Skip to content

Acceptance Testing

The OSG Release Team collects and maintains testing procedures for major components in the OSG Sofware Stack. These test should verify that basic functionality of the component works in typically deployed configurations.



This acceptance testing recipe was created when access to a machine with sufficient disk space to make a complete replica of OASIS was not available.

Creating a CVMFS Repository Server (Stratum 0)

  1. Disable SELinux by setting the following in /etc/selinux/config.

  2. Check kernel version.

    uname -a
  3. CVMFS for EL7 requires OverlayFS (as of kernel version 4.2.x). If default kernel is <= 4.2.x, update kernel.

    [email protected] # rpm --import <>
    [email protected] # rpm -Uvh <>
    [email protected] # yum install yum-plugin-fastestmirror
    [email protected] # yum --enablerepo=elrepo-kernel install kernel-ml
  4. Select updated kernel by editing /etc/default/grub.


    and run:

    [email protected] # grub2-mkconfig -o /boot/grub2/grub.cfg
  5. Reboot system.

  6. Check kernel version again and make sure SELinux is disabled.

    [email protected] # uname -a
    [email protected] # sestatus
  7. If kernel >= 4.2 and SELinux is disabled, then update system and install CVMFS server and client packages.

    [email protected] # yum update
    [email protected] # yum install epel-release
    [email protected] # yum install yum-plugin-priorities
    [email protected] # rpm -Uvh <>
    [email protected] # yum install cvmfs cvmfs-server
  8. Configure web server and start it up. Edit /etc/httpd/conf.d/cvmfs.conf:

    Listen 8000
    KeepAlive On

    and run:

    [email protected] # chkconfig httpd on
    [email protected] # service httpd start
  9. Make new repository.

    [email protected] # cvmfs_server mkfs test.cvmfs-stratum-0.novalocal
  10. Run transaction on new repository to enable write access.

    [email protected] # cvmfs_server transaction test.cvmfs-stratum-0.novalocal
  11. Place some sample code in new repository directory and then publish it.

    [email protected] # cd /cvmfs/test.cvmfs-stratum-0.novalocal
    [email protected] # vi [bash\](%ATTACHURL%/
    [email protected] # chmod +x bash\
    [email protected] # cvmfs\_server publish test.cvmfs-stratum-0.novalocal
  12. Check repository status after publication.

    [email protected] # cvmfs\_server check
    [email protected] # cvmfs\_server tag
    [email protected] # wget -qO- <http://localhost:8000/cvmfs/test.cvmfs-stratum-0.novalocal/.cvmfswhitelist%7Ccat> -v
  13. Download a copy of the CVMFS repository's public key e.g., /etc/cvmfs/keys/

Creating a CVMFS Replica Server (Stratum 1)

  1. Repeat steps 1 though 8 in the previous section on "Creating a CVMFS Repository Server ". However, now also install mod_wsgi.

    [email protected] # yum install cvmfs cvmfs-server mod\_wsgi
  2. Upload a copy of the CVMFS repository's public key and place in /etc/cvmfs/keys directory.

  3. Add replica of the repository.

    [email protected] # cvmfs_server add-replica -o root <> /etc/cvmfs/keys/
  4. Make a snapshot of the repository.

    [email protected] # cvmfs\_server snapshot test.cvmfs-stratum-0.novalocal

Creating a CVMFS client

  1. Update system and install CVMFS client package.

    [email protected] # yum update
    [email protected] # yum install epel-release
    [email protected] # yum install yum-plugin-priorities
    [email protected] # rpm -Uvh <>
    [email protected] # yum install cvmfs
  2. Upload a copy of the CVMFS repository's public key and place in /etc/cvmfs/keys directory.

  3. Edit fuse configuration /etc/fuse.conf.

  4. Edit autofs configuration and restart service /etc/auto.master.

    /cvmfs /etc/auto.cvmfs

    and run:

    [email protected] # service autofs restart
  5. Edit cvmfs configuration (/etc/cvmfs/default.local) to point to replica server.

    CVMFS_SERVER_URL="[email protected]"
  6. Remove OSG CVMFS configuration file.

    rm /etc/cvmfs/default.d/60-osg.conf
  7. Run CVMFS config probe.

    cvmfs_config probe test.cvmfs-stratum-0.novalocal
  8. Check CVMFS config status.

    cvmfs_config stat -v test.cvmfs-stratum-0.novalocal
  9. Execute sample code published to repository from client.

