These are notes on how to build [[OpenAFS]] from source code. Note that [[OpenAFS]] pre-built binaries are available on the [[OpenAFS]] site and are available as prebuilt packages for many platforms. These instructions may be useful for you if you need to build [[OpenAFS]] from source. ### Requirements #### Tools - cvs client - autoconf - automake - perl 5.6 - gcc - GNU make - lex/yacc (flex/bison) #### Libraries - libc - kerberos, optional, but recommended - ncurses - kernel headers The Kerberos development libraries are required if you are going to build with Kerberos 5 support. The [[OpenAFS]] legacy kaserver is deprecated. If you are building on Debian, you can get the required software with the following apt-get commands. apt-get install cvs autoconf automake make gcc flex bison apt-get install libc6-dev libkrb5-dev libncurses5-dev linux-headers-$(uname -r) ### Getting the Source Code from CVS You can get development snapshots from the [[OpenAFS]] CVS repository . The CVS tree may not always have code which can currently be built. While every effort is made to keep the head of the tree buildable, you may at any time find yourself between commits and hence have a tree which does not build, or worse, causes more serious problems. First you need to run cvs login. This step is normally only done once. A ~/.cvspass file will be created for additional checkouts. cvs -d :pserver:anonymous@cvs.openafs.org:/cvs login password is anonymous Before doing a CVS check out, you'll need to decide which branch you want to check out. The trunk is for bleeding edge development and may not even build. The current stable series is openafs-stable-1\_4\_x and the current development work is going on the openafs-devel-1\_5\_x branch. See the CVSWeb interface at for the full list of available branches and tags. To check out the stable branch: cvs -d :pserver:anonymous@cvs.openafs.org:/cvs checkout -r openafs-stable-1_4_x -d openafs-stable-1_4_x openafs This will create a source tree in a directory named openafs-stable-1\_4\_x. To check out the development branch: cvs -d :pserver:anonymous@cvs.openafs.org:/cvs checkout -r openafs-devel-1_5_x -d openafs-devel-1_5_x openafs This will create a source tree in a directory named openafs-devel-1\_5\_x. ### Building the Binaries #### Modern Paths To build [[OpenAFS]] with Kerberos 5 support, and with a custom install path. Be sure to run ./regen.sh to generate the configure script. cd openafs-stable-1_4_x. ./regen.sh ./configure --prefix=/usr/local/openafs --with-krb5-conf=(full path to krb5-config script) make sudo make install #### Transarc Paths By convention, [[OpenAFS]] server binaries and related files are located in /usr/afs, and client binaries and related files are located in /usr/vice. These are known as Transarc paths, so called because that is is the convention used by Transarc, the company that first commercialized AFS. To build with the Transarc paths, specify --enable-transarc-paths as a configure option. There are a couple of side effects that you need need to be aware of when building with the --enable-transarc-paths mode. First of all, the typical make install target does not work in this mode. Instead the 'make dest' target is used to build a directory of the binaries to be copied to the target system. Secondly, the packaging targets are not executed, so for example the redhat spec file is not generated to build the rpms. To build with Keberos support (recommended), you'll need to have the Keberos development libraries, and if available for your platform, the krb5-config. You will need the full path the the krb5-config script. For example $ which krb5-config /usr/bin/krb5-config To build [[OpenAFS]] with Kerberos 5 support and the Transarc path conventions: ./configure --enable-transarc-paths --with-krb5-conf=/usr/bin/krb5-config make make dest If all goes well, then the binaries are located in a platform sub-directory, the name of which is platform specific, for example 'i386\_linux26/dest'. The 'make install' command does not work with Transarc paths. You will have to manually copy the binaries into place after running make dest. For more information, see the Quick Start Guide for Unix on the [[OpenAFS]] documentation page. # cp -r i386_linux26/dest/root.client/usr/vice/etc/modload /usr/vice/etc # cp i386_linux26/dest/root.client/usr/vice/etc/afsd /usr/vice/etc # cp -r i386_linux26/dest/bin /usr/afsws # cp -r i386_linux26/dest/etc /usr/afsws # cp -r i386_linux26/dest/include /usr/afsws # cp -r i386_linux26/dest/lib /usr/afsws # cp -r i386_linux26/dest/root.server/usr/afs/* /usr/afs ### Running the Test Suite [[OpenAFS]] includes a suite of basic test scripts in the src/tests directory. The tests directory also contains a utility called afs-newcell.pl to create a test cell on a single host. You will need to already have a kerberos server running with an AFS principal and an admin principal. You should also have a partitions mounted as /vicepa and /vicepb for the test volumes. See the src/tests/afs-newcell.pl for details. The paths to the binaries and AFS configuration is are written to src/tests/OpenAFS/Dirpaths.pm when the tests are built. This means you must run 'make all' in src/tests before attempting to use afs-newcell.pl. The afs-newcell.pl program must be run as root. cd src/tests make all sudo perl afs-newcell.pl The afs-newcell.pl program will prompt for the required cell configuration unless started with the --batch options. You will need to specify the name of your new cell, the host name of this machine, the target partition id (a for /vicepa), and the username of the AFS administrator (which must be named 'admin' for the current pts tests). You will also need to provide the type of Kerberos server, the name of the Kerberos realm (which can be different than the AFS cell name), and the location of the keytab file that contains the AFS server encryption key and the admin's encryption key. Finally, you may provide any server options for the AFS database and fileservers. Server options: What server name should be used? [host.domain.com] What cellname should be used? [testcell] What vice partition? [a] What administrator username? [admin] Kerberos options: Which Kerberos is to be used? [MIT] What Kerberos realm? [TESTCELL] What keytab file? [/usr/afs/etc/krb5.keytab] Database Server options: ptserver options: [] vlserver options: [] Fileserver options: Use DAFS fileserver (requires DAFS build option)? (yes/no) [no] fileserver options: [] volserver options: [] salvageserver options: [] salvager options: [] The parameters are optionally saved to a script called run-afs-newcell.sh, in case you need to re-run the setup. Also, the Kerberos parameters for the new cell are saved in the file run-tests.conf. If all goes well, the servers should be running and the client loaded. You should be able to see your new cell at /afs/testcell (or whatever you called your cell). Your cell will have a few, empty test volumes that you should be able to see with a vos listvldb. Run the run-tests script to run the AFS test suite. The program can be run as an ordinary user. The keytab file specified when afs-newcell was run will be used to authenticate the admin user for the tests. ./run-tests -all The output will look something like this, Authenticating to cell testcell. ... Running creat1 Running mkdir1 Running mkdir2 .... ----------------------------------------------------------- Failed test(s) were: write-large write-ro ... -- [[MichaelMeffie]] - 26 Mar 2008