OCI-QuickStart.md

OCI Quick Start Lab (VCN, Compute and Block Volume)

Table of Contents

Overview

Pre-Requisites

Sign in to OCI Console and create VCN

Create ssh keys, compute instance and Block Volume. Attach block volume to compute instance

Install httpd on compute instance and install an app on Block Volume

OPTIONAL: Detach the block volume and launch second compute instance using boot volume and attach Block Volume

Delete the resources

Appendix A: ISCSI Method to Attach Block Volume to Compute Instance

Appendix B: ISCSI Method to Detach block volume

Overview

In this lab we will create a compute instance, install httpd server on it, attach block volume to it and install an app on the Block Volume We will then create a second compute instance using the boot volume of the first compute instance and move the Block Volume to the second compute instance (with the app installed). The goal of the lab is to demonstrate launching VCN, Compute Instance, using Boot volume of compute instance and how easy it is to move additional storage with applicatons/tools installed between compute instances

Some Key points;

We recommend using Chrome or Edge as the broswer. Also set your browser zoom to 80%

• All screen shots are examples ONLY. Screen shots can be enlarged by Clicking on them

• Login credentials are provided later in the guide (scroll down). Every User MUST keep these credentials handy.

• Do NOT use compartment name and other data from screen shots.Only use data(including compartment name) provided in the content section of the lab

• Mac OS Users should use ctrl+C / ctrl+V to copy and paste inside the OCI Console

• Login credentials are provided later in the guide (scroll down). Every User MUST keep these credentials handy.

Cloud Tenant Name User Name Password Compartment Name (Provided Later)

Note: OCI UI is being updated thus some screenshots in the instructions might be different than actual UI

Pre-Requisites

1. Oracle Cloud Infrastructure account credentials (User, Password, Tenant, and Compartment)

2. OCI Training : https://cloud.oracle.com/en_US/iaas/training

3. Familiarity with OCI console: https://docs.us-phoenix-1.oraclecloud.com/Content/GSG/Concepts/console.htm

4. Overview of Networking: https://docs.us-phoenix-1.oraclecloud.com/Content/Network/Concepts/overview.htm

5. Familiarity with Compartment: https://docs.us-phoenix-1.oraclecloud.com/Content/GSG/Concepts/concepts.htm

6. Connecting to a compute instance: https://docs.us-phoenix-1.oraclecloud.com/Content/Compute/Tasks/accessinginstance.htm

Sign in to OCI Console and create VCN

• Tenant Name: {{Cloud Tenant}}
• User Name: {{User Name}}
• Password: {{Password}}
• Compartment:{{Compartment}}

1.Sign in using your tenant name, user name and password. Use the login option under Oracle Cloud Infrastructure

2.From the OCI Services menu,Click Virtual Cloud Network. Select the compartment assigned to you from drop down menu on left part of the screen under Networking and Click Networking QuickStart

NOTE: Ensure the correct Compartment is selected under COMPARTMENT list

3.Click VCN with Internet Connectivity and click Start Workflow

4.Fill out the dialog box:

• VCN NAME: Provide a name
• COMPARTMENT: Ensure your compartment is selected
• VCN CIDR BLOCK: Provide a CIDR block (10.0.0.0/16)
• PUBLIC SUBNET CIDR BLOCK: Provide a CIDR block (10.0.1.0/24)
• PRIVATE SUBNET CIDR BLOCK: Provide a CIDR block (10.0.2.0/24)
• Click Next

5.Verify all the information and Click Create

6.This will create a VCN with followig components.

VCN, Public subnet, Private subnet, Internet gateway (IG), NAT gateway (NAT), Service gateway (SG)

7.Click View Virtual Cloud Network to display your VCN details.

