public:grid_srm_software_installation

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
public:grid_srm_software_installation [2014-06-25 17:08] Joern Kuensemoellerpublic:grid_srm_software_installation [2021-05-19 12:27] (current) – [Certificates for the Grid Certificate Authorities (CA)] Hanno Holties
Line 14: Line 14:
   * [[http://glite.cern.ch|Home of the gLite software suite]] (gLite UI provides a typical client installation)   * [[http://glite.cern.ch|Home of the gLite software suite]] (gLite UI provides a typical client installation)
  
-NB Only the Ubuntu 12 installation described below has been tested by us. Please let us know if you have feedback or if you can contribute instructions on installations in different environments.+NB We have tested the installation as described below only on Ubuntu 12 and CentOS 7. Please let us know if you have feedback or if you can contribute instructions on installations in different environments.
 You might also first need to obtain a [[GRID certificate]]. You might also first need to obtain a [[GRID certificate]].
 ===== Installation of software packages ===== ===== Installation of software packages =====
Line 24: Line 24:
 The file transfer tools from the Globus package are needed, most importantly globus-url-copy: The file transfer tools from the Globus package are needed, most importantly globus-url-copy:
  
 +Ubuntu
   sudo apt-get install globus-gass-copy-progs   sudo apt-get install globus-gass-copy-progs
 +
 +CentOS
 +  sudo yum install globus-gass-copy-progs
  
 ==== voms client software ==== ==== voms client software ====
Line 30: Line 34:
 The VOMS tools for logging in and user account management: The VOMS tools for logging in and user account management:
  
 +Ubuntu
   sudo apt-get install voms-clients   sudo apt-get install voms-clients
 +
 +CentOS
 +  sudo yum install voms-clients-cpp
  
 ==== Certificates for the Grid Certificate Authorities (CA) ==== ==== Certificates for the Grid Certificate Authorities (CA) ====
  
-Execute the following commands to install the certificates from the +Execute the following commands to install the certificates from the site of the European Grid Infrastructure (EGI) (root permissions are required). 
-site of the European Grid Infrastructure (EGI) (root permissions are + 
-required).+Ubuntu 
 + 
 +Note 2021-05-19: newer versions of Ubuntu require to first add the appropriate GPG key for the EGI repository: 
 + 
 +<code> 
 +wget -q -O - https://dist.eugridpma.info/distribution/igtf/current/GPG-KEY-EUGridPMA-RPM-3 | sudo apt-key add - 
 + 
 +</code> 
 +<code> 
 + 
 +sudo add-apt-repository 'deb http://repository.egi.eu/sw/production/cas/1/current egi-igtf core' 
 +sudo apt-get update 
 +sudo apt-get install ca-policy-egi-core 
 + 
 +</code> 
 + 
 +CentOS 
 + 
 +<code> 
 +wget http://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo 
 +sudo mv EGI-trustanchors.repo /etc/yum.repos.d/ 
 +sudo yum install ca-policy-egi-core 
 + 
 +</code>
  
-  sudo add-apt-repository 'deb http://repository.egi.eu/sw/production/cas/1/current egi-igtf core' 
-  sudo apt-get update 
-  sudo apt-get install ca-policy-egi-core 
  
 ==== srmtools ==== ==== srmtools ====
Line 47: Line 75:
  
   - Download srmtools   - Download srmtools
-    *  {{public:srmclient-2.6.28.tar.gz|srmclient-2.6.28.tar.gz}}  (Java7) +    *  {{public:srmclient-2.6.28.tar.gz|srmclient-2.6.28.tar.gz}}  (Java7, Java8
     * {{public:srmclient-2.2.25.tar.gz|srmclient-2.2.25.tar.gz}}  (Java6)     * {{public:srmclient-2.2.25.tar.gz|srmclient-2.2.25.tar.gz}}  (Java6)
   - Extract and install the srmtools, e.g. in ''/opt/''\\ This will create a subdirectory, e.g. ''srmclient-2.6.28'', containing the required files.\\ Note that the srm package may be installed anywhere (e.g. in your home directory).   - Extract and install the srmtools, e.g. in ''/opt/''\\ This will create a subdirectory, e.g. ''srmclient-2.6.28'', containing the required files.\\ Note that the srm package may be installed anywhere (e.g. in your home directory).
Line 56: Line 84:
   export JAVA_HOME=/usr/lib/jvm/java-7-oracle/jre   export JAVA_HOME=/usr/lib/jvm/java-7-oracle/jre
  
