D4science

Apr 07, 2017

12:37 PM D4Science Infrastructure Task #4243: Migrate SSL certificate from GARR/TERENA to Let's Encrypt

Tommaso Piccioli wrote:
> INFN
> Mar 10 13:59:07 2017 GMT gitorious.research-infrastructures.eu /C=IT/O=INFN/OU=Hos... Andrea Dell'Amico

Apr 06, 2017

05:36 PM D4Science Infrastructure VM Creation #7702: Provide new VM for hosting tabulardata service in devsec VO

(I still do not understand why nginx and ssl have been disabled).
Andrea Dell'Amico

05:35 PM D4Science Infrastructure VM Creation #7702: Provide new VM for hosting tabulardata service in devsec VO

How did you run the playbook?
I just run it with the tag `d4science` to only run the tasks that configure sudo and... Andrea Dell'Amico

02:37 PM D4Science Infrastructure VM Creation #7902: Create a CKAN instance for EcoEvo VRE

Costantino Perciante wrote:
> I need some information to create such resources:
>
> * db location, user and passw... Andrea Dell'Amico

11:13 AM D4Science Infrastructure VM Creation #7902: Create a CKAN instance for EcoEvo VRE

playbook ready for both prod and dev. Let me know if/when run it and on which hosts.
Andrea Dell'Amico

10:35 AM D4Science Infrastructure VM Creation #7902 (Feedback): Create a CKAN instance for EcoEvo VRE

The service is up: https://ckan-ecoevo.d4science.org/
Andrea Dell'Amico

Apr 05, 2017

07:12 PM D4Science Infrastructure VM Creation #7902: Create a CKAN instance for EcoEvo VRE

@francesco.mangiacrapa@isti.cnr.it the template download is failing for ckan-ecoevo:
~~~
fatal: [ckan-ecoevo.d4sc... Andrea Dell'Amico

Apr 04, 2017

05:28 PM D4Science Infrastructure Incident #7984 (In Progress): None of the infra-gateway nodes send emails

They are all queued on our relay server. The ISTI SMTP server is not responding to our relay.
I'm sending an email... Andrea Dell'Amico

Apr 03, 2017

01:46 PM D4Science Infrastructure Incident #7575 (Closed): smartgears 2.1.0-4.3.0-142337 needs a lot of time to deploy and start

smartgears is not the culprit, it seems.
When the hosts have lots of scopes the registry cannot satisfy the requests... Andrea Dell'Amico

Apr 01, 2017

06:16 PM D4Science Infrastructure Task #7810 (Closed): update ansible scripts for release 4.4.0

Andrea Dell'Amico

Mar 31, 2017

08:54 PM D4Science Infrastructure VM Creation #7927 (Feedback): More DataMiner machines required in the GenericWorker cluster

The VMs are active. hostnames are:
~~~
ip-90-147-167-173.ct1.garrservices.it
ip-90-147-167-175.ct1.garrservices.... Andrea Dell'Amico

08:13 PM D4Science Infrastructure VM Creation #7927 (In Progress): More DataMiner machines required in the GenericWorker cluster

Provisioning is running. The dataminers will be available on all the scopes.
Andrea Dell'Amico

Mar 28, 2017

08:32 PM D4Science Infrastructure Task #7457 (Closed): Create new VM for hosting quota service

Andrea Dell'Amico

08:18 PM D4Science Infrastructure Task #7880 (Closed): Modify the tasks that get and configure the smartgears scopes

A last consideration. An authorization token will be needed and assigned to the playbook's variable `gcube_admin_toke... Andrea Dell'Amico

08:16 PM D4Science Infrastructure Task #7880 (In Progress): Modify the tasks that get and configure the smartgears scopes

I changed the smartgears `container.xml` template and the `get-scopes` script to handle the new cases.
The fact that... Andrea Dell'Amico

08:13 PM D4Science Infrastructure Task #7880 (Closed): Modify the tasks that get and configure the smartgears scopes

We need to deal with a new case: now a smartgears node can be authorized to run on all a VO's VREs.
To handle the ... Andrea Dell'Amico

Mar 27, 2017

08:03 PM D4Science Infrastructure Task #7819 (Closed): Setup a Nagios alert for disk full of Workspace repo VM

All the basic checks have been added.
Hope it's the last time I have to deal with a hand configured host.
Andrea Dell'Amico

07:47 PM D4Science Infrastructure Task #7819 (In Progress): Setup a Nagios alert for disk full of Workspace repo VM

Andrea Dell'Amico

05:41 PM D4Science Infrastructure VM Creation #7855: Provide node to install GeoFence application

Which kind of node? a smartgears one?
* Resources? cpu, ram, disk space?
* scopes list?
Andrea Dell'Amico

05:37 PM D4Science Infrastructure Task #7807: Provide a check for HAProxy hosted on data.d4science.org