8.We will open port 80 on this VCN to provide http access to app on the compute instance(to be installed later on. Click Security List and then Default Security list for<YOUR_VCN_NAME>

9.Click Add Ingress Rule under Ingress Rules and add below rule:

• Make sure STATELESS Flag in un-checked
• SOURCE TYPE: CIDR
• SOURCE CIDR: 0.0.0.0/0
• IP PROTOCOL: TCP
• SOURCE PORT RANGE: ALL
• DESTINATION PORT RANGE: 80

10.Click Add Ingress Rule at the bottom

Create ssh keys, compute instance and Block Volume. Attach block volume to compute instance

1.Click the Apps icon in the toolbar and select Git-Bash to open a terminal window.

2. Enter command

ssh-keygen

HINT: You can swap between OCI window, git-bash sessions and any other application (Notepad, etc.) by Clicking the Switch Window icon

3. Press Enter When asked for 'Enter File in which to save the key', 'Created Directory, 'Enter passphrase', and 'Enter Passphrase again.

4. You should now have the Public and Private keys:

/C/Users/ PhotonUser/.ssh/id_rsa (Private Key)

/C/Users/PhotonUser/.ssh/id_rsa.pub (Public Key)

NOTE: id_rsa.pub will be used to create Compute instance and id_rsa to connect via SSH into compute instance.

HINT: Enter command

cd /C/Users/PhotonUser/.ssh (No Spaces) 

and then

ls 

to verify the two files exist.

5. In git-bash Enter command

cat /C/Users/PhotonUser/.ssh/id_rsa.pub

, highlight the key and copy

6. Click the apps icon, launch notepad and paste the key in Notepad (as backup)

7. Switch to the OCI console. From OCI services menu, Click Instances under Compute

8. Click Create Instance. Fill out the dialog box:

• Name your instance: Enter a name
• Choose an operating system or image source: For the image, we recommend using the Latest Oracle Linux available.
• Availability Domain: Select availability domain
• Instance Type: Select Virtual Machine
• Instance Shape: Select VM shape

Under Configure Networking

• Virtual cloud network compartment: Select your compartment
• Virtual cloud network: Choose the VCN
• Subnet Compartment: Choose your compartment.
• Subnet: Choose the Public Subnet under Public Subnets
• Use network security groups to control traffic : Leave un-checked
• Assign a public IP address: Check this option

• Boot Volume: Leave the default
• Add SSH Keys: Choose 'Paste SSH Keys' and paste the Public Key saved earlier.

9. Click Create

NOTE: If 'Service limit' error is displayed choose a different shape from VM.Standard2.1, VM.Standard.E2.1, VM.Standard1.1, VM.Standard.B1.1 OR choose a different AD

10. Wait for Instance to be in Running state. In git-bash Enter Command:

 cd /C/Users/PhotonUser/.ssh

11. Enter ls and verify id_rsa file exists

12. Enter command

ssh -i id_rsa opc@<PUBLIC_IP_OF_COMPUTE>

HINT: If 'Permission denied error' is seen, ensure you are using '-i' in the ssh command. You MUST type the command, do NOT copy and paste ssh command

13. Enter 'Yes' when prompted for security message

14. Verify opc@<COMPUTE_INSTANCE_NAME> appears on the prompt

15. From OCI services menu Click Block Volumes under Block Storage, then Click Create Block Volume.

16. Fill out the dialog box:

• Create in Compartment: Has the correct compartment selected.
• Name: Enter a name for the block volume (e.g. "block_vm).
• Availability Domain: Select the first available domain (must be same as Compute).
• SIZE: Set to 50
• BACKUP POLICY: Set to None (If this field shows ‘Error Retrieving Value’ then leave it as is)

17. Click Create Block Volume. Wait for volume to become available. Wait for Block Volume state to change from 'Provisioning' to 'Available'

18. Attach Block volume to your compute instance. From OCI services menu Click Instance under Compute

19. For the compute instance created earlier, Click Action item. Click Attach Block Volume.

20. Fill out the dialog box:

• Choose how you want to attach your block volume: Paravirtualized

NOTE: We can also use ISCSI mode. For more information please refer to ;

https://docs.cloud.oracle.com/iaas/Content/Block/Concepts/overview.htm#attachtype OR refer Appendix section at the end of the lab.

