Difference between revisions of "EGI-InSPIRE:Italy-QR11"

From EGIWiki
Jump to: navigation, search
(2.1.2. INFN)
 
(10 intermediate revisions by 2 users not shown)
Line 1: Line 1:
{{Template:Op menubar}} {{Template:Inspire_reports_menubar}} {{TOC_right}}  
+
{{Template:EGI-Inspire menubar}}
  
<br>
+
{{Template:Inspire_reports_menubar}}
 +
{{TOC_right}}
  
 
{| class="wikitable"
 
{| class="wikitable"
Line 97: Line 98:
  
 
'''IGI portal'''
 
'''IGI portal'''
We have reviewed the registration mechanism in order to permit the user, who already have a certificate but not a federation membership, to use all the portal functionalities  
+
* We have reviewed the registration mechanism in order to permit the user, who already have a certificate but not a federation membership, to use all the portal functionalities  
We have installed and configured an Identity Provider connected only to the portal
+
* We have installed and configured an Identity Provider connected only to the portal
We have developed new interfaces ad-hoc for some specific applications
+
* We have developed new interfaces ad-hoc for some specific applications
We have developed a new module in order to integrate cloud section in the portal: through the portal is now possible to instance new virtual machines, have a web console and manage them. The portal it will be used by EGI Cloud task force to test the various virtual machine providers.
+
* We have developed a new module in order to integrate cloud section in the portal: through the portal is now possible to instance new virtual machines, have a web console and manage them. The portal it will be used by EGI Cloud task force to test the various virtual machine providers.
  
 
'''New National Certification Authority'''
 
'''New National Certification Authority'''
Improvements in the design of the IGI on line CA: examination of hardware and software security aspects and study of a certificate  revocation mechanism.
+
* Improvements in the design of the IGI on line CA: examination of hardware and software security aspects and study of a certificate  revocation mechanism.
• Conclusion of the CP/CPS document of the ROOT-CA and for the OnLine CA.  
+
* Setup and configuration of the new IGI MICS CA, including security assessment, network design and service deployment.
• Setup of a complete testbed for the future IGI Certification Authority.
+
* Preparation of the final version of the CP/CPS document to be submitted to EuGridPMA for the Certificate Authority accreditation.
 +
 
 +
'''Cloud pilot infrastructure'''
 +
* A cloud infrastructure, based on the open source software OpenStack, has been set up. The main OpenStack components have been installed and tested: identity service, image repository, cloud controller, compute node, object storage and dashboard. We tested the principal use cases on virtual machine management. A system for high availability of the services is under testing. 
 +
 
 +
'''Security'''
 +
* Support and monitoring of the glite middleware decommissioning in the production sites.
 +
* Maintenance of the EGI CSIRT training and dissemination wiki pages and preparation of an abstract and material for a poster at the next EGI community forum 2013.
 +
 
 +
'''Ticketing'''
 +
* Routine maintenance of the italian ticketing system
 +
 
 +
'''Resource allocation working group'''
 +
* Participation to the startup phone conferences of the Resource Allocation working group. Presentation and discussion of some initial proposals for the creation and management of a pool of shared resources for new user communities.
  
 
===2.2. Main Achievements===  
 
===2.2. Main Achievements===  
Line 111: Line 125:
  
 
====2.1.2. INFN====
 
====2.1.2. INFN====
 +
* All resources migrated to EMI-1 or EMI-2;
 +
* All site are publishing DN subject to the account repository
 +
* Helpdesk activity for IGI and TPM has been performed.
 +
* SR performed during this quarter (according with the [http://www.lip.pt/computing/apps/EGI_EA/index.php?option=1 plot] provided by Mario David):
 +
** SAM Update 19
 +
** SAM Update 20
 +
** emi.cream.sl6.x86_64-1.14.2
 +
** EMI.glite-mpi.sl6.x86_64-1.4.0
 +
* Assessment of the 1st/2nd support level activity after the TPM and DMSU merge happened in OCtober 2012
 +
* Final draft of the Usage Record 2.0 should be published at the end of January
  
 
=== 2.3. Issues and mitigation ===
 
=== 2.3. Issues and mitigation ===
Line 119: Line 143:
 
! scope="col" | Mitigation Description
 
! scope="col" | Mitigation Description
 
|-
 
|-
| Issue description
+
| WMS 3.4.0 deployed on 4 instances. Open tickets:
| Issue mitigation
+
https://ggus.eu/tech/ticket_show.php?ticket=90240
 +
https://ggus.eu/tech/ticket_show.php?ticket=89801
 +
https://ggus.eu/ws/ticket_info.php?ticket=88517
 +
|  The update has been put on hold due to the discovery of a bug.
 +
|-
 +
| SAM-Nagios update 19. In case of updating perl-Directory-Queue to latest version failures in org.egee.RecvFromQueue has been observed due to operations not permitted in nagios2metricstore and msg-nagios-bridge dirs.
 +
|  A workaround has been provided that involves removing old data
 +
rm -rf /var/spool/nagios2metricstore/*/*
 +
rm -rf /var/spool/msg-nagios-bridge/*/*
 +
|-
 +
| Failures on new check ch.cern.sam.MrsCheckSpool.
 +
Inflation in records in metricdata_spool due to the following bug
 +
https://tomtools.its.cern.ch/jira/browse/SAM-3098
 +
| Patch has been provided in the release note (known issues section).
 
|}
 
|}
  
Line 127: Line 164:
 
|-
 
|-
 
| Issue Description || Issue mitigation
 
| Issue Description || Issue mitigation
-->  
+
-->
 
 
[[Category:NGI_QR_Reports]]
 

Latest revision as of 16:17, 7 January 2015

EGI Inspire Main page


Inspire reports menu: Home SA1 weekly Reports SA1 Task QR Reports NGI QR Reports NGI QR User support Reports



Quarterly Report Number NGI Name Partner Name Author
QR11 NGI_IT Italy Paolo Veronesi


1. MEETINGS AND DISSEMINATION

Note: Complete the tables below by adding as many rows as needed.

