Difference between revisions of "Operations Bulletin Latest"

Tuesday 20th December

• There was a WLCG GDB last Wednesday 14th December.
  • Introduction.
  • Long shutdown proposals.
  • HEPiX report.
  • ALICE use of HPC.
  • Authentication and Authorisation for Research and Collaboration (AARC) report.
  • Security Operations Centre WG.
  • Security Policy Update
  • Community White Paper: HEP Roadmap for software & computing.
• EFDA-JET is now closed. We thank them for their support and contributions over the years.
• The latest WLCG ops status as of Monday 19th.
• Next LHCOPN and LHCONE meeting: BNL, Long Island, New York (US) 4-5 of April 2017
• Marcus: survey for storage support at sites
• RIPE anchor probe @ Harwell
• There was an EGI Operations Management Board (OMB) meeting last Thursday.

Monday 12th December

• January pre-GDB on Networking (Sites and Operations session input requested)
• We have received notification of the November T2 R/A figures.
  • ALICE. All okay
  • ATLAS
    • RHUL 89%:91%
    • Glasgow 85%:85%
  • CMS. All okay
  • LHCb
    • Liverpool 33%:33%
    • Glasgow 28%:28%
  • Explanations:
    • RHUL: There was a DPM database move scheduled during the month.
    • LHCb results were poor (for Liverpool and Glasgow) due to SRM tests which were false positives. This has been corrected and re-computations are being requested.
    • Glasgow (ATLAS): 1-2 November - Downtime due to Power failure. 7 November - DPM pool node disk042 caused issues with DPM headnode. 17-18 November - DPM pool nodes disk042/disk070 caused issues with DPM headnode freezing SRM.
• The EGI Security Policy Group has produced a revised draft version of the top-level Security Policy bringing the document up to date in terms of terminology and with the current set of security policy documents.
• GridPP DIRAC job limits and other VO usage of resources.
• Resource utilisation - can we distill the main drivers?

Monday 5th December

• December 6th 2016 ARGO team will decommission the old SAM GridMon box mon.egi.eu, housing central ATP and POEM. These services became obsolete when we switched to central monitoring instances in July. VO SAM instances will not be affected as they are using local ATP and POEM.
• Planet GridPP run by Glasgow for our GridPP blog posts is being moved to run on a VM this week.
• The current VO table for GridPP is active under: http://pprc.qmul.ac.uk/~lloyd/gridpp/votable.html.
• Marcus raised a question on: removing SE from GridPP dirac. Any general observations?
• Matt reports on 'TMPDIR strategies': sandbox and home areas, mounted on a reasonable nfs server not working under SGE for DUNE. Pointed to https://wiki.egi.eu/wiki/Tools/Manuals/TS122.
• The website for submitting CHEP 2016 papers will open soon. The site is provided by IOP and the committee have requested some modifications to help ensure that the submitted papers can be correctly mapped on to the relevant CHEP 2016 tracks. This process is taking a little longer than planned.
• NA62 is now in the list of GGUS VOs.
• 3rd Developers@CERN Forum - Frontend & User interfaces.
• News from Monday's WLCG ops meeting.
• CERN accounts - status.

Monday 28th November

• Testing of the new GOC-DB 5.7 version is invited over the next 2 weeks. For more information see the GGUS ticket.

Monday 5th December

• There was a WLCG ops coordination meeting on 1st: Agenda | Minutes

Monday 7th November

• Minutes from the November 2nd 2016 at 4pm CET: MW Readiness WG meeting
• There was a WLCG ops coordination meeting last wee. [ https://indico.cern.ch/event/540423/ Agenda] | Minutes.
  • The theme of the next meeting on Dec. 1st will be the results of the Lightweight Site survey. There will be a sub-topic on HTCondor Accounting.

Tuesday 25th October

• The next middleware readiness meeting will be on 2nd November. [ http://indico.cern.ch/e/MW-Readiness_19 Agenda].

Monday 3rd October

• There was a WLCG ops coordination meeting last week: Agenda. (Good to review in the ops meeting).

