Install Installation
From UGP-Wiki
Contents |
[edit] II. Installation
[edit] Types of Grids
You can install the following types of Grids:
• A stand-alone grid
A stand-alone Grid is complete. It will ALWAYS run its own Simple CA (Certificate Authority). Optionally, its Grid Portal can include a MyProxy server.
• A Campus Grid or other grid that is on the lower level of a Grid hierarchy
A Grid Portal on the lowest level of a Grid Hierarchy, such as those run by the individual campuses of the University of California, NEVER run a CA. The CA is ONLY run by the Grid at the highest level. Furthermore, the grid on the highest level additionally runs two services: the Registry Service and the Sync Service. As part of the installation of a lower-level Grid, the addresses of these services must be specified. We recommend that ALL lower level Grid Portals run MyProxy Servers.
• A grid at the heighest level of a Grid hierarchy
A Grid Portal on the highest level of a Grid Hierarchy, such as the one at the University of California system wide, ALWAYS runs a Simple CA and a MyProxy Server. Additionally it ALWAYS runs Registry and Sync Services.
[edit] UGP Installation
Choose one of the following:
• Installation with GUI
If you have X Windows available, it is recommended that you use the GUI installer to do the installation. Login as user globus, change to the directory containing the UCLA Grid Software.
Note: Currently the installer is not complete. This will be rectified in a future release. You might have to edit the portal.properties file before running the GUI if the defaults described here do not meet your needs.
□ MyProxy
If you will NOT run a MyProxy server, delete the block of lines having
to do with MyProxy from portal.properties.
If you WILL run a MyProxy server, correct the myProxyHost, myProxyPort,
myProxyBin, myProxyDir and myProxyDn that are in portal.properties.
□ Register and Sync Services
For stand-alone Grids and heigher-level grids comment out the lines
beginning with sync.service= and register.service=.
For lower-level Grids replace the URLs in these lines with the URLs of
the services that you will use. The file is distributed with the URLs
of the services at the University of California.
□ Pool Storage
For common.storage= code the address of the storage server for
Pool-User storage.
□ Authentication Method
For University of California campuses using Shibboleth authentication
ONLY, code use.shibboleth=true. All others should change true to false
to use SSH authentication. then enter:
./install.sh gui
You will be asked whether your are installing an Appliance or the Grid Portal and will then be presented with additional prompts and instructions accordingly.
• Command Line Installatiion from the Console
For a command line installation, login as user globus, change to the directory containing the UCLA Grid Software, and edit the appropriate properties files:
□ For a Grid Appliance edit:
build.properties
provider.properties
□ For the Grid Portal edit:
build.properties
portal.properties
Next execute one of the following commands:
./install.sh sgeappliance -- to install an SGE Appliance
./install.sh pbsappliance -- to install an PBS Appliance
./install.sh portal -- to install the Grid Portal
[edit] MyProxy Server Installation
The MyProxy Server installation requires only that Globus ToolKit be installed. The instructions given here are for Linux machines running Fedora Core.
1. As root, create user globus using the command:
useradd globus
2. Login as user globus user. All the rest of the installation will be done under this login id.
3. Copy the file gt4.0.3-all-source-installer.tar.gz from UCLAGridPortal/ 3rdParty on your Grid Portal to the MyProxy server machine.
4. tar -zxvf gt4.0.3-all-source-installer.tar.gz
5. cd gt4.0.3-all-source-installer
6. ./configure --prefix=/home/globus/gt4.0.3D
7. make
8. make install
9. Copy the simpleCA tar file from the CA machine.
10. Enter the command:
$GLOBUS_LOCATION/sbin/gpt-build
globus_simple_ca_97e0d117_setup-0.19.tar.gz gcc64dbg'
Replace gcc64dbg with gcc32dbg for 32 bit machines.
11. $GLOBUS_LOCATION/sbin/gpt-postinstall
12. As root create the host certificate request file using the command:
grid-cert-request -host `hostname`
and send the
/etc/grid-security/hostcert_request.pem
file via email to the Portal Grid Admin. The Portal Grid Admin will send the signed hostcertificate file hostcert.pem back to you.
13. As root, copy the signed hostcert.pem file to the:
/etc/grid-security
directory.
14. As root:
cp hostcert.pem containercert.pem
15. As root:
cp hostcert.pem myproxycert.pem
16. As root:
cp hostkey.pem containerkey.pem
17. As root:
cp hostkey.pem myproxykey.pem
18. As root:
chown globus:globus container*.pem
19. As root:
chown globus:globus myproxy*.pem
20. cp $GLOBUS_LOCATION/share/myproxy/myproxy-server.config $GLOBUS_LOCATION/ etc/myproxy-server.config
21. cp $GLOBUS_LOCATION/share/myproxy/etc.initd.myproxy /etc/init.d/myproxy
22. Update /etc/services and add the line:
myproxy-server 7512/tcp
23. Update /etc/myproxy to add:
GLOBUS_LOCATION="/home/globus/GT4"
export GLOBUS_LOCATION
PORT="-p 7512"
CONFIG="-c ${GLOBUS_LOCATION}/etc/myproxy-server.config"
STORE="-s ${GLOBUS_LOCATION}/var/myproxy"
VERBOSE="-v"
X509_USER_CERT="/etc/grid-security/containercert.pem"
X509_USER_KEY="/etc/grid-security/containerkey.pem"
export X509_USER_CERT X509_USER_KEY
24. Start the MyProxy Server for the first time as user globus using the command:
$GLOBUS_LOCATION/sbin/myproxy-server -d
and make sure there are no errors.
Subsequent to this you will start and stop the MyProxy Server using the command:
/etc/init.d/myproxy start
and
/etc/init.d/myproxy stop
