Product Documentation and Knowledge Base - HomeDocumentation


Charon-VAXCharon-AXPCharon-PDPCharon-SSPCharon-PAR
Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 24 Next »

Table of contents

Introduction

The CHARON-AXP product is distributed in form of archive TAR.GZ files that contain RPM modules for different components. Generally it is recommended to install all the RPM modules, but it is possible to omit some RPMs if they are not needed.

CHARON installation consists of the following steps:

  • Host system checks (hardware and software) to ensure the host platform meets minimum CHARON-AXP installation requirements
  • Installation of any 3rd party material, for example, utilities required for CHARON-AXP
  • Extracting CHARON-AXP  RPM modules from the TAR.GZ archive, and their individual installation
  • Installation of CHARON-AXP license (hardware dongle or software license)
  • CHARON-AXP host system configuration. It assumes creating a specific user, network configuration etc.

Let's go through CHARON-AXP installation sequence step by step.

Back to Table of Contents

Hardware Requirements

Number of CPU cores

Each CHARON-AXP emulated CPU requires a corresponding physical core. So the total number of the host CPUs must exceed the number of emulated CPUs since some of the host CPUs must be dedicated to serving CHARON I/O operations and host operating system needs. If several CHARON instances run in parallel, the required number of CPU cores is cumulative.


The following table shows the minimum and recommended number of CPUs required for each virtual HP Alpha instance (note that each CHARON instance is able to run on 2 CPU cores hosts, but this configuration does not support emulation of all the virtual CPUs):

CHARON-AXP product

Minimum number of host CPU cores

Recommended number of host CPU cores

HP AlphaServer 400 - HP AlphaServer 4100

2

2

HP AlphaServer DS10

2

2

HP AlphaServer DS20

4

4

HP AlphaServer ES40

6

8

HP AlphaServer GS80

10

16

HP AlphaServer GS160

18

32

HP AlphaServer GS320

34

48

Hyperthreading must be switched off completely. Disable hyperthreading in the BIOS settings of the physical host or, for a VMware virtual machine, edit the virtual machine properties, select the Resources tab then select Advanced CPU. Set the Hyperthreaded Core Sharing mode to None.

CPU type and speed

Since CHARON-AXP utilizes LAHF instruction in HP Alpha CPU emulation please avoid usage of early (pre-2005) AMD64 and Intel 64 CPUs for the CHARON host system since they lack this capability. AMD Athlon 64, Opteron and Turion 64 revision D processors from March 2005 and Intel Pentium 4 G1 stepping from December 2005 are LAHF instruction capable.

Concerning CPU speed, the general recommendation is that higher CPU frequency is better since it allows better emulated HP Alpha performance. The minimum recommendation is at least 3 GHz.

Operative memory

The minimum host memory size depends on the amount of HP Alpha memory to be emulated and the number of CHARON-AXP instances to be run on one host.
The minimum host memory is calculated according to the following formula:

The minimum host memory = (2Gb +  the amount of HP Alpha memory emulated) per CHARON-AXP instance.

Disk storage

The total amount of disk space required for CHARON-AXP can be calculated as a sum of all the disk/tape image sizes plus 50 MB for the CHARON software plus space required for the normal host OS. Temporary disk storage is often needed when setting up a new server, for saveset storage, software installation kits, etc.

Ethernet adapters

CHARON-AXP networking requires dedicated host Ethernet adapters; their number must be equal to the emulated adapters to be configured in CHARON-AXP. One adapter (optionally) can be left to the host for TCP/IP networking etc. It is also possible to use virtual network interfaces, but in consideration of performance, it is recommended to use physical ones only.

For VMware-based CHARON hosts it is mandatory to use the "E1000" virtual network adapter. "E1000E" adapters are not supported.

