Difference between revisions of "GLExec Environment Wrap and Unwrap scripts"

Revision as of 08:54, 10 June 2009

To help you master the obstacles of gLExec's security we offer some interesting How To material:

GLExec Wrap and Unwrap environment variables describes how you can wrap environment variables in such a way that they don't get wipe and unwrap them (safely) in the target account (pilot job payload) process.

Helper script to restore the environment variables previously wrapped into the environment variable GLEXEC_ENV using the glexec_wrapenv.pl script.

Intended usage:

export GLEXEC_ENV=`glexec_wrapenv.pl`
/opt/glite/sbin/glexec glexec_unwrapenv.pl -- <YOUR-COMMAND>

By default the following environment variables are NOT unwrapped:

A user can add more env vars to be excluded using either

--exclude=A --exclude=B

or

--exclude=A,B,...

Example 1:

export GLEXEC_ENV=`glexec_wrapenv.pl --exclude=MYVAR`
/opt/glite/sbin/glexec glexec_unwrapenv.pl -- <YOUR-COMMAND>

Example 2:

export GLEXEC_ENV=`glexec_wrapenv.pl`
/opt/glite/sbin/glexec glexec_unwrapenv.pl --exclude=MYVAR -- <YOUR-COMMAND>

Example 3:

export GLEXEC_ENV=`glexec_wrapenv.pl --exclude=MYVAR`
/opt/glite/sbin/glexec glexec_unwrapenv.pl -- <YOUR-COMMAND>

@@ Line 1: / Line 1: @@
+We provide a new package named [http://eticssoft.web.cern.ch/eticssoft/repository/org.glite/org.glite.security.glexec-wrapper-scripts/0.0.3/noarch/ glexec-wrapper-scripts-0.0.3-1{.noarch.rpm,_all.deb,.tar.gz}]
 To help you master the obstacles of gLExec's security we offer some interesting How To material:
-* [[GLExec TransientPilotJobs]] describes how you may go about managing a target workload's transient area.
 * [https://ndpfsvn.nikhef.nl/cgi-bin/viewvc.cgi/pdpsoft/trunk/grid-mw-security/glexec/util/wrap-env-var/ GLExec Wrap and Unwrap environment variables] describes how you can wrap environment variables in such a way that they don't get wipe and unwrap them (safely) in the target account (pilot job payload) process.