Difference between revisions of "Rucio"

From GridPP Wiki
Jump to: navigation, search
(Setting up and Using the Containerized Client)
(Setting up and Using the Containerized Client)
Line 24: Line 24:
  
 
First you will need to download and install Docker to run the container:
 
First you will need to download and install Docker to run the container:
- [https://www.docker.com/get-started https://www.docker.com/get-started]
+
 
 +
* [https://www.docker.com/get-started https://www.docker.com/get-started] (for windows users I would recommend using WSL2 rather than Hyper-V as I have had success there)
 +
* Using openSSL you will need to split your grid certificate bundle into the certificate and key:
 +
openssl pkcs12 -in <*.pfx> -out usercert.pem -clcerts -nokeys
 +
openssl pkcs12 -in <*.pfx> -out userkey.pem -nocerts -nodes
 +
 
 +
*Run the Docker container using the following command:
 +
run -e RUCIO_CFG_RUCIO_HOST=https://rucio-server.gridpp.rl.ac.uk:443 -e RUCIO_CFG_AUTH_HOST=https://rucio-server.gridpp.rl.ac.uk:443 -e RUCIO_CFG_AUTH_TYPE=x509 -e RUCIO_CFG_CLIENT_VO=<3 CHAR VO NAME LOWERCASE> -e RUCIO_CFG_CLIENT_CERT=/opt/rucio/etc/usercert.pem -e RUCIO_CFG_CLIENT_KEY=/opt/rucio/etc/userkey.pem -e RUCIO_CFG_ACCOUNT=<USERNAME>-e RUCIO_CFG_CA_CERT=/opt/rucio/etc/web/ca-first.pem -v <PATH/TO/ca-first.pem>:/opt/rucio/etc/web/ca-first.pem -v <PATH/TO/YOUR/USERCERT>:/opt/rucio/etc/usercert -v <PATH/TO/YOUR/USERKEY>:/opt/rucio/etc/userkey --name=rucio-client -it -d rucio/rucio-clients
 +
 
 +
* Run the following commands:
 +
cd /opt/rucio/etc/
 +
cp userkey userkey.pem
 +
chmod 400 userkey.pem
 +
cp usercert usercert.pem
 +
 
 +
* You should now have a fully set up Containerised Client for your Rucio Account and VO
  
 
== For Users ==
 
== For Users ==

Revision as of 15:30, 17 May 2021

This page is about the Rucio instance at RAL.

Official Rucio pages

Getting Set up

Please contact Ian Johnson or Timothy Noblewith:

  • Rucio username,
  • The subject from your eScience certificate to get this use:
openssl x509 -subject -noout -in <path/to/your/usercert.pem>
  • Your preferred email address
  • Name of the VO you wish to join or create.
  • Your public SSH key.

We currently have drc for DIRAC, dtm for DTEAM, gpp for GridPP, etc We will then set up your account.


Setting up and Using the Containerized Client

First you will need to download and install Docker to run the container:

  • https://www.docker.com/get-started (for windows users I would recommend using WSL2 rather than Hyper-V as I have had success there)
  • Using openSSL you will need to split your grid certificate bundle into the certificate and key:
openssl pkcs12 -in <*.pfx> -out usercert.pem -clcerts -nokeys
openssl pkcs12 -in <*.pfx> -out userkey.pem -nocerts -nodes
  • Run the Docker container using the following command:
run -e RUCIO_CFG_RUCIO_HOST=https://rucio-server.gridpp.rl.ac.uk:443 -e RUCIO_CFG_AUTH_HOST=https://rucio-server.gridpp.rl.ac.uk:443 -e RUCIO_CFG_AUTH_TYPE=x509 -e RUCIO_CFG_CLIENT_VO=<3 CHAR VO NAME LOWERCASE> -e RUCIO_CFG_CLIENT_CERT=/opt/rucio/etc/usercert.pem -e RUCIO_CFG_CLIENT_KEY=/opt/rucio/etc/userkey.pem -e RUCIO_CFG_ACCOUNT=<USERNAME>-e RUCIO_CFG_CA_CERT=/opt/rucio/etc/web/ca-first.pem -v <PATH/TO/ca-first.pem>:/opt/rucio/etc/web/ca-first.pem -v <PATH/TO/YOUR/USERCERT>:/opt/rucio/etc/usercert -v <PATH/TO/YOUR/USERKEY>:/opt/rucio/etc/userkey --name=rucio-client -it -d rucio/rucio-clients
  • Run the following commands:
cd /opt/rucio/etc/
cp userkey userkey.pem
chmod 400 userkey.pem
cp usercert usercert.pem
  • You should now have a fully set up Containerised Client for your Rucio Account and VO

For Users

For SysAdmins

UK Rucio Development

There is a weekly Rucio development meeting on Thursday 2pm (UK time). Meeting agendas can be found here: https://indico.cern.ch/category/10588/

STFC development github is: https://github.com/stfc/rucio

Workshops

Talks

Tutorials


Publications