The OSG CE document "http://kb.grid.iu.edu/data/aths.html" has detailed instructions on how to set up an OSG 0.4.0 gatekeeper. This document is not meant to replace the OSG one, instead,it serves as "screenshot" of my installation session, with emphasis on additional steps customized for BNL site. 1. shutdown old services: > /etc/init.d/edg-crl-upgraded stop Stopping edg-crl-upgrade > /etc/init.d/edg-gridmapfile-upgraded stop Stopping edg-gridmapfile-upgrade: > /etc/init.d/gris stop > . /usr/local/grid/setup.sh > $VDT_LOCATION/MIS-CI/uninstall-misci.sh >/etc/init.d/MLD stop 2. download pacman 3. install OSG-Client package As user usatlas2 >cd /usatlas/projects/OSG/OSG_WN_Util > pacman -get OSG:osg-wn-client-0.4.0 4. install OSG CE pacman: Set up condor environment for preserving the existing condor config: >export VDTSETUP_CONDOR_LOCATION=/home/condor >export VDTSETUP_CONDOR_CONFIG=/etc/condor/condor_config >cd /opt/OSG >pacman -get OSG:osg-0.4.0 5. install batch systems packages: > pacman -get OSG:Globus-Condor-Setup > pacman -get OSG:Globus-LSF-Setup Please note that the LSF jobmanager is only for BNL local users, so it's not published. 6. Setup and maintenance of certificate authority connection >$VDT_LOCATION/vdt/setup/setup-cert-request 7. Globus configuration To add the GLOBUS_TCP_PORT(SOURCE)_RANGE env. variable to the globus config files. Then restart xinetd daemon. Change /opt/OSG/globus/lib/perl/Globus/GRAM/JobManager/condor.pm, adding Jason's mods. in, which has BNL specific queue information. 8. configure site attributes: >cd $VDT_LOCATION/monitoring >./configure-osg.sh Here are the values for BNL site: Grid Site Name: BNL_ATLAS_1 OSG Location: /opt/OSG OSG WN Client: /usatlas/projects/OSG/OSG_WN_Util Application: /usatlas/projects/OSG/ Data: /usatlas/prodjob/share/ Site read: /pnfs/usatlas.bnl.gov/data/ Site write: /pnfs/usatlas.bnl.gov/data/ WorkerNode Temp: /tmp/ Default SE: srm://dcsrm.usatlas.bnl.gov:8443//pnfs/usatlas.bnl.gov/data/ JOB Manager: condor - UTIL cont: gridgk01.racf.bnl.gov/jobmanager - JOB cont: gridgk01.racf.bnl.gov/jobmanager-condor VO Sponsors: "usatlas:100" Policy URL: http://www.acf.bnl.gov/UserInfo/Facilities/LinuxFarm/CAS/CondorPolicy.html NB: make sure the file $APP/etc/grid3-locations.txt file is created and made all VO writable, which will contain all VO specific application information. 9. authentication/authorization configuration BNL uses GUMS, make sure the prima callout module is enabled by adding the following two files in /etc/grid-security/ dir: gsi-authz.conf and prima-authz.conf To use a unique certificate dir, change the softlink of $GLOBUS_LOCATION/etc/TRUSTED_CA to point to /etc/grid-security/certificates/ 10. Configure MIS-CI >$VDT_LOCATION/MIS-CI/configure-misci.sh --choose_user Since BNL GUMS maps OSG production GridCat DN to grid0616, so we configure MIS-CI to run under grid0616 account. 11. start MDS (GRIS) >/etc/init.d/gris start 12. activate the site: modify the file $VDT_LOCATION/MIS-CI/etc/grid-site-state-info. and setting the value to 1 for the variable below: export grid_site_state_bit = 1 13. configure MonaLisa $VDT_LOCATION/vdt/setup/configure_monalisa --prompt --server y [root@gridgk01 OSG]# $VDT_LOCATION/vdt/setup/configure_monalisa --prompt --server y To configure MonaLisa you need to specify a few parameters. Please answer the following questions: Please specify user account to run MonaLisa daemons as: [monalisa] This is the name you will be seen by the world, so please choose a name that represents you. Make sure this name is unique in the MonaLisa environment. Please specify the farm name: [gridgk01.racf.bnl.gov] BNL_ATLAS_1 Your Monitor Group name is important to group your site correctly in the global site list. OSG users should enter "OSG" Please enter your monitor group name: [Test] OSG Please enter your contact name (your full name): [root] Xin Zhao Contact email (your email): [root@gridgk01.racf.bnl.gov] xzhao@bnl.gov City (server's location): [] Long Island, NY Country: [] USA You can find some approximate values for your geographic location from: http://geotags.com/ or you can search your location on Google For USA: LAT is about 29 (South) ... 