Security monitoring/updates

From GridPPwiki

This pages summarizes the update mechanism used and how it is monitored.

Table of contents

1 RAL_Tier1 2 London Tier2 2.1 UKI-LT2-IC-HEP 2.2 UKI-LT2-IC-LeSC 2.3 UKI-LT2-Brunel 2.4 UKI-LT2-RHUL 2.5 QMUL-eScience 2.6 UKI-LT2-UCL-HEP 2.7 UCL-CCC 3 SouthGrid 3.1 OXFORD-01-LCG2 3.2 RAL-PPD 3.3 BHAM-LCG2 3.4 BRISTOL-PP-LCG 4 NorthGrid 5 ScotGrid 5.1 ScotGRID-Edinburgh

RAL_Tier1

London Tier2

UKI-LT2-IC-HEP

• Linux distro: Red Hat Enterprise Linux AS release 3
• Update tool: up2date
• Data Integrity: {{{integrity}}}
• New update checking: {{{check}}}
• Comment:

UKI-LT2-IC-LeSC

• Linux distro: Red Hat Enterprise Linux AS release 3
• Update tool: (local cluster utilities)
• Data Integrity: {{{integrity}}}
• New update checking: Read LCG-ROLLOUT.
• Comment: Use pre-existing package management tools from local repository. New packages are installed into site repository as needed. No fully-unattended updates.

UKI-LT2-Brunel

• Linux distro: slc304
• Update tool: apt-get
• Data Integrity: {{{integrity}}}
• New update checking: {{{check}}}
• Comment: For GreenStripe and the service nodes, I currently just have apt-get with autoupdate set to notify, and do the update weekly if necessary.

UKI-LT2-RHUL

• Linux distro: SLC3/RHEL-AS3
• Update tool: up2date/apt-get
• Data Integrity: {{{integrity}}}
• New update checking: {{{check}}}
• Comment: auto update on for LCG front end systems, run every night; weekly notification of updates for worker nodes, applied by hand as necessary

QMUL-eScience

• Linux distro: slc3
• Update tool:
• Data Integrity: {{{integrity}}}
• New update checking: {{{check}}}
• Comment: uses a local rpm repository that is manually updated

UKI-LT2-UCL-HEP

• Linux distro: slc3
• Update tool: apt-get
• Data Integrity: {{{integrity}}}
• New update checking: {{{check}}}
• Comment: nightly apt set to autoupdate except for kernel, set to notify

UCL-CCC

• Linux distro:
• Update tool: apt-get
• Data Integrity: {{{integrity}}}
• New update checking: {{{check}}}
• Comment:

SouthGrid

OXFORD-01-LCG2

• Linux distro: SL
• Update tool: Yum
• Data Integrity: {{{integrity}}}
• New update checking: pakiti (http://pakiti.sourceforge.net/)
• Comment: Local mirror of SL rpm + errata

RAL-PPD

• Linux distro: SL
• Update tool: Yum
• Data Integrity: tripwire (http://sourceforge.net/projects/tripwire)
• New update checking: pakiti (http://pakiti.sourceforge.net/)
• Comment: Local mirror of SL rpm + errata,

BHAM-LCG2

• Linux distro: SL
• Update tool: Yum
• Data Integrity: {{{integrity}}}
• New update checking: pakiti (http://pakiti.sourceforge.net/)
• Comment: {{{comment}}}

BRISTOL-PP-LCG

• Linux distro: SL
• Update tool: Yum
• Data Integrity: {{{integrity}}}
• New update checking: [1] (http://pakiti.sourceforge.net/pakiti)
• Comment: Local mirror of SL rpm + errata

NorthGrid

ScotGrid

ScotGRID-Edinburgh

• Linux distro: SL
• Update tool: APT
• Data Integrity: tripwire (http://sourceforge.net/projects/tripwire)
• New update checking: nightly APT + email notification
• Comment: