CDB & Sindes Modifications

This needs more adding to it. SteveTraylen , 13 Aug 2008

To Modify CDB templates

Requirements : lxadm account, write access to CDB

Note : All things are done from a lxadm node (lxadm[01-03]).

Run cdbop :

• get <file>
• vi <file>
• ...
• update <files>
• commit (Warning: can be long, even when there are only few changes)

Once done, you have to reconfigure corresponding node's components (spma, sindes, ...). So the following commands must be executed on the affected nodes :

• ccm-fetch
• ncm-ncd --configure <component>

For spma, a simplier way would be to execute ' spma_wrapper.sh ' which does all.
You can do it from a lxadm node, and even for several nodes at the same times.

To do it to all gridvoms cluster (voms101, voms102, voms103) :

• wassh -c gridvoms -l root 'spma_wrapper.sh'

To do it to several nodes (part of a cluster, or on several clusters) :

• wassh root@voms10[2-3] 'spma_wrapper.sh'

To upload a RPM package into Quattor repository

Requirements : lxadm account, Nice account

Note : All things are done from a lxadm node (lxadm[01-03]).

swrep-soap-client put i386_slc3 /cern/cc <rpms>

The login/password couple required in the Nice one.

To use Sindes to store grid certificates

Requirements : lxadm account, Write access to Sindes

Note : All things are done from a lxadm node (lxadm[01-03]).

First of all, you have to make an archive in which the node grid certificates will be in a sub-directory named grid-host-certificates.
On the node :

• cd /tmp
• mkdir grid-host-certificates (Warning: the name of this directory is very important !)
  
• cp /etc/grid-security/host{cert,key}.pem grid-host-certificates/
• tar zcf grid-host-certificates.tar.gz grid-host-certificates/

Then you can you have to copy this archive on AFS or directly on the lxadm node.

Now, you just have to do :

• sindes-upload-file -f <archive> -i grid-host-certificates -t <node> -s node -S sindes-server

To use Sindes to store SSH keys

Requirements : lxadm account, Write access to Sindes

Note : All things are done from a lxadm node (lxadm[01-03]).

First of all, you have to make an archive in which the host SSH keys will be in a sub-directory named ssh_key.
On the node :

• cd /tmp
• mkdir ssh_key (Warning: the name of this directory is very important !)
  
• cp /etc/ssh/ssh_host_* ssh_key/
• tar zcf ssh_key.tar.gz ssh_key/

Then you can you have to copy this archive on AFS or directly on the lxadm node.

Now, you just have to do :

• sindes-upload-file -f <archive> -i ssh_key -t <node> -s node -S sindes-server

-- Main.rmollon - 05 Apr 2007