Difference: IgiEmi (54 vs. 55)

Revision 552012-10-15 - SergioTraldi

Line: 1 to 1
 
META TOPICPARENT name="IGIGuides"

IGI (based on EMI) Installation and Configuration

Line: 45 to 45
  If not present by default on your SL5/x86_64 nodes, you should enable the EPEL repository (https://fedoraproject.org/wiki/EPEL)
Changed:
<
<
EPEL has an epel-release package that includes the gpg key used for package signing and other repository information, like the .repo files. Installing this package, http://download.fedoraproject.org/pub/epel/5/i386/epel-release-5-4.noarch.rpm, should allow you to use normal tools such as yum to install packages and their dependencies. By default the stable EPEL repo is enabled. Example of epel.repo file:
>
>
If not present by default on your SL6/x86_64 nodes, you should enable the EPEL repository (https://fedoraproject.org/wiki/EPEL)

EPEL has an epel-release package that includes the gpg key used for package signing and other repository information, like the .repo files.
For SL5/x86_64 installing this package, http://download.fedoraproject.org/pub/epel/5/i386/epel-release-5-4.noarch.rpm, should allow you to use normal tools such as yum to install packages and their dependencies. For SL6/x86_64 installing this package, http://ftp-stud.hs-esslingen.de/pub/epel//6/x86_64/epel-release-6-7.noarch.rpm

By default the stable EPEL repo is enabled. Example of epel.repo file:

 
[extras]
name=epel
mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-5&arch=$basearch

Line: 56 to 62
 
  • If present remember to disable the dag.repo if it is enabled.

You need to have enabled only the following repositories (Operating System, EPEL, Certification Authority, EMI):

Changed:
<
<
Common repositories *x86_64*
<-- -->
Sorted ascending
egi-trustanchors.repo
emi.repo
(emi1-base.repo emi1-third-party.repo emi1-updates.repo)
epel.repo
igi-emi.repo
>
>
SL5 x86_64 SL6 x86_64
EMI1 EMI2 EMI2
epel.repo
Please install this rpm
epel.repo
Please install this rpm
epel.repo
Please install this rpm
emi.repo
(emi1-base.repo emi1-third-party.repo emi1-updates.repo)
Please install this rpm
emi.repo
(emi2-base.repo emi2-third-party.repo emi2-updates.repo)
Please install this rpm
emi.repo
(emi2-base.repo emi2-third-party.repo emi2-updates.repo)
Please install this rpm
egi-trustanchors.repo egi-trustanchors.repo egi-trustanchors.repo
igi-emi.repo igi-emi2.repo igi-emi2.repo
  It is strongly recommended the use of the lastest version of the emi-release 1

package containing the EMI public key and the yum .repo files, that ensures the precedence of EMI repositories over EPEL:


Changed:
<
<
# yum install yum-priorities yum-protectbase # rpm -ivh http://repo-pd.italiangrid.it/mrepo/EMI/1/sl5/x86_64/updates/emi-release-1.0.1-1.sl5.noarch.rpm
>
>
# wget http://repo-pd.italiangrid.it/mrepo/EMI/1/sl5/x86_64/updates/emi-release-1.0.1-1.sl5.noarch.rpm # yum localinstall emi-release-1.0.1-1.sl5.noarch.rpm
 
Deleted:
<
<

EMI 2 repos file:

Common repositories SL5 *x86_64*
epel.repo
emi.repo
(emi2-base.repo emi2-contrib.repo emi2-third-party.repo emi2-updates.repo)
egi-trustanchors.repo
igi-emi.repo

It is strongly recommended the use of the lastest version of the emi-release 2

 

Updating from EMI 1 to EMI 2

For the update to EMI 2 you have to uninstall the old emi-release package and install the new one:

Line: 562 to 558
 If you use DGAS to account data remember to install also DGAS sensors. You can found more documentation to DGAS sensors guide


Changed:
<
<
yum install glite-dgas-common glite-dgas-hlr-clients glite-dgas-hlr-sensors glite-dgas-hlr-sensors-producers yaim-dgas
>
>
yum install igi-dgas_sensors
 

Service Configuration

Line: 945 to 941
 
Added:
>
>

HLR Server Installation and Configuration

Have a look to the section Repository Settings and ensure that you have the common repo files.
Before starting the installation procedure remember to clean all yum cache and headers:

# yum clean all

HLR Prerequisites

Hardware Requirements

The HLR server host should be an real or virtual host having an optimal disk access.

