This document is for an old release of Galaxy. You can alternatively view this page in the latest release if it exists or view the top of the latest release's documentation.
Connecting to a Cluster¶
Galaxy is designed to run jobs on your local system by default, but it can be configured to run jobs on a cluster. The front-end Galaxy application runs on a single server as usual, but tools are run on cluster nodes instead.
A general reference for the job configuration file is also available.
Distributed Resources Managers¶
Galaxy is known to work with:
- TORQUE Resource Manager
- PBS Professional
- Open Grid Engine
- Univa Grid Engine (previously known as Sun Grid Engine and Oracle Grid Engine)
- Platform LSF
- Galaxy Pulsar (formerly LWR)
If you do not already have a DRM, Pulsar is available which does not require an existing cluster or a shared filesystem and can also run jobs on Windows hosts.
Installing and configuring your cluster hardware and management software is outside the scope of this document (and specific to each site). That said, a few pitfalls commonly encountered when trying to get the user Galaxy runs as (referred to in this documentation as
galaxy_user) able to run jobs on the DRM are addressed here:
- The host on which the Galaxy server processes run (referred to in this documentation as
galaxy_server) should be configured in the DRM as a “submit host”.
galaxy_usermust have a real shell configured in your name service (
/etc/passwd, LDAP, etc.). System accounts may be configured with a disabled shell like
- If Galaxy is configured to submit jobs as real user (see below) then the above must be true for all users of galaxy.
- The Galaxy server and the worker nodes are running the same version of Python (worker nodes will run Python scripts calling the Galaxy code and its dependencies to set job output file metadata).
To continue, you should have a working DRM that
galaxy_user can successfully submit jobs to.
Galaxy (with the exception of the Pulsar runner) currently requires a shared filesystem between the application server and the cluster nodes. There is some legacy code in the PBS runner that does file staging, but its operational status is unknown. The path to Galaxy must be exactly the same on both the nodes and the application server (although it is possible to use symlinks to partially subvert the absolute path requirement). This is because absolute paths are used to refer to datasets and tools when running the command on the cluster node. The shared filesystem and absolute pathnames are limitations that will eventually be removed as development time permits.
For example, if Galaxy is installed like so:
galaxy_user@galaxy_server% git clone https://github.com/galaxyproject/galaxy.git /clusterfs/galaxy/galaxy-app
Then that directory should be accessible from all cluster nodes:
galaxy_user@galaxy_server% qsub -I qsub: waiting for job 1234.torque.server to start qsub: job 1234.torque.server ready galaxy_user@node1% cd /clusterfs/galaxy/galaxy-app galaxy_user@node1%
If your cluster nodes have Internet access (NAT is okay) and you want to run the data source tools (upload, ucsc, etc.) on the cluster (doing so is highly recommended), set
galaxy.yml to a directory somewhere in your shared filesystem:
Additionally some of the runners including DRMAA may use the
cluster_files_directory for sharing files with the cluster, which defaults to
database/pbs. You may need to create this folder.
You may also find that attribute caching in your filesystem causes problems with job completion since it interferes with Galaxy detecting the presence and correct sizes of output files. In NFS caching can be disabled with the
-noac mount option on Linux (on the Galaxy server), but this may have a significant impact on performance since all attributes will have to be read from the file server upon every file access. You should try the
retry_job_output_collection option in
galaxy.yml first to see if this solves the problem.
This documentation covers configuration of the various runner plugins, not how to distribute jobs to the various plugins. Consult the job configuration file documentation for full details on the correct syntax, and for instructions on how to configure tools to actually use the runners explained below.
Runs jobs locally on the Galaxy application server (no DRM).
It is possible to configure the number of concurrent local jobs that can be run by using the
workers attribute on the plugin.
<plugins> <plugin id="local" type="runner" load="galaxy.jobs.runners.local:LocalJobRunner" workers="8"/> </plugins>
For each destination using the local runner, it is possible to specify the number of CPU slots to assign (default is 1).
<destinations> <destination id="local_1slot" runner="local"/> <destination id="local_2slots" runner="local"> <param id="local_slots">2</param> </destination> </destinations>
The value of local_slots is used to define GALAXY_SLOTS.
