Difference between revisions of "Operations Bulletin Latest"

From GridPP Wiki
Jump to: navigation, search
()
()
 
(835 intermediate revisions by 18 users not shown)
Line 5: Line 5:
 
{| width="100%" cellspacing="0" cellpadding="0" style="background-color: #ffffff; border: 1px solid silver; border-collapse: collapse; width: 100%; margin: 0 0 1em 0;"
 
{| width="100%" cellspacing="0" cellpadding="0" style="background-color: #ffffff; border: 1px solid silver; border-collapse: collapse; width: 100%; margin: 0 0 1em 0;"
 
|-
 
|-
| style="background-color: #d8e8ff; border-bottom: 1px solid silver; text-align: center; font-size: 1em; font-weight: bold; margin-top: 0; margin-bottom: 0; padding-top: 0.1em; padding-bottom: 0.1em;" | Week commencing Monday 4th December 2017
+
| style="background-color: #d8e8ff; border-bottom: 1px solid silver; text-align: center; font-size: 1em; font-weight: bold; margin-top: 0; margin-bottom: 0; padding-top: 0.1em; padding-bottom: 0.1em;" | Week commencing Monday 25th February 2019
 
|}
 
|}
  
Line 27: Line 27:
 
====== ======
 
====== ======
 
<!-- *********************************************************** ----->
 
<!-- *********************************************************** ----->
<!-- ***********************Start General text*********************** ----->'''
+
'''Tuesday 18th June'''
 +
* DPM Workshop last week - come to this week's storage meeting for an in-depth look.
 +
** https://indico.cern.ch/event/776832/
 +
* DIRAC downtime this week due to the move to Slough - good luck!
 +
* EGI Ops meeting this week.
 +
** https://wiki.egi.eu/wiki/Agenda-2019-06-17
 +
** HTCondorCE commissioning ongoing, SRM decommissioning survey
 +
** State of SRM usage at DPM sites?
  
'''Monday 4th December'''
 
* [https://twiki.cern.ch/twiki/bin/view/LCG/WLCGOpsMeetingWeek171204 Monday's WLCG ops meeting minutes].
 
* Vip: ARC setup on CentOS7
 
* Daniela: ... trust anchors 1.88-1 breaks on SL6
 
* Simon:  I cannot connect to lcg-voms2.cern.ch - can anyone else?
 
* [https://twiki.cern.ch/twiki/bin/view/LCG/GDBMeetingNotes20171108 November GDB notes] are now available.
 
* CMS:  notes from the site support/computing operations meetings
 
* Mattermost clients. See  https://about.mattermost.com/download/.
 
  
 +
'''Tuesday 11th June'''
  
 
+
* Technical Meeting last week about the New JSON based Information System:  https://indico.cern.ch/event/821105/
'''Monday 27th November'''
+
* This week we will get round to looking at the outcome of the Security Day (and HEPSYSMAN).
* [https://docs.google.com/document/d/1mXJ51Xi1FEcQKzf6jJknmkC3MGeZqjPjgtoj3pVD6rk/edit# HSF CWP] "Roadmap for HEP Software and Computing R&D for the 2020s"
+
* The DPM Workshop is this week: https://indico.cern.ch/event/776832/ There's a Vidyo Room planned for people to listen in.
* [http://iopscience.iop.org/volume/1742-6596/898 CHEP 2016 proceedings] have been published.
+
* CentOS7 Migration https://twiki.cern.ch/twiki/bin/view/AtlasComputing/CentOS7Deployment
* The next WLCG GDB will be on 13th December. [https://indico.cern.ch/event/578993/ Agenda].
+
<!-- ***********************Start General text*********************** ----->'''
* perfSONAR configuration change.
+
'''Tuesday 4th June 2019'''
 
+
* The Security Day  + HEPSYSMAN was on t'other week: https://indico.cern.ch/event/721692/
 
+
* Please can sites review their GOCDB information: https://ggus.eu/?mode=ticket_info&ticket_id=141296
'''Monday 20th November'''
+
* iris.ac.uk VO - Andrew explained this.
* CHEP 2018 abstract submission is [https://indico.cern.ch/event/587955/abstracts/ open].
+
* New(-ish) HEPOSLib release - 7.2.9 https://twiki.cern.ch/twiki/bin/view/LCG/WLCGBaselineTable
* Germany is leaving EGI from January 2018. GGUS will continue to be provided for WLCG. 
+
* Gareth's query about the WS interface to ARC on TB-SUPPORT
* TB-SUPPORT/general discussions:
+
* Anything else?
** ATLAS PanDA Queue consolidation - UCORE. The VAC question....
+
** GRIDPP2: Deployment and support of SRM and local storage management
+
** CERN Mattermost chat - concept and groups
+
** LHCb multi-thread user jobs
+
** Mounting EOS outside of CERN. (See this [https://cern.service-now.com/service-portal/article.do?n=KB0003846 article]).
+
* The next LHCOPN/LHCONE meeting will be [https://indico.cern.ch/event/681168/ at RAL 6-7th March 2018].
+
* There is a [https://indico.cern.ch/e/cvm18 CERNVM users workshop 30th Jan to 1st Feb].
+
* [https://twiki.cern.ch/twiki/bin/view/LCG/WLCGOpsMeetingWeek171120 Minutes from Monday 20th Nov WLCG ops meeting] are available.
+
 
+
  
  
Line 77: Line 68:
 
<!-- *********************************************************** ----->
 
<!-- *********************************************************** ----->
 
<!-- ***********************Start ops coord text*********************** ----->
 
<!-- ***********************Start ops coord text*********************** ----->
'''Tuesday 21st November'''
+
'''Tuesday 11th June'''
* The next WLCG ops coordination meeting will be on 7th December. Do we have any topics we would like covered?
+
 
 +
* I got stuck (figuratively) in my machine room last Thursday afternoon so missed it. [https://indico.cern.ch/event/823800/ Agenda.] [https://twiki.cern.ch/twiki/bin/view/LCG/WLCGOpsMinutes190606 Minutes.] Ste was there - any observations?
 +
 
 +
'''Tuesday 14th May'''
 +
* Next meeting this Thursday.
 +
 
 +
'''Tuesday 9th April'''
 +
* Ops meeting last week: https://twiki.cern.ch/twiki/bin/view/LCG/WLCGOpsMinutes190404
 +
 
 +
 
 +
'''Tuesday 26th March'''
 +
* For information, there was an Ops meeting on the 7th: https://twiki.cern.ch/twiki/bin/viewauth/LCG/WLCGOpsMinutes190307 (I think we might have dicussed this one).
 +
* Next meeting booked for 4th April
 +
 
 +
'''Monday 11th February 2019'''
 +
* There was a WLCG ops coordination meeting last Thursday. You can view the meeting notes [https://twiki.cern.ch/twiki/bin/view/LCG/WLCGOpsMinutes190207 here].
 +
** End of CREAM support Dec 2020.
 +
** Migration from CREAM to be discussed at the EGI conference 6-8 of May in Amsterdam.
 +
** Operational intelligence discussion ([https://indico.cern.ch/event/795889/sessions/302520/attachments/1792600/2920978/Operational_Intelligence_-_WLCG_Ops_Coord-2.pdf see slides]).
 +
** Experiment updates (see ATLAS discussion on DOMA)
 +
** WG updates (few).
 +
 
  
'''Tuesday 7th November'''
 
* The WLCG ops coordination meeting last week ([https://indico.cern.ch/event/677078/ agenda] |  [https://twiki.cern.ch/twiki/bin/view/LCG/WLCGOpsMinutes171102 minutes] had as highlights the topics:
 
** Security Operations Center WG Workshop/Hackathon
 
** Review of EL7 migration plans
 
** Providing reliable storage: presentation by BNL
 
 
  
'''Monday 23rd October'''
 
* The next WLCG ops coordination meeting will be on 2nd November.
 
  
'''Tuesday 10th October'''
 
* There was an ops coordination meeting last Thursday 5th October: [https://indico.cern.ch/event/670207/ Agenda] | [https://twiki.cern.ch/twiki/bin/view/LCG/WLCGOpsMinutes171005 Minutes].
 
** There is one action for us to follow-up: "Collect plans from sites to move to EL7". We could make use of the [https://www.gridpp.ac.uk/wiki/Batch_system_status Batch Systems] table.
 
  
  
Line 110: Line 111:
 
<!-- *********************************************************** ----->
 
<!-- *********************************************************** ----->
 
<!-- ***********************Start T1 text*********************** ----->
 
<!-- ***********************Start T1 text*********************** ----->
'''Tuesday 5th December'''
+
 
A reminder that there is a weekly [http://www.gridpp.ac.uk/wiki/RAL_Tier1_Experiments_Liaison_Meeting Tier-1 experiment liaison meeting]. Notes from the last meeting [https://www.gridpp.ac.uk/wiki/Tier1_Operations_Report_2017-11-29 here]
+
'''17 June 2019''' Report for the Experiments Liaison Report (17/06/2019) is [https://www.gridpp.ac.uk/wiki/Tier1_Operations_Report_2019-06-17 here].
* It took a while to recover IPv6 connectivity after the power outage on the 20th November, but all is restored now.  
+
<!-- *********************************************************** ----->
* There are problems with the new CA trust anchor release. The  Tier1 plans to update to version 1.88 on the 12th Dec.
+
* Patching and updates are ongoing. The production FTS is being updated to 3.77 today. The Castor Database machines will be patched tomorrow. The Castor SRM machines will be updated Tomorrow (6th Dec).
+
* The WMS service at RAL will be decommissioned at the end of December.
+
 
<!-- **********************End T1 text************************** ----->
 
<!-- **********************End T1 text************************** ----->
 +
* Ongoing, we are seeing high outbound packet loss over IPv6.  Central networking performed a firmware update to the border routers but this didn’t resolve the issue.  Plan to move connections to the new border routers in Mid June.  Will do this before trying to debug any further.
 +
 +
'''11 June 2019''' Report for the Experiments Liaison Report (10/06/2019) is [https://www.gridpp.ac.uk/wiki/Tier1_Operations_Report_2019-06-10 here].
 
<!-- *********************************************************** ----->
 
<!-- *********************************************************** ----->
 +
<!-- **********************End T1 text************************** ----->
 +
* Ongoing, we are seeing high outbound packet loss over IPv6.  Central networking performed a firmware update to the border routers but this didn’t resolve the issue.  Plan to move connections to the new border routers in Mid June.  Will do this before trying to debug any further.
 +
* Three certificates were revoked mistakenly on ARGUS on Thursday.  All SAM tests failed until this was fixed the next morning.  Batch farm also did not start any new jobs during this time.  We used this accidental draining to reboot nodes that needed to pick up security patching.
 +
* LHCb Castor instance has been completely disabled for LHCb and will be decommissioned.
 +
* Brian Davies has transferred from his role as GridPP Tier-2 Storage Support Officer and has joined the Tier-1 Production Team.  Although this has happened with immediate effect he will still be available for ad-hoc/informal storage support.
 +
 
|}
 
|}
<!-- ****************End T1****************** ----->
 
  
 
<!-- ****************Start Storage & DM****************** ----->
 
<!-- ****************Start Storage & DM****************** ----->
Line 131: Line 137:
 
<!-- ******************Edit start********************* ----->
 
<!-- ******************Edit start********************* ----->
  
'''[http://storage.esc.rl.ac.uk/weekly/20171115-minutes.txt Wed 15 Nov]'''
+
'''[http://storage.esc.rl.ac.uk/weekly/20191030-minutes.txt Wed 30 Oct]'''
* More xcache progress at some sites; less at others who may be blocking on dependencies or be busy with Other Things(tm)
+
* DOME upgrade problems at Edinburgh
* Some interest in following the non-X.509 authentication/authorisation
+
* Data management support/development for IRIS users
 +
 
 +
'''[http://storage.esc.rl.ac.uk/weekly/20191023-minutes.txt Wed 23 Oct]'''
 +
* Rucio reporting
 +
 
 +
'''Wed 16 Oct'''
 +
* CEPH workshop at CERN report
 +
 
 +
'''[http://storage.esc.rl.ac.uk/weekly/20191002-minutes.txt Wed 02 Oct]'''
 +
* Safe to upgrade to DPM 1.13 but make sure the BDII is working if you support DIRAC
 +
* Roadmap for xroot and http TPC for RAL FTS(es)
 +
 
 +
'''[http://storage.esc.rl.ac.uk/weekly/20190925-minutes.txt Wed 25 Sept]'''
 +
* Storage support for IRIS VOs?
  
'''[http://storage.esc.rl.ac.uk/weekly/20171108-minutes.txt Wed 08 Nov]'''
+
'''[http://storage.esc.rl.ac.uk/weekly/20190918-minutes.txt Wed 18 Sept]'''
* Not (very) modest at all progress on xcache testing... from Chris at RALPP
+
* Report from yesterday's Rucio Face Meeting at Coseners
 +
* Suggestions for following up from yesterday's CEPH day hosted by CERN
  
'''[http://storage.esc.rl.ac.uk/weekly/20171101-minutes.txt Wed 01 Nov]'''
+
'''[http://storage.esc.rl.ac.uk/weekly/20190911-minutes.txt Wed 11 Sept]'''
* (very) modest progress on xcache testing...
+
* Storage related stuff at the FNAL (pre-)GDBs
* Except that RALPP has it fully working for dCache - hope to get full report next week
+
* DOME upgrade tickets for non-DOME DPM sites
  
'''Tuesday 3rd October'''
+
'''[http://storage.esc.rl.ac.uk/weekly/20190904-minutes.txt Wed 04 Sept]'''
* Looking for small DPM ATLAS site to possibly test xrootd caching
+
* Banning in SSC not entirely successful in non-DOME DPM, and end of support is nigh; tickets to upgrade will go out shortly.
* Tracking upgrade of SEs to new what will be new baseline versions. (dCache sites updated; 6/14 DPM up-to-date)
+
* Storage-and-data-management-wise, GridPP43 was interesting although no-one volunteered to install the next CEPH.
* Alastair D. to give T2 site storage evolution talk 4/10/17 at gridpp-storage meeting
+
  
  
Line 162: Line 181:
 
====== ======
 
====== ======
 
<!-- ******************Edit start********************* ----->
 
<!-- ******************Edit start********************* ----->
'''Tuesday 14 Nov'''
+
'''Tuesday 30 Apr 2019'''
* Single processor LHCb stoppable Monte Carlo VMs running in a mixture with fixed length 8 processor ATLAS VMs and single processor GridPP VMs. Please get in touch if you are running Vac and want to try this.
+
* ATLAS CernVM4 VMs (equivalent to CentOS 7.6) being tested
 
+
'''Tuesday 3 Oct'''
+
* Productions tests of Vac 03.00pre at Manchester.
+
  
 
<!-- ******************Edit stop********************* ----->
 
<!-- ******************Edit stop********************* ----->
Line 183: Line 199:
 
===== =====
 
===== =====
 
<!-- ******************Edit start********************* ----->
 
<!-- ******************Edit start********************* ----->
 +
'''Tuesday 6th February'''
 +
* HEPSPEC06 on recent Intel CPUs. [https://www.gridpp.ac.uk/wiki/HEPSPEC06 GridPP benchmarking page]
 +
 +
 +
'''Tuesday 30th January'''
 +
* Please keep updating the [https://www.gridpp.ac.uk/wiki/HEPSPEC06 GridPP benchmarking page].
  
 
'''Tuesday 24th Oct'''
 
'''Tuesday 24th Oct'''
Line 214: Line 236:
 
<!-- ******************Edit start********************* ----->
 
<!-- ******************Edit start********************* ----->
  
'''Tuesday 21st Nov 2017'''
+
''' Tue 9th July 2019'''
  
==TEMPORARY NOTICE==
+
LHCb has added this to their requirements:
  
VOMS servers located at CNAF have been knocked out due to some flooding. It is not known when they might be recorvered. Hence, at present, there are no VOMS servers at all for both '''planck''' or '''ipv6.hepix.org'''. And a single new VOMS server has been provided for '''enmr'''. See the VOMS records in the Approved VOs document for details.
+
Sites not having an SRM installation must provide:
  
Ste Jones
+
* disk only storage
 +
* a GRIDFPT endpoint (a single dns entry)
 +
* an XROOT endpoint (a single dns entry)
 +
* a way to do the accounting (preferably following the WLCG TF standard: https://twiki.cern.ch/twiki/bin/view/LCG/StorageSpaceAccounting)
  
'''Tuesday 26th Sept 2017'''
+
''' Tue 16th April 2019'''
* Safari on macOS autogenerated client certificates fix put into production last week.
+
  
'''Tuesday 19th Sept 2017'''
+
Minor change to LHCB requirements in Approved VOs:
* Bug in Safari on macOS causes random Apple generated client cert to be presented to www.gridpp.ac.uk using a CA we don't know about. The connection is then rejected by Apache. Other browsers ok since we request but do not require that they supply a certificate. Workaround produced by (a) installing the Apple CA root and intermediary CA and (b) whitelisting UK e-Science DNs (+ CERN? Others?) in the HTTPS Wiki plugin. Tested but not yet in production.
+
  
'''Tuesday 5th Sept 2017'''
+
* Sites having migrated to the Centos7 (including "Cern Centos7") operating system or  later versions are requested to provide support for singularity containers.
  
New Approved VO. SKA European regional data centre, skatelescope.eu
+
https://www.gridpp.ac.uk/wiki/GridPP_approved_VOs#VO_Resource_Requirements
  
 +
'''Tue 2nd April 2019'''
 +
 +
Changes to Approved for DUNE (and LZ)
 +
 +
There is a new "Approved VOs" document showing new settings for DUNE. And, since both LZ's voms servers now show up in the EGI Portal, I've removed the (now spurious) entry for voms.hep.wisc.edu that was formerly being inserted by hand.
 +
 +
https://www.gridpp.ac.uk/wiki/GridPP_approved_VOs
 +
 +
I've also created a new set of RPMs (each has all LSC, VOMS, and XML for one VO) for all approved VOs. See Approved VOs doc for details, version is 1.9.
 +
 +
Sites with DUNE services need to update using whatever method they employ.
 +
 +
Special note: Since voms1.fnal.gov changed yesterday, I've updated documentation for that right away. But voms2.fnal.gov remains as it is until 23rd April (3 weeks). I'll update documentation for that when it is closer. Staggering the updates like this gives a time margin, so any particular site can have at least one service properly configured at any time.  But it does mean that two site updates are needed; one now, and one in three weeks. However, since it's sufficient for only one (of the two) voms servers to be configured properly, sites could save effort and wait until (say) 19th April, then update both at once. But I can't dictate what site admins should do. It's your call.
 +
 +
Ste
 +
 +
 +
'''Tuesday 5th Mar 2019'''
 +
New VOMs details for Biomed:
 
https://www.gridpp.ac.uk/wiki/GridPP_approved_VOs
 
https://www.gridpp.ac.uk/wiki/GridPP_approved_VOs
  
This VO is ramping up and has requested support. Andrew McNab is the contact person for GridPP.
+
New VOMs rpms to match.
 +
 
 +
http://hep.ph.liv.ac.uk/~sjones/RPMS.voms/
 +
 
 +
'''Tuesday 12th Feb 2019'''
 +
Documentation done for HTCondor-CE apel accounting.
 +
https://twiki.cern.ch/twiki/bin/view/LCG/HtCondorCeAccounting
 +
 
 +
 
 +
'''Tuesday 12th Feb 2019'''
 +
New CA DN for Biomed
 +
<pre>
 +
< VOMS_CA_DN="'/C=FR/O=CNRS/CN=GRID2-FR' "
 +
---
 +
> VOMS_CA_DN="'/C=FR/O=MENESR/OU=GRID-FR/CN=AC GRID-FR Services' "
 +
</pre>
 +
 
 +
'''Tuesday 5th Feb 2019'''
 +
For enmr, certificate of voms-02.pd.infn.it
 +
 
 +
New DN: /DC=org/DC=terena/DC=tcs/C=IT/L=Frascati/O=Istituto Nazionale di Fisica Nucleare/CN=voms-02.pd.infn.it,
 +
New CA_DN: /C=NL/ST=Noord-Holland/L=Amsterdam/O=TERENA/CN=TERENA eScience SSL CA 3
 +
 
 +
Please check approved VOs: https://www.gridpp.ac.uk/wiki/GridPP_approved_VOs
 +
 
 +
 
  
 
'''General note'''
 
'''General note'''
Line 252: Line 319:
 
===== =====
 
===== =====
 
<!-- ******************Edit start********************* ----->
 
<!-- ******************Edit start********************* ----->
'''Monday 20th November'''
 
* There was an EGI Operations Meeting today: [https://wiki.egi.eu/wiki/Agenda-2017-11-20 Agenda].
 
  
'''Monday 9th October'''
+
''' 14 May 2019 '''
* There was an EGO Ops meeting today: [https://wiki.egi.eu/wiki/Agenda-09-10-2017 Agenda][https://indico.egi.eu/indico/event/3353/material/minutes/minutes.html Minutes]
+
* Meeting for May cancelled. Next meeting is on 10th June.
  
* MW
+
''' Monday 11th March '''
** UMD 4.6 in November
+
*** UI, CREAM, ARGUS
+
*** If not before in 4.5.1
+
** UMD Preview update on 22/9
+
*** not rooted 4.7.0 has a bug, wait for update
+
*** CREAM version in Preview, please test if applicable (leading to release as noted above)
+
  
* Ops
+
* Agenda: https://wiki.egi.eu/wiki/Agenda-2019-03-11 
** cASO (OpenStack Accounting extractor) update: 100%IT done (GGUS ticket 130665)
+
* UMD 4.8.2 released : ARC 15.03.19 - To address how ARC counts HELD job
** A/R nothing to report
+
* DPM Legacy mode is going to end in June 2019
** Computation Power
+
* EGI will open tickets after June
*** Sites check data by end of the month
+
* HTCondor CE accounting status?
** EMI WMS
+
* http://egi.ui.argo.grnet.gr/ : https://ggus.eu/index.php?mode=ticket_info&ticket_id=139877 
*** mice noted as being enabled on DIRAC
+
** IPv6 Readiness
+
*** Would be useful for us to provide a report
+
** webdav probes
+
*** If you're advertising a webdav endpoint, make sure it's in the GOC DB
+
** Storage accounting deployment
+
*** Enable by 30th October; tickets to follow. Note that per broadcast new data currently not showing, please ticket on errors in logs only
+
  
* Next meeting 13th November [https://indico.egi.eu/indico/event/3354/ Meeting link]
+
 
 +
''' Tuesday 12th February '''
 +
* There was an EGI ops meeting yesterday - [https://indico.egi.eu/indico/event/4320/ Agenda]. We were asked to review the IPv6 readiness information ([https://wiki.egi.eu/w/index.php?title=IPV6_Assessment see here]). We should perhaps link in the GridPP IPv6 table for updates status.
 +
 
 +
 
 +
''' Friday 1st February '''
 +
 
 +
* Early adopters needed for HTcondor CE , https://ggus.eu/index.php?mode=ticket_info&ticket_id=139377
 +
 
 +
''' Thursday 17th January EGI OMB meeting '''
 +
 
 +
* CREAMCE to be out of support by Dec 2020
 +
* More effort to fix accounting issue of HTCondor CE
 +
 
 +
''' Monday 14th January 2019 '''
 +
* Agenda https://wiki.egi.eu/wiki/Agenda-2019-01-14
 +
 
 +
* No UK specific issue mentioned.
 +
 
 +
* IPv6 readiness plan is going to be summarized at OMB.
 +
 
 +
'
  
  
Line 326: Line 399:
 
===== =====
 
===== =====
 
<!-- ******************Edit start********************* ----->
 
<!-- ******************Edit start********************* ----->
'''Monday 20th November'''
+
'''Tuesday 5th February'''
* Generally quiet. There are three outstanding tickets: low availability at Birmingham, one at Liverpool which might just have gone green, and out-of-date IGTF CAs at Sheffield.
+
* Birmingham decommissioning of SRM and BDII still going on so tickets are on hold.
 +
* Few availability tickets on hold
 +
* Lancaster has WebDav ticket on hold which seems to be effect of DOME rollout
 +
 
 +
'''Tuesday 14th August'''
 +
* A couple of new availability tickets (QMUL and Lancaster), both for well-publicised reasons. Otherwise quiet. AM on shift this week.
 +
 
  
 
<!-- ******************Edit stop********************* ----->
 
<!-- ******************Edit stop********************* ----->
Line 368: Line 447:
  
 
===== =====
 
===== =====
 +
'''Tuesday 11th June
  
* GGUS tickets and the trust anchor. Who to ticket result?
+
* NTR
 
+
'''Tuesday 28th November'''<br />
+
 
+
* Nothing new to report (tracking update from last week - remember you can check your site!)
+
 
+
'''Tuesday 21st November'''<br />
+
 
+
A few sites have showed up in [https://pakiti.egi.eu/ pakiti] with high risk vulnerabilities (CVE-2017-1000364). If you haven't been prodded about this already then expect an email from someone in the security team soon.
+
 
+
'''Monday 30th October'''
+
* EGI SVG ALERT [TLP:WHITE] Up to 'CRITICAL' risk, kernel exploit CVE-2017-7184 and others [EGI-SVG-CVE-2017-7184]
+
* <i>Upcoming meetings </i>
+
** Details and registration for SOC WG Workshop in December: [https://wlcg-soc-wg.web.cern.ch/content/workshop-cern-11th-12th-december-2017 Advert] [https://indico.cern.ch/event/676160/ Indico]
+
 
+
 
+
  
 
|}
 
|}
Line 397: Line 462:
 
{| style="background-color: #ffffff; border: 1px solid silver; border-collapse: collapse; width: 100%; margin: 0em 0 0 0.3em;"
 
{| style="background-color: #ffffff; border: 1px solid silver; border-collapse: collapse; width: 100%; margin: 0em 0 0 0.3em;"
 
|-
 
|-
| style="background-color: #b7f1ce; border-bottom: 1px solid silver; text-align: left; font-size: 1em; font-weight: bold; margin-top: 0; margin-bottom: 0; padding-left: 0.4em; padding-top: 0.1em; padding-bottom: 0.1em;" | Services - [http://psmad.grid.iu.edu/maddash-webui/index.cgi?dashboard=UK%20Config PerfSonar production dashboard] |[http://maddash.aglt2.org/maddash-webui/index.cgi?dashboard=UK%20Config PerfSonar development dashboard] | [https://voms.gridpp.ac.uk:8443/vomses/ GridPP VOMS]
+
| style="background-color: #b7f1ce; border-bottom: 1px solid silver; text-align: left; font-size: 1em; font-weight: bold; margin-top: 0; margin-bottom: 0; padding-left: 0.4em; padding-top: 0.1em; padding-bottom: 0.1em;" | Services - [https://psmad.opensciencegrid.org/maddash-webui/index.cgi?dashboard=UK%20Mesh%20Config PerfSonar production dashboard] |[https://psetf.opensciencegrid.org/etf/check_mk/index.py?start_url=%2Fetf%2Fcheck_mk%2Fview.py%3Fhostgroup%3DUK%26opthost_group%3DUK%26view_name%3Dhostgroup PerfSonar ETF] | [http://opensciencegrid.org/networking/ OSG Networking and perfSONAR pages] | [https://voms.gridpp.ac.uk:8443/vomses/ GridPP VOMS]
 
|-
 
|-
 
| style="padding: 0.4em 0.4em 0.4em 0.4em;" |
 
| style="padding: 0.4em 0.4em 0.4em 0.4em;" |
Line 405: Line 470:
 
- This includes notifying of (inter)national services that will have an outage in the coming weeks or will be impacted by work elsewhere. (Cross-check the Tier-1 update).
 
- This includes notifying of (inter)national services that will have an outage in the coming weeks or will be impacted by work elsewhere. (Cross-check the Tier-1 update).
  
'''Monday 20th November'''
+
'''Monday 5th March'''
* perfSONAR: No news.
+
* Next LHCOPN and LHCONE meeting: [https://indico.cern.ch/event/772031/ Umeå, Sweden, 4-5 Jun 2019]. Registration required.  
* GridPP DIRAC: DPM & xrootd version. Upgrade due 16th November.
+
* RIPE ATLAS probes: Status & tests TBC
+
* The next LHCOPN/LHCONE meeting will be at [https://indico.cern.ch/event/681168/ RAL 6-7th March 2018]. The UK position on LHCONE is being reviewed. RAL T1 will (likely) connect via the LHCOPN in the coming months. T2s watch this space!
+
  
 +
'''Monday 10th September'''
 +
* Please check perfSONAR status [https://psetf.opensciencegrid.org/etf/check_mk/index.py?start_url=%2Fetf%2Fcheck_mk%2Fview.py%3Ffilled_in%3Dfilter%26host_regex%3Duk%26view_name%3Dsearchhost here] especially the mesh URL (should be http://psconfig.opensciencegrid.org/pub/auto/FQDN)
  
'''Monday 23rd October'''
+
'''Monday 2nd July'''
* The LHCOPN/ONE meeting took place last week at KEK, co-hosted with the HEPiX Fall meeting.
+
* Next LHCOPN and LHCONE meeting: [https://indico.cern.ch/event/725706/ Fermilab, Batavia US, 30-31October 2018]. Registration required.  
** You can find a short report of the meeting [https://indico.cern.ch/event/646629/attachments/1544349/2423256/LHCOPNE-20171017-Tsukuba-meeting-report.pdf here.]
+
** All the slides presented are available in the [https://indico.cern.ch/event/646629/ agenda.]
+
  
'''Tuesday 4th July'''
+
'''Monday 30th April'''
* Pete C is preparing another networking forward look document. Note that figures presented in the Manchester workshop were for a Tier-2 (not always a single site).
+
* The [https://indico.cern.ch/event/725706/ next LHCOPN and LHCONE joint meeting] will take place on Tuesday the 30th and Wednesday the 31st of October 2018
  
[http://www.perfsonar.net/release-notes/version-4-0/ here]
+
'''Monday 19th February'''
 +
 
 +
Please could sites upgrade their perfsonar hosts to CentOS7. Instructions are [https://opensciencegrid.github.io/networking/perfsonar/installation/ here]. Current OS versions [https://tinyurl.com/y9eode2b here].
  
 
* Duncan has recreated the UK perfSONAR mesh. [http://maddash.aglt2.org/maddash-webui/index.cgi?dashboard=UK%20Config Link here]!
 
* Duncan has recreated the UK perfSONAR mesh. [http://maddash.aglt2.org/maddash-webui/index.cgi?dashboard=UK%20Config Link here]!
Line 437: Line 501:
 
===== =====
 
===== =====
 
<!-- ******************Edit start********************* ----->
 
<!-- ******************Edit start********************* ----->
'''Monday 4th December 2017, 15.00 GMT'''<br />
 
38 Open Tickets this week
 
 
'''IPv6 Deployment tickets.'''<br />
 
We have 15 of these left open in the UK (I think we've only closed one?). Rather then go through them individually I thought I would just give folks a chance to chime in with any specific issues. Most of these tickets probably want putting on hold if they're not already.
 
 
The rest of the tickets, site by site.
 
 
'''SUSSEX'''<br />
 
[https://ggus.eu/?mode=ticket_info&ticket_id=132027 132027] (23/11)<br />
 
A ROD ticket, Sussex are having trouble with their CREAM - although everything looks green now so maybe the ticket can be closed? In progress (30/11)
 
 
[https://ggus.eu/?mode=ticket_info&ticket_id=132233 132233] (1/12)<br />
 
Standard issue ROD low availability ticket. On hold (1/12)
 
 
[https://ggus.eu/?mode=ticket_info&ticket_id=122772 122772] (11/7/16)<br />
 
The atlas webdav/xroot ticket. Leo went and rebuilt things from scratch back in October but I don't think there was any joy. In progress (18/10)
 
 
[https://ggus.eu/?mode=ticket_info&ticket_id=132189 132189] (29/11)<br />
 
Sno+ cvmfs not working at Sussex. It looks like cvmfs has failed on a few nodes, Leo is investigating. In progress (4/12)
 
 
On another note, is Karin the latest Sno+ contact?
 
 
'''RALPP'''<br />
 
[https://ggus.eu/?mode=ticket_info&ticket_id=131565 131565] (2/11)<br />
 
CMS stageout failures at RALPP. Chris tried a fix by upping the space available, no news from CMS. Assume it's fixed? Waiting for reply (2/11)
 
 
[https://ggus.eu/?mode=ticket_info&ticket_id=130264 130264] (28/8)<br />
 
Biomed ARC publishing ticket, with a patch to ARC needed. As noted in the linked Brunel ticket a fix is out and working at Brunel if you fancy giving it a whirl. On hold (10/11)
 
 
'''OXFORD'''<br />
 
[https://ggus.eu/?mode=ticket_info&ticket_id=129931 129931] (4/8)<br />
 
Atlas http tests failing, proved tricky to fix so hoping a new install will fix - waiting for hardware to arrive at last check. On hold (13/11)
 
 
'''BIRMINGHAM'''<br />
 
[https://ggus.eu/?mode=ticket_info&ticket_id=131670 131670] (7/11)<br />
 
ROD availability ticket. Mark asked about the nature of these tests for a VAC site, which I don't think any of us have a definitive answer for. Mark updates that he's hardwired some slots of run tests, so numbers are on the mend. On hold (1/12)
 
 
[https://ggus.eu/?mode=ticket_info&ticket_id=129930 129930] (4/8)<br />
 
The other atlas http test failing ticket. Mark is also going for the reinstall it and hope that fixes it solution. On hold (16/11)
 
 
'''SHEFFIELD'''<br />
 
[https://ggus.eu/?mode=ticket_info&ticket_id=131835 131835] (14/11)<br />
 
Another ROD availability ticket. Numbers are on the mend. On hold (14/11)
 
 
'''MANCHESTER'''<br />
 
[https://ggus.eu/?mode=ticket_info&ticket_id=131526 131526] (1/11)<br />
 
Storage accounting ticket. Really could do with an update. In progress (1/11)
 
 
[https://ggus.eu/?mode=ticket_info&ticket_id=132121 132121] (28/11)<br />
 
A ticket to the VOMS servers from pheno, after spotting some oddness using the voms interface. Robert is taking a look. In progress (1/12)
 
 
'''UCL'''<br />
 
[https://ggus.eu/?mode=ticket_info&ticket_id=131807 131807] (13/11)<br />
 
Ben's apel certificate expired, and he's not sure what to do with the replacement. The ticket has called out to Andrew M for help. In progress (23/11)
 
 
'''QMUL'''<br />
 
[https://ggus.eu/?mode=ticket_info&ticket_id=132232 132232] (1/12)<br />
 
Another availability ticket - came in on Friday and not likely spotted yet. The argo numbers have turned green again at least. Assigned (1/12)
 
 
[https://ggus.eu/?mode=ticket_info&ticket_id=130262 130262] (28/8)<br />
 
The Storm version of the Biomed publishing tickets. Quite rightly Dan has pointed out that this is an issue with Storm and suggested that Biomed ticket the devs. Waiting for reply (20/11)
 
 
'''BRUNEL'''<br />
 
[https://ggus.eu/?mode=ticket_info&ticket_id=130263 130263] (28/8)<br />
 
The last of the Biomed publishing tickets, Raul has rolled out the patch that fixes the ARC publishing and asked if the ticket can be closed (I reckon it can). Waiting for reply (22/11)
 
 
'''TIER ONE'''<br />
 
[https://ggus.eu/?mode=ticket_info&ticket_id=131840 131840] (14/11)<br />
 
solidexperiment.org having trouble with Castor. George asks if the new data mover certificate, which is installed, works? Also he points out that Janusz's certificate won't work as it's already associated with another VO (MICE) due to CASTOR reasons. Waiting for reply (28/11)
 
 
[https://ggus.eu/?mode=ticket_info&ticket_id=130207 130207] (24/8)<br />
 
MICE transfers timing out into CASTOR. Still waiting for "new" hardware to be made available to increase the MICE disk pool. On hold (13/11)
 
 
[https://ggus.eu/?mode=ticket_info&ticket_id=132222 132222] (30/11)<br />
 
CMS phedex transfers failing to the Tier 1 - possibly/likely due to CA certificate fun and games (and possibly one of the causes of the Tier 1 CA rollback announced today). In progress (4/12)
 
 
[https://ggus.eu/?mode=ticket_info&ticket_id=131815 131815] (13/11)<br />
 
T2K seeing very long download times from Castor tape. Brian has tried to help and Henry has added in his experiences with MICE work which was really helpful. Now just to see if this all worked for T2K. In progress (1/12)
 
 
[https://ggus.eu/?mode=ticket_info&ticket_id=127597 127597] (7/4)<br />
 
Checking networking and xroot performance for CMS. Summed up with a statement from Gareth in October concerning the site firewall. Are their solutions beyond just fixing the firewall? On hold (5/10)
 
 
[https://ggus.eu/?mode=ticket_info&ticket_id=124876 124876] (7/11/16)<br />
 
Ops tests not working for ECHO due to problems with the tests. Alastair chased the ticket to the test developers ([https://ggus.eu/?mode=ticket_info&ticket_id=125026 125026]), but there's no movement, not even a reply to Alastair's poke. On hold (13/11)
 
  
[https://ggus.eu/?mode=ticket_info&ticket_id=117683 117683] (18/11/15)<br />
+
32 Open Tickets this week, which is an in depth a look as I've been able to take.
Glue2 publishing for CASTOR. Background work simmers away at this slowly, but Rob in his last update cited the new [https://indico.cern.ch/event/578974/contributions/2695218/attachments/1521318/2377731/ResRep.pdf storage accounting proposal], which would mean no need for glue2 if I'm reading it correctly. On hold (6/11)
+
  
 
<!-- ******************Edit stop********************* ----->
 
<!-- ******************Edit stop********************* ----->

Latest revision as of 14:09, 30 October 2019

Bulletin archive


Week commencing Monday 25th February 2019
Task Areas
General updates

Tuesday 18th June


Tuesday 11th June

Tuesday 4th June 2019


WLCG Operations Coordination - AgendasWiki Page

Tuesday 11th June

  • I got stuck (figuratively) in my machine room last Thursday afternoon so missed it. Agenda. Minutes. Ste was there - any observations?

Tuesday 14th May

  • Next meeting this Thursday.

Tuesday 9th April


Tuesday 26th March

Monday 11th February 2019

  • There was a WLCG ops coordination meeting last Thursday. You can view the meeting notes here.
    • End of CREAM support Dec 2020.
    • Migration from CREAM to be discussed at the EGI conference 6-8 of May in Amsterdam.
    • Operational intelligence discussion (see slides).
    • Experiment updates (see ATLAS discussion on DOMA)
    • WG updates (few).




Tier-1 - Status Page

17 June 2019 Report for the Experiments Liaison Report (17/06/2019) is here.

  • Ongoing, we are seeing high outbound packet loss over IPv6. Central networking performed a firmware update to the border routers but this didn’t resolve the issue. Plan to move connections to the new border routers in Mid June. Will do this before trying to debug any further.

11 June 2019 Report for the Experiments Liaison Report (10/06/2019) is here.

  • Ongoing, we are seeing high outbound packet loss over IPv6. Central networking performed a firmware update to the border routers but this didn’t resolve the issue. Plan to move connections to the new border routers in Mid June. Will do this before trying to debug any further.
  • Three certificates were revoked mistakenly on ARGUS on Thursday. All SAM tests failed until this was fixed the next morning. Batch farm also did not start any new jobs during this time. We used this accidental draining to reboot nodes that needed to pick up security patching.
  • LHCb Castor instance has been completely disabled for LHCb and will be decommissioned.
  • Brian Davies has transferred from his role as GridPP Tier-2 Storage Support Officer and has joined the Tier-1 Production Team. Although this has happened with immediate effect he will still be available for ad-hoc/informal storage support.
Storage & Data Management - Agendas/Minutes

Wed 30 Oct

  • DOME upgrade problems at Edinburgh
  • Data management support/development for IRIS users

Wed 23 Oct

  • Rucio reporting

Wed 16 Oct

  • CEPH workshop at CERN report

Wed 02 Oct

  • Safe to upgrade to DPM 1.13 but make sure the BDII is working if you support DIRAC
  • Roadmap for xroot and http TPC for RAL FTS(es)

Wed 25 Sept

  • Storage support for IRIS VOs?

Wed 18 Sept

  • Report from yesterday's Rucio Face Meeting at Coseners
  • Suggestions for following up from yesterday's CEPH day hosted by CERN

Wed 11 Sept

  • Storage related stuff at the FNAL (pre-)GDBs
  • DOME upgrade tickets for non-DOME DPM sites

Wed 04 Sept

  • Banning in SSC not entirely successful in non-DOME DPM, and end of support is nigh; tickets to upgrade will go out shortly.
  • Storage-and-data-management-wise, GridPP43 was interesting although no-one volunteered to install the next CEPH.


Tier-2 Evolution - GridPP JIRA

Tuesday 30 Apr 2019

  • ATLAS CernVM4 VMs (equivalent to CentOS 7.6) being tested


Accounting - UK Grid Metrics HEPSPEC06 Atlas Dashboard HS06

Tuesday 6th February


Tuesday 30th January

Tuesday 24th Oct


Monday 16th January

  • The discussion topic for next week will be accounting comparisons. Please note Alessandra's comments last week.

Monday 14th November

  • Alessandra has written an FAQ to extract numbers from ATLAS and APEL avoiding the SSB.

Monday 26th September

  • A problem with the APEL Pub and Sync tests developed last Tuesday and was resolved on Wednesday. This had a temporary impact on the accounting portal.
Documentation - KeyDocs

Tue 9th July 2019

LHCb has added this to their requirements:

Sites not having an SRM installation must provide:

Tue 16th April 2019

Minor change to LHCB requirements in Approved VOs:

  • Sites having migrated to the Centos7 (including "Cern Centos7") operating system or later versions are requested to provide support for singularity containers.

https://www.gridpp.ac.uk/wiki/GridPP_approved_VOs#VO_Resource_Requirements

Tue 2nd April 2019

Changes to Approved for DUNE (and LZ)

There is a new "Approved VOs" document showing new settings for DUNE. And, since both LZ's voms servers now show up in the EGI Portal, I've removed the (now spurious) entry for voms.hep.wisc.edu that was formerly being inserted by hand.

https://www.gridpp.ac.uk/wiki/GridPP_approved_VOs

I've also created a new set of RPMs (each has all LSC, VOMS, and XML for one VO) for all approved VOs. See Approved VOs doc for details, version is 1.9.

Sites with DUNE services need to update using whatever method they employ.

Special note: Since voms1.fnal.gov changed yesterday, I've updated documentation for that right away. But voms2.fnal.gov remains as it is until 23rd April (3 weeks). I'll update documentation for that when it is closer. Staggering the updates like this gives a time margin, so any particular site can have at least one service properly configured at any time. But it does mean that two site updates are needed; one now, and one in three weeks. However, since it's sufficient for only one (of the two) voms servers to be configured properly, sites could save effort and wait until (say) 19th April, then update both at once. But I can't dictate what site admins should do. It's your call.

Ste


Tuesday 5th Mar 2019 New VOMs details for Biomed: https://www.gridpp.ac.uk/wiki/GridPP_approved_VOs

New VOMs rpms to match.

http://hep.ph.liv.ac.uk/~sjones/RPMS.voms/

Tuesday 12th Feb 2019 Documentation done for HTCondor-CE apel accounting. https://twiki.cern.ch/twiki/bin/view/LCG/HtCondorCeAccounting


Tuesday 12th Feb 2019 New CA DN for Biomed

< VOMS_CA_DN="'/C=FR/O=CNRS/CN=GRID2-FR' "
---
> VOMS_CA_DN="'/C=FR/O=MENESR/OU=GRID-FR/CN=AC GRID-FR Services' "

Tuesday 5th Feb 2019 For enmr, certificate of voms-02.pd.infn.it

New DN: /DC=org/DC=terena/DC=tcs/C=IT/L=Frascati/O=Istituto Nazionale di Fisica Nucleare/CN=voms-02.pd.infn.it, New CA_DN: /C=NL/ST=Noord-Holland/L=Amsterdam/O=TERENA/CN=TERENA eScience SSL CA 3

Please check approved VOs: https://www.gridpp.ac.uk/wiki/GridPP_approved_VOs


General note

See the worst KeyDocs list for documents needing review now and the names of the responsible people.

Interoperation - EGI ops agendas Indico schedule

14 May 2019

  • Meeting for May cancelled. Next meeting is on 10th June.

Monday 11th March


Tuesday 12th February

  • There was an EGI ops meeting yesterday - Agenda. We were asked to review the IPv6 readiness information (see here). We should perhaps link in the GridPP IPv6 table for updates status.


Friday 1st February

Thursday 17th January EGI OMB meeting

  • CREAMCE to be out of support by Dec 2020
  • More effort to fix accounting issue of HTCondor CE

Monday 14th January 2019

  • No UK specific issue mentioned.
  • IPv6 readiness plan is going to be summarized at OMB.

'


Monitoring - Links MyWLCG

Tuesday 4th July

  • There were a number of useful links provided in the monitoring talks at the WLCG workshop in Manchester - especially those in the Wednesday sessions.

Monday 13th February

  • This category is pretty much inactive. Are there any topics under "monitoring" that anyone wants reported at this ops meeting? If not we will remove this section from the regular updates area of the bulletin and just leave the main links.

Tuesday 1st December


Tuesday 16th June

  • F Melaccio & D Crooks decided to add a FAQs section devoted to common monitoring issues under the monitoring page.
  • Feedback welcome.


On-duty - Dashboard ROD rota

Tuesday 5th February

  • Birmingham decommissioning of SRM and BDII still going on so tickets are on hold.
  • Few availability tickets on hold
  • Lancaster has WebDav ticket on hold which seems to be effect of DOME rollout

Tuesday 14th August

  • A couple of new availability tickets (QMUL and Lancaster), both for well-publicised reasons. Otherwise quiet. AM on shift this week.


Rollout Status WLCG Baseline

Monday 20th November



Historical References


Security - Incident Procedure Policies Rota

Tuesday 11th June

  • NTR


Services - PerfSonar production dashboard |PerfSonar ETF | OSG Networking and perfSONAR pages | GridPP VOMS

- This includes notifying of (inter)national services that will have an outage in the coming weeks or will be impacted by work elsewhere. (Cross-check the Tier-1 update).

Monday 5th March

Monday 10th September

Monday 2nd July

Monday 30th April

Monday 19th February

Please could sites upgrade their perfsonar hosts to CentOS7. Instructions are here. Current OS versions here.

  • Duncan has recreated the UK perfSONAR mesh. Link here!


Tickets

32 Open Tickets this week, which is an in depth a look as I've been able to take.

Tools - MyEGI Nagios

Monday 20th November

Tuesday 18th July

  • Following our ops discussion last week, Steve will focus his tests on supporting the GridPP DIRAC area and decommission the other tests.


VOs - GridPP VOMS VO IDs Approved VO table

Monday 20th November

  • Tom Whyntie has requested (and been granted) access to the GridPP VO to get some pipelines working for large-scale processing and analysis of MRI scans associated with the UK Biobank project.
  • All VOs in the incubation page being prompted for updates by the end of November (required input for OC documents).
  • QMUL (Steve L) is following up on the biomed MoU. GridPP want to be cited in research papers for the support our resources/sites provide.


Site Updates

Date



Meeting Summaries
Project Management Board - MembersMinutes Quarterly Reports

Empty

GridPP ops meeting - Agendas Actions Core Tasks

Empty


RAL Tier-1 Experiment Liaison Meeting (Wednesday 13:30) Agenda Meeting takes place on Vidyo.

Highlights from this meeting are now included in the Tier1 report farther up this page.

WLCG Grid Deployment Board - Agendas MB agendas

Empty



NGI UK - Homepage CA

Empty

Events
UK ATLAS - Shifter view News & Links

Atlas S&C week 2-6 Feb 2015

Production

• Prodsys-2 in production since Dec 1st

• Deployment has not been transparent , many issued has been solved, the grid is filled again

• MC15 is expected to start soon, waiting for physics validations, evgen testing is underway and close to finalised.. Simulation expected to be broadly similar to MC14, no blockers expected.

Rucio

• Rucio in production since Dec 1st and is ready for LHC RUN-2. Some fields need improvements, including transfer and deletion agents, documentation and monitoring.

Rucio dumps available.

Dark data cleaning

files declaration . Only Only DDM ops can issue lost files declaration for now, cloud support needs to fill a ticket.

• Webdav panda functional tests with Hammercloud are ongoing

Monitoring

Main page

DDM Accounting

space

Deletion

ASAP

• ASAP (ATLAS Site Availability Performance) in place. Every 3 months the T2s sites performing BELOW 80% are reported to the International Computing Board.


UK CMS

Empty

UK LHCb

Empty

UK OTHER
  • N/A
To note

  • N/A