    /cvmfs/test.cvmfs-stratum-0.novalocal/ -b 8 -r 5 -s 10000

Creating an OASIS client

  1. Update system and install CVMFS client package.
  2. Verify latest versions of cvmfs, cvmfs-config-osg, and cvmfs-x509-helper have been installed.
  3. Edit fuse configuration.
    • vi /etc/fuse.conf
      • user_allow_other
  4. Edit cvmfs configuration to point to replica server.
    • vi /etc/cvmfs/default.local
      • CVMFS_REPOSITORIES="`echo $((echo;echo;ls /cvmfs)|sort -u)|tr ' ' ,`"
      • CVMFS_QUOTA_LIMIT=20000
  5. Edit autofs configuration and restart service.
    • vi /etc/auto.master
      • /cvmfs /etc/auto.cvmfs
    • service autofs restart
  6. Run CVMFS config probe.
    • cvmfs_config probe
  7. Check CVMFS config status.
    • cvmfs_config stat -v

Additional Documentation

Gratia Probe

This section documents the testing procedure to test the gratia probes sufficiently tested to be promoted to the osg-testing repository. The test procedure is the same on both SL6 and SL7.

  • install or update the gratia-probe-condor rpm as appropriate
  • On each VM download the script and run it
  • In /etc/gratia/condor/ProbeConfig, verify the following have been changed:
    • change SiteName to something aside from Generic Site
    • change EnableProbe to 1
    • change CollectorHost, SSLHost, and SSLRegistrationHost to the an invalid host (E.g. or the localhost
  • Create /var/lib/osg/ and download the attached user-vo-map file and place it in that directory
  • Edit the user-vo-map file and change the account from sthapa to the account you'll be using to submit the condor jobs in the following step
  • Download and submit the attached condor_submit file (note, on the default fermicloud VM, this takes about 3 hours, so you may want to set NUM_CPUS to 50 so that 50 jobs will run at a time)
  • Run /usr/share/gratia/condor/condor_meter
  • Check /var/lib/gratia/tmp/gratiafiles/ for a subdir.condor_... directory and verify that there are 200 xml jobs and the cpus/wall times are appropriate (either PT0S or PT1M).


To test a fresh installation:

  1. Spin up two VM's and set up the EPEL/OSG repos on both of them.
  2. Choose one of the VM's, it will be the server VM. Consult these instructions to set up the server.
  3. From the other VM (client):

    1. Install the necessary packages:

      [email protected] # yum install globus-proxy-utils gsi-openssh-clients
    2. Initialize your proxy. After this, none of the gsi commands should prompt you for your password.

    3. Connect to the server:

      [email protected] $ gsissh -p 2222 <server hostname>
    4. Copy a test file to the server:

      [email protected] $ gsiscp -p 2222 testfile <server hostname>:/tmp
    5. Connect to the server via SFTP and grab files:

      [email protected] $ gsisftp -P 2222 <server hostname>
      [email protected] $ cd /tmp
      [email protected] $ get testfile

HTCondor-CE Collector (WIP)

The CE Collector is a stripped-down version of HTCondor-CE that contains mostly just the collector daemon and configs. It was introduced in htcondor-ce-1.6. The production CE Collectors run at the GOC, but you may want to set up your own for testing.

  1. Make 2 VMs with the EPEL/OSG repos installed: one for the collector, and one for the CE

Setting Up the Collector

  1. Install htcondor-ce-collector
  2. Create a file called /etc/condor-ce/config.d/99-local.conf that contains this line:


    (with your_htcondor_ce_host replaced by the hostname the HTCondor-CE VM)

  3. Run service condor-ce-collector start

Setting Up the CE

  1. Install osg-htcondor-ce-condor (replace condor with the batch system of your choice)
  2. Ensure osg-configure >= 1.0.60-2 is installed
  3. Configure your CE using osg-configure

    1. You should use the HTCondor-CE Install Docs as a reference, although you can skip several of the steps
    2. You can skip setting up Squid: set enabled to True and location to UNAVAILABLE in 01-squid.ini
    3. Set htcondor_gateway_enabled to True in 10-gateway.ini
    4. You probably don't need GUMS, but if you want it, use the Fermi GUMS server (set gums_host to and authorization_method to xacml in 10-misc.ini)
    5. To keep osg-configure from complaining about storage, edit 10-storage.ini:

