Install AlmaLinux9

WARNING: This page is obsolete.

Please look at https://atlas-software.docs.cern.ch/software-infrastructure/platforms-compilers/.

CERN Recommendations.

Required packages

You will need system privileges for this. Install AlmaLinux9 on your computer; you can choose any packages or versions you like but make sure that the following are also installed:

• Install the AlmaLinux9 version.
• Enable the CRB repo dnf config-manager --set-enabled crb
• Install the HEP_OSlibs metarpm; see Instructions
  • for x86_64:

yum install https://linuxsoft.cern.ch/wlcg/el9/x86_64/wlcg-repo-1.0.0-1.el9.noarch.rpm 
yum install HEP_OSlibs

• • for aarch64:

yum install https://linuxsoft.cern.ch/wlcg/el9/aarch64/wlcg-repo-1.0.0-1.el9.noarch.rpm
yum install HEP_OSlibs

• Install cvmfs; see Instructions (if OSG or EGI installation repos are unavailable for this OS version, follow the default CERN installation instructions.)

rpm --import https://cvmrepo.web.cern.ch/cvmrepo/yum/RPM-GPG-KEY-CernVM
yum install https://ecsft.cern.ch/dist/cvmfs/cvmfs-release/cvmfs-release-latest.noarch.rpm
yum install cvmfs

• other rpms needed:
  • yum install krb5-workstation

Crypto policy

Some grid certificates are still encrypted with SHA1 (eg DE), in which case you need this:

update-crypto-policies --set DEFAULT:SHA1

Kerberos Configuration.

Example, this is what it should look like with the CERN.CH configurations in /etc/krb5.conf

# To opt out of the system crypto-policies configuration of krb5, remove the
# symlink at /etc/krb5.conf.d/crypto-policies which will not be recreated.
includedir /etc/krb5.conf.d/

[logging]
    default = FILE:/var/log/krb5libs.log
    kdc = FILE:/var/log/krb5kdc.log
    admin_server = FILE:/var/log/kadmind.log

[libdefaults]
    dns_lookup_realm = false
    ticket_lifetime = 24h
    renew_lifetime = 7d
    forwardable = true
    rdns = false
    pkinit_anchors = FILE:/etc/pki/tls/certs/ca-bundle.crt
    spake_preauth_groups = edwards25519
    dns_canonicalize_hostname = fallback
    qualify_shortname = ""
#    default_realm = EXAMPLE.COM
    default_realm = CERN.CH
    default_ccache_name = KEYRING:persistent:%{uid}

[realms]
# EXAMPLE.COM = {
#     kdc = kerberos.example.com
#     admin_server = kerberos.example.com
# }
  CERN.CH = {
    default_domain = cern.ch
    kpasswd_server = afskrb5m.cern.ch
    admin_server = afskrb5m.cern.ch
    kdc = cerndc.cern.ch
  }

[domain_realm]
# .example.com = EXAMPLE.COM
# example.com = EXAMPLE.COM

Test Status

Name	Native Version	aarch64	x86_64	Comments	To be done
container setups
acm					release not available for acm tests
asetup					AlmaLinux9 aarch64 ATLAS release unavailable
atlantis
eiclient				EIClient is not working outside cern.ch so it is not fully supported.
emi
ganga				Obsolete ?
lcgenv
panda
pyami
root
rucio
views
xcache
xrootd
advancedTools adctools
advancedTools art					can set up, someone needs to test
advancedTools clang					no AlmaLinux9 versions available
advancedTools cmake
advancedTools cppcheck					no AlmaLinux9 versions available
advancedTools davix
advancedTools dcube					unavailable for AlmaLinux9
advancedTools gcc				Obsolete
advancedTools git
advancedTools gitlab					can set up and run, someone needs to test
advancedTools hdf5					no AlmaLinux9 versions available
advancedTools logstash
advancedTools prmon					can set up and run, someone needs to test
advancedTools python
advancedTools stomp
diagnostics checkOS
diagnostics db-fnget
diagnostics db-readReal				Obsolete
diagnostics gridCert
diagnostics rseCheck
diagnostics runKV				Obsolete
diagnostics setMeUp					no tutorials for AlmaLinux9 yet
diagnostics setMeUpData				Obsolete
diagnostics supportInfo
diagnostics toolTest
helpMe
printMenu
showVersions

Known Issues