15th January 2014 Notes not yet edited! January GDB 15th January 2014 Notes not yet edited!

2013-14 Meetings Second Wednesday each month March 12th hosted by CNAF, Bolgna Next WLCG workshop – July? Volunteers. Future: jobs with high-memory profiles; WLCG consolidation update; EMI-3 deployment plans; MW automatic validation. Next pre-GDBs: Ops coord; batch system support; HT condor; remote data access/federation Actions in progress. Site NAGIOS testing New SAM tests. WLCG now using VO-based SAM for availability/reliability. Discussion about SAM test scheduling. Timeouts must be ‘handled’ and consistently by experiments. SAM tests are not usin pilot jobs. Proposal – run tests as lcgadmin. Apply scheduling policy. Additional tests run as “normal” but not ‘critical’. There are known issues. Who cares about the test results? HEPiX IPv6 WG next Thursday-Friday WLCG ops coordination – 11th Feb LHCOPN evolution 10th-11th Feb ISGC March 22nd-28th HEPiX, Annecy 19th-23rd May EGI community forum, Helsinki 19th-23rd May WLCG workshop July?

Accounting update CPU accounting EMI-3 clients: supports HEPSPEC06. Richer data (e.g. MPI and submit host). Portal support for new data coming… Client was rewritten in Python. (Condor+ARC (uses JURA)). EGI-Inspire funding ends 2014. Will continue cloud and storage accounting. Multicore only seems ready on LSF and - Storage DPM and dCache released StAR publishers in EMI3. EGI federated cloud accounting. Production service by April. Issues: normalisation (use machine features?); merging grid and cloud data; inclusion of commercial data; give a global view; alternatives to infrastructure accounting. NEXT: look at utilisation for VMs. Encourage ‘machine features’ to invlude benchmark. Postscript: Glue 2 -> key value pairs in GOCDB 5.2 can be used to define custom key properties to define attributes. Allows definition of class of sites for example.

Volunteer computing Why? Outreach & resource Resources have different constraints Middleware: BOINC, XtremWeb. Condor. Berkeley Open Infrastructure Network Computing – boinc.berkeley.edu High CPU + small data = good match. Avoid porting issues by running under CernVM and VirtualBox with the BOINC client. Federico Stagni – LHCb first steps Issues: CVMFS (local cache has to be populated); job length; accounting; clients

EGI plans for future activities EGI-Inspire extension approved. Cloud and business development (e.g. pay for use and commercial resources): Federated Cloud services in production from May 2014. Cooperation between European infrastructures AAI: uniform authentication and authorization. Plan to run a pilot to access cloud services with federated IdP credentials. ICT – deadline April 2020. Cloud based proposal.

Operational updates from EGI SHA-2. Mostly done. dCache SRM clients released but not yet in UMD. Proposal to increase A/R threshold. A-> 80% and R->85%. Security contacts verification.

Toward a new HEP CPU Benchmark HS06 – for benchmark. Pledges. Procurement. Accounting. Hardware changes -> benchmark should evolve Open Systems Group working on next version HS14 requirements. Ease of use and “good enough” Benchmark – CPUv6/CPU2014. Final benchmark end 2014. Non-WLCG HEP Vos could/should join benchmark validation team? Agreement on h/w platform, compiler, compiler flags

DAVIX library Requirements for HPC Security: Reliability: I/O framework: Easy to deploy: generic Davix is best fit from existing clients Goal – tool for high performance I/O Features: Optimisations; Security; Reliability; DM extensions; integration with ROOT (in EPEL6 under root-net-davix)

Cloud pre-GDB WG explore possible use of private/community clouds. Focus on shared clouds. Build on existing work in experiments. Last meeting July. Review progress/work in cloud usage. Review implementation of graceful VM termination. Continue discussion possible models for non-static sharing of resources. Accounting: prototype based on APEL. How to normalize a VM CPU power. WC time vs CPU time – record both but CPU time provides homogeneity. Security/Traceability. Current model based on 2 roles (endorser/vm operator) that must be distinct. Traceability – need central logs and may need to add items like VM instantiated. Absence of root access for end users remains critical. User compartmentalization required on “multi-user VMs” Vulnerability handling requires ability to terminate VMs quickly No discussion of policy … Target shares: economic model complicated… without that keep CE/batch system. Main difficulties – no queuing of requests and allocation of free slots does not address quotas. Proposal to start long lived VMs for a VO up to target share.

Actions in progress Details lost…. IPv6 WMS decommissioning – glide-in submission encouraged. VOs using WMS will be contracted (e.g. LHCb) Tracking tools – Savannah to JIRA slow progress Machine job features – available at CERN. Need to make available on OPenStack Cloud environment. Provide client for experiments to test. Middleware readiness. Focus was on software repositoties and the criteria for juding a product deployment process successful Multicore – twiki and mailing list. https://twiki.cern.ch/twiki/bin/view/LCG/DeployMultiCore.

Openssl & JAVA 7 GGUS 98964 (Nov 18th). WMS delegates proxies with 512-bit keys that are refused by Java 7 used by dCache. Change key size >1024 in java.security. Dec 9th: ATLAS reported problem with openssl-1.0e-16.el6_5. LCG-ROLLOUT thread. If both endpoints running newest openssl they negotiate TLS1.2 which does not support 512-bit keys. If either end is older then use TLS1.1 and that is ok with 512 buts. Java 7 by default refuses such keys. Delegations coming from GridSite libraries: WMS, CREAM, UI, FTS-3, PanDa. New GridSite rpms available as of 16th Dec. Which nodes need fix: WMS (next Tuesday at CERN), FTS-3. PanDA. CREAM