Choose timezone
Your profile timezone:
HEPiX Virtualisation Working Group Meeting
→
Europe/Zurich
Phone conference
Phone conference
Description
<sl>
Dial +41227676000 and enter access code 0186715 followed by #
Key ##1 to mute/unmute your phone
</sl>
HEPiX Virtulisation WG meeting minutes 2010-03-22
Present (in no particular order):
Tony Cass, CERN
Ulrich Schwickerath, CERN
Belmiro Rodrigues Moreira, CERN
James Adams, RAL
Ian Collier, RAL
Martin Bly, RAL
Jens Jensen, RAL
David Kelsey, RAL
Jie Tao, KIT
Keith Chadwick, FNAL
Sonder Klous, NIKEF
Thomas Finnern, DESY
Owen Synge, DESY
Ian Gable, University of Victoria
Michel Jouvin, GRIF
Eric Becker, U Washington / Genome Centre
Please consider these as a preliminary version of the minutes. I'm still trying to resolve some of the conclusions (as per my email to the list). There is a good chance I may have misrepresented some of the discussion in my effort to summarize. Please correct me if that is the case. I will remove this notice as the minutes are finalized.
1. Comment on the previous minutes
- Owen commented that he would like to see the date for the in person meetings resolved.
2. Running of user provided images (addressing Ewan MacMahon email of 2010-03-22)
- Tony stated that the object was to provide a mechanism for producing trusted images, and not to address what sites should do with individual created images (i. e. untrusted). Having a method from for producing trusted images does not preclude site from running other images.
- David commented that there me reluctance from grid infrastructure to run untrusted images.
3. Policy for Trusted Images
Once again there was a lot of rapid fire discussion in this area. I will attempt to summarize the key points and conclusions rather the be exhaustive.
- David commented that the Draft Version 1.0 is very much a zeroith version. He said that is was more important to arrive an understanding of the goals before trying to arrive at the correct words to accurately describe those goals.
- Several people commented on the need for a role called approver. This a role distinct from that of producer. However, the producer and approver need not be separate people.
- Dave proposed that that the policy document not include technical best practices and these details should be in another document. The group agreed.
- There was a discussion if it will be VOs or sites that would approve images, or even if it was important to make the distinction. I (Ian Gable) struggled to find a conclusion to this discussion.
- Dave also proposed that the policy document address only the producers of images and not the consumers. The group agreed.
- Tony asked that the policy policy include something to the effect of "The image should not prevent the consumers of the image from fulfilling their obligations under other grid policies".
- Ian Gable commented that one element of the policy should be that the image contain no pre-existing accounts or credentials.
- Dave and Tony both commented that there needs to be a parallel technical best security practices to go along with the policy document. Romain Wartel was put forward as possible good candidate to lead this effort. David Kelsey will contact him to begin arm twisting.
- Dave asked about naming of images and their properties (expiry dates, version numbers etc). Owen had no strong feelings about names but was adamant that images have expiry dates. He advocates independent user tag from image names, such that there can be one or two images who match a user tag.
- Tony asked that the consumer section of the document be reintroduced and address what could be contextualized. (Note that this is my impression of the discussion, I've asked the list about it)
4. Agenda of the next meetings
- March 29: discussion of image distribution proposal from Owen, Martin, and Ewan
- April 12: Discussion of next revision of the policy document.
- Face to face meeting: Friday afternoon of HEPiX Lisbon (April 23, 2010) this is the final date.
There are minutes attached to this event.
Show them.