X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=INSTALL.txt;h=0f2f0ba1d9e59b8d6287a618fb2e0dad26b8782d;hb=d75c240d3557407b43c69121c43bcd04c5680953;hp=f7478bf28ede9bf21799542a50e16f47a98bdf1e;hpb=06ae08c6669e2b380e81ea99398981eabbae2277;p=sfa.git diff --git a/INSTALL.txt b/INSTALL.txt index f7478bf2..0f2f0ba1 100644 --- a/INSTALL.txt +++ b/INSTALL.txt @@ -1,83 +1,136 @@ -========== INSTALL -Assuming that you've set up your yum repo like for a myplc install, -you should be abe to just -# yum install geniwrapper +This installation note assumes that you have installed and configured MyPLC in the usual manner, and you have set up your yum repo like for a MyPLC install. +----- +1) Install the SFA packages: -========== CONFIGURE +# yum install sfa-plc sfa-client ---- -Inspect your plc config: +Note that the above command installs both sfa server (sfa-plc) and sfa client packages along with necessary dependency packages. Depending on the requirements, you may choose +to install the appropriate one (server, client or both) for you. For e.g. to set up your own SFA server on top of your MyPLC, you need sfa-plc. On the other hand, if you plan to use an existing SFA server, you would typically need the sfa-client only. +------- +2) Note down the PLC_ROOT_USER and PLC_ROOT_PASSWORD of your MyPLC installation: -[2009.06.09--1l-f8-32-vplc07] / # plc-config-tty +# plc-config-tty Enter command (u for usual changes, w to save, ? for help) s PLC_ROOT_USER PLC_ROOT_USER = root@test.onelab.eu Enter command (u for usual changes, w to save, ? for help) s PLC_ROOT_PASSWORD PLC_ROOT_PASSWORD = test++ ---- -geni-config-tty -* set GENI_PLC_USER to PLC_ROOT_USER -* set GENI_PLC_PASSWORD to PLC_ROOT_PASSWORD +These two configuration parameters are required for SFA server configuration +------- +3) Configure and start SFA servers: + +(a) # sfa-config-tty + + set SFA_PLC_USER to PLC_ROOT_USER + set SFA_PLC_PASSWORD to PLC_ROOT_PASSWORD write and quit -*NOTE* xxx at this point you get a warning b/c the authorities hierarchy has not been created yet; ignore ---- -run gimport +*NOTE* at this point you get a warning b/c the authorities hierarchy has not been created yet; ignore + +(b) # sfa-import-plc.py -[2009.06.09--1l-f8-32-vplc07] / # gimport.py +(o/p will look like this) Import: creating top level authorities Hierarchy: creating authority: plc plc : Import: creating table for authority plc NOTICE: table "geni$plc" does not exist, skipping inserting authority record for plc +Import: adding plc to trusted list +Import_Site: importing site plc.internet2 +Hierarchy: creating authority: plc.internet2 + inserting authority record for plc.internet2 +Import_Site: importing site plc.pl +Hierarchy: creating authority: plc.pl + inserting authority record for plc.pl +Import: importing person plc.pl.root +Import: creating table for authority plc.pl +NOTICE: table "geni$plc$pl" does not exist, skipping + +(c) # service sfa start + +This will start Registry, Slice Manager and Aggregate Manager. Your ps command output would like: + +# ps -ef | grep python +root 24944 1 0 May11 ? 00:00:00 /usr/bin/python /usr/bin/sfa-server.py -r -d +root 24957 1 0 May11 ? 00:00:00 /usr/bin/python /usr/bin/sfa-server.py -a -d +root 24970 1 0 May11 ? 00:00:00 /usr/bin/python /usr/bin/sfa-server.py -s -d +------- +4) Configure SFA client: + + (a) # mkdir ~/.sfi + (b)copy your private key to ~/.sfi/username.pkey Replace username with your actual account name + (c) # cp /etc/sfa/sfi_config ~/.sfi/ + (d) edit ~/.sfi/sfi_config. A sample configuration looks like: + + export SFI_AUTH=plc.pl + export SFI_USER=plc.pl.root + export SFI_REGISTRY=http://vplc25.inria.fr:12345/ + export SFI_SM=http://vplc25.inria.fr:12347/ + + (e) # source ~/.sfi/sfi_config +------ +5) Testing: + +At this stage you should be able to run sfi command. Some sample outputs are: + + (a) # sfi.py list plc.pl + plc.pl.netflow (slice) + plc.pl.sirius (slice) + plc.pl.root (user) + plc.pl.pif (node) + + (b) # sfi.py show plc.pl.pif + gid: + hrn: plc.pl.pif + uuid: 99878316891261700702442883738232624912 + hrn: plc.pl.pif + type: node + node_type: regular + hostname: pif.inria.fr + + (c) # sfi.py show plc.pl.root + gid: + hrn: plc.pl.root + uuid: 67306954103472941609600457537601239401 + hrn: plc.pl.root + type: user + last_name: Administrator + phone: None + key: plc.pl.root#user + first_name: Default + email: root@vplc25.inria.fr + + (d) # sfi.py slices + plc.pl.netflow + plc.pl.sirius + + (e) # sfi.py resources + + +------ + +6) Federation configuration: + +(a) Follow the same procedure to install and configure second MyPLC with SFA server. +(b) On each PLC, edit the /etc/sfa/registries.xml file + + set addr to ip or hostname of federated (remote) peer + set port to sfa service port on federated (remote) peer + set hrn to human readable name of federated (remote) peer interface +Sample configuration: + + + + + +(c) Likewise, edit the /etc/sfa/aggregates.xml +Sampel configuration + + + + + +(d) trade trusted root gid's (seen on /etc/sfa/trusted_roots) +we have to copy the gid of first SFA server to the /etc/sfa/trusted_roots directory of second one and vice-versa. ---- -run geni-config-tty again - -copy authorities/ple/ple.pkey to geni/server.key - - - -Federation: -=========== -edit /etc/geni/aggregates.xml and /etc/geni/registries.xml -* set addr to ip or hostname of federated peer -* set port to geni service port on federated peer -* set hrn to humarn readable name of federated peer interface - -trade trusted root gid's (found in /usr/share/geniwrapper/geni/trusted_roots/) - -Run: -==== - -First run: -# initialize the registry by running the registry import tool -python gimport.py - -# start the services -/etc/init.d/geniwrapper start - -or - -plc.py -r -d -plc.py -a -d -plc.py -s -d - - -Use: -==== - -Copy my private PL (RSA) ssh key to ~/.sfi/quetier.pkey - -in cmdline -edit configSfi.sh -export SFI_AUTH=ple.upmc -export SFI_USER=$SFI_AUTH.quetier -export SFI_REGISTRY=http://138.96.255.199:12345/ -export SFI_SM=http://138.96.255.199:12346/ - -source configSfi.sh - -./sfi.py list ple -./sfi.py show ple.upmc.quetier