” and the connection window disappears. The Tunnelblick icon will be as follows:

[[File:Tunnelblick_Run_4.png|border]]

If you cannot get connected, please contact us.

You may get the following warning:

[[File:Tunnelblick_Run_5.png|500px]]

If you do, check the “Do not check for IP address changes” box and click on OK.

Another method to connect is to click on the Tunnelblick icon ([[File:Tunnelblick_Run_1.png|border|25px]] ):

[[File:Tunnelblick_Run_6.png|200px]]

And in the drop-down menu select “Connect <Customer-User>” (where <Customer-User> corresponds to your VPN configuration).

You should now test the VPN connection by opening a terminal window, (Click on the [[File:Tunnelblick_Run_7.png|border|20px]] icon on the top right of your screen, type “Terminal” and select the application) and type “ping xxx.xxx.xxx.xxx”, where xxx.xxx.xxx.xxx is the IP address of a virtual machine, which is not published on the Internet. If you cannot access the virtual machine, please contact us.

To disconnect from the VPN, put the mouse pointer on the Tunnelblick icon ([[File:Tunnelblick_Run_4.png|25px]]) (without clicking). The connection window appears:

[[File:Tunnelblick_Run_8.png|300px]]

And click on “Disconnect”.

You can also click on the Tunnelblick icon ([[File:Tunnelblick_Run_4.png|25px]]):

[[File:Tunnelblick_Run_9.png|200px]]

And select “Disconnect <Customer-User>” (where <Customer-User> corresponds to your VPN configuration).

OpenNebula Templates

2017-03-20T22:14:54Z

Client Admin:

[[Category:OpenNebula]]
[[Category:How To]]
[[Category:CloudInfrastructure]]

__TOC__

==Create a new Template==
#[[OpenNebula_Administrative_Functions | Log into OpenNebula Sunstone]].
#Go to “Templates” in the left menu and click on “VMs” in the drop down menu.
#:[[File:Templates_menu.png|thumb|none|upright=0.5]]
#: 
#Click on the "+" button to create a new template. See below.
#Click "Create" button.
===Configure Template===
The basic procedure is as follows:
* Add a template name in "General" menu.
[[File:Template_name.png|thumb|none|upright=2]]

* In "Storage" tab, choose a storage disk. If your template requires more disks, click on "Add another disk" and select it accordingly.
[[File:Template_storage.png|thumb|none|upright=2.5]]

* In "Network" tab, select a Virtual Network, which the instantiated virtual machine(s) will be connected to. If your template requires more network interfaces, click on "Add another nic" and select it accordingly.
[[File:Template_interface.png|thumb|none|upright=2.5]]

* If a fixed ip address is required, click on "Advanced Option" button and type the fixed address in the "IP" field.
[[File:Template_adv_net_opt.png|thumb|none|upright=2.0]]

* In "Input/Output" menu, select "VNC" Graphics and tick "Generate Random Password".
[[File:Template_vnc.png|thumb|none|upright=1.5]]

* In "Context" menu, add SSH keys in the "Public Key" field and make sure that "Add SSH contextualization" and "Add Network contextualization" are ticked.
[[File:Template_context.png|thumb|none|upright=2.5]]

* In "Context" menu, you can define a root password under "Custom Vars". Add the following entries: KEY= ROOT_PASSWORD, VALUE= "password" and press "Add" button.
[[File:Template_rootpwd.png|thumb|none|upright=2.5]]

==Update a Template==
#[[OpenNebula_Administrative_Functions | Log into OpenNebula Sunstone]].
#Go to “Templates” in the left menu and click on “VMs” in the drop down menu.
#:[[File:Templates_menu.png|thumb|none|upright=0.5]]
#: 
#Click on the template and press "Update" button.
#Make the necessary changes and press the green "Update" button to save.

OpenNebula Attach Additional Storage To A Virtual Machine

2017-03-20T22:14:39Z

Client Admin:

[[Category:OpenNebula]]
[[Category:How To]]
[[Category:CloudInfrastructure]]

#[[OpenNebula_Administrative_Functions | Log into OpenNebula Sunstone]].
# You can attach and existing disk image or [[How To Create a New Disk Image in OpenNebula | you can create a new one.]]
# Go to “Instances” in the left menu and click on “VMs” in the drop down menu.
#:[[File:VM_menu.png|thumb|none|upright=0.5]]
#: 
# Click on the virtual machine you need to add the storage and go to "Storage" menu.
#:[[File:vm_storage_menu.png|thumb|none|upright=2.5]]
#: 
# Click on the "Attach Disk" button. A flyout will appear where you can select the image you want to attach.
#:[[File:vm_attach_disk.png|thumb|none|upright=2.5]]
#: 
# Click on "Advanced Option" and select "none" as cache option.
#:'''Warning: without that option, a VM cannot be live migrated. In case the host (server on which the VM is running on) needs to be taken out for maintenance your VM will have to be shutdown.'''
#:[[File:Attach_cache.png|thumb|none|upright=1.5]]
#: 
# Click on the "Attach" button to add the storage to the Virtual Machine.
#: 
# If you want to have the storage attached to the virtual machine next time it is instantiated, you must update the machine's template accordingly. See [[OpenNebula_Templates#Configure Template| Configure Template]].

OpenNebula Administrative Functions

2017-03-20T22:14:18Z

Client Admin:

[[Category:OpenNebula]]
[[Category:How To]]
[[Category:CloudInfrastructure]]
== Log into OpenNebula ==

As a CipherSpace vDC customer, you have received a website address as well as your username and temporary password.

Type in your browser the website address. You should see the following screen:

[[File:one_admin_log1.png|240px]]

Type in your username and password and click on “Login”:

[[File:one_admin_log2.png|240px]]

You will then arrive on the Dashboard screen, from where you will then be able to access the various OpenNebula functions.

[[File:one_admin_log3.png|border|900px]]

== Password Change ==

To change your temporary password, click on your username at the top-right of the dashboard screen :

[[File:one_admin_pwch1.png|border|240px]]

And then click on “Settings”.

