-
Notifications
You must be signed in to change notification settings - Fork 16
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
update rucio config #6
Conversation
Dockerfile
Outdated
|
||
# Add the rucio configuration template | ||
COPY --chown=user:user files/rucio.cfg.j2 /opt/user/rucio.cfg.j2 | ||
|
||
# EGI trust anchors | ||
RUN curl -Lo /etc/yum.repos.d/EGI-trustanchors.repo https://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo && \ | ||
yum -y install ca-certificates ca-policy-egi-core && \ | ||
# RUN curl -Lo /etc/yum.repos.d/EGI-trustanchors.repo https://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You can remove the comment, since we'll have the original version in git history.
FWIW this file gives 404 now, I have opened a PR with EGI: EGI-Federation/documentation#608
If we switch to using CERN repository, we'd solve this issue as a by product...
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
nice, thanks for opening the PR, I also noticed it is outdated so let's see if it works without
Dockerfile
Outdated
FROM rucio/rucio-clients:$BASETAG | ||
|
||
USER root | ||
|
||
# CERN certificate | ||
COPY --chown=user:user files/CERN-bundle.pem /etc/pki/tls/certs/CERN-bundle.pem | ||
# COPY --chown=user:user files/CERN-bundle.pem /etc/pki/tls/certs/CERN-bundle.pem |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You can remove this comment, since we'll always have the original version in git history. We can keep only the new "active" code here.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Tested locally with:
- name: stagein
environment: 'docker.io/reanahub/reana-auth-rucio:1.1.0'
voms_proxy: true
rucio: true
commands:
- rucio download simko_test:helloworld --dir data
I'll squash the commits together before merging.
Updates Rucio client version. Introduced new automated way to get CA certifications for CERN bundle. Removes outdated EGI trunstanchors.
automated way to get CA certs for CERN-bundle, updating rucio clients to 1.30, adding default connection to VRE instance