Alert.png The wiki is deprecated and due to be decommissioned by the end of September 2022.
The content is being migrated to other supports, new updates will be ignored and lost.
If needed you can get in touch with EGI SDIS team using operations @ egi.eu.

Difference between revisions of "EGI-InSPIRE:Italy-QR10"

From EGIWiki
Jump to navigation Jump to search
 
(32 intermediate revisions by 3 users not shown)
Line 1: Line 1:
__NOTOC__
{{Template:EGI-Inspire menubar}}
 
{{Template:Inspire_reports_menubar}}
{{TOC_right}}
{| border="1" cellspacing="0" cellpadding="2"
{| border="1" cellspacing="0" cellpadding="2"
|-
|-
Line 13: Line 16:
| P. Veronesi
| P. Veronesi
|-
|-
<!--
| QR10
| QR10
| IGI  
| IGI  
Line 19: Line 21:
| M. Reale
| M. Reale
|-
|-
-->
|}
|}


Line 79: Line 80:
|-
|-
!scope="col"|Publication title||Journal / Proceedings title||align="left" |Journal references<br> ''Volume number<br> Issue<br><br>Pages from - to''||align="left" |Authors ''<br>1.<br>2.<br>3.<br>Et al?''
!scope="col"|Publication title||Journal / Proceedings title||align="left" |Journal references<br> ''Volume number<br> Issue<br><br>Pages from - to''||align="left" |Authors ''<br>1.<br>2.<br>3.<br>Et al?''
|-
| Publication title
| Journal / Proceedings title
| Journal references
| Authors
|-
|-
|}
|}
Line 91: Line 87:


===2.1. Progress Summary===
===2.1. Progress Summary===
==== 2.1.2. GARR &nbsp;  ====
==== 2.1.1. GARR &nbsp;  ====
'''Plans for next period'''
* Further extend the global IPv6 testbed including new sites and services. Further report on outcomes on https://wiki.egi.eu/wiki/IPv6TestReports. Finalize discussion in HINTS-pS-MDM integration.


==== 2.1.2. INFN &nbsp;  ====
==== 2.1.2. INFN &nbsp;  ====
'''Migration activity'''
'''Migration activity'''
* Core Grid services provided by NGI_IT have been upgraded to EMI-1 or EMI-2.
* Core Grid services provided by NGI_IT have been upgraded to EMI-1 or EMI-2.
* The migration activity of the Sites is still ongoing. Twelve sites are still publishing gLite services, mainly because of well known VO-specific issues or directives (DPM, VOBOX, …); anyway all of them have properly replied to the corresponding COD tickets, providing a schedule for their upgrades.


'''Resource centers changes'''
'''Resource centers changes'''
* Five Resource centers are suspended (GRISU-COMETA-ING-MESSINA, GRISU-COMETA-UNICT-DIIT, GRISU-COMETA-UNICT-DMI, GRISU-COMETA-UNIPA, INFN-NAPOLI-ARGO).  
* Five Resource centers are suspended (GRISU-COMETA-ING-MESSINA, GRISU-COMETA-UNICT-DIIT, GRISU-COMETA-UNICT-DMI, GRISU-COMETA-UNIPA, INFN-NAPOLI-ARGO).  
* One Resource centere have been closed (SISSA-Trieste).
* One Resource center closed (SISSA-Trieste).
* Two Resource centere have been certified (BIOCOMP, INAF-TS).
* Two Resource centers certified (BIOCOMP, INAF-TS).
 
 
 


'''IGI portal'''
'''IGI portal'''
* IGI Portal (https://portal.italiangrid.it) is now accessible for all communities part of IDEM federation.
* We have developed a new plugin for the IGI portal, in order to make easier the data management task to the Grid end user.
* We are developing a new plugin for the IGI portal, in order to make easier the data management task to the Grid end user.  
* We have developed specific interfaces for some application
* We are working on storage solution for providing storage services for scientific gateway
* We are working on storage solution for providing storage services (Grid/Cloud) for scientific gateway
* We are working on cloud solution integration in the portal


'''New core service'''
'''New National Certification Authority'''
* '''AMGA catalog''': an AMGA server has been installed and configured. Some tests have been carried out and the server is now available for Italian
communities.
* '''CVMFS''': a CVMFS server is now available for SuperB community;
* '''CVMFS''': a CVMFS server is under test to distribute software for some regional VOs;
 
''' National Certification Authority'''
* Improvements in the design of the IGI on line CA, preparation of the needed certificate profiles and setup of a first test environment with all the final elements foreseen in the architecture (CA,Myproxy server,public frontend etc..).
* Improvements in the design of the IGI on line CA, preparation of the needed certificate profiles and setup of a first test environment with all the final elements foreseen in the architecture (CA,Myproxy server,public frontend etc..).
* Preparation of the CP/CPS document of the ROOT-CA and first rough draft of the CP/CPS document for the On Line CA.
* Preparation of the CP/CPS document of the ROOT-CA and for the OnLine CA. A first draft of the CP/CPS document needed for the EUGridPMA accreditation has been prepared and discussed.
* Test of the Hardware Security Module for the IGI online CA with the CA management software that will be used in the production system
* Test of the Hardware Security Module for the IGI online CA with the CA management software that will be used in the production system
* Setup of a test instance for the future IGI Certification Authority. A new software has been tested to implement the CA management.
'''Accounting'''
* HLR 4.0 has been released
* Contribution to the First draft of the OGF Usage Record 2.0
'''Cloud pilot infrastructure'''
* A cloud infrastructure prototype, based on the open source software OpenStack, has been set up. The main OpenStack components have been installed and tested: identity service, image repository, compute node, object storage and dashboard.


'''Security'''
'''Security'''
* Support to the sites for the incident response, vulnerability assessment and monitoring.
* Routine activity concerning the follow up and support to the sites for the critical vulnerability handling. In particular some extra effort has been put for the recent dismission of the gLite 3.1 and 3.2 middleware distributions.
* Organization of the EGI-CSIRT training sessions at the next Technical Forum 2012.
 
'''Ticketing System'''
* Maintenance and evolution of the XOOPS/XHELP ticketing system. In particular, some changes on the code was necessary after the modification of the GGUS SOAP interface.


===2.2. Main Achievements===
===2.2. Main Achievements===
==== 2.2.1. GARR  ====
==== 2.2.1. GARR  ====
'''IPv6'''
* Tested in a preliminar way CREAM CE and DPM using IPv6 in 4 different network configurations. Set up workload components services in the IPv6 testbed. Started structuring a global IPv6 testbed for EGI. Restructured and made more usable the whole IPv6 wiki.
* Coordination with the HEPiX IPv6 testing team and EMI  resulted in the decision to jointly support 3 VOs:  net.egi.eu, ipv6.hepix.org and testers.eu-emi.eu. IPv6 testing will go ahead during the summer months of July and August.


'''Multi Domain Monitoring and Troubleshooting'''
* HINTS further consolidated. Discussions with pS-MDM team on possible integration of probes still on going.
* All intervening persons to the pS-MDM/HINTS meeting agreed to organize a technical meeting to further investigate technical details of the proposed integrated deployment scenario. This will be held at the beginning of September.


==== 2.2.2. INFN  ====
==== 2.2.2. INFN  ====
* The IGI report generator is a more powerful statistics tool.
* Started in October the TPM and DMSU merge, the INFN effort is in the following activities: Triage & assignment and 1st/2nd Level Support
* IGI Portal is now available to all users part of IDEM federation.
* IGI Portal (https://portal.italiangrid.it) is now accessible for all communities part of eduGAIN federation.
* An AMGA the server is now available for Italian communities.
* SR performed during this quarter (according with the [http://www.lip.pt/computing/apps/EGI_EA/index.php?option=1 plot] provided by Mario David):
* CVMFS server is now available for SuperB community.
** EMI.cream.sl6.x86_64-1.14.1
* Partecipation Virtual team projects (National and International)
** EMI.amga.sl6.x86_64-2.3.0
** VT MPI within EGI
** EMI.mpi.sl5.x86_64-1.3.0
** MPI-Multicore IGI group
** EMI.wms.sl5.x86_64
* During the quarter, EAs performed SR activities for some grid components(LFC, WMS, CLUSTER, CREAM, STORM, VOMS, SAM)
* CVMFS server is now available for igi.italiangrid.it VO.
* Contribution to the final version of the D4.4 deliverable "Security Risk Assessment of the EGI Infrastructure", in particular to the threats definition and risk evaluation.
* New sites Certified: BIOCOMP and INAF-TS
* Installation of a new HLR for GRISU sites
* Accounting data are sent to the accounting database through message passing interface
* Setup of VO Nagios with custom probes for WeNMR VO.
* A cloud insfrastructure prototype is available (internal users)
* As a part of the Training and Dissemination activities of the EGI CSIRT group, we helped to organize the security hands-on at the EGI 2012 TF in Prague.


===2.3. Issues and mitigation===
===2.3. Issues and mitigation===
Line 151: Line 155:
!scope="col"| Mitigation Description
!scope="col"| Mitigation Description
|-
|-
| Relevant and blockng failures during SAM Nagios update 17 caused the interruption of the main server. Successfully switched to the fail-over instance.
| '''INFN''': Discovered some issues related to the Input Sandbox on the WMS. 
| Issues fixed dropping metric result store database. 
| reduced the ISB size on the configuration. Tickets [https://ggus.eu/tech/ticket_show.php?ticket=87533 GGUS 87533] and [https://ggus.eu/tech/ticket_show.php?ticket=87429 GGUS 87429]
|-
| '''INFN''': Update of some of the EMI 2 WMS [https://ggus.eu/tech/ticket_show.php?ticket=87774 GGUS 87774]
| update delayed
|-
| '''GARR''': Need to clarify relationship with CERN site and further integrate sites into the global testbed. Need to dig into the issue of LRMS not working using IPv6.
|  
|-
|-
|}
|}

Latest revision as of 18:20, 9 January 2015

EGI Inspire Main page


Inspire reports menu: Home SA1 weekly Reports SA1 Task QR Reports NGI QR Reports NGI QR User support Reports



Quarterly Report Number NGI Name Partner Name Author
QR10 IGI INFN P. Veronesi
QR10 IGI GARR M. Reale


1. MEETINGS AND DISSEMINATION

1.1. CONFERENCES/WORKSHOPS ORGANISED

Date Location Title Participants Outcome (Short report & Indico URL)
1-3.10.2012 Bologna V site managers school 20 people web site event (in italian)

1.2. OTHER CONFERENCES/WORKSHOPS ATTENDED

Date Location Title Participants Outcome (Short report & Indico URL)
17-21.09.2012 Prague EGI Technical Forum 2012 Participation (around 12 people) in SA1 meetings, presentations and demos web site event


1.3. PUBLICATIONS

Publication title Journal / Proceedings title Journal references
Volume number
Issue

Pages from - to
Authors
1.
2.
3.
Et al?

2. ACTIVITY REPORT

2.1. Progress Summary

2.1.1. GARR  

Plans for next period

2.1.2. INFN  

Migration activity

  • Core Grid services provided by NGI_IT have been upgraded to EMI-1 or EMI-2.
  • The migration activity of the Sites is still ongoing. Twelve sites are still publishing gLite services, mainly because of well known VO-specific issues or directives (DPM, VOBOX, …); anyway all of them have properly replied to the corresponding COD tickets, providing a schedule for their upgrades.

