はじめてのAWS Snowcone – (7) EC2のセットアップ

# 追加ディスクをアタッチしたOS内部でのコマンド実行結果
$ lsblk
NAME     MAJ:MIN RM  SIZE RO TYPE MOUNTPOINT
sda        8:0    0    8G  0 disk
tqsda1     8:1    0    8G  0 part /
mqsda128 259:0    0    1M  0 part
vda      252:0    0  100G  0 disk

# インスタンスメタデータ(v1) が利用可能
$ curl http://169.254.169.254/latest/meta-data/
ami-id
hostname
instance-id
instance-type
local-hostname
local-ipv4
mac
network/
reservation-id
security-groups
public-ipv4

# インスタンス情報は特筆する点なし
$ curl http://169.254.169.254/latest/meta-data/ami-id
s.ami-0e96d810764e93bd4
$ curl http://169.254.169.254/latest/meta-data/instance-id
s.i-811bef5f04eb1a609
$ curl http://169.254.169.254/latest/meta-data/instance-type
snc1.micro

# Private IPが 34.223.14.128/25 で Public IPがVNIのIPに見える形となる
$ curl http://169.254.169.254/latest/meta-data/local-ipv4
34.223.14.193
$ curl http://169.254.169.254/latest/meta-data/public-ipv4
192.168.9.156

# セキュリティグループは default 
$ curl http://169.254.169.254/latest/meta-data/security-groups
default

# ネットワーク経由でNFSサーバーにアクセス可能
sudo mkdir /mnt/nfs
sudo mount -t nfs 192.168.9.155:buckets/shibata-snowcone-test-2021 /mnt/nfs

# NFSサーバーへばっちりアクセス可能
$ ls -al /mnt/nfs/
total 12492
drwxrwxrwx 1 root       root             68 Dec 25 00:50 .
drwxr-xr-x 3 root       root             17 Dec 25 04:54 ..
-rwxr-xr-x 1 4294967294 4294967294 12788163 Dec 25 00:46 100000-files.zip
drwxr-xr-x 1 4294967294 4294967294      386 Dec 25 01:01 bigfiles
drwxr-xr-x 1 4294967294 4294967294  3400000 Dec 24 21:56 smallfiles

# PowerShell 7.2.1環境で実施 (他シェルではjqなどで頑張ってください)
C:\> snowballEdge describe-device --profile my-first-snowcone | ConvertFrom-Json | Select-Object -ExpandProperty DeviceCapacities

Name      : HDD Storage
Unit      : Byte
Total     : 157980389376
Used      : 10737418240
Available : 147242971136

Name      : SSD Storage
Unit      : Byte
Total     : 0
Used      : 0
Available : 0

Name      : vCPU
Unit      : Number
Total     : 3
Used      : 2
Available : 1

Name      : Memory
Unit      : Byte
Total     : 5368709120
Used      : 2147483648
Available : 3221225472

Name      : GPU
Unit      : Number
Total     : 0
Used      : 0
Available : 0

# PowerShell 7.2.1環境でSnowball Edge Clientを使用

# 物理NICのIDを取得 (この例ではLAN2を使う)
C:\> snowballEdge describe-device --profile my-first-snowcone | ConvertFrom-Json | Select-Object -ExpandProperty PhysicalNetworkInterfaces

PhysicalNetworkInterfaceId : s.ni-842025a469b4329e5
PhysicalConnectorType      : RJ45
IpAddressAssignment        : STATIC
IpAddress                  : 192.168.9.150
Netmask                    : 255.255.255.0
DefaultGateway             : 192.168.9.1
MacAddress                 : 8c:0f:6f:xx:xx:xx

PhysicalNetworkInterfaceId : s.ni-88cabc27426d3c6e7
PhysicalConnectorType      : RJ45_2
IpAddressAssignment        : STATIC
IpAddress                  : 192.168.9.160
Netmask                    : 255.255.255.0
DefaultGateway             : 192.168.9.1
MacAddress                 : 8c:0f:6f:xx:xx:xx

