Difference between revisions of "RucioContainerisedClient"
From GridPP Wiki
(Created page with "=== Setting up and Using the Containerized Client === First you will need to download and install Docker to run the container: * [https://www.docker.com/get-started https://...") |
(→Setting up and Using the Containerized Client) |
||
Line 9: | Line 9: | ||
*Run the Docker container using the following command: | *Run the Docker container using the following command: | ||
− | run -e RUCIO_CFG_RUCIO_HOST=https://rucio-server.gridpp.rl.ac.uk:443 -e RUCIO_CFG_AUTH_HOST=https://rucio-server.gridpp.rl.ac.uk:443 -e RUCIO_CFG_AUTH_TYPE=x509 -e RUCIO_CFG_CLIENT_VO=<3 CHAR VO NAME LOWERCASE> -e RUCIO_CFG_CLIENT_CERT=/opt/rucio/etc/usercert.pem -e RUCIO_CFG_CLIENT_KEY=/opt/rucio/etc/userkey.pem -e RUCIO_CFG_ACCOUNT=<USERNAME>-e RUCIO_CFG_CA_CERT=/opt/rucio/etc/web/ca-first.pem -v <PATH/TO/ca-first.pem>:/opt/rucio/etc/web/ca-first.pem -v <PATH/TO/YOUR/USERCERT>:/opt/rucio/etc/usercert -v <PATH/TO/YOUR/USERKEY>:/opt/rucio/etc/userkey --name=rucio-client -it -d rucio/rucio-clients | + | run -e RUCIO_CFG_RUCIO_HOST=https://rucio-server.gridpp.rl.ac.uk:443 -e RUCIO_CFG_AUTH_HOST=https://rucio-server.gridpp.rl.ac.uk:443 \ |
+ | -e RUCIO_CFG_AUTH_TYPE=x509 -e RUCIO_CFG_CLIENT_VO=<3 CHAR VO NAME LOWERCASE> -e RUCIO_CFG_CLIENT_CERT=/opt/rucio/etc/usercert.pem \ | ||
+ | -e RUCIO_CFG_CLIENT_KEY=/opt/rucio/etc/userkey.pem -e RUCIO_CFG_ACCOUNT=<USERNAME>-e RUCIO_CFG_CA_CERT=/opt/rucio/etc/web/ca-first.pem \ | ||
+ | -v <PATH/TO/ca-first.pem>:/opt/rucio/etc/web/ca-first.pem -v <PATH/TO/YOUR/USERCERT>:/opt/rucio/etc/usercert -v <PATH/TO/YOUR/USERKEY>:/opt/rucio/etc/userkey --name=rucio-client -it -d rucio/rucio-clients | ||
* Run the following commands: | * Run the following commands: |
Revision as of 15:33, 17 May 2021
Setting up and Using the Containerized Client
First you will need to download and install Docker to run the container:
- https://www.docker.com/get-started (for windows users I would recommend using WSL2 rather than Hyper-V as I have had success there)
- Using openSSL you will need to split your grid certificate bundle into the certificate and key:
openssl pkcs12 -in <*.pfx> -out usercert.pem -clcerts -nokeys openssl pkcs12 -in <*.pfx> -out userkey.pem -nocerts -nodes
- Run the Docker container using the following command:
run -e RUCIO_CFG_RUCIO_HOST=https://rucio-server.gridpp.rl.ac.uk:443 -e RUCIO_CFG_AUTH_HOST=https://rucio-server.gridpp.rl.ac.uk:443 \ -e RUCIO_CFG_AUTH_TYPE=x509 -e RUCIO_CFG_CLIENT_VO=<3 CHAR VO NAME LOWERCASE> -e RUCIO_CFG_CLIENT_CERT=/opt/rucio/etc/usercert.pem \ -e RUCIO_CFG_CLIENT_KEY=/opt/rucio/etc/userkey.pem -e RUCIO_CFG_ACCOUNT=<USERNAME>-e RUCIO_CFG_CA_CERT=/opt/rucio/etc/web/ca-first.pem \ -v <PATH/TO/ca-first.pem>:/opt/rucio/etc/web/ca-first.pem -v <PATH/TO/YOUR/USERCERT>:/opt/rucio/etc/usercert -v <PATH/TO/YOUR/USERKEY>:/opt/rucio/etc/userkey --name=rucio-client -it -d rucio/rucio-clients
- Run the following commands:
cd /opt/rucio/etc/ cp userkey userkey.pem chmod 400 userkey.pem cp usercert usercert.pem
- You should now have a fully set up Containerised Client for your Rucio Account and VO