1. www.epikh.eu The EPIKH Project (Exchange Programme to advance e-Infrastructure Know-How) UI Installation and Configuration Dong Xu (xud@ihep.ac.cn) IHEP, CAS Asia 1 2010 - EPIKH School for Grid Site Administrators Beijing, 01.09.2010

2. EPIKH School for Grid Site Administrators, Beijing, 30.08.2010 2/32 Introductions The access point to the WLCG/EGEE Grid is the User Interface (UI). This can be any machine where users have a personal account and where their user certificate is installed. The gLite user Interface is a suite of clients and APIs that users and applications can use to access the gLite services from both the LCG and gLite software stack. From a UI a user can be authenticated and authorized to use the WLCG/EGEE resources, and can access the functionalities offered by the Information, Workload and Data Management Systems.

3. EPIKH School for Grid Site Administrators, Beijing, 30.08.2010 3/32 Check your host Vi /etc/hosts (for example) # Do not remove the following line, or various programs # that require network functionality will fail. 127.0.0.1 localhost.localdomain localhost 202.122.37.107 gilda01.ihep.ac.cn gilda01 Start ntpd service ntpd stop ntpdate ntp-1.infn.it service ntpd start

4. EPIKH School for Grid Site Administrators, Beijing, 30.08.2010 4/32 Download and Installation Create a shell script : install-ui.sh. #!/bin/bash wget http://grid-it.cnaf.infn.it/mrepo/repos/sl5/x86_64/dag.repo -O /etc/yum.repos.d/dag.repo wget http://grid-it.cnaf.infn.it/mrepo/repos/sl5/x86_64/ig.repo -O /etc/yum.repos.d/ig.repo wget http://grid-it.cnaf.infn.it/mrepo/repos/sl5/x86_64/glite-generic.repo -O /etc/yum.repos.d/glite-generic.repo wget http://grid-it.cnaf.infn.it/mrepo/repos/sl5/x86_64/lcg-ca.repo -O /etc/yum.repos.d/lcg-ca.repo wget http://grid018.ct.infn.it/mrepo/repos/gilda.repo -O /etc/yum.repos.d/gilda.repo #wget http://grid-it.cnaf.infn.it/mrepo/repos/sl5/x86_64/glite-ui.repo -O /etc/yum.repos.d/glite-ui.repo wget http://grid-deployment.web.cern.ch/grid-deployment/glite/repos/3.2/glite-UI.repo -O /etc/yum.repos.d/glite- ui.repo echo "download finished. ##########################" sleep 5 yum clean all sleep 5 yum install -y lcg-CA sleep 5 yum install -y gilda_utils sleep 5 yum groupinstall -y glite-UI

5. EPIKH School for Grid Site Administrators, Beijing, 30.08.2010 5/32 Run install-ui.sh You can run install-ui.sh, then it will download and install all packages automatically.

6. EPIKH School for Grid Site Administrators, Beijing, 30.08.2010 6/32 edit site-info.def Edit site-info.def: vi /opt/glite/yaim/examples/siteinfo/site-info.def (ig-site-info.def) gilda04.ihep.ac.cn CE_HOST=gilda04.ihep.ac.cn glite-rb.ct.infn.it RB_HOST=glite-rb.ct.infn.it top-BDII-hostname BDII_HOST=top-BDII-hostname wms-hostname WMS_HOST=wms-hostname lb-hostname LB_HOST=“lb-hostname:9000" PX_HOST=myproxy.ct.infn.it lfc-hostname LFC_HOST=lfc-hostname se-hostname DPM_HOST=se-hostname /usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre JAVA_LOCATION=/usr/lib/jvm/java-1.6.0-openjdk-1.6.0.0.x86_64/jre VOS="gilda" VO_GILDA_SW_DIR=$VO_SW_DIR/gilda VO_GILDA_DEFAULT_SE=$DPM_HOST VO_GILDA_STORAGE_DIR=$CLASSIC_STORAGE_DIR//gilda VO_GILDA_QUEUES="short long infinite" VO_GILDA_VOMS_SERVERS="vomss://voms.ct.infn.it:8443/voms/gilda?/gilda" VO_GILDA_VOMSES="'gilda voms.ct.infn.it 15001 /C=IT/O=INFN/OU=Host/L=Catania/CN=voms.ct.infn.it gilda'" VO_GILDA_VOMS_CA_DN="'/C=IT/O=INFN/CN=INFN CA' '/C=IT/O=INFN/CN=INFN CA'"

7. EPIKH School for Grid Site Administrators, Beijing, 30.08.2010 7/32 edit site-info.def Edit site-info.def: vi /opt/glite/yaim/examples/siteinfo/site-info.def (ig-site-info.def) #VO_SW_DIR=exp_soft_dir #QUEUES="q1 [q2 [...]]“ # _GROUP_ENABLE="fqan1 [fqan2 [...]]“ # VO_ _DEFAULT_SE=vo-default-se # VO_ _LB_HOSTS="vo-lb1 [vo-lb2 [...]]" # VO_ _MAP_WILDCARDS=no # VO_ _PX_HOST=vo-myproxy # VO_ _RBS="vo-rb1 [vo-rb2 [...]]“ #VO_ _SW_DIR=wn_exp_soft_dir #VO_ _VOMSES="'vo_name voms_server_hostname port voms_server_host_cert_dn vo_name' ['...']“ #VO_ _VOMS_CA_DN="'voms_server_ca_dn' ['...']“ #VO_ _VOMS_SERVERS="'vomss:// :8443/voms/ ?/ ' ['...']“ # VO_ _WMS_HOSTS="vo-wms1 [vo-wms2 [...]]“ # VO_ _UNPRIVILEGED_MKGRIDMAP=no #VO_ _USER_HOME_PREFIX=/pool_account_home_dir

