AWS Deployment#

Requirements#

The requirements for running NVIDIA Isaac Sim on Amazon Web Services (AWS) are:

An AWS account that is able to launch an EC2 instance with RTX GPU support.
An Amazon EC2 key pair for authentication.
An Amazon EC2 security group to control access to ports:
- TCP Port 22 for SSH
- TCP Port 8443 for NICE DCV
- TCP Port 49100 for WebRTC streaming
- UDP Port 47998 for WebRTC streaming
PuTTY, or other SSH terminal client to connect to the AMI instance.
NICE DCV Client or Remote Desktop app (For Windows EC2 instance).

Setup#

Follow these steps to launch an AWS EC2 instance:

Navigate to the AWS Marketplace and search for “isaac sim”.
Select one of the instance type below:

Linux Instance

NVIDIA Isaac Sim™ Development Workstation (Linux)

This will create an EC2 instance based on Ubuntu.

Windows Instance

NVIDIA Isaac Sim™ Development Workstation (Windows)

This will create an EC2 instance based on Windows Server.

To deploy an AWS EC2 instance, click the View purchase options button.
If you have not already subscribed to the software, you will need to Accept Terms the first time. (This may take a few minutes to complete.)
When the subscription is complete, click the Continue to Configuration button.
On the Configure this software page, click the Continue to Launch button.
On the Launch this software page:
- Set the Choose Action option to Launch through EC2.
- Click the Launch button.
On the Launch an instance page, name your instance.
Set the Instance type to g6e.2xlarge, if not already listed. (Only the g6e.2xlarge instance type is supported.)
Set the Key Pair (login) to use your pre-configured key pair.
In the Network settings section, select the Select existing security group option. In the Common security groups dropdown, select your security group.
In the Summary section on the right side of the page, click Launch instance.
Locate your named instance in the table. It will take a few moments for the instance state to change from Initializing to Running. Once it’s running, it’s available to be connected to.

Connect#

Follow the instructions below depending on the EC2 instance type selected in the previous section:

Linux Instance

Copy the Public IP Address of your instance. You can find this by:
- Clicking the checkbox next to your instance to select it.
- In the information panel below the table, find the Public IPv4 address and copy it.
Open up PuTTY
- In the Host Name (or IP Address) input, paste your instances Public IPv4 address.
- Expand Connection > SSH > Auth > Credentials. Browse to the location of your Key Pair, and select it.
- Select Open in the PuTTY dialog to connect.
Note

Using the Terminal, you can connect using the command ssh -i <my_key_pair>.pem ubuntu@<public_ip>.
When you are connected to the AMI, change the password. The password must be changed for NICE DCV to connect in a later step.
- Change the password for the Ubuntu account in order to use the Amazon DCV client. Use the following command to change the password: sudo passwd ubuntu.
Note

The password needs to be set via SSH each time a new instance is created, this is by design for security.
- Enter a new password.
- Check your session is running by using the following command: sudo dcv list-sessions. (There should be a ‘console’ session running.)
Open the locally installed NICE DCV Client and enter the Public IP Address of your instance in this format https://<public_ip>:8443, followed by clicking Connect.
- If you see the Server Identity Check message, click Trust and Connect.
- Log in by entering the username ubuntu and the password that was set in a previous step, followed by clicking Login.
- The Ubuntu desktop GUI will now be displayed in the NICE DCV window.
Note

You can also use the NICE DCV Web Browser Client by navigating to https://<public_ip>:8443 on a browser.

Windows Instance

Select your instance from the EC2 page and from the toolbar select Connect.
On the Connect to instance page select the RDP Client tab.
Set your username and then select Get password.
Upload your private key file associated with the instance and select Decrypt password.
Use this username and password to log in when you connect with the NICE DCV Client or Remote Desktop app.
Open the locally installed NICE DCV Client and enter the Public IP Address of your instance in this format https://<public_ip>:8443, followed by clicking Connect.
- If you see the Server Identity Check message, click Trust and Connect.
- Log in by entering the username and the password that was set in a previous step, followed by clicking Login.
- The Windows desktop GUI will now be displayed in the NICE DCV window.
Note

You can also use the NICE DCV Web Browser Client by navigating to https://<public_ip>:8443 on a browser.

