Introduction to the tutorial for site managers gLite service installation with YAIM

1
Introduction to the tutorial for site
managersgLite service installation with YAIM

• Riccardo Bruno
• INFN.CT
• EUMEDGRID User Tutorial, Damascus (Syria)
• 02-05/09/2007

2
Outline

• Layout of the site managers tutorial
• Available servers
• Shared pre-requisite for gLite 3.0 services

3
Layout

• The installation, the configuration and the
  eventual troubleshooting of the gLite 3.0
  services will be shown in real time by the
  tutors.
• After each demo service installation you will
  have time to re-install it by yourself
• each participant on his own assigned VM
• We are going to install gLite services onto
  VMware Virtual Machines
• easy to resume the initial status of the VM for
  the following service re-installation
• useful if you need to re-try the installation due
  to errors/mistakes/tests

4
Deployment

• Each PC has VMWare Player/Workstation/Server and
  a GILDA Base VM image
• There is also another server which will be used
  as gLite 3.0 repository to speed up the download
  of RPMs
• http//gildaui.grid.hiast.edu.sy

5
Access to the VMs

• IP address 195.60.236.X
• Hostname pcX.grid.hiast.edu.sy
• Username root
• Password GildaVM.06
• where X vary from 201 to 250

5
6
gLite 3.0 software pre-requisites
7
Installation Pre-requisites

• Start from a fresh install of SLC 3.0.x (your
  current GILDAVM_Base)
• Java SDK is required to install almost any
  LCG/gLite grid service. Due to license issues, it
  is not found in the LCG repositories. You can
  download it from local repository
• wget http//gildaui.grid.hiast.edu.sy/utils/j2sdk-
  1_4_2_13-linux-i586.rpm
• chmod x j2sdk-1_4_2_13-linux-i586-rpm.bin
• ./j2sdk-1_4_2_14-linux-i586-rpm.bin
• rpm -ivh j2sdk-1_4_2_13-linux-i586.rpm
• Preparing...
  100
• 1j2sdk
  100

8
Security pre-requisites

• Request a X509 host certificate for the gLite
  service you are going to install from a
  Certification Autority (CA). For example, to get
  host certificates from the GILDA CA, go to
• https//gilda.ct.infn.it/CA/mgt/restricted/srvreq.
  php
• We alredy requested the certificates for this
  tutorial you can copy them from
• http//gildaui.grid.hiast.edu.sy/utils/certificate
  s/host/pc201.grid.hiast.edu.sy/pcX.grid.hiast.edu.
  sy-cert.pem
• http//gildaui.grid.hiast.edu.sy/utils/certificate
  s/host/pc201.grid.hiast.edu.sy/pcX.grid.hiast.edu.
  sy-key.pem
• (where X vary form 201 ... 250)
• Install host certificates (renaming them to
  hostcert.pem and hostkey.pem) in
  /etc/grid-security.
• Then assign the correct access rights
• chmod 644 hostcert.pem
• chmod 400 hostkey.pem

9
YAIM Installation

• YAIM is a set of bash scripts used to install and
  easily configure the gLite middleware on the
  target machine
• Ensure you FQDN is properly set (otherwise
  configure properly the network configuration).
  You can check with
• hostname f
• Find the latest YAIM and gilda_ig-yaim version
  at http//www.cern.ch/grid-deployment/gis/yaim/
  http//grid018.ct.infn.it/rep/gilda_app-i386/RPM
  S.utils/
• For this tutorial download YAIM and gilda_ig-YAIM
  using wget from local repository with
• wget http//gildaui.grid.hiast.edu.sy/utils/glite-
  yaim-latest.rpm
• wget http//gildaui.grid.hiast.edu.sy/utils/gilda_
  ig-yaim-3.0.1-7.noarch.rpm
• Install them using
• rpm -ivh glite-yaim-latest.rpm
• rpm -ivh gilda_ig-yaim-3.0.1-6.noarch.rpm

10
site-info.def Configuration File

• All the configuration values to sites have to be
  configured in a site configuration file using
  key-value pairs.
• This file is shared among all the different gLite
  node types. So edit once and keep it in a safe
  place
• Create a copy of /opt/glite/yaim/examples/siteinfo
  /gilda_ig-site-info.def template (coming from the
  lcg-yaim RPM and customized by the gilda_ig-YAIM)
  to your reference directory for the installation
  (e.g. /root)
• cp /opt/glite/yaim/examples/siteinfo/gilda_ig-site
  -info.def /root/my-site-info.def
• The general syntax of the file is a sequence of
  bash-like assignments of variables
  (ltvariablegtltvaluegt, no spaces are allowed around
  ).
• A good syntax test for your site configuration
  file is to try to source it manually running the
  command
• source my-site-info.def

11
Setup local repository, java and NTP

• We have installed a local repository, so you have
  to specify its correct path in your
  my-site-info.def
• OS_REPOSITORY"rpm () slc306-i386 os updates
  extras"
• LCG_REPOSITORY"rpm () glite_sl3-i386 3_0
  3_0_externals 3_0_updates"
• IG_REPOSITORY"rpm () 3_0_0 utils"
• GILDA_REPOSITORY"rpm () gilda_app-i386 app
  3_0_0"
• CA_REPOSITORY"rpm () glite_sl3-i386 security
• Were () http//gildaui.grid.hiast.edu.sy
• Setup your installed java SDK/JRE configuring
  into your my-site-info.def file the value
• JAVA_LOCATION"/usr/java/j2sdk1.4.2_13
• Setup the NTP needed for service time
  syncrhonization configuring into your
  my-site-info.def the value
• NTP_HOSTS195.60.236.146"

12
Middleware installation with YAIM

• We are ready to install/configure the services
• To install the node we will use
• /opt/glite/bin/gilda_ig_install_node
  /root/my-site-info.def GILDA_ig_ltmetapackageNamegt
• This command will download and install all the
  needed packages.
• The metapackageName identifies the gLite service
  to install
• To configure the node we will use
• /opt/glite/bin/gilda_ig_configure_node
  /root/my-site-info.def GILDA_ig_ltmetapackageNamegt
• This command will configure the node accodingly
  to the values provided into the my-site-info.def
  file.
• The metapackageName identifies the gLite service
  to install

13
Questions?
Thanks for the attention Take a snapshot of the
VM