Monday 26th September

• There is a WLCG ops coordination meeting on 29th. The theme is 'lightweight sites'.

Monday 19th September

• There was a WLCG Throughput call on 15th.
• The next ops meeting is on 29th. Theme suggestions welcome.

Tuesday 10th January A reminder that there is a weekly Tier-1 experiment liaison meeting. Notes from the last meeting here

• Generally steady operations over the holiday break.
• The upgrade of Castor to version 2.1.15 will cause a series of outages as announced via the GOC DB. The first one is today (10th Jan).
• CMS reported poor job efficiencies across their Tier1 sites. We have been seeing a steady rate of SAM test failures for CMS.

Wednesday 21 Dec

• Report from Computing Insights UK (nee MEW)
• Highlights and lowlights of the year (storage and data management only - which seems to have fared better than the world in general)

Wednesday 07 Dec

• Good GridPP presence at the CLOUD-SIG workshop at Crick last week. Real Work™ included GridFTP-endpoint-in-the-cloud and Jupyter notebooks. How do you get data into a Jupyter notebook (from the grid)?
• Opportunity to do more with data transfer between infrastructures.

Wednesday 23 Nov

• A couple of operational issues; ATLAS data mover triggering lack of checksum support in xroot in Edinburgh DPM

Wednesday 16 Nov

• Some curious operational issues with failed xroot transfers - need more testing
• Duncan provided feedback from the JISC data transfer/campus networking workshop

Thursday 5 January 2017

• Vac 02.00 released, with SuperSlots mechanism for handling a mixture of different VM sizes on the same hypervisors.

Monday 2 January 2017

• VacMon monitoring of Vac and Vcycle sites available at http://vacmon.gridpp.ac.uk/ (GRIDPP-37)
• ATLAS VMs using the generic VMCondor framework shared with ALICE are in production (GRIDPP-17)

Wednesday 14 December

• LHCb has added Vac resources to the LHCb_CRITICAL profile used in the SAM3 dashboard and WLCG site A&R reports. (GRIDPP-5)

Monday 12 December

• ALICE VMs in production at Manchester. Other Vac sites invited to install it. (No VOBOX required...)

Monday 14th November

• Alessandra has written an FAQ to extract numbers from ATLAS and APEL avoiding the SSB.

Monday 26th September

• A problem with the APEL Pub and Sync tests developed last Tuesday and was resolved on Wednesday. This had a temporary impact on the accounting portal.

• APEL status: An issue at Sheffield?

Tue 22nd Nov

• More on Accounting audit tools

The process for ARC, Toque and VAC is now documented here.

https://github.com/gridpp/audit/wiki

Tue 15 Nov

• Accounting audit tools

GridPP project in github used to host documents and scripts to audit work done accounts independently of APEL. So far, methods exist for ARC CE, and Torque batch system. Method for VAC still rough and being worked out by (e.g.) next week. To get the material:

git clone https://sjones-hep-ph-liv-ac-uk@github.com/gridpp/audit.git

Substituting you own github username. Or go to:

https://github.com/gridpp/audit

For write access, ask Andrew McNab.

• Changes to CMS resource requirements in Approved VOs

See https://www.gridpp.ac.uk/wiki/GridPP_approved_VOs

Scroll to the Resources table at the bottom and check the new CMS requirements.

Tue 1 Nov

Publishing tutorial updated to use new wording for various measurements.

https://www.gridpp.ac.uk/wiki/Publishing_tutorial#Accounting_transmissions

https://www.gridpp.ac.uk/wiki/GridPP_approved_VOs

General note

See the worst KeyDocs list for documents needing review now and the names of the responsible people.

Monday 7th November

• There was an EGI Ops meeting today: agenda

• UMD 3.14.5 released today
  • VOMS 3.5.0, which makes RFC proxies the default for voms-proxy-init

• UMD 4.3.0 'October' release, release candidate ready, to be released by end of this week, including:
  • ARC, GFAL2, XROOT, Davix, dCache, ARGUS, Gridsite, edg-mkgrid, umd-release for CentOS7

• please start using UMD4/SL6 or UMD4/CentOS7 instead of UMD3/SL6 & please don't use anymore EMI3
  • (think there may be a campaign around this soon)

• Downtimes due to the vulnerability CVE-2016-5195: request an A/R recomputation
  • All the resource centres that were affected by the vulnerability CVE-2016-5195 and that declared a downtime between 2016-10-20 16:00 UTC and 2016-10-31 18:00 UTC are invited to request a recomputation of A/R figures for the days in which the downtime was ongoing.

• ARGO proposal to use GOCDB as the only source of topology information
  • https://indico.egi.eu/indico/event/3092/contribution/2/material/0/0.pdf

• VAPOR 2.1 released in September, it replaces GSTAT
  • each NGI should review the information provided by their sites and let us know any inconsistency: http://operations-portal.egi.eu/vapor/resources/GL2ResSummary

• Next meeting: Dec 5th, 2016 meeting calendar

Tuesday 1st December

• Sites are kindly invited to update the monitoring status page at https://www.gridpp.ac.uk/wiki/Site_monitoring_status

Tuesday 16th June

• F Melaccio & D Crooks decided to add a FAQs section devoted to common monitoring issues under the monitoring page.
• Feedback welcome.

Tuesday 31st March

• Glasgow Graphite/Grafana documentation: http://www.scotgrid.ac.uk/graphite/

Monday 7th December

• Meeting last Friday - agenda: https://indico.cern.ch/event/356853/ minutes: https://indico.cern.ch/event/356853/material/minutes/1.pdf
• This was the wrap-up meeting of the consolidation TF; the mailing list will remain extant for a while yet.

Monday 5th December

• Another fairly quiet week. There were a few new tickets, which are mostly now resolved. There was an intermittent SRM alarm at RALPP which sporadically appeared then disappeared; it finally hung around long enough today to raise a ticket.

Monday 21st November

• EFDA low-availability (egi.eu.lowAvailability-/EFDA-JET@EFDA-JET_Availability) ticket finally removed!

Monday 14th November

• AM reports: End of two week shift. Various planned and unplanned downtimes. No grid-wide issues.

Tuesday 7th December

• Raul reports: validation of site BDII on Centos 7 done.

Tuesday 15th September

• UMD 3.13.3 is available.

Tuesday 12th May

• MW Readiness WG meeting Wed May 6th at 4pm. Attended by Raul, Matt, Sam and Jeremy.

References

• Staged Rollout pages (now separated into EMI1 & 2), and the page listing the deployed versions is extractable from the bdii, so they should all be reasonably up-to-date:
• http://www.hep.ph.ic.ac.uk/~dbauer/grid/staged_rollout.html
• http://www.hep.ph.ic.ac.uk/~dbauer/grid/staged_rollout_emi2.html
• http://www.hep.ph.ic.ac.uk/~dbauer/grid/state_of_the_nation.html

Tuesday 20th December

• CVE-2016-7117 downgraded from CRITICAL to HIGH by EGI SVG [1]
• One, non-UK incident advisory from EGI CSIRT affecting one site. Not known to have affected other sites but more details expected after further analysis.

Tuesday 13th December

• CVE-2016-7117 still waiting for distro. kernel updates
• EGI Dashboard hint: to display a recent history of state records -
  • Starting from the "Issues" page for a site
  • Select right-hand-upper drop-down “Issues” and select “History”
  • Click the required test in the table shown e.g. ARC-Pakiti-Check
  • Select "Records" from the upper-menu

Tuesday 6th December

• One user suspension (and subsequent release) in Argus due to an EGI FedCloud incident. Not know to affect UK.
• CVE-2016-7117 still waiting for distro. kernel updates
• Next Security Team meeting on the 13th Dec.
• Certificate has expired on pakiti.egi.eu 5/12/2016 [2]

Monday 21st November

• The IGTF will release a regular update to the trust anchor repository (1.79) on Monday, Nov 28th 2016.
• We are still seeing sites pop-up in the dashboard in relation to EGI-SVG-2016-11476.
• CVE-2016-7117 still waiting for distro. kernel updates

The EGI security dashboard.

