Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WIP: Installing Pelican/OSDF Cache via RPM #203

Conversation

matyasselmeci
Copy link
Contributor

SOFTWARE-5962; based highly on #193

The Pelican/OSDF configuration does not look for the cert/key in the usual
/etc/grid-security location, so update the Let's Encrypt docs to mention
the difference.
…ARE-5962)

- Some of the configuration is still up in the air as we learn more from
  supporting JLab/GLBRC/others, and as we revamp the config we ship

- Registration instructions could use improvement

- No validation instructions yet
…osdf-cache.SOFTWARE-6013

* pr/pelican-osdf-origin.SOFTWARE-5962:
  WIP: Instructions for installing a Pelican/OSDF Origin via RPM  (SOFTWARE-5962)
  Let's Encrypt CA cert docs: use different paths for Pelican/OSDF
…osdf-cache.SOFTWARE-6013

* pr/pelican-osdf-origin.SOFTWARE-5962:
  Let's Encrypt: mention that Pelican needs the full cert chain
…osdf-cache.SOFTWARE-6013

* pr/pelican-osdf-origin.SOFTWARE-5962:
  Mention that you need the cert change in install-origin-rpm as well
This is based on the Pelican/OSDF origin by RPM doc (PR osg-htc#193) so changes added there should generally be added here too.
Copy link
Contributor

@brianhlin brianhlin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Some initial thoughts

docs/data/osdf/install-cache-rpm.md Outdated Show resolved Hide resolved
docs/data/osdf/install-cache-rpm.md Show resolved Hide resolved
docs/data/osdf/install-cache-rpm.md Outdated Show resolved Hide resolved
docs/data/osdf/install-cache-rpm.md Outdated Show resolved Hide resolved
docs/data/osdf/install-cache-rpm.md Outdated Show resolved Hide resolved
* **Host Certificate Chain**: `/etc/pki/tls/certs/pelican.crt`
* **Host Key**: `/etc/pki/tls/private/pelican.key`


Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Since we've got a lot (?) of non-Pelican caches out there, it's probably worth having a separate, leading "upgrade section" here that outlines the overview of how to perform an upgrade. Maybe it's something as simple as "follow all the instructions here, turn off the old cache services, then register the new cache"

Or maybe we can't have two cache services running concurrently...

* master:
  Apply suggestions from code review
  Update references from repo.opensciencegrid.org -> repo.osg-htc.org
  Fix on more broken HTCondor-CE link
  Fix broken HTCondor-CE doc links
  Add details for HTCondor releases
  Fix broken link
  Remove references to unreleased OSG 24 WN tarball; add note
  Remove ToC link for unfinished doc
  Add docs for updating ospool-ep docker image
  Add estimated EOL for OSG 23 and 24
  OSG 24 initial release notes (SOFTWARE-6012)
  Use new ospool-ep image name
  Restore out-of-date OSG WN client doc
  Fix squid, OIDC agent, and stash-* container references
  Add missing period
  Add initial major packages for OSG 24
  Add OSG 23 references back since it's still supported
  Prefer EL9 over EL8
  Release notes for 2024-10-24
  Fix typo
  rename docker repo prefixes to osg-htc
  remove references to el7 in most docs
  remove most references to OSG <23 from non-release-history docs
  Update docs to reference OSG-24 as the latest series
… 24; add cache configuration based on Pelican 7.11.1 config.d (SOFTWARE-6013)
This should make the lopsided requirements stand out less
@matyasselmeci
Copy link
Contributor Author

@brianhlin, I think this is ready for another look. I added validation instructions and tried to combine the topology and registry registrations into a "Joining the Cache to the Federation" section.

@matyasselmeci
Copy link
Contributor Author

I don't have an upgrade section yet. I think I'm going to need to set up a cache and try upgrading it to see what I need to do.

@matyasselmeci matyasselmeci marked this pull request as ready for review November 7, 2024 15:22
Copy link
Contributor

@brianhlin brianhlin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Mostly LGTM so pre-approving. Other than in-line comments, I think a few other commits have snuck into this branch:

  1. Hardware / FS requirement updates to old cache documentation
  2. osdf-origin RPM install doc

docs/data/osdf/install-cache-rpm.md Outdated Show resolved Hide resolved
docs/data/osdf/install-cache-rpm.md Outdated Show resolved Hide resolved
docs/data/osdf/install-cache-rpm.md Outdated Show resolved Hide resolved
docs/data/osdf/install-cache-rpm.md Outdated Show resolved Hide resolved
docs/data/osdf/install-cache-rpm.md Outdated Show resolved Hide resolved
docs/data/osdf/install-cache-rpm.md Outdated Show resolved Hide resolved
docs/data/osdf/install-cache-rpm.md Outdated Show resolved Hide resolved
docs/data/osdf/install-cache-rpm.md Outdated Show resolved Hide resolved
root@host$ cat /tmp/test.txt

Hello, World!

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's add a step or note here asking them to send logs to us if this doesn't work

@matyasselmeci
Copy link
Contributor Author

Superseded by #211; closing.

@matyasselmeci matyasselmeci deleted the wip/pelican-osdf-cache.SOFTWARE-6013 branch December 10, 2024 22:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants