BiLD-Dev
Bi-Weekly "Loyal" DIRAC developers meeting. And, following, the LHCbDIRAC developers meeting.
Join Zoom Meeting
https://cern.zoom.us/j/91083694183?pwd=ZkdDY1I1YkJVc2o3UTdBY1BRZE15UT09
Meeting ID: 910 8369 4183
Passcode: 12345678
One tap mobile
+41432107108,,91083694183# Switzerland
+41315280988,,91083694183# Switzerland
Dial by your location
+41 43 210 71 08 Switzerland
+41 31 528 09 88 Switzerland
+41 43 210 70 42 Switzerland
+33 1 8699 5831 France
+33 1 7037 2246 France
+33 1 7037 9729 France
Meeting ID: 910 8369 4183
Find your local number: https://cern.zoom.us/u/artUfAdNB
Join by SIP
91083694183@188.184.89.188
91083694183@188.185.118.153
Join by H.323
188.184.89.188
188.185.118.153
Meeting ID: 910 8369 4183
Passcode: 12345678
BiLD (Bi-weekly DIRAC Development meeting) – 15/12/2022
On Zoom: André, Andrei, Alexandre, Christophe, Christopher, Daniela, Hideki, Simon, Janusz, Xiaomei, Vladimir
Apologies: Federico
Follow-up from previous meetings
- We did NOT have an hackathon on 8.1.0a6 because of too little to test. Instead, we had some really lengthy discussions on AuthZ/N:
- Last BiLD 2 weeks ago
- all updates below
DIRAC communities roundtable
LHCb:
Federico+Alexandre+Christophe+Christopher+Alexey
- LHCbDIRAC hackathon done on top of 8.0.5, no issues found in DIRAC
- not conclusive though
EGI
Andrei
- Set up 3 CloudCEs for 3 distinct VOs, using Application Credentials authentication method. 5 more CloudCEs were configured pending setting up dedicated Application Credentials.
- Using CloudCEs with tokens looks to be impossible with the currently available code of the Openstack libcloud driver. However, Application Credentials mechanism allows to bypass this issue.
- Simon addressed this in https://github.com/DIRACGrid/DIRAC/pull/6580#issuecomment-1351327626
ILC/CLIC/FCC/Calice:
André
- Set up Python3 test servers with 7.3 successfully
Belle2
Hideki
- v7r2 in production.
- SSL timeouts exception are not caught by the DIRAC Client. Issue to be opened but the v7r2 is rather old, probably it is solved already.
Juno
Xiaomei
Juno taking data in the beginning next year
- Federico Juno asking for direct tape access? DIRAC DMS tools are used to manage the tape storage.
- Running all the services on one server. Extra server can be configured to be ready to install extra instances of heavily used services.
- Need to create a transformation with several input files. Issue to be opened to describe the case.
GridPP:
Daniela+Simon+Janusz
- No changes in production, one pre-prod on v8.0.6 for AREX testing, also testing Andrei’s token code for the non-token case (as in “does it break anything”)
Topics from GitHub/Discussions or Google forum
only un-answered topics below:
Error in loading WebApp (5.0.1)
- Should always do
pip install WebAppDIRAC[server]?
ERROR: DataString is getting too long
- DIRAC buffering. The coded “solution” was not accepted, a better one should be coded (suggestion is there)
Personal certificates with “sn” and “gn” fields not supported?
- from previous meeting Maybe update to VOMS2CSAgent?
- from previous meeting Andrei we should simply put by the default the bundling of the proxy in the pilots
…several others in https://github.com/DIRACGrid/DIRAC/discussions?discussions_q=is%3Aunanswered
from the forum: https://groups.google.com/g/diracgrid-forum/c/l1n_M4ZMDnM/m/K1x0ohbGAwAJ?pli=1
*
DIRAC releases
- v7r3
- v7.3.34 is the last one. Few fixes for AREX CE merged in branch.
- v8r0
- v8.0.6
- (#6596) HTCondorCE: use CS location Resources/Computing/CEDefaults/HTCondorCE instead of Resources/Computing/HTCondorCE
- v8.0.6
- v8r1
- NTR
DIRAC projects
DIRAC:
Issues by milestone:
- v7r3:
- Still 8 open issues
- Add possibility to specify a DIRACOS2 version in SystemAdministrator and Pilot.
- often requested
- v8.0:
- 21 open issues
- Requirements and tasks for token-based pilot submissions
- PR created as a draft: https://github.com/DIRACGrid/DIRAC/pull/6580
- v8.0.1 WebApp ssl issue
- Merge connected PR https://github.com/DIRACGrid/WebAppDIRAC/pull/699 and close this?
- v8.1:
- 19 open issues
- Keep or remove BundleDelivery machinery?
- PR created, failing tests
- Provide minimal support for non-DIRAC DIRAC client
- Discussion quick revival: https://github.com/DIRACGrid/DIRAC/discussions/6121#discussioncomment-4208019
PRs discussed:
- https://github.com/DIRACGrid/DIRAC/pull/6373
- breaks WebApp completely
- https://github.com/DIRACGrid/DIRAC/pull/6405
- Still AREX to be added, others were tried all by Janusz, issue with ARC discovered
- [8.0]Pilot submission with tokens
* - [8.1] WMS: Working with usernames instead of OwnerDNs
- Addressing 2 issues at once.
- [integration] Remote Pilot Logger to Tornado
- from previous meeting The new JSON format is being coded, and this means also re-thinking a bit where the options are.
WebApp:
Pilot:
- NTR
DIRACOS2:
- htcondor 9.0.x updated to fix scitokens support
- will need to update to OpenSSL 3 early next year as OpenSSL 1.1.1 will reach EOL soon
Documentation:
- NTR
OAuth2:
- from previous meeting WLCG timeline document: https://zenodo.org/record/7014668#.YyLag9JBwQ9
tornado/HTTPs
- from previous meeting Federico for “full production” setup we are not there yet
- is nginx “mandatory”?
- NO!
- Andrei there’s no “upload” solution for DIRAC SE
- is nginx “mandatory”?
management
- from previous meeting 3 issues left, still valid
- Andrei Updated the script, should be uploaded here
diraccfg
- from previous meeting Christopher Do we want to make a release that drops support for py2?
- yes
COMDIRAC
- Daniela I’m trying to get this done inbetween various Christmas related items. I’m trying to get Simon to help, but he seems strangely reluctant.
DB12
- NTR
Rucio
- NTR
Tests
- NTR
Release planning, tests and certification
Certification machines
- lbcertifdirac70 machine:
- maybe add an SSHCE site in DIRAC certification submitting to https://batchdocs.web.cern.ch/linuxhpc/index.html cluster ?
- Alexandre got an access, will be done through
diracgriaccount
- Alexandre got an access, will be done through
- Computing Element of each supported type should be configured (HTCondorCE, 2 ARCS (Alexandre (maybe use RALPP and Glasgow ? I can talk to them if there are issues --Daniela)), 1 Cloud (Daniela - this is already part of the tests), SSH). Consider OAuth tests as well - what is needed as far as certification servers configuration is concerned.
- Daniela: Enabled (and tested, at least with X509) WLCG VO for token testing. Needs update in puppet for /etc/grid-security/vomsdir and /etc/vomses, please.
- Christophe I’ll check and add it
- Daniela Still missing as of 14/12/22 A working config can be found at /cvmfs/grid.cern.ch/etc/grid-security/vomsdir/wlcg/ and /cvmfs/grid.cern.ch/etc/grid-security/vomses/wlcg-voms.cloud.cnaf.infn.it
- maybe add an SSHCE site in DIRAC certification submitting to https://batchdocs.web.cern.ch/linuxhpc/index.html cluster ?
- lbcertifdiracoauth machine:
- NTR
Next hackathon(s)
- Next year
AOB
Next hackathon: January 12th ?
Next BiLD: January 19th ?
LHCbDIRAC
- v10r4: deploy board in https://trello.com/b/kzUKdMts/deploy-v10r3
* - https://lhcb-auth.web.cern.ch/
- from previous meeting Andrei this is not properly configured yet. Not usable for Pilot submission yet (compute scopes not added).
- LHCbDIRAC hackathon
- puppet MR
- nest hackathon 19th Dec Monday
- from previous meeting Move from Jira to GitLab for issues
- Anyone would be against to move to using GitLab issues instead?
- For the existing ones: review, close if you can, or keep it to be moved for later.
- Jira history: not sure if it will be possible to keep it.