Changes between Version 19 and Version 20 of ESGFNodeInstallation


Ignore:
Timestamp:
Nov 12, 2013 11:11:45 AM (8 years ago)
Author:
carlos
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • ESGFNodeInstallation

    v19 v20  
    8787The instructions have been provided by the IPSL[[FootNote(http://forge.ipsl.jussieu.fr/prodiguer/wiki/ESGF-FR%3Adevins)]].
    8888
     89[[NoteBox(tip, Do it as `esgf` user)]]
    8990{{{
    9091#!sh
     92$ whoami
     93esgf
    9194$ cd /usr/local/bin
    9295$ wget -O esg-bootstrap  http://198.128.245.140/dist/esgf-installer/esg-bootstrap
     
    9598$ esg-bootstrap --devel
    9699}}}
    97 In our case, we are going to configure only data and compute types:
     100In our case, we are going to configure only `data` and `compute` types:
    98101{{{
    99102#!sh
    100 $ esg-node --type data compute --install
     103$ sudo ./esg-node --type data compute --install
    101104-------------------------------------------------------
    102105Welcome to the ESGF Node installation program! :-)
     
    123126}}}
    124127
    125 = Index peer configuration =
    126 == Configure host certificate and CA public key ==
    127 I think the procedure I sent in the below mail is correct but a little to technical. it might be better to use esg-node commands in order to federate:
    128 
    129 Here is where you should put the signed csr we sent via scp to your server yesterday
     128If you want to re-install it, you have to use the `force` option :
    130129{{{
    131 /etc/grid-security/data.meteo.unican.es-esg-node-globus.csr.signed
     130#!sh
     131$ sudo ./esg-node --type data compute --install --force
    132132}}}
    133133
    134 Then if the tomcat key is not in /etc/grid-security, copy it inside:
     134
     135= Index peer configuration =
     136
     137== Configure host certificate and CA public key ==
     138
     139[[NoteBox(tip, Do it as `root` user)]]
     140
     141First, you have to send the csr file located under `/esg/config/tomcat/` directory to the CA.
    135142{{{
    136 $ cd /etc/grid-security; cp /esg/conf/tomcat/hostkey.pem ./
     143#!sh
     144$/esg/config/tomcat/data.meteo.unican.es-esg-node.csr
     145}}}
     146Then you should put the signed csr we sent via scp to the `/etc/grid-security/` directory.
     147{{{
     148#!sh
     149$ /etc/grid-security/data.meteo.unican.es-esg-node-globus.csr.signed
    137150}}}
    138151
    139 Then run this command to install the key pair in tomcat:
     152And, if the tomcat key is not in /etc/grid-security directory, copy it inside:
    140153{{{
    141 $ cd /etc/grid-security; esg-node --install-keypair data.meteo.unican.es-esg-node-globus.csr.signed hostkey.pem
     154#!sh
     155$ cd /etc/grid-security
     156$ cp /esg/conf/tomcat/hostkey.pem ./
    142157}}}
    143158
    144 You will be prompted to enter the cacert file; enter the url to the index node cacert.pem:
     159Install the key pair in tomcat. You will be prompted to enter the cacert file; enter the url to the index node cacert.pem:
    145160{{{
     161#!sh
     162$ esg-node --install-keypair data.meteo.unican.es-esg-node-globus.csr.signed hostkey.pem
    146163Please enter your Certificate Athority's certificate chain file(s):
    147164 [enter each cert file/url press return, press return with blank entry when done]
    148165certfile> http://vesgint-idx.ipsl.jussieu.fr/cacert.pem
     166...................................
     167...................................
    149168}}}
    150169
     
    153172Then set auto fetch certs false otherwise `/etc/grid-security/certificates/*` will be overwritten by `esgf-prod` peer groups certificates
    154173{{{
     174#!sh
    155175$ esg-node --set-auto-fetch-certs false
    156176}}}
     
    158178Then restart your node
    159179{{{
     180#!sh
    160181$ esg-node restart
    161182}}}
     
    163184Then register
    164185{{{
     186#!sh
    165187$ esg-node --register vesgint-idx.ipsl.jussieu.fr
    166188}}}
    167189Then rebuild the Tomcat's trustore
    168190{{{
     191#!sh
    169192$ esg-node --rebuild-truststore
    170193}}}