CrabOnUbuntu1204 < Sandbox

---+ How I managed to setup my  Ubuntu 12.04 laptop,  so I can run Crab2

---+++ CVMFS and CMSW and Grid stuff (including automatically up to date certificated and CRL's)

   * Install CVMFS
      * followed online documentation: http://cernvm.cern.ch/portal/filesystem
      * plus: =CVMFS_HTTP_PROXY='DIRECT'= (from David A.)
   * mount
      * =/cvmfs/cms.cern.ch=
      * =/cvmfs/grid.cern.ch=

   * now can create a CMSSW release
<verbatim>
cd /home/belforte/STEFANO/WORK/CRAB/CMSSW/
cmsrel CMSSW_7_0_2
cd CMSSW_7_0_2
cmsenv
</verbatim>

   * but can't do scram b, so I have to copy the directory from lxplus in order to run customized cmsRun
      * OTOH cmsRun and EdmConfigHash run

---+++ GSI part

   * install =globus-proxy-utils= via synaptic
   * in my =.bashrc=
<verbatim>
export X509_CERT_DIR=/cvmfs/grid.cern.ch/etc/grid-security/certificates
export X509_VOMSES=/cvmfs/grid.cern.ch/emi-ui-3.7.3-1_sl6v2/etc/vomses
export X509_VOMS_DIR=/cvmfs/grid.cern.ch/emi-ui-3.7.3-1_sl6v2/etc/grid-security/vomsdir
export X509_USER_PROXY=/tmp/x509up_u`id -u`
</verbatim>

   * and since =voms-proxy-init= in =globus-proxy-utils= is old and does not know to look in X509_VOMSES
<verbatim>
mkdir ~/.glite
ln -s /cvmfs/grid.cern.ch/emi-ui-3.7.3-1_sl6v2/etc/vomses  ~/.glite/vomses
</verbatim>
   * alternatively could simply run /cvmfs/grid.cern.ch/emi-ui-3.7.3-1_sl6v2/usr/bin/voms-proxy-init

   * as root, added a  symlink, see http://askubuntu.com/questions/342484/etc-pki-tls-certs-ca-bundle-crt-not-found
<verbatim>
mkdir -p /etc/pki/tls/certs/
cd /etc/pki/tls/certs/
ln -s /etc/ssl/certs/ca-certificates.crt ./ca-bundle.crt
</verbatim>

   * now =gsissh=. See http://askubuntu.com/questions/249881/how-do-i-install-globus-toolkit-5-2 and http://www.astro.gla.ac.uk/~matthew/blog/?p=476
<verbatim>
 wget http://www.globus.org/ftppub/gt5/5.2/5.2.3/installers/repo/globus-repository-5.2-stable-precise_0.0.3_all.deb
sudo dpkg -i globus-repository-5.2-stable-precise_0.0.3_all.deb
sudo apt-get update
sudo apt-get install gsi-openssh-clients
</verbatim>

---+++ CRAB part
   * installed locally CRAB_2_10_7_pre1 from tarball so that can edit

   * finally to setup the crab environment
<verbatim>
source /cvmfs/cms.cern.ch/cmsset_default.sh 
#source /cvmfs/grid.cern.ch/emi-ui-3.7.3-1_sl6v2/etc/profile.d/setup-emi3-ui-example.sh 
cd /home/belforte/STEFANO/WORK/CRAB/CMSSW/CMSSW_7_0_2
cmsenv
cd  /home/belforte/STEFANO/WORK/CRAB/TESTCRAB

source /home/belforte/STEFANO/WORK/CRAB/CRAB_2_10_7_pre1/crab.sh 
</verbatim>

   * now crab -create works

   * and now also crab -submit and crab -status work

---+++ NOTES
   * no =myproxy-*= yet, need to use =dont_check_proxy=1= in crab.cfg
---++++ The myproxy problem
=myproxy= comes with  =globus-proxy-utils= , but it fails with

=myproxy-info: error while loading shared libraries: libssl.so.10: cannot open shared object file: No such file or directory=

Also =libcrypto.so.10= is missing. I did as superuser
<verbatim>
cd /usr/lib/x86_64-linux-gnu/
ln -s  libssl.so  libssl.so.10
ln -s  libcrypto.so libcrypto.so.10
</verbatim>
but then:
<verbatim>
LapSB:TESTCRAB$ myproxy-info -d -s myproxy.cern.ch
myproxy-info: /cvmfs/cms.cern.ch/slc6_amd64_gcc481/cms/cmssw/CMSSW_7_0_2/external/slc6_amd64_gcc481/lib/libldap_r-2.4.so.2: no version information available (required by /usr/lib/libmyproxy.so.5)
myproxy-info: /cvmfs/cms.cern.ch/slc6_amd64_gcc481/cms/cmssw/CMSSW_7_0_2/external/slc6_amd64_gcc481/lib/liblber-2.4.so.2: no version information available (required by /usr/lib/libmyproxy.so.5)
Error authenticating: Connection closed.
</verbatim>

If I try to unsetenv scram, like Crab2 does now, only get the authentication error:
<verbatim>
LapSB:TESTCRAB$ eval `scram unsetenv -sh`
LapSB:TESTCRAB$ myproxy-info -v -d -s myproxy.cern.ch
MyProxy v5.5 5 Sep 2011 PAM SASL KRB5 LDAP VOMS OCSP
Attempting to connect to 188.184.135.252:7512 
Successfully connected to myproxy.cern.ch:7512 
using trusted certificates directory /cvmfs/grid.cern.ch/etc/grid-security/certificates
Using Proxy file (/tmp/x509up_u1000)
Error authenticating: Connection closed.
</verbatim>

For reference, the same on lxplus6 gives (making sure to use same grid-security cert. list):

<verbatim>
belforte@lxplus0107/~> export X509_CERT_DIR=/cvmfs/grid.cern.ch/etc/grid-security/certificates
belforte@lxplus0107/~> myproxy-info -v -d -s myproxy.cern.ch
MyProxy v5.9 Jul 2012 PAM SASL KRB5 LDAP VOMS OCSP
Attempting to connect to 188.184.135.252:7512 
Successfully connected to myproxy.cern.ch:7512 
using trusted certificates directory /cvmfs/grid.cern.ch/etc/grid-security/certificates
Using Proxy file (/tmp/x509up_u8516)
server name: /DC=ch/DC=cern/OU=computers/CN=px402.cern.ch
checking that server name is acceptable...
server name matches "myproxy@px402.cern.ch"
authenticated server name is acceptable
username: /C=IT/O=INFN/OU=Personal Certificate/L=Trieste/CN=Stefano Belforte
owner: /C=IT/O=INFN/OU=Personal Certificate/L=Trieste/CN=Stefano Belforte
  timeleft: 131:16:39  (5.5 days)
</verbatim>


-- Main.StefanoBelforte - 01 Aug 2014
Topic revision: r5 - 2014-12-04 - StefanoBelforte
Account
- Log In
- Cern Search
- TWiki Search
- Google Search
Sandbox All webs
Edit
Attach
Copyright &© 2008-2021 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
or Ideas, requests, problems regarding TWiki? use Discourse or Send feedback