Nimbus環(huán)境搭建

2011.01.04

關(guān)注

Nimbus環(huán)境搭建(一)

以前花了很多時(shí)間配置出來的，寫出來供搭建參考，希望有人更深入的學(xué)習(xí)了解。

nimbus簡單測試環(huán)境的搭建

Nimbus（workspace.globus.org）是基于Globus（www.globus.org）網(wǎng)格軟件包GT中的java core(ws-core)組件而開發(fā)的IaaS平臺(tái)軟件。

一、環(huán)境介紹

這里為了搭建一個(gè)簡單的環(huán)境，我們選取了三臺(tái)機(jī)器：

Role	Hostname	IP	OS	User	Software
nimbus client	wang135.hrwang.com	172.20.86.135	RHEL5.2/CentOS5.2	nimbus	jdk-1_5_0_17-linux nimbus-cloud-client-011.tar.gz
nimbus server	wang136.hrwang.com	172.20.86.136	RHEL5.2/CentOS5.2	globus nimbus	jdk-1_5_0_17-linux apache-ant-1.7.1-bin.tar.gz XML-Parser-2.36.tar.gz gt4.0.8-all-source-installer.tar.bz2 nimbus-TP2.2.tar.gz
VMM	cloud.jsgl.com	172.20.86.174	RHEL5.2/CentOS5.2	globus	dhcpd python2.3+ sudo ebtables-v2.0.8-2.tar.gz nimbus-controls-TP2.2.tar.gz

結(jié)合上面的結(jié)構(gòu)圖，wang135.hrwang.com可以當(dāng)做cloud-client； wang136.hrwang.com可以當(dāng)做Workspace Service+Repository； node可以當(dāng)做VMMs。

二、環(huán)境部署

下面以#開頭的命令是root用戶執(zhí)行的，以$開頭的命令是普通用戶執(zhí)行的。

首先確保，每臺(tái)機(jī)器的/etc/hosts內(nèi)容都如下：

172.20.86.135 wang135.hrwang.com wang135

172.20.86.136 wang136.hrwang.com wang136

172.20.86.169 cloud.jsgl.com cloud

另外將相應(yīng)的用戶在相應(yīng)的機(jī)器上創(chuàng)建起來。

我們先在nimbus server進(jìn)行安裝部署

1.安裝java和apache-ant，及XML-Parser

[root@wang136 opt]# pwd

/opt

[root@wang136 opt]# ./jdk-1_5_0_17-linux-amd64.bin 解壓安裝

[root@wang136 opt]# tar zxvf apache-ant-1.7.1-bin.tar.gz 解壓安裝

[root@wang136 opt]# vi /etc/profile 在文件末添加環(huán)境變量

export ANT_HOME=/opt/apache-ant-1.7.1/

PATH=/opt/apache-ant-1.7.1/bin:/opt/jdk1.5.0_17/bin:/opt/jdk1.5.0_17/jre/bin:$PATH

JAVA_HOME=/opt/jdk1.5.0_17

CLASSPATH=/opt/jdk1.5.0_17/lib:/opt/jdk1.5.0_17/jre/lib:/opt/apache-ant-1.7.1/lib

export PATH

export JAVA_HOME

export CLASSPATH

[root@wang136 opt]# source /etc/profile 生效環(huán)境變量

[root@wang136 opt]# java –version 驗(yàn)證

java version "1.5.0_17"

Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_17-b04)

Java HotSpot(TM) 64-Bit Server VM (build 1.5.0_17-b04, mixed mode)

[root@wang136 opt]# ant -version

Apache Ant version 1.7.1 compiled on June 27 2008

[root@wang136 opt]# tar zxvf XML-Parser-2.36.tar.gz 安這個(gè)包是為了以后裝GRAM

[root@wang136 opt]# cd XML-Parser-2.36

[root@wang136 XML-Parser-2.36]# perl Makefile.PL

[root@wang136 XML-Parser-2.36]# make

[root@wang136 XML-Parser-2.36]# make install

2. 安裝GT

[root@wang136 ~]# useradd globus 創(chuàng)建globus用戶

[root@wang136 ~]# passwd globus

[root@wang136 ~]# mkdir /usr/local/globus-4.0.8 創(chuàng)建安裝目錄

[root@wang136 ~]# chown -R globus:globus /usr/local/globus-4.0.8

[root@wang136 ~]# cd /opt/ 軟件放在opt目錄下

[root@wang136 opt]# tar jxvf gt4.0.8-all-source-installer.tar.bz2

[root@wang136 opt]# chown -R globus:globus gt4.0.8-all-source-installer

切換到globus登陸的終端

[globus@wang136 gt4.0.8-all-source-installer]$ pwd

/opt/gt4.0.8-all-source-installer

[globus@wang136 gt4.0.8-all-source-installer]$ export GLOBUS_LOCATION=/usr/local/globus-4.0.8 （將這行添加到/home/globus/.bash_profile的末尾）

[globus@wang136 gt4.0.8-all-source-installer]$ ./configure --prefix=/usr/local/globus-4.0.8

