wiki:OSG
Last modified 6 years ago Last modified on 10/25/11 15:54:05

Exploring OSG

OSG is a consortium of software, service and resource providers and researchers, from universities, national laboratories and computing centers across the U.S., who together build and operate the OSG project. The project is funded by the NSF and DOE, and provides staff for managing various aspects of the OSG. OSG is greatly involved with providing inter-operable systems for research communities in the areas of high energy physics (for eg., ATLAS, CMS programs of the LHC project) as also in biology, medicine, chemistry and education out-reach programs.

OSG has detailed documentation on its operations, services, policies, faqs, and help.

The foremost thing to achieve in ultimately making use of OSG resources is to obtain an account in one of the many Virtual Organizations (VOs) affiliated to OSG.

Of interest to UAB are two VOs, OSG and Engage
Engage VO is the result of the partnership of Renaissance Computing Institute (RENCI) and Clemson University. This VO is aimed more towards researchers other than the high energy physics domain and users new to OSG.
OSG VO is a general-purpose VO for individuals or small groups intending to use OSG for independent research.

Engage VO

Engage User Guide details the following steps:

  1. First is to get a Personal certificate from DOEGrids. Two ways - through browser or command-line through cert scripts package.
    1. Browser
      • First get a DOE Grid CA Chain, so that your browser recognizes and trusts this particular CA and does not prompt again in the future.
      • Obtain the Personal certificate
      • Import the certificate into the browser
      • Export/Backup? Certificate to local machine
        NOTE: For Mozilla Firefox - 3.0.5
        Go to Edit -> Preferences -> Advanced -> Encryption tab -> View Certificate -> Your Certificates tab -> Backup. Here will be the DOE Grid CA in .p12 extension. Backup the cert onto your desktop and copy it to the machine you will be launching your jobs from
      • Convert the key pair for use by Globus ''grid-proxy-init'' by the following two commands:
        openssl pkcs12 -in my-cert.p12 -clcerts -nokeys -out $HOME/.globus/usercert.pem  
        openssl pkcs12 -in my-cert.p12 -nocerts -out $HOME/.globus/userkey.pem 
        chmod go-rw ~/.globus/userkey.pem 
        chmod go-r ~/.globus/usercert.pem  
        
    2. Command-line, by installing the certificate scripts package
  2. Join Engage VO. This registration is achieved in 2 phases.
    • Phase I - fill in your details, Name, Institution, email ID. As a result you will get an email and a link to phase II in the confirmation email. Follow the link and proceed to Phase II
    • Phase II - Read the Grid and VO AUP and accept
    • Now we become a member of the group Engage
  3. After becoming a member of Engage VO, to get an account on RENCI submit host, engage-submit.renci.org, send an email to engage-team@…, requesting the same.
  4. Follow the link, you get in the return email, fill in the details and Accept. You will again get a confirmation email from RENCI with the user name you requested and would have to wait 2 hours before you can log into the submit host

OSG Certificates, Security, and Policies

The OSG generally accepts X509 certificates issued by Certification Authorities accredited by the IGTF from many different locations around the world. Most people working with OSG may obtain certificates from the DOEGrids CA and these instructions apply only to DOEGrids. Its worthwhile noting the DOE Certificate Policy and Certification Practice Statement (pdf attached). Of interest are section 1. Introduction, section 4.Operational Requirements and Appendix N. Open Science Grid (OSG) RA Operational Procedures.

Also to note is the assertion of user identity by OSG. OSG stipulates that You'll also need to list a sponsor, an individual known to the RA who has met you in person and can vouch for your identity. Your VO can help you identify the appropriate sponsor. If you have trouble identifying a known sponsor then use your supervisor as your sponsor and be sure to mention the name of your home institution in the -reason message of the cert-request script (or "Comments" field of the web form).

Further information on certificates and on how to get a personal/host certificate is explained in the following links:
https://twiki.grid.iu.edu/bin/view/Documentation/CertificateWhatIs
https://twiki.grid.iu.edu/bin/view/ReleaseDocumentation/UserCertificate
https://twiki.grid.iu.edu/bin/view/Documentation/CertificateGet
https://twiki.grid.iu.edu/bin/view/ReleaseDocumentation/GetGridCertificates#Certificate_scripts_package

When the above requirements are fulfilled, we are ready to install the OSG Client software and get started on our job submissions.

OSG client software comes with Condor-G and Globus toolkit. So, the jobs can be submitted with either condor commands or globus commands to OSG resources.

Putting Cheaha on OSG

In the fall of 2011 we began work to add Cheaha to OSG as a compute element. This will be a resource for the SURAgrid VO and enable people at UAB to harness additional compute power on demand.

Configuring a ROCKS cluster with SGE is as an OSG compute element is being documented on the OSG Compute Element page.

Attachments

  • DOEGridsCP-CPS.pdf (654.9 KB) - added by ppreddy@… 9 years ago. PDF describing in detail the DOE Grids Certificate Policy and Practice Statements and the DOE authorized Registrion Authority (RA) practices in particular