Difference between revisions of "NGI CZ:CVMFS for auger"
|Line 33:||Line 33:|
-----END PUBLIC KEY-----
-----END PUBLIC KEY-----</pre>
== Squid setup<br> ==
== Squid setup<br> ==
Revision as of 21:41, 11 July 2014
CVMFS for VO auger
Historical introduction (can be skipped by impatient readers)
CVMFS is a distribution tool for software (and other relatively small files). It started to be used by LHC experiments, several other projects deployed it later, all with very good experience. LHC projects use master repository called stratum-0 based at CERN. The master repository for some other projects is hosted by RAL and is decribed at GRIDPP wiki page. VO auger is not supported by RAL site and we started a CVMFS repository hosted by OSG. RAL site can replicate the master repository and distribute it via the same stratum-1's as for other nonLHC VOs. However the path would change from /cvmfs/oasis.opensciencegrid.org/auger to /cvmfs/auger.gridpp.ac.uk and the non-relocatable auger offline software would not work.
Setup for the VO auger
A new solution was discussed during EGI Communnity Forum 2014 at Helsinki and shortly after it adopted. A new stratum-0 with a base name egi.eu is hosted by RAL. VO auger software manager (currently not defined by the VOMS role, but by explicitly given list of DNs) can upload software to upload server cvmfs-upload01.gridpp.rl.ac.uk. It is accessible via gsissh.We must upload files to /home/augersgm/cvmfs_repo (link to /cvmfs-mirror/auger.egi.eu) and unpack them (if we used a tarball). An example:
gsiscp -P 1975 /tmp/jiri/CORSIKA-74000_Fluka.2011.2b.6.tgz cvmfs-upload01.gridpp.rl.ac.uk:/cvmfs-mirror/auger.egi.eu/ gsissh -p 1975 cvmfs-upload01.gridpp.rl.ac.uk cd /cvmfs-mirror/auger.egi.eu tar xzf CORSIKA-74000_Fluka.2011.2b.6.tgz rm CORSIKA-74000_Fluka.2011.2b.6.tgz
Then a manual step by RAL CVMFS master Catalin Condurache is taken to copy the content to the stratum-0. Clients see the software in the path /cvmfs/auger.egi.eu/.
I suppose that client is installed on WNs (probably on request from some LHC VO). The configuration for egi.eu domain is in 2 files: /etc/cvmfs/domain.d/egi.eu.conf and /etc/cvmfs/keys/egi.eu.pub. Their content is:
cat /etc/cvmfs/domain.d/egi.eu.conf CVMFS_PUBLIC_KEY=/etc/cvmfs/keys/egi.eu.pub CVMFS_SERVER_URL="http://cvmfs-egi.gridpp.rl.ac.uk:8000/cvmfs/@org@.egi.eu"
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKhc7s1HmmPWH4Cq1U3K 4FNFKcMQgZxUrgQEfvgkF97OZ8I8wzC9MWqmegX6tqlPmAzYWTM+Xi4nEBWYRhd+ hVN/prHyYGzb/kTyCSHa9EQtIk9SUyoPfQxkGRnx68pD5con8KJySNa8neplsXx+ 2gypwjasBRQLzB3BrrGhrzZ5fL84+dsxNBBW6QfNO1BS5ATeWl3g1J27f0GoGtRO YbPhaAd9D+B+qVo9pt3jKXvjTZQG0pE16xaX1elciFT9OhtZGaErDJyURskD7g3/ NotcpBL5K5v95zA/kh5u+TRrmeTxHyDOpyrGrkqRaT5p+/C1z0HDyKFQbptegCbn GwIDAQAB -----END PUBLIC KEY-----
I compile the software directly an a worker node. This would immediately show missing packages. I assume that all WNs (at leaste on our sites) are installed identically and if it compiles and runs on one node, it should run on every node. However the partition /cvmfs/auger.egi.eu/ is mounted as read only. The solution is to do (on an offline WN):
mount -o bind /tmpfs/auger /cvmfs/auger.egi.eu/
We tried also --make-private option, but it is supported only by newset kernels.
We thank to the EGI CVMFS task force and RAL for their support. Catalin Condurache was the key person for CVMFS support for nonLHC VOs.
--Chudoba 22:40, 11 July 2014 (CEST)