[globus@wang136 gt4.0.8-all-source-installer]$ make wsjava gridftp

[globus@wang136 gt4.0.8-all-source-installer]$ make wsjava gridftp install

3.創(chuàng)建配置證書

(1)創(chuàng)建CA

使用globus用戶執(zhí)行下面的操作

[globus@wang136 gt4.0.8-all-source-installer]$ cd /usr/local/globus-4.0.8/

[globus@wang136 globus-4.0.8]$ sh etc/globus-user-env.sh

將下面這行添加到/home/globus/.bash_profile的末尾：

source /usr/local/globus-4.0.8/etc/globus-user-env.sh

[globus@wang136 globus-4.0.8]$ ./setup/globus/setup-simple-ca 生成CA

WARNING: GPT_LOCATION not set, assuming:

GPT_LOCATION=/usr/local/globus-4.0.8

C e r t i f i c a t e A u t h o r i t y S e t u p

This script will setup a Certificate Authority for signing Globus

users certificates. It will also generate a simple CA package

that can be distributed to the users of the CA.

The CA information about the certificates it distributes will

be kept in:

/home/globus/.globus/simpleCA/

The unique subject name for this CA is:

cn=Globus Simple CA, ou=simpleCA-wang136.hrwang.com, ou=GlobusTest, o=Grid

Do you want to keep this as the CA subject (y/n) [y]:y

Enter the email of the CA (this is the email where certificate

requests will be sent to be signed by the CA):wanghongrui@ceopen.cn

The CA certificate has an expiration date. Keep in mind that

once the CA certificate has expired, all the certificates

signed by that CA become invalid. A CA should regenerate

the CA certificate and start re-issuing ca-setup packages

before the actual CA certificate expires. This can be done

by re-running this setup script. Enter the number of DAYS

the CA certificate should last before it expires.

[default: 5 years (1825 days)]:

Enter PEM pass phrase:

Verifying - Enter PEM pass phrase:

creating CA config package...done.

A self-signed certificate has been generated

for the Certificate Authority with the subject:

/O=Grid/OU=GlobusTest/OU=simpleCA-wang136.hrwang.com/CN=Globus Simple CA

If this is invalid, rerun this script

./setup/globus/setup-simple-ca

and enter the appropriate fields.

-------------------------------------------------------------------

The private key of the CA is stored in /home/globus/.globus/simpleCA//private/cakey.pem

The public CA certificate is stored in /home/globus/.globus/simpleCA//cacert.pem

The distribution package built for this CA is stored in

/home/globus/.globus/simpleCA//globus_simple_ca_2f982487_setup-0.19.tar.gz

This file must be distributed to any host wishing to request

certificates from this CA.

CA setup complete.

The following commands will now be run to setup the security

configuration files for this CA:

$GLOBUS_LOCATION/sbin/gpt-build /home/globus/.globus/simpleCA//globus_simple_ca_2f982487_setup-0.19.tar.gz

$GLOBUS_LOCATION/sbin/gpt-postinstall

-------------------------------------------------------------------

setup-ssl-utils: Configuring ssl-utils package

Running setup-ssl-utils-sh-scripts...

***************************************************************************

Note: To complete setup of the GSI software you need to run the

following script as root to configure your security configuration

directory:

/usr/local/globus-4.0.8/setup/globus_simple_ca_2f982487_setup/setup-gsi

For further information on using the setup-gsi script, use the -help

option. The -default option sets this security configuration to be

the default, and -nonroot can be used on systems where root access is

not available.

***************************************************************************

setup-ssl-utils: Complete

注1：上面選擇的都是默認(rèn)答案，只有郵箱和密碼根據(jù)情況填寫。

（2）配置CA

使用root執(zhí)行：

[root@wang136 opt]# export GLOBUS_LOCATION=/usr/local/globus-4.0.8

[root@wang136 opt]# /usr/local/globus-4.0.8/setup/globus_simple_ca_2f982487_setup/setup-gsi -default

setup-gsi: Configuring GSI security

Making /etc/grid-security...

mkdir /etc/grid-security

Making trusted certs directory: /etc/grid-security/certificates/

mkdir /etc/grid-security/certificates/

Installing /etc/grid-security/certificates//grid-security.conf.2f982487...

Running grid-security-config...

Installing Globus CA certificate into trusted CA certificate directory...

Installing Globus CA signing policy into trusted CA certificate directory...

setup-gsi: Complete

本站僅提供存儲(chǔ)服務(wù)，所有內(nèi)容均由用戶發(fā)布，如發(fā)現(xiàn)有害或侵權(quán)內(nèi)容，請(qǐng)點(diǎn)擊舉報(bào)。

打開APP，閱讀全文并永久保存查看更多類似文章

linux下安裝lucene | C1G軍火庫

centos7 圖形化安裝oracle11g

LAMP (Linux, Apache, MySQL, PHP) HOWTO: Installing MySQL and Apache with PHP support on Linux

storm1

Ubuntu 11.10下安裝Oracle 11g R2 詳解（本人測試通過） (轉(zhuǎn))

CentOS 6.3(x86_32)下安裝Oracle 10g R2

更多類似文章 >>

国产一级a片免费看高清,亚洲熟女中文字幕在线视频,黄三级高清在线播放,免费黄色视频在线看

目錄

nimbus簡單測試環(huán)境的搭建