Chapter 2. Installing RHEL AI on AWS

Procedure

1. Create an S3 bucket and set the permissions to allow image file conversion to AWS snapshots.

   1. Create the necessary environment variables. Open a shell prompt and run the following commands:

      $ export BUCKET=<CUSTOM_BUCKET_NAME>
      $ export RAW_AMI=nvidia-bootc.ami
      $ export AMI_NAME="rhel-ai"
      $ export DEFAULT_VOLUME_SIZE=1000

   2. Create the S3 bucket by running the following command:

      $ aws s3 mb s3://$BUCKET

   3. Create the trust-policy.json file with the necessary configuration for generating an S3 role for your bucket:

      $ printf '{
        "Version": "2012-10-17",
        "Statement": [
          {
            "Effect": "Allow",
            "Principal": {
              "Service": "vmie.amazonaws.com"
            },
            "Action": "sts:AssumeRole",
            "Condition": {
              "StringEquals": {
                "sts:Externalid": "vmimport"
              }
            }
          }
        ]
      }' > trust-policy.json

   4. Create the S3 role for your bucket. Run the following command:

      $ aws iam create-role --role-name vmimport --assume-role-policy-document file://trust-policy.json

   5. Create the role-policy.json file with the necessary configurations for generating a policy for your bucket:

      $ printf '{
        "Version": "2012-10-17",
        "Statement": [
          {
            "Effect": "Allow",
            "Action": [
              "s3:GetBucketLocation",
              "s3:GetObject",
              "s3:ListBucket"
            ],
            "Resource": [
              "arn:aws:s3:::%s",
              "arn:aws:s3:::%s/*"
            ]
          },
          {
            "Effect": "Allow",
            "Action": [
              "ec2:ModifySnapshotAttribute",
              "ec2:CopySnapshot",
              "ec2:RegisterImage",
              "ec2:Describe*"
            ],
            "Resource": "*"
          }
        ]
      }' $BUCKET $BUCKET > role-policy.json

   6. Create the policy for your bucket by running the following command:

      $ aws iam put-role-policy --role-name vmimport --policy-name vmimport-$BUCKET --policy-document file://role-policy.json

2. Copy the x86_64 RAW image URL from the Download Red Hat Enterprise Linux AI page and download the image using curl:

   $ curl -Lo disk.raw.gz <RAW_IMAGE_URL>

3. Unzip the raw.gz file:

   $ gunzip disk.raw.gz

4. Upload the image to the S3 bucket with the following command:

   $ aws s3 cp disk.raw s3://$BUCKET/$RAW_AMI

5. Convert the image to a snapshot and store it in the TASK_ID variable name by running the following commands:

   $ printf '{
      "Description":"rhelai-image",
      "Format":"raw",
      "UserBucket":{
         "S3Bucket":"%s",
         "S3Key":"%s"
      }
   }' $BUCKET $RAW_AMI > containers.json

   $ TASK_ID=$(aws ec2 import-snapshot --disk-container file://containers.json | jq -r .ImportTaskId)

6. Follow the progress of the disk image to snapshot conversion job with the following command:

   $ aws ec2 describe-import-snapshot-tasks --filters Name=task-state,Values=active

7. Get the snapshot ID and store it the SNAPSHOT_ID variable by running the following command:

   $ SNAPSHOT_ID=$(aws ec2 describe-import-snapshot-tasks | jq -r '.ImportSnapshotTasks[] | select(.ImportTaskId=="'${TASK_ID}'") | .SnapshotTaskDetail.SnapshotId')

8. Add a tag name to the snapshot by running the following command:

   $ aws ec2 create-tags --resources $SNAPSHOT_ID --tags Key=Name,Value="$AMI_NAME"

9. Register the AMI from the snapshot with the following command:

   $ AMI_ID=$(aws ec2 register-image \
   --name "$AMI_NAME" \
   --description "$AMI_NAME" \
   --architecture x86_64 \
   --root-device-name /dev/sda1 \
   --block-device-mappings "DeviceName=/dev/sda1,Ebs={VolumeSize=${DEFAULT_VOLUME_SIZE},SnapshotId=${SNAPSHOT_ID}}" \
   --virtualization-type hvm \
   --ena-support \
   | jq -r .ImageId)

10. Add a tag name to identify the AMI by running the following command:

    $ aws ec2 create-tags --resources $AMI_ID --tags Key=Name,Value="$AMI_NAME"

Procedure

1. Configure the various AWS parameters.

   1. Set the AMI variable. Run the following command and copy the required AMI ID:

      $ aws ec2 describe-images --owners self

      $ AMI=<AMI_ID>

   2. Set the SECURITY_GROUP variable. Run the following command and copy the required security group ID:

      $ aws ec2 describe-security-groups

      $ SECURITY_GROUP=<SECURITY_GROUP_ID>

   3. Set the SUBNET variable. Run the following command and copy the required subnet:

      $ aws ec2 describe-subnets

      $ SUBNET=<SUBNET>

   4. Set the INSTANCE_TYPE variable:

      $ INSTANCE_TYPE=<INSTANCE_TYPE_SIZE>

   5. Set the INSTANCE_NAME variable:

      $ INSTANCE_NAME=rhel-ai-instance

   6. Set the disk size variable:

      $ DISK_SIZE=<REQUIRED_DISK_SIZE>

   7. Set the KEY_NAME variable:

      $ KEY_NAME=<KEY_PAIR_NAME>

2. Create the instance by running the following command:

   $ aws ec2 run-instances \
   --image-id $AMI \
   --instance-type $INSTANCE_TYPE \
   --key-name $KEY_NAME \
   --security-group-ids $SECURITY_GROUP \
   --subnet-id $SUBNET \
   --block-device-mappings DeviceName=/dev/sda1,Ebs='{VolumeSize='$DISK_SIZE'}' \
   --tag-specifications 'ResourceType=instance,Tags=[{Key=Name,Value='$INSTANCE_NAME'}]'

   Important

   The default user account in the RHEL AI AMI is cloud-user. The cloud-user account has passwordless sudo access.