The new check is working. Andrea Dell'Amico

05:30 PM D4Science Infrastructure Task #7810 (In Progress): update ansible scripts for release 4.4.0

The container.xml template and the related variables have been modified. Now I need a released distribution to test a... Andrea Dell'Amico

Mar 24, 2017

07:16 PM D4Science Infrastructure Task #4826 (Closed): Create load balancing for data.d4science.org

The reconfiguration is complete. data.d4science.org has become data1-d4s.d4science.org.
Both data1-d4s.d4science.org... Andrea Dell'Amico

06:13 PM D4Science Infrastructure Task #4826: Create load balancing for data.d4science.org

OK, so some dns client is not yet up to date. Which dns servers are you using? the command `host data.d4science.org` ... Andrea Dell'Amico

05:44 PM D4Science Infrastructure Task #4826: Create load balancing for data.d4science.org

Done. You should start to see requests going to data2-d4s.d4science.org.
Andrea Dell'Amico

05:27 PM D4Science Infrastructure Task #4826: Create load balancing for data.d4science.org

OK. In the next minutes I'll change the dns and haproxy configuration, this way:
* data.d4science.org will be a CN... Andrea Dell'Amico

05:17 PM D4Science Infrastructure Task #4826: Create load balancing for data.d4science.org

So. Can we proceed with the switch?
Andrea Dell'Amico

06:59 PM D4Science Infrastructure Task #5227: Enable SSL on the orientdb instances

Port 2424 is the plain http one. So there's something that is not working correctly.
Andrea Dell'Amico

05:24 PM D4Science Infrastructure Task #7476: Change hostname of IC proxy service from node79 to "registry.d4science.org" and move it over https

OK, so we do not need to touch gcube-app.xml at all, is it correct?
Andrea Dell'Amico

05:15 PM D4Science Infrastructure Task #7476: Change hostname of IC proxy service from node79 to "registry.d4science.org" and move it over https

It worked for me right now.
We still don't know what changes to the configuration are needed. Andrea Dell'Amico

03:41 PM D4Science Infrastructure Task #7476: Change hostname of IC proxy service from node79 to "registry.d4science.org" and move it over https

I see. But I'm not able to investigate further: I need someone able to verify the smartgears scopes and the icproxy v... Andrea Dell'Amico

03:29 PM D4Science Infrastructure Task #7476: Change hostname of IC proxy service from node79 to "registry.d4science.org" and move it over https

The nginx reverse proxy configuration was missing. Can you try now?
Andrea Dell'Amico

Mar 23, 2017

09:30 PM D4Science Infrastructure Task #7691 (Closed): Destroy VM dev.d4science.org and move the hostname to infra-gateway production ha proxy

ssl certificate for dev.d4science.org obtained, the old server has been powered off.
Andrea Dell'Amico

08:55 PM D4Science Infrastructure Task #7691 (In Progress): Destroy VM dev.d4science.org and move the hostname to infra-gateway production ha proxy

The hostname has been moved. Andrea Dell'Amico

08:56 PM D4Science Infrastructure Task #4826: Create load balancing for data.d4science.org

Was the problem fixed? Andrea Dell'Amico

05:18 PM D4Science Infrastructure VM Creation #7702: Provide new VM for hosting tabulardata service in devsec VO

Can we move the postgresql databases on node7.d.d4science.research-infrastructures.eu to postgresql-srv-dev.d4scienc... Andrea Dell'Amico

01:12 PM D4Science Infrastructure Task #7484 (Closed): Please provision node19.d4science.org

Andrea Dell'Amico

12:07 PM D4Science Infrastructure Task #5227: Enable SSL on the orientdb instances

Luca Frosini wrote:
> It works, but you told me that you are not sure that everything is passing along a secure conn... Andrea Dell'Amico

Mar 22, 2017

07:35 PM D4Science Infrastructure Task #183 (Closed): tomcat running as root user under port 80

Those ones will die, eventually Andrea Dell'Amico

07:28 PM D4Science Infrastructure Task #5227: Enable SSL on the orientdb instances

@luca.frosini@isti.cnr.it is it working?
Andrea Dell'Amico

07:26 PM D4Science Infrastructure Task #6748 (Closed): Prepare a clone of broker1-dev-dnet.d4science.org

Andrea Dell'Amico

07:24 PM D4Science Infrastructure Task #7454 (Closed): Dismiss old authorization service (auth-pre)

Done by Tommaso. Andrea Dell'Amico

07:10 PM D4Science Infrastructure Task #7426: Add a general purpose postgresql server to collect the dev and preprod databases

> gcube-releases-dev has been imported on postgresql-srv-dev.d4science.org
unfortunately I could not test this bec... Andrea Dell'Amico

04:12 PM D4Science Infrastructure Task #7426: Add a general purpose postgresql server to collect the dev and preprod databases

Massimiliano Assante wrote:
> Let's do this, dev.d4science.org:5432/gcube-releases should be migrated too.
This ... Andrea Dell'Amico