-The JAVA VM used by default in Ubuntu can be selected using the following command:+The JAVA VM used by default in Ubuntu and CentOS can be selected using the following command:
  
   sudo update-alternatives --config java   sudo update-alternatives --config java
 +
 ==== Certificate Revocation List retrieval (optional) ==== ==== Certificate Revocation List retrieval (optional) ====
  
 The fetch-crl tool retrieves Certificate Revocation Lists. The fetch-crl tool retrieves Certificate Revocation Lists.
  
 +Ubuntu
   sudo apt-get install fetch-crl   sudo apt-get install fetch-crl
 +
 +CentOS
 +  sudo yum install fetch-crl
  
 NB This is not required unless you intend to allow others to access your system by providing their grid certificate. NB This is not required unless you intend to allow others to access your system by providing their grid certificate.
Line 71: Line 104:
 ==== VOMSES file for LOFAR ==== ==== VOMSES file for LOFAR ====
  
-Add the following string for the LOFAR Virtual Organization (VO) to the vomses file.+Add the following string for the LOFAR Virtual Organization (VO) to the vomses file (any filename is fine).
  
   "lofar" "voms.grid.sara.nl" "30019" "/O=dutchgrid/O=hosts/OU=sara.nl/CN=voms.grid.sara.nl" "lofar"   "lofar" "voms.grid.sara.nl" "30019" "/O=dutchgrid/O=hosts/OU=sara.nl/CN=voms.grid.sara.nl" "lofar"
Line 101: Line 134:
   export VOMS_USERCONF=$HOME/.glite   export VOMS_USERCONF=$HOME/.glite
      
 +**Note:** For (t)csh, use *.csh init scripts and 'setenv <key> <value>' instead of 'export <key>=<value>'.
 ==== CRL cron job (optional) ==== ==== CRL cron job (optional) ====
  
-You may want to create a cron job to automatically retrieve certificate revocation lists (CRLs) by incoking the fetch-crl tool at regular intervals (at least once a year).+You may want to create a cron job to automatically retrieve certificate revocation lists (CRLs) by invoking the fetch-crl tool at regular intervals (at least once a year).
  
 ===== Usage ===== ===== Usage =====
  
-This creates a proxy (usually valid for one day) in your home directory:+This creates a proxy (valid for 48 hours, increase if needed) in your home directory:
 <file> <file>
-voms-proxy-init -voms lofar:/lofar/user -out ~/.proxy+voms-proxy-init -valid 48:00 -voms lofar:/lofar/user -out ~/.proxy
 </file> </file>
  
 You can test that everything works by copying this file from surfsara to your working directory: You can test that everything works by copying this file from surfsara to your working directory:
 <file> <file>
-srmcp -server_mode=passive srm://srm.grid.sara.nl/pnfs/grid.sara.nl/data/lofar/ops/fifotest/file1M file:///file1M+srmcp -server_mode=passive srm://srm.grid.sara.nl/pnfs/grid.sara.nl/data/lofar/ops/fifotest/file1M file://`pwd`/file1M
 </file> </file>
  
 +If your firewall allows incoming connections to non-standard ports, you can try this command without the server_mode option which will enable utilization of multiple streams to increase performance.
  
 +If you have the [[public:grid_srm_software_installation#globus_client_software|gridftp client software]] installed and in your path, it provides superior performance as compared to the native JAVA gridftp client that is provided by srmcp. In order to utilize this, download {{:public:lta-url-copy.sh.gz|lta-url-copy.sh.gz}}, unzip it and use the command:
 +<file>
 +srmcp -use_urlcopy_script=true -urlcopy=./lta-url-copy.sh -server_mode=passive srm://srm.grid.sara.nl/pnfs/grid.sara.nl/data/lofar/ops/fifotest/file1M file://`pwd`/file1M
 +</file>
 +**Note:** You may have to force the use of TLS, (export GLOBUS_GSSAPI_FORCE_TLS=1 or in /etc/grid-security/gsi.conf set FORCE_TLS=true) to make this work.
  • Last modified: 2014-06-25 17:08
  • by Joern Kuensemoeller