Monitoring Harmonie suites with Teleport

In order to monitor the progress of your Harmonie suite(s) at ECMWF the ecFlow GUI ecflow_ui can be used directly from your local PC/server. This relies on teleport and ssh port forwarding which is described in more detail below.

Open Teleport connection

This relies on a Teleport connection to ECMWF. Further details on Teleport are available here:

[itops@reaserve ~]$ tsh status
> Profile URL:  https://jump.ecmwf.int:443
  Logged in as: itops@met.ie
  Cluster:      jump.ecmwf.int
  Roles:        *
  Logins:       duit
  Valid until:  2021-03-23 22:00:35 +0000 UTC [valid for 11h21m0s]
  Extensions:   permit-X11-forwarding, permit-agent-forwarding, permit-port-forwarding, permit-pty


* RBAC is only available in Teleport Enterprise
  https://gravitational.com/teleport/docs/enterprise
[itops@reaserve ~]$

In order to open a new Teleport connection execute the following and submit credential via browser:

[ewhelan@reaserve ~]$ tsh login --proxy=jump.ecmwf.int:433

Log in

To log in to ECMWF's Atos:

[itops@reaserve ~]$ ssh -X hpc-login

The Teleport connection to ECMWF is configured as follows:

[ewhelan@reaserve ~]$ cat .ssh/config 
Host hpc-login
  User dui
  IdentityFile ~/.tsh/keys/jump.ecmwf.int/eoin.whelan@met.ie
  ProxyCommand bash -c "tsh login; ssh -W %h:%p %r@jump.ecmwf.int"
[ewhelan@reaserve ~]$

Open ecFlow ports

The following opens ports to ECMWF (dui, ECF_PORT=3141) ecFlow server. Based on instructions provided by [https://confluence.ecmwf.int/display/ECFLOW/Teleport+-+using+local+ecflow_ui]. In a new terminal:

ssh hpc-login -C -N -L 3141:ecflow-gen-dui-001:3141