You have now logged in and your AWS instance is ready for use.

Running Isaac Sim#

Follow the instructions below depending on the EC2 instance type selected in the previous section:

Linux Instance

Open Terminal and run the commands below:

sudo chown -R ubuntu.root /opt/IsaacSim
cd ~/IsaacSim
./warmup.sh
./isaac-sim.sh

Note

The warm up script may take 15 minutes or longer to complete.

Windows Instance

Using the File Explorer, navigate to C:\IsaacSim.
Run warmup.bat.
Run isaac-sim.bat.

Note

The warm up script may take 15 minutes or longer to complete.

Proceed to Quick Tutorials to begin the first Basic Tutorial.

Running Isaac Sim Container#

Follow the instructions below on a Linux EC2 instance:

Linux Instance

Open ports for WebRTC Streaming:

sudo ufw allow 49100/tcp
sudo ufw allow 47998/udp

Install the NVIDIA Container Toolkit:

# Configure the repository
$ curl -fsSL https://nvidia.github.io/libnvidia-container/gpgkey | sudo gpg --dearmor -o /usr/share/keyrings/nvidia-container-toolkit-keyring.gpg \
    && curl -s -L https://nvidia.github.io/libnvidia-container/stable/deb/nvidia-container-toolkit.list | \
    sed 's#deb https://#deb [signed-by=/usr/share/keyrings/nvidia-container-toolkit-keyring.gpg] https://#g' | \
    sudo tee /etc/apt/sources.list.d/nvidia-container-toolkit.list \
    && \
    sudo apt-get update

# Install the NVIDIA Container Toolkit packages
$ sudo apt-get install -y nvidia-container-toolkit
$ sudo systemctl restart docker

# Configure the container runtime
$ sudo nvidia-ctk runtime configure --runtime=docker
$ sudo systemctl restart docker

# Verify NVIDIA Container Toolkit
$ docker run --rm --runtime=nvidia --gpus all ubuntu nvidia-smi

Pull the Isaac Sim Container:

$ docker pull nvcr.io/nvidia/isaac-sim:5.0.0

Run the Isaac Sim container with an interactive Bash session:

$ docker run --name isaac-sim --entrypoint bash -it --runtime=nvidia --gpus all -e "ACCEPT_EULA=Y" --rm --network=host \
    -e "PRIVACY_CONSENT=Y" \
    -v ~/docker/isaac-sim/cache/kit:/isaac-sim/kit/cache:rw \
    -v ~/docker/isaac-sim/cache/ov:/root/.cache/ov:rw \
    -v ~/docker/isaac-sim/cache/pip:/root/.cache/pip:rw \
    -v ~/docker/isaac-sim/cache/glcache:/root/.cache/nvidia/GLCache:rw \
    -v ~/docker/isaac-sim/cache/computecache:/root/.nv/ComputeCache:rw \
    -v ~/docker/isaac-sim/cache/computecache:/root/.nv/ComputeCache:rw \
    -v ~/docker/isaac-sim/logs:/root/.nvidia-omniverse/logs:rw \
    -v ~/docker/isaac-sim/data:/root/.local/share/ov/data:rw \
    -v ~/docker/isaac-sim/documents:/root/Documents:rw \
    nvcr.io/nvidia/isaac-sim:5.0.0

Note

By using the -e "ACCEPT_EULA=Y" flag, you accept the license agreement of the image found at NVIDIA Omniverse License Agreement.
By using the -e "PRIVACY_CONSENT=Y" flag, you opt-in to the data collection agreement found at Data Collection & Usage. You may opt-out by not setting this flag.
The -e "PRIVACY_USERID=<email>" flag can optionally be set for tagging the session logs.

Start Isaac Sim with native livestream mode:

$ PUBLIC_IP=$(curl -s ifconfig.me) && ./runheadless.sh --/app/livestream/publicEndpointAddress=$PUBLIC_IP --/app/livestream/port=49100

Connect to the same public IP address of the instance using the Isaac Sim WebRTC Streaming Client app.