ARC Client Debian 9

This are the instruction for ARC client installation and setup on Debian 9

ARC client installation

Required repositories

Add Nordugrid repository

Create /etc/apt/sources.list.d/nordugrid.list as your Nordugrid ARC repo:

# Base channel - must be enabled
deb http://download.nordugrid.org/repos/15.03/debian/ stretch main
deb-src http://download.nordugrid.org/repos/15.03/debian/ stretch main

# Updates to the base release - should be enabled
deb http://download.nordugrid.org/repos/15.03/debian/ stretch-updates main
deb-src http://download.nordugrid.org/repos/15.03/debian/ stretch-updates main

# Scheduled package updates - optional
#deb http://download.nordugrid.org/repos/15.03/debian/ stretch-experimental main
#deb-src http://download.nordugrid.org/repos/15.03/debian/ stretch-experimental main

Add the key for this repository (prerequisites: gnupg package needs to be installed):

wget -q -O - http://download.nordugrid.org/DEB-GPG-KEY-nordugrid.asc \
 | sudo apt-key add -

Now install ARC client:

apt-get update
apt-get install nordugrid-arc-client nordugrid-arc-plugins-globus

Add EGI-trustanchors repository and install CA-s

You also need to install the CA-s from this repository: EGI-trustanchors

Add the following content to /etc/apt/sources.list.d/EGI-trustanchors.list

#### EGI Trust Anchor Distribution ####
deb http://repository.egi.eu/sw/production/cas/1/current egi-igtf core

Add the key for the repository (you will need to install gnupg beforehand):

wget -q -O - \
https://dist.eugridpma.info/distribution/igtf/current/GPG-KEY-EUGridPMA-RPM-3 | apt-key add -

Now install the certificates:

apt-get update
apt-get install ca-policy-egi-core fetch-crl

*fetch-crl package enables updating the CA-s automatically (create a cron job that should run a couple of times a day)

Configure the ARC client

All settings should be in .arc folder within your home folder:

mkdir ~/.arc

Convert your certificate to the correct format and put the usercert.pem and userkey.pem to the .arc folder:

openssl pkcs12 -in usercert.p12 -clcerts -nokeys -out usercert.pem
openssl pkcs12 -in usercert.p12 -nocerts -out userkey.pem
chmod 400 userkey.pem
chmod 644 usercert.pem
mv userkey.pem ~/.arc/
mv usercert.pem ~/.arc/

In order to submit to the SLING clusters, you need to be a member of gen.vo.sling.si VO. You can request the membership at https://voms.sling.si:8443/voms/gen.vo.sling.si/register/start.action

Now configure the VO:

mkdir -p ~/.arc/vomsdir/gen.vo.sling.si
cat vomsdir/gen.vo.sling.si/voms.sling.si.lsc 
/C=SI/O=SiGNET/O=SLING/CN=voms.sling.si
/C=SI/O=SiGNET/CN=SiGNET CA
mkdir ~/.arc/vomses
cat vomses/gen.vo.sling.si 
"gen.vo.sling.si" "voms.sling.si" "15001" "/C=SI/O=SiGNET/O=SLING/CN=voms.sling.si""gen.vo.sling.si"

Optional client settings can be added to client.conf (e.g. if you have custom locations of your CA-s, vomses, certificate or if you want to explicitly set the preferred protocol for your job submission – you can choose from GRIDFTP or HTTPS):

This is an example:

[common]
vomsespath=/home/username/.arc/vomses
keypath=/home/username/.arc/userkey.pem
certificatepath=/home/username/.arc/usercert.pem

[computing/nsc]
url=https://nsc.ijs.si:443/arex
infointerface=org.ogf.glue.emies.resourceinfo
submissioninterface=org.ogf.glue.emies.activitycreation
default=yes

[computing/jost]
url=https://jost.arnes.si:443/arex
infointerface=org.ogf.glue.emies.resourceinfo
submissioninterface=org.ogf.glue.emies.activitycreation
default=yes
#if you prefer gridftp comment out the following settings
#url=ldap://jost.arnes.si:2135
#infointerface=org.nordugrid.ldapng
#jobinterface=org.nordugrid.gridftpjob

Now you can create your proxy server:

arcproxy -S gen.vo.sling.si
Your identity: /C=SI/O=SiGNET/O=ARNES/CN=Barbara Krasovec
Contacting VOMS server (named gen.vo.sling.si): voms.sling.si on port: 15001
Proxy generation succeeded
Your proxy is valid until: 2017-10-20 20:09:02

If you have problems generating the proxy, run the command with -d DEBUG switch and see the details of the error message. If you get an error “ERROR: Failed configuration initialization”, you either have:

wrong location of ARC configuration files (specify the correct path in client.conf),
wrong permissions for your certificate (should be 644 for usercert.pem and 400 for userkey.pem),
invalid vomsdir or vomses configuration,
your CA-s are not up2date, run fetch-crl.

Try sending a test job to the cluster:

cat test.xrsl
&
(executable = /usr/bin/env)
(jobname = "test")
(stdout=test.log)
(join=yes)
(gmlog=log)

arcsub -c jost.arnes.si test.xrsl -d DEBUG

Check the status of the job

arcstat <jobid>
arcstat -c jost.arnes.si

When the job is finished, you can retrieve the results by:

arcget <jobid>
arcget -c jost.arnes.si

If you have problems with the installation or configuration, send us an email to supportsling.si.