Skip to content

Commit b5f9f23

Browse files
feat(docs): improve rucio OIDC token documentation
1 parent f4f0796 commit b5f9f23

File tree

2 files changed

+23
-9
lines changed

2 files changed

+23
-9
lines changed

docs/rucio.md

Lines changed: 18 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -59,15 +59,18 @@ If the authentication was successful, you will see a message with you Rucio user
5959
[client]
6060
rucio_host = https://vre-rucio.cern.ch
6161
auth_host = https://vre-rucio-auth.cern.ch
62-
ca_cert = /etc/pki/tls/certs/CERN-bundle.pem
62+
ca_cert = /etc/pki/tls/certs/CERN-bundle.pem # Generic CA certs filepath
63+
#ca_cert = /certs/rucio_ca.pem # Use this path if you are in a VRE session
6364
auth_type = oidc
6465
account = <MY_RUCIO_ACCOUNT>
6566
oidc_audience = rucio
67+
oidc_polling = true
68+
oidc_issuer = escape
6669
oidc_scope = openid profile offline_access
6770
request_retries = 3
68-
oidc_issuer = escape
69-
oidc_polling = true
7071
auth_oidc_refresh_activate = true
72+
auth_token_file_path = /tmp/rucio_oauth.token # Path in where OIDC tokens will be stored upon authN
73+
7174

7275
[policy]
7376
permission = escape
@@ -145,9 +148,20 @@ Despite the rucio client package should install most of the software dependencie
145148
# For a Alma9 - x86_64 distrubution
146149
dnf install -y epel-release.noarch
147150
dnf upgrade -y
148-
dnf install -y wget gfal2* # To install the gfal2 libraries
151+
dnf install -y "gfal2*" # To install the gfal2 libraries
149152
dnf install -y voms-clients-java # To install the `voms-proxy-init` client
150153
```
154+
:::info[developers]
155+
The command `dnf search gfal2*` will list all the `gfal2` tools and plugins.
156+
:::
157+
158+
:::warning[Debian distributions]
159+
Gfal2 can be also installed via [`conda-forge`](https://anaconda.org/search?q=gfal2).
160+
```bash
161+
conda install -c conda-forge gfal2 gfal-util python-gfal2
162+
```
163+
:::
164+
151165
Then, install the certificates for the VOMS validation:
152166
```python
153167
# Install the LCG trust anchos for X.509 authentication - what brings the CERN-bundle.pem file needed on the rucio.cfg

package.json

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -14,9 +14,9 @@
1414
"write-heading-ids": "docusaurus write-heading-ids"
1515
},
1616
"dependencies": {
17-
"@docusaurus/core": "3.8.0",
18-
"@docusaurus/preset-classic": "3.8.0",
19-
"@docusaurus/theme-live-codeblock": "^3.8.0",
17+
"@docusaurus/core": "3.8.1",
18+
"@docusaurus/preset-classic": "3.8.1",
19+
"@docusaurus/theme-live-codeblock": "3.8.1",
2020
"@fortawesome/fontawesome-free": "^6.7.2",
2121
"@mdx-js/react": "^3.0.0",
2222
"clsx": "^2.0.0",
@@ -25,8 +25,8 @@
2525
"react-dom": "^18.0.0"
2626
},
2727
"devDependencies": {
28-
"@docusaurus/module-type-aliases": "3.8.0",
29-
"@docusaurus/types": "3.8.0"
28+
"@docusaurus/module-type-aliases": "3.8.1",
29+
"@docusaurus/types": "3.8.1"
3030
},
3131
"browserslist": {
3232
"production": [

0 commit comments

Comments
 (0)