Quality Criteria Verification Report ==================================== Product: gridsite Release: gridsite.centos7.x86_64-2.3.2 Software Provider: CESNET RT Ticket: 11514 Provider contact: sustr4@cesnet.cz< Verifier: Pablo Orviz Hours worked: 2h Date: 08/09/2016 Status: Accepted Summary ======= - Product deployed using a custom configuration script [1] - Read test using GACL. [1] https://github.com/egi-qc/umd-verification/blob/master/bin/gridsite/configure.sh Related tickets =============== None. Documentation Criteria ====================== * Release notes: https://github.com/CESNET/gridsite/wiki/Gridsite-release-page#GridSite_2321 * User Documentation: https://github.com/CESNET/gridsite/wiki/Gridsite-release-page#GridSite_2321 * API Documentation: https://github.com/CESNET/gridsite/wiki/Gridsite-release-page#GridSite_2321 * Admin Documentation: https://github.com/CESNET/gridsite/wiki/Gridsite-release-page#GridSite_2321 * Software License: Apache 2.0 Generic Criteria ================ (Possible Statuses: OK, WARN, FAIL, NA (Not Applicable) or NT (Not Tested)) * Binary Distribution: OK * Upgrade: OK * X.509 Certificate support: OK * SHA-2 Certificates Support: OK * RFC Proxy support: OK * ARGUS Integration: NT * World Writable Files: Ok * Passwords in world readable files: OK * GlueSchema 1.3 Support: NA * GlueSchema 2.0 Support: NA * Middleware Version Information: NA * Service Probes: OK * Accounting Records: NA * Bug Tracking System: OK Verification Logs ================= # fab gridsite:umd_release=4,repository_url=http://admin-repo.egi.eu/sw/unverified/umd-4.cesnet.gridsite.centos7.x86_64/2/3/2 [INFO] Using UMD 4 release repository [INFO] Using UMD verification repository: ['http://admin-repo.egi.eu/sw/unverified/umd-4.cesnet.gridsite.centos7.x86_64/2/3/2'] [WARN] No installation type provided: performing installation. [INFO] Metapackage/s selected: + gridsite + gridsite-clients + gridsite-devel + gridsite-doc + gridsite-libs + gridsite1.7-compat UMD verification tool ===================== Quality criteria: http://egi-qc.github.io Codebase: https://github.com/egi-qc/umd-verification Path locations | | log_path /var/tmp/umd-verification | yaim_path etc/yaim | puppet_path etc/puppet Production repositories | | umd_release_pkg http://repository.egi.eu/sw/production/umd/4/centos7/x86_64/base/umd-release-4.0.0-1.el7.noarch.rpm | igtf_repo http://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo | epel_release http://mirror.uv.es/mirror/fedora-epel//epel-release-latest-7.noarch.rpm [INFO] Using the following UMD verification repositories + http://admin-repo.egi.eu/sw/unverified/umd-4.cesnet.gridsite.centos7.x86_64/2/3/2 [localhost] local: sudo -E wget http://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo -O /etc/yum.repos.d/EGI-trustanchors.repo [INFO] Repository 'http://repository.egi.eu/sw/production/cas/1/current/repo-files/EGI-trustanchors.repo' added [localhost] local: sudo -E yum clean all [localhost] local: sudo -E yum -y makecache fast [localhost] local: sudo -E yum -y install ca-policy-egi-core Certificate already exists under '/etc/grid-security'. Do you want to overwrite them? (y/N) y [INFO] Overwriting already existant certificate [INFO] Generating own certificates [localhost] local: sudo -E mkdir -p /root/UMDVerificationOwnCA [localhost] local: sudo -E openssl req -x509 -nodes -days 1 -newkey rsa:2048 -out ca.pem -outform PEM -keyout ca.key -subj '/DC=es/DC=UMDverification/CN=UMDVerificationOwnCA' [localhost] local: sudo -E openssl x509 -noout -hash -in ca.pem [localhost] local: sudo -E cp ca.pem /etc/grid-security/certificates/0d2a3bdd.0 [localhost] local: sudo -E echo "01" > crlnumber [localhost] local: sudo -E touch index.txt [localhost] local: sudo -E openssl ca -config openssl.cnf -gencrl -keyfile ca.key -cert ca.pem -out crl.pem [localhost] local: sudo -E cp crl.pem /etc/grid-security/certificates/0d2a3bdd.r0 [localhost] local: sudo -E openssl req -newkey rsa:2048 -nodes -sha1 -keyout cert.key -keyform PEM -out cert.req -outform PEM -subj '/DC=es/DC=UMDverification/CN=648372ffc656' -config openssl.cnf [localhost] local: sudo -E openssl x509 -req -in cert.req -CA ca.pem -CAkey ca.key -CAcreateserial -extensions v3_req -extfile openssl.cnf -out cert.crt -days 1 [localhost] local: sudo -E chmod 600 cert.key [localhost] local: sudo -E cp cert.key /etc/grid-security/hostkey.pem [INFO] Private key stored in '/etc/grid-security/hostkey.pem' (with 600 perms). [localhost] local: sudo -E cp cert.crt /etc/grid-security/hostcert.pem [INFO] Public key stored in '/etc/grid-security/hostcert.pem'. [[QC_DIST_1: Binary Distribution]] [localhost] local: sudo -E yum -y remove umd-release* [localhost] local: sudo -E /bin/rm -f /etc/yum.repos.d//UMD-* [localhost] local: sudo -E rpm --import http://repository.egi.eu/sw/production/umd/UMD-RPM-PGP-KEY [INFO] Repository key added: http://repository.egi.eu/sw/production/umd/UMD-RPM-PGP-KEY [localhost] local: sudo -E wget http://repository.egi.eu/sw/production/umd/4/centos7/x86_64/base/umd-release-4.0.0-1.el7.noarch.rpm -O /tmp/umd-release-4.0.0-1.el7.noarch.rpm [INFO] Log directory '/var/tmp/umd-verification' has been created. [INFO] UMD release package fetched from http://repository.egi.eu/sw/production/umd/4/centos7/x86_64/base/umd-release-4.0.0-1.el7.noarch.rpm [localhost] local: sudo -E yum -y install /tmp/umd-release-4.0.0-1.el7.noarch.rpm [INFO] UMD release package installed. [localhost] local: sudo -E rm -rf /tmp/repofiles/* [localhost] local: sudo -E wget -P /tmp/repofiles -r --no-parent -R*.html* http://admin-repo.egi.eu/sw/unverified/umd-4.cesnet.gridsite.centos7.x86_64/2/3/2 [FAIL] Could not fetch repository 'http://admin-repo.egi.eu/sw/unverified/umd-4.cesnet.gridsite.centos7.x86_64/2/3/2' See more information in logs (qc_inst_1.stderr). [INFO] Verification repository 'CESNET.gridsite.centos7.x86_64.repo' enabled. [localhost] local: sudo -E yum clean all [localhost] local: sudo -E yum -y makecache fast [localhost] local: sudo -E yum repolist [INFO] Using repositories: ['CESNET.gridsite.centos7.x86_64 CESNET.gridsite.centos7.x86_64', 'EGI-trustanchors', 'UMD-4-base/x86_64', 'UMD-4-updates/x86_64', 'base/7/x86_64', 'epel/x86_64', 'extras/7/x86_64', 'updates/7/x86_64'] [localhost] local: sudo -E yum -y install gridsite gridsite-clients gridsite-devel gridsite-doc gridsite-libs gridsite1.7-compat [INFO] No new package installed. [localhost] local: sudo -E rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/unverified/umd-4.cesnet.gridsite.centos7.x86_64/2/3/2/gridsite-libs-2.3.2-1.el7.centos.x86_64.rpm [localhost] local: sudo -E rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/unverified/umd-4.cesnet.gridsite.centos7.x86_64/2/3/2/gridsite-2.3.2-1.el7.centos.x86_64.rpm [localhost] local: sudo -E rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/unverified/umd-4.cesnet.gridsite.centos7.x86_64/2/3/2/gridsite-debuginfo-2.3.2-1.el7.centos.x86_64.rpm [localhost] local: sudo -E rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/unverified/umd-4.cesnet.gridsite.centos7.x86_64/2/3/2/gridsite-commands-2.3.2-1.el7.centos.x86_64.rpm [localhost] local: sudo -E rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/unverified/umd-4.cesnet.gridsite.centos7.x86_64/2/3/2/gridsite-devel-2.3.2-1.el7.centos.x86_64.rpm [localhost] local: sudo -E rpm -qp --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' /tmp/repofiles/admin-repo.egi.eu/sw/unverified/umd-4.cesnet.gridsite.centos7.x86_64/2/3/2/gridsite-service-clients-2.3.2-1.el7.centos.x86_64.rpm [localhost] local: sudo -E rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' gridsite-commands [INFO] 'gridsite-commands' not installed [localhost] local: sudo -E rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' gridsite-devel [INFO] 'gridsite-devel' installed version: '2.3.2-1.el7.centos.x86_64' [localhost] local: sudo -E rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' gridsite-libs [INFO] 'gridsite-libs' installed version: '2.3.2-1.el7.centos.x86_64' [localhost] local: sudo -E rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' gridsite-service-clients [INFO] 'gridsite-service-clients' not installed [localhost] local: sudo -E rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' gridsite [INFO] 'gridsite' installed version: '2.3.2-1.el7.centos.x86_64' [localhost] local: sudo -E rpm -q --queryformat '%{NAME} %{VERSION}-%{RELEASE}.%{ARCH}\n' gridsite-debuginfo [INFO] 'gridsite-debuginfo' not installed [localhost] local: sudo -E yum -q list gridsite-doc gridsite gridsite-devel gridsite-libs [INFO] Metapackage 'gridsite' installed version: gridsite-2.3.2-1.el7.centos.x86_64 (already installed) - @CESNET.gridsite.centos7.x86_64 [INFO] Metapackage 'gridsite-devel' installed version: gridsite-devel-2.3.2-1.el7.centos.x86_64 (already installed) - @CESNET.gridsite.centos7.x86_64 [INFO] Metapackage 'gridsite-doc' installed version: gridsite-doc-2.3.2-1.el7.noarch (already installed) - @epel [INFO] Metapackage 'gridsite-libs' installed version: gridsite-libs-2.3.2-1.el7.centos.x86_64 (already installed) - @CESNET.gridsite.centos7.x86_64 [OK] Installation ended successfully. [INFO] Running configuration [localhost] local: sudo -E yum -y install ca-policy-egi-core httpd [localhost] local: sudo -E ./bin/gridsite/configure.sh [[QC_SEC_2: SHA-2 Certificates Support]] [[QC_SEC_5: World Writable Files]] [localhost] local: sudo -E find / -not \( -path "/proc" -prune \) -not \( -path "/sys" -prune \) -type f -perm -002 -exec ls -l {} \; [OK] Found no world-writable file. [localhost] local: sudo -E yum -y install glue-validator [[QC_INFO_1: GlueSchema 1.3 Support]] [NA] Product does not publish information through BDII. [[QC_INFO_2: GlueSchema 2.0 Support]] [NA] Product does not publish information through BDII. [[QC_INFO_3: Middleware Version Information]] [NA] Product does not publish information through BDII. [[QC_MON_1: Service Probes]] [NA] Product cannot be tested by Nagios. [[QC_FUNC_1: Basic Funcionality Test.]] [INFO] Probe 'Test reading a file using gacl.' [localhost] local: sudo -E ./bin/gridsite/test_read_gacl.sh 2>&1 [INFO] Command './bin/gridsite/test_read_gacl.sh ' ran successfully [OK] Basic functionality probes ran successfully. [[QC_FUNC_2: New features/bug fixes testing.]] [NA] No definition found for QC_FUNC_2.