-========== INSTALL
-Assuming that you've set up your yum repo like for a myplc install,
-you should be able to just
+This installation note assumes that you have installed and configured MyPLC in the usual manner, and you have set up your yum repo like for a MyPLC install.
-# yum install sfa-plc
+Once you have completed the server configuration, a brief introduction to the SFA user tools is here:
+ http://svn.planet-lab.org/wiki/SFAGuide
-========== CONFIGURE
+-----
+1) Install the SFA packages:
----
-Inspect your plc config:
+# yum install sfa-plc sfa-client
-[2009.06.09--1l-f8-32-vplc07] / # plc-config-tty
+Note that the above command installs both sfa server (sfa-plc) and sfa client packages along with necessary dependency packages. Depending on the requirements, you may choose to install the appropriate one (server, client or both) for you. For e.g. to set up your own SFA server on top of your MyPLC, you need sfa-plc. On the other hand, if you plan to use an existing SFA server, you would typically need the sfa-client only.
+-------
+2) Note down the PLC_ROOT_USER, PLC_ROOT_PASSWORD, PLC_DB_USER and PLC_DB_PASSWORD of your MyPLC installation:
+
+# plc-config-tty
Enter command (u for usual changes, w to save, ? for help) s PLC_ROOT_USER
PLC_ROOT_USER = root@test.onelab.eu
Enter command (u for usual changes, w to save, ? for help) s PLC_ROOT_PASSWORD
PLC_ROOT_PASSWORD = test++
----
-sfa-config-tty
+Enter command (u for usual changes, w to save, ? for help) s PLC_DB_USER
+PLC_DB_USER = pgsqluser
+Enter command (u for usual changes, w to save, ? for help) s PLC_DB_PASSWORD
+PLC_DB_PASSWORD = 4a333aba-a322-41b1-9c05-90b4f34d1332
+
+These four configuration parameters are required for SFA server configuration
+-------
+3) Configure and start SFA servers:
+
+(a) # sfa-config-tty
-* set GENI_PLC_USER to PLC_ROOT_USER
-* set GENI_PLC_PASSWORD to PLC_ROOT_PASSWORD
+ set SFA_PLC_USER to PLC_ROOT_USER
+ set SFA_PLC_PASSWORD to PLC_ROOT_PASSWORD
+ set SFA_PLC_DB_USER to PLC_DB_USER
+ set SFA_PLC_DB_PASSWORD to PLC_DB_PASSWORD
write and quit
-*NOTE* xxx at this point you get a warning b/c the authorities hierarchy has not been created yet; ignore
----
-run gimport
+*NOTE* at this point you get a warning b/c the authorities hierarchy has not been created yet; ignore
-[2009.06.09--1l-f8-32-vplc07] / # gimport.py
+(b) # sfa-import-plc.py
+
+(o/p will look like this)
Import: creating top level authorities
Hierarchy: creating authority: plc
plc :
Import: creating table for authority plc
-NOTICE: table "geni$plc" does not exist, skipping
+NOTICE: table "sfa$plc" does not exist, skipping
inserting authority record for plc
+Import: adding plc to trusted list
+Import_Site: importing site plc.internet2
+Hierarchy: creating authority: plc.internet2
+ inserting authority record for plc.internet2
+Import_Site: importing site plc.pl
+Hierarchy: creating authority: plc.pl
+ inserting authority record for plc.pl
+Import: importing person plc.pl.root
+Import: creating table for authority plc.pl
+NOTICE: table "sfa$plc$pl" does not exist, skipping
+
+(c) run sfa-config-tty again and select q to come out of the config command
+This will initialize /etc/sfa/authorities/server.key from /etc/sfa/authorities/plc/plc.pkey
+
+(d) # service sfa start
+This will start Registry, Slice Manager and Aggregate Manager. Your ps command output would look like:
+
+# ps -ef | grep python
+root 24944 1 0 May11 ? 00:00:00 /usr/bin/python /usr/bin/sfa-server.py -r -d
+root 24957 1 0 May11 ? 00:00:00 /usr/bin/python /usr/bin/sfa-server.py -a -d
+root 24970 1 0 May11 ? 00:00:00 /usr/bin/python /usr/bin/sfa-server.py -s -d
+-------
+4) Configure SFA client:
