Changes between Initial Version and Version 1 of Doc/gLite/Updates


Ignore:
Timestamp:
Mar 15, 2009, 12:32:23 PM (15 years ago)
Author:
/O=GRID-FR/C=FR/O=CNRS/OU=LAL/CN=Michel Jouvin
Comment:

--

Legend:

Unmodified
Added
Removed
Modified

  • Doc/gLite/Updates

    v1 v1  
     1= Updating Trusted CAs and gLite =
     2[[TracNav]]
     3
     4[[TOC(inline)]]
     5
     6
     7In addition to [wiki:Download/QWGTemplates/Install updating] QWG templates to the last version to take advantages of new features and fixes, there are 2 occasions where you may need to update templates based on operation constraints driven by EGEE announcements:
     8 * Update the list of trusted CAs: this happens in average every 2 months and a site '''must''' update in the 8 days after the announcement before being in ''CRITICAL'' state in SAM tests.
     9 * Update to a new gLite update: for most of the updates, there is no need to upgrade urgently (except for security fixes). The easiest is generally to update the templates to the last version available in the corresponding branch but if this is convenient, it is generally possible to include the relevant templates only.
     10
     11These operations are described in more details in the following sections.
     12
     13== List of Trusted CAs ==
     14
     15This involves downloading the template describing the list of CA-related RPMs to install (each trusted CA is described with a separate RPM) and downloading the associated RPMs.
     16
     17The template is called [source:templates/trunk/grid/glite-3.1/common/security/cas.tpl cas.tpl] and is available from [source:External/CAs QWG repository] which contains one directory for each version of the IGTF CA releases. This template must be placed in directory `common/security` of every gLite version under `grid` directory (this is the same template for each version).
     18
     19To retrieve the RPMs, you can use as a source either the URL in the EGEE announcement or the GRIF copy available at https://quattorsrv.lal.in2p3.fr/packages/ca. The easiest way to retrieve the RPM is, from the main SCDB directory:
     20{{{
     21mkdir /dir/to/packages/ca-xxx       # Replace xxx by the version number
     22src/utils/misc/rpmUpdates /dir/to/packages/ca-xxx Source_URL    # Ignore all the very verbose output
     23rm /dir/to/packages/ca              # Or whatever is your current directory for CA repository
     24ln -s /dir/to/packages/ca-xxx /dir/to/packages/ca
     25}}}
     26
     27
     28== gLite Updates ==
     29
     30To be written. In the meantime you may have a look to wiki:Download/QWGTemplates/Install.
     31
     32Keep in mind that the normal and easiest procedure to install a gLite update is to [wiki:Download/QWGTemplates/Install get the last version] of the templates from the appropriate branch.