170 likes | 327 Views
Introduction to the tutorial for site managers. Vanessa Hamar Universidad de Los Andes – Mérida, Venezuela 12 th EELA Tutorial Lima, 24-29 September,2007. Outline. Layout of the site managers tutorial Available servers Shared pre-requisite for gLite 3.1 services. Layout.
E N D
Introduction to the tutorial for site managers Vanessa Hamar Universidad de Los Andes – Mérida, Venezuela 12th EELA Tutorial Lima, 24-29 September,2007
Outline • Layout of the site managers tutorial • Available servers • Shared pre-requisite for gLite 3.1 services 12th EELA TUTORIAL - USERS AND SYSTEM ADMINISTRATORS – Lima, 24-29 September, 2007
Layout • The installation, the configuration and the eventual troubleshooting of the gLite 3.1 services will be shown in real time by the tutors. • After each demo service installation you will have time to re-install it by yourself • each participant on his own assigned VM • We are going to install gLite services onto VMware Virtual Machines • easy to resume the initial status of the VM for the following service re-installation • useful if you need to re-try the installation due to errors/mistakes/tests 12th EELA TUTORIAL - USERS AND SYSTEM ADMINISTRATORS – Lima, 24-29 September, 2007
Deployment • Each machine has VMWare Player/Workstation and a GILDA Base VM image • The tutors will use a Virtual Machine with IP 200.62.242.13 (lima03.ring.pucp.edu.pe) • There is also another server which will be used as gLite 3.1 repository to speed up the download of RPMs • lima01.ring.pucp.edu.pe local gLite 3.1 repository 12th EELA TUTORIAL - USERS AND SYSTEM ADMINISTRATORS – Lima, 24-29 September, 2007
Access to the VMs • IP address: 200.62.242.XXX • Hostname : limaXX.ring.pucp.edu.pe • Username : root • Password : linux142 (xxx = 11…60) 5 12th EELA TUTORIAL - USERS AND SYSTEM ADMINISTRATORS – Lima, 24-29 September, 2007
gLite 3.1 software pre-requisites 12th EELA TUTORIAL - USERS AND SYSTEM ADMINISTRATORS – Lima, 24-29 September, 2007
Installation Pre-requisites • Start from a fresh install of SLC 3.0.8 • Update your repository list • Copy the file lists.tgz from • http://lima01.ring.pucp.edu.pe/eela12/ • Run • cd /etc/apt/sources.list.d/ • wget –np http://lima01.ring.pucp.edu.pe/eela12/lists.tgz • tar –xvzf lists.tgz • apt-get update • Java SDK is required to install almost any LCG/gLite grid service. • apt-get install j2sdk 12th EELA TUTORIAL - USERS AND SYSTEM ADMINISTRATORS – Lima, 24-29 September, 2007
Security pre-requisites • Request a X509 host certificate for the gLite service you are going to install from a Certification Autority (CA). In this case if you want to join EELA Grid request the certificate in the Latin America Catch All https://lacgridca.ic.uff.br/ • We requested the certificates for you, you can copy them from: http://lima01.ring.pucp.edu.pe/certs • Install host certificates (hostcert.pem and hostkey.pem) in /etc/grid-security. • chmod 644 hostcert.pem • chmod 400 hostkey.pem 12th EELA TUTORIAL - USERS AND SYSTEM ADMINISTRATORS – Lima, 24-29 September, 2007
Security pre-requisites (II) • If you plan to use certificates released by unsupported EGEE CA’s, be sure that their public key, signing policy and CRLs (usually distributed with an rpm) are installed in /etc/grid-security/certificates. • For the VO GILDA, the RPM is available from: • http://lima01.ring.pucp.edu.pe/eela12/ca_GILDA-1.0-3.i386.rpm apt-get install ca_GILDA-1.0-3.i386.rpm 12th EELA TUTORIAL - USERS AND SYSTEM ADMINISTRATORS – Lima, 24-29 September, 2007
