Enabling Grids for E-scienc. E DPM administration tutorial Sophie Lemaitre (Sophie. Lemaitre@cern. ch) Jean-Philippe Baud (Jean-Philippe. Baud@cern. ch) DPM tutorial – CC-IN 2 P 3 – 21 st March 2007 www. eu-egee. org INFSO-RI-508833
DPM in a nutshell Enabling Grids for E-scienc. E • • • Description Installation DPM as a service Troubleshooting Documentation / support INFSO-RI-508833 2
DPM in a nutshell Enabling Grids for E-scienc. E • • • Description Installation DPM as a service Troubleshooting Documentation / support INFSO-RI-508833 3
What is a DPM ? Enabling Grids for E-scienc. E • Disk Pool Manager – Manages storage on disk servers – SRM support § 1. 1 § 2. 1 (for backward compatibility) § 2. 2 (released in DPM version 1. 6. 3) • Deployment status – 83 DPMs in production – 110 VOs supported INFSO-RI-508833 4
Architecture Enabling Grids for E-scienc. E /dpm/cern. ch/home/dteam/my_file Physical files disk 01. cern. ch: /data 01/dteam/2007 -06 -03/my_file. 150. 0 INFSO-RI-508833 5
Architecture (details) Enabling Grids for E-scienc. E -- DPM config -- All requests (SRM, transfers…) Standard Storage Interface Can all be installed on a single machine INFSO-RI-508833 -- Namespace -- Authorization -- Replicas Very important to backup ! Store physical files 6
DPM strengths Enabling Grids for E-scienc. E • Easy to install/configure – Few configuration files • Manageable storage – Logical Namespace – Easy to add/remove file systems • • • Low maintenance effort Supports as many disk servers as needed Low memory footprint Low CPU utilization Easy Classic SE to DPM migration INFSO-RI-508833 7
Daemons Enabling Grids for E-scienc. E • DPM server • DPM Name Server • SRM servers § srm v 1 § srm v 2. 2 • RFIO server • DPM-enabled Grid. FTP server § Normal Grid. FTP server slightly modified for the DPM § Can be used in place of the normal Grid. FTP server § But normal Grid. FTP server cannot be used for the DPM § Note: Grid. FTP 2 support coming INFSO-RI-508833 8
DPM in a nutshell Enabling Grids for E-scienc. E • • • Description Installation DPM as a service Troubleshooting Documentation / support INFSO-RI-508833 9
Before installing Enabling Grids for E-scienc. E • 5 questions before installation: – For each VO, what is the expected load? § Does the DPM need to be installed on a separate machine ? Yes, this is recommended ! – How many disk servers do I need ? § Disk servers can easily be added or removed later – Which operating system ? – Which file system type ? – At my site, can I open ports: § § § § § INFSO-RI-508833 5010 (Name Server) 5015 (DPM server) 8443 (srmv 1) 8444 (srmv 2) 8446 (srmv 2. 2) 5001 (rfio) 20000 -25000 (rfio data port) 2811 (DPM Grid. FTP control port) 20000 -25000 (DPM Grid. FTP data port) 10
Operating System Enabling Grids for E-scienc. E • RPMs released for: – SLC 3 • DPM builds on: – Mac OS X – SLC 4 – Other 64 bit platforms INFSO-RI-508833 11
File Systems Enabling Grids for E-scienc. E • Dedicated file systems – DPM cannot work properly if each file system is not dedicated: § Reported space will be incorrect § Thus, space reservation, garbage collection, etc. will not work as expected VERY IMPORTANT • Supported file systems ? – ext 2: not recommend – ext 3, xfs: OK – reiserfs: ? • NFS mounted file system ? – Problems seen: § DPM sometimes hangs § File corruption INFSO-RI-508833 12
Which File System type ? Enabling Grids for E-scienc. E xfs seems to be more performant But, problems with xfs and kernel 2. 6 seen… From Greig A. Cowan (HEPIX 2006) INFSO-RI-508833 13
YAIM Enabling Grids for E-scienc. E • YAIM configuration : $MY_DOMAIN Site-info. def $DPM_DB_PASSWORD Default amount of “$DPM_HOST: /data 01 disk 1. $MY_DOMAIN: /data 02” $MYSQL_PASSWORD $DPM_DB_HOST space reserved $DPM_HOST $DPMFSIZE for a file. Check VO typical file $DPMPOOL $SE_LIST usage. $DPM_FILESYSTEMS $SE_ARCH $DPM_DB_USER $VOS – VO_<my. VO>_DEFAULT not used for DPM – VO_<my. VO>_STORAGE_DIR not used for DPM • “multidisk” On the DPM server: §. /install_node site-info. def glite-SE_dpm_mysql §. /configure_node site-info. def glite-SE_dpm_mysql • On each disk server (except DPM server): §. /install_node site-info. def glite-SE_dpm_disk §. /configure_node site-info. def glite-SE_dpm_disk INFSO-RI-508833 14
YAIM installation Enabling Grids for E-scienc. E • YAIM installs – On $DPM_HOST: § DPM server § DPM Name Server § SRM servers (srmv 1 & srmv 2) – On each disk server specified in $DPM_FILESYSTEMS: § RFIO server § DPM-enabled Grid. FTP server • YAIM creates – One pool including all file systems specified • Only configuration files § /opt/lcg/etc/DPMCONFIG : DPNS and DPM DB connection string § /etc/shift. conf : different servers/disk servers TRUST rules INFSO-RI-508833 15
Obtained Configuration (1) Enabling Grids for E-scienc. E • RFIO, Grid. FTP parents run as root • Dedicated user/group – DPM, DPNS, SRM daemons run as dpmmgr – Several directories/files belong to dpmmgr • Host certificate, key > ll /etc/grid-security/ | grep pem -rw-r--r-- 1 root 5430 May 28 22: 02 hostcert. pem -r---- 1 root 1675 May 28 22: 02 hostkey. pem > ll /etc/grid-security/dpmmgr/ | grep pem -rw-r--r-- 1 dpmmgr 5430 May 28 22: 02 dpmcert. pem -r---- 1 dpmmgr 1675 May 28 22: 02 dpmkey. pem INFSO-RI-508833 16
Obtained Configuration (2) Enabling Grids for E-scienc. E • Database connect – /opt/lcg/etc/NSCONFIG – /opt/lcg/etc/DPMCONFIG § <username>/<password>@<mysql_server> • Sysconfig files – /etc/sysconfig/<service_name> § Number of threads (only DPNS) • Daemons – service <service_name> {start|stop|status} – Important: services not restarted by RPM upgrade ! INFSO-RI-508833 17
How does it look ? Enabling Grids for E-scienc. E • DPM Pool export DPM_HOST=dpm 01. cern. ch dpm-qryconf Cleanup starts when 5% space left POOL Tutorial. Pool DEFSIZE 200. 00 M GC_START_THRESH 5 GC_STOP_THRESH 15 DEF_LIFETIME 7. 0 d DEFPINTIME 2. 0 h MAX_LIFETIME 1. 0 m MAXPINTIME 12. 0 h FSS_POLICY maxfreespace GC_POLICY lru RS_POLICY fifo GID 0 S_TYPE MIG_POLICY none RET_POLICY R Cleanup stops CAPACITY 52. 77 G FREE 43. 79 G ( 83. 0%) when dpm 01. cern. ch /data CAPACITY 17. 27 G FREE 14. 24 G ( 82. 4%) disk 01. cern. ch /storage CAPACITY 17. 75 G FREE 14. 78 G ( 83. 3%) 15% space left disk 01. cern. ch /data CAPACITY 17. 75 G FREE 14. 78 G ( 83. 3%) • Name Server Your domain export DPNS_HOST=dpm 01. cern. ch dpns-ls -l /dpm/cern. ch/home Supported VOs drwxrwxr-x 0 root 2689 0 May 22 14: 43 atlas drwxrwxr-x 2 root 2688 0 May 22 14: 53 dteam drwxrwxr-x 0 root 2690 0 May 22 14: 43 geant 4 Virtual gids drwxrwxr-x 0 root 2691 0 May 22 14: 43 lhcb INFSO-RI-508833 18
Test installation (examples) Enabling Grids for E-scienc. E • lcg_utils (from a UI) – If DPM not in site BDII yet § export LCG_GFAL_INFOSYS=dpm 01. cern. ch: 2135 § lcg-cr –v --vo dteam –d dpm 01. cern. ch file: /path/to/file – Otherwise § export LCG_GFAL_INFOSYS=my_bdii. cern. ch: 2170 § lcg-cr –v --vo dteam –d dpm 01. cern. ch file: /path/to/file • rfio (from a UI) § § § INFSO-RI-508833 export LCG_RFIO_TYPE=dpm export DPNS_HOST=dpm 01. cern. ch export DPM_HOST=dpm 01. cern. ch rfdir /dpm/cern. ch/home/my. VO rfcp /dpm/cern. ch/home/my. VO/myfile /tmp/myfile 19
Test installation (examples) Enabling Grids for E-scienc. E • srmcp (from a UI) – Works with DPM as source – Doesn’t work yet if DPM as target § /opt/d-cache/srm/bin/srmcp file: ////path/to/file srm: //dpm 01. cern. ch: 8443/dpm/cern. ch/home/dteam/my_dir/my_file SRM server • globus-url-copy (from a UI) § lcg-gt srm: //dpm 01. cern. ch/dpm/cern. ch/home/dteam/generated/2006 -0614/file 5 b 517 db 2 -30 dc-4 df 0 -9 ac 9 -0 e 30433 e 10 da gsiftp TURL returned: gsiftp: //disk 01. cern. ch: /data/dteam/2006 -06 -14/file 5 b 517 db 2 -30 dc-4 df 0 -9 ac 9 -0 e 30433 e 10 da. 1. 0 § globus-url-copy gsiftp: //disk 01. cern. ch: /data/dteam/2006 -0614/file 5 b 517 db 2 -30 dc-4 df 0 -9 ac 9 -0 e 30433 e 10 da. 1. 0 file: /path/to/file INFSO-RI-508833 20
DPM in a nutshell Enabling Grids for E-scienc. E • Description • Installation • DPM as a service – Administration – Monitoring • Troubleshooting • Documentation / support INFSO-RI-508833 21
Classic SE migration Enabling Grids for E-scienc. E • Why migrating your Classic SE ? – Users: § SRM support § Logical Namespace – Admins: § Manageable storage (easy to add/remove disk space) § Automatic garbage collection • Migrating to what ? – DPM § Only metadata operation (Name Server population) § No physical file move needed • Script to run. /migration classic. SE_hostname classic. SE_dir DPM_hostname DPM_dir DPM_pool • More details, see https: //twiki. cern. ch/twiki/bin/view/LCG/Classic. Se. To. Dpm INFSO-RI-508833 22
Admin Tasks (1) Enabling Grids for E-scienc. E • Modify configuration dpm-modifypool --poolname my. Pool --gc_start_thresh 5 --gc_stop_thresh 10 dpm-modifyfs --server disk 01. cern. ch --fs /data --st RDONLY • Add a disk server §. /install_node site-info. def glite-SE_dpm_disk §. /configure_node site-info. def glite-SE_dpm_disk § Add it to TRUST rules in DPM server /etc/shift. conf file • Remove a disk server § dpm-drain --server disk 02. cern. ch --fs /data § dpm-rmfs --server disk 02. cern. ch --fs /data § Remove it from TRUST rules in DPM server /etc/shift. conf file INFSO-RI-508833 23
Admin Tasks (2) Enabling Grids for E-scienc. E • Load balancing – DPM automatically round robins between file systems • Example – disk 01: 1 TB file system – disk 02: very fast, 5 TB file system – Solution 1: one file system per disk server § A file will be stored on either disk, equally, if space left – Solution 2: one file system on disk 01 two file systems on disk 02 § A file will more often end up on disk 02, which is what you want INFSO-RI-508833 24
Admin Tasks (3) Enabling Grids for E-scienc. E • dpm-replicate – Users and admins can do it – Useful if file often accessed dpm-replicate –s_type P /dpm/cern. ch/home/dteam/my_file • dpm-drain – Sets file system(s) to READ-ONLY – Replicates to another pool/file system § Permanent files § Note: pinned files are not moved Empty pool / file system can then be removed physically dpm-drain --poolname my. Pool dpm-drain --server disk 01. cern. ch --fs /data INFSO-RI-508833 25
Admin Tasks (4) Enabling Grids for E-scienc. E • Remove Name Server entries – Use rfrm (as user or root) § export DPNS_HOST=dpm 01. cern. ch § export DPM_HOST=dpm 01. cern. ch § rfrm /dpm/cern. ch/home/dteam/my_dir/my_file – Removes § Files on disk § Replicas and Logical Files Names in DPM Name Server INFSO-RI-508833 26
Dedicated Pools Enabling Grids for E-scienc. E • Dedicate a Pool to a given VO – By default, pool can be used by all supported groups/VOs – But, pool can be restricted to one given group: dpm-modifypool --poolname VOpool --def_filesize 200 M --gid VO_gid dpm-modifypool --poolname VOpool --def_filesize 200 M --group VO_group_name – Hard limit: § What to do if pool is full ? • Next release (proposal) – Possibility to dedicate a pool to several groups dpm-addpool --poolname pool. A --group alice, cms, lhcb dpm-addpool --poolname pool. B --group atlas – Add groups to existing list dpm-modifypool --poolname pool. B --group +dteam – Remove groups from existing list dpm-modifypool --poolname pool. A --group –cms – Reset list to new set of groups (= sign optional for backward compatibility) dpm-modifypool --poolname pool. A --group =dteam – Add group and remove another one dpm-modifypool --poolname pool. A --group +dteam, -lhcb INFSO-RI-508833 27
Space Reservation vs. Quota Enabling Grids for E-scienc. E • Static space reservation (admin) $ dpm-reservespace --gspace 20 G --lifetime Inf --group atlas --token_desc Atlas_ESD $ dpm-reservespace --gspace 100 M --lifetime 1 h --group dteam/Role=lcgadmin --token_desc Lcg. Ad $ dpm-updatespace --token_desc myspace --gspace 5 G $ dpm-releasespace --token_desc myspace • Dynamic space reservation (user) Released in DPM 1. 6. 3 – Defined by user on request § dpm-reservespace § srm. Reserve. Space – Limitation on duration and size of space reservation • Quotas Not implemented yet – Maximum space allowed per group/VO INFSO-RI-508833 28
Monitoring Enabling Grids for E-scienc. E • What to monitor ? – All processes running ? – All threads busy ? DPNS – All threads busy ? DPM § 20 threads for fast operations § 20 threads for slow operations (get, put, copy) § Note: there also Monitor separately • 1 garbage collector thread per disk pool defined • 1 thread that removes the expired put requests – RFIO/Grid. FTP § Too many transfers to the same file system ? – Number of requests (in dpm_db) per week/month ? • Grid. View – Monitoring tool for Grid. FTP transfers – On each disk server, enable Grid. View Not supported by YAIM yet § Edit /opt/lcg/etc/lcg-mon-gridftp. conf § Change: LOG_FILE = /var/log/dpm-gsiftp. log § Restart service: service lcg-mon-gridftp restart INFSO-RI-508833 29
DPM in a nutshell Enabling Grids for E-scienc. E • • • Description Installation DPM as a service Troubleshooting Documentation / support INFSO-RI-508833 30
Log Files Enabling Grids for E-scienc. E • DPM server § /var/log/dpm/log • DPM Name Server § /var/log/dpns/log • SRM servers § /var/log/srmv 1/log § /var/log/srmv 2. 2/log • RFIO server § /var/log/rfiod/log • DPM-enabled Grid. FTP § /var/log/dpm-gsiftp/gsiftp. log § /var/log/dpm-gsiftp. log INFSO-RI-508833 31
DPM log files Enabling Grids for E-scienc. E • Example: § /var/log/dpns/log Thread #0 Log Example 11/25 11: 19: 55 2050, 0 Cns_srv_listreplica: NS 092 - listreplica request by /C=IT/O=INFN/OU=Personal Certificate/L=Bari/CN=Nicola De Filippis/Email=Nicola. defilippis@ba. infn. it (42043, 2690) from t 2 -srm-01. lnl. infn. it 11/25 11: 19: 55 2050, 0 Cns_srv_listreplica: NS 098 - listreplica Virtual uid, gid /dpm/lnl. infn. it/home/cms/store/unmerged/mc/2006/11/9/mc-physval-111 Single. Mu. Plus-Pt 5 To 200/GEN-SIM-DIGI-RECO/30000/BC 8936 E 9 -C 678 -DB 11 AFE 6 -00096 BB 5 CC 34. root 11/25 11: 19: 55 2050, 3 Cns_srv_setratime: NS 092 - setratime request by /C=IT/O=INFN/OU=Personal Certificate/L=Bari/CN=Nicola De Thread #3 Filippis/Email=Nicola. defilippis@ba. infn. it (42043, 2690) from t 2 -srm-01. lnl. infn. it 11/25 11: 19: 55 2050, 0 Cns_srv_listreplica: returns 0 INFSO-RI-508833 32
LCG Security Requirement Enabling Grids for E-scienc. E • Rotated logs kept for 90 days § > ls –al /var/log/srmv 1/ total 27420 drwxr-xr-x 2 dpmmgr 4096 Jul 25 04: 02 . drwxr-xr-x 13 root 4096 Jul 25 00: 20 . . -rw-r--r-- 1 dpmmgr 906619 Jul 25 15: 42 log -rw-r--r-- 1 dpmmgr 3582741 Jul 25 04: 01 log. 1 -rw-r--r-- 1 dpmmgr 71944 Jul 16 04: 00 log. 10. gz -rw-r--r-- 1 dpmmgr 121344 Jul 15 04: 01 log. 11. gz -rw-r--r-- 1 dpmmgr 388301 Jul 14 04: 01 log. 12. gz … -rw-r--r-- 1 dpmmgr 140740 Jul 7 04: 00 log. 19. gz -rw-r--r-- 1 dpmmgr 32601 Jul 24 04: 01 log. 2. gz -rw-r--r-- 1 dpmmgr 92150 Jul 6 04: 01 log. 20. gz -rw-r--r-- 1 dpmmgr 77918 Jul 5 04: 01 log. 21. gz -rw-r--r-- 1 dpmmgr 15468 Jul 4 03: 59 log. 22. gz … INFSO-RI-508833 33
Typical problems Enabling Grids for E-scienc. E • Security – Host certifcate, key – CRLs • VOMS setup – On LFC & UI, /etc/grid-security/vomsdir contains VO VOMS server > ls -ld /etc/grid-security/vomsdir/ drwxr-xr-x 2 root 4096 Jun 8 15: 07 /etc/grid-security/vomsdir/ > ls /etc/grid-security/vomsdir cclcgvomsli 01. in 2 p 3. fr. 43 lcg-voms. cern. ch. 1265 – On the UI (client), /opt/glite/etc/vomses > ls /opt/glite/etc/vomses alice-lcg-voms. cern. ch alice-voms. cern. ch INFSO-RI-508833 34
Virtual uid, gid Enabling Grids for E-scienc. E • dpns-ls –l Virtual uid, gid > dpns-ls -l /dpm/cern. ch/home/dteam/subdirx -rwxr-xr-- 1 18964 2688 6647 Jul 18 10: 57 srmv 1_Tfile. txt. A 0 -rw-rw-r-- 1 18964 2688 129 Jul 18 10: 59 srmv 1_Tfile. txt. A 1 • dpns-getacl Actual DN, group > dpns-getacl /dpm/cern. ch/home/dteam/subdirx # file: /dpm/cern. ch/home/dteam/subdirx # owner: /C=CH/O=CERN/OU=GRID/CN=Martin Flechl 5835 # group: dteam user: : rwx group: : r-x #effective: r-x other: : r-x default: user: : rwx default: group: : rwx default: other: : r-x INFSO-RI-508833 35
User / group mapping Enabling Grids for E-scienc. E • User DN – Added automatically to Cns_userinfo, if it doesn’t exist Cns_userinfo UID Name 18964 /C=CH/O=CERN/OU=GRID/CN=Martin Flechl 5835 18967 /C=CH/O=CERN/OU=GRID/CN=Sophie Lemaitre 2268 • User group – grid-proxy-init or simple voms-proxy-init § Group taken from /opt/lcg/etc/lcgdm-mapfile "/C=CH/O=CERN/OU=GRID/CN=Simone Campana 7461 - ATLAS" atlas "/C=CH/O=CERN/OU=GRID/CN=Sophie Lemaitre 2268" dteam – voms-proxy-init –voms my. VO § Group taken from the VOMS FQAN § Added automatically, if doesn’t exist Cns_groupinfo GID Name dteam 2694 INFSO-RI-508833 2688 dteam/Role=lcgadmin 36
Authorization Problem ? Enabling Grids for E-scienc. E • Check user’s mapping: Which proxy ? grid-proxy-init / simple voms-proxy-init -voms lcgdm-mapfile OK ? User’s virtual uid, gid ? LFC log file INFSO-RI-508833 Cns_groupinfo Cns_userinfo 37
Secondary Groups (1/2) Enabling Grids for E-scienc. E • In next DPM release (>= 1. 6. 4) • VOMS groups / roles – A primary group – Secondary groups $ voms-proxy-init –voms dteam: /Role=lcgadmin $ voms-proxy-info -all subject : /C=CH/O=CERN/OU=GRID/CN=Sophie Lemaitre 5847/CN=proxy issuer : /C=CH/O=CERN/OU=GRID/CN=Sophie Lemaitre 5847 identity : /C=CH/O=CERN/OU=GRID/CN=Sophie Lemaitre 5847 type : proxy strength : 512 bits path : /tmp/x 509 up_u 5926 timeleft : 11: 59: 58 === VO dteam extension information === VO : dteam subject : /C=CH/O=CERN/OU=GRID/CN=Sophie Lemaitre 5847 issuer : /C=CH/O=CERN/OU=GRID/CN=host/lcg-voms. cern. ch attribute : /dteam/Role=lcgadmin/Capability=NULL Primary group (gid 1) attribute : /dteam/Role=NULL/Capability=NULL attribute : /dteam/cern/Role=NULL/Capability=NULL timeleft : 11: 59: 57 Secondary groups (gid 2, gid 3) INFSO-RI-508833 38
Secondary Groups (2/2) Enabling Grids for E-scienc. E • Name Server – Primary and secondary groups checked for permissions – All groups appear in the log 03/18 19: 10: 41 8421, 0 Cns_srv_opendir: NS 092 - opendir request by /C=CH/O=CERN/OU=GRID/CN=Sophie Lemaitre 5847 (101, 104, 101, 102) from lxplus 004. cern. ch • Spaces uid gids – Support secondary groups § i. e. all groups checked when using space tokens § Note: space tokens only used for “Put” not for “Get” • Pools – Don’t support secondary groups § If pool dedicated to a group (ex: dteam/Role=lcgadmin) § Primary group has to be dteam/Role=lcgadmin to write there INFSO-RI-508833 39
DPM in a nutshell Enabling Grids for E-scienc. E • • • Description Installation DPM as a service Troubleshooting Documentation / support INFSO-RI-508833 40
Other problems ? Enabling Grids for E-scienc. E • Main DPM documentation page – https: //twiki. cern. ch/twiki/bin/view/LCG/Data. Management. Top • DPM Admin Guide – https: //twiki. cern. ch/twiki/bin/view/LCG/Dpm. Admin. Guide • Troubleshooting page – https: //twiki. cern. ch/twiki/bin/view/LCG/Lfc. Troubleshooting INFSO-RI-508833 41
Still no clue ? Enabling Grids for E-scienc. E • Contact GGUS helpdesk@ggus. org – your ROC will help – If needed, DPM experts will help INFSO-RI-508833 42
Enabling Grids for E-scienc. E Questions ? helpdesk@ggus. org Sophie Lemaitre (Sophie. Lemaitre@cern. ch) Jean-Philippe Baud (Jean-Philippe. Baud@cern. ch) www. eu-egee. org INFSO-RI-508833
Example: SRM put processing (1) Enabling Grids for E-scienc. E INFSO-RI-508833 44
Example: SRM put processing (2) Enabling Grids for E-scienc. E INFSO-RI-508833 45
Example: SRM put processing (3) Enabling Grids for E-scienc. E INFSO-RI-508833 46
Example: SRM put processing (4) Enabling Grids for E-scienc. E INFSO-RI-508833 47
Example: SRM put processing (5) Enabling Grids for E-scienc. E INFSO-RI-508833 48
Example: SRM put processing (6) Enabling Grids for E-scienc. E INFSO-RI-508833 49
Скачать презентацию Enabling Grids for E-scienc E DPM administration tutorial
48f4f151762252c12eb26d383e82f476.ppt