EGI Verification Testbed
EGI Verification Testbed
Enolfc: Initial attempt to collect info about verification
Available Services
The site bdii has currently the following resources configured:
BDII_SBDII_URL="ldap://sbdii02.ncg.ingrid.pt:2170/mds-vo-name=resource,o=grid"
BDII_TBDII_URL="ldap://topbdii02.ncg.ingrid.pt:2170/mds-vo-name=resource,o=grid"
BDII_VOMS_URL="ldap://voms02.ncg.ingrid.pt:2170/mds-vo-name=resource,o=grid"
BDII_WMS_URL="ldap://tst04.ific.uv.es:2170/mds-vo-name=resource,o=grid"
BDII_LB_URL="ldap://tst05.ific.uv.es:2170/mds-vo-name=resource,o=grid"
BDII_CREAM_URL="ldap://test06.egi.cesga.es:2170/mds-vo-name=resource,o=grid"
BDII_DPM_URL="ldap://test08.egi.cesga.es:2170/mds-vo-name=resource,o=grid"
Service | Host | Comments |
---|---|---|
topbdii | topbdii02.ncg.ingrid.pt | Only contains the Site UMD-VERIFICATION |
site bdii | sbdii02.ncg.ingrid.pt | Site Name = UMD-VERIFICATION |
voms server | voms02.ncg.ingrid.pt | Avaialable VOs: ops.vo.ibergrid.eu & iber.vo.ibergrid.eu |
arc-ce | test03.egi.cesga.es | |
arc info | test04.egi.cesga.es | |
WMS | tst04.ific.uv.es | |
LB | tst05.ific.uv.es | |
UI | test13.egi.cesga.es | |
CREAM-CE/Torque | test06.egi.cesga.es | |
WN/Torque | test14.egi.cesga.es, test15.egi.cesga.es | Also used for glite-MPI and glexec |
APEL Publisher | test07.egi.cesga.es | |
DPM | test08.egi.cesga.es |
Repository Configuration
This document assumes SL5 x86_64 PPAs verification, for other architectures the actual repositories to use may change
Base & EPEL
Verification is done using the SL5 distribution + EPEL repositories. You must have in your yum repositories list the following ones:
- SL5 BASE and updates:
[sl-base] name=SL 5 base baseurl=http://ftp.scientificlinux.org/linux/scientific/55/$basearch/SL http://ftp1.scientificlinux.org/linux/scientific/55/$basearch/SL http://ftp2.scientificlinux.org/linux/scientific/55/$basearch/SL ftp://ftp.scientificlinux.org/linux/scientific/55/$basearch/SL #mirrorlist=ftp://ftp.scientificlinux.org/linux/scientific/mirrorlist/sl-base-55.txt enabled=1 gpgcheck=0 # To use priorities you must have yum-priorities installed priority=10 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-sl file:///etc/pki/rpm-gpg/RPM-GPG-KEY-sl5 file:///etc/pki/rpm-gpg/RPM-GPG-KEY-csieh file:///etc/pki/rpm-gpg/RPM-GPG-KEY-dawson file:///etc/pki/rpm-gpg/RPM-GPG-KEY-jpolok file:///etc/pki/rpm-gpg/RPM-GPG-KEY-cern file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5 [sl-security] name=SL 5 security updates baseurl=http://ftp.scientificlinux.org/linux/scientific/55/$basearch/updates/security http://ftp1.scientificlinux.org/linux/scientific/55/$basearch/updates/security http://ftp2.scientificlinux.org/linux/scientific/55/$basearch/updates/security ftp://ftp.scientificlinux.org/linux/scientific/55/$basearch/updates/security #mirrorlist=ftp://ftp.scientificlinux.org/linux/scientific/mirrorlist/sl-security-55.txt enabled=1 gpgcheck=0 # To use priorities you must have yum-priorities installed priority=10 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-sl file:///etc/pki/rpm-gpg/RPM-GPG-KEY-sl5 file:///etc/pki/rpm-gpg/RPM-GPG-KEY-csieh file:///etc/pki/rpm-gpg/RPM-GPG-KEY-dawson file:///etc/pki/rpm-gpg/RPM-GPG-KEY-jpolok file:///etc/pki/rpm-gpg/RPM-GPG-KEY-cern file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
- EPEL
[extras] name=epel mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-5&arch=$basearch protect=0 enabled=1 priority=20
- EGI trust anchors
[EGI-trustanchors] name=EGI-trustanchors baseurl=http://repository.egi.eu/sw/production/cas/1/current/ gpgkey=http://repository.egi.eu/sw/production/cas/1/GPG-KEY-EUGridPMA-RPM-3 gpgcheck=1 enabled=1
Product Repository
You must also add the repository with the packages that you are currently verifying. The URL for the repository can be found at the Custom Fields of the RT ticket within attribute RepositoryURL. The easiest way of adding the repositoy is using the files available at the repofiles directory.
Example config file for CREAM release 1.13.0 RT ticket 2206, has the repository located at http://admin-repo.egi.eu/sw/unverified/emi.cream.sl5.x86_64/1/13/0 and the repofile is available at http://admin-repo.egi.eu/sw/unverified/emi.cream.sl5.x86_64/1/13/0/repofiles/EMI.cream.sl5.x86_64.repo
Contents of this file is shown below:
# EGI Software Repository - REPO META (releaseId,repositoryId,repofileId) - (2206,239,166) [EMI.cream.sl5.x86_64] name=EMI.cream.sl5.x86_64 baseurl=http://admin-repo.egi.eu/sw/unverified/emi.cream.sl5.x86_64/1/13/0/ enabled=1 protect=1
Issues
Package signing
GPG keys are not provided by repofiles and signature checks of packages cannot be used currently, a solution for this issue is being investigated. In the meantime, make sure to use gpgcheck=0 in the yum repo file.
Extras Repository
For verification of EMI 1.0 Release, an extra repository with compatibility packages is also needed for some products, at least WMS and UI. See information available at RT ticket 2243. Repository file can be obtained from http://repository.egi.eu/sw/stagerollout/emi.extras.sl5.x86_64/1/repofiles/EMI.extras.sl5.x86_64.repo.
[EMI.extras.sl5.x86_64] name=EMI.extras.sl5.x86_64 baseurl=http://repository.egi.eu/sw/stagerollout/emi.extras.sl5.x86_64/1/ enabled=1 protect=1