160 likes | 328 Views
SLC5 Status with Quattor. ELFms Brainstorming 8 th December 2008 Veronique Lefebure. Agenda. Status Twiki on https://twiki.cern.ch/twiki/bin/view/ELFms/ScientificLinux5Port : Aims and PrepareInstall Quattor and SELinux SWrep ZUUL Ncm-components Lemon CDB templates
E N D
SLC5 Status with Quattor ELFms Brainstorming8th December 2008 Veronique Lefebure
Agenda Status Twiki on https://twiki.cern.ch/twiki/bin/view/ELFms/ScientificLinux5Port : • Aims and PrepareInstall • Quattor and SELinux • SWrep • ZUUL • Ncm-components • Lemon • CDB templates • Remedy/HMS/LEAF/SMS
Current status: SLC5 1 afs maintenance 11 afs production 1 afs test-pk maintenance 2 castordev build production 1 des_apps/twiki des_apps/twiki maintenance 3 dmtb maintenance 2 lxbatch public_slc5_64 production 3 lxbuild maintenance 2 lxbuild production 6 lxburn maintenance 2 lxcmgmt maintenance 10 lxdev maintenance 2 lxplus lxplusSLC5 production 2 lxserv production 106 lxspare maintenance 1 lxvmpool maintenance 1 lxxen castordev production 9 lxxen dmtb maintenance 10 proctest maintenance 2 svnweb svnweb maintenance 2 vobox undef production
Current Status (slc3) 37 castor 1 fileserver 16 grid 4 griddpm 11 gridfts 30 gridsrm 16 lcgrb 2 lxbuild 1 lxdustbin 2 lxgate 6 lxjra1test 2 lxnoq 7 srm 1 wwwinfo
Aims and PrepareInstall • Using aims2 • PrepareInstall OK • Support also new filesystem schema (for any OS ?)
Quattor and SELinux • Access to /var/log
Swrep • Server: • New swrep runs on SLC5 • Selinux mode = Permissive • Iptables off • Repositories: • LinuxSoft Slc5 32/64 mirrored (also “testing” rep.) • Defaults automated (in /test or /pretest) • Missing: • Package list automation
ZUUL Doc on http://indico.cern.ch/contributionDisplay.py?contribId=48&sessionId=12&confId=27391 • Runs by default on SLC5 • Replaces regisclient • Interactive access given to all user by default • Use ncm-useraccess to limit access • Use ncm-accounts for local accounts • Still uses SINDES passwd.header file for passwds (root and operator, …)
Ncm-components • Ncm-access_control replaced by Zuul + ncm-useraccess + ncm-sudo • In /prod/components: 49 components • SLC5 should not include any pro_xxxx template ! • Needed to be Quattor 1.3(4) compliant: conversion recipe on https://twiki.cern.ch/twiki/bin/view/ELFms/WriteNCMComponent#Conversion_of_old_components_to /prod/components/ /prod/pro_ 58 28 21
Lemon • Sensors runs as non-root (user “lemon”) where possible • Ex. On lxplus: ? • Ex. On lxbatch: ?
New CDB Profile Template Structure • See https://twiki.cern.ch/twiki/bin/view/FIOgroup/CdbSlc5TemplateStructure • Based on 5 environment variables: • ELFMS_OS(*) • ELFMS_ARCH(*) • ELFMS_SVCCLASS(*) • ELFMS_RESOURCE • ELFMS_CUSTOMIZATION • (*)= mandatory
ELFMS CDB Mandatory Global Variables • Defined in each new profile for SLC5 or not-quattor-managed machines or enclosures • 3 mandatory variables: • ELFMS_OS: “slc5” or “undef” • ELFMS_ARCH: “i386”, “x86_64” or “undef” • ELFMS_SVCCLASS: cluster or service class, assumes existence of /prod/cluster/[ELFMS_SVCCLASS]/config.tpl
ELFMS CDB Optional Global Variables • Also defined in each new profile for SLC5 or not-quattor-managed machines • 2 optional variables: a way to configure sub-clusters of base clusters such as “vobox” or “lxnoq” or …. • ELFMS_resource: • “cms” or “atlas” or “afs”, … • ELFMS_customization: • “frontier” or “dbs” • /prod/customization/cms/frontier/config.tpl • /prod/customization/cms/dbs/config.tpl
“Service” templates • In prod/services/[service]/config.tpl • Packages + components + config + monitoring + iptable + … for a service such as httpd • To be used by >1 cluster • Current list: acron afs_client and atd castor castor2_client castor_client castordev cron gridfts gridsrm gridvoms httpd krb5_client lsf named nscd ntpd oomkill rsyslog sendmail sindes sindes_client swrep_client swrep_server sysacct_server syslog tsmclient zuul
Remedy/HMS/LEAF/SMS • SMS on slc5: • Ok • Nc-client –server notdserv –h <host> state • Nc-client –server notdv2serv –h <host> state • LEAF on new profile structure: • LEAFAddHost ok • LEAFMoveHost ok • LEAFRenameHost : not ready yet • LEAFRetireHost: not ready yet • LEAFConvertToNewProfileStructure • Tpl-viewer: does not “translate” the variables (yet)
(Reminder) PAN syntax (for panc v8) • Note: CDB not ready yet for panc v8 • https://twiki.cern.ch/twiki/bin/view/ELFms/NewPanSyntax • Get rid of “define” • get rid of "descro/description" • replace "delete" by "= null • New behaviour of "exists" • Global variables