Month: February 2024

CGP的spot vm，不支持使用free tair credits，吓我一跳

实际是庸人自扰，因为我把free tier和free credits混淆在了一起。

• free tier指用户可以免费、限量、限品种的使用部分google的服务，例如地图、计算资源等
• free credits指用户可以在注册成功后的90天内，免费获得300美金来购买google的各项服务。

夭折的GCP instance

• 因为不知道什么原因，我在google cloud上的第一个instance（20240215，春节期间申请）被停机了，无法重启，官方给出的说明如下：
• 分析:是在设置vpn network的firewall rule时，按照eve安装文档要求，新增了定制的egress流量（outband），其中tcp协议是全部端口（0-65535），来源ip是所有范围（ipv4，0.0.0.0/0），所以造成instance运行没两天，就被强制停机。
• 没办法，我一方面发邮件给google cloud的support发了邮件，同时也思考解决方案。邮件很快有回复
  这并没有什么卵用，我除了礼貌感谢外，没有其他办法。
• 还好这是云啊，直接删除instance，重新安装部署（可怜短短几天，85加币就没有了）

重新创建GCP的instance

• 按照eve要求，重新创建具有vmx功能的虚拟机，也就是nested套娃虚拟机；
• 这次特地选择了vm是spot vm，是所有vm中的丐中丐，价格据说off 60%，代价是随时会被停机，下面是介绍

This page describes Spot VMs: virtual machine (VM) instances that are excess Compute Engine capacity. Spot VMs have significant discounts, but Compute Engine might preemptively stop or delete (preempt) Spot VMs to reclaim the capacity at any time. Spot VMs are the latest version of preemptible VMs.

The provisioning model of a VM affects its discounts and availability; Compute Engine VMs can use either the standard provisioning model (standard VMs) (default) or the spot provisioning model (Spot VMs). In contrast to standard VMs, Spot VMs are available at much lower prices but have lower availability because they are subject to preemption. Use Spot VMs to reduce costs for fault-tolerant workloads.

To learn more about Compute Engine VMs in general, read the Virtual machine instances documentation. To learn how to create Spot VMs, read Create and use Spot VMs.

What are Spot VMs?

Spot VMs are available at much lower prices—60-91% discounts for most machine types and GPUs as well as smaller discounts for local SSDs and A3 VMs—compared to the on-demand price for standard VMs. However, Compute Engine might preempt Spot VMs at any time, such as when it needs the resources for other tasks. At this uncertain preemption time, Compute Engine either stops (default) or deletes your Spot VMs depending on your specified termination action for each Spot VM. Spot VMs are excess Compute Engine capacity, so their availability varies based on Compute Engine usage. Spot VMs do not have a minimum or maximum runtime unless you specifically limit the runtime.

If your workloads are fault-tolerant and can withstand possible VM preemption, Spot VMs can reduce your Compute Engine costs significantly. For example, batch processing jobs can run on Spot VMs. If some of those VMs stop during processing, the job slows but does not completely stop. Spot VMs complete your batch processing tasks without placing additional load on your existing VMs and without requiring you to pay full price for additional standard VMs.

• 我们可以看到，在spot模式下，google vm可以便宜到0.01美元每小时
  *

• 下面是我的选择
  

• 还可以更加丧心病狂，因为spot停机后是不收费的（硬盘和静态ip需要收费），那么我们再来一个定期停机，一切就完美了。
  当完成定期计划来启停机器时，会出现如下告警

Compute Engine System service account service-111462968063@compute-system.iam.gserviceaccount.com needs to have [compute.instances.start] permissions applied in order to perform this operation.

参考下面的方案就能解决
Solution:

• Login to the Google Cloud Console
• To to IAM & Admin
• Select IAM in the left panel
• Click the box Include Google-provided role grants on the right side of the window. This enables showing Google-managed service accounts.
• Locate the service account. Press CTRL-F5 to open a search box. Enter the text compute-system.
• Click the pencil icon to edit the service account.
• Click ADD ANOTHER ROLE
• In the role filter enter Compute. Select Compute Instance Admin (v1).
• Click SAVE

Wait a few minutes before trying to use the new permissions.

• 完成后上传交换机的os文件（见下面章节）
• 安装eve，并启动
• eve界面启动后，添加node，启动switch都正常，但是telnet无法工作（ssh正常）
  • firewall rule添加ingress，tcp 23，无效
  • firewall rule添加egress，tcp 23，无效
  • firewall rule添加ingress，tcp 0-65535，ip 0.0.0.0/0,telnet成功！
    

上传交换机和路由器的系统文件

1. Cisco的iol/ios镜像文件

   1. 把iol文件，后缀是bin，上传到目录：/opt/unetlab/addons/iol/bin/
   2. 使用如下命令来修改权限(切记)

   /opt/unetlab/wrappers/unl_wrapper -a fixpermissions
   

   3. 运行授权文件No need to fix the permission of the license file as we will run this file using the python program. Run command

   python3     CiscoIOUKeygen3f.py
   

   4. 使用如下命令来测试iou/ios文件是否安装成功

   cd /opt/unetlab/addons/iol/bin
   touch NETMAP
   LD_LIBRARY_PATH=/opt/unetlab/addons/iol/lib /opt/unetlab/addons/iol/bin/<iosname.bin> 1
   
   ***************************************************************
   IOS On Unix - Cisco Systems confidential, internal use only
   Under no circumstances is this software to be provided to any
   non Cisco staff or customers.  To do so is likely to result
   in disciplinary action. Please refer to the IOU Usage policy at
   wwwin-iou.cisco.com for more information.
   ***************************************************************
   
                 Restricted Rights Legend
   
   Use, duplication, or disclosure by the Government is
   subject to restrictions as set forth in subparagraph
   (c) of the Commercial Computer Software - Restricted
   Rights clause at FAR sec. 52.227-19 and subparagraph
   (c) (1) (ii) of the Rights in Technical Data and Computer
   Software clause at DFARS sec. 252.227-7013.
   
              cisco Systems, Inc.
              170 West Tasman Drive
              San Jose, California 95134-1706
   

2. Cisco的其他镜像文件
   1.

3. 华为的镜像文件
   1.

4. 华三的镜像文件
   1.