Install CentOS8 Stream

WARNING: This page is obsolete.

Not recommended. Please migrate to AlmaLinux9. See CERN Recommendations.

Required packages

You will need system privileges for this. Install CentOS8 Stream on your computer; you can choose any packages or versions you like but make sure that the following are also installed:

• Install the CentOS8 Stream desktop version.
• Install the HEP_OSlibs metarpm; see Instructions
  • x86_64:

yum install https://linuxsoft.cern.ch/wlcg/centos8/x86_64/wlcg-repo-1.0.0-1.el8.noarch.rpm
yum install HEP_OSlibs

• for aarch64, you have to get the rpm from git; the rpm will be in HEP_OSlibs/downloads/aarch64

git clone -b el8 https://gitlab.cern.ch/linuxsupport/rpms/HEP_OSlibs.git

• Install cvmfs; see Instructions

rpm --import https://cvmrepo.web.cern.ch/cvmrepo/yum/RPM-GPG-KEY-CernVM
yum install https://ecsft.cern.ch/dist/cvmfs/cvmfs-release/cvmfs-release-latest.noarch.rpm
yum install cvmfs
#you may need to enable " user_allow_other" in /etc/fuse.conf before restarting autofs. (and after configuring /etc/cvmfs/default.local)

• Enable user namespace so that Singularity can be used from cvmfs in unprivileged mode.

      echo "user.max_user_namespaces = 15000"  > /etc/sysctl.d/90-max_user_namespaces.conf
      sysctl -p /etc/sysctl.d/90-max_user_namespaces.conf

• • • check as a normal user that setupATLAS -c centos7 works (ie Singularity containers run). If not, you may need to install an additional rpm such as libseccomp if it says that library is missing. (reference: ADCINFR-132)

• other rpms needed:
  • compat-openssl10
  • libtiff

Kerberos Configuration

Example, this is what it should look like with the CERN.CH configurations in /etc/krb5.conf

$ cat  /etc/krb5.conf
# To opt out of the system crypto-policies configuration of krb5, remove the
# symlink at /etc/krb5.conf.d/crypto-policies which will not be recreated.
includedir /etc/krb5.conf.d/

[logging]
    default = FILE:/var/log/krb5libs.log
    kdc = FILE:/var/log/krb5kdc.log
    admin_server = FILE:/var/log/kadmind.log

[libdefaults]
    dns_lookup_realm = false
    ticket_lifetime = 24h
    renew_lifetime = 7d
    forwardable = true
    rdns = false
    pkinit_anchors = FILE:/etc/pki/tls/certs/ca-bundle.crt
    spake_preauth_groups = edwards25519
#    default_realm = EXAMPLE.COM
    default_realm = CERN.CH
    default_ccache_name = KEYRING:persistent:%{uid}

[realms]
# EXAMPLE.COM = {
#     kdc = kerberos.example.com
#     admin_server = kerberos.example.com
# }
  CERN.CH = {
    default_domain = cern.ch
    kpasswd_server = afskrb5m.cern.ch
    admin_server = afskrb5m.cern.ch
    kdc = cerndc.cern.ch
  }

[domain_realm]
# .example.com = EXAMPLE.COM
# example.com = EXAMPLE.COM

Test Status

Name	Native Version	aarch64	x86_64	Comments	To be done
acm				release not available for aarch64 for acm tests
asetup
atlantis
eiclient				EIClient is not working outside cern.ch so it is not fully supported.
emi
ganga				Obsolete ?
lcgenv
panda
pyami
root					aarch64 root version issue https://sft.its.cern.ch/jira/browse/SPI-2068
rucio
views
xcache					aarch64 root version issue https://sft.its.cern.ch/jira/browse/SPI-2068
xrootd
advancedTools adctools
advancedTools art				tested only setup, may not work if python unavailable ?
advancedTools clang				no aarch64 versions
advancedTools cmake
advancedTools cppcheck				no aarch64 version. for x86_64, centos7 version fails: /lib64/libstdc++.so.6: version `GLIBCXX_3.4.26' not found
advancedTools davix
advancedTools dcube
advancedTools gcc				Obsolete
advancedTools git
advancedTools gitlab				aarch64: no version, x86_64: This is slc6 version
advancedTools hdf5				aarch64: no version. x86_64: tested only setup
advancedTools logstash
advancedTools prmon				tested only help
advancedTools python	(aarch64)
diagnostics checkOS
diagnostics db-fnget
diagnostics db-readReal				Obsolete
diagnostics gridCert
diagnostics rseCheck
diagnostics runKV				Obsolete
diagnostics setMeUp
diagnostics setMeUpData				Obsolete
diagnostics supportInfo
diagnostics toolTest
helpMe
printMenu
showVersions

Known Issues