Skip to content
This repository was archived by the owner on May 23, 2022. It is now read-only.

Commit 7e19f85

Browse files
authored
Merge pull request #932 from brianhlin/fetch-crl-el8-timer
Update fetch-crl service instructions for EL8
2 parents 411aed2 + 5a5210d commit 7e19f85

File tree

6 files changed

+10
-9
lines changed

6 files changed

+10
-9
lines changed

docs/common/ca.md

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -215,10 +215,11 @@ To modify the times that `fetch-crl-cron` runs, edit `/etc/cron.d/fetch-crl`.
215215

216216
`fetch-crl` is installed as two different system services. The fetch-crl-boot service runs `fetch-crl` and is intended to only be enabled or disabled. The `fetch-crl-cron` service runs `fetch-crl` every 6 hours (with a random sleep time included). Both services are disabled by default. At the very minimum, the `fetch-crl-cron` service needs to be enabled and started, otherwise services will begin to fail as existing CRLs expire.
217217

218-
| Software | Service name | Notes |
219-
|:----------|:-----------------|:-------------------------------|
220-
| Fetch CRL | `fetch-crl-cron` | Runs `fetch-crl` every 6 hours |
221-
| | `fetch-crl-boot` | Runs `fetch-crl` immediately |
218+
| Software | Service name | Notes |
219+
|:----------|:-----------------------------|:-------------------------------------------|
220+
| Fetch CRL | `fetch-crl.timer` (EL8-only) | Runs `fetch-crl` every 6 hours and on boot |
221+
| | `fetch-crl-cron` (EL7-only) | Runs `fetch-crl` every 6 hours |
222+
| | `fetch-crl-boot` (EL7-only) | Runs `fetch-crl` immediately and on boot |
222223

223224
Start the services in the order listed and stop them in reverse order. As a reminder, here are common service commands (all run as `root`):
224225

docs/data/stashcache/install-cache.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -245,7 +245,7 @@ As a reminder, here are common service commands (all run as `root`) for EL7:
245245
|--------------|------------------|-----------|
246246
| XRootD | `[email protected]` | The XRootD daemon, which performs the data transfers |
247247
| XCache | `xcache-reporter.timer` | Reports usage information to collector.opensciencegrid.org |
248-
| Fetch CRL | `fetch-crl-boot` and `fetch-crl-cron` | Required to authenticate monitoring services. See [CA documentation](../../common/ca.md#managing-fetch-crl-services) for more info |
248+
| Fetch CRL |EL8: `fetch-crl.timer` <br> EL7: `fetch-crl-boot` and `fetch-crl-cron` | Required to authenticate monitoring services. See [CA documentation](../../common/ca.md#managing-fetch-crl-services) for more info |
249249

250250

251251
### Authenticated cache services (optional)

docs/data/xrootd/install-cms-xcache.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -204,7 +204,7 @@ As a reminder, here are common service commands (all run as `root`) for EL7:
204204
|--------------|------------------|-----------|
205205
| XRootD | `[email protected]` | The XRootD daemon, which performs the data transfers |
206206
| XRootD (Optional)| `[email protected]` | The cmsd daemon that interact with the different xrootd servers |
207-
| Fetch CRL | `fetch-crl-boot` and `fetch-crl-cron` | Required to authenticate monitoring services. See [CA documentation](../../common/ca.md#managing-fetch-crl-services) for more info |
207+
| Fetch CRL | EL8: `fetch-crl.timer` <br> EL7: `fetch-crl-boot` and `fetch-crl-cron` | Required to authenticate monitoring services. See [CA documentation](../../common/ca.md#managing-fetch-crl-services) for more info |
208208
| |`xrootd-renew-proxy.service` | Renew a proxy for downloads to the cache |
209209
| | `xrootd-renew-proxy.timer` | Trigger daily proxy renewal |
210210

docs/data/xrootd/install-standalone.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -201,7 +201,7 @@ The specific services are:
201201

202202
| Software | Service Name | Notes |
203203
|:------------------|:--------------------------------------|:------------------------------------------------------------------------------------------------------------|
204-
| Fetch CRL | `fetch-crl-boot` and `fetch-crl-cron` | See [CA documentation](../../common/ca.md#managing-fetch-crl-services) for more info |
204+
| Fetch CRL | EL8: `fetch-crl.timer` <br> EL7: `fetch-crl-boot` and `fetch-crl-cron` | See [CA documentation](../../common/ca.md#managing-fetch-crl-services) for more info |
205205
| XRootD | `xrootd@standalone` | |
206206
| XRootD Multi-user | `xrootd-privileged@standalone` | If running in [multi-user](#enabling-multi-user-support), start this service instead of `xrootd@standalone` |
207207

docs/other/install-gwms-frontend.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -673,7 +673,7 @@ In addition to the GlideinWMS service itself, there are a number of supporting s
673673

674674
| Software | Service name | Notes |
675675
|:-----------|:--------------------------------------|:----------------------------------------------------------------------------------|
676-
| Fetch CRL | `fetch-crl-boot` and `fetch-crl-cron` | See [CA documentation](../common/ca.md#managing-fetch-crl-services) for more info |
676+
| Fetch CRL | EL8: `fetch-crl.timer` <br> EL7: `fetch-crl-boot` and `fetch-crl-cron` | See [CA documentation](../common/ca.md#managing-fetch-crl-services) for more info |
677677
| Gratia | `gratia-probes-cron` | Accounting software |
678678
| HTCondor | `condor` | |
679679
| HTTPD | `httpd` | GlideinWMS monitoring and staging |

docs/worker-node/install-wn.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ Fetch-CRL is the only service required to support the WN Client.
4242

4343
| Software | Service name | Notes |
4444
|:----------|:--------------------------------------|:---------------------------------------------------------------------------------------|
45-
| Fetch CRL | `fetch-crl-boot` and `fetch-crl-cron` | See [CA documentation](../common/ca.md) for more info |
45+
| Fetch CRL | EL8: `fetch-crl.timer` <br> EL7: `fetch-crl-boot` and `fetch-crl-cron` | See [CA documentation](../common/ca.md) for more info |
4646

4747
!!! note
4848
`fetch-crl-boot` will begin fetching CRLS, which can take a few minutes and fail on transient errors. You can add configuration to ignore these transient errors in `/etc/fetch-crl.conf`:

0 commit comments

Comments
 (0)