Connecting UEC to Landscape

This page describes how you can connect your UEC cloud to the Canonical Landscape service.

Getting Started

How to connect your UEC cloud to Landscape:

Get a Landscape account. You can get a 60-day trial account by registering here: http://www.canonical.com/contact/landscaperegister .

Get an official SSL certificate from a root-trusted SSL certificate authority (CA).

Use the Apache mod_ssl instructions from your provider. In the process, you will create a key then you will get a certificate from your CA. You need both files.

Edit /etc/apache2/sites-available/default-ssl

and change the lines below to reflect the location of your SSL certificate and key:

SSLCertificateFile /path/to/your/certificate

SSLCertificateKeyFile /path/to/your/key

Do a

stop eucalyptus

then a

start eucalyptus

Do a

sudo apt-get install stunnel4

You need stunnel in order to communicate with Landscape.

Once you have your certificate and you have stunnel installed, you need to combine the two into a pem file called /etc/stunnel/stunnel.pem :

cat  key.key certificate.cert > /etc/stunnel/stunnel.pem

Then do a

sudo stunnel -d 443 -r localhost:8773

To make the change persistent across reboots add this to the bottom of /etc/stunnel/stunnel.conf :

[Eucalyptus for Landscape] accept = landscape.canonical.com:443 connect = localhost:8773

In Landscape, click Cloud then Register a new cloud, under Cloud Provider choose Other then use the following URL for your endpoint:

Go to your eucarc file and examine the EC2_URL value, alternatively you could do a

echo $EC2_URL (as long as you have included the eucarc in your environment).

Use this URL, but change port 8773 to 443 like so:

From EC2_URL: http://192.168.1.1:8773/services/Eucalyptus

Change to : http://192.168.1.1:443/services/Eucalyptus

Use the Access Key ID and Secret Access Key from your Credentials page on your UEC web interface.

Click Save and you should be done.