Skip to content
GitLab
Explore
Sign in
Primary navigation
Search or go to…
Project
cta
Manage
Activity
Members
Labels
Plan
Issues
Issue boards
Milestones
Wiki
Code
Merge requests
Repository
Branches
Commits
Tags
Repository graph
Compare revisions
Snippets
Build
Pipelines
Jobs
Pipeline schedules
Artifacts
Deploy
Releases
Package registry
Container registry
Harbor Registry
Model registry
Operate
Environments
Terraform modules
Monitor
Incidents
Analyze
Value stream analytics
Contributor analytics
CI/CD analytics
Repository analytics
Model experiments
Help
Help
Support
GitLab documentation
Compare GitLab plans
Community forum
Contribute to GitLab
Provide feedback
Keyboard shortcuts
?
Snippets
Groups
Projects
Show more breadcrumbs
dCache
cta
Commits
8df96f2d
Commit
8df96f2d
authored
7 years ago
by
Michael Davis
Browse files
Options
Downloads
Patches
Plain Diff
Documents how to build and install CTA RPMs
parent
604fcca1
Branches
Branches containing commit
Tags
Tags containing commit
No related merge requests found
Changes
3
Expand all
Hide whitespace changes
Inline
Side-by-side
Showing
3 changed files
doc/latex/CTA_Admin_EOS.tex
+34
-21
34 additions, 21 deletions
doc/latex/CTA_Admin_EOS.tex
doc/latex/CTA_Admin_Install.tex
+202
-372
202 additions, 372 deletions
doc/latex/CTA_Admin_Install.tex
doc/latex/cta_Glossary.tex
+2
-1
2 additions, 1 deletion
doc/latex/cta_Glossary.tex
with
238 additions
and
394 deletions
doc/latex/CTA_Admin_EOS.tex
+
34
−
21
View file @
8df96f2d
...
...
@@ -7,9 +7,6 @@ The steps described below are automated by Steve's \texttt{reinstalleos\_eosctat
script
\footnote
{
\texttt
{
reinstalleos
\_
eosctatape
}
calls
\texttt
{
create
\_
eos
\_
and
\_
taped
\_
keytabs
}
to create the Simple
Shared Secret (SSS) keys for the EOS instance and the tape server.
}
.
To install EOS in a Docker pod, see the
\href
{
https://gitlab.cern.ch/eos/eos-docker
}{
eos-docker
}
project in GitLab,
prepared by the IT-ST-AD section.
\section
{
Install XRoot and EOS RPMs
}
The yum repos, priorities and version lock list should be configured as described in
...
...
@@ -42,8 +39,8 @@ xrootd-server-libs-4.4.1-1.el7.x86_64
\begin{alertbox}
The instructions below are for machines on structured cabling which have a fixed IP address. Machines without a fixed IP
address---including virtual machines or Docker pods---are not recognised by the CERN Kerberos servers. To install a local
EOS instance in this case, we need to run our own KDC server. See
the
\href
{
https://gitlab.cern.ch/eos/eos-docker
}{
eos-docker
}
project mentioned above for an example of how to
do this.
EOS instance in this case, we need to run our own KDC server. See
Section~
\ref
{
eos-docker
}
for more information on how to
do this.
\end{alertbox}
The EOS
\texttt
{
mgm
}
in the XRoot daemon authenticates users using a key from the Kerberos
\texttt
{
keytab
}
.
...
...
@@ -225,21 +222,6 @@ Start the XRoot daemons that will run the EOS \texttt{mgm}, \texttt{mq} and \tex
# systemctl start eos
\end
{
lstlisting
}
The logs for the XRoot daemons will be created under
\texttt
{
/
var
/
log
/
eos
/
fst
}
,
\texttt
{
/
var
/
log
/
eos
/
mgm
}
and
\texttt
{
/
var
/
log
/
eos
/
mq
}
.
