Euca2ools use cryptographic credentials for authentication. Two types of credentials are issued by EC2- and S3-compatible services: x509 certificates and keys. While some commands only require the latter, it is best to always specify both types of credentials. Furthermore, unless the Web services reside on 'localhost', the URLs of the EC2- and S3-compatible service endpoints must also be specified.
The credentials and URLs can be specified via the command line option or by setting environment variables as follows:
| Variable | Option | Explanation |
|---|---|---|
| EC2_URL | -U or --url [url] | http://host:8773/services/Eucalyptus or http://ec2.amazonaws.com or https://ec2.amazonaws.com:443 |
| S3_URL | -U or --url [url] | http://host:8773/services/Walrus or http://s3.amazonaws.com or https://s3.amazonaws.com:443 |
| EC2_ACCESS_KEY | -a or --access-key [key] | Access Key ID / Query ID |
| EC2_SECRET_KEY | -s or --secret-key [key] | Secret Access Key / Secret Key |
| EC2_CERT | -c or --cert [file] | user's PEM-encoded certificate |
| EC2_PRIVATE_KEY | -k or --privatekey [file] | user's PEM-encoded private key |
| EUCALYPTUS_CERT | --ec2cert_path [file] | OPTIONAL path to cloud cert |
If you are running Euca2ools against Eucalyptus, sourcing the eucarc file that is included as part of the credentials zip-file that you downloaded from the Eucalyptus Web interface should be enough to set up all of the above variables correctly.
Commands start with euca- and typing <command name> --help will print a basic help message. In addition, running man <command name> will bring up a man page.