The suggested requirements are:

  • processor with 4 or 8 cores
  • 8GB RAM or better 16GB
  • minimum 200 GB of space for a first level HLR. (if you have an old HLR server please check your database actual dimension and redouble the partition size)

If you will use a virtual host ensure you are not using virtio to access to the mysql storage DB. Please use a physical partition.

Host certificate installation:

The HLR host must be configured with X.509 certificates signed by a trusted Certification Authority (CA). Usually the hostcert.pem and hostkey.pem certificates are located in the /etc/grid-security/ directory, and they must have permission 0644 and 0400 respectively:

Check existence

[~]# ls -l /etc/grid-security/hostkey.pem
-r-------- 1 root root 887 Mar 1 17:08 /etc/grid-security/hostkey.pem
[~]# ls -l /etc/grid-security/hostcert.pem
-rw-r--r-- 1 root root 1440 Mar 1 17:08 /etc/grid-security/hostcert.pem

Check expiration

[~]# openssl x509 -in hostcert.pem -noout -dates

Change permission: (if needed)

[~]# chmod 0400 hostkey.pem
[~]# chmod 0600 hostcert.pem

CAs installation:

  • Install CAs on ALL profiles:
# yum install ca-policy-egi-core

Service installation

  • Have a look to the HLR documentation before starting the installation: Service Guide.
  • Install the HLR metapackages, containing all packages needed:
# yum install igi-hlr;

Service Configuration

YAIM Verification

  • Before starting the configuration PLEASE TEST that you have defined all the mandatory variables for all the HLR profile

# /opt/glite/yaim/bin/yaim -v -s <site-info.def> -n  HLR 

If no errors are reported during verification you can proceed to the configuration, otherwise correct them before continuing.

YAIM Configuration

  • Please use the debug flag ( "-d 6") to configure the services in order to have detailed information.
  • For your convenience yo can save all the configuration information in a log file for each configuration separately, different from the default yaimlog, that contins all the history of all configurations.

 # /opt/glite/yaim/bin/yaim -c -d 6 -s  <site-info.def>  -n  HLR 2>&1 | tee /root/conf_igi-HLR.`hostname -s`.`date +%Y-%m-%d-%H-%M-%S`.log

Post installation and configuration

After the installation and configuration of the HLR Server Services, you should register all the resources of the CE attached to your HLR Server. Please use this command below for each CE:

# dgas-hlr-addadmin -Sa  <CE_DN>

Where <CE_DN> is something like "/C=IT/O=INFN/OU=Host/L=Padova/CN=prod-ce-01.pd.infn.it"

Update From previous release:

Back up the old databases :

Form previous HLR Server stop the dgas services and make a dump of the databases:

Stop the services :

# /etc/init.d/glite-dgas-hlrd stop

Check disk space Ensure you have enough space in the disk:

# df -h
You should have the space to contain the hlr and hlr_tmp database dump. (Mount an external partition or NFS partition if you don't have enough free space)

Make the dump :

mysqldump --user=root --password hlr_Padova > /data/hlr.sql
mysqldump --user=root --password hlr_tmp_Padova > /data/hlr_tmp.sql

Installation : Install again the host with SL5 x86_64 SL distribution or install a new host where the HLR Server will be installed.

Following the above instructions install the HLR Server and configure using yaim.

Stop the HLR server process:

# /etc/init.d/dgas-hlrd stop

Restore the dump :

# mysql -u root -p hlr_tmp < /data/hlr_tmp.sql
# mysql -u root -p hlr < /data/hlr.sql

execute translate DB

]# nohup /usr/sbin/dgas-hlr-translatedb --D &

Start dgas services :

# /etc/init.d/dgas-hlrd start

Execute populateJobTransSummary:

The new HLR version need to polulate the JobTransSummary

# /usr/sbin/dgas-hlr-populateJobTransSummary

Restart dgas services :

# /etc/init.d/dgas-hlrd restart

Post Update Procedure

After the update of the HLR Server Services, you should register again all the resources of the CE attached to your HLR Server. Please use this command below for each CE:

# dgas-hlr-addadmin -Sa  <CE_DN>

Where <CE_DN> is something like "/C=IT/O=INFN/OU=Host/L=Padova/CN=prod-ce-01.pd.infn.it"

HLR Documentation References:

 
META FILEATTACHMENT attachment="Upgrade_Instructions_to_StoRM_v18.pdf" attr="" comment="Upgrade StoRM istructions. Useful to the data stored partition" date="1321956018" name="Upgrade_Instructions_to_StoRM_v18.pdf" path="Upgrade_Instructions_to_StoRM_v18.pdf" size="55433" user="SergioTraldi" version="1"
 
This site is powered by the TWiki collaboration platformCopyright © 2008-2020 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback