Nordugrid ARC Client Installation for Ubuntu Zesty 17.04

Client installation

Install repositories for Nordugrid ARC

First create a source file in

/etc/apt/sources.list.d/nordugrid.list

And add the following content:

# Base channel - must be enabled
deb http://download.nordugrid.org/repos/15.03/ubuntu/ zesty main
deb-src http://download.nordugrid.org/repos/15.03/ubuntu/ zesty main

# Updates to the base release - should be enabled
deb http://download.nordugrid.org/repos/15.03/ubuntu/ zesty-updates main
deb-src http://download.nordugrid.org/repos/15.03/ubuntu/ zesty-updates main

# Scheduled package updates - optional
#deb http://download.nordugrid.org/repos/15.03/ubuntu/ zesty-experimental main
#deb-src http://download.nordugrid.org/repos/15.03/ubuntu/ zesty-experimental main

Import the apt-key:

wget -q -O - http://download.nordugrid.org/DEB-GPG-KEY-nordugrid.asc \
 | sudo apt-key add -

Install ARC client:

apt-get update
apt-get install nordugrid-arc-client nordugrid-arc-plugins-globus

Add EGI-trustanchors and install CA-s

vi /etc/apt/sources.list.d/EGI-trustanchors.list 

#append these lines
#### EGI Trust Anchor Distribution ####
deb http://repository.egi.eu/sw/production/cas/1/current egi-igtf core

Import key

wget -q -O - \ 
https://dist.eugridpma.info/distribution/igtf/current/GPG-KEY-EUGridPMA-RPM-3\
 | apt-key add -

Install CA-s:

apt-get update
apt-get install ca-policy-egi-core fetch-crl

Configure the client

Now you need to transform the certiciate and key in .pem format, make sure the key is only readable by you and move both files in your ~/.arc  directory:

mkdir ~/.arc
openssl pkcs12 -in usercert.p12 -clcerts -nokeys -out usercert.pem
openssl pkcs12 -in usercert.p12 -nocerts -out userkey.pem
chmod 400 userkey.pem
chmod 644 usercert.pem
mv userkey.pem ~/.arc/
mv usercert.pem ~/.arc/

The next step is requried to inform your ARC client about the location and name of Slovenian VOMS server and  gen.vo.sling.si VO. You need to create suitable files ~/.arc/vomsdir/voms.sling.si.lsc and ~/.arc/vomses :

cd ~/.arc
mkdir -p vomsdir/gen.vo.sling.si
cat > vomsdir/gen.vo.sling.si/voms.sling.si.lsc 
/C=SI/O=SiGNET/O=SLING/CN=voms.sling.si
/C=SI/O=SiGNET/CN=SiGNET CA

cat > vomses
"gen.vo.sling.si" "voms.sling.si" "15001" "/C=SI/O=SiGNET/O=SLING/CN=voms.sling.si""gen.vo.sling.si"

Job submission

Create your proxy (Use man arcproxy to see other options.):

arcproxy -S gen.vo.sling.si
Your identity: /C=SI/O=SiGNET/O=ARNES/CN=Barbara Krasovec
Contacting VOMS server (named gen.vo.sling.si): voms.sling.si on port: 15001
Proxy generation succeeded
Your proxy is valid until: 2017-10-06 20:34:49

Then you can create a simple job description file and submit the test job. (Note that here your job is not executing a start-up script but simply running a system program and returning its results.)

vi test.xrsl
&
(executable = /usr/bin/env)
(jobname = "test")
(stdout=test.log)
(join=yes)
(gmlog=log)

(If you have succeeded in creating a proxy with no AC errors and the cluster returns an authorization error, it is probable that you have submitted the job shortly after enrolling with VOMS and the cluster has not yet synchronized its metadata.)

Submit your test job:

arcsub -c jost.arnes.si -S org.nordugrid.gridftpjob -o joblist.xml test.xrsl -d DEBUG

You can check the status of your jobs with arcstat. (Note that it will take some time to include your new job i the system info – typically a few minutes.)

arcstat -c jost.arnes.si

When your job is in FINISHED state, you can get the resulting files (automatically deleting them on server). Note that your files only wait for retrieval a limited time (tipically a week).

arcget <JOBID>

# or:
arcget -a #(to get files from all finished jobs)

# or:
arcget -i joblist.xml #(to get files from all jobs in the list)

At this point, you are ready to submit real jobs. Typically, a real job will either use pre-installed software (contact administrators at support@sling.si) or your own programs (perhaps compiled in the job). Real jobs also include data (from local files or remote repositories). Please see offical NorduGrid ARC manuals.