Quality Criteria Verification Report ==================================== Product: myproxy Release: globus.myproxy.sl6.x86_64-6.1.18 Software Provider: Globus RT Ticket: 11245 Provider contact: mattias.ellert@fysast.uu.se Verifier: Pablo Orviz Hours worked: 30min Date: 19/07/2016 Status: Accepted Summary ======= - Configuration performed using a simple script: https://github.com/egi-qc/umd-verification/blob/master/bin/myproxy/configure.sh - No test performed. Related tickets =============== None. Documentation Criteria ====================== * Release notes: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-3b4c78d854 * User Documentation: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-3b4c78d854 * API Documentation: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-3b4c78d854 * Admin Documentation: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2016-3b4c78d854 * Software License: Apache 2.0 Generic Criteria ================ (Possible Statuses: OK, WARN, FAIL, NA (Not Applicable) or NT (Not Tested)) * Binary Distribution: OK * Upgrade: OK * X.509 Certificate support: OK * SHA-2 Certificates Support: OK * RFC Proxy support: OK * ARGUS Integration: NA * World Writable Files: OK * Passwords in world readable files: OK * GlueSchema 1.3 Support: NT * GlueSchema 2.0 Support: NT * Middleware Version Information: NT * Service Probes: NT * Accounting Records: OK * Bug Tracking System: OK Verification Logs ================= [INFO] Using UMD 4 release repository [INFO] Using UMD verification repository: ['http://admin-repo.egi.eu/sw/unverified/umd-4.globus.myproxy.sl6.x86_64/6/1/18'] [WARN] No installation type provided: performing installation. [INFO] Metapackage/s selected: + myproxy + myproxy-server UMD verification tool ===================== Quality criteria: http://egi-qc.github.io Codebase: https://github.com/egi-qc/umd-verification Path locations | | log_path logs | yaim_path etc/yaim | puppet_path etc/puppet Production repositories | | umd_release_pkg http://repository.egi.eu/sw/production/umd/4/sl6/x86_64/updates/umd-release-4.0.0-1.el6.noarch.rpm | igtf_repo http://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo | epel_release http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm [INFO] Using the following UMD verification repositories + http://admin-repo.egi.eu/sw/unverified/umd-4.globus.myproxy.sl6.x86_64/6/1/18 [localhost] local: sudo -E wget http://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo -O /etc/yum.repos.d/EGI-trustanchors.repo [INFO] Repository 'http://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo' added [localhost] local: sudo -E yum clean all [localhost] local: sudo -E yum -y makecache fast [localhost] local: sudo -E yum -y install ca-policy-egi-core [INFO] Generating own certificates [localhost] local: sudo -E mkdir -p /root/UMDVerificationOwnCA [localhost] local: sudo -E openssl req -x509 -nodes -days 1 -newkey rsa:2048 -out ca.pem -outform PEM -keyout ca.key -subj '/DC=es/DC=UMDverification/CN=UMDVerificationOwnCA' [localhost] local: sudo -E openssl x509 -noout -hash -in ca.pem [localhost] local: sudo -E cp ca.pem /etc/grid-security/certificates/0d2a3bdd.0 [localhost] local: sudo -E echo "01" > crlnumber [localhost] local: sudo -E touch index.txt [localhost] local: sudo -E openssl ca -config openssl.cnf -gencrl -keyfile ca.key -cert ca.pem -out crl.pem [localhost] local: sudo -E cp crl.pem /etc/grid-security/certificates/0d2a3bdd.r0 [localhost] local: sudo -E openssl req -newkey rsa:2048 -nodes -sha1 -keyout cert.key -keyform PEM -out cert.req -outform PEM -subj '/DC=es/DC=UMDverification/CN=26d4482a87b1' -config openssl.cnf [localhost] local: sudo -E openssl x509 -req -in cert.req -CA ca.pem -CAkey ca.key -CAcreateserial -extensions v3_req -extfile openssl.cnf -out cert.crt -days 1 [localhost] local: sudo -E chmod 600 cert.key [localhost] local: sudo -E cp cert.key /etc/grid-security/hostkey.pem [INFO] Private key stored in '/etc/grid-security/hostkey.pem' (with 600 perms). [localhost] local: sudo -E cp cert.crt /etc/grid-security/hostcert.pem [INFO] Public key stored in '/etc/grid-security/hostcert.pem'. [[QC_DIST_1: Binary Distribution]] [localhost] local: sudo -E yum -y remove epel-release* umd-release* [localhost] local: sudo -E /bin/rm -f /etc/yum.repos.d//epel-* /etc/yum.repos.d//UMD-* [localhost] local: sudo -E rpm --import http://repository.egi.eu/sw/production/umd/UMD-RPM-PGP-KEY [INFO] Repository key added: http://repository.egi.eu/sw/production/umd/UMD-RPM-PGP-KEY [localhost] local: sudo -E wget http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm -O /tmp/epel-release-6-8.noarch.rpm [INFO] Log directory 'logs' has been created. [INFO] EPEL release package fetched from http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm [localhost] local: sudo -E yum -y install /tmp/epel-release-6-8.noarch.rpm [INFO] EPEL release package installed. [localhost] local: sudo -E wget http://repository.egi.eu/sw/production/umd/4/sl6/x86_64/updates/umd-release-4.0.0-1.el6.noarch.rpm -O /tmp/umd-release-4.0.0-1.el6.noarch.rpm [INFO] UMD release package fetched from http://repository.egi.eu/sw/production/umd/4/sl6/x86_64/updates/umd-release-4.0.0-1.el6.noarch.rpm [localhost] local: sudo -E yum -y install /tmp/umd-release-4.0.0-1.el6.noarch.rpm [INFO] UMD release package installed. [localhost] local: sudo -E yum -y install yum-priorities [INFO] 'yum-priorities' requirement installed. [localhost] local: sudo -E yum -y install yum-conf-sl6x [INFO] 'yum-conf-sl6x' requirement installed. [localhost] local: sudo -E grep UMD-4-base /etc/yum.repos.d//* | cut -d':' -f1|uniq [localhost] local: sudo -E sed -i 's/enabled.*=.*1/enabled=0/g' /etc/yum.repos.d//UMD-4-base.repo [INFO] Repository 'UMD-4-base' disabled [localhost] local: sudo -E rm -rf /tmp/repofiles/* [localhost] local: sudo -E wget -P /tmp/repofiles -r --no-parent -R*.html* http://admin-repo.egi.eu/sw/unverified/umd-4.globus.myproxy.sl6.x86_64/6/1/18 [FAIL] Could not fetch repository 'http://admin-repo.egi.eu/sw/unverified/umd-4.globus.myproxy.sl6.x86_64/6/1/18' See more information in logs (qc_inst_1.stderr). [INFO] Verification repository 'GLOBUS.myproxy.sl6.x86_64.repo' enabled. [localhost] local: sudo -E yum clean all [localhost] local: sudo -E yum -y makecache fast [localhost] local: sudo -E yum repolist [INFO] Using repositories: ['EGI-trustanchors', 'GLOBUS.myproxy.sl6.x86_64 GLOBUS.myproxy.sl6.x86_64', 'PUIAS_6_computational', 'UMD-4-updates', 'epel', 'sl', 'sl-security', 'sl6x', 'sl6x-security'] [localhost] local: sudo -E yum -y install myproxy myproxy-server [localhost] local: sudo -E rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/unverified/umd-4.globus.myproxy.sl6.x86_64/6/1/18/myproxy-devel-6.1.18-1.el6.i686.rpm [localhost] local: sudo -E rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/unverified/umd-4.globus.myproxy.sl6.x86_64/6/1/18/myproxy-libs-6.1.18-1.el6.x86_64.rpm [localhost] local: sudo -E rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/unverified/umd-4.globus.myproxy.sl6.x86_64/6/1/18/myproxy-libs-6.1.18-1.el6.i686.rpm [localhost] local: sudo -E rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/unverified/umd-4.globus.myproxy.sl6.x86_64/6/1/18/myproxy-admin-6.1.18-1.el6.x86_64.rpm [localhost] local: sudo -E rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/unverified/umd-4.globus.myproxy.sl6.x86_64/6/1/18/myproxy-server-6.1.18-1.el6.x86_64.rpm [localhost] local: sudo -E rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/unverified/umd-4.globus.myproxy.sl6.x86_64/6/1/18/myproxy-voms-6.1.18-1.el6.x86_64.rpm [localhost] local: sudo -E rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/unverified/umd-4.globus.myproxy.sl6.x86_64/6/1/18/myproxy-devel-6.1.18-1.el6.x86_64.rpm [localhost] local: sudo -E rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/unverified/umd-4.globus.myproxy.sl6.x86_64/6/1/18/myproxy-6.1.18-1.el6.x86_64.rpm [localhost] local: sudo -E rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/unverified/umd-4.globus.myproxy.sl6.x86_64/6/1/18/myproxy-doc-6.1.18-1.el6.noarch.rpm [localhost] local: sudo -E rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' myproxy-devel [INFO] 'myproxy-devel' not installed [localhost] local: sudo -E rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' myproxy-server [INFO] 'myproxy-server' installed version: '6.1.18-1.el6.x86_64' [localhost] local: sudo -E rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' myproxy-admin [INFO] 'myproxy-admin' not installed [localhost] local: sudo -E rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' myproxy [INFO] 'myproxy' installed version: '6.1.18-1.el6.x86_64' [localhost] local: sudo -E rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' myproxy-voms [INFO] 'myproxy-voms' not installed [localhost] local: sudo -E rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' myproxy-libs [INFO] 'myproxy-libs' installed version: '6.1.18-1.el6.x86_64' [localhost] local: sudo -E rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' myproxy-doc [INFO] 'myproxy-doc' not installed [localhost] local: sudo -E yum -q list globus-common globus-usage globus-gsi-credential globus-gss-assist globus-gsi-sysconfig globus-proxy-utils myproxy-server globus-callout globus-gsi-cert-utils globus-gsi-proxy-ssl myproxy globus-gsi-openssl-error myproxy-libs libtool-ltdl globus-gsi-callback globus-gsi-proxy-core globus-xio globus-openssl-module globus-gssapi-gsi [INFO] Metapackage 'myproxy' installed version: myproxy-6.1.18-1.el6.x86_64 - @GLOBUS.myproxy.sl6.x86_64 [INFO] Metapackage 'myproxy-server' installed version: myproxy-server-6.1.18-1.el6.x86_64 - @GLOBUS.myproxy.sl6.x86_64 [OK] Installation ended successfully. [[QC_SEC_2: SHA-2 Certificates Support]] [localhost] local: sudo -E yum -y install fetch-crl [localhost] local: sudo -E ./bin/myproxy/configure.sh [OK] Product services can manage SHA-2 certs. [[QC_SEC_5: World Writable Files]] [localhost] local: sudo -E find / -not \( -path "/proc" -prune \) -not \( -path "/sys" -prune \) -type f -perm -002 -exec ls -l {} \; [OK] Found no world-writable file. [localhost] local: sudo -E yum -y install glue-validator [[QC_INFO_1: GlueSchema 1.3 Support]] [NA] Product does not publish information through BDII. [[QC_INFO_2: GlueSchema 2.0 Support]] [NA] Product does not publish information through BDII. [[QC_INFO_3: Middleware Version Information]] [NA] Product does not publish information through BDII. [[QC_MON_1: Service Probes]] [NA] Product cannot be tested by Nagios. [INFO] No QC-specific ID provided: no specific QC probes will be ran.