Getting started with Managed Service for ClickHouse
To get started with the service:
Getting started
-
Go to the management console
and log in to Nebius AI or create an account if you do not have one yet. -
You can connect to DB clusters from both inside and outside Nebius AI:
- To connect from inside Nebius AI, create a Linux-based VM in the same network as the DB cluster.
- To connect to the cluster from the internet, request public access to hosts when creating the cluster.
Note
The next steps assume that you connect to the cluster from a Linux-based VM.
-
Connect to the VM via SSH.
-
Connect to the ClickHouse DEB repository
:sudo apt update && sudo apt install --yes apt-transport-https ca-certificates dirmngr && \ sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv 8919F6BD2B48D754 && \ echo "deb https://packages.clickhouse.com/deb stable main" | sudo tee \ /etc/apt/sources.list.d/clickhouse.list
-
Install the dependencies and the
clickhouse-client
client application:sudo apt update && sudo apt install --yes clickhouse-client
-
Download the configuration file for
clickhouse-client
:mkdir -p ~/.clickhouse-client && \ wget "https://storage.ai.nebius.cloud/doc-files/clickhouse-client.conf.example" \ --output-document ~/.clickhouse-client/config.xml
Create a cluster
- In the management console, select the folder where you want to create a DB cluster.
- Select Managed Service for ClickHouse.
- Click Create cluster.
- Set the cluster parameters and click Create cluster. For more information, see Creating clusters.
- Wait until the cluster is ready: its status on the Managed Service for ClickHouse dashboard will change to Running and its state to Alive. This may take some time.
Connect to the DB
-
To connect to the DB server, get your SSL certificate:
Linux (Bash)macOS (Zsh)Windows (PowerShell)sudo mkdir --parents /usr/local/share/ca-certificates/NebiusAI/ && \ sudo wget "https://storage.nemax.nebius.cloud/certs/CA.pem" \ --output-document /usr/local/share/ca-certificates/NebiusAI/NebiusAICA.crt && \ sudo chmod 655 /usr/local/share/ca-certificates/NebiusAI/NebiusAICA.crt && \ sudo update-ca-certificates
The certificate will be saved to the
/usr/local/share/ca-certificates/NebiusAI/NebiusAICA.crt
file.sudo mkdir -p /usr/local/share/ca-certificates/NebiusAI/ && \ sudo wget "https://storage.nemax.nebius.cloud/certs/CA.pem" \ --output-document /usr/local/share/ca-certificates/NebiusAI/NebiusAICA.crt && \ sudo chmod 655 /usr/local/share/ca-certificates/NebiusAI/NebiusAICA.crt && \ security import /usr/local/share/ca-certificates/NebiusAI/NebiusAICA.crt -k ~/Library/Keychains/login.keychain
The certificate will be saved to the
/usr/local/share/ca-certificates/NebiusAI/NebiusAICA.crt
file.-
Download and import the certificate:
mkdir -Force $HOME\.nebius; ` curl.exe https://storage.nemax.nebius.cloud/certs/CA.pem ` --output $HOME\.nebius\NebiusAICA.crt; ` Import-Certificate ` -FilePath $HOME\.nebius\NebiusAICA.crt ` -CertStoreLocation cert:\CurrentUser\Root
-
Agree to install the certificate in the
Trusted Root Certification Authorities
store.
The certificate will be saved to the
$HOME\.nebius\NebiusAICA.crt
file. -
-
Use the ClickHouse CLI to connect:
-
Specify the path to the
NebiusAICA.crt
SSL certificate in the configuration file in the<caConfig>
element:<config> <openSSL> <client> <loadDefaultCAFile>true</loadDefaultCAFile> <caConfig>/usr/local/share/ca-certificates/NebiusAI/NebiusAICA.crt</caConfig> <cacheSessions>true</cacheSessions> <disableProtocols>sslv2,sslv3</disableProtocols> <preferServerCiphers>true</preferServerCiphers> <invalidCertificateHandler> <name>RejectCertificateHandler</name> </invalidCertificateHandler> </client> </openSSL> </config>
-
Run the ClickHouse CLI with the following parameters:
clickhouse-client --host <FQDN of any ClickHousehost> \ --secure \ --user <username> \ --database <DB name> \ --port 9440 \ --ask-password
-
What's next
- Read about service concepts.
- Learn more about creating a cluster and connecting to the database.
- Read questions and answers.