NORDUGRID-MANUAL-3
ARC v0.8 client installation instructions
This is a short client installation description. For more detailed
instructions, please consult the relevant sections of the
NorduGrid User Manual.
You must be logged into a Linux 2.x machine (Fedora, Red Hat
Enterprise Linux, Debian, Ubuntu or SuSE are supported). NB!
Your host name must be set properly, i.e., it must resolve to a proper
IP address.
Standalone client
~ System-wide client and Globus
~ Build on top of existing Globus
Option 1:
Installing the standalone client locally
(as a regular user without administrator privileges)
This method is recommended for users of publicly shared computers who have no administrator privileges. It allows installation of the ARC Grid client in any location, for example, in user's home directory or in any other place where she has write permissions. It is also a good method when you want to install simultaneously several versions of the client, as each of them can be installed independently, without overwriting each other.
Installation procedure:
- Get the pre-compiled standalone binary tarball from the NorduGrid Downloads
area: use the "Quick start" option and select your platform. Typically, "stable" channel is recommended.
- Put the tarball in a directory of your choice and execute
tar xvzf nordugrid-arc-standalone-<x.y.z>.tgz
This will create a new directory
nordugrid-arc-standalone-<x.y.z> and the
tarball can hereafter safely be removed.
- Enter the unpacked directory:
cd nordugrid-arc-standalone-<x.y.z>
- Setup the environment by executing one of the following:
for bash or zsh:
source setup.sh
for csh or tcsh:
source setup.csh
for ksh or any other shell where the source command is not defined:
. ./setup.sh
Upon first execution, this will print a
lot of informational output. Make sure there are no "error" or
"failure" messages.
- Make sure you have a valid personal Grid certificate (typically
located in $HOME/.globus/usercert.pem) and a
private key ($HOME/.globus/userkey.pem). usercert.pem must be world-readable (Linux file access permissions 644), while userkey.pem must be readable only by the owner (mode 400).
Acceptable
certificates are issued by the national Certificate
Authorities (CA) endorsed by the International Grid Trust
Federation (IGTF). In case you have no certificate,
find your respective authority through the IGTF Web site.
ARC standalone comes pre-configured with the NorduGrid CA: that is, if you are a resident of a Nordic country (Denmark, Finland,
Norway, Iceland or Sweden), you can generate the key and request the
certificate using the following instruction:
grid-cert-request -int
For all other countries, please contact your national authority
for instructions on how to obtain the certificate.
- Fire up your certificate with
grid-proxy-init or, if you are a member of a Virtual Organisation,
voms-proxy-init
- For a quick check of your installation, issue an
ngtest command: e.g.
ngtest -R
- Have fun on the Grid!
Option 2:
Installing the NorduGrid client from binaries on a Linux 2.x box
You are going to install pre-compiled binary
packages for ARC client and some necessary 3rd-party
software.
If you are using an RPM-based system and are not a
system administrator, read our "RPM
for everybody" guide.
Installation using Linux repositories
This method is recommended for system administrators and notebook
owners. One typically needs a system administrator privileges
to use it, although there are limted possibilities to install
the packages as a non-privileged user, see the note below.
For RedHat-based systems (RHEL, Fedora, SL, CentOS, ROCKS) and
Debian-based systems (Debian, Ubuntu), NorduGrid offers
package repositories. Most necessary 3rd party packages are
available from recent standard Linux distributions. For older
Linux versions, NorduGrid repositories provide all the
necessary external packages.
- For RedHat-based systems, set up the necessary Yum repositories
and use yum groupinstall "ARC Client".
In order to locate your CA credentials, on RedHad-like systems do
yum search ca_
or, on Debian-like:
apt-cache search ^ca\-.*
You may want to install all the available CA credentias by doing (on RedHat-like systems)
yum install ca_*
or, on Debian-like systems:
sudo apt-get install ^ca\-.*
but be aware that this will install CA keys of all approved
Authorities, including those prohibited by your local
policies (e.g. Iran National CA). It is therefore
strongly recommended to install CA credentials in a
conscious manner, one by one.
You can find the original CA packages at the IGTF Web site, or download
tar-balls from the NorduGrid repository.
- For Debian-based systems, set up the necessary APT
repositories and use
sudo apt-get install globus-gsi-cert-utils-progs
sudo apt-get install globus-proxy-utils
sudo apt-get install nordugrid-arc-client
Using these repository-based methods, you will be able to receive
automatic update notifications, if such are enabled on your
system. If you do not use Yum or APT, please follow the
instructions below.
Manual installation of binary packages
This method is strongly discouraged, because due to multiple
3rd-party dependencies of various softwares it is practically
impossible to describe the installation and to keep it
up-to-date. Even if well described, it may take quite some
time to identify and download missing dependencies. Moreover,
you will not get update notifications when new versions are
released. It is therefore strongly recommended to use the
repository-based method above.
Install the following packages (RPMs or DEBs):
- ARC components: nordugrid-arc-client nordugrid-arc-libs
- VOMS: voms voms-clients
- LFC and related data management: lfc lcgdm
- gSOAP: gsoap
- Globus Toolkit components:
globus-callout
globus-common
globus-common-progs
globus-ftp-client
globus-ftp-control
globus-gsi-callback
globus-gsi-cert-utils
globus-gsi-cert-utils-progs
globus-gsi-credential
globus-gsi-openssl-error
globus-gsi-proxy-core
globus-gsi-proxy-ssl
globus-gsi-sysconfig
globus-gss-assist
globus-gssapi-error
globus-gssapi-gsi
globus-io
globus-libtool
globus-openssl
globus-openssl-module
globus-openssl-progs
globus-proxy-utils
globus-rls-client
globus-rsl
globus-xio
globus-xio-gsi-driver
globus-xio-popen-driver
These packages can be obtained from various sources:
- The NorduGrid
repositories usually contain all the necessary
packages.
- For newer RedHat- and Debian-based operating systems (released
since February 2010), Globus Toolkit, VOMS, LFC and
gSOAP are available from the official Linux distribution
repositories
- Some packages can be obtained from the original developers or
other distributors, such as Globus Alliance itself and
VDT
Certificates and other post-installation procedures
- Verify that the variable GLOBUS_LOCATION,
is set according to your Globus
installation: unless you forced installation in a specific location,
the default location should be /opt/globus.
- ca_NorduGrid
- ca_NorduGrid-certrequest-config
These packages are available from the NorduGrid
repositories.
- If you didn't do so already, install the
necessary Certificate Authority (CA) credentials from
the NorduGrid Downloads area ("igtf" folder).
- Re-login into a new shell, or type
source /etc/profile.d/nordugrid.sh
to setup the correct environment. If you are in
a C-shell, use *.csh counterpart of the script
above. If the source command is not defined in your shell, use
. /etc/profile.d/nordugrid.sh
- Make sure you have a valid personal Grid certificate (typically
located in $HOME/.globus/usercert.pem) and a
private key ($HOME/.globus/userkey.pem). usercert.pem must be world-readable (Linux file access permissions 644), while userkey.pem must be readable only by the owner (mode 400).
Acceptable
certificates are issued by the national Certificate
Authorities (CA) endorsed by the International Grid Trust
Federation (IGTF). In case you have no certificate,
find your respective authority through the IGTF Web site.
ARC standalone comes pre-configured with the NorduGrid CA: that is, if you are a resident of a Nordic country (Denmark, Finland,
Norway, Iceland or Sweden), you can generate the key and request the
certificate using the following instruction:
grid-cert-request -int
For all other countries, please contact your national authority
for instructions on how to obtain the certificate.
- Fire up your certificate with
grid-proxy-init or, if you are a member of a Virtual Organisation,
voms-proxy-init
- For a quick check, issue an ngtest
command: e.g.
ngtest -R
- Have fun on the Grid!
Option 3:
Installing the NorduGrid client as root on your
Linux 2.x box on top of an existing Globus installation
Build and installation procedure:
- Check that the variables GLOBUS_LOCATION,
is set according to your Globus installation:
unless you forced installation in a specific location,
default location should be /opt/globus.
- Get from the NorduGrid Downloads
area, "stable", "devel" or "nightly" channels the
ARC source RPM nordugrid-arc-<x.y.z-1>.src.rpm and rebuild it:
rpm --rebuild nordugrid-<x.y.z-1>.src.rpm
Note: this will rebuild the entire ARC middleware -- not only
the client.
- Install the created binary RPMs (for a client, you only need the
nordugrid-arc-client RPM)
- Alternatively, you can grab a tarball containing the ARC
source-code nordugrid-arc-<x.y.z>.tar.gz and follow the usual procedure:
tar xvzf nordugrid-arc-<x.y.z>.tar.gz
cd nordugrid-<x.y.z>
./configure
make
make
install
- ca_NorduGrid
- ca_NorduGrid-certrequest-config
These packages are available from the NorduGrid
repositories.
- If you didn't do so already, install the
necessary Certificate Authority (CA) credentials from
the NorduGrid Downloads area ("igtf" folder).
- Re-login into a new shell, or type
source /etc/profile.d/nordugrid.sh
to setup the correct environment. If you are in
a C-shell, use *.csh counterpart of the script
above. If the source command is not defined in your shell, use
. /etc/profile.d/nordugrid.sh
- Make sure you have a valid personal Grid certificate (typically
located in $HOME/.globus/usercert.pem) and a
private key ($HOME/.globus/userkey.pem). usercert.pem must be world-readable (Linux file access permissions 644), while userkey.pem must be readable only by the owner (mode 400).
Acceptable
certificates are issued by the national Certificate
Authorities (CA) endorsed by the International Grid Trust
Federation (IGTF). In case you have no certificate,
find your respective authority through the IGTF Web site.
ARC standalone comes pre-configured with the NorduGrid CA: that is, if you are a resident of a Nordic country (Denmark, Finland,
Norway, Iceland or Sweden), you can generate the key and request the
certificate using the following instruction:
grid-cert-request -int
For all other countries, please contact your national authority
for instructions on how to obtain the certificate.
- Fire up your certificate with
grid-proxy-init or, if you are a member of a Virtual Organisation,
voms-proxy-init
- For a quick check, issue an ngtest
command: e.g.
ngtest -R
- Have fun on the Grid!