Security pre-requisites (III) • Install the VOMS public certificate for the supported VOs: • For the VO GILDA, the RPM is available from http://lima01.ring.pucp.edu.pe/RPMS/edg-voms-vo-gilda-X.0-0.noarch.rpm • For the VO EELA, the RPM is available from http://lima01.ring.pucp.edu.pe/RPMS/lcg-voms-vo-eela_X.0-0_noarch.rpm 12th EELA TUTORIAL - USERS AND SYSTEM ADMINISTRATORS – Lima, 24-29 September, 2007
Node Synchronization with NTP • Syncronization among all gLite nodes is mandatory. It can be achieved by the NTP protocol with a time server. • Install ntp if not already available for your system: • apt-get install ntp • Add your time server in /etc/ntp.conf • restrict <time_server_IP_address> mask 255.255.255.255 nomodify notrap noquery • server <time_server_name> • (you can use ntp-1.infn.it – IP 193.206.144.10) • Edit /etc/ntp/step-tickers adding your(s) time server(s) hostname • Activate the ntpd service with the following commands: • ntpdate <your ntp server name> • service ntpd start • chkconfig ntpd on • You can check ntpd’s status with: • ntpq -p 12th EELA TUTORIAL - USERS AND SYSTEM ADMINISTRATORS – Lima, 24-29 September, 2007
YAIM Installation • YAIM is a set of bash scripts used to install and easily configure the gLite middleware on the target machine • Ensure you FQDN is properly set • hostname –f • Install the latest YAIM using • apt-get install glite-yaim-core • apt-get install glite-yaim-clients 12th EELA TUTORIAL - USERS AND SYSTEM ADMINISTRATORS – Lima, 24-29 September, 2007
Installing • All the configuration values to sites have to be configured in a site configuration file using key-value pairs. • This file is shared among all the different gLite node types. So edit once and keep it in a safe place • Create a copy of /opt/glite/yaim/examples/site-info.def template (coming from the glite-yaim-core package) to your reference directory for the installation (e.g. /root/siteinfo): • cp /opt/glite/yaim/examples/site-info.def /root/siteinfo/site-info.def • A good syntax test for your site configuration file is to try to source it manually running the command: • source site-info.def 12th EELA TUTORIAL - USERS AND SYSTEM ADMINISTRATORS – Lima, 24-29 September, 2007
Installing CE+Torque Server via apt • The configuration is stored in a directory structure which will be extended in the near future. Currently the following files are used: site-info.def and the vo.d directory. 12th EELA TUTORIAL - USERS AND SYSTEM ADMINISTRATORS – Lima, 24-29 September, 2007
Local repository • We have installed a local repository at PUCP, so you have to specify its correct path in site-info.def: OS_REPOSITORY="rpm http:// lima01.ring.pucp.edu.pe /rep slc306-i386 os updates extras" LCG_REPOSITORY="rpm http:// lima01.ring.pucp.edu.pe /rep glite_sl3-i386 3_0 3_0_externals 3_0_updates" IG_REPOSITORY="rpm http:// lima01.ring.pucp.edu.pe /rep ig_sl3-i386 3_0_0 utils" GILDA_REPOSITORY="rpm http:// lima01.ring.pucp.edu.pe /rep gilda_app-i386 app 3_0_0" CA_REPOSITORY="rpm http:// lima01.ring.pucp.edu.pe /rep glite_sl3-i386 security" 12th EELA TUTORIAL - USERS AND SYSTEM ADMINISTRATORS – Lima, 24-29 September, 2007
Middleware installation with YAIM • We are ready to install the services: • /opt/glite/yaim/bin/yaim -i -s <location of site-info.def> -m <meta-package name> • By example: • /opt/glite/yaim/bin/yaim -i -s /root/siteinfo/site-info.def -m glite-SE_dpm_mysql -m glite-BDII • This command will download and install all the needed packages. Now we can configure the node: • /opt/glite/yaim/bin/yaim -c -s <location of site-info.def> -n <node type1> -n <node type2> • By example: • /opt/glite/yaim/bin/yaim -r -s /root/siteinfo/site-info.def -n SE_dpm_mysql 12th EELA TUTORIAL - USERS AND SYSTEM ADMINISTRATORS – Lima, 24-29 September, 2007
Questions? 12th EELA TUTORIAL - USERS AND SYSTEM ADMINISTRATORS – Lima, 24-29 September, 2007