logo operations poral

logo egi


Operations Portal is an EGI service provided by CCIN2P3,
co-funded by EGI.eu and EGI-Engage



Release Version : 4.1 - September 13th

For any contact, use this section: Contact Us



The Operations Portal is a central portal for the EGI operations management that offers a different capabilities, such as the broadcast tool, VO management facilities and various of dashboards (Security, VO and Operations) to facilitate infrastructure oversight.

Latest news

Site egee.fesb.hr will be decommissioned on December 15th. Currently there is 69 GB of biomed data stored on SE se.fesb.egi.cro-ngi.hr. CE element is already disabled.

Parent GGUS ticket is here: https://ggus.eu/index.php?mode=ticket_info&ticket_id=125331&come_from=submit

Best regards
emir
Old FGI is being replaced with FGCI. As a consequence the following services will be decommissioned:

aesyle-grid.fgi.csc.fi (ARC-CE) - https://goc.egi.eu/portal/index.php?Page_Type=Service&id=2859
aesyle-grid.fgi.csc.fi (gLite-APEL) -https://goc.egi.eu/portal/index.php?Page_Type=Service&id=5545
usva.fgi.csc.fi (gLite-APEL) - https://goc.egi.eu/portal/index.php?Page_Type=Service&id=6356
usva.fgi.csc.fi (ARC-CE) - https://goc.egi.eu/portal/index.php?Page_Type=Service&id=2863
rocks.csc.fi (ngi.SAM) - https://goc.egi.eu/portal/index.php?Page_Type=Service&id=3557
ping.fgi.csc.fi (ngi.SAM) https://goc.egi.eu/portal/index.php?Page_Type=Service&id=3558
murska-arc.csc.fi (ARC-CE) https://goc.egi.eu/portal/index.php?Page_Type=Service&id=2862
vuori-arc.csc.fi (ARC-CE) https://goc.egi.eu/portal/index.php?Page_Type=Service&id=2861
gtpps.csc.fi (ARC-CE) https://goc.egi.eu/portal/index.php?Page_Type=Service&id=2861

Grid queues will be drained and endpoints removed from GOCDB on 15.12.2016.
All services and data will be permanently deleted after 90 days counting from 15.12.2016.
CSC grid site availability should have any impact as new resources and queues are running in parallel. 

Luís Alves 

Link to GGUS ticket: https://ggus.eu/index.php?mode=ticket_info&ticket_id=12528
Dear all,

EUGridPMA have announced a new set of CA rpms. Based on this IGTF release a new set of CA RPMs have been packaged for EGI. 

Please upgrade until 2016.12.04 at your earliest convenience. When this timeout is over, SAM will throw critical errors on CA tests if old CAs are still detected.

Please check https://wiki.egi.eu/wiki/EGI_IGTF_Release for more details 
 
EGI UMD software provisioning Team


The following release notes accompany this release:
European Grid Infrastructure EGI Trust Anchor release 1.79          2016.11.28

------------------------------------------------------------------------------
   For release DOCUMENTATION available on this EGI Trust Anchor release see   
               https://wiki.egi.eu/wiki/EGI_IGTF_Release                      
------------------------------------------------------------------------------

This is the EGI Trust Anchor release, based on the updated IGTF Accredited CA
distribution version 1.79-1 with Classic, SLCS and MICS profiles, encoded in
meta-package "ca-policy-egi-core-1.79-1" (new installs) and "lcg-CA-1.79-1"
(for sites upgrading from EGEE/JSPG releases).

IMPORTANT NOTICE:
  Your may install BOTH "egi-core" AND "lcg" meta-packages, according to your 
  policies. Note that your organisation or NGI may have a specific policy and
  may have added or removed CAs compared to the EGI core policy.
  Sites that need compliance with the WLCG policy should install BOTH packages,
  or you will miss out the CERN WLCG IOTA CA specific exception see 
  https://documents.egi.eu/document/2745 for details and the WLCG statement
  http://lcg-ca.web.cern.ch/lcg-ca/doc/WLCG-CERN-IOTA-statement-MB.pdf

  In the first quarter of 2017, full support for differentiated assurance
  profiles will be introduced in the EGI trust fabric infrastructure. This
  will take the form of an additional trust anchor meta-package, and replaces
  the specific policy mechanism described above. Such full support also
  required new software and configuration at each resource centre.
  We ask for your support in implementing the requisite changes, and deploy
  new trust anchor meta-packages and the new local policies only in unison.


