1. Operating Systems & Information Services CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS Drupal at CERN Juraj Sucik Jarosław Polok CERN IT May 2011

2. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS 2 Drupal background Free and open source web CMS Based on PHP and (My)SQL database Originally written by Dries Buytaert in Belgium in 2001 Widely used (1.5% of all websites) Over 7000 modules enhancing functionality available Developed by community

3. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS Content management Design for content Standard look and feel Simple publishing for content creators Role based permissions Workflow Versioning 3

4. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS 4 Drupal at CERN CERN community asked for it People –3 directly involved in building infrastructure –Module developers –CERN Webmasters Drupal 6 pilot infrastructure in place since September 2010 Drupal 7 in January About 60 websites Positive feedback from main users –Experiments –Communications office –Departmental webmasters

5. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS 5

6. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS Drupal Support at CERN Community support model –FAQ/Forum is maintained by the user community –Service desk 2 nd level will use FAQs to give standard answers but 3 rd level is forwarded to the forum and case closed IT infrastructure centrally supported 6

7. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS Infrastructure 7

8. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS Hardware Infrastructure Hardware – production environment –6 frontend systems (12 cores / 32 GB RAM / 1TB disk) –2 backend systems ( 6 cores / 24 GB RAM / 6 TB disk) Hardware – development environment –2 frontend systems (12 cores / 32 GB RAM / 1TB disk) –2 backend systems ( 6 cores / 24 GB RAM / 6 TB disk) 8

9. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS Backend Servers Database server –master-master mysql replication File server –nfs export replicated (synced) Ldap server –replicated Webdav server –stripped down apache configuration Cluster suite components 9

10. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS Frontend Servers Load balancer server –apache with mod_proxy_balancer Web server –Apache / PHP / Shibboleth / memcached Cluster Suite components 10

11. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS Software Infrastructure Software –Drupal: 7.0 –Operating system: Scientific Linux CERN 6 (SLC6) –Apache: 2.2 –PHP: 5.3 –Memcached: 1.4 –NFS v4 / TCP –Shibboleth: 2.4 –Red Hat Cluster Suite v. 3 –Mysql: 5.1 11

12. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS Cluster Suite Cluster manages services –load balancer, web servers, nfs server, ldap servers and mysql servers –Failed services are automatically restarted or relocated to other cluster members –Web servers work in parallel and are restarted when failed –General “health” of each cluster member is monitored too: a misbehaving cluster member is rebooted automatically –Can loose 4 frontends and 1 backend 12

13. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS Drupal site setup Site separation enforced (mod_ruid2) –Each site is processed as different user id, does not have access to other sites data –All sites are running in a chroot’ed environment: no access to underlying operating system Site management –Access to site files via secure webdav protocol –Access to site database via phpMyAdmin –Access to site log files –Access to site management via http://cern.ch/SITENAME/_site 13

14. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS Authentication CERN SSO Authentication Drupal role mapping to E-groups 14

15. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS 15 CDS Module Import CDS record to Drupal page

16. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS Indico module Listing events of an Indico category for a given period of time 16

17. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS Profiles module User settings and nice name formatting 17

18. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS Lemon monitoring system 18 Monitoring

19. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS 19 Drupal CERN Integration Official CERN theme Webdav access to files Central backup service CERN Web Services

20. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS Current status Preparation for production –Tuning and testing the performance of the setup –Testing restore from backup –Testing failure scenarios Issues with stability of Drupal 7 modules Investigating Varnish Investigating NAS storage Collaboration with IT/DB database experts to improve our mysql setup 20

21. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS Future Plans Define the change management for upgrades Define the roadmap for migration of CERN official pages to Drupal 21

23. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS Summary Pilot service started in autumn 2010 Production and test environment with frontend and backend servers Ongoing integration with CERN environment Different departments involved Production to start soon 23

24. CERN IT Department CH-1211 Geneva 23 Switzerland www.cern.ch/i t OIS Juraj.Sucik@cern.ch http://cern.ch/ENTICE 24