# DNIを作成 (最低限の設定のみ)
C:\> snowballEdge create-direct-network-interface --profile my-first-snowcone `
     --instance-id 's.i-811bef5f04eb1a609' `
     --physical-network-interface-id 's.ni-88cabc27426d3c6e7'
{
  "DirectNetworkInterface" : {
    "DirectNetworkInterfaceArn" : "arn:aws:snowball-device:::interface/s.ni-85371eea7a3dd2a51",
    "PhysicalNetworkInterfaceId" : "s.ni-88cabc27426d3c6e7",
    "InstanceId" : "s.i-811bef5f04eb1a609",
    "Driver" : "ixgbevf",
    "MacAddress" : "1a:74:cc:18:d4:b6"
  }
}

# DNIの確認は snowballEdge describe-direct-network-interfaces コマンドを使う
C:\> snowballEdge describe-direct-network-interfaces --profile my-first-snowcone
{
  "DirectNetworkInterfaces" : [ {
    "DirectNetworkInterfaceArn" : "arn:aws:snowball-device:::interface/s.ni-85371eea7a3dd2a51",
    "PhysicalNetworkInterfaceId" : "s.ni-88cabc27426d3c6e7",
    "InstanceId" : "s.i-811bef5f04eb1a609",
    "Driver" : "ixgbevf",
    "MacAddress" : "1a:74:cc:18:d4:b6"
  } ]
}

# ドキュメントのサンプルを一部変更しAmazon Linux 2インスタンスで実施
#  * https://docs.aws.amazon.com/snowball/latest/snowcone-guide/snowcone-network-config-ec2.html

# DNIのMACアドレスを設定
DNI_MAC=1a:74:cc:18:d4:b6
# DNIのNIC名を設定。通常は eth1 。
DNI=eth1

# EC2のVNI (通常eth0) の情報を取得し、内部ネットワークの通信はeth0経由になる様にルーティングテーブルを更新 
PRIVATE_IP=$(curl -s http:/169.254.169.254/latest/meta-data/local-ipv4)
PRIVATE_GATEWAY=$(ip route show to match 0/0 dev eth0 | awk '{print $3}')
ROUTE_TABLE=10001
echo from $PRIVATE_IP table $ROUTE_TABLE | sudo tee -a /etc/sysconfig/network-scripts/rule-eth0
echo default via $PRIVATE_GATEWAY dev eth0 table $ROUTE_TABLE | sudo tee -a /etc/sysconfig/network-scripts/route-eth0

# DNI (eth1) の設定ファイルを追加 : この例では DHCP だが環境にあわせてよしなに変更可能
cat << EOF | sudo tee -a /etc/sysconfig/network-scripts/ifcfg-$DNI
DEVICE="$DNI"
NAME="$DNI"
HWADDR="$DNI_MAC"
ONBOOT=yes
NOZEROCONF=yes
BOOTPROTO=dhcp
TYPE=Ethernet
EOF

## 必要があればデバイス名を変更する、とのことだったが今回は実施せず。 : 変更する必要がなかったため
# Rename DNI device if needed.
# CURRENT_DEVICE_NAME=$(LANG=C ip -o link | awk -F ': ' -vIGNORECASE=1 '!/link\/ieee802\.11/ && /'"$DNI_MAC"'/ { print $2 }')
# ip link set $CURRENT_DEVICE_NAME name $DNI

# Networkサービスの再起動
sudo systemctl restart network

$ ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 52:54:00:ce:2e:d4 brd ff:ff:ff:ff:ff:ff
    inet 34.223.14.193/25 brd 34.223.14.255 scope global dynamic eth0
       valid_lft 3581sec preferred_lft 3581sec
    inet6 fe80::5054:ff:fece:2ed4/64 scope link
       valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
    link/ether 1a:74:cc:18:d4:b6 brd ff:ff:ff:ff:ff:ff
    inet 192.168.9.159/24 brd 192.168.9.255 scope global dynamic eth1
       valid_lft 259184sec preferred_lft 259184sec
    inet6 fe80::1874:ccff:fe18:d4b6/64 scope link
       valid_lft forever preferred_lft forever

# DNIを削除
C:\> snowballEdge delete-direct-network-interface --profile my-first-snowcone --direct-network-interface-arn "arn:aws:snowball-device:::interface/s.ni-85371eea7a3dd2a51"
The direct network interface has been deleted from your Snowball Edge. You can determine the direct network interfaces available on your Snowball Edge using the describe-direct-network-interfaces command.