diff --git a/containers/README.md b/containers/README.md index cee40dc0..a286e6dc 100644 --- a/containers/README.md +++ b/containers/README.md @@ -9,7 +9,7 @@ Most of the images are built on top of a common base image that contains the com The images are that can be found in this directory: -1. `rucio-client`: to run on your local laptop, has all the packages installed to authenticate with the VRE Rucio instance, to upload, replicate and download data. It also contains the latest `REANA` client. This image starts from `rucio/rucio-clients:release-1.30.0`, though. +1. `rucio-client`: to run on your local laptop, has all the packages installed to authenticate with the VRE Rucio instance, to upload, replicate and download data. It also contains the latest `REANA` client. This image uses `rucio/rucio-clients` as the `BASE` image, though (Same `release-vX.Y.Z` as the rest of containers). 2. `rucio-noise`: interacts with the `VRE` monitoring instance uploading, deleating and creating replication rules to test the status of the cluster. 3. `iam-rucio-sync`: image that runs asyncronisation script to keep the `accounts` table of the `Rucio` DB updated every time a new user registers with the `IAM ESCAPE` identity provider. 4. `iam-reana-sync`: adds any new user registered to the `IAM ESCAPE` to the `REANA` DB and grants access to the `VRE-REANA` instance. diff --git a/containers/rucio-client/Dockerfile b/containers/rucio-client/Dockerfile index 191ec5c0..83156b01 100644 --- a/containers/rucio-client/Dockerfile +++ b/containers/rucio-client/Dockerfile @@ -1,20 +1,46 @@ -# ARG TAG should be updated with the latest-1 version in case no tag is provided -ARG TAG=v1.0.0-rc.1 +# VRE rucio-client image is the only which BASE is not the vre-base-ops image + +ARG BASETAG=release-1.30.0 ARG BUILD_DATE -FROM ghcr.io/vre-hub/vre-base-ops:${TAG} +#FROM ghcr.io/vre-hub/vre-base-ops:${TAG} +FROM rucio/rucio-clients:${BASETAG} LABEL maintainer="VRE Team @ CERN 22/23 - E. Garcia, E. Gazzarrini, D. Gosein" LABEL org.opencontainers.image.source https://github.com/vre-hub/vre LABEL org.label-schema.build-date=${BUILD_DATE} USER root -# install reana-client -RUN pip install reana-client==0.9.1 -# WORKDIR /home set on the base-ops image -USER user +RUN yum upgrade -y \ + && yum clean all \ + && rm -rf /var/cache/yum + +# EGI trust anchors +RUN curl -Lo /etc/yum.repos.d/egi-trustanchors.repo https://repository.egi.eu/sw/production/cas/1/current/repo-files/egi-trustanchors.repo \ + && yum update -y + +RUN yum clean metadata +RUN yum -y install wget ca-certificates ca-policy-egi-core + +# CERN cert +COPY ./linuxsupport7s-stable.repo /etc/yum.repos.d/ +RUN yum install -y CERN-CA-certs + +# ESCAPE VOMS setup +RUN mkdir -p /etc/vomses \ + && wget https://indigo-iam.github.io/escape-docs/voms-config/voms-escape.cloud.cnaf.infn.it.vomses -O /etc/vomses/voms-escape.cloud.cnaf.infn.it.vomses +RUN mkdir -p /etc/grid-security/vomsdir/escape \ + && wget https://indigo-iam.github.io/escape-docs/voms-config/voms-escape.cloud.cnaf.infn.it.lsc -O /etc/grid-security/vomsdir/escape/voms-escape.cloud.cnaf.infn.it.lsc + # ESCAPE Rucio setup ADD --chown=user:user rucio.cfg.escape.j2 /opt/user/rucio.cfg.j2 + +# install reana-client ENV LC_ALL=en_US.UTF-8 +RUN pip install --upgrade pip +RUN pip install reana-client==0.9.2 + +USER user +WORKDIR /home/user -ENTRYPOINT ["/bin/bash"] +ENTRYPOINT ["/bin/bash"] \ No newline at end of file