Nordugrid ARC client installation for Ubuntu Trusty 14.04

Client installation

Install repositories for Nordugrid ARC

sudo echo 'deb http://download.nordugrid.org/repos/15.03/ubuntu/ trusty main\n
    deb-src http://download.nordugrid.org/repos/15.03/ubuntu/ trusty main\n
    deb http://download.nordugrid.org/repos/15.03/ubuntu/ trusty-updates main\n
    deb-src http://download.nordugrid.org/repos/15.03/ubuntu/ trusty-updates main'\
    >> /etc/apt/sources.list

Import the apt-key:

sudo wget -q -O - http://download.nordugrid.org/DEB-GPG-KEY-nordugrid.asc \
 | sudo apt-key add -

Install ARC client:

sudo apt-get -y update
sudo apt-get install nordugrid-arc-client nordugrid-arc-plugins-globus

Add EGI-trustanchors and install CA-s

sudo vi /etc/apt/sources.list.d/EGI-trustanchors.list 

#append these lines
#### EGI Trust Anchor Distribution ####
deb http://repository.egi.eu/sw/production/cas/1/current egi-igtf core

Import key

wget -q -O - \ 
https://dist.eugridpma.info/distribution/igtf/current/GPG-KEY-EUGridPMA-RPM-3\
 | sudo apt-key add -

Install CA-s:

sudo apt-get -y update
sudo apt-get -y install ca-policy-egi-core fetch-crl

Configure the client

Now you need to transform the certiciate and key in .pem format, make sure the key is only readable by you and move both files in your ~/.arc  directory:

mkdir ~/.arc
openssl pkcs12 -in usercert.p12 -clcerts -nokeys -out usercert.pem
openssl pkcs12 -in usercert.p12 -nocerts -out userkey.pem
chmod 400 userkey.pem
chmod 644 usercert.pem
mv userkey.pem ~/.arc/
mv usercert.pem ~/.arc/

The next step is requried to inform your ARC client about the location and name of Slovenian VOMS server and  gen.vo.sling.si VO. You need to create suitable files ~/.arc/vomsdir/voms.sling.si.lsc and ~/.arc/vomses :

cd ~/.arc
mkdir -p vomsdir/gen.vo.sling.si
cat > vomsdir/gen.vo.sling.si/voms.sling.si.lsc 
/C=SI/O=SiGNET/O=SLING/CN=voms.sling.si
/C=SI/O=SiGNET/CN=SiGNET CA

cat > vomses
"gen.vo.sling.si" "voms.sling.si" "15001" "/C=SI/O=SiGNET/O=SLING/CN=voms.sling.si""gen.vo.sling.si"

Job submission

Create your proxy (Use man arcproxy to see other options.):

arcproxy -S gen.vo.sling.si
Enter pass phrase for private key:
Your identity: /C=SI/O=SiGNET/O=IJS/OU=CMI/CN=Barbara Krasovec
Contacting VOMS server (named gen.vo.sling.si): voms.sling.si on port: 15001
Proxy generation succeeded
Your proxy is valid until: 2019-04-15 21:18:54

Then you can create a simple job description file and submit the test job. (Note that here your job is not executing a start-up script but simply running a system program and returning its results.)

vi test.xrsl
&
(executable = /usr/bin/env)
(jobname = "test")
(stdout=test.log)
(join=yes)
(gmlog=log)

(If you have succeeded in creating a proxy with no AC errors and the cluster returns an authorization error, it is probable that you have submitted the job shortly after enrolling with VOMS and the cluster has not yet synchronized its metadata.)

Submit your test job:

arcsub -c jost.arnes.si test.xrsl -d DEBUG

You can check the status of your jobs with arcstat. (Note that it will take some time to include your new job i the system info – typically a few minutes.)

arcstat -c jost.arnes.si

When your job is in FINISHED state, you can get the resulting files (automatically deleting them on server). Note that your files only wait for retrieval a limited time (tipically a week).

arcget <JOBID>

# or:
arcget -a #(to get files from all finished jobs)

# or:
arcget -i joblist.xml #(to get files from all jobs in the list)

At this point, you are ready to submit real jobs. Typically, a real job will either use pre-installed software (contact administrators at support@sling.si) or your own programs (perhaps compiled in the job). Real jobs also include data (from local files or remote repositories). Please see offical NorduGrid ARC manuals.