- This includes notifying of (inter)national services that will have an outage in the coming weeks or will be impacted by work elsewhere. (Cross-check the Tier-1 update).

Tuesday 25th October

• Duncan has recreated the UK perfSONAR mesh. Link here!

Monday 19th September

• UK eScience CA - certificate issuance problems. Jens reported that on 15th a partial but significant database corruption occurred on the signing system for the CA. Data was restored from (offline) backups but the rebuild was not correctly configured.

• A large number of site admins and other GridPP supporters appeared to be suspended from the dteam VO last week. “During a planned upgrade operation of VOMS service, a system malfunction occurred. As a result, some users received false notification about membership expiration. We are in contact with the software development team in order to identify the cause.”

Tuesday 20th December 2016, 10.00 GMT
22 Open UK Tickets this week

The Tickets of Christmas Prodding.
These tickets could do with an update before we head off for our tofukey dinners:

125169 (24/11)
BIRMINGHAM ticket, regarding small VOs and their batch system. Daniela had to reopen the ticket, which I think has meant it snuck by Mark. Reopened (14/12)

122771 (11/7)
BIRMIGNHAM xrootd/http endpoint ticket. Atlas have tested xrdcp and failed, but have asked if the full path is exported. Could do with a reply before Christmas. In progress (15/12)

125503 (9/12)
SUSSEX ticket, from Sno+ regarding file access. I think the most obvious input from us would be to advise Sno+ to stop using lcg-cp! In progress (15/12)

125320 (2/12)
RALPP nagios ticket, Chris was going to install the machine offending his dcache last week. Any joy? I'm being finicky here as this ticket is already On Hold (13/12)

124848 (4/11)
RHUL CMS ticket - I'm just checking that all is chugging along on this front, there's a lot of CMS chatter on it. In progress (19/12)

125613 (100IT)
125492 (QMUL)
Finally, two ROD tickets waiting for input - but I'm thinking that answering the queries might require extra input from outside.

The Tickets of Christmas Solved.
These look to me like they can be wrapped up for the holiday season.

125157 (24/11)
TIER 1 ticket, extras-fp7.eu cvmfs setup. It seems to be going well, at last check we were just waiting on the statum 1s to be replicated. I might be jumping the gun a bit saying this ticket is closed, but it's almost there. In Progress (7/12)

124606 (24/10)
TIER 1 CMS consistency checking ticket. Andrew L has done all that was asked of him, I wouldn't be surprised if the CMS side has disappeared for the holidays so I would say you could close this ticket. Waiting fore reply (9/12)

124758 (1/11)
EDINBURGH nagios availability ticket, the numbers are all green so it can be closed. Waiting for reply(?) (15/12)

The Tickets of Christmas On Hold.
These tickets could do with being On Held, or at least have a note on them saying "Will get to this next year".

125480 (9/12)
TIER 1 ticket regarding CPU publishing - I doubt even Andrew L isn't hardcore enough to roll out something new this side of Yuletide, so this could do with being On Held until next year. In progress (12/12/)

(Thanks to sites who On Held those bothersome AFS tickets).

29th November 2016

LSST monitoring is available through vo-nagios

https://vo-nagios.physics.ox.ac.uk/nagios/cgi-bin/status.cgi?servicegroup=lsst&style=detail

13th September 2016

• New wiki page has been created for ARGO Nagios https://www.gridpp.ac.uk/wiki/ARGO_Nagios_Monitoring. I will add some more information to it later.
• Removed old wiki links about sam nagios from gridpp wiki page.
• VO nagios still exist and working. I have opened a ticket to explore ARGO VO Nagios, https://ggus.eu/index.php?mode=ticket_info&ticket_id=123604

19th July

Both instances of gridppnagios at Oxford and Lancaster has been decommissioned.

12th July 2016

Central ARGO monitoring service has started from 1st of July. All grid resources are monitored through two Nagios instances

https://argo-mon.egi.eu/nagios/

https://argo-mon2.egi.eu/nagios/

It has same interface as gridppnagios. Alarms from these instances goes to Operational Dashboard

http://argo.egi.eu/ is a web interface which provides availability/reliability figures and site status. It is equivalent of old myegi interface with some additional services.