8. EPIKH School for Grid Site Administrators, Beijing, 30.08.2010 8/32 Edit ig-groups.conf Edit /opt/glite/yaim/examples/siteinfo/gourp.conf (ig- groups.conf) "/gilda/ROLE=SoftwareManager":::sgm: "/gilda/grelc/das/*":gilda::: "/gilda"::::

9. EPIKH School for Grid Site Administrators, Beijing, 30.08.2010 9/32 Configuration /opt/glite/yaim/bin/yaim -c -s /opt/glite/yaim/examples/siteinfo/site-info.def -n glite-UI

10. EPIKH School for Grid Site Administrators, Beijing, 30.08.2010 10/32 Set environment variable LFC_HOST vi /opt/glite/etc/profile.d/grid-env.sh your lfc hostname gridenv_set“LFC_HOST” “your lfc hostname”

11. EPIKH School for Grid Site Administrators, Beijing, 30.08.2010 11/32 Test UI Copy your private certification to $HOME/.globusCopy your private certification to $HOME/.globus login as a non root users to UI and initialize your voms proxy.login as a non root users to UI and initialize your voms proxy. voms-proxy-init –voms gilda $# voms-proxy-init –voms gilda [xud@gilda08 ~]$ voms-proxy-init -voms gilda Enter GRID pass phrase: Your identity: /C=CN/O=HEP/O=IHEP/OU=CC/CN=dong xu Creating temporary proxy.................. Done Contacting voms.ct.infn.it:15001 [/C=IT/O=INFN/OU=Host/L=Catania/CN=voms.ct.infn.it] "gilda" Done Creating proxy........................................ Done Your proxy is valid until Wed Sep 1 07:25:32 2010 [xud@gilda08 ~]$

12. EPIKH School for Grid Site Administrators, Beijing, 30.08.2010 12/32 Test UI check LFC:check LFC: $# echo $LFC_HOST $# lfc-ls /grid/gilda/home $# lfc-mkdir /grid/gilda/home/xud $# glite-wms-job-delegate-proxy -d xud [xud@gilda08 ~]$ echo $LFC_HOST gilda07.ihep.ac.cn [xud@gilda08 ~]$ lfc-ls /grid/gilda/home xud [xud@gilda08 ~]$ glite-wms-job-delegate-proxy -d xud Connecting to the service https://gilda11.ihep.ac.cn:7443/glite_wms_wmproxy_server ================== glite-wms-job-delegate-proxy Success ================== Your proxy has been successfully delegated to the WMProxy(s): https://gilda11.ihep.ac.cn:7443/glite_wms_wmproxy_server with the delegation identifier: xud ========================================================================== [xud@gilda08 ~]$

13. EPIKH School for Grid Site Administrators, Beijing, 30.08.2010 13/32 Submit a job $# vi test.jdl Type="Job"; JobType="Normal"; Executable="/bin/sh"; Arguments="hello.sh"; StdOutput="hello.out"; StdError="hello.err"; InputSandbox="hello.sh"; OutputSandbox={"hello.out","hello.err"}; $# vi hello.sh #!/bin/bash echo "hello!World!!"

14. EPIKH School for Grid Site Administrators, Beijing, 30.08.2010 14/32 Submit a job glite-wms-job-submit -d xud -o jobid test.jdl [xud@gilda08 ~]$ glite-wms-job-submit -d xud -o jobid test.jdl Connecting to the service https://gilda11.ihep.ac.cn:7443/glite_wms_wmproxy_server ====================== glite-wms-job-submit Success ====================== The job has been successfully submitted to the WMProxy Your job identifier is: https://gilda11.ihep.ac.cn:9000/7ll7bHKvbgEW9nFyZhDLPA The job identifier has been saved in the following file: /home/xud/jobid ==========================================================================

15. EPIKH School for Grid Site Administrators, Beijing, 30.08.2010 15/32 Submit a job $# glite-wms-job-status -i jobid [xud@gilda08 ~]$ ======================= glite-wms-job-status Success ===================== BOOKKEEPING INFORMATION: Status info for the Job : https://gilda11.ihep.ac.cn:9000/7ll7bHKvbgEW9nFyZhDLPA Scheduled Current Status: Scheduled Status Reason: Job successfully submitted to Globus Destination: gilda-01.pd.infn.it:2119/jobmanager-lcgpbs-gilda Submitted: Tue Aug 31 19:32:03 2010 CST ========================================================================== [xud@gilda08 ~]$ $# glite-wms-job-output -i jobid

16. EPIKH School for Grid Site Administrators, Beijing, 30.08.2010 16/32 Thank you very much!