CDA SC510 Betriebsanweisung

Project no. IST-033576XtreemOSIntegrated ProjectBUILDING AND PROMOTING A LINUX-BASED OPERATING SYSTEM TO SUPPORT VIRTUALORGANIZATIONS FOR NEXT GENERAT

IST-033576 D2.1.4Once done, user can specify values for the following fields of this structure inorder to tailor the checkpoint to his need :• cr_scope

D2.1.4 IST-033576• EPERM: One or more of the target processes are not checkpointableby the current user• EBADF : The destination (args->cr_fd) is n

IST-033576 D2.1.4• EIO: Problem writing the checkpoint output.• ENOSPC: Out of space on filesystem while writing the check-point2.4.4 CallbackIf the us

D2.1.4 IST-033576• flags: used to specify whether the callback should be executed in a threadcontext (CR_THREAD_CONTEXT) or in a signal context (CR_SIG

IST-033576 D2.1.4.tar.gz, which can be downloaded from https://gforge.inria.fr/-frs/download.php/3648/xos-nss-pam-0.04.tar.gz.3.2.1 PrerequisitesThe f

D2.1.4 IST-033576yjegou: tar xzvf xtreemos-nss-pam-0.04.tar.gzyjegou: ls -Fxtreemos-nss-pam-0.04/ xtreemos-nss-pam-0.04.tar.gzyjegou: cd xtreemos-nss-

IST-033576 D2.1.4reference to the pam_xos module can be added to the /etc/pam.d/su config-uration file of su in order to add xos authentication capabili

D2.1.4 IST-033576-----You are about to be asked to enter information that will beincorporated into your certificate request.What you are about to ente

IST-033576 D2.1.44E:7B:C5:84:07:26:B3:2E:51:06:5C:2A:CE:DC:53:11:FB:20:A1:62X509v3 Authority Key Identifier:keyid:4E:7B:C5:84:07:26:B3:2E:51:06:5C:2A:

D2.1.4 IST-0335763.3.2 User certificate generationGenerate a user certificate request:yjegou: openssl req -new -days 365-keyout security/private/XtreemO

Revision history:Version Date Authors Institution Section affected, comments0.1 03/10/07 Yvon Jégou INRIA Initial draft0.2 31/10/07 Pascal Le Métayer

IST-033576 D2.1.4-CAkey security/private/XtreemOS-ca.key-CAcreateserial -days 365Signature oksubject=/C=FR/ST=Bretagne/L=Rennes/O=INRIA/OU=IRISA/CN=Yv

D2.1.4 IST-033576Modulus (1024 bit):00:c7:12:4a:60:2d:62:bb:a2:0c:1a:f9:52:30:d6:31:78:52:df:fe:15:4c:4f:55:5d:81:d8:fa:c3:41:f9:14:e2:51:e9:33:80:d1:

IST-033576 D2.1.4Signature oksubject=/C=FR/ST=Bretagne/L=Rennes/O=INRIA/OU=IRISA/CN=Yvon Jegou/emailAddress=Yvon.Jegou-at-irisa.fr/CN=28216Getting CA

D2.1.4 IST-033576pam_xos.conf configuration file: The certificate verification chain for pam_-xos.so PAM plugin is configured in file /etc/xos/pam_xos.conf,

IST-033576 D2.1.4pam_xos.c:119: PAM: configure file is: /etc/xos/pam_xos.conf=============== PAM configure data ===============work mode: Use external

D2.1.4 IST-033576drwxrwxrwt 4 root root 4096 Oct 31 09:31 .drwxr-xr-x 20 root root 4096 Oct 31 08:24 ..drwxrwxrwt 2 root root 4096 Oct 31 08:24 .ICE-u

IST-033576 D2.1.4pam_xos.c:119: PAM: configure file is: /etc/xos/pam_xos.conf=============== PAM configure data ===============work mode: Use external

D2.1.4 IST-033576root: ./xtreemos-nss-pam-0.04/src/test/pam_app_conv-pem ~yjegou/.xos/firstproxy.pemvo = [xtreemos], role = [admin]pam_xos.c:239: PAM:

IST-033576 D2.1.4pam_xos.c:613: PAM:fail in mapping connect Oops: Permission denied If the pam_app_conv test program produces this error,the amsd serv

D2.1.4 IST-0335763.6.2 ConfigurationPAM: XOS-ssh is a PAM-aware operating system service. This service readsits PAM configuration from file /etc/pam.d/ss

D2.1.4 IST-033576Executive SummaryThis document presents a prototype of the basic version of Linux-XOS, the Xtreem-OS flavor for a single PC. This prot

IST-033576 D2.1.43.6.3 Running ssh-xosStart sshd-xos service:root: /usr/local/sbin/sshd-xos -d -f /usr/local/etc/sshd_config-xosdebug1: sshd version X

D2.1.4 IST-033576xos_buffer_to_keyring: xos_buffer_to_keyring:keyctl_updatepam_xos.c:510: PAM:Can not store proxy in keyring !debug1: PAM: establishin

IST-033576 D2.1.4root 25731 25730 0 17:05 pts/2 00:00:00 bashroot 25748 25731 0 17:05 pts/2 00:00:00 ./xos_amsd -droot 25906 14038 0 17:29 pts/7 00:00

D2.1.4 IST-033576VOs. It is a proof-of-concept of extending standard Linux to treat VO users aslocal accounts in a transparent and application-indepen

IST-033576 D2.1.4A Berkeley Lab Checkpoint/Restart (BLCR) Admin-istrator’s GuideThis guide (extract from the doc directory of the BLCR tarball) descri

D2.1.4 IST-033576We strongly recommend that you configure and build BLCR in a directoryother than the one containing the BLCR source code (use of some

IST-033576 D2.1.4A.1.4 Building 32-bit application support on a 64-bit platformBLCR’s build logic is capable of building both 64-bit and 32-bit librar

D2.1.4 IST-033576tests that say "restart/timeout" then you should first try increasing the timeout asfollows (assuming the kernel modules hav

IST-033576 D2.1.4You may wish to set up your system to load these modules by default at boottime. The exact mechanism for doing so differs between Lin

D2.1.4 IST-033576% s e t e n v PATH ${PATH } : PREFIX / b i n% s e t e n v MANPATH ${MANPATH} : PR EFIX / man% s e t e n v LD_LIBRARY_PATH $ {LD_LIBRA

IST-033576 D2.1.4counts. The next implementation will focus on the enforcement of local policiesagainst VO users, by incorporating new isolation and v

IST-033576 D2.1.4% r p m b u i l d −−r e b u i l d b l c r −X. Y. Z−N. s r c . rpm −−t a r g e tARCHreplacing blcr-X.Y.Z-N.src.rpm with the correct fil

D2.1.4 IST-033576B Berkeley Lab Checkpoint/Restart (BLCR) User’sGuideB.1 About Berkeley Lab Checkpoint/RestartCheckpoint/Restart allows you to save on

IST-033576 D2.1.4Unfortunately BLCR has not yet been integrated with many batch systems.Support for serial jobs is available through SGE. See this rep

D2.1.4 IST-033576% c r \ _ c h e c k p o i n t −−h e l pIf cr_checkpoint cannot be found, you need to modify your PATH to includethe directory where c

IST-033576 D2.1.4The above examples set the PATH, MANPATH and LD_LIBRARY_PATHvariables in your current shell only. It is strongly recommended that you

D2.1.4 IST-033576• Others - this list is not exhaustive. If you have questions about specificresources, see the section "For more information"

IST-033576 D2.1.4% env LD_PRELOAD=PREFIX / l i b / l i b c r . so . 0 : l i b p t h r e a d .so . 0 y o u r _ e x e c u t a b l e [ a r g u m e n ts ]

D2.1.4 IST-033576or session leader. When in doubt, try using the ’-j’ option to ’ps’ to show PGIDand SID columns. The –tree flag to cr_checkpoint reque

IST-033576 D2.1.4• Files must exist at their original paths and have permissions that per-mit them to be opened for the original access modes. It is p

D2.1.4 IST-033576B.5 Checkpointing/restarting an MPI applicationThe best source of information on dealing with any BLCR-aware MPI implemen-tation is t

D2.1.4 IST-033576Contents1 Introduction 52 Kernel Checkpointer 52.1 Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62.2 Insta

IST-033576 D2.1.4B.6 For more informationFor more information on Berkeley Lab Checkpoint/Restart for Linux, visit theproject home page: http://ftg.lbl

D2.1.4 IST-033576References[1] XtreemOS Deliverables - D2.1.2: Design and Implementation of Node-levelVO Support.[2] XtreemOS Deliverables - D2.1.3: D

IST-033576 D2.1.4A.1.5 Compiling BLCR . . . . . . . . . . . . . . . . . . . . . . 34A.1.6 Testing your build (optional, but recommended) . . . . . . 3

D2.1.4 IST-0335761 IntroductionThe current prototype of Linux-XOS consists of two major components: the ker-nel checkpoint/restart mechanisms and the

IST-033576 D2.1.42.1 PrerequisitesBLCR consists of three kernel modules, some user-level libraries, and severalcommand-line executables. No kernel pat

D2.1.4 IST-0335762.4 Checkpoint/restart APIThe API described in D2.1.3 will become available with the next release. There-fore, checkpoint/restart API