Skip to content

Installation

PyPI (Stable)

The easiest way to install gfal is via pip:

pip install gfal

Native Repositories (Auto-updates)

We provide a native YUM repository hosted on GitHub Pages. This is the recommended way to stay updated on Linux systems.

YUM (AlmaLinux / RHEL / Fedora)

Install the repository configuration:

dnf install -y epel-release
dnf config-manager --set-enabled crb
curl -sL -o /etc/yum.repos.d/gfal.repo https://lobis.github.io/gfal/rpm/gfal.repo
dnf install -y python3-gfal

Direct Download (RPM)

You can also download individual packages from the GitHub Releases page.

AlmaLinux 9/10: 

dnf install -y https://github.com/lobis/gfal/releases/latest/download/python3-gfal-latest-el9.rpm

CERN CA Certificates

To access CERN resources via HTTPS (like eospublic.cern.ch:8444) without the --no-verify flag, you must install the CERN Root CA 2 certificate.

Linux (RHEL / AlmaLinux / Fedora)

sudo curl -L "https://cafiles.cern.ch/cafiles/certificates/CERN%20Root%20Certification%20Authority%202.crt" -o /etc/pki/ca-trust/source/anchors/CERN-Root-CA-2.crt
sudo update-ca-trust

Linux (Ubuntu / Debian)

# requires openssl
curl -sL "https://cafiles.cern.ch/cafiles/certificates/CERN%20Root%20Certification%20Authority%202.crt" -o /tmp/cern.crt
openssl x509 -inform DER -in /tmp/cern.crt -out /tmp/cern.pem
sudo mv /tmp/cern.pem /usr/local/share/ca-certificates/cern-root-ca-2.crt
sudo update-ca-certificates

macOS

# requires openssl
curl -sL "https://cafiles.cern.ch/cafiles/certificates/CERN%20Root%20Certification%20Authority%202.crt" -o /tmp/cern.crt
openssl x509 -inform DER -in /tmp/cern.crt -out /tmp/cern.pem
sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain /tmp/cern.pem