Back to Table of Contents


Software Requirements

  • Red Hat Enterprise Linux 7.x, 64bit
  • Red Hat Enterprise Linux 6.5 - 6.8, 64bit
  • Linux Centos 7.x, 64bit
  • VMware ESXi 5.x and 6.0 (requires a supported Linux operating system on top of a ESXi virtual machine) 

Back to Table of Contents

Host system preparation

If a network-wide license (red dongle or software license) is going to be used, do the following:

  • On server side (where the network license will reside): open port 1947 for both TCP and UDP
  • On the client side, if broadcast search for remote licenses is to be used, UDP traffic from port 1947 of the license server to ports 30000-65535 of the client must be permitted
  • Both on server and client sides: set default gateway

Please consult with your Linux User's Guide on details.

If stricter firewall rules are required, it is possible to open the ports 30000-65535 and 1947 only for the "/usr/sbin/hasplmd" daemon.

Back to Table of Contents

Before installation

  1. Login as the superuser ("root") on the host system. Because Sentinel HASP runtime relies on 32-bit compatibility libraries to run on Linux, the 32-bit compatibility libraries must be installed before continuing. If the emulator host has access to a package repository, either local or remote, use the following command:

    # yum install glibc.i686

    Sometimes it is not possible to use an online repository for the installation of 32-bit glibc package. In this case the following procedure should be followed:

    1. If you have a Linux distributibe CD-ROM, insert it into CD-ROM drive

    1.1. If auto-mount is not enabled, mount the CD-ROM. Example:

    # mount /dev/sr0 /mnt

    2. If you have an ISO image of the distribution CD, you can mount it using a loopback device:

    # mount /path/to/ISO-image.iso /mnt -o loop

    3. Switch to the directory containing the packages. This directory depends on your Linux distribution. Example:

    # cd /mnt/Packages/

    4. Locate the target "glibc.i686" package:

    # ls -la glibc-*i686.rpm

    5. Install the "glibc.i686" and the packages it depends on. Example:

    # rpm -i glibc-2.17-157.el7.i686.rpm nss-softokn-freebl-3.16.2.3-14.4.el7.i686.rpm

    6. If the above command reports additional unsatisfied dependencies, add the corresponding packages to the above command line.

    7. Umount the CD-ROM or ISO file if necessary:

    # umount /mnt
  2. Create a directory for the CHARON-AXP distribution, copy the TAR.GZ files there and change to this directory as shown in the following example:

    # mkdir /charon_dist
    # cp /tmp/charon-axp-4.8-18302.el71.tar.gz /charon_dist
    # cd /charon_dist

WARNING

  • If you plan to install CHARON-VAX on the same server, both products, CHARON-AXP and CHARON-VAX, will have to be the same build number
  • If you upgrade from a previous version of CHARON-AXP, please stop all running CHARON virtual machines and uninstall CHARON products before proceeding with the installation steps described below


Back to Table of Contents

Distribution preparation

  • Extract the contents of the distribution TAR.GZ files to the current directory:

    # tar -xvzf charon-axp-<VER>-<BN>.<ZZ>.tar.gz

    where:

     

    Description

    VER

    Version of CHARON-AXP product, for example 4.8

    BN

    Build Number of CHARON-AXP product, for example 18302

    VC

    68704 - CHARON-AXP product vendor code

    ZZ

    CHARON-AXP target operating system identifier.

    For CentOS 7.x 'ZZ' value is 'el71', for Red Hat Enterprise Linux 7.x the value is 'el71', for Red Hat Enterprise Linux 6.5 to 6.8 the value is 'el65'

    Example:

    # tar -xvzf charon-axp-4.8-18302.el71.tar.gz 

    As a result, the new directory "charon-axp-<VER>-<BN>.<ZZ>" will be created.
     