Galaxy interfaces with DRMAA via drmaa-python. The drmaa-python module is provided with Galaxy, but you must tell it where your DRM’s DRMAA library is located, via the
$DRMAA_LIBRARY_PATH environment variable, for example:
galaxy_server% export DRMAA_LIBRARY_PATH=/galaxy/lsf/7.0/linux2.6-glibc2.3-x86_64/lib/libdrmaa.so galaxy_server% export DRMAA_LIBRARY_PATH=/galaxy/sge/lib/lx24-amd64/libdrmaa.so
TORQUE: The DRMAA runner can also be used (instead of the PBS runner) to submit jobs to TORQUE, however, problems have been reported when using the
libdrmaa.so provided with TORQUE. Using this library will result in a segmentation fault when the drmaa runner attempts to write the job template, and any native job runner options will not be passed to the DRM. Instead, you should compile the pbs-drmaa library and use this as the value for
Slurm: You will need to install slurm-drmaa. In production on usegalaxy.org we observed pthread deadlocks in slurm-drmaa that would cause Galaxy job handlers to eventually stop processing jobs until the handler was restarted. Compiling slurm-drmaa using the compiler flags
-g -O0 (keep debugging symbols, disable optimization) caused the deadlock to disappear.
Parameters and Configuration¶
Most options defined in the DRMAA interface are supported. Exceptions include
errorPath since these attributes are set by Galaxy. To pass parameters to your underlying DRM, use the
nativeSpecification parameter. The format of this parameter is dependent upon the underlying DRM. However, for Grid Engine, it is the list of command line parameters that would be passed to
<plugins> <plugin id="drmaa" type="runner" load="galaxy.jobs.runners.drmaa:DRMAAJobRunner"/> </plugins> <destinations default="sge_default"> <destination id="sge_default" runner="drmaa"/> <destination id="big_jobs" runner="drmaa"> <param id="nativeSpecification">-P bignodes -R y -pe threads 8</param> </destination> </destinations>
Galaxy uses the pbs_python module to interface with TORQUE. pbs_python must be compiled against your TORQUE installation, so it cannot be provided with Galaxy. You can install the package as follows:
galaxy_user@galaxy_server% git clone https://github.com/ehiggs/pbs-python galaxy_user@galaxy_server% cd pbs-python galaxy_user@galaxy_server% source /clusterfs/galaxy/galaxy-app/.venv/bin/activate galaxy_user@galaxy_server% python setup.py install
As of May 2014 there are still some outstanding bugs in pbs_python. Notably, error code translation is out of alignment. For example if you get error #15025 “Bad UID for Job Execution” pbs_python will report this error incorrectly as “Queue already exists”. You may consult the TORQUE source code for the proper error message that corresponds with a given error number.
Parameters and Configuration¶
Most options available to
pbs_submit(3b) are supported. Exceptions include
-N/Job_Name since these PBS job attributes are set by Galaxy. Parameters can be specified by either their flag (as used with
qsub) or long name (as used with
<plugins> <plugin id="pbs" type="runner" load="galaxy.jobs.runners.pbs:PBSJobRunner"/> </plugins> <destinations default="pbs_default"> <destination id="pbs_default" runner="pbs"/> <destination id="other_cluster" runner="pbs"> <param id="destination">@other.cluster</param> </destination> <destination id="long_jobs" runner="pbs"> <param id="Resource_List">walltime=72:00:00,nodes=1:ppn=8</param> <param id="-p">128</param> </destination> </destinations>
The value of ppn= is used by PBS to define the environment variable $PBS_NCPUS which in turn is used by galaxy for GALAXY_SLOTS.
Runs jobs via the HTCondor DRM. There are no configurable parameters. Galaxy’s interface is via calls to HTCondor’s command line tools, rather than via an API.
<plugins> <plugin id="condor" type="runner" load="galaxy.jobs.runners.condor:CondorJobRunner"/> </plugins> <destinations> <destination id="condor" runner="condor"/> </destinations>
Galaxy will submit jobs to HTCondor as the “galaxy” user (or whatever user the Galaxy server runs as). In order for vanilla job execution to work as expected, your cluster should be configured with a common UID_DOMAIN to allow Galaxy’s jobs to run as “galaxy” everywhere (instead of “nobody”).
If you need to add additional parameters to your condor submission, you can do so by supplying
<destinations> <destination id="condor" runner="condor"> <param id="Requirements">(machine == some.specific.host)</param> <param id="request_cpus">4</param> </destination> </destinations>
Runs jobs via Galaxy Pulsar. Pulsar does not require an existing cluster or a shared filesystem and can also run jobs on Windows hosts. It also has the ability to interface with all of the DRMs supported by Galaxy. Pulsar provides a much looser coupling between Galaxy job execution and the Galaxy server host than is possible with Galaxy’s native job execution code.
Full documentation on setup and configuration is available.
Runs jobs via a command-line/shell interface. The CLI runner itself takes plugins of two types:
- Shell: For interacting with different shell types. Plugins for rsh, ssh, and gsi-ssh are provided.
- Job: For interacting with a DRM via the DRM’s command-line interface. A plugin for Torque is provided
If you are interested in developing additional plugins, see
galaxy-app/lib/galaxy/jobs/runners/cli_* for examples.
Parameters and Configuration¶
The cli runner requires, at a minimum, two parameters:
- This required parameter should be [a cli_shell class](https://github.com/galaxyproject/galaxy/tree/dev/lib/galaxy/jobs/runners/util/cli/shell)</a> currently one of:
GlobusSecureShelldescribing which shell plugin to use.
- This required parameter should be [a cli_job class](https://github.com/galaxyproject/galaxy/tree/dev/lib/galaxy/jobs/runners/util/cli/job) currently one of
All other parameters are specific to the chosen plugins. Parameters to pass to the shell plugin begin with the id
shell_ and parameters to pass to the job plugin begin with the id
RemoteShell plugin uses
rsh(1) to connect to a remote system and execute shell commands.
- Optional user to log in to the remote system as. If unset uses
rsh’s default behavior (attempt to log in with the current user’s username).
- Remote system hostname to log in to.
rsh-like command to excute (e.g.
<param id="shell_rsh">/opt/example/bin/remsh</param>) - just defaults to
RemoteShell parameters translate to a command line of
% <shell_rsh> [-l <shell_username>] <shell_hostname> "<remote_command_with_args>", where the inclusion of
-l is dependent on whether
shell_username is set. Alternate values for
shell_rsh must be compatible with this syntax.
SecureShell plugin works like the
RemoteShell plugin and takes the same parameters, with the following differences:
shell_rshdefault value is
- The command line that will be executed is
% <shell_rsh> -oStrictHostKeyChecking=yes -oConnectTimeout=60 [-l <shell_username>] <shell_hostname> "<remote_command_with_args>"
GlobusSecureShell plugin works like the
SecureShell plugin and takes the same parameters, with the following difference:
shell_rshdefault value is
ParamikoShell option was added in 17.09 with this pull request https://github.com/galaxyproject/galaxy/pull/4358 from Marius van den Beek.
Torque plugin uses
qstat(1) to interface with a Torque server on the command line.
<PBS_JOB_ATTR>refers to a
Torque attributes can be defined in either their short (e.g. [qsub(1B)](http://cf.ccmr.cornell.edu/cgi-bin/w3mman2html.cgi?qsub(1B)) argument as used on the command line or in a script as #PBS -<ARG>) or long (e.g. [pbs_submit(3B)](http://cf.ccmr.cornell.edu/cgi-bin/w3mman2html.cgi?pbs_submit(3B)) attribute as used in the C library) oforms. Some additional examples follow:
- <param id=”job_-q”>queue</param>: set the PBS destination (in this example, a queue), equivalent to <param id=”job_destination”>queue</param>
- <param id=”job_Priority”>128</param>: set the job priority, equivalent to <param id=”job_-p”>128</param>
<plugin id=”cli” type=”runner” load=”galaxy.jobs.runners.cli:CLIJobRunner”/>
</plugins> <destinations default=”cli_default”>
- <destination id=”cli_default” runner=”cli”>
- <param id=”shell_plugin”>SecureShell</param> <param id=”job_plugin”>Torque</param> <param id=”shell_hostname”>cluster.example.org</param>
</destination> <destination id=”long_jobs” runner=”cli”><param id=”job_Resource_List”>walltime=72:00:00,nodes=1:ppn=8</param> <param id=”job_-p”>128</param>
Most options available to
pbs_submit(3b) are supported. Exceptions include
-N/Job_Name since these PBS job attributes are set by Galaxy.
Submitting Jobs as the Real User¶
Galaxy runs as a process on your server as whatever user starts the server - usually an account created for the purpose of running Galaxy. Jobs will be submitted to your cluster(s) as this user. In environments where users in Galaxy are guaranteed to be users on the underlying system (i.e. Galaxy is configured to use external authentication), it may be desirable to submit jobs to the cluster as the user logged in to Galaxy rather than Galaxy’s system user.
Since this is a complex problem, the current solution does have some caveats:
- All of the datasets stored in Galaxy will have to be readable on the underlying filesystem by all Galaxy users. Said users need not have direct access to any systems which mount these filesystems, only the ability to run jobs on clusters that mount them. But I expect that in most environments, users will have the ability to submit jobs to these clusters or log in to these clusters outside of Galaxy, so this will be a security concern to evaluate for most environments.
