Chapter 3. Installing RHEL AI on AWS

Procedure

1. Install the AWS command-line tool by following the AWS documentation

2. You need to create a S3 bucket and set the permissions to allow image file conversion to AWS snapshots.

   1. Create the necessary environment variables by running the following commands:

      $ export BUCKET=<custom_bucket_name>
      $ export RAW_AMI=nvidia-bootc.ami
      $ export AMI_NAME="rhel-ai"
      $ export DEFAULT_VOLUME_SIZE=1000

      Copy to Clipboard Toggle word wrap
      Note

      On AWS, the DEFAULT_VOLUME_SIZE is measured GBs.

   2. You can create an S3 bucket by running the following command:

      $ aws s3 mb s3://$BUCKET

      Copy to Clipboard Toggle word wrap

   3. You must create a trust-policy.json file with the necessary configurations for generating a S3 role for your bucket:

      $ printf '{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "Service": "vmie.amazonaws.com" }, "Action": "sts:AssumeRole", "Condition": { "StringEquals":{ "sts:Externalid": "vmimport" } } } ] }' > trust-policy.json

      Copy to Clipboard Toggle word wrap

   4. Create an S3 role for your bucket that you can name. In the following example command, vmiport is the name of the role.

      $ aws iam create-role --role-name vmimport --assume-role-policy-document file://trust-policy.json

      Copy to Clipboard Toggle word wrap

   5. You must create a role-policy.json file with the necessary configurations for generating a policy for your bucket:

      $ printf '{ "Version":"2012-10-17", "Statement":[ { "Effect":"Allow", "Action":[ "s3:GetBucketLocation", "s3:GetObject", "s3:ListBucket" ], "Resource":[ "arn:aws:s3:::%s", "arn:aws:s3:::%s/*" ] }, { "Effect":"Allow", "Action":[ "ec2:ModifySnapshotAttribute", "ec2:CopySnapshot", "ec2:RegisterImage", "ec2:Describe*" ], "Resource":"*" } ] }' $BUCKET $BUCKET > role-policy.json

      Copy to Clipboard Toggle word wrap

   6. Create a policy for your bucket by running the following command:

      $ aws iam put-role-policy --role-name vmimport --policy-name vmimport-$BUCKET --policy-document file://role-policy.json

      Copy to Clipboard Toggle word wrap
3. Now that your S3 bucket is set up, you need to download the RAW image from Red Hat Enterprise Linux AI download page

4. Copy the RAW image link and add it to the following command:

   $ curl -Lo disk.raw.gz <link-to-raw-file>

   Copy to Clipboard Toggle word wrap

5. Unzip the raw.gz file with the following command:

   $ gunzip disk.raw.gz

   Copy to Clipboard Toggle word wrap

6. Upload the image to the S3 bucket with the following command:

   $ aws s3 cp disk.raw s3://$BUCKET/$RAW_AMI

   Copy to Clipboard Toggle word wrap

7. Convert the image to a snapshot and store it in the task_id variable name by running the following commands:

   $ printf '{ "Description": "my-image", "Format": "raw", "UserBucket": { "S3Bucket": "%s", "S3Key": "%s" } }' $BUCKET $RAW_AMI > containers.json

   Copy to Clipboard Toggle word wrap

   $ task_id=$(aws ec2 import-snapshot --disk-container file://containers.json | jq -r .ImportTaskId)

   Copy to Clipboard Toggle word wrap

8. You can check the progress of the disk image to snapshot conversion job with the following command:

   $ aws ec2 describe-import-snapshot-tasks --filters Name=task-state,Values=active

   Copy to Clipboard Toggle word wrap

9. Once the conversion job is complete, you can get the snapshot ID and store it in a variable called snapshot_id by running the following command:

   $ snapshot_id=$(aws ec2 describe-import-snapshot-tasks | jq -r '.ImportSnapshotTasks[] | select(.ImportTaskId=="'${task_id}'") | .SnapshotTaskDetail.SnapshotId')

   Copy to Clipboard Toggle word wrap

10. Add a tag name to the snapshot, so it’s easier to identify, by running the following command:

    $ aws ec2 create-tags --resources $snapshot_id --tags Key=Name,Value="$AMI_NAME"

    Copy to Clipboard Toggle word wrap

11. Register an AMI from the snapshot with the following command:

    $ ami_id=$(aws ec2 register-image  \
        --name "$AMI_NAME" \
        --description "$AMI_NAME" \
        --architecture x86_64 \
        --root-device-name /dev/sda1 \
        --block-device-mappings "DeviceName=/dev/sda1,Ebs={VolumeSize=${DEFAULT_VOLUME_SIZE},SnapshotId=${snapshot_id}}" \
        --virtualization-type hvm \
        --ena-support \
        | jq -r .ImageId)

    Copy to Clipboard Toggle word wrap

12. You can add another tag name to identify the AMI by running the following command:

    $ aws ec2 create-tags --resources $ami_id --tags Key=Name,Value="$AMI_NAME"

    Copy to Clipboard Toggle word wrap

Procedure

1. For various parameters, you need to gather the ID of the variable.

   1. To access the image ID, run the following command:

      $ aws ec2 describe-images --owners self

      Copy to Clipboard Toggle word wrap

   2. To access the security group ID, run the following command:

      $ aws ec2 describe-security-groups

      Copy to Clipboard Toggle word wrap

   3. To access the subnet ID, run the following command:

      $ aws ec2 describe-subnets

      Copy to Clipboard Toggle word wrap

2. Populate environment variables for when you create the instance

   $ instance_name=rhel-ai-instance
   $ ami=<ami-id>
   $ instance_type=<instance-type-size>
   $ key_name=<key-pair-name>
   $ security_group=<sg-id>
   $ disk_size=<size-of-disk>

   Copy to Clipboard Toggle word wrap

3. Create your instance using the variables by running the following command:

   $ aws ec2 run-instances \
       --image-id $ami \
       --instance-type $instance_type \
       --key-name $key_name \
       --security-group-ids $security_group \
       --subnet-id $subnet \
       --block-device-mappings DeviceName=/dev/sda1,Ebs='{VolumeSize='$disk_size'}' \
       --tag-specifications 'ResourceType=instance,Tags=[{Key=Name,Value='$instance_name'}]'

   Copy to Clipboard Toggle word wrap