#######################################################################################
# Initial setup
#######################################################################################

[root@cream-42 ~]# yum clean all

[root@cream-42 ~]# yum install yum-protectbase yum-priorities

[root@cream-42 ~]# rpm -e yum-autoupdate

[root@cream-42 ~]# rpm -ivh http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm

[root@cream-42 ~]# wget http://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo -O /etc/yum.repos.d/EGI-trustanchors.repo
[root@cream-42 ~]# yum install ca-policy-egi-core fetch-crl
[root@cream-42 ~]# service fetch-crl-cron start && chkconfig fetch-crl-cron on

# install the host certificate and host key from fido@passtore.pn.pd.infn.it

[fido@passtore ~]$ ./sanctorum.py -putcrt




#######################################################################################
# SLURM installation (Master)
#######################################################################################

[root@cream-42 ~]# wget http://gimo2.pd.infn.it/rpms/slurm-2.6.2/slurm-2.6.2_sl6_x86_64.repo -O /etc/yum.repos.d/slurm-2.6.2_sl6_x86_64.repo

[root@cream-42 ~]# yum install slurm slurm-munge slurm-slurmdbd mysql-server

[root@cream-42 ~]# create-munge-key
[root@cream-42 ~]# service munge start && chkconfig munge on

[root@cream-42 ~]# adduser slurm
[root@cream-42 ~]# passwd slurm  

[root@cream-42 ~]# mkdir /var/lib/slurmctld && chown slurm.slurm /var/lib/slurmctld
[root@cream-42 ~]# mkdir /var/lib/slurmd && chown slurm.slurm /var/lib/slurmd
[root@cream-42 ~]# mkdir /var/run/slurm/ && chown slurm.slurm /var/run/slurm
[root@cream-42 ~]# mkdir /var/log/slurm && chown slurm.slurm /var/log/slurm

#tips&tricks
# 1) configuration of slurmdbd requires: 
#       create database slurm_acct_db;
#       grant all on slurm_acct_db.* TO 'slurm'@'localhost' identified by 'passwdforslurm' with grant option;
#       grant all on slurm_acct_db.* TO 'slurm'@'cream-42.pd.infn.it' identified by 'passwdforslurm' with grant option;
# 2) protect slurmdbd conffile:
#       chmod 400 /etc/slurm/slurmdbd.conf && chown slurm.slurm /etc/slurm/slurmdbd.conf
# 3) after slurmdbd configuration run
#       sacctmgr add cluster clusteroncream42

[root@cream-42 ~]# service slurm start && chkconfig slurm on
[root@cream-42 ~]# service slurmdbd start && chkconfig slurmdbd on


# set "HostbasedAuthentication yes" in /etc/ssh/sshd_config
# put WN addresses in /etc/ssh/shosts.equiv
[root@cream-42 ~]# chmod 644 /etc/ssh/shosts.equiv
[root@cream-42 ~]# ssh-keyscan -t rsa cream-04.pd.infn.it >> /etc/ssh/ssh_known_hosts
[root@cream-42 ~]# ssh-keyscan -t rsa cream-34.pd.infn.it >> /etc/ssh/ssh_known_hosts
[root@cream-42 ~]# chmod 644 /etc/ssh/ssh_known_hosts
[root@cream-42 ~]# service sshd restart

#######################################################################################
# CREAM installation
#######################################################################################

[root@cream-42 ~]# rpm -ivh http://emisoft.web.cern.ch/emisoft/dist/EMI/3/sl6/x86_64/base/emi-release-3.0.0-2.el6.noarch.rpm

[root@cream-42 ~]# yum install emi-cream-ce










#######################################################################################
# SLURM installation (WN)
#######################################################################################

[root@cream-34 ~]# wget http://gimo2.pd.infn.it/rpms/slurm-2.6.2/slurm-2.6.2_sl6_x86_64.repo -O /etc/yum.repos.d/slurm-2.6.2_sl6_x86_64.repo

[root@cream-34 ~]# yum install slurm slurm-munge

[root@cream-34 ~]# create-munge-key
[root@cream-34 ~]# scp root@cream-42.pd.infn.it:/etc/munge/munge.key /etc/munge
[root@cream-34 ~]# chmod 400 /etc/munge/munge.key && chown munge.munge /etc/munge/munge.key
[root@cream-34 ~]# service munge start && chkconfig munge on

[root@cream-34 ~]# adduser slurm
[root@cream-34 ~]# passwd slurm

[root@cream-34 ~]# mkdir /var/lib/slurmctld && chown slurm.slurm /var/lib/slurmctld
[root@cream-34 ~]# mkdir /var/lib/slurmd && chown slurm.slurm /var/lib/slurmd
[root@cream-34 ~]# mkdir /var/run/slurm/ && chown slurm.slurm /var/run/slurm
[root@cream-34 ~]# mkdir /var/log/slurm && chown slurm.slurm /var/log/slurm


[root@cream-34 ~]# service slurm start && chkconfig slurm on

# set "HostbasedAuthentication yes" in /etc/ssh/sshd_config
# put Master address in /etc/ssh/shosts.equiv
[root@cream-34 ~]# chmod 644 /etc/ssh/shosts.equiv
[root@cream-34 ~]# ssh-keyscan -t rsa cream-42.pd.infn.it >> /etc/ssh/ssh_known_hosts
[root@cream-34 ~]# chmod 644 /etc/ssh/ssh_known_hosts
[root@cream-34 ~]# printf "Host *
	Protocol 2
	RhostsRSAAuthentication yes
	RSAAuthentication yes
	PasswordAuthentication yes
	EnableSSHKeysign yes
	HostbasedAuthentication yes" > /etc/ssh/ssh_config
[root@cream-34 ~]# chmod 644 /etc/ssh/ssh_config
[root@cream-34 ~]# service sshd restart

#######################################################################################
# WN installation
#######################################################################################

[root@cream-34 ~]# rpm -ivh http://emisoft.web.cern.ch/emisoft/dist/EMI/3/sl6/x86_64/base/emi-release-3.0.0-2.el6.noarch.rpm

[root@cream-34 ~]# yum install emi-wn