Please note: This documentation is for OSG 1.2. While we still provide critical security updates for OSG Software 1.2, we recommend you use OSG Software 3 for any new or updated installations. We are considering May 31, 2013 as possible OSG 1.2 End of Life (EOL).

ReleaseDocumentation
PreparingComputeElement
Review Passed
by
Released
by

<span class=

Prepare the Compute Element Installation

About this Document

hand This document is for system administrators. It contains requirements that must be met and procedures completed before beginning the Compute Element Installation.

Before you Begin

  1. Read the Site Planning Guide and plan your site on paper.
  2. Verify that the Operating System you are using is supported.
  3. Verify the operation of your local batch system.
  4. Read the Pacman notes for installation and best practices.
  5. Decide if your site will join the Production Grid or the Integration Testbed of the OSG.
  6. Know your CE's resource name and resouce group. These are values that you filled out when you registered the site in OIM.
  7. Determine your site sponsors. These are the Virtual Organizations that own the computing resources behind the CE.

Operating System and Networking Requirements

  • a working network connection
  • a fully qualified domain name for the gatekeeper
  • a working forward and reverse DNS lookup for the IP address of the gatekeeper
  • a valid host and several service certificates issued for the fully qualified domain name of the gatekeeper
  • synchronized clocks using NTP for all resources constituting the Compute Element
  • outbound network connections, please review the Firewall Document

Required Service Accounts

Service NameSorted ascending Account Comment
GRAM globus if not present, the daemon account will be used
CEMon daemon  
RSV rsvuser test with su -c "/bin/date" rsvuser

Required User Accounts

Unix user accounts need to be created for each Virtual Organization. The uid and name of the account can be locally determined. You will be asked to provide a mapping from local accounts to VOs later during the configuration process. Since VO's are frequently added to the OSG, you should access the current list of registered VO's at MyOSG's Virtual Organization menu item. Any new VO's will also appear in on the CE in the file $VDT_LOCATION/monitoring/osg-user-vo-map.txt.

Required Host and Service Certificates

The following table lists OSG services that require a service certificate for their operation. Please request and install the certificates before you proceed with the installation.

Purpose Default Location Comment
host /etc/grid-security/hostcert.pem
/etc/grid-security/hostkey.pem
owned by the root account
GRAM-WS /etc/grid-security/http/httpcert.pem
/etc/grid-security/http/httpkey.pem
owned by the globus account
RSV /etc/grid-security/rsvcert.pem
/etc/grid-security/rsvkey.pem
owned by the rsvuser acount
CEMon   owned by the daemon account

Do you have a Grid User Certificate?

As the system administrator you are required to test the functionality provided by the Compute Element. This requires a grid user certificate issued for you.

FAQ

Should I use the root account to install the OSG Compute Element?

Short answer: Yes, especially for new sysadmins.

Long answer: Most site admins install OSG compute element services as root. Paraphrasing from the VDT site, if you install as root the VDT's programs can be made available to all the users on your system. Additionally, the VDT will be able to configure and start some of the grid services you might be installing. Some services can only be run if you are root. Corollary: If you don't install as root, you cannot do these things. Unless your local policy states otherwise, you will want to install the OSG compute element as root.

Topic revision: r38 - 05 Sep 2012 - 21:13:26 - KyleGross
Hello, TWikiGuest
Register

Introduction

Installation and Update Tools

Clients

Compute Element

Storage Element

Other Site Services

VO Management

Software and Caches

Central OSG Services

Additional Information

Community
linkedin-favicon_v3.icoLinkedIn
FaceBook_32x32.png Facebook
campfire-logo.jpgChat
 
TWIKI.NET

TWiki | Report Bugs | Privacy Policy

This site is powered by the TWiki collaboration platformCopyright by the contributing authors. All material on this collaboration platform is the property of the contributing authors..