The Configuration screen appears:

[[File:one_admin_pwch3.png|border|800px]]

Press [[File:expand_button.png|20px]] button to update password:

[[File:one_admin_pwch4.png|border|500px]]

The Update Password screen appears:

[[File:one_admin_pwch5.png|border|400px]]

Type and confirm your new password and click on “Change”. You can now log in using your new password.

== View Change ==

A vDC user has access to two different user interfaces: the “User” view and the “Cloud” view. The “User” view allows the user to access the more advanced functionalities of OpenNebula. The “Cloud” view is a simplified user interface, which allows a user to deploy virtual machines (VMs) and to monitor and manage the running VMs as well as other limited functionalities.

To change to the “Cloud” view, start from the “Configuration” Screen (see [[#Password Change|Password Change]]), and search View settings:

[[File:one_admin_pwch3.png|border|800px]]

Press [[File:expand_button.png|20px]] button

[[File:one_admin_viewch2.png|border|400px]]

And select the “cloud” view:

[[File:one_admin_viewch6.png|border|400px]]

You are now in the cloud view:

[[File:one_admin_viewch3.png|border|600px]]

To go back to the “User” view, click on your username at the top-right of the screen and then click on “Settings”:

[[File:one_admin_viewch4.png|border|600px]]

Then click on “Change view”:

[[File:one_admin_viewch5.png|border|450px]]

Click on “cloud”, then select “user” and finish by clicking on “Update view”.

[[File:one_admin_viewch7.png|border|450px]]

You are now back to the “User” view.

== View Quotas ==

You can see how much of your vDC is used either in the Configuration screen by clicking on “Quotas”:

[[File:one_admin_vq1.png|border|630px]]

Or in the Configuration screen by clicking on “Group Quotas”:

[[File:one_admin_vq2.png|border|600px]]

== Accounting ==

You can see how many resources you have been using the “Accounting” function. You can access it either from the Dashboard (under the “Quotas” information) or in the Configuration screen by clicking on “Accounting”:

[[File:one_admin_acc1.png|border|700px]]

Select a time period and click on “Get Accounting”. A similar screen appears with the corresponding information.

[[File:one_admin_acc2.png|border|800px]]

By clicking on “Accounting Tables”, you can see your data in tabular form.

How To Upload ISOs On OpenNebula

2017-03-20T22:13:49Z

Client Admin:

[[Category:OpenNebula]]
[[Category:How To]]
[[Category:CloudInfrastructure]]
__TOC__

==Upload an ISO using an URL==

#[[OpenNebula_Administrative_Functions | Log into OpenNebula Sunstone]].
#Go to “Storage” in the left menu and click on “Images” in the drop down menu.
#:[[File:Img_menu.png|thumb|none|upright=0.5]]
#: 
#Click on the "+" button to add a new image.
#:[[File:Add_iso_path_options.png|thumb|none|upright=2.5]]
#:The following parameters must be specified:
#:* Name = "your image name"
#:* Type = Readonly CD-ROM
#:* Set Image Location to "Path in OpenNebula server"
#:* Path = "The URL of the ISO image"
#: 
#Open "Advanced Options".
#:[[File:New_img_advanced_options.png|thumb|none|upright=2.5]]
#:Fill in the following fields:
#:* BUS = Parallel ATA (IDE)
#:* Adjust "Image mapping driver" if required
#: 
#Click "Create" button.

==Upload a local ISO image==

#[[OpenNebula_Administrative_Functions | Log into OpenNebula Sunstone]].
#Go to “Storage” in the left menu and click on “Images” in the drop down menu.
#:[[File:Img_menu.png|thumb|none|upright=0.5]]
#: 
#Click on the "+" button to add a new image.
#:[[File:Add_iso_upload_options.png|thumb|none|upright=2.5]]
#:The following parameters must be specified:
#:* Name = "your image name"
#:* Type = Readonly CD-ROM
#:* Set Image Location to "Upload"
#:* Click "Browse.." button and select the image on your local PC
#: 
#Open "Advanced Options".
#:[[File:New_img_advanced_options.png|thumb|none|upright=2.5]]
#:Fill in the following fields:
#:* BUS = Parallel ATA (IDE)
#:* Adjust "Image mapping driver" if required
#: 
#Click "Create" button.

How To Use OpenNebula AppMarket

2017-03-20T22:13:20Z

Client Admin:

[[Category:OpenNebula]]
[[Category:How To]]
[[Category:CloudInfrastructure]]
#Open OpenNebula Sunstone and [[OpenNebula_Administrative_Functions | login]].
#Go to “Storage” in the left menu and click on “Apps” in the drop down menu.
#:[[File:Appmarket_menu.png|thumb|none|upright=0.5]]
#A list of all available appliances will appear.
#:[[File:appmarket page.png|thumb|none|900px]]
#: 
#:Every appliance contains an image and an example template. Click on one appliance to view more details.
#:[[File:Appmarket_info.png|thumb|none|upright=2.5]]
#:[[File:Appmarket_info1.png|thumb|none|upright=2.5]]
#: 
#To import an appliance, select it and click “Import” button.
#:[[File:appmarket select.png|thumb|none|900px]]
#: 
#:A flyout will appear asking for a new image and new template name. '''It is very important to change the proposed image and template names, otherwise the import may fail because an image or a template with the same name may already exist.'''
#:[[File:appmarket_import.png|thumb|none|900px]]
#: 
#Go to “Virtual Resources” in the left menu to see the image and the template just imported. '''Remember to [[How To Create OpenNebula Template | adjust]] the template to your preferences before instantiating a new virtual machine.'''
#:[[File:appmarket_templates.png|thumb|none|900px]]
#:While OpenNebula is importing the image, it will be in "LOCKED" state. This image cannot be used until the state changes to "READY".
#:[[File:Appmarket_images.png|thumb|none|900px]]

