Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revisionLast revisionBoth sides next revision | ||
public:grid_srm_software_installation [2012-11-29 15:19] – Adriaan Renting | public:grid_srm_software_installation [2017-03-08 15:27] – external edit 127.0.0.1 | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== GRID srm installation ====== | + | ====== GRID storage access tools installation ====== |
- | The following documentation was developed for the installation of a GRID tools and certificate | + | //This page describes the procedure to set up the tools for working directly |
- | There is also an instruction for installing on an [[public:grid: | + | //You might also be interested in the [[public:srmclientinstallation|portable package |
- | There is also an instruction for installing on [[http://glite.web.cern.ch/ | + | |
- | ===== 1 Installation | + | The following documentation was developed for the installation |
- | Note: all installations require root permissions. | + | Sites that provide packages and further information on installation of grid middleware on linux based systems: |
- | ==== 1.1 globus ==== | + | * [[http:// |
+ | * [[http:// | ||
+ | * [[http:// | ||
- | You will need to install the file transfer tools from the Globus package, most importantly globus-url-copy: | + | NB We have tested the installation as described below only on Ubuntu 12 and CentOS 7. Please let us know if you have feedback or if you can contribute instructions on installations in different environments. |
+ | You might also first need to obtain a [[GRID certificate]]. | ||
+ | ===== Installation of software packages ===== | ||
- | sudo apt-get install globus-gass-copy-progs globus-common-progs globus-core | + | Note: all installations require root permissions. |
+ | ==== globus client software ==== | ||
- | ==== 1.2 voms ==== | + | The file transfer tools from the Globus package are needed, most importantly globus-url-copy: |
- | | + | Ubuntu |
+ | | ||
- | ==== 1.3 srmtools ==== | + | CentOS |
+ | sudo yum install globus-gass-copy-progs | ||
- | * download srmtools | + | ==== voms client |
- | e.g. http:// | + | |
- | * extract and install the srmtools in /opt/ | + | |
- | this will create a subdirectory srm under /opt/ | + | |
- | * add the path to the srmtools to .bashrc: | + | |
- | export SRM_PATH=/opt/srm | + | |
- | export PATH=$SRM_PATH/ | + | |
- | ===== 2 Installation of certificates ===== | + | The VOMS tools for logging in and user account management: |
+ | Ubuntu | ||
+ | sudo apt-get install voms-clients | ||
- | ====2.1 Personal certificate ==== | + | CentOS |
+ | sudo yum install voms-clients-cpp | ||
- | * Request a user certificate using jGridstart\\ http:// | + | ==== Certificates for the Grid Certificate Authorities |
- | * Install the certificate as described in the certificate e-mail | + | |
- | - Save this entire mail as " | + | |
- | - Load the certificate into your web browser on your own system. See [http:// | + | |
- | - [optional] Apply for authorization to use resources or services. Please consult \\ your service provider or help desk for more information, | + | |
- | * for access to DEISA HPC Grid resources\\ https:// | + | |
- | * for Grid communities hosted in the Netherlands\\ https:// | + | |
- | * for all Grid communities registered in Europe by discipline | + | |
- | + | ||
- | ==== 2.2 Additional certificates from the site of the European | + | |
Execute the following commands to install the certificates from the | Execute the following commands to install the certificates from the | ||
Line 52: | Line 46: | ||
required). | required). | ||
- | > sudo add-repository 'deb http:// | + | Ubuntu |
- | | + | |
- | | + | sudo apt-get update |
+ | sudo apt-get install ca-policy-egi-core | ||
+ | CentOS | ||
+ | wget http:// | ||
+ | sudo mv EGI-trustanchors.repo / | ||
+ | sudo yum install ca-policy-egi-core | ||
- | ===== 3 Additional configuration ===== | + | ==== srmtools |
- | ==== 3.1 Add the vomses string for the LOFAR Virtual Organization (VO) to the vomses file ==== | + | The SRM tools are needed |
- | You can find this string on the following website | + | - Download srmtools |
- | https://voms.grid.sara.nl:8443/ | + | |
- | in the text block under " | + | * {{public:srmclient-2.2.25.tar.gz|srmclient-2.2.25.tar.gz}} |
- | The string should | + | - Extract and install the srmtools, e.g. in ''/ |
+ | - Set the relevant environment path variables, e.g. in .bashrc (modify version number if applicable):\\ '' | ||
+ | NB The srm client tools depend on JAVA. There is a known issue with openjava version 7. If you have this version of JAVA installed, or otherwise get JAVA exceptions when running an srm command, please install another JAVA VM. Java-7-oracle is known to work. It is possible to have multiple JAVA VM installations and it is thus not required to replace an existing installation: | ||
- | ==== 3.2 List of certificates (voms.grid.sara.nl.lsc) ==== | + | export JAVA_HOME=/ |
- | Put the following | + | The JAVA VM used by default in Ubuntu and CentOS can be selected using the following |
- | "/ | + | |
+ | |||
+ | ==== Certificate Revocation List retrieval (optional) ==== | ||
+ | |||
+ | The fetch-crl tool retrieves Certificate Revocation Lists. | ||
+ | |||
+ | Ubuntu | ||
+ | sudo apt-get install fetch-crl | ||
+ | |||
+ | CentOS | ||
+ | sudo yum install fetch-crl | ||
+ | |||
+ | NB This is not required unless you intend to allow others to access your system by providing their grid certificate. | ||
+ | |||
+ | ===== Additional configuration ===== | ||
+ | |||
+ | ==== VOMSES file for LOFAR ==== | ||
+ | |||
+ | Add the following string for the LOFAR Virtual Organization (VO) to the vomses file (any filename is fine). | ||
+ | |||
+ | " | ||
+ | |||
+ | You can find this string also on the following website https:// | ||
+ | |||
+ | ==== List of certificates for voms.grid.sara.nl.lsc ==== | ||
+ | |||
+ | Put the following strings: | ||
+ | |||
+ | / | ||
+ | / | ||
in the file (root permissions required): | in the file (root permissions required): | ||
Line 77: | Line 107: | ||
/ | / | ||
+ | NB If this step is skipped or nor configured correctly '' | ||
- | ==== 3.3 Add the following settings to .bashrc | + | ==== Environment (optional) |
- | | + | You may want to provide the following settings in '' |
- | export | + | |
+ | | ||
+ | export | ||
+ | export X509_CERT_DIR=/ | ||
export X509_VOMS_DIR=/ | export X509_VOMS_DIR=/ | ||
+ | export X509_USER_PROXY=$HOME/ | ||
export VOMS_USERCONF=$HOME/ | export VOMS_USERCONF=$HOME/ | ||
+ | | ||
+ | **Note:** For (t)csh, use *.csh init scripts and ' | ||
+ | ==== CRL cron job (optional) ==== | ||
+ | |||
+ | You may want to create a cron job to automatically retrieve certificate revocation lists (CRLs) by invoking the fetch-crl tool at regular intervals (at least once a year). | ||
+ | |||
+ | ===== Usage ===== | ||
+ | This creates a proxy (valid for 48 hours, increase if needed) in your home directory: | ||
+ | < | ||
+ | voms-proxy-init -valid 48:00 -voms lofar:/ | ||
+ | </ | ||
+ | You can test that everything works by copying this file from surfsara to your working directory: | ||
+ | < | ||
+ | srmcp -server_mode=passive srm:// | ||
+ | </ | ||
+ | If your firewall allows incoming connections to non-standard ports, you can try this command without the server_mode option which will enable utilization of multiple streams to increase performance. | ||
+ | If you have the [[public: | ||
+ | < | ||
+ | srmcp -use_urlcopy_script=true -urlcopy=./ | ||
+ | </ | ||
+ | **Note:** You may have to force the use of TLS, (export GLOBUS_GSSAPI_FORCE_TLS=1 or in / |