Tags:
, view all tags
-- MassimoSgaravatto - 2011-10-28

CREAM manual installation for EMI-2 release

Installation and Configuration

mv axis2.war ce-cream.war
  • stop tomcat5 service
service tomcat5 stop
  • remove the wars and directories in /usr/share/tomcat5/webapps/
  • copy ce-cream.war in /usr/share/tomcat5/webapps/
  • start tomcat5 service
service tomcat5 start
  • wait for a while until the ce-cream.war file is unpacked.
  • stop tomcat5 service
service tomcat5 stop
  • copy axis2.xml file
copy [CREAM_WKA]/emi.cream-ce.cream-common/config/axis2.xml in /usr/share/tomcat5/webapps/ce-cream/WEB-INF/conf
  • copy cream-config.xml file
copy [CREAM_WKA]/emi.cream-ce.cream/config/cream-config.xml in /etc/glite-ce-cream/cream-config.xml
  • configure /etc/glite-ce-cream/cream-config.xml file:
    • set the correct value for the "BLAH_JOBID_PREFIX" parameter. Example:
<parameter name="BLAH_JOBID_PREFIX" value="cre10_" />
    • set the correct value for the "HOST_SMP_SIZE" parameter. Example:
<parameter name="HOST_SMP_SIZE" value="2" />
    • set the correct values for “factory”, “username”, “password” attributes in the "datasource_creamdb" section.
How to choice the value for “factory” attribute?
jar tvf /var/lib/tomcat5/common/lib/*dbcp* | grep BasicDataSourceFactory | sed -e 's/.* //g' | sed -e 's/.class//' | sed -e "s/\//\\./g"
  • set the correct values for “factory”, “username”, “password” attributes in the "datasource_delegationdb" section.
How to choice the value for “factory” attribute?
 jar tvf /var/lib/tomcat5/common/lib/*dbcp* | grep BasicDataSourceFactory | sed -e 's/.* //g' | sed -e 's/.class//' | sed -e "s/\//\\./g"
  • copy log4j.properties file
copy [CREAM_WKA]/stage/etc/glite-ce-cream/log4j.properties in /etc/glite-ce-cream/log4j.properties
  • copy glite-ce-cream-authorization.mar file
copy [CREAM_WKA]/emi.cream-ce.cream/lib/glite-ce-cream-authorization.mar in /usr/share/tomcat5/webapps/ce-cream/WEB-INF/modules/
  • copy glite-ce-cream.aar file
copy [CREAM_WKA]/emi.cream-ce.cream/lib/glite-ce-cream.aar in /usr/share/tomcat5/webapps/ce-cream/WEB-INF/services
  • copy the following scripts in /usr/bin/
[CREAM_WKA]/stage/usr/bin/glite-cream-copyProxyToSandboxDir.sh
[CREAM_WKA]/stage/usr/bin/glite_cream_load_monitor
[CREAM_WKA]/stage/usr/bin/glite-ce-cream-purge-proxy
[CREAM_WKA]/stage/usr/bin/glite-ce-cream-purge-sandbox
[CREAM_WKA]/stage/usr/bin/glite-cream-createsandboxdir
  • copy the following scripts in /etc/glite-ce-cream/
[CREAM_WKA]/stage/usr/share/glite-ce-cream-api-java/jobwrapper.tpl
[CREAM_WKA]/stage/usr/share/glite-ce-cream-api-java/jobwrapper-mpi.tpl
  • copy the following jar libraries in /usr/share/java/
[CREAM_WKA]/stage/usr/share/java/glite-ce-cream-delegationExecutor.jar
[CREAM_WKA]/stage/usr/share/java/glite-ce-cream-blahExecutor.jar
[CREAM_WKA]/stage/usr/share/java/glite-ce-cream-core.jar
[CREAM_WKA]/stage/usr/share/java/glite-ce-common-java.jar
[CREAM_WKA]/stage/usr/share/java/glite-ce-cream-api-java.jar 
[CREAM_WKA]/stage/usr/share/java/glite-jdl-api-java.jar 
[CREAM_WKA]/stage/usr/share/java/argus-pep-api-java.jar
[CREAM_WKA]/stage/usr/share/java/argus-pep-common.jar
[CREAM_WKA]/stage/usr/share/java/delegation-java.jar
[CREAM_WKA]/stage/usr/share/java/trustmanager*  
[CREAM_WKA]/stage/usr/share/java/vomsjapi.jar 
(?) mysql-connector-java.jar 
(?) classad.jar
  • create the following links
ln -s /usr/share/java/trustmanager.jar /usr/share/tomcat5/common/lib/\[trustmanager\].jar
ln -s /usr/share/java/trustmanager-axis.jar /usr/share/tomcat5/common/lib/\[trustmanager-axis\].jar
ln -s /usr/share/java/vomsjapi.jar /usr/share/tomcat5/common/lib/\[vomsjapi].jar
ln -s /usr/share/java/log4j.jar /usr/share/tomcat5/common/lib/\[log4j].jar
ln -s /usr/share/java/mysql-connector-java.jar /usr/share/tomcat5/common/lib/\[mysql-connector-java].jar
ln -s /usr/share/java/delegation-java.jar /usr/share/tomcat5/webapps/ce-cream/WEB-INF/lib/\[delegation-java\].jar
ln -s /usr/share/java/argus-pep-common.jar /usr/share/tomcat5/webapps/ce-cream/WEB-INF/lib/\[argus-pep-common\].jar
ln -s /usr/share/java/argus-pep-api-java.jar /usr/share/tomcat5/webapps/ce-cream/WEB-INF/lib/\[argus-pep-api-java\].jar
ln -s /usr/share/java/glite-jdl-api-java.jar /usr/share/tomcat5/webapps/ce-cream/WEB-INF/lib/\[glite-jdl-api-java\].jar
ln -s /usr/share/java/classad.jar /usr/share/tomcat5/webapps/ce-cream/WEB-INF/lib/\[classad\].jar
ln -s /usr/share/java/glite-ce-cream-api-java.jar /usr/share/tomcat5/webapps/ce-cream/WEB-INF/lib/\[glite-ce-cream-api-java\].jar
ln -s /usr/share/java/glite-ce-common-java.jar /usr/share/tomcat5/webapps/ce-cream/WEB-INF/lib/\[glite-ce-common-java\].jar
ln -s /usr/share/java/glite-ce-cream-core.jar /usr/share/tomcat5/webapps/ce-cream/WEB-INF/lib/\[glite-ce-cream-core\].jar
  • [trustmanager-tomcat].jar, [trustmanager].jar and [bcprov].jar links must exist in /usr/share/tomcat5/server/lib
[trustmanager-tomcat].jar -> /usr/share/java/trustmanager-tomcat.jar
[trustmanager].jar -> /usr/share/java/trustmanager.jar
[bcprov].jar -> /usr/share/java/bcprov.jar
  • [bcprov].jar link must exist in /usr/share/tomcat5/common/lib
[bcprov].jar -> /usr/share/java/bcprov.jar
  • configure creamdb database (required version 2.5, use: [CREAM_WKA]/emi.cream-ce.cream/config/db/populate_creamdb_mysql.sql)
mysql -u<userDB> -p < populate_creamdb_mysql.sql
  • start tomcat5 service
service tomcat5 start

