Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update rucio config #6

Merged
merged 1 commit into from
Aug 22, 2023
Merged

update rucio config #6

merged 1 commit into from
Aug 22, 2023

Conversation

egazzarr
Copy link
Member

automated way to get CA certs for CERN-bundle, updating rucio clients to 1.30, adding default connection to VRE instance

Dockerfile Outdated

# Add the rucio configuration template
COPY --chown=user:user files/rucio.cfg.j2 /opt/user/rucio.cfg.j2

# EGI trust anchors
RUN curl -Lo /etc/yum.repos.d/EGI-trustanchors.repo https://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo && \
yum -y install ca-certificates ca-policy-egi-core && \
# RUN curl -Lo /etc/yum.repos.d/EGI-trustanchors.repo https://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You can remove the comment, since we'll have the original version in git history.

FWIW this file gives 404 now, I have opened a PR with EGI: EGI-Federation/documentation#608

If we switch to using CERN repository, we'd solve this issue as a by product...

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nice, thanks for opening the PR, I also noticed it is outdated so let's see if it works without

Dockerfile Outdated
FROM rucio/rucio-clients:$BASETAG

USER root

# CERN certificate
COPY --chown=user:user files/CERN-bundle.pem /etc/pki/tls/certs/CERN-bundle.pem
# COPY --chown=user:user files/CERN-bundle.pem /etc/pki/tls/certs/CERN-bundle.pem
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You can remove this comment, since we'll always have the original version in git history. We can keep only the new "active" code here.

Copy link
Member

@tiborsimko tiborsimko left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested locally with:

      - name: stagein
        environment: 'docker.io/reanahub/reana-auth-rucio:1.1.0'
        voms_proxy: true
        rucio: true
        commands:
          - rucio download simko_test:helloworld --dir data

I'll squash the commits together before merging.

Updates Rucio client version.

Introduced new automated way to get CA certifications for CERN bundle.

Removes outdated EGI trunstanchors.
@tiborsimko tiborsimko merged commit fc6e0e7 into master Aug 22, 2023
4 checks passed
@tiborsimko tiborsimko deleted the vre-rucio branch August 22, 2023 12:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants