1. GDB July 2015 Jeremy’s quick summary notes Also refer to the meeting minutes https://twiki.cern.ch/twiki/bin/view/LCG/GDBMeetingNotes20150708

2. Introduction Topics review Meetings: Dates in indico. October a grid/cloud day co- organised with HEPiX. ARGUS: EL7/Java8 first tests no problems. PEPD problem identified at CERN. Multicore accounting: Good progress. Some (UK) sites not yet publishing. Please check. Workshop: ISCTE, Lisbon. First week February. Actions: Machine/Job features needs testers. Security class 2 services list. Storage create protocol/implementation list.

3. Update on identity federation AARC (H2020). Issues identity federation – make it work! Sirtfi: Incident response for federations (CERN, InCommon, LIGO, Surfeit, Sunet). Register contacts in EduGain. WLCG pilot: Can authenticate without x509 and get x509 for backend services. More Vos welcome. User identity mapping complicated. Next steps: Several including lobbying for eduPersonUniqueID.

4. News from the front Linux=Windows. Ie. Large attacks target both. Data Center compromises occur (admin credentials). Conferences being targeted. Take care with email links. Exploitation chain Competition between EK: eg. Angler EK Cryptolocker: Make backups! Raise the bar on dealing with adversary

5. Security policies Last update GDB June 2013. User AUP: generalise; acknowledgements; liability; new version few comments; data protection under advisement. VM endorsement and operation: use case. Personal data protection: have something on job accounting but need to expand to monitoring, logs etc. GEANT Data Protection Code of Conduct Transfer outside of the EU; evaluating the use of a single policy. Federated Identity and IGTF IOTA

6. Spring 2015 HEPiX meeting Reports on progress and plans 134 registered participants. Tracks & trends: security & networking. Storage & file systems: CEPH. Ethernet drives. Not simplifying Grids/clouds IT facilities/business continuity. Basic IT services: ELK, Kibana, Puppet…. Site reports Next meeting: 12-16 th October

7. ARGO Service Monitoring Argoeu.github.io (GRNET) A flexible and scalable framework that replaces SAM. Status and avail for services. Customer defined profiles. Flexible deployment models. Site: http://argo.egi.eu.http://argo.egi.eu Open source development approach.

8. IPv6 Review of exhaustion of addresses. Depends on definition. Some updates from the IPv6 group on site developments and experiment tests. Testbed data transfer issues often shows areas problematic eg. FTS3 Work needed on (SAM3) monitoring to get it working with IPv6. Focus from September. Experiment IPv6 requirements.

9. EGI Cloud Principles: Hybrid cloud federation. Multi tenant model. Services: AAI. Accounting. Monitoring. Registry. EGI endorsed VM. VM image management. Federated service management. Definitions: Cloud federation; realm; Community platform (examples given) Other integration efforts.