Rucio Meeting

Thursday 29 Jan 2026, 15:00 → 16:00 Europe/Zurich

Martin Barisits (CERN)

15:00 → 15:05 News

• February meeting schedule
  • Feb-05
  • Feb-12 CANCELLED
  • Feb-19
  • Feb-26
• Security vulnerability for (old) WebUI
  • 2x Mostly related XSS (Cross site scripting)
    • Input sanitation, one data sanitation
  • 1x Being able to "probe" which username exist
  • Fix by tomorrow

15:05 → 15:25 Community News & DevOps roundtable

• ATLAS
  • Rolling out changes for oAuth in the webui
• CMS
  • Reaper deleting (significantly) under threshold in some cases
    • Check storage usage history (in rucio) in that timeframe?
  • Plots are updated all 5 min
• Fermilab DUNE / RUBIN / 
• DUNE
  • Meeting @ CERN concerning tokens, bulk upload/registration, consistency checking
  • Policy package not called for a registration workflow
    • Following up on a PR from Riccardo
• DaFab
  • Archival of deleted metadata is next step
• CERN IT
• INFN Datalake
  • Working on Third party copy w/ tokens
    • Not working with s3 storage?
    • To be checked
• RI-SCALE
• MADDEN / ETAP
  • OIDC Auth problem when removing files
  • PR for Multi-RI
  • For new version, release will be on Monday

15:25 → 15:55 Developers roundtable

• Reflection about ongoing Sprint 2 (Sprint Board) [Dimitris]
  • Many in review
• PR review sprint
  • Lots of activity
  • Status: 60 -> 50
    • Good progress, but continously getting to the more difficult ones
  • Older ones: some are being closed
  • PR Template / Review template: Should be finished
  • Bot dev: Early next week a first version
    • Closing stale PRs
    • repo?
• Rucio 40 priority followup
  • Todo
    • Create a new API endpoint for the clients to request tokens #6638[Dimitrios]
    • Implement new token authentication for download #7029[Dimitrios]
    • More useful client docstrings and CLI help messages (Target: 15/25) #363 [Dimitris]
    • Consider migrating from Jobber to Cloudprober #152 [Eric]
    • DIDs not being shown correctly in the extension after a successful download #95 [Giovanni]
    • Make available + Add to Notebook features failing #83 [Giovanni]
    • Prevent multiple Reaper threads from working on the same replicas #6512 [Hugo]
    • Generate "Configuration parameters" documentation page automatically, to avoid mismatches between documentation and code #325 [Maggie]
    • Change mixed prometheus_client and probe_metric approachs to use PrometheusPusher #129 [Maggie]
    • Possible Belle II specific code in DIRAC functionality #7824[Max]
    • Remove hard-coded one-day lifetime in DIRAC API #8172 [Max]
    • [ EPIC ] : Mutation Operations and Role Based Access to pages/features (Target 5) #622 [Mayank]
  • In Progress
    • Token refresh after expiration #73 [Giovanni]
    • Do not use regex to split did, use scope extraction method #7519[James]
      • PR in container repo (prerequisites) rucio/containers#470
        • Please comment to the PRs if this is seen as problematic!
    • Test stability on LTS branches #7964 child of #7667 [Karan]
    • Copy implimentation of CLI to new CLI structure #8295 [Maggie]
    • Simplify what we run on CI (test suites, OS, Python versions, DB, …) #7965 child of #7667 [Mayank, Karan]
    • [EPIC] UX improvements (Target 22) #621 [Mayank]
  • In Review
    • Consider using Python venvs in containers to avoid conflicts with system-installed packages #458 [Ben]
    • Add startup self-check mechanism to block Rucio services when critical diagnostics fail #8197 child of #8011 [Dimitris]
    • Ensure PostgreSQL ENUM types created during Alembic migrations honor the configured schema #8145 child of #7737[Dimitris]
    • Wrong documentation for dids/scope/name/files call #8053[Dimitris]
    • Testing: Make tools/run_tests.sh idempotent #7737 child of #7667 [Dimitris]
    • No way to check or change ownership of a scope using Rucio client #7830 [Maggie]
  • Done
    • Listing containers with more than 10k entries breaks the kernel #102 [Giovanni]
    • Rucio silently skips importing configured policy package in case of errors #7962 [Max, James]
  • Delayed
    • Stop auto-forwarding of old-style CLI commands #8294 [Maggie]
• Other discussion
  • Configuring s3 storage (for multihop) in documentation
    • PR submitted
    • What to do with bash scripts etc.
    • Maggie can help as well
  • PR of dependency bot

15:55 → 16:00 AOB