Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Code Block
services:
  rucio-client:
    image:
       thysk/ral-rucio-client
    environment:
       RUCIO_CFG_RUCIO_HOST: https://multi-vo-rucio-server.nubes.stfc.ac.uk:443
       RUCIO_CFG_AUTH_HOST: https://multi-vo-rucio-authserver.nubes.stfc.ac.uk:443
       RUCIO_CFG_AUTH_TYPE: x509_proxy
       RUCIO_CFG_CLIENT_VO: dtm
       RUCIO_CFG_CLIENT_CERT: /opt/rucio/etc/usercreds/usercert.pem
       RUCIO_CFG_CLIENT_KEY: /opt/rucio/etc/usercreds/userkey.pem
       RUCIO_CFG_ACCOUNT: <account name>
       RUCIO_CFG_CA_CERT: /opt/rucio/etc/web/ca-first.pem
       RUCIO_CFG_CLIENT_X509_PROXY: /tmp/x509up_u1000
    volumes:
      - type: bind
        source: <path to your x509 certificate>
        target: /opt/rucio/etc/usercert.pem
      - type: bind
        source: <path to your x509 certificate>
        target: /home/user/.globus/usercert.pem
      - type:  bind
        source: <path to your x509 key>
        target: /opt/rucio/etc/userkey.pem
      - type:  bind
        source: <path to your x509 key>
        target: /home/user/.globus/userkey.pem
      - type: bind
        source: /home/rtt84632/rucio-client/ca-first.pem
        target: /opt/rucio/etc/web/ca-first.pem
    stdin_open: true
    tty: true

...

Code Block
[common]
logdir = /var/log/rucio
multi_vo = True
loglevel = INFODEBUG

[client]

rucio_host = https://multi-vo-rucio-server.gridppnubes.rlstfc.ac.uk:443
auth_host = https://multi-vo-rucio-server.gridppnubes.rlstfc.ac.uk:443
vo = <3 character VO name><VO>
account = <your_account><ACCOUNT>
ca_cert = /opt/rucio/etc/web/ca-first.pem
auth_type = x509_proxy
#username =
#password =
client_cert = /opt/rucio/etc/usercert.pem
client_key = /opt/rucio/etc/userkey.pem
client_x509_proxy = /tmp/x509up_u1000
request_retries = 5
oidc_scope = rucio openid profile offline_access
oidc_audience = rucio
oidc_issuer = iris

You should now have a fully set up Containerised Client for your Rucio Account and VO which you can start in docker and use whenever you need it.

...