OBIEE SampleApp v406 Amazon EC2 AMI - available for public use

I wrote a while ago about converting Oracle's superb OBIEE SampleApp from a VirtualBox image into an EC2-hosted instance. I'm pleased to announce that Oracle have agreed for us to make the image (AMI) on Amazon available publicly. This means that anyone who wants to run their own SampleApp v406 server on Amazon's EC2 cloud service can do so.

2014-11-11_17-47-32

2014-11-12_09-15-41

Important caveats

Before getting to the juicy stuff there's some important points to note about access to the AMI, which you are implicitly bound by if you use it:

  1. In accessing it you're bound by the same terms and conditions that govern the original SampleApp
  2. SampleApp is only ever for use in your own development/testing/prototyping/demonstrating with OBIEE. It must not be used as the basis for any kind of Productionisation.
  3. Neither Oracle nor Rittman Mead provide any support for SampleApp or the AMI, nor warranty to any issues caused through their use.
  4. Once launched, the server will be accessible to the public and its your responsibility to secure it as such.

How does it work?

  1. Create yourself an AWS account, if you haven't already. You'll need your credit card for this. Read more about getting started with AWS here.
  2. Request access to the AMI (below)
  3. Launch the AMI on your AWS account
  4. Everything starts up automagically. After 15-20 minutes, enjoy your fully functioning SampleApp v406 instance, running in the cloud!

How much does it cost?

You can get an estimate of the cost involved using the Amazon Calculator.

As a rough guide, as of November 2014 an "m3.large" instance costs around $4 a day  -- but it's your responsibility to check pricing and commitments.

Be aware that once a server is created you'll incur costs on it right through until you "terminate" it. You can "stop" it (in effect, power it off) which reduces the running costs but you'll still pay for the 'disk' (EBS volume) that holds it. The benefit of this though is that you can then power it back up and it'll be as you left it (just with a different IP).

You can track your AWS usage through the AWS page here.

Security

  • Access to the instance's command line is through SSH as the oracle user using SSH keys only (provided by you when you launch the server) - no password access
    • You cannot ssh to the server as root; instead connect as oracle and use sudo as required.
    • The ssh key does not get set up until the very end of the first boot sequence, which can be 20 minutes. Be patient!
  • All the OBIEE/WebLogic usernames and passwords are per the stock SampleApp v406 image, so you are well advised to change them. Otherwise if someone finds your instance running, they'll be able to access it
  • There is no firewall (iptables) running on the server. Since this is a public server you'd be wise to make use of Amazon's Security Group functionality (in effect, a firewall at the virtual hardware level) to block access on all ports except those necessary. For example, you could block all traffic except 7780, and then enable access on port 22 (SSH) and 7001 (Admin Server) just when you need to access it for admin.

Using the AMI

  1. You first need to get access to the AMI, through the form below. You also need an active AWS account.
  2. Launch the server:
    1. From the AWS AMI page locate the SampleApp AMI using the details provided when you request access through the form below. Make sure you are on the Ireland/eu-west-1 region. Click Launch.
    2. Select an Instance Type. An "m3.large" size is a good starting point (this site is useful to see the spec of all instances).2014-11-11_22-42-48
    3. Click through the Configure Instance DetailsAdd Storage, and Tag Instance screens without making changes unless you need to.
    4. On the Security Group page select either a dedicated security group if you have already configured one, or create a new one. A security group is a firewall that controls traffic to the server regardless of any software firewall configured or not on the instance. By default only port 22 (SSH) is open, so you'll need to open at least 7780 for analytics, and 7001 too if you want to access WLS/EM as well Note that you can amend a security group's rules once the instance is created, but you cannot change which security group it is bound to. For ad-hoc purposes I'd always use a dedicated security group per instance so that you can change rules just for your server without impacting others on your account. 2014-11-11_22-47-33
    5. Click on Review and Launch, check what you've specified, and then click Launch. You'll now need to either specific an existing SSH key pair, or generate a new one. It's vital that you get this bit right, otherwise you'll not be able to access the server. If you generate a new key pair, make sure you download it (it'll be a .pem file). 2014-11-11_22-49-29
    6. Click Launch Instances 2014-11-11_22-51-09You'll get a hyperlinked Instance ID; click on that and it'll take you to the Instances page filtered for your new server. 2014-11-11_22-52-01 Shortly you'll see the server's public IP address shown. 2014-11-11_22-52-09
  3. OBIEE is configured to start automagically at boot time along with the database. This means that in theory you don't need to actually access the server directly. It does take 15-20 minutes on first boot to all fire up though, so be patient.
  4. The managed server is listening on port 7780, and admin server on 7001. If your server IP is 42.42.42.42 the URLs would be:
    • Analytics: http://42.42.42.42:7780/analytics
    • WLS: http://42.42.42.42:7001/console
    • EM: http://42.42.42.42:7001/em

On the server

The server is a stock SampleApp v406 image, with a few extras:

  • obiee and dbora services configured and set to run at bootup. Control obiee using:
    sudo service obiee status
    sudo service obiee stop
    sudo service obiee start
    sudo service obiee restart
  • screen installed with a .screenrc setup

Accessing the AMI

To get access to the AMI, please complete this short form and we will send you the AMI details by email.

By completing the form and requesting access to the AMI, you are acknowledging that you have read and understood the terms and conditions set out by Oracle here.