Alert.png The wiki is deprecated and due to be decommissioned by the end of September 2022.
The content is being migrated to other supports, new updates will be ignored and lost.
If needed you can get in touch with EGI SDIS team using operations @ egi.eu.

Fedcloud-tf:CloudscapeVDemo

From EGIWiki
Jump to navigation Jump to search


This Wiki entry describes the planned demonstration at Cloudscape V in Brussels (see FCTF Outreach section).

Demonstration script

  1. Check GOGDB for available Cloud endpoints
    1. --> demonstrates information system
    2. https://goc.egi.eu/portal/
  2. Check Nagios/SAM for status
    1. --> demonstrates monitoring
    2. https://fedcloud-mon.egi.eu
  3. Look up the image on the Marketplace
    1. --> demonstrate VM distribution and endorsement
    2. http://marketplace.egi.eu/metadata
  4. using rOCCI client, deploy a number of WeNMR instance on selected RPs
    1. --> federated consistent access using OCCI
    2. tentative RPs: INFN, JUELICH, GWDG, CESNET, CESGA, Cyfronet, In2P3
    3. refer to WeNMR page for info on this demo phase
  5. Go to the accounting page
    1. --> demonstrate that we account for Cloud compute consumption
    2. http://goc-accounting.grid-support.ac.uk/cloudtest/cloudsites.html
    3. http://goc-accounting.grid-support.ac.uk/cloudtest/vmshour.html
    4. http://goc-accounting.grid-support.ac.uk/cloudtest/vms.html


TODOs

rOCCI client

DONE Get rOCCI client
  • Install Java JRE or JDK
  • Get Executable JAR file from rOCCI people.

Action GWDG - provide direct download links to executables/ exec jar files on the project page

Need to make sure that I use the Client VM, not the Server VM, but that is a detail.
--> Can't do that for now. This impacts the startup times - currently 18s for "java -jar occi.jar --help"

DONE rOCCI client and my Grid certificate

Done. Had to provide my grid certificate and private key in one PEM file. Instructions are on https://wiki.egi.eu/wiki/Fedcloud-tf:WorkGroups:_Federated_AAI:OpenNebula#OCCI_client but the whole process on grid certificates is not clear.

Good that I had one, but the CA certificate stuff (in layman's terms) is another irritating obstacle - the installation or usage of /etc/grid-security/certificates is something very opaque to non-Grid people!

Action - Please document in easy steps the whole process of acquiring a Grid certificate and how to configure command line systems. Issue - Even though Piotr could use his encrypted grid cert private key, I couldn't. I had to generate a PEM file with an unencrypted private key to gett the rOCCI client working. Using OpenSSL, this ensured that the passphrase was the correct one. However, Boris reported that there was an issue with OpenSSL and Java - maybe that is the reason...

Getting started with client

VO support

Get my Grid Certificate registered in Fedcloud VO
Test-run OCCI commands against selected RPs

SAM / Monitoring

Make sure the production SAM is used: https://fedcloud-mon.egi.eu

Accointing

GOC DB

GocDB CA certificate

Certificate is not trusted. Where do I conveniently get the CA certificatge to add that to my stack?