+
+ (a) # mkdir ~/.sfi
+ (b)copy your private RSA key to ~/.sfi/username.pkey Replace username with your actual account name. NOTE: DSA KEYS WILL NOT WORK
+ (c) # cp /etc/sfa/sfi_config ~/.sfi/
+ (d) edit ~/.sfi/sfi_config. A sample configuration looks like:
+
+ SFI_AUTH='plc.pl'
+ SFI_USER='plc.pl.root'
+ SFI_REGISTRY='http://vplc25.inria.fr:12345/'
+ SFI_SM='http://vplc25.inria.fr:12347/'
+
+------
+5) Testing:
+
+At this stage you should be able to run sfi command. Some sample outputs are:
+
+ (a) # sfi.py list plc.pl
+ plc.pl.netflow (slice)
+ plc.pl.sirius (slice)
+ plc.pl.root (user)
+ plc.pl.pif (node)
+
+ (b) # sfi.py show plc.pl.pif
+ gid:
+ hrn: plc.pl.pif
+ uuid: 99878316891261700702442883738232624912
+ hrn: plc.pl.pif
+ type: node
+ node_type: regular
+ hostname: pif.inria.fr
+
+ (c) # sfi.py show plc.pl.root
+ gid:
+ hrn: plc.pl.root
+ uuid: 67306954103472941609600457537601239401
+ hrn: plc.pl.root
+ type: user
+ last_name: Administrator
+ phone: None
+ key: plc.pl.root#user
+ first_name: Default
+ email: root@vplc25.inria.fr
+
+ (d) # sfi.py slices
+ plc.pl.netflow
+ plc.pl.sirius
+
+ (e) # sfi.py resources
+<?xml version="1.0" ?>
+<RSpec duration="3600" start_time="1246736949"><networks><NetSpec duration="3600" name="plc" start_time="1246736950"><nodes><NodeSpec cpu_min="" cpu_pct="" cpu_share="" disk_max="" duration="" init_params="" name="pif.inria.fr" start_time="" type=""><net_if><IfSpec addr="138.96.250.224" init_params="" ip_spoof="" max_kbyte="" max_rate="" min_rate="" name="True" type="ipv4"/></net_if></NodeSpec></nodes></NetSpec></networks></RSpec>
+------
+
+6) Federation configuration:
+
+(a) Follow the same procedure to install and configure second MyPLC with SFA server.
+(b) On each PLC, edit the /etc/sfa/registries.xml file
+
+ set addr to ip or hostname of federated (remote) peer
+ set port to sfa service port on federated (remote) peer
+ set hrn to human readable name of federated (remote) peer interface
+Sample configuration:
+
+<registries>
+ <registry addr="vplc26.inria.fr" hrn="ple" port="12345"/>
+</registries>
+
+(c) Likewise, edit the /etc/sfa/aggregates.xml
+Sampel configuration
+
+<aggregates>
+ <aggregate addr="vplc26.inria.fr" hrn="ple" port="12346"/>
+</aggregates>
+
+(d) trade trusted root gid's (seen on /etc/sfa/trusted_roots)
+we have to copy the gid of first SFA server to the /etc/sfa/trusted_roots directory of second one and vice-versa.
----
-run sfa-config-tty again - to initialize /etc/geni/authorities/plc/plc.pkey
-
-[2009.06.09--1l-f8-32-vplc07] / # sfa-config-tty
-Enter command (u for usual changes, w to save, ? for help) q
- /etc/geni/authorities/server.key
-copied from /etc/geni/authorities/plc/plc.pkey
----
-
-
-xxx tested this far xxx
-
-
-Federation:
-===========
-edit /etc/geni/aggregates.xml and /etc/geni/registries.xml
-* set addr to ip or hostname of federated peer
-* set port to geni service port on federated peer
-* set hrn to humarn readable name of federated peer interface
-
-trade trusted root gid's (found in /usr/share/geniwrapper/geni/trusted_roots/)
-
-Run:
-====
-
-First run:
-# initialize the registry by running the registry import tool
-python gimport.py
-
-# start the services
-service sfa start
-
-or
-
-plc.py -r -d
-plc.py -a -d
-plc.py -s -d
-
-
-Use:
-====
-
-Copy my private PL (RSA) ssh key to ~/.sfi/quetier.pkey
-
-in cmdline
-edit config_sfi
-export SFI_AUTH=ple.upmc
-export SFI_USER=$SFI_AUTH.quetier
-export SFI_REGISTRY=http://138.96.255.199:12345/
-export SFI_SM=http://138.96.255.199:12346/
-
-source config_sfi
-
-./sfi.py list ple
-./sfi.py show ple.upmc.quetier
git://git.onelab.eu / sfa.git / blobdiff