Operations Portal is an EGI service provided by CCIN2P3,
co-funded by EGI.eu and EGI-Engage


Release Version : 3.3 - December 29th

For any contact, use this section: contact us


The Operations Portal is a central portal for the EGI operations management that offers a different capabilities, such as the broadcast tool, VO management facilities and various of dashboards (Security, VO and Operations) to facilitate infrastructure oversight.

Latest news

Dear dteam users,

for the following VOMS servers:

voms.hellasgrid.gr
voms2.hellasgrid.gr

a new certificate from a *new CA* has been installed, so all the services based on VOMS authentication need to be reconfigured with the new parameters available here:

https://voms.hellasgrid.gr:8443/voms/dteam/configuration/configuration.action
https://voms2.hellasgrid.gr:8443/voms/dteam/configuration/configuration.action

We have sent a broadcast to sites and NGIs asking for quick reconfiguration. At the moment, it is possible that some services will not work properly until the configuration is updated everywhere. We really apologise in advance for that and we are doing our best to coordinate the update all over the EGI infrastructure.

Feel free to ask for further information to EGI Operations through GGUS if needed.

EGI Operations
Dear site managers,

you get this message because your site supports the dteam VO.

For the following VOMS servers:

voms.hellasgrid.gr
voms2.hellasgrid.gr

a new certificate from a *new CA* has been installed, so all the services based on VOMS authentication need to be reconfigured with the new parameters available here:

https://voms.hellasgrid.gr:8443/voms/dteam/configuration/configuration.action
https://voms2.hellasgrid.gr:8443/voms/dteam/configuration/configuration.action

For the services with the old configuration in production, it should be enough to change the corresponding .lsc like this:

# cat /etc/grid-security/vomsdir/dteam/voms.hellasgrid.gr.lsc 
/C=GR/O=HellasGrid/OU=hellasgrid.gr/CN=voms.hellasgrid.gr
/C=GR/O=HellasGrid/OU=Certification Authorities/CN=HellasGrid CA 2016

# cat /etc/grid-security/vomsdir/dteam/voms2.hellasgrid.gr.lsc 
/C=GR/O=HellasGrid/OU=hellasgrid.gr/CN=voms2.hellasgrid.gr
/C=GR/O=HellasGrid/OU=Certification Authorities/CN=HellasGrid CA 2016

which means to replace "2006" to "2016". 

If using yaim, the new configuration should look like this: 

# cat /root/siteinfo/vo.d/dteam

SW_DIR=$VO_SW_DIR/dteam
DEFAULT_SE=$SE_HOST
STORAGE_DIR=$CLASSIC_STORAGE_DIR/dteam
VOMS_SERVERS='vomss://voms.hellasgrid.gr:8443/voms/dteam?/dteam/'
VOMSES="'dteam voms.hellasgrid.gr 15004 /C=GR/O=HellasGrid/OU=hellasgrid.gr/CN=voms.hellasgrid.gr dteam 24' 'dteam voms2.hellasgrid.gr 15004 /C=GR/O=HellasGrid/OU=hellasgrid.gr/CN=voms2.hellasgrid.gr dteam 24'"
VOMS_CA_DN="'/C=GR/O=HellasGrid/OU=Certification Authorities/CN=HellasGrid CA 2016' '/C=GR/O=HellasGrid/OU=Certification Authorities/CN=HellasGrid CA 2016'"

Please update your configuration as soon as possible. Feel free to ask for help to EGI Operations through GGUS if needed.

EGI Operations
Dear all,

we would like to inform you that due to the update of the HellasGrid CA certificate the certificates of the voms.hellasgrid.gr and voms2.hellasgrid.gr servers have been also updated. Therefore please make sure that you have updated LSC files on all of "VOMS-aware" services according to the following configuration details for each VO:

DTEAM:
https://voms.hellasgrid.gr:8443/voms/dteam/configuration/configuration.action

SEE:
https://voms.hellasgrid.gr:8443/voms/see/configuration/configuration.action

vo.complex-systems.eu:
https://voms.hellasgrid.gr:8443/voms/vo.complex-systems.eu/configuration/configuration.action

long-tail.egi.eu:
https://voms.hellasgrid.gr:8443/voms/long-tail.egi.eu/configuration/configuration.action

On behalf of the VOMS administration team,
Pavlos Daoglou
Dear all,

EUGridPMA have announced a new set of CA rpms. Based on this IGTF release a new set of CA RPMs have been packaged for EGI. 

Please upgrade until 2016.07.04 at your earliest convenience. When this timeout is over, SAM will throw critical errors on CA tests if old CAs are still detected.

Please check https://wiki.egi.eu/wiki/EGI_IGTF_Release for more details

EGI UMD software provisioning Team

The following release notes accompany this release:


European Grid Infrastructure EGI Trust Anchor release 1.75          2016.06.27

------------------------------------------------------------------------------
   For release DOCUMENTATION available on this EGI Trust Anchor release see   
               https://wiki.egi.eu/wiki/EGI_IGTF_Release                      
------------------------------------------------------------------------------

This is the EGI Trust Anchor release, based on the updated IGTF Accredited CA
distribution version 1.75-1 with Classic, SLCS and MICS profiles, encoded in
meta-package "ca-policy-egi-core-1.75-1" (new installs) and "lcg-CA-1.75-1"
(for sites upgrading from EGEE/JSPG releases).

IMPORTANT NOTICE:
  Your may install BOTH "egi-core" AND "lcg" meta-packages, according to your 
  policies. Note that your organisation or NGI may have a specific policy and
  may have added or removed CAs compared to the EGI core policy.
  Sites that need compliance with the WLCG policy should install BOTH packages,
  or you will miss out the CERN WLCG IOTA CA specific exception see 
  https://documents.egi.eu/document/2745 for details and the WLCG statement
  http://lcg-ca.web.cern.ch/lcg-ca/doc/WLCG-CERN-IOTA-statement-MB.pdf

The following notices are republished from the IGTF, inasfar as pertinent to
this release. Details are found in the newsletter https://www.eugridpma.org/

Changes from 1.74 to 1.75
-------------------------
(27 June 2016)

* Discontinued expired UFF BrGrid CA (BR)
* Discontinued expired HellasGrid-2006 and associated Root (GR)

The CA modifications encoded in both "requires" and "obsoletes" clauses (RPM)
and Conflicts/Replaced clauses (Debian)  have been incorporated in the above-
mentioned meta-packages.  This release is best enjoyed with  fetch-crl v3  or 
better, available from GNU/Linux OS add-on repositories Fedora, EPEL, Debian,
and from the IGTF at https://www.igtf.net/fetch-crl

Version information: ca-policy-egi-core = 1.75-1

Following the announcement of the decommissioning of the EFDA-JET grid, last week, this broadcast details 
of dates by when the systems will be
turned off.

We aim to decommission the system fully by the 25 of August 2016.

Following this broadcast, we will start putting our services into downtime on the 12th of July, so any jobs should be completed by then.

The following services will be affected at the above schedules:-

 grid002.jet.efda.org (APEL)                             
grid005.jet.efda.org (Site-BDII)                                
grid002.jet.efda.org (CREAM-CE)                                 
grid001.jet.efda.org (SRM)                              
grid003.jet.efda.org (gLite-APEL)                               
grid002.jet.efda.org (gLExec)                           
grid006.jet.efda.org (org.squid-cache.Squid)




1. UMD 

- UMD 3.14.2 has been released on Jun16, updates for SL6 are available (dCache 2.10.56, StoRM 1.11.11 and edg-mkgridmap 4.0.3)
- UMD 4.1.0 has been released on May27, containing an update for dCache in CentOS7 (2.13.28), Frontier-Squid 2.7.STABLE9-24.2 for CentOS7 and for the first time a selection of  SL6 products coming from UMD3.

2. SL5 retirement

Still ongoing. EGI starting contacting sites exposing SL5 services not set in downtime, which risk suspension, asking them for quick action (set downtime or shutdown the service).

>>> More news <<<

The EFDA-JET was initially set up to support the fusion VO. However, as the
fusion was decommissioned last year, we no longer run fusion jobs.
So, we have now taken the decision to shutdown the EFDA-JET grid site. 
We have been advised by the manufacturer that the RAL Tier1 tape library should be powered down while a safety related fault is investigated. The robot has been powered down. As a consequence, files on tape at the RAL Tier1 are not be available. At the moment we have no estimated time to fix. Further updates to follow. 
We are decommissioning the WMS

  grid-wms10.desy.de

Please use other means to submit jobs.

Regards,
the DESY-HH Grid team
Dear all,

EUGridPMA have announced a new set of CA rpms. Based on this IGTF release a new set of CA RPMs have been packaged for EGI. 

Please upgrade until 2016.05.23 at your earliest convenience. When this timeout is over, SAM will throw critical errors on CA tests if old CAs are still detected.