The following notices are republished from the IGTF, inasfar as pertinent to
this release. Details are found in the newsletter https://www.eugridpma.org/

Changes from 1.78 to 1.79
-------------------------
(28 November 2016)

* Updated UNLPGrid CA with extended validity period (AR)
* Fix regular expressions in CILogon and NCSA CA namespaces files (US)
* Included rollover CA IRAN-GRID-CGC-G2 (IR)
* Corrected an incorrect line in selected info files for DigiCert (US)
* Discontinued expiring NECTEC CA (TH)

The CA modifications encoded in both "requires" and "obsoletes" clauses (RPM)
and Conflicts/Replaced clauses (Debian)  have been incorporated in the above-
mentioned meta-packages.  This release is best enjoyed with  fetch-crl v3  or 
better, available from GNU/Linux OS add-on repositories Fedora, EPEL, Debian,
and from the IGTF at https://www.igtf.net/fetch-crl

Version information: ca-policy-egi-core = 1.79-1
1) UMD 4.3.0 has been released today Nov 10th: http://repository.egi.eu/2016/11/10/release-umd-4-3-0/

It brings several new products and updates[*], included the following fixes:

- umd-release 3.14.3, fixing an issue with GPG keys, details here: https://gist.github.com/pkoro/cc2ce75a0867a835f15d2f4d3fe50f44
- gridsite 2.3.3, fixing an issue with proxy renewal on WMS https://ggus.eu/index.php?mode=ticket_info&ticket_id=124499
- VOMS 3.5.0, which makes RFC proxies the default for voms-proxy-init; an update of YAIM core handling RFC proxy as the new default

[*] Products included in this release:
- ARC, GFAL2, XROOT, Davix, dCache, ARGUS, Gridsite, edg-mkgrid, umd-release for CentOS7
- ARC, GFAL2, XROOT, Gridsite, edg-mkgrid, umd-release, GRAM5, DPM, Globus GridFTP, globus-default-security, MyProxy, Davix, dCache, VOMS, YAIM core, lcas-lcmaps for SL6

2) Please start using UMD4/SL6 or UMD4/CentOS7 instead of UMD3/SL6:
- Debian not used anymore, SL5 only security fixes, SL6 is available in UMD4 as well
- UMD4/SL6 contains products of UMD3/SL6 which give support for the next year at least, all the unsupported products are not in UMD4/SL6 (please let us know if we are missing specific products that we might have skipped!):
-- for some unsupported products, we are investigating how to replace them with equivalent products in UMD4/SL6 (see WMS)
-- list of all the products that are in UMD3 but not migrated to UMD4 is available, to be improved: https://wiki.egi.eu/wiki/UMD3_UMD4_products
[ Reminder ]

Dear WLCG site admins in EGI,

In the Grid Deployment Board meeting of May 2016 the afternoon was dedicated
to a session on what could be done to allow the operation of WLCG sites to
be made less heavy. A summary of the session and the conclusions so far are
available here:

    https://twiki.cern.ch/twiki/bin/view/LCG/LightweightSites

Now we would like to identify areas where it is worthwhile to spend effort
such that sizable numbers of sites may profit, while at the same time
avoiding that a lot of work is merely shifted to the experiments, CERN IT
or the T1 sites.

The aim is to get to a "matrix" of approaches that sites can choose from,
depending on criteria that we try to cover in this questionnaire:

    http://wlcg-survey.web.cern.ch/survey/lightweight-sites

Please take some time to fill it out, you may need just a few minutes.

Your help with the questionnaire is greatly appreciated, thanks!
1) Av./Rel. recomputation for not considering the downtimes due to the vulnerability CVE-2016-5195

All the resource centres that were affected by the vulnerability CVE-2016-5195 and that declared a downtime between 2016-10-20 16:00 UTC and 2016-10-31 18:00 UTC are invited to request a recomputation of A/R figures for the days in which the downtime was ongoing.