- Technical details - Since Galaxy maintains dataset sharing internally and all files are owned by the Galaxy user, when running jobs only under a single user, permissions can be set such that only the Galaxy user can read all datasets. Since the dataset may be shared by multiple users, it is not suitable to simply change ownership of inputs before a job runs (what if another user tried to use the same dataset as an input during this time?). This could possibly be solved if Galaxy had tight control over extended ACLs on the file, but since many different ACL schemes exist, Galaxy would need a module for each scheme to be supported.
- The real user system works by changing ownership of the job’s working directory to the system prior to running the job, and back to the Galaxy user once the job has completed. It does this by executing a site-customizable script via sudo.
- Two possibilities to determine the system user that corresponds to a galaxy user are implemented: i) the user whos name matches the Galaxy user’s email address (with the @domain stripped off) and ii) the user whos name is equal to the galaxy user name. Until release 17.05 only the former option is available. The latter option is suitable for Galaxy installations that user external authentification (e.g. LDAP) against a source that is also the source of the system users.
- The script accepts a path and does nothing to ensure that this path is a Galaxy working directory per default (and not at all up to release 17.05). So anyone who has access to the Galaxy user could use this script and sudo to change the ownership of any file or directory. Furthermore, anyone with write access to the script could introduce arbitrary (harmful) code – so it might be a good idea to give write access only to trustworthy users, e.g., root.
You’ll need to ensure that all datasets are stored on the filesystem such that they are readable by all users that will use Galaxy: either made readable by a group, or world-readable. If using a group, set your
027 or for world-readable, use
022 Setting the umask assumes your underlying filesystem uses POSIX permissions, so if this is not the case, your environment changes may be different.
The directory specified in
new_file_path in the Galaxy config should be world-writable, cluster-accessible (via the same absolute path) and have its sticky bit (+t) set. This directory should also be cleaned regularly using a script or program as is appropriate for your site, since temporary files created here may not always be cleaned up under certain conditions.
outputs_to_working_directory option in the Galaxy config must be set to
True. This ensures that a tool/job’s outputs are written to the temporary working directory, which (when using the real user system) is owned by the real user who submitted the job. If left set to the default (
False), the tool will attempt to write directly to the directory specified in
file_path (by default,
galaxy-app/database/files/), which must be owned by the Galaxy user (and thus will not be writable by the real user).
For releases later than 17.05 you can configure the method how the system user is determined in
config/galaxy.yml via the variable
real_system_username. For determining the system user from the email adress stored in Galaxy set it to
user_email, otherwise for determining the system user from the Galaxy user name set it to
Once these are set, you must set the
external_chown_script settings in the Galaxy config and configure
sudo(8) to allow them to be run. A sudo config using the three scripts set in the sample
galaxy.yml would be:
galaxy ALL = (root) NOPASSWD: SETENV: /opt/galaxy/scripts/drmaa_external_runner.py galaxy ALL = (root) NOPASSWD: SETENV: /opt/galaxy/scripts/drmaa_external_killer.py galaxy ALL = (root) NOPASSWD: SETENV: /opt/galaxy/scripts/external_chown_script.py
If your sudo config contains
Defaults requiretty, this option must be disabled.
For Galaxy releases > 17.05, the sudo call has been moved to
galaxy.yml and is thereby configurable by the Galaxy admin. This can be of interest because sudo removes
LD_LIBRARY_PATH, etc. variables per default in some installations. In such cases the sudo calls in the three variables in galaxy.yml can be adapted, e.g.,
sudo -E PATH=... LD_LIBRARY_PATH=... /PATH/TO/GALAXY/scripts/drmaa_external_runner.py. In order to allow setting the variables this way adaptions to the sudo configuration might be necessary.
Also for Galaxy releases > 17.05: In order to allow
external_chown_script.py to chown only path below certain entry points the variable
ALLOWED_PATHS in the python script can be adapted. It is sufficient to include the directorries
new_file_path as configured in
It is also a good idea to make sure that only trusted users, e.g. root, have write access to all three scripts.
Some maintenance and support of this code will be provided via the usual Support channels, but improvements and fixes would be greatly welcomed, as this is a complex feature which is not used by the Galaxy Development Team.
- Oleksandr Moskalenko, debugged a number of problems related to running jobs as the real user and using DRMAA with TORQUE.
- Jaime Frey, developer of the HTCondor job runner plugin.
- Ilya Chorny, developer of the original “real user” job running code.