How To Manage OpenNebula Virtual Machines

2017-03-20T22:13:02Z

Client Admin:

[[Category:OpenNebula]]
[[Category:How To]]
[[Category:CloudInfrastructure]]
==Look at running Virtual Machines==

#[[OpenNebula_Administrative_Functions | Log into OpenNebula Sunstone]].
#Go to “Instances” in the left menu and click on “VMs” in the drop down menu.
#:[[File:VM_menu.png|thumb|none|upright=0.5]]
#: 
#:A list of all instantiated virtual machines will apear. Some basic information is showed.
#:[[File:vm_list.png|thumb|none|upright=2.5]]
#: 
#:Click on a virtual machine to see all its configuration.
#:[[File:vm_detail.png|thumb|none|upright=2.5]]

==Open VNC console==
#[[OpenNebula_Administrative_Functions | Log into OpenNebula Sunstone]].
#Go to “Instances” in the left menu and click on “VMs” in the drop down menu.
#:[[File:VM_menu.png|thumb|none|upright=0.5]]
#: 
#Select the virtual machine you want to access and click on the "VNC" button.
#:[[File:vnc_button.png|thumb|none|upright=1]]
#: 
#:A flyout will appear with the virtual machine console. To move the console in a separate browser window or tab press [[File:expand_button.png|20px]] button.
#:[[File:vnc_view.png|thumb|none|900px]]

==Instantiate a Virtual Machine==

#Go to “Templates” in the left menu and click on “Vms” in the drop down menu.
#:[[File:Templates_menu.png|thumb|none|upright=0.5]]
#[[OpenNebula_Templates | Create or modify a template]]. This template will then be used to instantiate a virtual machine on which the operative system will be install.
#Click on the template just created and press "Instantiate" button to power on the virtual machine.
#:[[File:vm_instantiate.png|thumb|none|upright=1.2]]

==Terminate Virtual Machine Instances==
You can terminate a running instance with the following operations:
*'''terminate''': Gracefully shuts down a running VM, sending the ACPI signal. Once the VM is shut down, the host is cleaned, and persistent disk(s) will be moved to the associated datastore. If after a given time the VM is still running (e.g. guest ignoring ACPI signals), OpenNebula will return the VM to the RUNNING state.
*'''terminate --hard''': Same as above but the VM is immediately destroyed. Use this action instead of terminate when the VM doesn’t have ACPI support.

All the above operations free the resources used by the VM.
===Terminate===
#[[OpenNebula_Administrative_Functions | Log into OpenNebula Sunstone]].
#Go to “Instances” in the left menu and click on “VMs” in the drop down menu.
#:[[File:VM_menu.png|thumb|none|upright=0.5]]
#: 
#Click on the virtual machine, press the red button with the bin and click "Terminate".
#:[[File:vm_shutdown.png|thumb|none|upright=1.5]]
#:If more than one virtual machine need to be shut down, select each of them, press the red button with the bin and click "Terminate".
#:[[File:vm_multishutdown.png|thumb|none|upright=2.5]]
===Terminate Hard===
#[[OpenNebula_Administrative_Functions | Log into OpenNebula Sunstone]].
#Go to “Instances” in the left menu and click on “VMs” in the drop down menu.
#:[[File:VM_menu.png|thumb|none|upright=0.5]]
#: 
#Click on the virtual machine, press the red button with the bin and click "Terminate hard".
#:[[File:vm_shutdown_hard.png|thumb|none|upright=1.5]]
#:If more than one virtual machine need to be shut down, select each of them, press the red button with the bin and click "Terminate Hard".
#:[[File:vm_multishutdown_hard.png|thumb|none|upright=2.5]]

==Pause Virtual Machine Instances==
'''Be aware that VMs, which are in some of the states below, may still occupy resources even though they are not actually running. Those resources will be accounted for and, based on your subscription plan, can be charged to you.'''

There are two different ways to temporarily stop the execution of a VM: short and long term pauses. A short term pause keeps all the VM resources allocated to the hosts so its resume its operation in the same hosts quickly. Use the following actions:
*'''suspend''': the VM state is saved in the running Host. When a suspended VM is resumed, it is immediately deployed in the same Host by restoring its saved state.
*'''poweroff''': Gracefully powers off a running VM by sending the ACPI signal. It is similar to suspend but without saving the VM state. When the VM is resumed it will boot immediately in the same Host.
*'''poweroff --hard''': Same as above but the VM is immediately powered off. Use this action when the VM doesn’t have ACPI support.

You can also plan a long term pause. The Host resources used by the VM are freed and the Host is cleaned. Any needed disk is saved in the system datastore. The following actions are useful if you want to preserve network and storage allocations (e.g. IPs, persistent disk images):
*'''undeploy''': Gracefully shuts down a running VM, sending the ACPI signal. The Virtual Machine disks are transferred back to the system datastore. When an undeployed VM is resumed, it is be moved to the pending state, and the scheduler will choose where to re-deploy it.
*'''undeploy --hard''': Same as above but the running VM is immediately destroyed.
*'''stop''': Same as undeploy but also the VM state is saved to later resume it.

When the VM is successfully paused you can resume its execution with:

*'''resume''': Resumes the execution of VMs in the stopped, suspended, undeployed and poweroff states.
===Suspend===
#[[OpenNebula_Administrative_Functions | Log into OpenNebula Sunstone]].
#Go to "Instances" in the left menu and click "VMs" in the drop down menu.
#:[[File:VM_menu.png|thumb|none|upright=0.5]]
#Click on the virtual machine, press the hold button and click "Suspend".
#:[[File:vm_suspend.png|thumb|none|upright=1.5]]
#:If more than one virtual machine need to be suspended, select each of them, press the hold button and click "Suspend".
#:[[File:Vm_multisuspend.png|thumb|none|upright=2.5]]
===Poweroff===
#[[OpenNebula_Administrative_Functions | Log into OpenNebula Sunstone]].
#Go to "Instances" in the left menu and click "VMs" in the drop down menu.
#:[[File:VM_menu.png|thumb|none|upright=0.5]]
#Click on the virtual machine, press the hold button and click "Poweroff".
#:[[File:vm_poweroff.png|thumb|none|upright=1.5]]
#:If more than one virtual machine need to be powered off, select each of them, press the hold button and click "Poweroff".
#:[[File:Vm_multipoweroff.png|thumb|none|upright=2.5]]
===Poweroff Hard===
#[[OpenNebula_Administrative_Functions | Log into OpenNebula Sunstone]].
#Go to "Instances" in the left menu and click "VMs" in the drop down menu.
#:[[File:VM_menu.png|thumb|none|upright=0.5]]
#Click on the virtual machine, press the hold button and click "Poweroff Hard".
#:[[File:vm_poweroff_hard.png|thumb|none|upright=1.5]]
#:If more than one virtual machine need to be powered off hard, select each of them, press the hold button and click "Poweroff Hard".
#:[[File:Vm_multipoweroff_hard.png|thumb|none|upright=2.5]]
===Undeploy===
#[[OpenNebula_Administrative_Functions | Log into OpenNebula Sunstone]].
#Go to "Instances" in the left menu and click "VMs" in the drop down menu.
#:[[File:VM_menu.png|thumb|none|upright=0.5]]
#Click on the virtual machine, press the stop button and click "Undeploy".
#:[[File:vm_undeploy.png|thumb|none|upright=1.5]]
#:If more than one virtual machine need to be undeployed, select each of them, press the stop button and click "Undeploy".
#:[[File:Vm_multiundeploy.png|thumb|none|upright=2.5]]
===Undeploy Hard===
#[[OpenNebula_Administrative_Functions | Log into OpenNebula Sunstone]].
#Go to "Instances" in the left menu and click "VMs" in the drop down menu.
#:[[File:VM_menu.png|thumb|none|upright=0.5]]
#Click on the virtual machine, press the stop button and click "Undeploy Hard".
#:[[File:vm_undeploy_hard.png|thumb|none|upright=1.5]]
#:If more than one virtual machine need to be undeployed hard, select each of them, press the stop button and click "Undeploy Hard".
#:[[File:Vm_multiundeploy_hard.png|thumb|none|upright=2.5]]
===Stop===
#[[OpenNebula_Administrative_Functions | Log into OpenNebula Sunstone]].
#Go to "Instances" in the left menu and click "VMs" in the drop down menu.
#:[[File:VM_menu.png|thumb|none|upright=0.5]]
#Click on the virtual machine, press the stop button and click "Stop".
#:[[File:vm_stop.png|thumb|none|upright=1.5]]
#:If more than one virtual machine need to be stopped, select each of them, press the stop button and click "Stop".
#:[[File:Vm_multistop.png|thumb|none|upright=2.5]]
===Resume===
#[[OpenNebula_Administrative_Functions | Log into OpenNebula Sunstone]].
#Go to "Instances" in the left menu and click "VMs" in the drop down menu.
#:[[File:VM_menu.png|thumb|none|upright=0.5]]
#Click on the virtual machine, press the play button to resume.
#:[[File:vm_resume.png|thumb|none|upright=1]]
#:If more than one virtual machine need to be resumed, select each of them, press the play button to resume.
#:[[File:Vm_multiresume.png|thumb|none|upright=2.5]]

How To Create a New Disk Image in OpenNebula

2017-03-20T22:12:22Z

Client Admin:

[[Category:OpenNebula]]
[[Category:How To]]
[[Category:CloudInfrastructure]]
#[[OpenNebula_Administrative_Functions | Log into OpenNebula Sunstone]].
#: 
#Go to “Storage” in the left menu and click on “Images” in the drop down menu.
#: [[File:Img_menu.png|thumb|none|upright=0.5]]
#: 
#Click the "+" button to add a new image.
#:[[File:Add_img_options.png|thumb|none|upright=3]]
#:The following parameters must be specified:
#:* Name = "your image name"
#:* Type = Generic storage datablock
#:* Tick "This image is persistent"
#:* Set Image Location to Empty disk image
#:* Size = "your required space in MB"
#: 
#Open "Advanced Options".
#:[[File:Datablock_adv_opt.png|thumb|none|upright=2.5]]
#:Fill in the following fields:
#:* BUS = Virtio
#:* Adjust "Image mapping driver" if required
#:
#: 
#Click on the "Create" button.

How To Build New OpenNebula Image Using ISO file

2017-03-20T22:11:57Z

Client Admin:

[[Category:OpenNebula]]
[[Category:How To]]
[[Category:CloudInfrastructure]]
#You can use an existing ISO image or you can [[How_To_Upload_ISOs_On_OpenNebula | upload a new one]].
#[[How_To_Create_OpenNebula_Datablock | Create an empty disk image where the operating system will be installed]].
#[[OpenNebula_Templates | Create or modify a template]]. This template will then be used to instantiate a virtual machine on which the operating system will be install.
#:* Add the ISO image and the empty image in "Storage" menu
#:* Configure the boot order in the template in "OS Booting" menu. Tick the ISO image and move it, using the arrows buttons, in the first position.
#:[[File:template_bootorder.png|thumb|none|upright=2]]
#: 
#Click on the template just created and press "Instantiate" button to power on the virtual machine.
#:[[File:vm_instantiate.png|thumb|none|upright=1.2]]
#: 
#Install the operating system.
#:Once the operating system is installed, [[How_To_Manage_OpenNebula_Virtual_Machines#Shutdown_a_Virtual_Machine | shutdown]] the virtual machine.
#Go to “Storage” in the left menu, click on “VMs” in the drop down menu and select the disk image on which you installed the operating system.
#Click on the [[File:Img_changetype.png|50px]] icon next to the "type" field and modify the image type from "DATABLOCK" to "OS".
#:[[File:img_toos.png|thumb|none|upright=1.5]]
#: 
#Go to “Templates” in the left menu, click on “VMs” in the drop down menu and select the template used to instantiate the virtual machine.
#:* Remove the uploaded ISO file in "Storage" menu
#: 
#:Now you can use this template to instantiate a VM.

