|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
How to set up a gatekeeper with a GRAM job manager
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
==================================================
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
The following commands should be executed as root unless otherwise
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
specified.
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
Enabling a service configuration
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
--------------------------------
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
The gatekeeper service needs to have a GRAM job manager configured
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
that runs the tasks that the gatekeeper accepts. In order to configure
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
a job manager first install configuration package corresponding to
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
your local resource management system (LRMS). For a small test setup
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
without an LRMS use a "fork" service. The following configuration
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
packages exists to choose from:
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
- globus-gram-job-manager-condor
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
- globus-gram-job-manager-fork-setup-poll
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
- globus-gram-job-manager-fork-setup-seg
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
4763fc4 |
- globus-gram-job-manager-lsf-setup-poll
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
4763fc4 |
- globus-gram-job-manager-lsf-setup-seg
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
- globus-gram-job-manager-pbs-setup-poll
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
- globus-gram-job-manager-pbs-setup-seg
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
- globus-gram-job-manager-sge-setup-poll
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
- globus-gram-job-manager-sge-setup-seg
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
4763fc4 |
- globus-gram-job-manager-slurm
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
For many LRMSs you have a choice between a setup the keeps track of
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
the state of the submitted jobs by polling the LRMS's queuing system,
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
or a setup that uses the Globus Scheduler Event Generator service.
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
After installing one of the packages above, enable the service you
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
want to use by running
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
globus-gatekeeper-admin -e <type> [-n <name>]
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
where <type> is the type of service you want to run, and the optional
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
<name> is an name under which the service will be available.
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
The list of available service types depends on what configuration
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
packages you have installed and can be found by listing the
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
/etc/grid-services/available directory. If the name option is omitted
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
the name will be the same as the type.
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
You can run more than one service in the same gatekeeper as long they
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
have different names. If you want to have a defult service configured
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
this service should have the name "jobmanager".
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
If you use one of the setups that uses the Globus Scheduler Event
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
Generator services you must also activate this service.
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
globus-scheduler-event-generator-admin -e <type>
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
Where <type> is the LRMS type for which events should be tracked. The
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
list of available LRMS types depends on what configuration packages
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
you have installed and can be found by listing the
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
/etc/globus/scheduler-event-generator/available/ directory.
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
Starting the service
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
--------------------
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
Before starting the service make sure you have a host certificate and
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
key installed in the right locations and with the right permissions.
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
- /etc/grid-security/hostcert.pem
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
- /etc/grid-security/hostkey.pem
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
To start the gatekeeper service, run
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
service globus-gatekeeper start
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
To start the scheduler event generator service (if needed), run
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
service globus-scheduler-event-generator start
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
To make the services start automatically at boot, run
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
chkconfig globus-gatekeeper on
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
90dfc11 |
chkconfig globus-scheduler-event-generator on
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
Testing the service
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
-------------------
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
Athentication test against the new gatekeeper - as a non-root user
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
with a valid user proxy, run
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
globusrun -a -r <resource-contact>
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
where <resource-contact> is the service's contact string. See "man
|
|
![](https://seccdn.libravatar.org/avatar/01757ac6220c7c80daecba48378c2721a35cf00771becbb512a1ec0b1043f5ea?s=16&d=retro) |
df68c62 |
globusrun" for details.
|