Build Isolated Environments for Training (PODs)

First congratulate them for this project!

I would like if you can give me recommendations on how to build isolated environments.

I am an instructor and I would like to give equal environments to each participant, the Pods would be between 3 or 5 vm.

I have insisted on doing it but users can see all the pods and all the vm.

My infrastructure is a single host and its vcenter 5.5 and opennebula 5.6.0

regards

Hello.
Here is my practice:

  • Virtual Data Center;
  • User groups;
  • Quotas (if needed);
  • VM Templates for Users groups with I modify by context;

Hi Vadim

Thanks for your reply, it is configured in this way
vDC_Pod1, GroupPod_1, UserPod_1.
In the permissions of the templates “owner” oneadmin, group “users” and others are activated, with “use” and “managed” enable
Storage and Network in the same way.
When I try to create a VM from a template with a user USR_PodX I get this message.
But now see “one.template.info] User [10] : Not authorized to perform USE IMAGE [31].”

Thanks you

[root@localhost ~]# onegroup list
ID NAME USERS VMS MEMORY CPU
0 oneadmin 3 - - -
1 users 0 0 / - 0M / - 0.0 / -
114 GRP_vDC_Pod1 1 0 / - 0M / - 0.0 / -
115 GRP_vDC_Pod2 1 0 / - 0M / - 0.0 / -
116 GRP_vDC_Pod3 1 0 / - 0M / - 0.0 / -
117 GRP_vDC_Pod4 1 0 / - 0M / - 0.0 / -
118 GRP_vDC_Pod5 1 0 / - 0M / - 0.0 / -
119 GRP_vDC_Pod6 1 0 / - 0M / - 0.0 / -
120 GRP_vDC_Pod7 1 0 / - 0M / - 0.0 / -
121 GRP_vDC_Pod8 1 0 / - 0M / - 0.0 / -
122 GRP_vDC_Pod9 1 0 / - 0M / - 0.0 / -
123 GRP_vDC_Pod10 1 0 / - 0M / - 0.0 / -
[root@localhost ~]#

[root@localhost ~]# oneuser list
ID NAME GROUP AUTH VMS MEMORY CPU
0 oneadmin oneadmin core - - -
1 serveradmin oneadmin server_c 0 / - 0M / - 0.0 / -
2 CloudAdmin oneadmin core 0 / - 0M / - 0.0 / -
10 USR_Pod1 GRP_vDC_Po core 0 / - 0M / - 0.0 / -
11 USR_Pod2 GRP_vDC_Po core 0 / - 0M / - 0.0 / -
12 USR_Pod3 GRP_vDC_Po core 0 / - 0M / - 0.0 / -
13 USR_Pod4 GRP_vDC_Po core 0 / - 0M / - 0.0 / -
14 USR_Pod5 GRP_vDC_Po core 0 / - 0M / - 0.0 / -
15 USR_Pod6 GRP_vDC_Po core 0 / - 0M / - 0.0 / -
16 USR_Pod7 GRP_vDC_Po core 0 / - 0M / - 0.0 / -
17 USR_Pod8 GRP_vDC_Po core 0 / - 0M / - 0.0 / -
18 USR_Pod9 GRP_vDC_Po core 0 / - 0M / - 0.0 / -
19 USR_Pod10 GRP_vDC_Po core 0 / - 0M / - 0.0 / -
[root@localhost ~]#

[root@localhost ~]# onetemplate list
ID USER GROUP NAME REGTIME
21 oneadmin users Local-Router_V6_TMP 09/19 16:02:09
22 oneadmin users Remote-Windows_V6_TMP 09/19 17:22:52
23 oneadmin users Remote-Router_V6_TMP 09/19 20:46:18
24 oneadmin users Local-Windws_V6_TMP 09/19 20:54:18
25 oneadmin users Linux-Router_V6_TMP 09/19 23:06:17
27 oneadmin users Router-VyOS_TMP 09/19 23:47:51
[root@localhost ~]#
[root@localhost ~]# onevnet list
ID USER GROUP NAME CLUSTERS BRIDGE LEASES
3 oneadmin users Routers_vDCs_Extern 103 Routers_ 0
4 oneadmin users net_dummy_inicial 103 net_dumm 0
6 oneadmin users net_pod1 103 net_pod1 0
7 oneadmin users net_pod10 103 net_pod1 0
8 oneadmin users net_pod11 103 net_pod1 0
9 oneadmin users net_pod2 103 net_pod2 0
10 oneadmin users net_pod3 103 net_pod3 0
11 oneadmin users net_pod4 103 net_pod4 0
12 oneadmin users net_pod5 103 net_pod5 0
13 oneadmin users net_pod6 103 net_pod6 0
14 oneadmin users net_pod7 103 net_pod7 0
15 oneadmin users net_pod8 103 net_pod8 0
16 oneadmin users net_pod9 103 net_pod9 0
[root@localhost ~]#

You should try extending permission “other:use” for an image.