Contextualization of Windows VMs

2017-03-20T22:11:41Z

Client Admin:

Contextualization of Linux VMs

2017-03-20T22:11:11Z

Client Admin:

[[Category:OpenNebula]]
[[Category:How To]]
[[Category:CloudInfrastructure]]

OpenNebula uses a method called contextualization to send information to the VM at boot time. Information is collected in the Template and is essential to configure the VM.

The VM template has a section called "'''Context'''" where you can automate different configuration aspects.

The Context section has 3 parts:

==='''''Configuration'''''===

[[File:Template-Configuration.png|768px]]

This is the most basic context configuration provided by OpenNebula, where you can:
* Enable '''Network''' contextualization. The VM will be configured with the information added in the network section or in [[#Custom Vars|Custom Var]] section of the template.
* Enable '''SSH''' contextualization. Ssh service will be enabled.
* Add '''SSH public keys'''. Keys will be added to USERNAME authorized_keys file ([[#Custom Vars|See custom section]]) or to root in case USERNAME is not set.
* '''START_SCRIPT''' - Script which is executed when the machine starts up. It can contain either shell script or Shebang. For example START_SCRIPT="yum upgrade".

==='''''Files'''''===

[[File:Template-Files.png|768px]]

In this section you can include files in your vm. Files can be added in OpenNebula in "Files" section in the left menu under "Images".

You can select files from the list and they will be automatically added in FILES_DS attribute.

If the file is a script you want to run at boot you can add it INIT_SCRIPTS attribute.

==='''''Custom Vars'''''===

[[File:Template-CustomVars.png|768px]]

In this section you can setup a more advanced contextualization, the attributes available are:

*'''VARIABLE''' - Variables that store values related to this virtual machine or others . The name of the variable is arbitrary (in the example, we use hostname).

* '''SET_HOSTNAME''' - This parameter value will be the hostname of the VM.

* '''DNS_HOSTNAME''' - YES to set the VM hostname to the reverse dns name (from the first IP)

* '''GATEWAY_IFACE''' - This variable can be set to the interface number you want to configure the gateway. It is useful when several networks have GATEWAY parameter and you want yo choose the one that configures it. For example to set the first interface to configure the gateway you use GATEWAY_IFACE=0

* '''DNS''' - Specific DNS server for the Virtual Machine

* '''ETHx_MAC''' - Used to find the correct interface

* '''ETHx_IP''' - IPv4 address for the interface

* '''ETHx_IPV6''' - IPv6 address for the interface

* '''ETHx_NETWORK''' - Network address of the interface

* '''ETHx_MASK''' - Network mask

* '''ETHx_GATEWAY''' - Default IPv4 gateway for the interface

* '''ETHx_GATEWAY6''' - Default IPv6 gateway for the interface

* '''ETHx_MTU''' - MTU value for the interface

* '''ETHx_DNS''' - DNS for the network

* '''USERNAME''' - User to be created in the guest OS. If any password attribute is defined (see below) it will change this user (defaults to root).

* '''CRYPTED_PASSWORD_BASE64''' - Crypted password encoded in base64. To be set for the user USERNAME. If not defined it will change root user.

* '''PASSWORD_BASE64''' - Password encoded in base64. To be set for the user USERNAME.

* '''CRYPTED_PASSWORD''' - Crypted password. To be set for the user USERNAME. This parameter is not recommended, use CRYPTED_PASSWORD_BASE64 instead.

* '''PASSWORD''' - Password to be set for the user USERNAME. This parameter is not recommended, use PASSWORD_BASE64 instead.

* '''SSH_PUBLIC_KEY''' - Key to be added to USERNAME authorized_keys file or root in case USERNAME is not set.

* '''EC2_PUBLIC_KEY''' - Same as SSH_PUBLIC_KEY

CipherSpace Virtual Router

2017-03-20T22:10:55Z

Client Admin:

[[Category:OpenNebula]]
[[Category:How To]]
[[Category:CloudInfrastructure]]

'''CipherSpace Virtual Router''' is based on '''OpenNebula Virtual Router''' (http://docs.opennebula.org/4.8/administration/networking/router.html) with some modifications plus OpenVPN. It is meant to be used as:
* Router (masquerade)
* DHCP server
* DNS server
* RADVD server
* Port forwarding server
* Bastion host for SSH tunnels
* OpenVPN server

CipherSpace Virtual Router allows using VMs which are not contextualized.

[[File:CipherSpace-VirtualRouter-Diagram.png|center]]

The virtual router image is non-persistent and takes its entire configuration from the contextualization script. Default VM size is 256MB RAM, 0.5 CPU and 1 vCPU.
You can install it from the Appmarket.

'''When using DHCP or OpenVPN make sure IP spoofing and MAC spoofing protections are turned off for the internal network.''' Otherwise it will not work.

== Virtual Router Configuration ==
Following configurations can be added in the virtual router template in "Context" menu under "Custom Vars".

The virtual router can be configured with 1 or 2 network interfaces. With 1 network interface it can be used only as '''DHCP''' or '''RADVD''' server.

* '''TEMPLATE''' - this is '''required'''. Otherwise most of the other functionality will not work. Usage:
TEMPLATE = "$TEMPLATE"

* '''PRIVNET''' - private network. For example:
PRIVNET = "$NETWORK[TEMPLATE, NETWORK=\"<private_network_name>\"]"

* '''PUBNET''' - public network. For example:
PUBNET = "$NETWORK[TEMPLATE, NETWORK=\"<public_network_name>\"]"

* '''RADVD''' - enables or disabled RADVD server. Possible values are '''YES''' and '''NO'''. For example
RADVD = "NO"

* '''DHCP''' - enables or disabled DHCP server. Possible values are '''YES''' and '''NO'''. For example
DHCP = "YES"

* '''DNS''' - list of DNS servers to use in DHCP leases. If not specified DHCP server will use VMs private network IP address. For example:
DNS = "10.1.1.1 10.2.2.2"

* '''SEARCH''' - DNS search option. For example:
SEARCH = "zh4.cipherspace.net"

* '''NTP_SERVER''' - IP of the NTP server. The DHCP server will be configured to serve the NTP parameter to its leases. For example:
NTP_SERVER = "10.0.0.10"

* '''FORWARDING''' - list of forwarding rules separated by spaces. Syntax:
[[protocol:]route_port:]destination:vm_port
'''protocol''' is not validated but it only makes sense to use '''tcp''' or '''udp'''.Default is '''tcp'''. If '''router_port''' is omitted too then port '''vm_port''' on the router will be forwarded to '''vm_port''' on the VM. For example:
FORWARDING = "udp:8888:10.0.0.10:53 8080:10.0.0.10:80 10.0.0.10:22"
{|
|style="text-align:right;"|<code lang="text">udp:8888:10.0.0.10:53</code>
|style="padding-left: 15px"|Forward UDP port 8888 on the router to port 53 on 10.0.0.10.
|-
|style="text-align:right;"|<code lang="text">8080:10.0.0.10:80</code>
|style="padding-left: 15px"|Forward TCP port 8080 on the router to port 80 on 10.0.0.10.
|-
|style="text-align:right;"|<code lang="text">10.0.0.10:22</code>
|style="padding-left: 15px"|Forward TCP port 22 the router to port 22 on 10.0.0.10.
|}

* '''ROOT_PASSWORD''' - base64 encoded '''root''' password hash. For example one can use the following command:
openssl passwd -1 | base64

* '''SSH_PUBLIC_KEY''' - single line, base64 encoded list of SSH keys to be set as '''root's authorized_keys'''. That is the '''Public key''' field in '''Context'''->'''Network & SSH'''. This is not a custom field. The way scripts are implemented they cannot parse parameters which contain 'new line' character. Because of that CipherSpace Virtual Router expects the value of SSH_PUBLIC_KEY to be a single base64 encoded string. That way we can pass multiple SSH keys. To generate the string you can use command like this:
cat <pub_key1> <pub_key2> ... <pub_keyN> | base64 | paste -s -d '\0' -

* '''SSHD''' - if set to YES and SSH_PUBLIC_KEY is set, then sshd will be launched. The idea is that Virtual Router VMs will not need active maintenance thus sshd does not need to be on all the time. If SSH_PUBLIC_KEY is set keys will be installed for root regardless of whether SSHD is enabled or not. That way one can login on the console and launch sshd if required. Command for Apline Linux is:
rc-service sshd start

* '''OPENVPN''' - controls whether OpenVPN should be started or not. If OPENVPN_CA_CERT, OPENVPN_SERVER_CERT and OPENVPN_SERVER_KEY are defined openvpn is configured but it is only launched if OPENVPN is set to YES. Please note that when image is instantiated and openvpn is configured it will take '''several minutes''', depending on allocated CPU, to boot because VM is generating DH 2048 bit parameters file.
* '''OPENVPN_CA_CERT''' - single line, PEM formatted, base64 encoded, Certification Authority certificate. That is the certificate used to sign OPENVPN_SERVER_CERT and all client certificates. Use the following command to encode:
cat ca.crt | base64 | paste -s -d '\0' -

* '''OPENVPN_SERVER_CERT''' - single line, PEM formatted, base64 encoded, server certificate.

* '''OPENVPN_SERVER_KEY''' - single line, PEM formatted, base64 encoded, server key

* '''OPENVPN_TA_KEY''' - optional but '''highly recommended''', single line, PEM formatted, base64 encoded, preshared key to use with '''--tls-auth'''. This features adds "extra protection" to the TLS channel by requiring that incoming packets have a valid signature generated using the PSK key. '''Key must be set on both server and client.''' If this key is ever changed, it must be changed on all peers at the same time.

* '''OPENVPN_REVOKED''' - optional, single line, base64 encoded content of a file containing revoked certificates.

* '''OPENVPN_INT_NET''' - Network to be used for communication between the server and the clients. It has to be different from the internal OpenNebula network and client's network. Is omitted it default to 10.255.255.0. It is good idea to use different networks especially in one client setup. That way one can have multiple tunnels at the same time if destination networks don't overlap of course.

* '''OPENVPN_INT_NETMASK''' - Network mask for the network between the server and the clients. Defaults to 255.255.255.0. '''Warning:''' OpenVPN is very picky. It will complain and it will not start if netmask zeros out any bit from the network. For example: net 10.1.1.1 netmask 255.255.255.0 will not work. One needs to use: net 10.1.1.0 netmask 255.255.255.0

* '''OPENVPN_MAX_CLIENTS''' - Maximum number of simultaneously connected users. It defaults to 3. Tests showed that is a good number for the default size VM.

CipherSpace Virtual Router can be used as a bastion host to build ssh tunnels. This is controlled by the following context variables:

* '''TUNNEL_USER''' - user name. '''It must not exist.''' If user exists it will not be reconfigured. That is to prevent messing up system users. User shell is set to /bin/false.

* '''TUNNEL_USER_SSH_PUBLIC_KEY''' - single line, base64 encoded, list of keys to install in '''authorized_keys''' file. Since it can can be multi-line it has to be formatted the same way as SSH_PUBLIC_KEY.

* '''TUNNEL_USER_KEY_RESTRICTIONS''' - optional string that goes before the key in authorized_keys file. Defaults to '''"no-pty,no-agent-forwarding,no-X11-forwarding,no-user-rc"'''. Even though user shell is set to /bin/false one must be careful what goes in this variable.

Contextualization of Linux VMs

2017-03-20T22:09:57Z

Client Admin:

[[Category:OpenNebula]]
[[Category:How To]]
[[Category:Cloud Infrastructure]]

OpenNebula uses a method called contextualization to send information to the VM at boot time. Information is collected in the Template and is essential to configure the VM.

