Nucleus Air-gapped Installation#

Overview#

If it’s required to install your Enterprise Nucleus Server into an air-gapped environment (i.e., no Internet access), review all the documentation below carefully.

Note

There must be at least one server/device that has Internet access. This server/device is responsible for connecting to the NVIDIA Repository and downloading the Enterprise Nucleus Server Docker containers.

Configuration Options#

There are several configuration options, so choose which is best and aligns with your policies and/or security requirements.

Option 1: Connecting directly to the Internet#

In the diagram below, the Enterprise Nucleus Server itself can connect to the Internet to download the Docker containers directly. This can be advantageous as no additional servers/devices are required. Conversely, it does mean that your Enterprise Nucleus Server can access the Internet (outbound access only), which may violate the policies and security requirements of your company.

Note

An Enterprise Nucleus Server does not require persistent access to the Internet to function. IT Administrators can grant access to the Internet during the initial installation and as needed for periodic operating system and Nucleus updates.

../../_images/nuc_install_diagram21.png

Option 2: Using a Private/Internal Repository#

An alternative option is to host the Enterprise Nucleus Server Docker files within a private/internal repository as shown below. This option keeps the Enterprise Nucleus Server from connecting directly to the Internet while using an private/internal repository as an intermediary. The server hosting the repository is connected to the Internet (either temporarily or permanently) and is responsible for connecting to the NVIDIA Repository to clone (i.e., download) it.

../../_images/nuc_install_diagram22.png

If it’s required to host a private/internal repository, the Enterprise Nucleus Server must be configured to point to this internal repository to download and install the Docker containers. To configure this, edit the nucleus-stack.env file, then change the REGISTRY directive to point towards the private/internal repository: (The default NVIDIA repository is shown below.)

# Registry root URL
REGISTRY=nvcr.io/nvidia/omniverse

For additional documentation and guides for installing and configuring an Enterprise Nucleus Server, click here.

On this page