Launch an instance¶

Create virtual networks¶

Create virtual networks for the networking option that you chose in Add the Networking service. If you chose option 1, create only the public virtual network. If you chose option 2, create the public and private virtual networks.

After creating the appropriate networks for your environment, you can continue preparing the environment to launch an instance.

Generate a key pair¶

Most cloud images support public key authentication rather than conventional password authentication. Before launching an instance, you must add a public key to the Compute service.

1. Source the demo tenant credentials:

   $ source demo-openrc.sh
   

2. Generate and add a key pair:

   $ ssh-keygen -q -N ""
   $ nova keypair-add --pub-key ~/.ssh/id_rsa.pub mykey
   

   Note

   Alternatively, you can skip the ssh-keygen command and use an existing public key.

3. Verify addition of the key pair:

   $ nova keypair-list
   +-------+-------------------------------------------------+
   | Name  | Fingerprint                                     |
   +-------+-------------------------------------------------+
   | mykey | 6c:74:ec:3a:08:05:4e:9e:21:22:a6:dd:b2:62:b8:28 |
   +-------+-------------------------------------------------+
   

Add security group rules¶

By default, the default security group applies to all instances and includes firewall rules that deny remote access to instances. For Linux images such as CirrOS, we recommend allowing at least ICMP (ping) and secure shell (SSH).

• Add rules to the default security group:

  • Permit ICMP (ping):

    $ nova secgroup-add-rule default icmp -1 -1 0.0.0.0/0
    +-------------+-----------+---------+-----------+--------------+
    | IP Protocol | From Port | To Port | IP Range  | Source Group |
    +-------------+-----------+---------+-----------+--------------+
    | icmp        | -1        | -1      | 0.0.0.0/0 |              |
    +-------------+-----------+---------+-----------+--------------+
    

  • Permit secure shell (SSH) access:

    $ nova secgroup-add-rule default tcp 22 22 0.0.0.0/0
    +-------------+-----------+---------+-----------+--------------+
    | IP Protocol | From Port | To Port | IP Range  | Source Group |
    +-------------+-----------+---------+-----------+--------------+
    | tcp         | 22        | 22      | 0.0.0.0/0 |              |
    +-------------+-----------+---------+-----------+--------------+
    

Launch an instance¶

If you chose networking option 1, you can only launch an instance on the public network. If you chose networking option 2, you can launch an instance on the public network and the private network.

Block Storage¶

If your environment includes the Block Storage service, you can create a volume and attach it to an instance.

Orchestration¶

If your environment includes the Orchestration service, you can create a stack that launches an instance.