Alert.png The wiki is deprecated and due to be decommissioned by the end of September 2022.
The content is being migrated to other supports, new updates will be ignored and lost.
If needed you can get in touch with EGI SDIS team using operations @ egi.eu.

EGI Verification Testbed

From EGIWiki
Revision as of 16:19, 1 June 2011 by David (talk | contribs)
Jump to navigation Jump to search

EGI Verification Testbed

Available Services

Service Host Comments
topbdii topbdii02.ncg.ingrid.pt Only contains the Site UMD-VERIFICATION
site bdii sbdii02.ncg.ingrid.pt Site Name = UMD-VERIFICATION
voms server voms02.ncg.ingrid.pt Avaialable VOs: ops.vo.ibergrid.eu & iber.vo.ibergrid.eu
arc-ce test03.egi.cesga.es
arc info test04.egi.cesga.es
WMS tst04.ific.uv.es
LB tst05.ific.uv.es
UI test13.egi.cesga.es Configured VOs: ops.vo.ibergrid.eu & iber.vo.ibergrid.eu, OPS and DTEAM. Configured WMS/LB: tst04.ific.uv.es, tst05.ific.uv.es Configured TopBDII: topbdii02.ncg.ingrid.pt
CREAM-CE/Torque test06.egi.cesga.es
WN/Torque test14.egi.cesga.es, test15.egi.cesga.es Also used for glite-MPI and glexec
APEL Publisher test07.egi.cesga.es
DPM test08.egi.cesga.es
MyPROXY px02.ncg.ingrid.pt

Repository Configuration

This document assumes SL5 x86_64 PPAs verification, for other architectures the actual repositories to use may change

Base & EPEL

Verification is done using the SL5 distribution + EPEL repositories. You must have in your yum repositories list the following ones:

  • SL5 BASE and updates:
[sl-base]
name=SL 5 base
baseurl=http://ftp.scientificlinux.org/linux/scientific/55/$basearch/SL
	 http://ftp1.scientificlinux.org/linux/scientific/55/$basearch/SL
	 http://ftp2.scientificlinux.org/linux/scientific/55/$basearch/SL
	 ftp://ftp.scientificlinux.org/linux/scientific/55/$basearch/SL
#mirrorlist=ftp://ftp.scientificlinux.org/linux/scientific/mirrorlist/sl-base-55.txt
enabled=1
gpgcheck=0
# To use priorities you must have yum-priorities installed
priority=10
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-sl 
       file:///etc/pki/rpm-gpg/RPM-GPG-KEY-sl5 
       file:///etc/pki/rpm-gpg/RPM-GPG-KEY-csieh
       file:///etc/pki/rpm-gpg/RPM-GPG-KEY-dawson 
       file:///etc/pki/rpm-gpg/RPM-GPG-KEY-jpolok 
       file:///etc/pki/rpm-gpg/RPM-GPG-KEY-cern 
       file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
[sl-security]
name=SL 5 security updates
baseurl=http://ftp.scientificlinux.org/linux/scientific/55/$basearch/updates/security
        http://ftp1.scientificlinux.org/linux/scientific/55/$basearch/updates/security
        http://ftp2.scientificlinux.org/linux/scientific/55/$basearch/updates/security
        ftp://ftp.scientificlinux.org/linux/scientific/55/$basearch/updates/security
#mirrorlist=ftp://ftp.scientificlinux.org/linux/scientific/mirrorlist/sl-security-55.txt
enabled=1
gpgcheck=0
# To use priorities you must have yum-priorities installed
priority=10
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-sl
       file:///etc/pki/rpm-gpg/RPM-GPG-KEY-sl5 
       file:///etc/pki/rpm-gpg/RPM-GPG-KEY-csieh  
       file:///etc/pki/rpm-gpg/RPM-GPG-KEY-dawson 
       file:///etc/pki/rpm-gpg/RPM-GPG-KEY-jpolok 
       file:///etc/pki/rpm-gpg/RPM-GPG-KEY-cern
       file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-5
  • EPEL
[extras]
name=epel
mirrorlist=http://mirrors.fedoraproject.org/mirrorlist?repo=epel-5&arch=$basearch
protect=0
enabled=1
priority=20
  • EGI trust anchors
[EGI-trustanchors]
name=EGI-trustanchors
baseurl=http://repository.egi.eu/sw/production/cas/1/current/
gpgkey=http://repository.egi.eu/sw/production/cas/1/GPG-KEY-EUGridPMA-RPM-3
gpgcheck=1
enabled=1

Product Repository

You must also add the repository with the packages that you are currently verifying. The URL for the repository can be found at the Custom Fields of the RT ticket within attribute RepositoryURL. The easiest way of adding the repositoy is using the files available at the repofiles directory.

Example config file for CREAM release 1.13.0 RT ticket 2206, has the repository located at http://admin-repo.egi.eu/sw/unverified/emi.cream.sl5.x86_64/1/13/0 and the repofile is available at http://admin-repo.egi.eu/sw/unverified/emi.cream.sl5.x86_64/1/13/0/repofiles/EMI.cream.sl5.x86_64.repo

Contents of this file is shown below: 

# EGI Software Repository - REPO META (releaseId,repositoryId,repofileId) - (2206,239,166)
[EMI.cream.sl5.x86_64]
name=EMI.cream.sl5.x86_64
baseurl=http://admin-repo.egi.eu/sw/unverified/emi.cream.sl5.x86_64/1/13/0/
enabled=1
protect=1

Issues

Package signing

GPG keys are not provided by repofiles and signature checks of packages cannot be used currently, a solution for this issue is being investigated. In the meantime, make sure to use gpgcheck=0 in the yum repo file.

Extras Repository

For verification of EMI 1.0 Release, an extra repository with compatibility packages is also needed for some products, at least WMS and UI. See information available at RT ticket 2243. Repository file can be obtained from http://repository.egi.eu/sw/stagerollout/emi.extras.sl5.x86_64/1/repofiles/EMI.extras.sl5.x86_64.repo. 

[EMI.extras.sl5.x86_64]
name=EMI.extras.sl5.x86_64
baseurl=http://repository.egi.eu/sw/stagerollout/emi.extras.sl5.x86_64/1/
enabled=1
protect=1

Yaim configuration

BDII

The site bdii has currently the following resources configured: 

BDII_SBDII_URL="ldap://sbdii02.ncg.ingrid.pt:2170/mds-vo-name=resource,o=grid"
BDII_TBDII_URL="ldap://topbdii02.ncg.ingrid.pt:2170/mds-vo-name=resource,o=grid"
BDII_VOMS_URL="ldap://voms02.ncg.ingrid.pt:2170/mds-vo-name=resource,o=grid"
BDII_WMS_URL="ldap://tst04.ific.uv.es:2170/mds-vo-name=resource,o=grid"
BDII_LB_URL="ldap://tst05.ific.uv.es:2170/mds-vo-name=resource,o=grid"
BDII_CREAM_URL="ldap://test06.egi.cesga.es:2170/mds-vo-name=resource,o=grid"
BDII_DPM_URL="ldap://test08.egi.cesga.es:2170/mds-vo-name=resource,o=grid"

UI

  • test13.egi.cesga.es
# YAIM Verification configuration file for EMI-UI

MY_DOMAIN=egi.cesga.es

LB_HOST=tst05.ific.uv.es
WMS_HOST=tst04.ific.uv.es
RB_HOST=tst04.ific.uv.es
PX_HOST=test02.egee.cesga.es
BDII_HOST=topbdii02.ncg.ingrid.pt
BDII_LIST="lcg-bdii.cern.ch:2170,topbdii02.ncg.ingrid.pt:2170"
LFC_HOST=test09.egi.cesga.es
LFC_CENTRAL="ops.vo.ibergrid.eu iber.vo.ibergrid.eu"
DPM_HOST="test08.egi.cesga.es"   # my-dpm.$MY_DOMAIN
DPMPOOL=egi-pool
DPM_FILESYSTEMS="$DPM_HOST:/storage"

