Open OnDemand, a web portal for HPC and interactive Linux access, giving your team a browser dashboard, file manager, terminal, job composer and interactive apps the moment it boots.
Open OnDemand is an open source web portal that puts a research computing environment in the browser. Instead of asking every user to master SSH, batch schedulers and remote file transfer, it presents one authenticated dashboard from which people browse and edit their files, open a live terminal, compose and submit jobs to a scheduler, watch those jobs run, and launch interactive apps that stream a full graphical session back to the browser tab.
Everything runs per user: the portal authenticates each person through the web server, maps them to a real account, and starts a private application server that acts on their behalf with their own permissions and their own home directory. Around that core it bundles a file manager, a job composer that builds and tracks submissions from reusable templates, an active jobs view, and an interactive apps framework for tools that need a persistent desktop or notebook. It is the front end that a great many computing centres put in front of their clusters, and it works just as well as a single self contained node.
Open OnDemand needs an authentication layer bolted on before it is safe to expose, and it grants shell and file access to whoever gets through, so a misconfigured instance is a serious risk. cloudimg closes that gap before the instance is ever reachable. The web front door is gated by a credential that is generated uniquely on the first boot of every instance and written to a file only root can read; the image ships with an empty credential store, so every login is refused until that first boot completes and there is never a known or default password in the image. Only one web identity exists and it maps to a Linux account whose password is locked, so no built in operating system user can reach the portal or its terminal. The instance is fully self contained: a single node scheduler is bundled so jobs launched from the portal actually run on the machine, and its cluster key and configuration are regenerated per instance on first boot rather than shared from the image. The image is fully patched with unattended security upgrades enabled, ships a self test that submits a real job and reads its output back out, and every deployment is paired with a step by step deploy guide and backed by 24/7 cloudimg support.
Real screenshots taken while testing this image against its deployment guide.