48 (North) LONG is about -123 (West coast) ... -71 (East coast) Location latitude ( -90 (S) .. 90 (N) ): [0] 40.366 Location longitude ( -180 (W) .. 180 (E) ): [0] -72.388 Will you connect to a Ganglia instance (y/n): [y] y On which host is Ganglia Running: [localhost] ganglia01.rcf.bnl.gov On which port is Ganglia Running: [8649] 8651 Do you want to run OSG_VO_Modules (y/n): [y] y Please specify GLOBUS location: [/opt/OSG/globus] Please specify CONDOR location: [] /home/condor Please specify the path to condor_config: [] /etc/condor/condor_config Please specify PBS location: [] Please specify LSF location: [] Please specify FBS location: [] Please specify SGE location: [] Do you want to enable the MonALISA auto-update feature (y/n): [n] 14. configure GIP [root@gridgk01 OSG]# $VDT_LOCATION/vdt/setup/configure_gip --batch condor --srm Do you also wish to publish your gsiftp information(Y/n) [n] What is the siteName? (e.g. UIOWA-ITB) BNL_ATLAS_1 What is the permanent storage hostname? (e.g. rsgrid3.its.uiowa.edu) dcsrm.usatlas.bnl.gov What is the permanent storage host access root for vo cdf ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) What is the permanent storage host access root for vo fermilab ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) What is the permanent storage host access root for vo fmri ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) What is the permanent storage host access root for vo gadu ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) What is the permanent storage host access root for vo grase ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) What is the permanent storage host access root for vo ivdgl ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) /pnfs/usatlas.bnl.gov/data/ivdgl/ What is the permanent storage host access root for vo mis ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) /pnfs/usatlas.bnl.gov/data/ivdgl/ What is the permanent storage host access root for vo sdss ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) What is the permanent storage host access root for vo star ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) What is the permanent storage host access root for vo atlas ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) /pnfs/usatlas.bnl.gov/data/usatlas1/ What is the permanent storage host access root for vo cms ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) What is the permanent storage host access root for vo ligo ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) What is the permanent storage host access root for vo dzero ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) What is the permanent storage host access root for vo dosar ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) What is the permanent storage host access root for vo des ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) What is the permanent storage host access root for vo glow ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) What is the permanent storage host access root for vo grow ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) What is the permanent storage host access root for vo gridex ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) What is the permanent storage host access root for vo nanohub ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) What is the permanent storage host access root for vo geant ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) What is the permanent storage host access root for vo i ?( This directory should be srmcp-able by the vo user e.g. /pnfs/uscms.rtgrid1.its.uiowa.edu/data) (Just hit Enter if this VO doesnot have an srmcp-able directory) We have set up the Generic Information Providers (GIP). If you wish to further customize your site GIP configuration, edit /opt/OSG/lcg/var/gip/lcg-info-generic.conf based on your site needs. Then run the following command, and everything should be set. Note that it is important to give the full pathname for the argument to lcg-info-generic-config. /opt/OSG/lcg/sbin/lcg-info-generic-config /opt/OSG/lcg/var/gip/lcg-info-generic.conf Note that this information is also in /opt/OSG/post-install/README