The wiki is deprecated and due to be decommissioned by the end of September 2022.
The content is being migrated to other supports, new updates will be ignored and lost.
If needed you can get in touch with EGI SDIS team using operations @ egi.eu.
Difference between revisions of "Fedcloud-tf:CloudscapeVDemo"
| Line 30: | Line 30: | ||
====<span style="color:green">DONE</span> Get rOCCI client==== | ====<span style="color:green">DONE</span> Get rOCCI client==== | ||
This was quite a hassle for MAC OS X 10.8 (Mountain Lion). | This was quite a hassle for MAC OS X 10.8 (Mountain Lion). I finally managed getting rOCCI client running natively on Mac OS X - [[rOCCI client on Mac OS X Mountain Lion (10.8)|here is how I did it]]. | ||
<span style="color:red">Action rOCCI team</span> - document usage on Mac OS X (issue filed on Github) | <span style="color:red">Action rOCCI team</span> - document usage on Mac OS X (issue filed on Github) | ||
Revision as of 13:03, 20 February 2013
This Wiki entry describes the planned demonstration at Cloudscape V in Brussels (see FCTF Outreach section).
Demonstration script
- Check GOGDB for available Cloud endpoints
- --> demonstrates information system
- https://goc.egi.eu/portal/
- Check Nagios/SAM for status
- --> demonstrates monitoring
- http://cloudmon.egi.eu/myegi/
- Look up the image on the Marketplace
- --> demonstrate VM distribution and endorsement
- --> demonstrate vmcatcher based image distribution
- http://marketplace.egi.eu/metadata
- using rOCCI client, deploy a number of WeNMR instance on selected RPs
- --> federated consistent access using OCCI
- tentative RPs: INFN, JUELICH, GWDG, CESNET, CESGA, Cyfronet, In2P3
- refer to WeNMR page for info on this demo phase
- Go to the accounting page
- --> demonstrate that we account for Cloud compute consumption
- http://goc-accounting.grid-support.ac.uk/cloudtest/cloudsites.html
- http://goc-accounting.grid-support.ac.uk/cloudtest/vmshour.html
- http://goc-accounting.grid-support.ac.uk/cloudtest/vms.html
TODOs
rOCCI client
DONE Get rOCCI client
This was quite a hassle for MAC OS X 10.8 (Mountain Lion). I finally managed getting rOCCI client running natively on Mac OS X - here is how I did it.
Action rOCCI team - document usage on Mac OS X (issue filed on Github)
DONE rOCCI client and my Grid certificate
After sorting out the issues with Ruby and rOCCI client (see above), the certificate handling wasn't a problem anymore. However, I stand with my request to support PKCS#12 format for key and cert storage as this is *very* widely supported and does not need people to mess with OpenSSL cmd line hacking to get the authN sorted.
Any browser and OS key management supports PKCS#12 key management - no command line private key messing involved!
Action - Please document in easy steps the whole process of acquiring a Grid certificate and how to configure command line systems (for PEM support)
Action rOCCI team - Support PKCS#12 (https://github.com/gwdg/rOCCI/issues/48)
In progress Getting started with client
Getting familiar with it. For demo purposes, long command line options are a killer, so some sort of configuration file with endpoint profiling would be good.
Action rOCCI team - Support config files with endpoint profiling (https://github.com/gwdg/rOCCI/issues/46)
RP status
In progress Getting started with client
Checking RP status for the demo. Checks include:
- storage resource query checks against RPs without VO support
The OCCI command used to query the resource providers is this:
occi --auth x509 --user-cred /Users/michel/.globus/usercred-des.pem --ca-path /Users/michel/FCTF/certificates --password $PASSWD --action list --resource storage --endpoint $ENDPOINT
Status:
CESGA, CESNET, GWDG
Cyfronet (no endpoint in GOCDB), INFN (no endpoint in GOCDB)
JUELICH (credentials rejected?), IN2P3 (service timeout)
- storage resource queries against RPs with VO support
- instantiate WeNMR image without VO support
The OCCI command used to query the resource providers is this:
occi --auth x509 --user-cred /Users/michel/.globus/usercred-des.pem --ca-path /Users/michel/FCTF/certificates --password $PASSWD --endpoint $ENDPOINT --resource compute --action create --mixin $MIXIN --resource-title "HelloWeNMR"
Status:
CESGA, CESNET, GWDG
Cyfronet (no endpoint in GOCDB), INFN (no endpoint in GOCDB), JUELICH (credentials rejected?), IN2P3 (service timeout)
VO support
Done Get my Grid Certificate registered in Fedcloud VO
Server Perun doesn't like me. CESNET is investigating.
Update - tried this morning again, and I could apply for fedcloud membership. Waiting for confirmation Email...
InProgress Get Proxy certificate tools
No idea yet...
Test-run OCCI commands against selected RPs
SAM / Monitoring
Make sure the production SAM is used: https://fedcloud-mon.egi.eu
Accointing
GOC DB
DONE GocDB CA certificate
Add UK E Science certificate from the trust bundle into my browser config. For Mac OS X that translates to key chain access fun (for Google Chrome)