┌ UMD verification app ─────────────────────────────────────────────────┐ │ │ │ Quality criteria: http://egi-qc.github.io │ │ Codebase: https://github.com/egi-qc/umd-verification │ │ │ │ ─────────────────────────────────────────────────────────────────┘ │ │ Verification repositories used: │ https://admin-repo.egi.eu/sw/unverified/umd-4.arc.arc.centos7.x86_64/15/03/4/ │ https://admin-repo.egi.eu/sw/umdstore/umd-4.bdii.top-bdii.centos7.x86_64/1/1/4/ │ │ Repository basic configuration: │ umd_release │ igtf_repo http://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo │ epel_release http://mirror.uv.es/mirror/fedora-epel//epel-release-latest-7.noarch.rpm │ │ Path locations: │ log_path /var/tmp/umd-verification │ yaim_path etc/yaim │ puppet_path etc/puppet │ └──────────────────────────────────────────────────────────────────────── [WARN] No installation type provided: performing installation. [INFO] Metapackage/s selected: + nordugrid-arc-compute-element + torque-server + torque-mom ───────────────────────────────────────────────────────────────────────── [localhost] local: wget http://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo -O /etc/yum.repos.d/EGI-trustanchors.repo [localhost] local: yum -y makecache [localhost] local: yum -y install ca-policy-egi-core Certificate already exists under '/etc/grid-security'. Do you want to overwrite them? (y/N) y [INFO] Overwriting already existant certificate [INFO] Generating own certificates [localhost] local: mkdir -p /root/UMDVerificationOwnCA [localhost] local: openssl req -x509 -nodes -days 1 -newkey rsa:2048 -out ca.pem -outform PEM -keyout ca.key -subj '/DC=es/DC=UMDverification/CN=UMDVerificationOwnCA' [localhost] local: openssl x509 -noout -hash -in ca.pem [localhost] local: cp ca.pem /etc/grid-security/certificates/0d2a3bdd.0 [localhost] local: echo "01" > crlnumber [localhost] local: touch index.txt [localhost] local: openssl ca -config openssl.cnf -gencrl -keyfile ca.key -cert ca.pem -out crl.pem [localhost] local: cp crl.pem /etc/grid-security/certificates/0d2a3bdd.r0 [localhost] local: openssl req -newkey rsa:2048 -nodes -sha1 -keyout cert.key -keyform PEM -out cert.req -outform PEM -subj '/DC=es/DC=UMDverification/CN=verification.egi.cesga.es' [localhost] local: openssl x509 -req -in cert.req -CA ca.pem -CAkey ca.key -CAcreateserial -out cert.crt -days 1 [localhost] local: chmod 600 cert.key [localhost] local: cp cert.key /etc/grid-security/hostkey.pem [INFO] Private key stored in '/etc/grid-security/hostkey.pem' (with 600 perms). [localhost] local: cp cert.crt /etc/grid-security/hostcert.pem [INFO] Public key stored in '/etc/grid-security/hostcert.pem'. [[QC_DIST_1: Binary Distribution]] [localhost] local: yum -y remove umd-release* [localhost] local: /bin/rm -f /etc/yum.repos.d//UMD-* [localhost] local: rm -rf /tmp/repofiles/* [localhost] local: sed -i 's/^sslverify.*/sslverify=False/g' /etc/yum.conf [localhost] local: wget -P /tmp/repofiles -r --no-parent -R*.html* https://admin-repo.egi.eu/sw/unverified/umd-4.arc.arc.centos7.x86_64/15/03/4/ --no-check-certificate [INFO] Log directory '/var/tmp/umd-verification' has been created. [FAIL] Could not fetch repository 'https://admin-repo.egi.eu/sw/unverified/umd-4.arc.arc.centos7.x86_64/15/03/4/' See more information in logs (qc_inst_1.stderr). [INFO] Verification repository 'ARC.arc.centos7.x86_64.repo' enabled. [localhost] local: rm -rf /tmp/repofiles/* [localhost] local: sed -i 's/^sslverify.*/sslverify=False/g' /etc/yum.conf [localhost] local: wget -P /tmp/repofiles -r --no-parent -R*.html* https://admin-repo.egi.eu/sw/umdstore/umd-4.bdii.top-bdii.centos7.x86_64/1/1/4/ --no-check-certificate [FAIL] Could not fetch repository 'https://admin-repo.egi.eu/sw/umdstore/umd-4.bdii.top-bdii.centos7.x86_64/1/1/4/' See more information in logs (qc_inst_1.stderr). [INFO] Verification repository 'BDII.top-bdii.centos7.x86_64.repo' enabled. [localhost] local: yum -y makecache [localhost] local: yum repolist [INFO] Using repositories: ['ARC.arc.centos7.x86_64', 'BDII.top-bdii.centos7.x86_64 BDII.top-bdii.centos7.x86_64', 'EGI-trustanchors', 'base/7/x86_64', 'carepo', 'epel/x86_64', 'extras/7/x86_64', 'nordugrid/x86_64', 'nordugrid-testing/x86_64', 'nordugrid-updates/x86_64', 'updates/7/x86_64'] [localhost] local: yum -y install nordugrid-arc-compute-element torque-server torque-mom [INFO] No new package installed. [localhost] local: rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/umdstore/umd-4.bdii.top-bdii.centos7.x86_64/1/1/4/bdii-5.2.23-1.el7.noarch.rpm [localhost] local: rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/umdstore/umd-4.bdii.top-bdii.centos7.x86_64/1/1/4/bdii-config-top-1.0.10-1.el7.cern.noarch.rpm [localhost] local: rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/umdstore/umd-4.bdii.top-bdii.centos7.x86_64/1/1/4/emi-bdii-top-1.0.3-2.el7.cern.noarch.rpm [localhost] local: rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/umdstore/umd-4.bdii.top-bdii.centos7.x86_64/1/1/4/emi-resource-information-service-1.0.4-1.el7.cern.noarch.rpm [localhost] local: rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/umdstore/umd-4.bdii.top-bdii.centos7.x86_64/1/1/4/glite-info-plugin-delayed-delete-status-1.0.1-1.el7.cern.noarch.rpm [localhost] local: rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/umdstore/umd-4.bdii.top-bdii.centos7.x86_64/1/1/4/glite-info-provider-ldap-1.4.8-1.el7.cern.noarch.rpm [localhost] local: rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/umdstore/umd-4.bdii.top-bdii.centos7.x86_64/1/1/4/glite-info-provider-service-1.13.4-1.el7.cern.noarch.rpm [localhost] local: rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/umdstore/umd-4.bdii.top-bdii.centos7.x86_64/1/1/4/glite-info-update-endpoints-2.0.13-1.el7.cern.noarch.rpm [localhost] local: rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/umdstore/umd-4.bdii.top-bdii.centos7.x86_64/1/1/4/glite-yaim-bdii-4.3.15-1.el7.cern.noarch.rpm [localhost] local: rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/umdstore/umd-4.bdii.top-bdii.centos7.x86_64/1/1/4/glue-schema-2.0.11-1.el7.cern.noarch.rpm [localhost] local: rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/umdstore/umd-4.bdii.top-bdii.centos7.x86_64/1/1/4/glue-validator-2.0.25-0.el7.cern.noarch.rpm [localhost] local: rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' bdii [INFO] 'bdii' installed version: '5.2.23-1.el7.noarch' [localhost] local: rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' glite-info-update-endpoints [INFO] 'glite-info-update-endpoints' not installed [localhost] local: rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' bdii-config-top [INFO] 'bdii-config-top' not installed [localhost] local: rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' glue-schema [INFO] 'glue-schema' installed version: '2.0.11-1.el7.noarch' [localhost] local: rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' glite-info-provider-service [INFO] 'glite-info-provider-service' not installed [localhost] local: rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' emi-bdii-top [INFO] 'emi-bdii-top' not installed [localhost] local: rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' glite-info-provider-ldap [INFO] 'glite-info-provider-ldap' not installed [localhost] local: rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' glite-yaim-bdii [INFO] 'glite-yaim-bdii' not installed [localhost] local: rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' glite-info-plugin-delayed-delete-status [INFO] 'glite-info-plugin-delayed-delete-status' not installed [localhost] local: rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' glue-validator [INFO] 'glue-validator' not installed [localhost] local: rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' emi-resource-information-service [INFO] 'emi-resource-information-service' not installed [INFO] Metapackage 'nordugrid-arc-compute-element' installed version: nordugrid-arc-compute-element-1.0.7-1.el7.centos.noarch (already installed). [INFO] Metapackage 'torque-server' installed version: torque-server-4.2.10-5.el7.x86_64 (already installed). [INFO] Metapackage 'torque-mom' installed version: torque-mom-4.2.10-5.el7.x86_64 (already installed). [OK] Installation ended successfully. [[QC_SEC_2: SHA-2 Certificates Support]] [localhost] local: yum -y install puppet [localhost] local: facter -p puppetversion [localhost] local: puppet module install puppetlabs-firewall [localhost] local: puppet module install puppetlabs-stdlib [localhost] local: puppet module install puppetlabs-concat [localhost] local: puppet module install CERNOps-fetchcrl [localhost] local: wget https://github.com/HEP-Puppet/arc_ce/archive/master.tar.gz -O /tmp/master.tar.gz [localhost] local: puppet module install /tmp/master.tar.gz [localhost] local: cp etc/puppet/arc.yaml /etc/puppet/hieradata/ [localhost] local: cp etc/puppet/bdii.yaml /etc/puppet/hieradata/ [localhost] local: puppet config print modulepath [localhost] local: puppet apply -l /var/tmp/umd-verification/puppet.log --modulepath /etc/puppet/modules:/usr/share/puppet/modules etc/puppet/arc.pp --detail-exitcodes [INFO] Puppet execution ended successfully (some warnings though, check logs) [localhost] local: hiera -c /etc/puppet/hiera.yaml 'scratchdir' [localhost] local: hiera -c /etc/puppet/hiera.yaml 'sessiondir' [localhost] local: useradd -m umd [localhost] local: chown root:umd ["/var/spool/arc/grid00"] [localhost] local: mkdir /scratch [localhost] local: chmod 777 /scratch [localhost] local: sed -i '/arex_mount_point/s/#//g' /etc/arc.conf [localhost] local: sed -i '/^sessiondir=.*/a scratchdir="/scratch"' /etc/arc.conf [localhost] local: sed -i 's/^defaultmemory=.*/defaultmemory="512"/g' /etc/arc.conf [localhost] local: sed -i 's/\(^.*#authplugin.*$\)/#/' /etc/arc.conf [localhost] local: /etc/init.d/a-rex restart [localhost] local: hostname -f [localhost] local: sed -i 's/^pbs .*\/tcp/pbs_server 15001\/tcp/g' /etc/services [localhost] local: sed -i 's/^pbs .*\/udp/pbs_server 15001\/udp/g' /etc/services [localhost] local: echo verification.egi.cesga.es > /etc/torque/server_name [localhost] local: echo "verification.egi.cesga.es np=1" > /var/lib/torque/server_priv/nodes [localhost] local: sed -i 's/localhost/verification.egi.cesga.es/g' /var/spool/maui/maui.cfg [localhost] local: echo "\$pbsserver verification.egi.cesga.es" > /var/lib/torque/mom_priv/config [localhost] local: /etc/init.d/trqauthd restart [localhost] local: /etc/init.d/pbs_server stop [localhost] local: /etc/init.d/pbs_server start [localhost] local: create-munge-key -f [localhost] local: /etc/init.d/munge restart [localhost] local: /etc/init.d/maui stop ; /etc/init.d/maui start [localhost] local: /etc/init.d/pbs_mom stop ; /etc/init.d/pbs_mom start [localhost] local: qmgr -c "set server acl_hosts = verification.egi.cesga.es" [localhost] local: qmgr -c "set server scheduling=true" [localhost] local: qmgr -c "create queue batch queue_type=execution" [localhost] local: qmgr -c "set queue batch started=true" [localhost] local: qmgr -c "set queue batch enabled=true" [localhost] local: qmgr -c "set queue batch resources_default.nodes=1" [localhost] local: qmgr -c "set queue batch resources_default.walltime=3600" [localhost] local: qmgr -c "set queue batch max_running = 1" [localhost] local: qmgr -c "set server default_queue=batch" [localhost] local: /etc/init.d/pbs_server stop [localhost] local: /etc/init.d/pbs_server start [OK] Product services can manage SHA-2 certs. [[QC_SEC_5: World Writable Files]] [localhost] local: find / -not \( -path "/proc" -prune \) -not \( -path "/sys" -prune \) -type f -perm -002 -exec ls -l {} \; [OK] Found no world-writable file. [localhost] local: yum -y install glue-validator [[QC_INFO_1: GlueSchema 1.3 Support]] [localhost] local: glue-validator -H localhost -p 2135 -b mds-vo-name=resource,o=grid -g glue1 -s general -v 3 [WARN] Found 3 warnings while validating GlueSchema v1.3 support [[QC_INFO_2: GlueSchema 2.0 Support]] [localhost] local: glue-validator -H localhost -p 2135 -b GLUE2GroupID=resource,o=glue -g glue2 -s general -v 3 [WARN] Found 64 warnings while validating GlueSchema v2.0 support [[QC_INFO_3: Middleware Version Information]] [WARN] No middleware version found for DN: GLUE2EndpointID=urn:ogf:Endpoint:verification.egi.cesga.es:ldapng:2135,GLUE2ServiceID=urn:ogf:ComputingService:verification.egi.cesga.es:arex,GLUE2GroupID=services,o=glue [[QC_MON_1: Service Probes]] [NA] Product cannot be tested by Nagios. [localhost] local: yum -y install myproxy nordugrid-arc-client [[QC_FUNC_1: Basic Funcionality Test.]] [INFO] Probe 'Retrieve myproxy for ops.vo.ibergrid.eu VO.' [localhost] local: su umd -c "./bin/myproxy/client-test.sh retrieve" 2>&1 [INFO] Probe 'Check job submission.' [localhost] local: su umd -c "./bin/arc/client-test.sh " 2>&1 [FAIL] Probes '['su umd -c "./bin/myproxy/client-test.sh retrieve"', 'su umd -c "./bin/arc/client-test.sh "']' failed to run. [[QC_FUNC_2: New features/bug fixes testing.]] [NA] No definition found for QC_FUNC_2.