1. 15th January 2014 Notes not yet edited!
January GDB
15th January 2014
Notes not yet edited!

2. 2013-14 Meetings Second Wednesday each month
March 12th hosted by CNAF, Bolgna
Next WLCG workshop – July? Volunteers.
Future: jobs with high-memory profiles; WLCG consolidation update; EMI-3 deployment plans; MW automatic validation.
Next pre-GDBs: Ops coord; batch system support; HT condor; remote data access/federation
Actions in progress.
Site NAGIOS testing
New SAM tests. WLCG now using VO-based SAM for availability/reliability. Discussion about SAM test scheduling. Timeouts must be ‘handled’ and consistently by experiments. SAM tests are not usin pilot jobs.
Proposal – run tests as lcgadmin. Apply scheduling policy. Additional tests run as “normal” but not ‘critical’. There are known issues.
Who cares about the test results?
HEPiX IPv6 WG next Thursday-Friday
WLCG ops coordination – 11th Feb
LHCOPN evolution 10th-11th Feb
ISGC March 22nd-28th
HEPiX, Annecy 19th-23rd May
EGI community forum, Helsinki 19th-23rd May
WLCG workshop July?

3. Accounting update CPU accounting
EMI-3 clients: supports HEPSPEC06. Richer data (e.g. MPI and submit host). Portal support for new data coming…
Client was rewritten in Python. (Condor+ARC (uses JURA)).
EGI-Inspire funding ends Will continue cloud and storage accounting.
Multicore only seems ready on LSF and
- Storage
DPM and dCache released StAR publishers in EMI3.
EGI federated cloud accounting. Production service by April.
Issues: normalisation (use machine features?); merging grid and cloud data; inclusion of commercial data; give a global view; alternatives to infrastructure accounting. NEXT: look at utilisation for VMs. Encourage ‘machine features’ to invlude benchmark.
Postscript: Glue 2 -> key value pairs in GOCDB 5.2 can be used to define custom key properties to define attributes. Allows definition of class of sites for example.

4. Volunteer computing Why? Outreach & resource
Resources have different constraints
Middleware: BOINC, XtremWeb. Condor.
Berkeley Open Infrastructure Network Computing – boinc.berkeley.edu
High CPU + small data = good match. Avoid porting issues by running under CernVM and VirtualBox with the BOINC client.
Federico Stagni – LHCb first steps
Issues: CVMFS (local cache has to be populated); job length; accounting; clients

5. EGI plans for future activities
EGI-Inspire extension approved.
Cloud and business development (e.g. pay for use and commercial resources): Federated Cloud services in production from May 2014.
Cooperation between European infrastructures
AAI: uniform authentication and authorization. Plan to run a pilot to access cloud services with federated IdP credentials.
ICT – deadline April Cloud based proposal.

6. Operational updates from EGI
SHA-2. Mostly done. dCache SRM clients released but not yet in UMD.
Proposal to increase A/R threshold. A-> 80% and R->85%.
Security contacts verification.

7. Toward a new HEP CPU Benchmark
HS06 – for benchmark. Pledges. Procurement. Accounting.
Hardware changes -> benchmark should evolve
Open Systems Group working on next version
HS14 requirements. Ease of use and “good enough”
Benchmark – CPUv6/CPU2014. Final benchmark end 2014.
Non-WLCG HEP Vos could/should join benchmark validation team?
Agreement on h/w platform, compiler, compiler flags

8. DAVIX library Requirements for HPC
Security: Reliability: I/O framework: Easy to deploy: generic
Davix is best fit from existing clients
Goal – tool for high performance I/O
Features: Optimisations; Security; Reliability; DM extensions; integration with ROOT (in EPEL6 under root-net-davix)

9. Cloud pre-GDB
WG explore possible use of private/community clouds. Focus on shared clouds. Build on existing work in experiments.
Last meeting July. Review progress/work in cloud usage. Review implementation of graceful VM termination. Continue discussion possible models for non-static sharing of resources.
Accounting: prototype based on APEL. How to normalize a VM CPU power. WC time vs CPU time – record both but CPU time provides homogeneity.
Security/Traceability. Current model based on 2 roles (endorser/vm operator) that must be distinct. Traceability – need central logs and may need to add items like VM instantiated. Absence of root access for end users remains critical.
User compartmentalization required on “multi-user VMs”
Vulnerability handling requires ability to terminate VMs quickly
No discussion of policy …
Target shares: economic model complicated… without that keep CE/batch system. Main difficulties – no queuing of requests and allocation of free slots does not address quotas. Proposal to start long lived VMs for a VO up to target share.

10. Actions in progress Details lost…. IPv6
WMS decommissioning – glide-in submission encouraged. VOs using WMS will be contracted (e.g. LHCb)
Tracking tools – Savannah to JIRA slow progress
Machine job features – available at CERN. Need to make available on OPenStack Cloud environment. Provide client for experiments to test.
Middleware readiness. Focus was on software repositoties and the criteria for juding a product deployment process successful
Multicore – twiki and mailing list.

11. Openssl & JAVA 7
GGUS (Nov 18th). WMS delegates proxies with 512-bit keys that are refused by Java 7 used by dCache. Change key size >1024 in java.security.
Dec 9th: ATLAS reported problem with openssl-1.0e-16.el6_5. LCG-ROLLOUT thread.
If both endpoints running newest openssl they negotiate TLS1.2 which does not support 512-bit keys. If either end is older then use TLS1.1 and that is ok with 512 buts. Java 7 by default refuses such keys.
Delegations coming from GridSite libraries: WMS, CREAM, UI, FTS-3, PanDa. New GridSite rpms available as of 16th Dec.
Which nodes need fix: WMS (next Tuesday at CERN), FTS-3. PanDA. CREAM