In according to the procedure https://wiki.egi.eu/wiki/PROC10_Recomputation_of_SAM_results_or_availability_reliability_statistics you need to fill this form:

http://argo.egi.eu/lavoisier/recomputation

and indicate:

- Your name and email
- the site(s) affected by the problem
- a description of the problem
- the profile affected
- the starting and ending time of the problem (including day and hour in UTC)

In case of problems with the web form, please submit a GGUS ticket to ARGO/SAM support unit providing the same information.

2)  UMD 3.14.5 released today, including:
- umd-release 3.14.3, fixing an issue with GPG keys; details here: https://gist.github.com/pkoro/cc2ce75a0867a835f15d2f4d3fe50f44 (it doesn't affect new installations) 
- gridsite 2.3.3, fixing an issue with proxy renewal on WMS https://ggus.eu/index.php?mode=ticket_info&ticket_id=124499
- VOMS 3.5.0, which makes RFC proxies the default for voms-proxy-init; an update of YAIM core handling RFC proxy as the new default 

3) please start using UMD4/SL6 or UMD4/CentOS7 instead of UMD3/SL6
- Debian not used anymore, SL5 only security fixes, SL6 is available in UMD4 as well
- UMD4/SL6 contains products of UMD3/SL6 which give support for the next year at least, all the unsupported products are not in UMD4/SL6 (please let us know if we are missing specific products that we might have skipped!)
-- for some unsupported products, we are investigating how to replace them with equivalent products in UMD4/SL6 (see WMS)
-- list of all the products that are in UMD3 but not migrated to UMD4 is available, to be improved: https://wiki.egi.eu/wiki/UMD3_UMD4_products 

4) new version of VAPOR (https://operations-portal.egi.eu/vapor/) will be released this month: it is an important tool for gathering and displaying the information published by the sites in the BDII, like for example the computing/storage capacities and many other things, and it replaced GSTAT.

Each NGI and Resource Centre should review the information provided by their sites and let us know any inconsistency: http://operations-portal.egi.eu/vapor/resources/GL2ResSummary . We need your feedback to improve the service.

- please test the version 2.2 by going on the dev instance http://operations-portal.egi.eu/vapor_dev
- report any comment, inconsistencies or suggestion for improvement into https://ggus.eu/index.php?mode=ticket_info&ticket_id=124872 where you can find details about how to test the version 2.2

>>> More news <<<

Hello,

 This is a reminder for the DPM workshop 2016, which will
take place on the 23th and 24th of November 2016 at LPNHE(Paris),
with the kind support of the French DPM community.

https://indico.cern.ch/event/559673/

 You are invited to participate to the workshop and to the
discussions, where we cover news and updates on the status
of DPM: releases, distributions, development directions,
involvement of the DPM collaboration, new components, new
setup, old components revisited, performance evaluations
and experiences in general.

 The workshop will cover news and updates on experiences
and best practices, user reports, administration tools, federations,
data access and community talks.

 The agenda is complete and the registration is still open.
 All the speakers and participants are kindly invited to register.

 We hope to see you all there.

Cheers
Fabrizio
Hi,

The APEL team has scheduled a down time for 10:30am - 12:30pm (UTC) on the 1st November. This is to allow us to upgrade our machines with a new kernel.

An "at risk" has been scheduled for the rest of the day.

As such, there may be delays in data sent today and tomorrow reaching the Accounting portal.

Kind Regards
The APEL team
The APEL Pub and Sync Tests have been resumed. and the Accounting Portal data has been updated.  Any nagios warning or errors that resulted should be cleared the next time your probes run. ANy remaining warnings or errors about non-publishing should be treated as real and investigated.

The APEL Team
Dear EGI user,

  starting in the next three days EGI resource centres will have to disable some functionalities in the HTC (grid) jobs execution environment, to mitigate a critical kernel vulnerability for which a patch is not yet available in the Red Hat based operating systems, and keep secure the EGI services. We expect that only a small fraction of the jobs will be affected.

  The CE and SE interfaces (for example job submission) will regularly work but - depending on the system libraries used by the computing task submitted - some jobs may fail to execute. 

Sites running a Red Hat based operating system, most of the EGI resource centres, will be affected.

In the coming days we expect that a security patch will be made available for the various RedHat flavours used in our infrastructure. As soon as the sites have upgraded, the resource centres will be fully functional again.

More information will be circulated in the coming two days.