Installation and Configuration using rpms for platform sl5_x86_64

Requirements

  • A clean installation of SL5
  • Remove the DAG repository
  • Protect OS repositories
  • install packages: yum-protectbase yum-priorities
  • Valid host certificate and key saved into /etc/grid-security/hostcert.pem and /etc/grid-security/hostkey.pem resp.

Basic setup

  • Install PGP keys:
    wget http://glite.web.cern.ch/glite/glite_key_gd.asc -O /tmp/glite_key_gd.asc
    rpm --import /tmp/glite_key_gd.asc
    wget http://emisoft.web.cern.ch/emisoft/dist/EMI/1/RPM-GPG-KEY-emi -O /tmp/emi_key_gd.asc
    rpm --import /tmp/emi_key_gd.asc
  • Install the EPEL extension:
    rpm -Uvh http://download.fedora.redhat.com/pub/epel/5/i386/epel-release-5-4.noarch.rpm
  • Install EGI trustanchors:
    wget http://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo -O /etc/yum.repos.d/EGI-trustanchors.repo
    yum install ca-policy-egi-core fetch-crl
    service fetch-crl-cron start
    chkconfig fetch-crl-cron on
  • Disable yum autoupdate:
    wget http://forge.cnaf.infn.it/frs/download.php/101/disable_yum.sh
    . disable_yum.sh

CREAM installation setup

  • Save in /etc/yum.repos.d/emi1-testing-third-party.repo the following definitions:
    [EMI-1-testing-third-party]
    name=EMI 1 testing third-party
    baseurl=http://emisoft.web.cern.ch/emisoft/dist/EMI/testing/1/sl5/$basearch/third-party
    protect=0
    enabled=1
    priority=45
    gpgcheck=0
    gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-emi
  • Download the current repository definition for CREAM:
    wget http://etics-repository.cern.ch/repository/pm/volatile/repomd/name/test_cream_emi2/etics-volatile-build-by-name-protect.repo -O /etc/yum.repos.d/cream-testing.repo
  • Install all the services:
    yum install xml-commons-apis glite-ce-cream glite-ce-monitor glite-ce-ce-plugin

Manual setup of the tomcat trustmanager

  • Install tomcat5 cert and key:
    service tomcat5 stop
    cp /etc/grid-security/host*.pem /usr/share/tomcat5
    chown tomcat.tomcat /usr/share/tomcat5/host*.pem
  • Install the tomcat trustmanager:
    rpm -ivh http://emisoft.web.cern.ch/emisoft/dist/EMI/1/sl5/x86_64/base/emi-trustmanager-tomcat-3.0.0-1.sl5.noarch.rpm
  • Deploy the classes in tomcat:
    ln -s /usr/share/java/trustmanager.jar /var/lib/tomcat5/server/lib
    ln -s /usr/share/java/trustmanager-tomcat.jar /var/lib/tomcat5/server/lib
    ln -s /usr/share/java/bcprov.jar /var/lib/tomcat5/server/lib
    ln -s /usr/share/java/log4j.jar /var/lib/tomcat5/server/lib
  • Configure the trustmanager:
    cp -f /var/lib/trustmanager-tomcat/server.xml.template /etc/tomcat5/server.xml
    and then configure the file /etc/tomcat5/server.xml with the following definitions:
    PORT = 8443
    TRUSTDIR = /etc/grid-security/certificates/
    SSLCERTFILE = /usr/share/tomcat5/hostcert.pem
    SSLKEY = /usr/share/tomcat5/hostkey.pem
    CAFILES (not required)
    CRLFILES (not required)
    LOG4JCONF = /var/lib/trustmanager-tomcat/log4j-trustmanager.properties

CREAM service configuration (with Argus)

  • Install the CREAM configuration file:
    cp /etc/glite-ce-cream/cream-config-argus.xml.template /etc/glite-ce-cream/cream-config.xml
    and the customize it with the following definitions:
CREAM_PEPC_RESOURCEID (according to Argus installation)
ARGUS_PEPD_ENDPOINTS (according to Argus installation)
TOMCAT_HOSTCERT_LOCATION = /usr/share/tomcat5/hostcert.pem
TOMCAT_HOSTKEY_LOCATION = /usr/share/tomcat5/hostkey.pem
  • Write the following definitions
    log4j.rootLogger=info, fileout
    log4j.logger.httpclient.wire.content=off
    log4j.logger.org.glite.voms.PKIStore=off
    log4j.appender.fileout=org.apache.log4j.RollingFileAppender
    log4j.appender.fileout.File=/var/log/cream/glite-ce-cream.log
    log4j.appender.fileout.MaxFileSize=1000KB
    log4j.appender.fileout.MaxBackupIndex=20
    log4j.appender.fileout.layout=org.apache.log4j.PatternLayout
    log4j.appender.fileout.layout.ConversionPattern=\%d{dd MMM yyyy HH:mm:ss,SSS} \%c - \%m\%n
    in /etc/glite-ce-cream/log4j.properties

TBD

  • BLAHP setup
  • database creation

Out of scope

  • BDII setup
  • Interlogger setup
Edit | Attach | PDF | History: r9 < r8 < r7 < r6 < r5 | Backlinks | Raw View | More topic actions...
Topic revision: r8 - 2011-11-16 - PaoloAndreetto
 

  • Edit
  • Attach
This site is powered by the TWiki collaboration platformCopyright © 2008-2019 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback