Installation

The OnDemand host machine needs to be setup similarly to a login node. This means that it will need:

• RedHat/RockyLinux/AlmaLinux 8+ or Ubuntu 24.04 & 26.04 or Debian 12 & 13 or Amazon Linux 2023

• the resource manager (e.g., Torque, Slurm, or LSF) client binaries and libraries used by the batch servers installed

• configuration on both OnDemand node and batch servers to be able to submit, delete and get status for jobs from the command line

• signed SSL certificate with corresponding intermediate certificate for your advertised OnDemand host name (e.g., ondemand.my_center.edu)

Adding Open OnDemand SELinux policies is optional for RHEL systems. Open OnDemand, by default, expects Apache to have SSL enabled by securing your Apache.

• 1. Install Software
  • 1. Enable Dependencies
  • 2. Add repository and install
  • 3. Start services
  • 4. Verify installation
  • Building From Source
• 2. OOD Authentication
  • Apache Modules and the OOD Portal Generator
  • Setup User Mapping
  • Configure Logout
• 3. Authentication Solutions
  • OpenID Connect
  • OpenID Connect with Dex
  • Shibboleth
  • CAS
  • OpenID Connect with KeyCloak on RHEL7
  • Two Factor Auth using Duo with Keycloak
  • SAML Authentication with Active Directory Federated Services (ADFS) and mod_auth_mellon
  • NSF ACCESS
  • Insecure Options
• 4. Secure Apache httpd
  • 1. Edit the Open OnDemand Portal ood-portal-generator-configuration file
  • 2. Update CA (Dex Users only)
  • 3. Restart the Apache service for the changes take effect.
• 5. Add SELinux
  • SELinux
  • SELinux after Updates
  • firewalld

• https://github.com/OSC/ondemand/issues/new