Difference between revisions of "Download Server"

From OSGeo
Jump to: navigation, search
(link to services)
 
Line 6: Line 6:
  
 
* It is known as "download.osgeo.org", and is configured to respond to that.
 
* It is known as "download.osgeo.org", and is configured to respond to that.
* It is also known as "ftp.remotesensing.org", for historical reasons.
 
 
* The upload.osgeo.org DNS name also points to it.  
 
* The upload.osgeo.org DNS name also points to it.  
 
* The downloadable tree is found in /osgeo/download on the server.
 
* The downloadable tree is found in /osgeo/download on the server.
 +
* /osgeo/download/download6 sub tree is nfs mounted from osgeo6 (currently osgeo4w and qgis in /osgeo/download point to a corresponding directory in download6)
 
* The virtual host declaration is found in /etc/apache2/sites-available/download2.osgeo.org.conf.
 
* The virtual host declaration is found in /etc/apache2/sites-available/download2.osgeo.org.conf.
 
* Logs are in /var/log/apache2/download_access_log and /var/log/apache2/download_error_log.
 
* Logs are in /var/log/apache2/download_access_log and /var/log/apache2/download_error_log.
  
 
= Access Log Viewer (awstats) =
 
= Access Log Viewer (awstats) =
 
'''awstats has not been reenabled yet on the new VM'''
 
  
 
To maintain/view the Apache access logs of download server, the debian [http://awstats.sf.net/ awstats] package has been installed on the server.  
 
To maintain/view the Apache access logs of download server, the debian [http://awstats.sf.net/ awstats] package has been installed on the server.  
Line 66: Line 64:
  
 
= Rsync =  
 
= Rsync =  
 
'''Rsync support is not yet re-enabled'''
 
  
 
The /osgeo/download area is exported for anonymous rsync read access as a module named "download".  The following can be used to pull a local copy of the gdal data tree for instance:
 
The /osgeo/download area is exported for anonymous rsync read access as a module named "download".  The following can be used to pull a local copy of the gdal data tree for instance:
Line 79: Line 75:
 
Some projects using Maven as their build tool require webdav in order to work. Here's what's required to get that setup:
 
Some projects using Maven as their build tool require webdav in order to work. Here's what's required to get that setup:
  
*Enable relevant apache modules
+
* Enable relevant apache modules
 
  sudo a2enmod dav
 
  sudo a2enmod dav
 
  sudo a2enmod dav_fs
 
  sudo a2enmod dav_fs
Line 85: Line 81:
 
  sudo a2enmod authnz_ldap
 
  sudo a2enmod authnz_ldap
  
*Add configuration for project specific location and LDAP group filtering
+
* Add configuration for project specific location and LDAP group filtering
*Add configuration for apache ldap auth
+
* Add configuration for apache ldap auth
 
In the vhost config (examples from svn server)
 
In the vhost config (examples from svn server)
 
  Include includes.d/webdav/<project>.conf
 
  Include includes.d/webdav/<project>.conf
Line 94: Line 90:
 
= Backup =  
 
= Backup =  
  
'''This is not yet re-enabled.'''
+
Nightly backups of the /osgeo/download tree are managed using rsync to /mirror/rsync/download.osgeo.org on backup.osgeo.org by root's crontab.
 
+
/home/other_backups/download directory backup.osgeo.org by a nightly cronjob, and this mirror is available at the url download2.osgeo.org if needed
Nightly backups of the /osgeo/download tree are managed using rsync to the /osgeo/backup/rsync/download.osgeo.org  
+
(NOTE: that rsync does not delete file on backup.osgeo.org, if they were removed from download.osgeo.org).
/home/other_backups/download directory backup.osgeo.org by a nightly cronjob, and this mirror is available at the url download2.osgeo.org if needed.
+
 
+
There is also an rsync to iweb.gdal.org (Frank's personal server in Montreal) in case of extreme emergency, and this is found at iweb.gdal.org/download.
+
  
 
[[Category:Infrastructure]]
 
[[Category:Infrastructure]]
 
[[Category:Services]]
 
[[Category:Services]]

Latest revision as of 10:41, 20 October 2017

There is a need for a "download server" for OSGeo that provides for bulk downloads of software.

Configuration

The OSU OSL "Download" VM is being used (140.211.15.132).

  • It is known as "download.osgeo.org", and is configured to respond to that.
  • The upload.osgeo.org DNS name also points to it.
  • The downloadable tree is found in /osgeo/download on the server.
  • /osgeo/download/download6 sub tree is nfs mounted from osgeo6 (currently osgeo4w and qgis in /osgeo/download point to a corresponding directory in download6)
  • The virtual host declaration is found in /etc/apache2/sites-available/download2.osgeo.org.conf.
  • Logs are in /var/log/apache2/download_access_log and /var/log/apache2/download_error_log.

Access Log Viewer (awstats)

To maintain/view the Apache access logs of download server, the debian awstats package has been installed on the server. with site configuration in /etc/awstats/awstats.download.osgeo.org.conf. It's updated every 4 hours by /etc/cron.d/awstats. See them now at [1]

Management

It is intended that each interested project should have a directory under /osgeo/download with appropriate permissions so a project member can manage the subdirectories and files. Scp, or sftp can be used to bring files onto the server. Someone from each project will need their LDAP OSGeo Userid shell enabled, for ssh/scp access.

Any administrator can create new project directories, and chown them to a project representative.

Contact Frank Warmerdam for overall configuration questions or about problems.

End Users

End users should be referred to downloads similarly to:

http://download.osgeo.org/gdal/gdal-1.3.2.tar.gz

Directory indexing is left on so requesting a directory will give a file list.

FTP Service

There is FTP service configured on the download.osgeo.org blade. The FTP access is served by vsftpd - secure and fastest FTP server for UNIX-like systems.

The vsftpd daemon configuration is the default one provided with Debian and is suitable for anonymous ftp only.

  • root directory: /osgeo/download
  • no access for local users
  • no write, mkdir or upload privileges

Controlling FTP Service

In order to control the vsftpd server, you need to:

  • belong to sudoers
  • login in to the download.osgeo.org host using SSH client.

Here you can see how to issue two basic commands:

  • Start
$ sudo /etc/init.d/vsftpd start
  • Stop
$ sudo /etc/init.d/vsftpd stop
  • Restart
$ sudo /etc/init.d/vsftpd restart

Rsync

The /osgeo/download area is exported for anonymous rsync read access as a module named "download". The following can be used to pull a local copy of the gdal data tree for instance:

rsync -av download.osgeo.org::download/gdal/data .

This is controlled by the rsync configuration file at /etc/rsyncd.conf. It is possible that rsyncd will not automatically restart on reboot in which case "rsyncd --daemon" as root may be necessary to start it.

Webdav

Some projects using Maven as their build tool require webdav in order to work. Here's what's required to get that setup:

  • Enable relevant apache modules
sudo a2enmod dav
sudo a2enmod dav_fs
sudo a2enmod ldap
sudo a2enmod authnz_ldap
  • Add configuration for project specific location and LDAP group filtering
  • Add configuration for apache ldap auth

In the vhost config (examples from svn server)

Include includes.d/webdav/<project>.conf

In the project.conf (example from tracsvn server

Include includes.d/ldap_auth.inc

Backup

Nightly backups of the /osgeo/download tree are managed using rsync to /mirror/rsync/download.osgeo.org on backup.osgeo.org by root's crontab. /home/other_backups/download directory backup.osgeo.org by a nightly cronjob, and this mirror is available at the url download2.osgeo.org if needed (NOTE: that rsync does not delete file on backup.osgeo.org, if they were removed from download.osgeo.org).