  1. Switch to the directory, created by the "tar" command in the previous step:

    # cd charon-axp-<VER>-<BN>.<ZZ>

    Example:

    # cd charon-axp-4.8-18302.el71
  2. The distribution directory contains the following RPM files with CHARON-AXP product, Sentinel run-time, license support and utilities:

    File name

    Description

    charon-axp-VER-BN.ZZ.x86_64.rpmCHARON-AXP

    aksusbd-2.5-1.i386.rpm

    HASP Run-time

    charon-license-VER-BN.ZZ.x86_64.rpm

    CHARON Libraries

    charon-utils-VER-BN.ZZ.x86_64.rpm

    CHARON Utilities

    Example:

    # ls
    aksusbd-2.5-1.i386.rpm
    charon-axp-4.8-18302.el71.x86_64.rpm
    charon-license-4.8-18302.el71.x86_64.rpm
    charon-utils-4.8-18302.el71.x86_64.rpm 

    Back to Table of Contents

Installation

Issue the following command to install all the RPMs in the directory:

# yum install *.rpm

Enter "y" to agree to install all the listed packages.

Example:

Dependencies Resolved  

================================================================================
Package Arch Version Repository Size
================================================================================
Installing:
aksusbd i386 2.5-1 /aksusbd-2.5-1.i386 2.9 M
charon-axp x86_64 4.8-18302 /charon-axp-4.8-18302.el71.x86_64 260 M
charon-license
x86_64 4.8-18302 /charon-license-4.8-18302.el71.x86_64 2.9 M
charon-utils
x86_64 4.8-18302 /charon-utils-4.8-18302.el71.x86_64 1.8 M

Transaction Summary
================================================================================
Install 4 Packages

Total size: 267 M
Installed size: 267 M
Is this ok [y/d/N]: y

Check that the installation process has completed successfully.


Example:

Downloading packages:
Running transaction check
Running transaction test
Transaction test succeeded
Running transaction (shutdown inhibited)
Installing : aksusbd-2.5-1.i386 1/4
Starting aksusbd (via systemctl): [ OK ]
Installing : charon-utils-4.8-18302.x86_64 2/4
Installing : charon-license-4.8-18302.x86_64 3/4
Installing : charon-axp-4.8-18302.x86_64 4/4
Verifying : aksusbd-2.5-1.i386 1/4
Verifying : charon-license-4.8-18302.x86_64 2/4
Verifying : charon-axp-4.8-18302.x86_64 3/4
Verifying : charon-utils-4.8-18302.x86_64 4/4

Installed:
aksusbd.i386 0:2.5-1 charon-axp.x86_64 0:4.8-18302
charon-license.x86_64 0:4.8-18302 charon-utils.x86_64 0:4.8-18302

Complete!


Re-login (as "root") to apply PATH settings or execute the following command:

# . /etc/profile.d/charon.sh

Note that the "charon-utils" package has the following dependencies:

  • ethtool
  • bridge-utils
  • net-tools
  • iproute
  • NetworkManager

During "charon-utils" installation using "yum", these packages will be installed automatically if some of them are absent on the host system.

Back to Table of Contents

CHARON-AXP home directory

By default CHARON is installed in the "/opt/charon" directory. It has the following subdirectories:

Directory

Description

/bin

Contains all executables

/cfg

Contains templates of configuration files

/doc

Contains documentation

/log

Contains log files

/disks

Contains disk containers

/drivers

Contains CHARON drivers

The most important directory at this stage is the "/cfg" directory since it contains template configuration files with examples of typical configuration parameters. We will focus our attention on this subject in the next chapter.

Back to Table of Contents

Specific user account creation

Create a specific account "charon" for running CHARON:

# useradd -G disk,tape,cdrom,dialout,lock -c "Charon User" -m charon
# passwd charon

Any existing user can also be used to run CHARON. In this case issue the following command to include this existing user to specific groups:

# usermod -G disk,tape,cdrom,dialout,lock -g <user name> <user name>

Example:

# usermod -G disk,tape,cdrom,dialout,lock -g tommy tommy

Re-login to apply changes.

The specific account created above does not allow the use of physical consoles "/dev/tty<N>" as CHARON consoles. If you plan to map CHARON console to "/dev/tty<N>" use only the "root" account for running CHARON.

Back to Table of Contents

License installation

Regular HASP USB dongle

If the CHARON license is a regular USB dongle, just connect it to the host USB port.