The VM template has a section called "'''Context'''" where you can automate different configuration aspects.

The Context section has 3 parts:

==='''''Configuration'''''===

[[File:Template-Configuration.png|768px]]

This is the most basic context configuration provided by OpenNebula, where you can:
* Enable '''Network''' contextualization. The VM will be configured with the information added in the network section or in [[#Custom Vars|Custom Var]] section of the template.
* Enable '''SSH''' contextualization. Ssh service will be enabled.
* Add '''SSH public keys'''. Keys will be added to USERNAME authorized_keys file ([[#Custom Vars|See custom section]]) or to root in case USERNAME is not set.
* '''START_SCRIPT''' - Script which is executed when the machine starts up. It can contain either shell script or Shebang. For example START_SCRIPT="yum upgrade".

==='''''Files'''''===

[[File:Template-Files.png|768px]]

In this section you can include files in your vm. Files can be added in OpenNebula in "Files" section in the left menu under "Images".

You can select files from the list and they will be automatically added in FILES_DS attribute.

If the file is a script you want to run at boot you can add it INIT_SCRIPTS attribute.

==='''''Custom Vars'''''===

[[File:Template-CustomVars.png|768px]]

In this section you can setup a more advanced contextualization, the attributes available are:

*'''VARIABLE''' - Variables that store values related to this virtual machine or others . The name of the variable is arbitrary (in the example, we use hostname).

* '''SET_HOSTNAME''' - This parameter value will be the hostname of the VM.

* '''DNS_HOSTNAME''' - YES to set the VM hostname to the reverse dns name (from the first IP)

* '''GATEWAY_IFACE''' - This variable can be set to the interface number you want to configure the gateway. It is useful when several networks have GATEWAY parameter and you want yo choose the one that configures it. For example to set the first interface to configure the gateway you use GATEWAY_IFACE=0

* '''DNS''' - Specific DNS server for the Virtual Machine

* '''ETHx_MAC''' - Used to find the correct interface

* '''ETHx_IP''' - IPv4 address for the interface

* '''ETHx_IPV6''' - IPv6 address for the interface

* '''ETHx_NETWORK''' - Network address of the interface

* '''ETHx_MASK''' - Network mask

* '''ETHx_GATEWAY''' - Default IPv4 gateway for the interface

* '''ETHx_GATEWAY6''' - Default IPv6 gateway for the interface

* '''ETHx_MTU''' - MTU value for the interface

* '''ETHx_DNS''' - DNS for the network

* '''USERNAME''' - User to be created in the guest OS. If any password attribute is defined (see below) it will change this user (defaults to root).

* '''CRYPTED_PASSWORD_BASE64''' - Crypted password encoded in base64. To be set for the user USERNAME. If not defined it will change root user.

* '''PASSWORD_BASE64''' - Password encoded in base64. To be set for the user USERNAME.

* '''CRYPTED_PASSWORD''' - Crypted password. To be set for the user USERNAME. This parameter is not recommended, use CRYPTED_PASSWORD_BASE64 instead.

* '''PASSWORD''' - Password to be set for the user USERNAME. This parameter is not recommended, use PASSWORD_BASE64 instead.

* '''SSH_PUBLIC_KEY''' - Key to be added to USERNAME authorized_keys file or root in case USERNAME is not set.

* '''EC2_PUBLIC_KEY''' - Same as SSH_PUBLIC_KEY

CipherSpace Virtual Router

2017-03-20T22:09:27Z

Client Admin:

[[Category:OpenNebula]]
[[Category:How To]]
[[Category:Cloud Infrastructure]]

'''CipherSpace Virtual Router''' is based on '''OpenNebula Virtual Router''' (http://docs.opennebula.org/4.8/administration/networking/router.html) with some modifications plus OpenVPN. It is meant to be used as:
* Router (masquerade)
* DHCP server
* DNS server
* RADVD server
* Port forwarding server
* Bastion host for SSH tunnels
* OpenVPN server

CipherSpace Virtual Router allows using VMs which are not contextualized.

[[File:CipherSpace-VirtualRouter-Diagram.png|center]]

The virtual router image is non-persistent and takes its entire configuration from the contextualization script. Default VM size is 256MB RAM, 0.5 CPU and 1 vCPU.
You can install it from the Appmarket.

'''When using DHCP or OpenVPN make sure IP spoofing and MAC spoofing protections are turned off for the internal network.''' Otherwise it will not work.

== Virtual Router Configuration ==
Following configurations can be added in the virtual router template in "Context" menu under "Custom Vars".

The virtual router can be configured with 1 or 2 network interfaces. With 1 network interface it can be used only as '''DHCP''' or '''RADVD''' server.

* '''TEMPLATE''' - this is '''required'''. Otherwise most of the other functionality will not work. Usage:
TEMPLATE = "$TEMPLATE"

* '''PRIVNET''' - private network. For example:
PRIVNET = "$NETWORK[TEMPLATE, NETWORK=\"<private_network_name>\"]"

* '''PUBNET''' - public network. For example:
PUBNET = "$NETWORK[TEMPLATE, NETWORK=\"<public_network_name>\"]"

* '''RADVD''' - enables or disabled RADVD server. Possible values are '''YES''' and '''NO'''. For example
RADVD = "NO"

* '''DHCP''' - enables or disabled DHCP server. Possible values are '''YES''' and '''NO'''. For example
DHCP = "YES"

* '''DNS''' - list of DNS servers to use in DHCP leases. If not specified DHCP server will use VMs private network IP address. For example:
DNS = "10.1.1.1 10.2.2.2"

* '''SEARCH''' - DNS search option. For example:
SEARCH = "zh4.cipherspace.net"

* '''NTP_SERVER''' - IP of the NTP server. The DHCP server will be configured to serve the NTP parameter to its leases. For example:
NTP_SERVER = "10.0.0.10"