I am planning to decommission both instances of gridppnagios in coming weeks. I have stopped nagios and httpd on both instances so it will not send tests to grid resources in UK. I will also decommission storage-monit.physics.ox.ac.uk which was only used for storage replication test.

We will keep vo-nagios.physics.ox.ac.uk running until we get a replacement for vo-monitoring.

Monday 13th June

• Active Nagios instance moved to Lancaster

Tuesday 5th April 2016

Oxford had a scheduled network warning so active nagios instance was moved from Oxford to Lancaster. I am not planning to move it back to Oxford for the time being.

Tuesday 26th Jan 2016

One of the message broker was in downtime for almost three days. Nagios probes picks up a random message broker and failover is not working so a lot of ops jobs hanged for long time. Its a known issue and unlikely to be fixed as SAM Nagios is in its last leg. Monitoring is moving to ARGO and many things are not clear at the moment.

Monday 30th November

• The SAM/ARGO team has created a document describing Availability reliability calculation in ARGO tool.

Tuesday 19th May

• There is a current priority for enabling/supporting our joining communities.

Tuesday 5th May

• We have a number of VOs to be removed. Dedicated follow-up meeting proposed.

Tuesday 28th April

• For SNOPLUS.SNOLAB.CA, the port numbers for voms02.gridpp.ac.uk and voms03.gridpp.ac.uk have both been updated from 15003 to 15503.

Tuesday 31st March

• LIGO are in need of additional support for debugging some tests.
• LSST now enabled on 3 sites. No 'own' CVMFS yet.

• Impact
  • Citation policy (https://www.gridpp.ac.uk/acknowledging.html)

Tuesday 23rd February

• For January:

ALICE: All okay.

• ATLAS:

RHUL 89%:89% Lancaster 0%:0%

• CMS:

RALPP: 80%::80%

• LHCb:

RALPP: 77%:77%

• Site responses:

• • RHUL: The largest problem was related to the SRM. The DPM version was upgraded and it took several weeks to get it working again (13 Jan onwards). Several short-lived occurrences of running out of space on the SRM for non-ATLAS VOs. For around 3 days (15-17 Jan) the site suffered from a DNS configuration error by their site network manager which removed their SRM from the DNS, causing external connections such as tests and transfers to fail. For one day (25 Jan) the site network was down for upgrade to the 10Gb link to JANET. Some unexpected problems occurred extending the interruption from an hour to a day. The link has been successfully commissioned.

• • Lancaster: The ASAP metric for Lancaster for January is 97.5 %. There is a particular problem with ATLAS SAM tests which doesn’t affect the site activity in production and analysis and this relates to the path name being too long. A re-calculation has been performed.

• • RALPP: Both CMS and LHCb low figures are due to specific CMS jobs overloading the site SRM head node. The jobs should have stopped now.

Empty

Empty

Highlights from this meeting are now included in the Tier1 report farther up this page.

Empty

Empty

Atlas S&C week 2-6 Feb 2015

Production

• Prodsys-2 in production since Dec 1st

• Deployment has not been transparent , many issued has been solved, the grid is filled again

• MC15 is expected to start soon, waiting for physics validations, evgen testing is underway and close to finalised.. Simulation expected to be broadly similar to MC14, no blockers expected.

Rucio

• Rucio in production since Dec 1st and is ready for LHC RUN-2. Some fields need improvements, including transfer and deletion agents, documentation and monitoring.

• Rucio dumps available.

• Dark data cleaning

• files declaration . Only Only DDM ops can issue lost files declaration for now, cloud support needs to fill a ticket.

• Webdav panda functional tests with Hammercloud are ongoing

Monitoring

• Main page

• DDM Accounting

• space

• Deletion

ASAP

• ASAP (ATLAS Site Availability Performance) in place. Every 3 months the T2s sites performing BELOW 80% are reported to the International Computing Board.

Empty

Empty

• N/A