Changes between Version 19 and Version 20 of ESGFNodeInstallation
- Timestamp:
- Nov 12, 2013 11:11:45 AM (8 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
ESGFNodeInstallation
v19 v20 87 87 The instructions have been provided by the IPSL[[FootNote(http://forge.ipsl.jussieu.fr/prodiguer/wiki/ESGF-FR%3Adevins)]]. 88 88 89 [[NoteBox(tip, Do it as `esgf` user)]] 89 90 {{{ 90 91 #!sh 92 $ whoami 93 esgf 91 94 $ cd /usr/local/bin 92 95 $ wget -O esg-bootstrap http://198.128.245.140/dist/esgf-installer/esg-bootstrap … … 95 98 $ esg-bootstrap --devel 96 99 }}} 97 In our case, we are going to configure only data and computetypes:100 In our case, we are going to configure only `data` and `compute` types: 98 101 {{{ 99 102 #!sh 100 $ esg-node --type data compute --install103 $ sudo ./esg-node --type data compute --install 101 104 ------------------------------------------------------- 102 105 Welcome to the ESGF Node installation program! :-) … … 123 126 }}} 124 127 125 = Index peer configuration = 126 == Configure host certificate and CA public key == 127 I think the procedure I sent in the below mail is correct but a little to technical. it might be better to use esg-node commands in order to federate: 128 129 Here is where you should put the signed csr we sent via scp to your server yesterday 128 If you want to re-install it, you have to use the `force` option : 130 129 {{{ 131 /etc/grid-security/data.meteo.unican.es-esg-node-globus.csr.signed 130 #!sh 131 $ sudo ./esg-node --type data compute --install --force 132 132 }}} 133 133 134 Then if the tomcat key is not in /etc/grid-security, copy it inside: 134 135 = Index peer configuration = 136 137 == Configure host certificate and CA public key == 138 139 [[NoteBox(tip, Do it as `root` user)]] 140 141 First, you have to send the csr file located under `/esg/config/tomcat/` directory to the CA. 135 142 {{{ 136 $ cd /etc/grid-security; cp /esg/conf/tomcat/hostkey.pem ./ 143 #!sh 144 $/esg/config/tomcat/data.meteo.unican.es-esg-node.csr 145 }}} 146 Then you should put the signed csr we sent via scp to the `/etc/grid-security/` directory. 147 {{{ 148 #!sh 149 $ /etc/grid-security/data.meteo.unican.es-esg-node-globus.csr.signed 137 150 }}} 138 151 139 Then run this command to install the key pair in tomcat:152 And, if the tomcat key is not in /etc/grid-security directory, copy it inside: 140 153 {{{ 141 $ cd /etc/grid-security; esg-node --install-keypair data.meteo.unican.es-esg-node-globus.csr.signed hostkey.pem 154 #!sh 155 $ cd /etc/grid-security 156 $ cp /esg/conf/tomcat/hostkey.pem ./ 142 157 }}} 143 158 144 You will be prompted to enter the cacert file; enter the url to the index node cacert.pem:159 Install the key pair in tomcat. You will be prompted to enter the cacert file; enter the url to the index node cacert.pem: 145 160 {{{ 161 #!sh 162 $ esg-node --install-keypair data.meteo.unican.es-esg-node-globus.csr.signed hostkey.pem 146 163 Please enter your Certificate Athority's certificate chain file(s): 147 164 [enter each cert file/url press return, press return with blank entry when done] 148 165 certfile> http://vesgint-idx.ipsl.jussieu.fr/cacert.pem 166 ................................... 167 ................................... 149 168 }}} 150 169 … … 153 172 Then set auto fetch certs false otherwise `/etc/grid-security/certificates/*` will be overwritten by `esgf-prod` peer groups certificates 154 173 {{{ 174 #!sh 155 175 $ esg-node --set-auto-fetch-certs false 156 176 }}} … … 158 178 Then restart your node 159 179 {{{ 180 #!sh 160 181 $ esg-node restart 161 182 }}} … … 163 184 Then register 164 185 {{{ 186 #!sh 165 187 $ esg-node --register vesgint-idx.ipsl.jussieu.fr 166 188 }}} 167 189 Then rebuild the Tomcat's trustore 168 190 {{{ 191 #!sh 169 192 $ esg-node --rebuild-truststore 170 193 }}}