If the CHARON host is accessed remotely, please note that regular HASP licenses cannot be displayed and used to start CHARON in this case. As workaround it is possible to install CHARON as daemon. This procedure will be described later.

Network HASP USB dongle

If the CHARON license is a network license (red USB dongle), it is possible either to connect it to the host USB port (to use it locally and provide it to other hosts on the local network at the same time) or to install it on a local network "license server" for remote access from this particular host.

If a remote license server is to be used:

  • Copy the files aksusbd-2.5-1.i386.rpm and charon-license-4.8-<build>.68704.<OS identifier>.x86_64.rpm (see above) to the server, for example to "/tmp".
  • Login as "root" on the server.
  • Switch to that directory.
  • Install the copied file using "yum".
    Example:

    # cd /tmp
    # yum install aksusbd* charon-license-*
  • Connect the network HASP dongle to the server USB port.


Network HASP (red dongles) licenses have no restrictions with respect to remote access.


Software license

If the CHARON license is a software license (SL), it is installed on the host using the following procedure:

  1. Run the hasp_srm_view utility in the following way to get the host fingerprint file ("my_host.c2v" in this example):

    # hasp_srm_view -fgp my_host.c2v
  2. Send the resulting file to STROMASYS. In return STROMASYS will provide you with a "*.v2c" file, for example "your_license.v2c".
  3. Copy the received "your_license.v2c" file to any folder on the CHARON host. Then invoke the system default web browser and enter the URL http://localhost:1947 to display the "Sentinel Admin Control Center" (ACC) web interface. This interface allows you to view and manage CHARON licenses.
  4. In the ACC perform the following steps: First select Update/Attach from the menu on the left. Then use Browse to select the file "your_license.v2c" and Apply File to install the license.
  5. Ensure that the software license is now visible in the "Sentinel Keys" menu of the ACC.


Alternatively, it is also possible to use the "hasp_update" utility for applying the ".v2c" file.

Software licenses are always network licenses, too. Hence, they have no restrictions with respect to being displayed or accessed via a remote connection.

A "Provisional" (demo) license does not require collecting fingerprint. For its installation start at step 3 in the sequence above

Back to Table of Contents

License validity verification

Check the CHARON license validity. To do that, invoke the hasp_srm_view utility to make sure that the CHARON license is visible and is correct:

  • Text of the license is displayed correctly by the hasp_srm_view utility, no error messages are shown
  • Content of the license looks correct. For example license number, major and minor versions, minimum and maximum build numbers, CHARON-AXP products and allowed hardware (CHARON-AXP models) should be checked. More details on the license content can be found in the CHARON-AXP Licensing chapter of this Guide.

Example:

# hasp_srm_view 

License Manager running at host: dlao.msc.masq
License Manager IP address: 192.168.1.129

HASP Net key detected

The Physical KeyId: 1422726238
CHARON Sentinel HASP License key section
Reading 4032 bytes

The License Number: 000.msc.sanity.tests
The License KeyId: 1422726238
The Master KeyId: 827774524
Release date: 12-SEP-2016
Release time: 15:15:15
Update number: 1
End User name: MSC
Purchasing Customer name: STROMASYS
... 


If multiple licenses are available it is possible to check them using the "-all" parameter with the hasp_srm_view utility in the following way:

# hasp_srm_view -all

(info) It it also possible to display the license content for one specific key using the "-key" parameter and specifying the Key Id (see "# hasp_srm_view -h" for more)

Reminder: If the CHARON host is accessed over a remote connection, please note that regular HASP licenses cannot be displayed and used in this case. As workaround it is possible to install CHARON as daemon. This procedure will be described later.