07:04 PM D4Science Infrastructure Task #7427: Add a general purpose postgresql server to collect the production databases

gcube-releases has been imported.
Let's open a new ticket with the list of the to-be-moved databases.
Andrea Dell'Amico

06:48 PM D4Science Infrastructure Task #4826: Create load balancing for data.d4science.org

Roberto Cirillo wrote:
> Maybe it is a firewall issue on HomeLibrary-webapp (workspace-repository). Please Andrea co... Andrea Dell'Amico

06:27 PM D4Science Infrastructure Task #4826: Create load balancing for data.d4science.org

Francesco Mangiacrapa wrote:
> I've not access to data-lb.d4science.org via ssh, Could you investigate on the issu... Andrea Dell'Amico

03:35 PM D4Science Infrastructure Task #4826: Create load balancing for data.d4science.org

Can you test again using `data-lb.d4science.org` as hostname?
Andrea Dell'Amico

11:07 AM D4Science Infrastructure Task #4826: Create load balancing for data.d4science.org

We still need to check against the load balancer to verify that the proxy does not break the apache ACLs. We can use ... Andrea Dell'Amico

Mar 21, 2017

07:29 PM D4Science Infrastructure VM Creation #7465: Please Create a VM to install SmartExecutor for SmartArea

Can you write down the VM required resources and the scopes lists?
Andrea Dell'Amico

07:20 PM D4Science Infrastructure Task #7484 (Feedback): Please provision node19.d4science.org

node19.d4science.or has been reconfigured. The php packages are installed.
Andrea Dell'Amico

07:19 PM D4Science Infrastructure Task #7484: Please provision node19.d4science.org

The database for the dev instance runs on `postgresql-srv-dev.d4science.org`.
DB name: twittermon_dev
DB user: tw... Andrea Dell'Amico

07:07 PM D4Science Infrastructure Task #7484 (In Progress): Please provision node19.d4science.org

Andrea Dell'Amico

Mar 20, 2017

11:13 PM D4Science Infrastructure Incident #7600 (Closed): rstudio server cannot talk to nlscd when apparmor is active

I modified the rstudio-server playbook so that now it installs the `apparmor-utilities` package and, when apparmor is... Andrea Dell'Amico

11:09 PM D4Science Infrastructure Incident #7600 (Closed): rstudio server cannot talk to nlscd when apparmor is active

On the GARR cloud, where the VMs can run a modern kernel, apparmor is active by default.
rstudio server comes with a... Andrea Dell'Amico

08:40 PM D4Science Infrastructure Incident #7599: socialnetworking1.d4science.org is not able to contact Cassandra Cluster

the cassandra cluster ports are open between the cassandra nodes only (and your desktops), while the rpc and transpor... Andrea Dell'Amico

Mar 17, 2017

07:51 PM D4Science Infrastructure Task #7577 (Closed): A new dataminer distribution is needed

We just discovered that the home library changed after the upgrade, and the old one referred to the devel infrastruct... Andrea Dell'Amico

07:45 PM D4Science Infrastructure Incident #7575 (Closed): smartgears 2.1.0-4.3.0-142337 needs a lot of time to deploy and start

Starting from the latest smartgears release, the tomcat startup times have increased by order of magnitudes.
To ... Andrea Dell'Amico

07:39 PM D4Science Infrastructure Incident #7570 (Closed): Files cannot be downloaded from the DataMiner check the computations area

Done. The smartgears servers are restarting now.
Andrea Dell'Amico

07:32 PM D4Science Infrastructure Incident #7570: Files cannot be downloaded from the DataMiner check the computations area

I just updated the GARR dataminer instances. Now the other ones.
Andrea Dell'Amico

07:03 PM D4Science Infrastructure Incident #7570: Files cannot be downloaded from the DataMiner check the computations area

Where can I get the jar file?
Andrea Dell'Amico

Mar 16, 2017

05:46 PM D4Science Infrastructure Task #7476: Change hostname of IC proxy service from node79 to "registry.d4science.org" and move it over https

We also need instructions to automate the ic_proxy installation. I see that was manually deployed both in dev and in ... Andrea Dell'Amico

Mar 15, 2017

05:44 PM D4Science Infrastructure Task #7340 (Closed): Dismiss cotrix.d4science.org

Removed the VM and the DNS entry. Andrea Dell'Amico

Mar 13, 2017

05:28 PM D4Science Infrastructure Task #7481 (Closed): request https certificate for openaire-connect.d4science.org

DNS and letsencrypt configuration are OK. The certificate will be emitted in the next few days, we reached the week l... Andrea Dell'Amico

05:07 PM D4Science Infrastructure Task #7481 (In Progress): request https certificate for openaire-connect.d4science.org

Andrea Dell'Amico

02:08 PM D4Science Infrastructure Task #7379 (Closed): Create new VM for hosting SocialNetworking and gcube-oauth services

Andrea Dell'Amico