1.1. CONFERENCES/WORKSHOPS ORGANISED

Date Location Title Participants Outcome (Short report & Indico URL)
Nov, 29-30, 2012 Rome (Italy) WORKSHOP GARR - CALCOLO E STORAGE DISTRIBUITO 8 National workshop about Grid and Cloud. Agenda (in Italian): http://www.garr.it/a/workshop-garr-calcolo-e-storage-distribuito/programma

1.2. OTHER CONFERENCES/WORKSHOPS ATTENDED

Date Location Title Participants Outcome (Short report & Indico URL)
Nov, 12-15, 2012 Salt Lake City (USA) Supercomputing 2012 2 IGI Research Exibition: http://iebms.heiexpo.com/iebms/oep/oep_p2_details.aspx?sessionid=ej5fgkfh4eikfg5ei6eio&OrderNbr=5539
Jan, 28-30, 2013 Amsterdam Evolving EGI Workshop 2 discussions to understand and provide input into the future evolution of EGI


1.3. PUBLICATIONS

Publication title Journal / Proceedings title Journal references
Volume number
Issue

Pages from - to
Authors
1.
2.
3.
Et al?

2. ACTIVITY REPORT

2.1. Progress Summary

2.1.1. GARR

2.1.2. INFN

Migration activity

  • Core Grid services provided by NGI_IT have been upgraded to EMI-1 or EMI-2.
  • Sites services have been migrate to EMI-1 or EMI-2

Resource centers changes

  • Four Resource centers are suspended (GRISU-COMETA-ING-MESSINA, GRISU-COMETA-UNICT-DMI, INFN-NAPOLI-PAMELA, INFN-ROMA1-VIRGO)
  • Two Resource center closed (GRISU-COMETA-UNICT-DIIT, GRISU-COMETA-UNIPA)
  • One Resource center under certification (INFN-NAPOLI-ARGO)
  • One new Resource centers certified (RECAS-NAPOLI)

IGI portal

  • We have reviewed the registration mechanism in order to permit the user, who already have a certificate but not a federation membership, to use all the portal functionalities
  • We have installed and configured an Identity Provider connected only to the portal
  • We have developed new interfaces ad-hoc for some specific applications
  • We have developed a new module in order to integrate cloud section in the portal: through the portal is now possible to instance new virtual machines, have a web console and manage them. The portal it will be used by EGI Cloud task force to test the various virtual machine providers.

New National Certification Authority

  • Improvements in the design of the IGI on line CA: examination of hardware and software security aspects and study of a certificate revocation mechanism.
  • Setup and configuration of the new IGI MICS CA, including security assessment, network design and service deployment.
  • Preparation of the final version of the CP/CPS document to be submitted to EuGridPMA for the Certificate Authority accreditation.

Cloud pilot infrastructure

  • A cloud infrastructure, based on the open source software OpenStack, has been set up. The main OpenStack components have been installed and tested: identity service, image repository, cloud controller, compute node, object storage and dashboard. We tested the principal use cases on virtual machine management. A system for high availability of the services is under testing. 

Security

  • Support and monitoring of the glite middleware decommissioning in the production sites.
  • Maintenance of the EGI CSIRT training and dissemination wiki pages and preparation of an abstract and material for a poster at the next EGI community forum 2013.

Ticketing

  • Routine maintenance of the italian ticketing system

Resource allocation working group

  • Participation to the startup phone conferences of the Resource Allocation working group. Presentation and discussion of some initial proposals for the creation and management of a pool of shared resources for new user communities.

2.2. Main Achievements

2.1.1. GARR

2.1.2. INFN

  • All resources migrated to EMI-1 or EMI-2;
  • All site are publishing DN subject to the account repository
  • Helpdesk activity for IGI and TPM has been performed.
  • SR performed during this quarter (according with the plot provided by Mario David):
    • SAM Update 19
    • SAM Update 20
    • emi.cream.sl6.x86_64-1.14.2
    • EMI.glite-mpi.sl6.x86_64-1.4.0
  • Assessment of the 1st/2nd support level activity after the TPM and DMSU merge happened in OCtober 2012
  • Final draft of the Usage Record 2.0 should be published at the end of January

2.3. Issues and mitigation

Issue Description Mitigation Description
WMS 3.4.0 deployed on 4 instances. Open tickets:

https://ggus.eu/tech/ticket_show.php?ticket=90240 https://ggus.eu/tech/ticket_show.php?ticket=89801 https://ggus.eu/ws/ticket_info.php?ticket=88517

The update has been put on hold due to the discovery of a bug.
SAM-Nagios update 19. In case of updating perl-Directory-Queue to latest version failures in org.egee.RecvFromQueue has been observed due to operations not permitted in nagios2metricstore and msg-nagios-bridge dirs. A workaround has been provided that involves removing old data

rm -rf /var/spool/nagios2metricstore/*/* rm -rf /var/spool/msg-nagios-bridge/*/*

Failures on new check ch.cern.sam.MrsCheckSpool.

Inflation in records in metricdata_spool due to the following bug https://tomtools.its.cern.ch/jira/browse/SAM-3098

Patch has been provided in the release note (known issues section).