== Verification of cesnet.rocci.ubuntu-xenial.amd64-4.3.8 === === Ticket assigned === * [Ticket https://rt.egi.eu/rt/Ticket/Display.html?id=12408] === Install CMD-OS-1 repos === {{{ root@VerificaUbuntu16:~# wget repository.egi.eu/sw/production/cmd-os/1/ubuntu/dists/trusty/main/binary-amd64/cmd-os-release-1.0.0_all.deb root@VerificaUbuntu16:~# dpkg -i cmd-os-release-1.0.0_all.deb root@VerificaUbuntu16:~# wget http://repository.egi.eu/sw/production/umd/UMD-DEB-PGP-KEY -O /tmp/umd.key root@VerificaUbuntu16:~# apt-key add /tmp/umd.key ## A hack for avoid multiarch related issues root@VerificaUbuntu16:/etc/apt/sources.list.d# for i in $(ls CMD-OS-1*.list); do sed -i 's/^deb http/deb \[arch=amd64\] http/g' $i; done }}} === Install repos for packages to verify === {{{ root@VerificaUbuntu16:/etc/apt/sources.list.d# pwd /etc/apt/sources.list.d root@VerificaUbuntu16:/etc/apt/sources.list.d# wget http://admin-repo.egi.eu/sw/unverified/cmd-os-1.cesnet.rocci.ubuntu-xenial.amd64/4/3/8/repofiles/CESNET.rocci.ubuntu-xenial.amd64.list root@VerificaUbuntu16:/etc/apt/sources.list.d# cat CESNET.rocci.ubuntu-xenial.amd64.list # EGI Software Repository - REPO META (releaseId,repositoryId,repofileId) - (12408,2294,2245) deb http://admin-repo.egi.eu/sw/unverified/cmd-os-1.cesnet.rocci.ubuntu-xenial.amd64/4/3/8/ ./ }}} === Install packages to verify === {{{ root@VerificaUbuntu16:~# apt-get update root@VerificaUbuntu16:~# apt-get install occi-cli }}} === System preparation === {{{ # Other packages needed root@VerificaUbuntu16:~# apt-get install voms-clients ca-cern-lcg-iota-ca ca-policy-lcg }}} (!) Put valid host certificate under /etc/grid-security/ (!) Put valid user certificates under ~/.globus (!) Fill /etc/grid-security/vomsdir/ with the necessary LSC files (!) Fill /etc/vomses/ === Verify occi-client === (!) Creating proxy: {{{ root@VerificaUbuntu16:~# voms-proxy-init -key ~/.globus/userkey.pem -cert ~/.globus/usercert.pem -certdir /etc/grid-security/certificates/ -voms fedcloud.egi.eu --rfc Enter GRID pass phrase: Your identity: /DC=es/DC=irisgrid/O=cesga/CN=rubendiez Creating temporary proxy .......................... Done Contacting voms2.grid.cesnet.cz:15002 [/DC=org/DC=terena/DC=tcs/C=CZ/ST=Hlavni mesto Praha/L=Praha 6/O=CESNET/CN=voms2.grid.cesnet.cz] "fedcloud.egi.eu" Done Creating proxy ......................................................................................... Done Your proxy is valid until Thu Feb 16 03:36:35 2017 }}} (!) testing: List resources: {{{ root@VerificaUbuntu16:~# occi --endpoint https://cloud.cesga.es:3202 --action list --resource os_tpl --auth x509 --user-cred /tmp/x509up_u0 --voms http://occi.cloud.cesga.es/occi/infrastructure/os_tpl#uuid_debian6_88 http://occi.cloud.cesga.es/occi/infrastructure/os_tpl#uuid_bncweb_89 http://occi.cloud.cesga.es/occi/infrastructure/os_tpl#uuid_centos5_7_90 [.....] http://occi.cloud.cesga.es/occi/infrastructure/os_tpl#uuid_basic_scientific_linux_6_5_minimal_os_339 [.....] }}} Deploy: {{{ root@VerificaUbuntu16:~# /opt/occi-cli/bin/occi --endpoint https://cloud.cesga.es:3202/ --action create --resource compute --mixin os_tpl#uuid_basic_scientific_linux_6_5_minimal_os_339 --attribute occi.core.title="probe_rdiez" --auth x509 --user-cred /tmp/x509up_u0 --voms https://cloud.cesga.es:3202/compute/69425 }}} (!) VM appears in OpenNebula dashboard List running VMs: {{{ root@VerificaUbuntu16:~# occi --endpoint https://cloud.cesga.es:3202/ --action list --resource compute --auth x509 --user-cred /tmp/x509up_u0 --voms https://cloud.cesga.es:3202/compute/69425 }}} Delete VM: {{{ root@VerificaUbuntu16:~# occi --endpoint https://cloud.cesga.es:3202 --action delete --resource https://cloud.cesga.es:3202/compute/69425 --auth x509 --user-cred /tmp/x509up_u0 --voms }}} (!) VM appears is deleted from OpenNebula dashboard === Finding world-writable files in the packages contents === {{{ root@VerificaUbuntu16:~# find / -type f -not -path "/proc/*" -not -path "/dev/*" -not -path "/sys/*" -not -path "/var/lib/lxcfs/cgroup/memory/*" -perm -o+w }}}