Ubuntu Xenial 16.04 – ARC client 6

Install ARC6 client


sed 's/main$/main universe/' /etc/apt/sources.list
apt-get update -y

First add the repositories:

 echo 'deb http://download.nordugrid.org/repos/6/ubuntu/ xenial main\n
    deb-src http://download.nordugrid.org/repos/6/ubuntu/ xenial main\n
    deb http://download.nordugrid.org/repos/6/ubuntu/ xenial-updates main\n
    deb-src http://download.nordugrid.org/repos/6/ubuntu/ xenial-updates main' \
>> /etc/apt/sources.list

Add the gpg key:

wget -q -O - http://download.nordugrid.org/RPM-GPG-KEY-nordugrid-6 | apt-key add -

Install the required packages:

apt-get -y install nordugrid-arc-client \
                   nordugrid-arc-plugins-needed \
                   nordugrid-arc-plugins-globus \ 
                   ca-policy-igtf-classic \
                   ca-policy-igtf-mics \
                   ca-policy-igtf-slcs fetch-crl

You can also install CA-s from EGI-trustanchors repo. In this case don’t install ca-policy* packages from the nordugrid repo,  and add the following content to /etc/apt/sources.list.d/EGI-trustanchors.list

#### EGI Trust Anchor Distribution ####
 deb http://repository.egi.eu/sw/production/cas/1/current egi-igtf core

Add the key for the repository (you will need to install gnupg beforehand):

wget -q -O - \
https://dist.eugridpma.info/distribution/igtf/current/GPG-KEY-EUGridPMA-RPM-3 | apt-key add -

Now install the certificates:

apt-get update
apt-get install ca-policy-egi-core fetch-crl

*fetch-crl package enables updating the CA-s automatically (create a cron job that should run a couple of times a day)

Configure the ARC client

ll settings should be in .arc folder within your home folder:

mkdir ~/.arc

Convert your certificate to the correct format and put the usercert.pem and userkey.pem to the .arc folder:

openssl pkcs12 -in usercert.p12 -clcerts -nokeys -out usercert.pem
openssl pkcs12 -in usercert.p12 -nocerts -out userkey.pem
chmod 400 userkey.pem
chmod 644 usercert.pem
mv userkey.pem ~/.arc/
mv usercert.pem ~/.arc/

In order to submit to the SLING clusters, you need to be a member of gen.vo.sling.si VO. You can request the membership at https://voms.sling.si:8443/voms/gen.vo.sling.si/register/start.action

Now configure the VO:

mkdir -p ~/.arc/vomsdir/gen.vo.sling.si
cat vomsdir/gen.vo.sling.si/voms.sling.si.lsc 
mkdir ~/.arc/vomses
cat vomses/gen.vo.sling.si 
"gen.vo.sling.si" "voms.sling.si" "15001" "/C=SI/O=SiGNET/O=SLING/CN=voms.sling.si""gen.vo.sling.si"