Apologies for any inconvenience and thanks for your patience.

 Regards
 Peter Solagna on behalf of the EGI Operations
The APEL Accounting Repository has been doing some internal data processing of its cloud data so to enable this to process at maximum speed the summarising of grid sites has been suspended. This is reflected in the portal not being updated and the Apel.Pub tests showing several days since your site last published. 


Do not worry, your data has been received and safely stored in our database. The summariser will run again and the portal and tests updated in the next couple of days. 


The Apel Team.
Dear all,

We want to inform you that the following services will be decommissioned at site M3PEC:
* BDII bdii0.bordeaux.inra.fr: https://ggus.eu/index.php?mode=ticket_info&ticket_id=124483
* CREAM-CE  ce0.bordeaux.inra.fr: https://ggus.eu/index.php?mode=ticket_info&ticket_id=124485
* SE-DPM se0.bordeaux.inra.fr: https://ggus.eu/index.php?mode=ticket_info&ticket_id=124486

The downtime will start on 2016/11/14.

Best regards,

Pierre Gay
voms.ba.infn.it will be unavailable during 20 and 21 of October to allow the migration of the service to a new physical location. The service will be back in the late afternoon of October 21st. 

The affected VOs will be:

extras-fp7.eu
geohazards.terradue.com
hydrology.terradue.com 

Please find the downtime record here for further details: 

https://goc.egi.eu/portal/index.php?Page_Type=Downtime&id=21631

If you need further details, please contact EGI Operations.
The APEL Service is having problems caused by sites republishing large numbers of jobs. This can either be due to conscious gap publishing or to fixing a problem that had existed for some time (eg out of date certificate, parser cron not running). 


In order to preserve the integrity of the service could site please only publish large numbers of jobs after raising a GGUS ticket and getting the agreement of the APEL Team who may ask you to break the publishing into parts..  

Thanks,

The APEL Team
Dear all,

EUGridPMA have announced a new set of CA rpms. Based on this IGTF release a new set of CA RPMs have been packaged for EGI. 

Please upgrade until 2016.10.18 at your earliest convenience. When this timeout is over, SAM will throw critical errors on CA tests if old CAs are still detected.

Please check https://wiki.egi.eu/wiki/EGI_IGTF_Release for more details 
 
EGI UMD software provisioning Team


The following release notes accompany this release:

European Grid Infrastructure EGI Trust Anchor release 1.78          2016.10.05

------------------------------------------------------------------------------
   For release DOCUMENTATION available on this EGI Trust Anchor release see   
               https://wiki.egi.eu/wiki/EGI_IGTF_Release                      
------------------------------------------------------------------------------

This is the EGI Trust Anchor release, based on the updated IGTF Accredited CA
distribution version 1.78-1 with Classic, SLCS and MICS profiles, encoded in
meta-package "ca-policy-egi-core-1.78-1" (new installs) and "lcg-CA-1.78-1"
(for sites upgrading from EGEE/JSPG releases).

IMPORTANT NOTICE:
  Your may install BOTH "egi-core" AND "lcg" meta-packages, according to your 
  policies. Note that your organisation or NGI may have a specific policy and
  may have added or removed CAs compared to the EGI core policy.
  Sites that need compliance with the WLCG policy should install BOTH packages,
  or you will miss out the CERN WLCG IOTA CA specific exception see 
  https://documents.egi.eu/document/2745 for details and the WLCG statement
  http://lcg-ca.web.cern.ch/lcg-ca/doc/WLCG-CERN-IOTA-statement-MB.pdf

The following notices are republished from the IGTF, inasfar as pertinent to
this release. Details are found in the newsletter https://www.eugridpma.org/

Changes from 1.77 to 1.78
-------------------------
(5 October 2016)

* Removed superseded INFN-CA-2006 CA (IT)
* Updated Debian packaging to support APT security improvements

The CA modifications encoded in both "requires" and "obsoletes" clauses (RPM)
and Conflicts/Replaced clauses (Debian)  have been incorporated in the above-
mentioned meta-packages.  This release is best enjoyed with  fetch-crl v3  or 
better, available from GNU/Linux OS add-on repositories Fedora, EPEL, Debian,
and from the IGTF at https://www.igtf.net/fetch-crl

Version information: ca-policy-egi-core = 1.78-1