EUMETCast Terrestrial on AMT Flavour

This Ansible Playbook configures an existing virtual machine running within the European Weather Cloud (EWC), to equip it with the EUMETCast Terrestrial over AMT software stack.

EUMETCast is EUMETSAT’s primary dissemination mechanism for the near-real-time delivery of satellite data. EUMETCast serves data through two complementary delivery systems: EUMETCast Satellite and EUMETCast Terrestrial.

Terrestrial services for data distribution, available and supported, include:

💡 Additional terrestrial services for data distribution will be created in the future for various missions. If unsure which services your you access, please contact the EUMETSAT User Helpdesk (ops@eumetsat.int).

Functionality

• Installs and configures the EUMETCast Terrestrial client over Automatic Multicast Tunnelling (AMT)
• Deploys the Tellicast terrestrial receiver runtime
• Configures network translation required for multicast reception over AMT
• Creates maintenance jobs for log and data retention
• Automatically cleans up disk space by keeping only the latest 5 minutes of transmitted data, under the /home/eumetuser/data subdirectory.

Prerequisites

⛔ When deploy on ECMWF site, network traffic required by this Item may be blocked due to ECMWF Firewall. Please get in touch with us through the EWC Support portal.

💡 This Item is supported by the EWCCLI and can be deployed, together with a compatible VM, via it. Checkout the EWC User Stories: I want to use the ewccli documentation pages to learn how.

• Register a user account on the EUMETSAT User Portal

• Subscribe to the service and data for EUMETCast Terrestrial

  • Ensure you select at least one EKU (temporal quota allocation)

• Request a EUMETCast Terrestrial user key for access from the EWC:

  • Write to EUMETSAT Helpdesk (ops@eumetsat.int), making sure to provide them your EUMETSAT User Portal username alongside your request

• Install git (version 2.0 or higher )

• Install python (version 3.9 or higher)

• Install ansible (version 2.15 or higher)

• Verify the eumetcast OpenStack Security Group exists in your EWC tenancy

  💡 You may create Security Groups via this EWC Community Hub Item if pre-required ones are missing.

• If you plan to configure an existing VM, ensure it meets the minium requirements before moving on to the Usage section below:

  • VM Image: Ubuntu 22
  • VM Plan: 8 CPU cores, 64GB RAM, 265GB Disk + 1TB Disk (secondary)

    ⚠️ Make sure the secondary disk is formatted and mounted by following this guide steps from the EWC Knowledge Base.

  • Network: Private
  • Security Groups: eumetcast
  • Floating IP: Optional (not recommended from a security standpoint)

  Otherwise, provision a new VM with above specifications before continuing (see EWC Getting Started: Provision a VM for details).

Usage

1. Clone the repository

git clone https://github.com/ewcloud/ewc-ansible-playbook-flavours-and-provisioning.git

1.1. Change to the specific Item's subdirectory

cd playbooks/eumetcast-terrestrial-amt-flavour

1.2. Checkout an specific Item's version

⚠️ Make sure to replace x.y.z in the command below, with your version of preference.

git checkout x.y.z

2. Download Ansible dependencies

💡 By default, Ansible Roles are installed under the ~/.ansible/roles directory within your working environment.

Download the correct version of the Ansible dependencies, if you haven't done so already:

ansible-galaxy role install --force -r requirements.yml

3. Specify the target host and SSH credentials

Create an inventory file, to specify address/credentials that your local working environment should use to connect to the target VM.

Copy into the file one of the two snippets below, and replace the placeholders (i.e. values enclosed in < > characters):

• Connecting form within the EWC tenancy's network

  # inventory.yml
  ---
  ewcloud:
    hosts:
      target:
        ansible_python_interpreter: auto
        ansible_host: <add the IP address of the target host>
        ansible_ssh_private_key_file: <add the path to local SSH private key file>
        ansible_user: cloud-user
        ansible_ssh_common_args: -o StrictHostKeyChecking=no
  

OR

• Connecting from outside the EWC tenancy's network

  ⚠️ This requires an SSH Bastion to be already provisioned within your EWC tenancy.

  # inventory.yml
  ---
  ewcloud:
    hosts:
      target:
        ansible_host: <add the IP address of the target host>
        ansible_ssh_user: cloud-user
        ansible_ssh_private_key_file: <add the path to local SSH private key file>
        ansible_python_interpreter: auto
  
  all:
    vars:
      ansible_ssh_common_args: >-
        -o StrictHostKeyChecking=no
        -o UserKnownHostsFile=/dev/null
        -o ProxyCommand="ssh
                        -o StrictHostKeyChecking=no
                        -o UserKnownHostsFile=/dev/null
                        -o BatchMode=yes
                        -W %h:%p
                        -i <add the path to local SSH private key file>
                        cloud-user@<add the IP address of the ssh bastion>"
  

4. Configure and apply the template

• Interactive Mode

  By running the following command, you can trigger an interactive session that prompts you for the necessary user inputs, and then applies changes to your target EWC environment:

  ansible-playbook -i inventory.yml eumetcast-terrestrial-amt-flavour.yml
  

OR

• Non-Interactive Mode

  💡 To learn more about defining variables at runtime, checkout the official Ansible documentation.

  You can also run in non-interactive mode by passing the --extra-vars or -e flag, followed by a map of key-value pairs; one for each and every available input (see inputs section below). For example:

  ansible-playbook \
    -i inventory.yml \
    -e '{
        "tellicast_license_user_name":"<redacted>",
        "tellicast_license_user_key":"<redacted>"
      }' \
    eumetcast-terrestrial-amt-flavour.yml
  

Inputs

Dependencies

💡 Upon execution, a SBOM (SPDX format) is auto-generated and stored in the VM's file system root directory (see /sbom.json).

Operation

Checkout the how-to guides to learn about management of the Item after initial setup.