Install CentOS or Scientific Linux 7

Important Note for 2019

During 2019, grid sites will be migrating to CentOS7; the current status can be found here. SLC6 Panda analysis queus are already brokered off and will be set offline on Sept 15, 2019. Tier3 sites should consider their migration to CentOS7, if not already done.

SLC6 releases should run on CentOS7 grid worker nodes without issues except for a few rare issues described in this Twiki page.

Required packages

Warning, important You will need system privileges for this. Install CentOS7 on your computer; you can choose any packages or versions you like but make sure that the following are also installed:

Note Please note that only 64-bit OS will be supported in ATLASLocalRootBase.

  • Install the CentOS7 (or SL7) desktop version.
  • Install the HEP_OSlibs metarpm; see Instructions
yum install 
yum install HEP_OSlibs
rpm --import
yum install
yum install cvmfs
#you may need to enable " user_allow_other" in /etc/fuse.conf before restarting autofs. (and after configuring /etc/cvmfs/default.local)
  • Enable user namespace so that Singularity can be used from cvmfs in unprivileged mode.
      echo "user.max_user_namespaces = 15000"  > /etc/sysctl.d/90-max_user_namespaces.conf
      sysctl -p /etc/sysctl.d/90-max_user_namespaces.conf
      • check as a normal user that setupATLAS -c centos7 works (ie Singularity containers run). If not, you may need to install an additional rpm such as libseccomp if it says that library is missing. (reference: ADCINFR-132)

Kerberos Configuration

Example, this is what it should look like with the CERN.CH configurations.

# Configuration snippets may be placed in this directory as well
includedir /etc/krb5.conf.d/

 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

 dns_lookup_realm = false
 ticket_lifetime = 24h
 renew_lifetime = 7d
 forwardable = true
 rdns = false
# default_realm = EXAMPLE.COM
 default_realm = CERN.CH
 default_ccache_name = KEYRING:persistent:%{uid}

#  kdc =
#  admin_server =
# }

  CERN.CH = {
    default_domain =
    kpasswd_server =
    admin_server =
    kdc =


Test status


  • tested on SL7.2
  • tested with bash. zsh and tcsh limited testing (mainly setup to ensure ALRB scripts work.)

Name SL6 cvmfs Installations Native SL7 Installation Comments To be done
agis DONE DONE  
asetup DONE DONE    
atlantis DONE DONE    
eiclient     EIClient is not working outside at the moment so it is not fully supported.  
emi DONE (centos7 version setup) DONE    
fax DONE DONE    
ganga DONE DONE    
lcgenv DONE DONE    
panda DONE DONE    
pod     PoD is no longer being developed and if there is no need for this tool, it will no longer be supported on SL7. Please contact if you need PoD.  
pyami DONE DONE    
rcsetup DONE DONE    
root DONE DONE    
rucio DONE DONE    
sft DONE DONE    
xrootd DONE DONE    
advancedTools gcc DONE DONE    
advancedTools git DONE DONE    
advancedTools python DONE DONE    
diagnostics checkOS DONE DONE    
diagnostics db-fnget DONE DONE    
diagnostics db-readReal DONE DONE    
diagnostics gridCert DONE DONE    
diagnostics runKV DONE DONE    
diagnostics setMeUp DONE DONE There are no SL7 compatible tutorials  
diagnostics setMeUpData DONE DONE    
diagnostics supportInfo DONE DONE    
helpMe DONE DONE    
printMenu DONE DONE    
showVersions DONE DONE    

Problems / Known Issues

Name Date Comments Resolved ?
emi 19 May 2016 fetchCA/CRL unavailable but setup works from cvmfs Fixed.
emi 19 May 2016 $X509_USER_PROXY env not set after proxy fetched. Checking if expected new behaviour. Seen also with rpms; looks normal so ignore.
emi 19 May 2016 grid-proxy-info missing Resolved, s9 Aug 2016 in v03 alpha version.
asetup 29 Aug 2016 slc5 releases are NOT failing to setup on lxplus7; ok on SL7 testbeds. Fixed.
emi 29 Aug 2016 generating a novoms proxy with grid-proxy-init and then obtaining a voms one from it with noregen results proxy type=proxy which seems to fail to ping the pandaServers (gridCert diagnostics) Fixed in preview-01
rucio 30 Aug 2016 rucio upload generates error messages failing but actually uploads file - only seen on tcsh Fixed in latest rucio
ganga 30 Aug 2016 ganga startup fails to load GangaPanda template; kerberos_sspi module and tries to load dq2. Fixed.
-- AsokaDeSilva - 2016-03-23</verbatim>
Edit | Attach | Watch | Print version | History: r28 < r27 < r26 < r25 < r24 | Backlinks | Raw View | Raw edit | More topic actions
Topic revision: r28 - 2019-08-29 - AsokaDeSilva
This site is powered by the TWiki collaboration platform Powered by PerlCopyright © 2008-2019 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback