Operator Privilege

Note: These instructions are old, and use an earlier version of the clearinghouse and of omni. While the instructions should be largely correct, some minor adjustments may need to be made to update them for newer versions of the software.

Slice Shutdown

Operators have the ability to retrieve a slice credential for any slice. With this slice credential an operator can perform any operation on the slice. This includes the Shutdown operation.

1. Download your certificate and private key

1. Log in to the portal and go to the profile page (see upper right corner "Profile" button)
2. Under "Command line tools", click on "download your SSL certificate"
3. Choose one of the three options and follow the instructions

2. Create an omni config file

In order to obtain a slice credential an operator must use omni. Here is a sample omni configuration file to use. Note this configuration file requires omni 2.2 or higher.

[omni]
default_cf = geni

[geni]
type=pgch
ch=https://panther.gpolab.bbn.com:8443/
sa=https://panther.gpolab.bbn.com:8443/

# When you download your cert and key via the portal they come in 1 file.
# That combined .pem file can be used as both cert and key here.
cert=~/.ssl/geni/geni-USERNAME.pem
key=~/.ssl/geni/geni-USERNAME.pem

3. Act on a slice

There are two options at this point:

1. Download a slice credential for use in acting on the slice

• This can be a faster option if you plan to work with multiple aggregates. Omni will not need to interact with the clearinghouse each time, it will go directly to the aggregates if it already has the slice credential.

1. Act directly on the slice

• This is a simpler option. Omni will automatically download the slice credential for you each time it is invoked.

3a. Download a slice credential for use in acting on a slice

With the above omni configuration file in place, invoke omni as follows to retrieve a slice credential:

src/omni.py -c ~/.gcf/omni-geni.ini getslicecred <SLICE_NAME> -r <PROJECT_NAME>

Then invoke omni using that slice credential to act on the slice:

src/omni.py -c ~/.gcf/omni-geni.ini sliverstatus <SLICE_NAME> -r <PROJECT_NAME> --slicecredfile=<SLICE_CRED_FILENAME> -a <AGGREGATE_URL>

3b. Act directly on the slice

Alternatively, an operator can invoke operations directly and omni will automatically retrieve a slice credential:

src/omni.py -c ~/.gcf/omni-geni.ini sliverstatus <SLICE_NAME> -r <PROJECT_NAME> -a <AGGREGATE_URL>