Please check https://wiki.egi.eu/wiki/EGI_IGTF_Release for more details

EGI UMD software provisioning Team

The following release notes accompany this release:

European Grid Infrastructure EGI Trust Anchor release 1.74          2016.05.16

------------------------------------------------------------------------------
   For release DOCUMENTATION available on this EGI Trust Anchor release see   
               https://wiki.egi.eu/wiki/EGI_IGTF_Release                      
------------------------------------------------------------------------------

This is the EGI Trust Anchor release, based on the updated IGTF Accredited CA
distribution version 1.74-1 with Classic, SLCS and MICS profiles, encoded in
meta-package "ca-policy-egi-core-1.74-1" (new installs) and "lcg-CA-1.74-1"
(for sites upgrading from EGEE/JSPG releases).

IMPORTANT NOTICE:
  Your may install BOTH "egi-core" AND "lcg" meta-packages, according to your 
  policies. Note that your organisation or NGI may have a specific policy and
  may have added or removed CAs compared to the EGI core policy.
  Sites that need compliance with the WLCG policy should install BOTH packages,
  or you will miss out the CERN WLCG IOTA CA specific exception see 
  https://documents.egi.eu/document/2745 for details and the WLCG statement
  http://lcg-ca.web.cern.ch/lcg-ca/doc/WLCG-CERN-IOTA-statement-MB.pdf

The following notices are republished from the IGTF, inasfar as pertinent to
this release. Details are found in the newsletter https://www.eugridpma.org/

Changes from 1.73 to 1.74
-------------------------
(16 May 2016)

* Removed superseded NorduGrid (2006) CA (DK)
* Added HellasGrid 2016 CA (GR)


The CA modifications encoded in both "requires" and "obsoletes" clauses (RPM)
and Conflicts/Replaced clauses (Debian)  have been incorporated in the above-
mentioned meta-packages.  This release is best enjoyed with  fetch-crl v3  or 
better, available from GNU/Linux OS add-on repositories Fedora, EPEL, Debian,
and from the IGTF at https://www.igtf.net/fetch-crl

Version information: ca-policy-egi-core = 1.74-1
The SRM system srm.target.rug.nl at site RUG-CIT will be decommissioned, because the underlying storage hardware needs to be decommissioned in the near future.

We will therefore switch off our SRM access for all of the VOs we support at Monday July 11th 2016. The only exception to this will be for the VO lofar, for which we will make separate agreements.

This means that if you as a VO have data stored on our SRM this data needs to be removed or copied to a different site.
For VOs which are supported, but currently don't have any data stored, access will be stopped directly.

Here is a list of VOs that are supported, and their status:

No data stored. Access will be disabled today.
astron
chem.biggrid.nl
dans
drihm.eu
esr
euclid-ec.org
pvier
vo.panda.gsi.de

Data stored. Access will be stopped by July 11th. VO managers will be contacted through GGUS tickets.
bbmri.nl
biomed
ildg
lhcb
lsgrid
omegac
vlemed

Non-production VOs, will be shutdown when the SRM is fully stopped. No GGUS tickets will be created.
dteam
ops
ops.biggrid.nl
tutor

A reminder will be sent in a month.

With kind regards,

Fokke Dijkstra
Hi,
this broadcast inform the VO of the decommissioing of CE cream-01.cnaf.infn.it at IGI-BOLOGNA site that publish SL5 queues.

12th of May 2016 Start downtime
19th of May 2016 End downtime
19th of August 2016 End of log retention period
19th of August 2016 Service decomissioned

Best Regards 
IGI-BOLOGNA admins.
We inform VO managers and users that the INFN_Parma site will be decommissioned by the end of June 2016; the site downtime is foreseen by the end of may 2016.
The service involved is the Storm SE grid-se.pr.infn.it
Decommission of WMS lcgwms06.gridpp.rl.ac.uk

The decommissioning of this server is taking place as per EGI Proc12.

On Wednesday 1st June this WMS will stop accepting new work.
Jobs outputs will be available until Wednesday 22nd June when the machine will be turned off.

The WMS service at RAL-LCG2 will continue to be available via lcgwms04.gridpp.rl.ac.uk and lcgwms05.gridpp.rl.ac.uk.
Dear VO members,

This is to inform you of the decommission process of computing services from IBERGRID. The following services will be fully decommissioned:

cream01-tic.ciemat.es (CREAM-CE)
apel01-tic.ciemat.es (gLite-APEL)


The timeline of this process:

Timeline
====
From 4th of May 2016
- The CE queues grid services will be definitively disabled.

4th of June 2016
- Resource hardware and computing services may become inaccessible without further notice to VO managers, users, etc. from this date.
- End of log retention period.


If you have any dough's or any issues please we will try to help you.

Best regards,
Antonio Juan Rubio Montero