Nimbus環(huán)境搭建

funson 2011-01-04

展開全文

Nimbus環(huán)境搭建(一)

以前花了很多時間配置出來的，寫出來供搭建參考，希望有人更深入的學習了解。

nimbus簡單測試環(huán)境的搭建

Nimbus（workspace.globus.org）是基于Globus（www.globus.org）網格軟件包GT中的java core(ws-core)組件而開發(fā)的IaaS平臺軟件。

這里為了搭建一個簡單的環(huán)境，我們選取了三臺機器：

Role	Hostname	IP	OS	User	Software
nimbus client	wang135.hrwang.com	172.20.86.135	RHEL5.2/CentOS5.2	nimbus	jdk-1_5_0_17-linux nimbus-cloud-client-011.tar.gz
nimbus server	wang136.hrwang.com	172.20.86.136	RHEL5.2/CentOS5.2	globus nimbus	jdk-1_5_0_17-linux apache-ant-1.7.1-bin.tar.gz XML-Parser-2.36.tar.gz gt4.0.8-all-source-installer.tar.bz2 nimbus-TP2.2.tar.gz
VMM	cloud.jsgl.com	172.20.86.174	RHEL5.2/CentOS5.2	globus	dhcpd python2.3+ sudo ebtables-v2.0.8-2.tar.gz nimbus-controls-TP2.2.tar.gz

結合上面的結構圖，wang135.hrwang.com可以當做cloud-client； wang136.hrwang.com可以當做Workspace Service+Repository； node可以當做VMMs。

二、環(huán)境部署

下面以#開頭的命令是root用戶執(zhí)行的，以$開頭的命令是普通用戶執(zhí)行的。

首先確保，每臺機器的/etc/hosts內容都如下：

172.20.86.135 wang135.hrwang.com wang135

172.20.86.136 wang136.hrwang.com wang136

172.20.86.169 cloud.jsgl.com cloud

另外將相應的用戶在相應的機器上創(chuàng)建起來。

我們先在nimbus server進行安裝部署

1.安裝java和apache-ant，及XML-Parser

[root@wang136 opt]# pwd

/opt

[root@wang136 opt]# ./jdk-1_5_0_17-linux-amd64.bin 解壓安裝

[root@wang136 opt]# tar zxvf apache-ant-1.7.1-bin.tar.gz 解壓安裝

[root@wang136 opt]# vi /etc/profile 在文件末添加環(huán)境變量

export ANT_HOME=/opt/apache-ant-1.7.1/

PATH=/opt/apache-ant-1.7.1/bin:/opt/jdk1.5.0_17/bin:/opt/jdk1.5.0_17/jre/bin:$PATH

JAVA_HOME=/opt/jdk1.5.0_17

CLASSPATH=/opt/jdk1.5.0_17/lib:/opt/jdk1.5.0_17/jre/lib:/opt/apache-ant-1.7.1/lib

export PATH

export JAVA_HOME

export CLASSPATH

[root@wang136 opt]# source /etc/profile 生效環(huán)境變量

[root@wang136 opt]# java –version 驗證

java version "1.5.0_17"

Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_17-b04)

Java HotSpot(TM) 64-Bit Server VM (build 1.5.0_17-b04, mixed mode)

[root@wang136 opt]# ant -version

Apache Ant version 1.7.1 compiled on June 27 2008

[root@wang136 opt]# tar zxvf XML-Parser-2.36.tar.gz 安這個包是為了以后裝GRAM

[root@wang136 opt]# cd XML-Parser-2.36

[root@wang136 XML-Parser-2.36]# perl Makefile.PL

[root@wang136 XML-Parser-2.36]# make

[root@wang136 XML-Parser-2.36]# make install

2. 安裝GT

[root@wang136 ~]# useradd globus 創(chuàng)建globus用戶

[root@wang136 ~]# passwd globus

[root@wang136 ~]# mkdir /usr/local/globus-4.0.8 創(chuàng)建安裝目錄

[root@wang136 ~]# chown -R globus:globus /usr/local/globus-4.0.8

[root@wang136 ~]# cd /opt/ 軟件放在opt目錄下

[root@wang136 opt]# tar jxvf gt4.0.8-all-source-installer.tar.bz2

[root@wang136 opt]# chown -R globus:globus gt4.0.8-all-source-installer

切換到globus登陸的終端

[globus@wang136 gt4.0.8-all-source-installer]$ pwd

/opt/gt4.0.8-all-source-installer

[globus@wang136 gt4.0.8-all-source-installer]$ export GLOBUS_LOCATION=/usr/local/globus-4.0.8 （將這行添加到/home/globus/.bash_profile的末尾）

[globus@wang136 gt4.0.8-all-source-installer]$ ./configure --prefix=/usr/local/globus-4.0.8

[globus@wang136 gt4.0.8-all-source-installer]$ make wsjava gridftp

[globus@wang136 gt4.0.8-all-source-installer]$ make wsjava gridftp install

3.創(chuàng)建配置證書

(1)創(chuàng)建CA

使用globus用戶執(zhí)行下面的操作

[globus@wang136 gt4.0.8-all-source-installer]$ cd /usr/local/globus-4.0.8/

[globus@wang136 globus-4.0.8]$ sh etc/globus-user-env.sh

將下面這行添加到/home/globus/.bash_profile的末尾：

source /usr/local/globus-4.0.8/etc/globus-user-env.sh

[globus@wang136 globus-4.0.8]$ ./setup/globus/setup-simple-ca 生成CA

WARNING: GPT_LOCATION not set, assuming:

GPT_LOCATION=/usr/local/globus-4.0.8

C e r t i f i c a t e A u t h o r i t y S e t u p

This script will setup a Certificate Authority for signing Globus

users certificates. It will also generate a simple CA package

that can be distributed to the users of the CA.

The CA information about the certificates it distributes will

be kept in:

/home/globus/.globus/simpleCA/

The unique subject name for this CA is:

cn=Globus Simple CA, ou=simpleCA-wang136.hrwang.com, ou=GlobusTest, o=Grid

Do you want to keep this as the CA subject (y/n) [y]:y

Enter the email of the CA (this is the email where certificate

requests will be sent to be signed by the CA):wanghongrui@ceopen.cn

The CA certificate has an expiration date. Keep in mind that

once the CA certificate has expired, all the certificates

signed by that CA become invalid. A CA should regenerate

the CA certificate and start re-issuing ca-setup packages

before the actual CA certificate expires. This can be done

by re-running this setup script. Enter the number of DAYS

the CA certificate should last before it expires.

[default: 5 years (1825 days)]:

Enter PEM pass phrase:

Verifying - Enter PEM pass phrase:

creating CA config package...done.

A self-signed certificate has been generated

for the Certificate Authority with the subject:

/O=Grid/OU=GlobusTest/OU=simpleCA-wang136.hrwang.com/CN=Globus Simple CA

If this is invalid, rerun this script

./setup/globus/setup-simple-ca

and enter the appropriate fields.

-------------------------------------------------------------------

The private key of the CA is stored in /home/globus/.globus/simpleCA//private/cakey.pem

The public CA certificate is stored in /home/globus/.globus/simpleCA//cacert.pem

The distribution package built for this CA is stored in

/home/globus/.globus/simpleCA//globus_simple_ca_2f982487_setup-0.19.tar.gz

This file must be distributed to any host wishing to request

certificates from this CA.

CA setup complete.

The following commands will now be run to setup the security

configuration files for this CA:

$GLOBUS_LOCATION/sbin/gpt-build /home/globus/.globus/simpleCA//globus_simple_ca_2f982487_setup-0.19.tar.gz

$GLOBUS_LOCATION/sbin/gpt-postinstall

-------------------------------------------------------------------

setup-ssl-utils: Configuring ssl-utils package

Running setup-ssl-utils-sh-scripts...

***************************************************************************

Note: To complete setup of the GSI software you need to run the

following script as root to configure your security configuration

directory:

/usr/local/globus-4.0.8/setup/globus_simple_ca_2f982487_setup/setup-gsi

For further information on using the setup-gsi script, use the -help

option. The -default option sets this security configuration to be

the default, and -nonroot can be used on systems where root access is

not available.

***************************************************************************

setup-ssl-utils: Complete

注1：上面選擇的都是默認答案，只有郵箱和密碼根據(jù)情況填寫。

（2）配置CA

使用root執(zhí)行：

[root@wang136 opt]# export GLOBUS_LOCATION=/usr/local/globus-4.0.8

[root@wang136 opt]# /usr/local/globus-4.0.8/setup/globus_simple_ca_2f982487_setup/setup-gsi -default

setup-gsi: Configuring GSI security

Making /etc/grid-security...

mkdir /etc/grid-security

Making trusted certs directory: /etc/grid-security/certificates/

mkdir /etc/grid-security/certificates/

Installing /etc/grid-security/certificates//grid-security.conf.2f982487...

Running grid-security-config...

Installing Globus CA certificate into trusted CA certificate directory...

Installing Globus CA signing policy into trusted CA certificate directory...

setup-gsi: Complete

本站是提供個人知識管理的網絡存儲空間，所有內容均由用戶發(fā)布，不代表本站觀點。請注意甄別內容中的聯(lián)系方式、誘導購買等信息，謹防詐騙。如發(fā)現(xiàn)有害或侵權內容，請點擊一鍵舉報。

轉藏分享

QQ空間 QQ好友新浪微博微信

獻花（0） +1

來自： funson > 《云計算》

舉報/認領

0條評論

發(fā)表

請遵守用戶評論公約

類似文章 更多

funson

關注對話

TA的最新館藏

[轉] 精選文章||元宇宙技術綜述
2022江蘇氣象AI算法挑戰(zhàn)賽亞軍比賽攻略_DontMind隊
[轉] 【重要】免費GPU+數(shù)據(jù)代碼！有三AI聯(lián)合阿里天池推出深度學習訓練營，任何基礎都可以學習
[轉] 很喜歡林徽因的這段話：你若擁我入懷，疼我入骨，護我周全，我愿意蒙上雙眼，不去分辨你是人是鬼你待我真心...
研究生應學習諸葛亮成長過程的四種精神精選
[轉] 最有名氣的30首七律唐詩，難以逾越的高峰！

喜歡該文的人也喜歡更多

熱門閱讀換一換

小男孩‘自慰网亚洲一区二区,亚洲一级在线播放毛片,亚洲中文字幕av每天更新,黄aⅴ永久免费无码,91成人午夜在线精品,色网站免费在线观看,亚洲欧洲wwwww在线观看

Nimbus環(huán)境搭建

目錄

nimbus簡單測試環(huán)境的搭建