* '''FORWARDING''' - list of forwarding rules separated by spaces. Syntax:
[[protocol:]route_port:]destination:vm_port
'''protocol''' is not validated but it only makes sense to use '''tcp''' or '''udp'''.Default is '''tcp'''. If '''router_port''' is omitted too then port '''vm_port''' on the router will be forwarded to '''vm_port''' on the VM. For example:
FORWARDING = "udp:8888:10.0.0.10:53 8080:10.0.0.10:80 10.0.0.10:22"
{|
|style="text-align:right;"|<code lang="text">udp:8888:10.0.0.10:53</code>
|style="padding-left: 15px"|Forward UDP port 8888 on the router to port 53 on 10.0.0.10.
|-
|style="text-align:right;"|<code lang="text">8080:10.0.0.10:80</code>
|style="padding-left: 15px"|Forward TCP port 8080 on the router to port 80 on 10.0.0.10.
|-
|style="text-align:right;"|<code lang="text">10.0.0.10:22</code>
|style="padding-left: 15px"|Forward TCP port 22 the router to port 22 on 10.0.0.10.
|}

* '''ROOT_PASSWORD''' - base64 encoded '''root''' password hash. For example one can use the following command:
openssl passwd -1 | base64

* '''SSH_PUBLIC_KEY''' - single line, base64 encoded list of SSH keys to be set as '''root's authorized_keys'''. That is the '''Public key''' field in '''Context'''->'''Network & SSH'''. This is not a custom field. The way scripts are implemented they cannot parse parameters which contain 'new line' character. Because of that CipherSpace Virtual Router expects the value of SSH_PUBLIC_KEY to be a single base64 encoded string. That way we can pass multiple SSH keys. To generate the string you can use command like this:
cat <pub_key1> <pub_key2> ... <pub_keyN> | base64 | paste -s -d '\0' -

* '''SSHD''' - if set to YES and SSH_PUBLIC_KEY is set, then sshd will be launched. The idea is that Virtual Router VMs will not need active maintenance thus sshd does not need to be on all the time. If SSH_PUBLIC_KEY is set keys will be installed for root regardless of whether SSHD is enabled or not. That way one can login on the console and launch sshd if required. Command for Apline Linux is:
rc-service sshd start

* '''OPENVPN''' - controls whether OpenVPN should be started or not. If OPENVPN_CA_CERT, OPENVPN_SERVER_CERT and OPENVPN_SERVER_KEY are defined openvpn is configured but it is only launched if OPENVPN is set to YES. Please note that when image is instantiated and openvpn is configured it will take '''several minutes''', depending on allocated CPU, to boot because VM is generating DH 2048 bit parameters file.
* '''OPENVPN_CA_CERT''' - single line, PEM formatted, base64 encoded, Certification Authority certificate. That is the certificate used to sign OPENVPN_SERVER_CERT and all client certificates. Use the following command to encode:
cat ca.crt | base64 | paste -s -d '\0' -

* '''OPENVPN_SERVER_CERT''' - single line, PEM formatted, base64 encoded, server certificate.

* '''OPENVPN_SERVER_KEY''' - single line, PEM formatted, base64 encoded, server key

* '''OPENVPN_TA_KEY''' - optional but '''highly recommended''', single line, PEM formatted, base64 encoded, preshared key to use with '''--tls-auth'''. This features adds "extra protection" to the TLS channel by requiring that incoming packets have a valid signature generated using the PSK key. '''Key must be set on both server and client.''' If this key is ever changed, it must be changed on all peers at the same time.

* '''OPENVPN_REVOKED''' - optional, single line, base64 encoded content of a file containing revoked certificates.

* '''OPENVPN_INT_NET''' - Network to be used for communication between the server and the clients. It has to be different from the internal OpenNebula network and client's network. Is omitted it default to 10.255.255.0. It is good idea to use different networks especially in one client setup. That way one can have multiple tunnels at the same time if destination networks don't overlap of course.

* '''OPENVPN_INT_NETMASK''' - Network mask for the network between the server and the clients. Defaults to 255.255.255.0. '''Warning:''' OpenVPN is very picky. It will complain and it will not start if netmask zeros out any bit from the network. For example: net 10.1.1.1 netmask 255.255.255.0 will not work. One needs to use: net 10.1.1.0 netmask 255.255.255.0

* '''OPENVPN_MAX_CLIENTS''' - Maximum number of simultaneously connected users. It defaults to 3. Tests showed that is a good number for the default size VM.

CipherSpace Virtual Router can be used as a bastion host to build ssh tunnels. This is controlled by the following context variables:

* '''TUNNEL_USER''' - user name. '''It must not exist.''' If user exists it will not be reconfigured. That is to prevent messing up system users. User shell is set to /bin/false.

* '''TUNNEL_USER_SSH_PUBLIC_KEY''' - single line, base64 encoded, list of keys to install in '''authorized_keys''' file. Since it can can be multi-line it has to be formatted the same way as SSH_PUBLIC_KEY.

* '''TUNNEL_USER_KEY_RESTRICTIONS''' - optional string that goes before the key in authorized_keys file. Defaults to '''"no-pty,no-agent-forwarding,no-X11-forwarding,no-user-rc"'''. Even though user shell is set to /bin/false one must be careful what goes in this variable.

MediaWiki:Sidebar

2017-03-20T22:08:43Z

Client Admin:

* navigation
** CipherSpace_Support_Wiki|CipherSpace Support

* SEARCH

* how to
** Category:How To|All
** Category:CloudInfrastructure|Cloud Infrastructure
** Vantage_User_Guides|Telephony

* LANGUAGES

MediaWiki:Sidebar

2017-03-20T22:07:51Z

Client Admin:

* navigation
** CipherSpace_Support_Wiki|CipherSpace Support

* SEARCH

** Category:How To|All
** Category:CloudInfrastructure|Cloud Infrastructure
** Vantage_User_Guides|Telephony

* LANGUAGES

MediaWiki:Mainpage

2017-03-16T18:06:33Z

Client Admin:

CipherSpace Support Wiki