• BLOCK VOLUME COMPARTMENT: Ensure correct compartment is selected
• Block Volume: Choose the volume created earlier
• Device Path: Choose a device path. Note down this device path as it will be used later on
• Access: Choose READ/WRITE

21. Click Attach.

22. Click Close.

We now have a block volume created and attached to the Compute instance.

23. Verify the Block Volume is attached by Clicking the Compute Instance name.

Install httpd on compute instance and install an app on Block Volume

1. Switch to ssh session to compute install. Install httpd server, Enter Command:

sudo yum -y install httpd 

2. Configure Compute instance firewall, Enter commands:

sudo firewall-cmd --permanent --add-port=80/tcp 

(Open port 80 on the firewall to allow http and https traffic).

NOTE: Despite the line wrapping, the --add-port flag has no spaces.

sudo firewall-cmd --reload 

(Reload the firewall to activate the rules).

3. Start httpd, Enter command:

sudo systemctl start httpd 

4. Enter commad lsblk to verify the Block volume storage is initialized. This could be sda, sdb or somethig else strting with 'sd'. In below example this volume is called sdb. Below screen shot shows a 1 TB volume though in this lab we have created a 50GB volume thus the size in your compute instance will be 50GB.

HINT: The Name sdb is the block volume storage. This name could change for your specific attachment (i.e sdc)

5. To format the block volume, Enter Command:

sudo fdisk <DEVICE_PATH> -l 

For example sudo fdisk /dev/sdb -l
Wait for formatting to complete

6. Create a file system on the block volume, Enter Command:

sudo mkfs.ext4 -L datapartition <DEVICE_PATH> 

This will create the file system on the entire disk. Enter y when prompted with 'Proceed anyway'

NOTE: For this lab we will not be creating additional partitions

7. Create a directory where the disk will be mounted,Enter commands:

sudo mkdir -p /mnt/www/html            

8. Mount the disk to the newly created directory, Enter command:

sudo mount  /dev/<VOLUME_NAME>  /mnt/www/html

9. Verify /dev/<VOLUME_NAME> volume is now mounted to /mnt/www/html directory, Enter command

lsblk 

(in this case the volume is called sdc)

10. Next we will download an app and install it. Enter command:

cd /home/opc

11. Enter Command:

wget https://github.com/snafuz/oci-quickstart-lab/archive/master.zip

12. Enter Command:

unzip master.zip

13. Enter Command:

sudo cp -R oci-quickstart-lab-master/static/* /mnt/www/html/

14. Modify httpd.conf file, Enter Command:

sudo vi /etc/httpd/conf/httpd.conf (for vi) 

OR

sudo nano  /etc/httpd/conf/httpd.conf  (for nano)

NOTE: in vi you can save the file after modification by using Esc :wq

15. Search for string /var/www and replace it with /mnt/www/html . This will be done in 3 locations

16. Save and Exit (in vi user Esc :wq)

17. Enter command:

sudo chcon -R --type=httpd_sys_rw_content_t /mnt

18. Restart httpd server, Enter command:

sudo systemctl restart httpd 

19. Launch a web browser and Enter compute Instance's public IP:

http://<COMPUTE_INSTANCE_PUBLIC_IP>

20. Screen like below should appear.

We have initialized httpd.conf file. Next we will create a second compute instance using the boot volume of the first compute instance and attach Block Volume to it

OPTIONAL: Detach the block volume and launch second compute instance using boot volume and attach Block Volume

In this section we will detach the block volume, Stop the compute instance, use its boot volume to launch a second compute instance and delete the second compute instance

1. In ssh session to the compute instance unmount the directory from block volume, Enter command:

sudo umount /dev/<VOLUME_NAME> 

2. In OCI console window, Click your compute instance name and in Attached Block Volume section Click the action icon and Click Detach

3. Stop your compute instance by Clicking Stop in compute instance details page and then OK in Confirm window

4. Once the instance is in Stopped state, Click Boot Volume, Click action icon and Click Detach. Click OK in Confirm window.