\begin
{
alertbox
}
The EOS
\texttt
{
mgm
}
startup script checks if we are running under
\texttt
{
systemd
}
, but the test it performs does not work inside a
Docker container, as
(
a
)
pidof is part of
\texttt
{
sysvtools
-
init
}
, which is not installed and
(
b
)
the
\texttt
{
systemd
}
process is
started as
\texttt
{
init
}
(
a symbolic link to
\texttt
{
systemd
}
)
:
\begin
{
lstlisting
}
/
usr
/
sbin
/
pidof systemd
\end
{
lstlisting
}
This has been reported to the EOS team to fix. In the meantime, here is a hack to work around the problem:
\begin
{
lstlisting
}
# yum install
-
y sysvinit
-
tools
# ln
-
s
/
usr
/
bin
/
sleep
/
tmp
/
systemd
#
/
tmp
/
systemd
1000
&
# systemctl start eos
\end
{
lstlisting
}
\end
{
alertbox
}
\section
{
Enable EOS authentication mechanisms
}
Enable the Kerberos and Simple Shared Secret authentication mechanisms within EOS
(
as opposed to XRoot
)
:
...
...
@@ -291,7 +273,7 @@ replicas to 1:
# eos attr
-
r set sys.forced.nstripes
=
1
/
eos
\end
{
lstlisting
}
\section
{
Test the EOS
i
nstallation
}
\section
{
Test the EOS
I
nstallation
}
Perform a simple write and read test of the new EOS installation:
...
...
@@ -303,3 +285,34 @@ Perform a simple write and read test of the new EOS installation:
# diff
/
tmp
/
eostest
/
etc
/
motd
\end
{
lstlisting
}
\section
{
Installing EOS in Docker
}
\label
{
eos
-
docker
}
The instructions above are for installing EOS on real hardware. To install EOS in a Docker pod, note that you must:
\begin
{
enumerate
}
\item
Create a Docker network to allow DNS
/
reverse DNS queries to work.
\item
Use a privileged Docker container and mount the
\texttt
{
cgroup
}
to allow
\texttt
{
systemd
}
to run.
\end
{
enumerate
}
To run
\texttt
{
systemd
}
on Docker host
\texttt
{
bandersnatch
}
on network
\texttt
{
wonderland
}
, the command would be:
\begin
{
lstlisting
}
$
sudo docker network create wonderland
$
sudo docker run
--
net
=
wonderland
--
name bandersnatch
--
hostname bandersnatch.wonderland
--
privileged
-
v
/
sys
/
fs
/
cgroup:
/
sys
/
fs
/
cgroup:ro
-
d ctatest
/
usr
/
sbin
/
init
\end
{
lstlisting
}
See also the
\href
{
https:
//
gitlab.cern.ch
/
eos
/
eos
-
docker
}{
eos
-
docker
}
GitLab project, prepared by the IT
-
ST
-
AD section.
\begin
{
alertbox
}
The EOS
\texttt
{
mgm
}
startup script checks if we are running under
\texttt
{
systemd
}
, but the test it performs does not work inside a
Docker container, as
(
a
)
pidof is part of
\texttt
{
sysvtools
-
init
}
, which is not installed and
(
b
)
the
\texttt
{
systemd
}
process is
started as
\texttt
{
init
}
(
a symbolic link to
\texttt
{
systemd
}
)
:
\begin
{
lstlisting
}
/
usr
/
sbin
/
pidof systemd
\end
{
lstlisting
}
This has been reported to the EOS team to fix. In the meantime, here is a hack to work around the problem:
\begin
{
lstlisting
}
# yum install
-
y sysvinit
-
tools
# ln
-
s
/
usr
/
bin
/
sleep
/
tmp
/
systemd
#
/
tmp
/
systemd
1000
&
# systemctl start eos
\end
{
lstlisting
}
\end
{
alertbox
}
This diff is collapsed.
Click to expand it.
doc/latex/CTA_Admin_Install.tex
+
202
−
372
View file @
8df96f2d
This diff is collapsed.
Click to expand it.
doc/latex/cta_Glossary.tex
+
2
−
1
View file @
8df96f2d
...
...
@@ -25,7 +25,8 @@ storage, such as the International Linear Collider (ILC)}]{vo}{VO}{Virtual Organ
{
name=
{
EOS
}
,
description=
{
A disk-based, low-latency storage service with a highly-scalable hierarchical namespace, using the XRoot
protocol for data access possible
}
protocol for data access possible. (The name
\textbf
{
EOS
}
is not an acronym, it was inspired by the Greek goddess of
the dawn,
$
E
\omega\sigma
$
)
}
}
\newglossaryentry
{
logicallibrary
}
...
...
This diff is collapsed.
Click to expand it.
Preview
0%
Loading
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Save comment
Cancel
Please
register
or
sign in
to comment