Installation

The OnDemand host machine needs to be setup similarly to a login node. This means that it will need:

• RedHat/CentOS 7+ or Ubuntu 20.04-22.04

• the resource manager (e.g., Torque, Slurm, or LSF) client binaries and libraries used by the batch servers installed

• configuration on both OnDemand node and batch servers to be able to submit, status, and delete jobs from command line

• signed SSL certificate with corresponding intermediate certificate for your advertised OnDemand host name (e.g., ondemand.my_center.edu)

Adding Open OnDemand SELinux policies is optional for RHEL systems. Open OnDemand, by default, expects Apache to have SSL enabled by securing your Apache. Sites may reconfigure their deployment to allow for plain text traffic see FIXME-LINK-NEEDED.

• 1. Install Software
  • 1. Enable Dependencies
  • 2. Add repository and install
  • 3. Start services
  • 4. Verify installation
  • Building From Source
• 2. Authentication
  • Overview
  • OpenID Connect
  • OpenID Connect with Dex
  • Shibboleth
  • CAS
  • OpenID Connect with KeyCloak on RHEL7
  • Two Factor Auth using Duo with Keycloak
  • SAML Authentication with Active Directory Federated Services (ADFS) and mod_auth_mellon
  • NSF ACCESS
  • Other Insecure Options
• 3. Secure Apache httpd
  • 1. Edit the Open OnDemand Portal ood-portal-generator-configuration file
  • 2. Update CA (Dex Users only)
  • 3. Restart the Apache service for the changes take effect.
• 4. Add SELinux
  • SELinux
  • SELinux after Updates
  • Firewall

Building From Source

Building from source is left as an exercise to the reader.

It’s not particularly difficult to build the code, but installing it with all the various files is. Should you be interested, review the Dockerfile and packaging specs for what would be involved.

• https://github.com/OSC/ondemand/blob/master/Dockerfile

• https://github.com/OSC/ondemand/tree/master/packaging

If you’d like a package built for a system that we don’t currently support, feel free to open a ticket!

• https://github.com/OSC/ondemand/issues/new