Difference between revisions of "Dirac on a vm at cern"

From GridPP Wiki
Jump to: navigation, search
(Created page with "== Launching a virtual machine at CERN == * Use [https://openstack.cern.ch/dashboard openstack] at CERN. * Change "Current Project" to your username. * Click on "Instances" an...")
 
Line 9: Line 9:
  
 
== Getting a hostcert for a virtual machine ==
 
== Getting a hostcert for a virtual machine ==
 +
* Once the machine is up and running, you can log on as root via lxplus.cern.ch
 +
* <pre>openssl req -new -subj "/CN=diractest.cern.ch" -out newcsr.csr -nodes -sha512 -newkey rsa:2048</pre> (replace machine name as needed) --- I can't find where I got this command from. Right now I am loosely following this [http://diego.web.cern.ch/diego/tutorials/html/environ/vm-setup.html page].
 +
* Make a backup and save it somewhere other than you virtual machine: <pre> openssl pkcs12 -export -inkey privkey.pem -in host-diractest.cert -out diractest.p12 </pre>
 +
 +
== Setting up the CAs ==
 +
* wget http://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo -O /etc/yum.repos.d/EGI-trustanchors.repo
 +
* yum install ca-policy-egi-core
 +
 +
== Setting up a UI ==
 +
(Let's go with EMI3, even though we will need the EMI2 vomsclients.) <br>
 +
* Get the repos:
 +
  <pre>
 +
  wget http://www.nic.funet.fi/pub/mirrors/fedora.redhat.com/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
 +
  rpm -i epel-release-6-8.noarch.rpm
 +
  wget http://emisoft.web.cern.ch/emisoft/dist/EMI/3/sl6/x86_64/base/emi-release-3.0.0-2.el6.noarch.rpm
 +
  yum localinstall emi-release-3.0.0-2.el6.noarch.rpm
 +
  <pre>
 +
* epel needs to have priority over the system repos, otherwise the install fails with "emi.saga-adapter.isn-cpp-1.0.3-1.sl6.x86_64 (EMI-3-base) Requires: libxerces-c-3.0.so()(64bit)"
 +
*
 +
 +
* Get the EMI2 voms clients
 +
<pre>
 +
yum shell
 +
list *voms*
 +
erase voms-clients3.noarch
 +
install voms-clients.x86_64
 +
run
 +
exit
 +
</pre>

Revision as of 11:16, 10 September 2014

Launching a virtual machine at CERN

  • Use openstack at CERN.
  • Change "Current Project" to your username.
  • Click on "Instances" and then on "Launch Instance"
  • Upload public ssh key (cut and paste will do), if not already done so, in the Access & Security tab
  • Choose "Any Availability Zone", "m1.medium" and "Boot from Image"
  • As image I am currently trying "SLC6 Server x86_64" (diractest2) and "SLC6 CERN Server x86_64" (diractest)
  • Click "Launch"

Getting a hostcert for a virtual machine

  • Once the machine is up and running, you can log on as root via lxplus.cern.ch 
  • openssl req -new -subj "/CN=diractest.cern.ch" -out newcsr.csr -nodes -sha512 -newkey rsa:2048
    (replace machine name as needed) --- I can't find where I got this command from. Right now I am loosely following this page.
  • Make a backup and save it somewhere other than you virtual machine: 
     openssl pkcs12 -export -inkey privkey.pem -in host-diractest.cert -out diractest.p12

Setting up the CAs

Setting up a UI

(Let's go with EMI3, even though we will need the EMI2 vomsclients.)

  • Get the repos: 
  wget http://www.nic.funet.fi/pub/mirrors/fedora.redhat.com/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
  rpm -i epel-release-6-8.noarch.rpm
  wget http://emisoft.web.cern.ch/emisoft/dist/EMI/3/sl6/x86_64/base/emi-release-3.0.0-2.el6.noarch.rpm
  yum localinstall emi-release-3.0.0-2.el6.noarch.rpm 
  <pre>
* epel needs to have priority over the system repos, otherwise the install fails with "emi.saga-adapter.isn-cpp-1.0.3-1.sl6.x86_64 (EMI-3-base) Requires: libxerces-c-3.0.so()(64bit)"
* 

* Get the EMI2 voms clients 
<pre>
yum shell
list *voms*
erase voms-clients3.noarch
install voms-clients.x86_64
run
exit
Retrieved from "https://www.gridpp.ac.uk/w/index.php?title=Dirac_on_a_vm_at_cern&oldid=5743"