VOS="ops dteam ops.vo.ibergrid.eu iber.vo.ibergrid.eu"
VO_SW_DIR=/opt/exp_soft

# Production VOs
OPS_GROUP_ENABLE="ops /VO=ops/GROUP=/ops/ROLE=lcgadmin"
DTEAM_GROUP_ENABLE="dteam /VO=dteam/GROUP=/dteam/ROLE=lcgadmin"

#IBERGRID VERIFICATION VO GROUPS
GRID_OPSIBEU_GROUP_ENABLE="ops.vo.ibergrid.eu 
                           /VO=ops.vo.ibergrid.eu/GROUP=/ops.vo.ibergrid.eu/ROLE=VO-Admin 
                           /VO=ops.vo.ibergrid.eu/GROUP=/ops.vo.ibergrid.eu/ROLE=Production"
GRID_IBERIBEU_GROUP_ENABLE="iber.vo.ibergrid.eu 
                            /VO=iber.vo.ibergrid.eu/GROUP=/iber.vo.ibergrid.eu/ROLE=VO-Admin
                            /VO=iber.vo.ibergrid.eu/GROUP=/iber.vo.ibergrid.eu/ROLE=Production"

#::::::::::::::
#ops
#::::::::::::::
VO_OPS_SW_DIR=$VO_SW_DIR/ops
VO_OPS_DEFAULT_SE=$DPM_HOST
VO_OPS_STORAGE_DIR=$CLASSIC_STORAGE_DIR/ops
VO_OPS_QUEUES="GRID_ops"
VO_OPS_VOMS_SERVERS="vomss://voms.cern.ch:8443/voms/ops?/ops/"
VO_OPS_VOMSES="'ops voms.cern.ch 15009 /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch ops'"
VO_OPS_VOMS_CA_DN="'/DC=ch/DC=cern/CN=CERN Trusted Certification Authority' 
                   '/DC=ch/DC=cern/CN=CERN Trusted Certification Authority'"

#::::::::::::::
#dteam
#::::::::::::::
VO_DTEAM_SW_DIR=$VO_SW_DIR/dteam
VO_DTEAM_DEFAULT_SE=$DPM_HOST
VO_DTEAM_STORAGE_DIR=$CLASSIC_STORAGE_DIR/dteam
VO_DTEAM_QUEUES="GRID_dteam"
VO_DTEAM_VOMS_SERVERS='vomss://voms.hellasgrid.gr:8443/voms/dteam?/dteam/'
VO_DTEAM_VOMSES="'dteam lcg-voms.cern.ch 15004 /DC=ch/DC=cern/OU=computers/CN=lcg-voms.cern.ch dteam 24' 
                 'dteam voms.cern.ch 15004 /DC=ch/DC=cern/OU=computers/CN=voms.cern.ch dteam 24' 
                 'dteam voms.hellasgrid.gr 15004 /C=GR/O=HellasGrid/OU=hellasgrid.gr/CN=voms.hellasgrid.gr dteam 24' 
                 'dteam voms2.hellasgrid.gr 15004 /C=GR/O=HellasGrid/OU=hellasgrid.gr/CN=voms2.hellasgrid.gr dteam 24'"
VO_DTEAM_VOMS_CA_DN="'/DC=ch/DC=cern/CN=CERN Trusted Certification Authority' 
                     '/DC=ch/DC=cern/CN=CERN Trusted Certification Authority' 
                     '/C=GR/O=HellasGrid/OU=Certification Authorities/CN=HellasGrid CA 2006' 
                     '/C=GR/O=HellasGrid/OU=Certification Authorities/CN=HellasGrid CA 2006'"

WN

Retrieved from "https://wiki.egi.eu/w/index.php?title=EGI_Verification_Testbed&oldid=18577"