5. Once the Boot volume is detached, Click Terminate to Terminate the instance.

6. Click the action icon, Click View Boot Volume Details.

7. In the Boot Volume Details window Click Create Instance:

• Name your instance: Enter a name

• Choose an operating system or image source: Leave as is (It should show the boot volume of the terminated instance)

• Availability Domain: Select availability domain

NOTE : Boot Volume field is set to BOOT VOLUME and to the boot volume you detached from the original Instance.

• Instance Type: Select Virtual Machine
• Instance Shape: Select VM shape

Under Configure Networking

• Virtual cloud network compartment: Select your compartment
• Virtual cloud network: Choose the VCN
• Subnet Compartment: Choose your compartment.
• Subnet: Choose the Public Subnet under Public Subnets
• Use network security groups to control traffic : Leave un-checked
• Assign a public IP address: Check this option

• Boot Volume: Leave the default
• Add SSH Keys: Choose 'Paste SSH Keys' and paste the Public Key saved earlier.

8. Click Create.

NOTE: If 'Service limit' error is displayed choose a different shape such as VM.Standard.E2.2 OR VM.Standard2.2 OR Choose a different AD

9. Once the instance is in Running state, attach the block volume to this new instance using OCI Console.Ensure to use Paravirtualized mode.

10. ssh to compute instance and mount the block volume as before, Enter Command:

sudo mount  /dev/<VOLUME_NAME>  /mnt/www/html

11. Restart httpd, Enter command

sudo systemctl restart httpd

12. Launch a web browser and Enter compute Instance's public IP, http://<COMPUTE_INSTANCE_PUBLIC_IP>

13. Screen like below should appear, Enter the required information

We have now successfully launched a compute instance using another instance's boot volume and re-attached a block volume that was attached to another instance. The block volume preserved all the data on it during this process. Moreover the compute instance launched using the boot volume had httpd server and fire wall configuration already present

Delete the resources

1. Switch to OCI console window

2. If your Compute instance is not displayed, From OCI services menu Click Instances under Compute

3. Locate first compute instance, Click Action icon and then Terminate

4. Make sure Permanently delete the attached Boot Volume is checked, Click Terminate Instance. Wait for instance to fully Terminate

5. Repeat the step to delete second compute instance

6. From OCI services menu Click Block Volumes under Block Storage

7. Find the storage block volume you created.

HINT: If multiple storage block volumes are listed, scroll down to find the one you created.

8. Click the Action icon and select Terminate

9. Click OK in the confirmation window.

10. From OCI services menu Click Virtual Cloud Networks under Networking, list of all VCNs will appear.

11. Locate your VCN , Click Action icon and then Terminate. Click Delete All in the Confirmation window. Click Close once VCN is deleted

***Congratulations! You have successfully completed the lab. ***

Appendix A: ISCSI Method to Attach Block Volume to Compute Instance

1. Click Action icon for the Block Volume, then ISCSI Commands & Information

NOTE: The iSCSI Commands and Information dialog box displays specific identifying information about your volume and the iSCSI commands you'll need. The commands are ready to use with the appropriate information included. You can copy and paste the commands into your instance once you login.

2. Click Copy in ATTACH COMMANDS section.

3. Click Close to close the window

4. In OCI Console Window, Click the Apps icon and Click Notepad.

HINT: You can swap between the OCI window and any other application (Notepad etc.) by Clicking the Switch Window icon

5. Paste the ISCSI commands in Notepad using your mouse/touch pad or Ctrl v.

To attach ssh to the compute instance and paste the ISCSI commands copied earlier

Appendix B: ISCSI Method to Detach block volume

1. Click Action icon for the Block Volume, then ISCSI Commands & Information

2. Click Copy in DETACH COMMANDS section.

3. Paste the detach command in the ssh session to the compute instance

4. In OCI console window, Click your compute instance name and in Attached Block Volumes section Click the action icon and Click Detach