Troubleshooting

If the CHARON license content cannot be displayed by hasp_srm_view utility or it is incorrect, check the license is available and correctly used:

  1. Invoke the system default web browser and enter URL http://localhost:1947 to display "Sentinel Admin Control Center" (ACC) web interface.
  2. Click on "Sentinel Keys" link to open up "Sentinel Keys Section" page
  3. Make sure that one and only one CHARON HASP or SL license is present.
ProblemAction
No license is displayedMake sure that all the recommendations above about remote access to the host are fulfilled (if remote access takes place), that the HASP USB key is not broken and its LED indicator is lit (meaning that it is used by the host).
Only one License key / SL is seen and its content is incorrectContact STROMASYS to request a new license update.
Several License keys / SLs are displayedRemove all of them except the one provided by STROMASYS for just installed version of CHARON.

Removing licenses can be done by physical disconnection of the corresponding USB HASP keys from the CHARON host and physical disconnection of the network HASP keys from all hosts on local network (or by disabling remote access to network licenses from the CHARON host - see detailed explanation below).

It is also possible to disable access to network licenses if only a local license is to be used: Click on "Configuration" link to open up "Configuration for Sentinel Manager" page.


Uncheck "Allow Access to Remote Licenses" and "Broadcast Search for Remote Licenses" checkboxes from the "Access to Remote License Managers" tab, then press "Submit" button to apply changes.

It is also possible to leave several licenses available to CHARON-AXP at the same time, but in this case you have to specify it in the CHARON-AXP configuration file what license must be used.

Example:

set session license_key_id[0]=1877752571

It is also possible to have one "main" and one "backup" licence in case if the main license becomes inaccessible:

set session license_key_id[0]=1877752571 license_key_id[1]=354850588

CHARON-AXP checks its licences from time to time starting with the main license. If it is inaccessible, it attempts to access backup license

Back to Table of Contents

Network configuration

In most cases, CHARON will use a network. If so, CHARON requires a dedicated network interface with any other protocols including TCP/IP removed at the host level.

Two ways of network configuration are possible:

The first way is simplier, so use the manual approach only in absence of the "ncu" utility or inability to use it.

Configuration with NCU utility

Login as root. Type "ncu" and press Enter. The following menu will appear:

# ncu
CHARON Network Configuration Utility, STROMASYS (c) 2016 Version 1.6 

Interfaces Dedicated to State
---------- ------------ ------------
eth0       host         connected to host
eth1       host         disconnected from host

===============================VLAN===============================
==================================================================
select action:
1 - Dedicate to CHARON
2 - Release to host
3 - Create Bridge with TAPs
4 - Remove Bridge
5 - Add VLAN
6 - Remove VLAN
7 - Print status
8 - Exit
:> 1

The utility lists available network interfaces (both physical and virtual) and indicates whether they are dedicated to the host or to CHARON and whether they are currently in use by host operating system.


"ncu" offers several options:

  • Dedicate interface to CHARON (option "1")
  • Release interface to host (option "2")
  • Create a bridge between a chosen physical network interface and the Linux virtual network and create a number of virtual network interfaces (option "3")
  • Remove the Linux virtual network and all the created virtual network interfaces (option "4")
  • Add VLAN (option "5")
  • Remove VLAN (option "6")
  • Print status (option "7") - use it to display status of network interfaces and the menu shown above
  • Exit (option "8")

In the example above we see 2 network interfaces - "eth0" and "eth1", both of them are dedicated to host, but host uses only the interface "eth0".

Let's dedicate the interface "eth1" to CHARON-AXP.

Enter "1", then type "eth1" and press Enter:

Specify the interface to dedicate to CHARON:eth1
Turning off offloading for eth1.. Please wait

select action:
1 - Dedicate to CHARON
2 - Release to host
3 - Create Bridge with TAPs
4 - Remove Bridge
5 - Add VLAN
6 - Remove VLAN
7 - Print status
8 - Exit

:> 7

Now the interface "eth1" is dedicated to CHARON-AXP:

Interfaces Dedicated to State
---------- ------------ ------------
eth0       host         connected to host
eth1       CHARON       disconnected from host

===============================VLAN===============================
==================================================================
select action:
1 - Dedicate to CHARON
2 - Release to host
3 - Create Bridge with TAPs
4 - Remove Bridge
5 - Add VLAN
6 - Remove VLAN
7 - Print status
8 - Exit

Enter "8" to return to console prompt.

