CAPKI installation

[Michael A. Lowry]

We run the CAPKI setup program on Linux like this:

setup install caller=automic instdir=/opt/uc4 env=user veryverbose

We have discovered that this causes the following lines to be added to the .profile of the installing user:

CALIB="/opt/uc4/lib"; export CALIB
CABIN="/opt/uc4/bin"; export CABIN
CASHCOMP="/opt/uc4"; export CASHCOMP

I have two observations:

1. CALIB and CABIN point to non-existent directories.
2. CAPKIHOME is not added to the .profile file.

Can either of these situations cause a problem?

[Olgun Onur Ozmen]

Hi Michael,

Create a folder /opt/uc4/capki under "user" and give it this path. you will see it created. But I personally do not recommend capki. while capki is installed, the agent, wp/cp and servicemanager cannot provide stability between themselves. I always encountered problems and deleted it.

It should definitely be as follows.

-- .profile & 

CALIB="/opt/automic/capki/lib"; export CALIB

CABIN="/opt/automic/capki/bin"; export CABIN

CASHCOMP="/opt/automic/capki"; export CASHCOMP

CAPKIHOME="/opt/automic/capki/CAPKI"; export CAPKIHOME

 

-- .bash_profile

export CASHCOMP=/opt/automic/capki

export CAPKIHOME=$CASHCOMP/CAPKI

export CALIB=$CASHCOMP/lib

export CABIN=$CASHCOMP/bin

Have a nice day.

------------------------------
Olgun Onur Ozmen
https://www.linkedin.com/in/olgunonurozmen/
------------------------------

[Michael A. Lowry]

Would someone from Broadcom be willing to provide answers?

1. Why does the installer add CALIB and CABIN if they are not needed, and why set to non-existent directories?
2. Is CAPKIHOME needed? If so, why is it not added by the installer?

[Michael A. Lowry]

I opened a ticket with Broadcom Support in the hopes of getting answers to these questions. I'll report my findings here.

[Stephan Mannert]

Hi Michael,

we install CA.PKI on Linux/AIX completely isolated in a separate directory and without any changes in .profiles with "env=none".

That way you can install specific and multiple versions of CA.PKI on a single system and the deinstallation is easy (Deletion of the directory)

The only variable that needs to be set is CAPKIHOME before you start the service-manager:

("uc4systemname" is a placeholder):

./setup install caller=uc4systemname veryverbose instdir=/opt/uc4/uc4systemname/capki env=none

Linux - System-D Unitfile

/etc/systemd/system/uc4_uc4systemname.service

[Unit]
Description=UC4 smgr and executor for uc4systemname
After=network-online.target

[Service]
Environment="CAPKIHOME=/opt/uc4/uc4systemname/capki/CAPKI"
Type=simple
Restart=always
RestartSec=30
TimeoutSec=5min
IgnoreSIGPIPE=no
KillMode=process
User=uc4user
WorkingDirectory=/opt/uc4/uc4systemname/smgr/bin
ExecStart=/opt/uc4/uc4systemname/smgr/bin/ucybsmgr UC4SYSTEMNAME

[Install]
WantedBy=multi-user.target

AIX - Startskript:

/opt/uc4/uc4systemname/startuc4.sh

uc4pid=`ps -ef@ Global|egrep "/opt/uc4/uc4systemname/smgr/bin/ucybsmgr UC4SYSTEMNAME$"|grep -v grep | awk {'print $3'}`
if [ $uc4pid ]
then
  echo "UC4 Service Manager mit PID $uc4pid wird gestoppt..."
  kill $uc4pid
fi

su - uc4user -c "export CAPKIHOME=/opt/uc4/uc4systemname/capki/CAPKI;cd /opt/uc4/uc4systemname/smgr/bin;nohup /opt/uc4/uc4systemname/smgr/bin/ucybsmgr UC4SYSTEMNAME >/dev/null 2>&1 &"

Service-Manager Log:

20240526/040733.128 - U00022071 CAPKI Library available.

Perhaps this helps ;)

Best regards

Stephan

[Michael A. Lowry]

@Stephan Mannert: That's very helpful.

Right now, we're using just one CAPKI directory, and this approach limits our flexibility. I.e., we cannot upgrade the CAPKI installation used by one Service Manager without potentially impacting others. Your approach is probably better.

It's also interesting that setting just CAPKIHOME is sufficient.

I am still waiting for an official answer to my questions from Broadcom.

Thanks!

[Michael A. Lowry]

This morning, Broadcom Support provided the following update:

We will remove the unneeded environment variables CALIB and CABIN and set CAPKIHOME, which is needed by our Service Manager.

This confirms the observations of @Olgun Onur Ozmen & @Stephan Mannert. It's good to have clarity on this.