Resource centers changes

  • Five Resource centers are suspended (GRISU-COMETA-ING-MESSINA, GRISU-COMETA-UNICT-DIIT, GRISU-COMETA-UNICT-DMI, GRISU-COMETA-UNIPA, INFN-NAPOLI-ARGO).
  • One Resource center closed (SISSA-Trieste).
  • Two Resource centers certified (BIOCOMP, INAF-TS).

IGI portal

  • We have developed a new plugin for the IGI portal, in order to make easier the data management task to the Grid end user.
  • We have developed specific interfaces for some application
  • We are working on storage solution for providing storage services (Grid/Cloud) for scientific gateway
  • We are working on cloud solution integration in the portal

New National Certification Authority

  • Improvements in the design of the IGI on line CA, preparation of the needed certificate profiles and setup of a first test environment with all the final elements foreseen in the architecture (CA,Myproxy server,public frontend etc..).
  • Preparation of the CP/CPS document of the ROOT-CA and for the OnLine CA. A first draft of the CP/CPS document needed for the EUGridPMA accreditation has been prepared and discussed.
  • Test of the Hardware Security Module for the IGI online CA with the CA management software that will be used in the production system
  • Setup of a test instance for the future IGI Certification Authority. A new software has been tested to implement the CA management.

Accounting

  • HLR 4.0 has been released
  • Contribution to the First draft of the OGF Usage Record 2.0

Cloud pilot infrastructure

  • A cloud infrastructure prototype, based on the open source software OpenStack, has been set up. The main OpenStack components have been installed and tested: identity service, image repository, compute node, object storage and dashboard.

Security

  • Routine activity concerning the follow up and support to the sites for the critical vulnerability handling. In particular some extra effort has been put for the recent dismission of the gLite 3.1 and 3.2 middleware distributions.

Ticketing System

  • Maintenance and evolution of the XOOPS/XHELP ticketing system. In particular, some changes on the code was necessary after the modification of the GGUS SOAP interface.

2.2. Main Achievements

2.2.1. GARR

  • Tested in a preliminar way CREAM CE and DPM using IPv6 in 4 different network configurations. Set up workload components services in the IPv6 testbed. Started structuring a global IPv6 testbed for EGI. Restructured and made more usable the whole IPv6 wiki.
  • HINTS further consolidated. Discussions with pS-MDM team on possible integration of probes still on going.

2.2.2. INFN

  • Started in October the TPM and DMSU merge, the INFN effort is in the following activities: Triage & assignment and 1st/2nd Level Support
  • IGI Portal (https://portal.italiangrid.it) is now accessible for all communities part of eduGAIN federation.
  • SR performed during this quarter (according with the plot provided by Mario David):
    • EMI.cream.sl6.x86_64-1.14.1
    • EMI.amga.sl6.x86_64-2.3.0
    • EMI.mpi.sl5.x86_64-1.3.0
    • EMI.wms.sl5.x86_64
  • CVMFS server is now available for igi.italiangrid.it VO.
  • New sites Certified: BIOCOMP and INAF-TS
  • Installation of a new HLR for GRISU sites
  • Accounting data are sent to the accounting database through message passing interface
  • Setup of VO Nagios with custom probes for WeNMR VO.
  • A cloud insfrastructure prototype is available (internal users)
  • As a part of the Training and Dissemination activities of the EGI CSIRT group, we helped to organize the security hands-on at the EGI 2012 TF in Prague.

2.3. Issues and mitigation

Issue Description Mitigation Description
INFN: Discovered some issues related to the Input Sandbox on the WMS. reduced the ISB size on the configuration. Tickets GGUS 87533 and GGUS 87429
INFN: Update of some of the EMI 2 WMS GGUS 87774 update delayed
GARR: Need to clarify relationship with CERN site and further integrate sites into the global testbed. Need to dig into the issue of LRMS not working using IPv6.