Now "eth1" can be used by CHARON-AXP.

Manual Configuration

Choosing a network interface

To choose an interface to be used for CHARON networking do the following:

# ifconfig
eth0 Link encap:Ethernet HWaddr 00:60:52:0A:A9:1E
... 
eth1 Link encap:Ethernet HWaddr 00:C0:26:60:FB:15 
...
eth2 Link encap:Ethernet HWaddr 00:1A:92:E1:3F:7F

Choose some interface to be used by CHARON, for example "eth1"

Designation of network interface to CHARON

To designate the chosen interface to CHARON open up the file "/etc/sysconfig/network-scripts/ifcfg-ethN" (where N is the number of the interface to be used for CHARON, in our case it is "1") and make sure that all the IP-setup related parameters are removed. The file must look like this ("eth1" is used as example):

DEVICE="eth1"
HWADDR="00:06:2B:00:6A:87"
NM_CONTROLLED="no"
ONBOOT="no"

Switching off the offload parameters

First determine what additional parameters are currently set to "on" on the host network adapter to be used by CHARON. To do that type:

# ethtool -k <device>

Example:

# ethtool -k eth1
Offload parameters for eth1:
rx-checksumming: on
tx-checksumming: on
scatter-gather: on
tcp-segmentation-offload: off
udp-fragmentation-offload: off
generic-segmentation-offload: on
generic-receive-offload: off
large-receive-offload: off

Then use ethtool to switch off all the offload parameters:

# ethtool -K <device> <parameter> off

Example:

# ethtool -k eth1
Offload parameters for eth1:
rx-checksumming: on
tx-checksumming: on
scatter-gather: on
tcp-segmentation-offload: off
udp-fragmentation-offload: off
generic-segmentation-offload: on
generic-receive-offload: off
large-receive-offload: off

In the example above let's create a temporary file containing the commands to be run on system startup, since the offload parameters must be switched off for each reboot:

ethtool -K eth1 rx off
ethtool -K eth1 tx off
ethtool -K eth1 sg off
ethtool -K eth1 gso off
ethtool -K eth1 gro off
 


Let's suppose that the name of the file is "offload_off_eth1.txt". In this case running it on system startup can be done in the following ways:

On Red Hat Linux:

cat offload_off_eth1.txt >> /etc/rc.d/rc.local

On Fedora Core:

echo '#!/usr/bin/bash' > /etc/rc.d/rc.local       (warning) Do not use double quotes, use single ones
# cat offload_off_eth1.txt >> /etc/rc.d/rc.local
# chmod 755 /etc/rc.d/rc.local 
# ln -s /usr/lib/systemd/system/rc-local.service /etc/systemd/system/rc-local.service 
# systemctl daemon-reload

Back to Table of Contents

Final steps

  • Reboot the host system to apply the offload parameters switching them to off
  • Login as user "charon"

Back to Table of Contents

Upgrade to new version

To upgrade an already installed CHARON-AXP kit to a more recent one:

  1. Ensure your license allows you to upgrade to that version. If not, please generate a C2V file and send it to STROMASYS for update. See CHARON-AXP for Linux utilities - 'hasp_srm_view' utility
  2. Prepare the new kit RPM files as it is described in "Before Installation" and "Distribution preparation" sections.
  3. Stop all running CHARON-AXP instances.
  4. Make sure that no template files (i.e. "es40.cfg.template") have been used for your specific configuration. Otherwise copy those files to some place to save.
  5. Login as "root" user.
  6. Remove the old CHARON-AXP version as described in the "CHARON-AXP for Linux deinstallation" chapter.
  7. Proceed with the instructions on the new kit installation as described in "Installation" section.
  8. Install the license for the new CHARON-AXP as described in "License installation" section.

  9. Start all the CHARON-AXP services stopped on step (3).

Back to Table of Contents

  • No labels