Install CentOS or Scientific Linux 7

WARNING: This page is obsolete.

Important Note for 2019

During 2019, grid sites will be migrating to CentOS7; the current status can be found here. SLC6 Panda analysis queus are already brokered off and will be set offline on Sept 15, 2019. Tier3 sites should consider their migration to CentOS7, if not already done.

SLC6 releases should run on CentOS7 grid worker nodes without issues except for a few rare issues described in this Twiki page.

Required packages

You will need system privileges for this. Install CentOS7 on your computer; you can choose any packages or versions you like but make sure that the following are also installed:

Please note that only 64-bit OS will be supported in ATLASLocalRootBase.

• Install the CentOS7 (or SL7) desktop version.
• Install the HEP_OSlibs metarpm; see Instructions

yum install  http://linuxsoft.cern.ch/wlcg/centos7/x86_64/wlcg-repo-1.0.0-1.el7.noarch.rpm 
yum install HEP_OSlibs

• Install cvmfs; see Instructions

rpm --import https://cvmrepo.web.cern.ch/cvmrepo/yum/RPM-GPG-KEY-CernVM
yum install https://ecsft.cern.ch/dist/cvmfs/cvmfs-release/cvmfs-release-latest.noarch.rpm
yum install cvmfs
#you may need to enable " user_allow_other" in /etc/fuse.conf before restarting autofs. (and after configuring /etc/cvmfs/default.local)

• Enable user namespace so that Singularity can be used from cvmfs in unprivileged mode.

      echo "user.max_user_namespaces = 15000"  > /etc/sysctl.d/90-max_user_namespaces.conf
      sysctl -p /etc/sysctl.d/90-max_user_namespaces.conf

• • • check as a normal user that setupATLAS -c centos7 works (ie Singularity containers run). If not, you may need to install an additional rpm such as libseccomp if it says that library is missing. (reference: ADCINFR-132)

Kerberos Configuration

Example, this is what it should look like with the CERN.CH configurations.

# Configuration snippets may be placed in this directory as well
includedir /etc/krb5.conf.d/

[logging]
 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

[libdefaults]
 dns_lookup_realm = false
 ticket_lifetime = 24h
 renew_lifetime = 7d
 forwardable = true
 rdns = false
# default_realm = EXAMPLE.COM
 default_realm = CERN.CH
 default_ccache_name = KEYRING:persistent:%{uid}

[realms]
# EXAMPLE.COM = {
#  kdc = kerberos.example.com
#  admin_server = kerberos.example.com
# }

[realms]
  CERN.CH = {
    default_domain = cern.ch
    kpasswd_server = afskrb5m.cern.ch
    admin_server = afskrb5m.cern.ch
    kdc = cerndc.cern.ch
  }

[domain_realm]
# .example.com = EXAMPLE.COM
# example.com = EXAMPLE.COM
  cern.ch = CERN.CH
  .cern.ch = CERN.CH

Test status

• tested on SL7.2
• tested with bash. zsh and tcsh limited testing (mainly setup to ensure ALRB scripts work.)

Name	SL6 cvmfs Installations	Native SL7 Installation	Comments	To be done
agis
asetup
atlantis
eiclient			EIClient is not working outside cern.ch at the moment so it is not fully supported.
emi	(centos7 version setup)
fax
ganga
lcgenv
panda
pod			PoD is no longer being developed and if there is no need for this tool, it will no longer be supported on SL7. Please contact desilva@cern.ch if you need PoD.
pyami
rcsetup
root
rucio
sft
xrootd
advancedTools gcc
advancedTools git
advancedTools python
diagnostics checkOS
diagnostics db-fnget
diagnostics db-readReal
diagnostics gridCert
diagnostics runKV
diagnostics setMeUp			There are no SL7 compatible tutorials
diagnostics setMeUpData
diagnostics supportInfo
helpMe
printMenu
showVersions

Problems / Known Issues