Updating LFC for AGLT2

The LFC host for AGLT2 is lfc.aglt2.org. This is a VMware VM (SL5.2/x86_64).

As of September 13, 2009 the LFC software was installed in /opt/lfcnew and there was a soft-link '/opt/lcg' pointing to /opt/lfcnew/lcg. The version info:

[lfc:lfcnew]# vdt-version

You have installed a subset of VDT version 1.10.1p:

Software                                                 Status
--------                                                 ------
CGSI-gSOAP 1.2.1.2                                       OK
Fetch CRL 2.6.6                                          -
GPT 3.2autotools2004-NMI-9.0                             -
LCG File Catalog Client 1.6.11.4                         OK
LCG File Catalog Server 1.6.11.4                         OK
Logrotate 3.7                                            -
vdt-update-certs 2.2                                     -
Wget 1.11                                                -


Status legend:
OK: Software is up to date with the latest release in VDT version 1.10.1
- : Not enough information to determine if updates are available.
See man page for more information.

Updating LFC via PACMAN

To install the new version of LFC I did the following:

• Make a new '/opt/lfc' directory (moving the very old one to /opt/lfc.orig)
• Get the newest PACMAN and install at /opt/pacman-3.29 and make a soft-link to '/opt/pacman'
• 'cd' to /opt/pacman and source setup.sh
• 'cd' to /opt/lfc and run _pacman -get http://vdt.cs.wisc.edu/test-cache/lcg:LFC'

Once it finished I did 'source setup.sh' in /opt/lfc. The new version info:

[lfc:lfc]# vdt-version

You have installed a subset of VDT version 2.0.99p8:

Software                                                 Status
--------                                                 ------
vdt-ca-manage 1.0                                        OK
vdt-update-certs 2.4                                     UPDATE AVAILABLE [2.5]
CGSI-gSOAP 1.2.1.2                                       OK
Fetch CRL 2.6.6                                          OK
GPT 3.2-4.0.8p1                                          OK
LCG File Catalog Client 1.7.2-4                          UPDATE AVAILABLE [1.6.11.4]
LCG File Catalog Server 1.7.2-4                          UPDATE AVAILABLE [1.6.11.4]
Logrotate 3.7                                            OK
Wget 1.11.4                                              OK


Status legend:
OK: Software is up to date with the latest release in VDT version 2.0.99
- : Not enough information to determine if updates are available.
See man page for more information.

I found that the /opt/lfc/globus/TRUSTED_CA directory didn't exist (used in X509_CADIR and X509_CERT_DIR) so I soft-linked a new one to our AFS certs area: 'ln -s /afs/atlas.umich.edu/OSG_certificates/certificates /opt/lfc/globus/TRUSTED_CA'

Then i was able to run lfc-ls:

[lfc:lfc]# lfc-ls /
grid

The MySQL is installed separately and will remain the same.

We need to make sure the new 'lcg' subdirectories are owned by 'lfcmgr':

• 'chown -R lfcmgr /opt/lfc/lcg/*'

Steps to switch to new LFC installation:

• Setup 'old' LFC environment: 'cd /opt/lfcnew; source setup.sh'
• Stop/remove LFC services: vdt-control --off
• Copy over the old NSCONFIG: 'cp /opt/lfcnew/lcg/etc/NSCONFIG /opt/lfc/lcg/etc/'
• Move the /opt/lcg soft-link to point to /opt/lfc/lcg: 'rm /opt/lcg; ln -s /opt/lfc/lcg /opt/lcg'
• Setup 'new' LFC environment: 'cd /opt/lfc; source setup.sh'
• Start 'new' LFC services: vdt-control --on

This works but the LFC log files are going to /opt/lfc/lcg/var/log/lfc/. We want them in /var/log/lfc/.

To update this change the source /opt/lfc/lcg/etc/init.d/lfcdaemon (if needed) and the /etc/init.d/lfcdaemon. You may want to check/edit/update the /etc/logrotate.d/lfcdaemon (make sure it has something like 'create 0644 lfcmgr root' to get the right ownership. Also the /etc/sysconfig/lfcdaemon can be updated or created from the template.

Additionally we want the lfcdaemon.pid and lock files in the standard locations so I needed to also change their path in /etc/init.d/lfcdaemon.

-- ShawnMcKee - 13 Sep 2009