Version 32 (modified by piontek, 12 years ago) (diff)

--

QCG Broker Client Installation

Requirements

  • Packages requirements. All packages required by QCG-Broker client will be automatically installed by YUM during the installation of qcg-broker-client package.
    • Java (>= 1.5)
  • The X.509 certificate and key (signed by the Polish Grid CA The certificate is needed in case when the dedicated gridFTP service is installed for the QCG client.
  • trusted CA certificates To enable secure communication between client and QCG-Broker service set of trusted CA certificates must be copied either into the /etc/grid-security/certificates directory or configured for every user.

For the PL-Grid project: Install Polish Grid and PL-Grid Simple-CA certificates:

-Add appropriate YUM repositories

cat > /etc/yum.repos.d/plgrid.repo << EOF
[PLGRID-general]
name=PLGRID general packages repository
baseurl=http://software.plgrid.pl/packages/general/
enabled=1
metadata_expire=300
gpgcheck=0
EOF
cat > /etc/yum.repos.d/eugridpma.repo << EOF
[EUGRIDPMA-igtf]
name=EUGRIDPMA igtf repository
baseurl=https://dist.eugridpma.info/distribution/igtf/current
enabled=1
metadata_expire=300
gpgcheck=0

[EUGRIDPMA-fetch-crl]
name=EUGRIDPMA fetch-crl repository
baseurl=https://dist.eugridpma.info/distribution/util/fetch-crl/
enabled=1
metadata_expire=300
gpgcheck=0
EOF

-Install certificates

yum install ca_PolishGrid
yum install ca_PLGRID-SimpleCA

-Install certificate revocation list fetching utility

yum install fetch-crl

-Get fresh CRLs now

/usr/sbin/fetch-crl 

-Install cron job for it

cat > /etc/cron.daily/fetch-crl.cron << EOF
#!/bin/sh 
/usr/sbin/fetch-crl
EOF
chmod a+x /etc/cron.daily/fetch-crl.cron

Installation

The packages are designed for Scientific Linux 5.x The installation process requires root privileges.

Software repository

  • Install PL-Grid or/and QCG repositories:
    • Official PL-Grid repository
      rpm -Uvh http://software.plgrid.pl/packages/repos/plgrid-repos-2010-2.noarch.rpm
      
    • QosCosGrid testing repository
      cat > /etc/yum.repos.d/qcg.repo << EOF
      [qcg]
      name=QosCosGrid YUM repository
      baseurl=http://fury.man.poznan.pl/qcg-packages/sl/x86_64/
      enabled=1
      gpgcheck=0
      EOF
      

gridFTP service

For the user convenience QCG client is able to stage in input data accessible from the host where it is installed and also to stage out output data there. The functionality require the data to be accessible via gridFTP service. The gridFTP service can be installed on the client machine or it can be any gridFTP service having access to the data on client machine.

  • install grid-ftp server using YUM Package Manager:
    yum install qcg-dep-gridftp-server
    
  • configuation of grid-ftp server

The grid-ftp server requires the X.509 certificate and key to be present in following locations

  • /etc/grid-security/hostcert.pem
  • /etc/grid-security/hostkey.pem
  • install QCG-Broker client using YUM Package Manager:
    yum install qcg-broker-client
    
  • setup deployment configuration - all configuration variables are placed in /opt/plgrid/qcg/share/qcg-broker-client/client-deploy.prop file
    • client.deploy.dir - directory where the QCG-Broker client was installed (/opt/plgrid/qcg/share/qcg-broker-client). Please do not modify this property.
    • client.service.host - QCG-Broker service hostname
    • client.service.port - QCG-Broker service port
    • client.service.dn - QCG-Broker credential DN
      vim /opt/plgrid/qcg/qcg-broker/client/etc/qcg-broker-client.conf
      
  • configure QCG-Broker command-line client
    /opt/plgrid/qcg/share/qcg-broker-client/config.sh