Create Compute Instances

You must create virtual machines (compute instances) to house the bastion server and the remote data gateway.

You must also generate a public/private key pair to access the instances.

Create a Key Pair

Before you create and access the compute instance, you must generate a public/private key pair in OpenSSH format using a utility such as ssh-keygen for Linux-type systems.

Instances use an SSH key pair to authenticate a remote user. A key pair file contains a private key and public key. You keep the private key on your computer and provide the public key every time you launch an instance.

For Linux systems:

  1. Generate ssh-keys for your machine:
       # ssh-keygen
    
  2. When prompted, enter the path to the file in which you want to save the key or press Enter to use the default shown.
  3. When prompted, enter a password.
    The password isn't displayed when you type it in. Remember the password. If you forget the password, you can't recover it.
  4. When prompted, enter the password again to confirm it.

The command generates an SSH key pair consisting of a public key and a private key, and saves them in the specified path. The file name of the public key is created automatically by appending .pub to the name of the private key file. For example, if the file name of the SSH private key is id_rsa, then the file name of the public key is id_rsa.pub.

Make a note of the path where you've saved the SSH key pair. When you create instances, you must provide the SSH public key. When you log in to an instance, you must specify the corresponding SSH private key and enter the password when prompted.

Create a Compute Instance for a Bastion Server

Create a virtual Linux machine as the compute instance for the bastion server.

Before you create and access the compute instance, you must generate a public/private key pair in OpenSSH format using a utility such as ssh-keygen. Instances use an SSH key pair to authenticate a remote user. A key pair file contains a private key and public key. You keep the private key on your computer and provide the public key every time you launch an instance.
  1. Open the navigation menu. Under Core Infrastructure, click Compute and then click Instances. Then, choose a Compartment you have permission to work in.
  2. Click Create Instance.
  3. Specify a name in Name your instance. You can add or change the name later. The name doesn't need to be unique, because an Oracle Cloud Identifier (OCID) uniquely identifies the instance.
  4. Use the default image or click Change Image and choose from the options.
  5. Click Show Shape, Network, Storage Options if not already displayed and verify the domain, shape, compartment, VCN, and public subnet.
  6. Make sure that Assign a Public IP Address is selected. This is required for the bastion server.
  7. Click Paste SSH Keys and paste your previously created public key into the SSH key box (when you connect to the instance you provide the associated private key).
  8. Click Create.
    The provisioning work request is displayed. While the instance is being created, the status is displayed as PROVISIONING. The status changes to RUNNING when the instance is fully operational. When the instance is fully provisioned and running, you can connect to it using secure shell (SSH).

Create a Compute Instance for a Remote Data Gateway

Create a virtual Linux machine as the compute instance for the remote data gateway (RDG).

Before you create and access the compute instance, you must generate a public/private key pair in OpenSSH format using a utility such as ssh-keygen. Instances use an SSH key pair to authenticate a remote user. A key pair file contains a private key and public key. You keep the private key on your computer and provide the public key every time you launch an instance.
  1. Open the navigation menu. Under Core Infrastructure, click Compute and then click Instances. Then, choose a Compartment you have permission to work in.
  2. Click Create Instance.
  3. Specify a name in Name your instance. You can add or change the name later. The name doesn't need to be unique, because an Oracle Cloud Identifier (OCID) uniquely identifies the instance.
  4. Use the default image or click Change Image and choose from the options.
  5. Click Show Shape, Network, Storage Options if not already displayed and verify the domain, shape, compartment, VCN, and private subnet.
  6. Make sure that Do Not Assign a Public IP Address is selected. A compute instance in a private subnet can't have a public IP address.
  7. Click Paste SSH Keys and paste your previously created public key into the SSH key box (when you connect to the instance you provide the associated private key).
  8. Click Create.
    The provisioning work request is displayed. While the instance is being created, the status is displayed as PROVISIONING. The status changes to RUNNING when the instance is fully operational. When the instance is fully provisioned and running, you can connect to it using secure shell (SSH).