ARC Client Debian 9

This are the instruction for ARC client installation and setup on Debian 9

ARC client installation

Required repositories

Add Nordugrid repository

Create /etc/apt/sources.list.d/nordugrid.list as your Nordugrid ARC repo:

# Base channel - must be enabled
deb stretch main
deb-src stretch main

# Updates to the base release - should be enabled
deb stretch-updates main
deb-src stretch-updates main

# Scheduled package updates - optional
#deb stretch-experimental main
#deb-src stretch-experimental main

Add the key for this repository (prerequisites: gnupg package needs to be installed):

wget -q -O - \
 | sudo apt-key add -

Now install ARC client:

apt-get update
apt-get install nordugrid-arc-client nordugrid-arc-plugins-globus

Add EGI-trustanchors repository and install CA-s

You also need to install the CA-s from this repository:  EGI-trustanchors

Add the following content to /etc/apt/sources.list.d/EGI-trustanchors.list

#### EGI Trust Anchor Distribution ####
deb egi-igtf core

Add the key for the repository (you will need to install gnupg beforehand):

wget -q -O - \ | apt-key add -

Now install the certificates:

apt-get update
apt-get install ca-policy-egi-core fetch-crl

*fetch-crl package enables updating the CA-s automatically (create a cron job that should run a couple of times a day)

Configure the ARC client

All settings should be in .arc folder within your home folder:

mkdir ~/.arc

Convert your certificate to the correct format and put the usercert.pem and userkey.pem to the .arc folder:

openssl pkcs12 -in usercert.p12 -clcerts -nokeys -out usercert.pem
openssl pkcs12 -in usercert.p12 -nocerts -out userkey.pem
chmod 400 userkey.pem
chmod 644 usercert.pem
mv userkey.pem ~/.arc/
mv usercert.pem ~/.arc/

In order to submit to the SLING clusters, you need to be a member of VO. You can request the membership at

Now configure the VO:

mkdir -p ~/.arc/vomsdir/
cat vomsdir/ 
mkdir ~/.arc/vomses
cat vomses/ 
"" "" "15001" "/C=SI/O=SiGNET/O=SLING/"""

Optional client settings can be added to client.conf (e.g. if you have custom locations of your CA-s, vomses, certificate or if you want to explicitly set the preferred protocol for your job submission – you can choose from GRIDFTP or HTTPS):

This is an example:



#if you prefer gridftp comment out the following settings

Now you can create your proxy server:

arcproxy -S
Your identity: /C=SI/O=SiGNET/O=ARNES/CN=Barbara Krasovec
Contacting VOMS server (named on port: 15001
Proxy generation succeeded
Your proxy is valid until: 2017-10-20 20:09:02

If you have problems generating the proxy, run the command with -d DEBUG switch and see the details of the error message. If you get an error “ERROR: Failed configuration initialization”, you either have:

  • wrong location of ARC configuration files (specify the correct path in client.conf),
  • wrong permissions for your certificate (should be 644 for usercert.pem and 400 for userkey.pem),
  • invalid vomsdir or vomses configuration,
  • your CA-s are not up2date, run fetch-crl.

Try sending a test job to the cluster:

cat test.xrsl
(executable = /usr/bin/env)
(jobname = "test")
arcsub -c test.xrsl -d DEBUG

Check the status of the job

arcstat <jobid>
arcstat -c

When the job is finished, you can retrieve the results by:

arcget <jobid>
arcget -c

If you have problems with the installation or configuration, send us an email to