Page Comparison

...

Getting started as a new user

Account creation

1. To get set up with a Rucio account please create a ticket on GGUS. Please fill in the form with a subject, description, ticket catagory - service request, priority - less urgent, and under routing information please select Assign to support unit - Rucio). Within the ticket description please include:

   • Desired Username (usually initials and surname e.g. John Doe would have jdoe)

   • Your email

   • Name of the experiment / VO you are part of

   • The subject of your eScience certificate

If you want password access we can organise a video call to explain or take sensitive information if you prefer
In Terms of testing you can join the test VO (dteam) to try Rucio as a service and its capabilities.
Please note that we are working on allowing Rucio accounts to be created and accessed with IAM services, and EGI Check-in, but currently only support x509 and password access.

1. Once our team has this information we will create you a Rucio account.

Docker container setup

1. You will then need to install a containerised client on your computer.

   • Install Docker to run the container

   • https://www.docker.com/get-started (for windows users I would recommend using WSL2)

   • Follow the docker instructions to ensure it is running correctly.

   • Using openSSL you will need to split your grid certificate bundle into the certificate and key:

   Code Block
   $ openssl pkcs12 -in <*.pfx> -out /sensible/path/usercert.pem -clcerts -nokeys $ openssl pkcs12 -in <*.pfx> -out /sensible/path/userkey.pem -nocerts -nodes

2. Run the Docker container using the following command:

When running the block of code below please replaces all items within <> with the relevent information. This uses a Rucio container that was setup for the EGI communities.

...

The UK eScience CA 2B can be obtained here.

Download the OpenSSL certificate for /C=UK/O=eScienceCA/OU=Authority/CN=UK e-Science CA 2B
and append the IGTF-accredited UK eScience CA Certificates.

This can be done easily using

curl <URL for CA 2B cert> > ca-first.pem && curl <URL for CA root cert> >> ca-first.pem

The 3 character VO name will be provided to you when you sign up for a Rucio account.

1. Run the following commands inside the docker container to finalise set up:

$ cp /opt/rucio/etc/usercert /opt/rucio/etc/usercert.pem
$ cp /opt/rucio/etc/userkey /opt/rucio/etc/userkey.pem
$ chmod 600 /opt/rucio/etc/usercert.pem
$ chmod 400 /opt/rucio/etc/userkey.pem

...