      • Set se_available to False
      • Set app_dir to /osg/app_dir
      • Set data_dir to /osg/data_dir
      • Do mkdir -p /osg/app_dir/etc; mkdir -p /osg/data_dir; chmod 1777 /osg/app_dir{,/etc}
    6. Enable your batch system by setting enabled to True in 20-<batch system>.ini

    7. Set up the site info in 40-siteinfo.ini ; in particular, you'll need to set the resource and resource_group settings \ (you just need to pick a name; I concatenate my login name with the short host name and use that, e.g. matyasfermicloud001). \ You can also use the following settings:
      • group=OSG-ITB
      • sponsor=local
      • city=Batavia, IL
      • country=US
      • longitude=-88
      • latitude=41
  4. Edit the file /etc/osg/config.d/30-infoservices.ini and set ce_collectors to the collector host

  5. Run osg-configure -dc
  6. Start up your batch system
  7. Run service condor-ce start

The CE will report to the collector host every five minutes. If you want to force it to send now, run condor_ce_reconfig. You should see your CE if you run condor_ce_status -schedd on the collector host.


Testing a fresh installation:

  1. make sure the yum repositories required by OSG is installed on your host
  2. install the rpm
    • yum --enablerepo=osg-testing install rsv
  3. edit /etc/osg/config.d/30-rsv.ini file
    • in my case, I don't have a service cert for testing, so I use my own personal cert to create the proxy, but later on the owner of the proxy should be changed to "rsv" user that is created during the rpm install.
    • in the config file, for the ce_hosts and gridftp_hosts, put in a test server, as the result from this test will be uploaded to OSG GOC, which may mess up your production service monitoring if you chose a production server for the test.
  4. osg-configure -v
  5. osg-configure -c
  6. /etc/init.d/condor-cron start
  7. /etc/init.d/rsv start
  8. rsv-control --list
  9. rsv-control --version
  10. rsv-control --run --all-enabled 11. make sure the results from the above commands look fine.

Testing an upgrade installation:

  1. make sure to enable the osg-testing repo, and set its priority higher than the other repos
  2. yum --enablerepo=osg-testing upgrade rsv*
  3. you can use the old 30-rsv.ini file for configuration
  4. repeat steps 4)~11) as mentioned in the last section.


This section goes through the steps needed to set up a slurm install on a VM. This is a necessary prerequisite for testing Slurm related components (CE integration, gratia, etc.). Note that the slurm setup used for this uses weak passwords for mysql. It should be sufficient for a quick setup, testing, and then tear down but should not be used without changes if it will be running for any appreciable length of time.


need to have a VM with 2+ GB of memory

Installation and setup

  1. Download scripts and config files:

    cd /tmp/
    git clone <>
    cd utilities/slurm
  2. setup and install slurm components

    export username='USERNAME' \# user that jobs will run as
    export version='14.11.7' \# slurm version to install (e.g. 16.05.2 or 14.11.7)
  3. After successful completion, slurm and slurm gratia probes should be setup and enabled.

Running a job using slurm

  1. Generate with the following:

    echo "In the directory: `pwd`" echo "As the user: `whoami`" echo “Hostname:" /bin/hostname sleep 60 </pre>
  2. run sbatch

  3. the output from the jobs should appear in the current working directory as[eo].nnnnn where nnnnn is a job id

VO Client

This document contains a basic recipe for testing a VO Package release


Testing the VO package requires a few components: * X.509 certificate with membership to at least one VO * System with working GUMS installation * System with OSG installation (voms-proxy-init and edg-mkgridmap)

Testing voms-proxy-init

Login in the system that has voms-proxy-init installed. Make sure that you have the correct vo-client rpms installed and that your X.509 certificate is in your home directory. For each VO that you have membership in, run the following voms-proxy-init -voms [VO] where [VO] is the appropriate VO (e.g. osg, cms, etc.). You should be able to generate a voms-proxy for that VO without errors.

Testing edg-mkgridmap

Log on to a system with edg-mkgridmap installed. Make sure you have the correct vo-client rpms installed (vo-client-edgmkgridmap). Run edg-mkgridmap and check the log output for errors.
There will be some errors so compare your errors with the errors on previous vo-package tickets to make sure no new errors have appeared.

Testing GUMS

Log on to a system with a working GUMS install. Make sure that you have the correct vo-client rpms (osg-gums-config) installed.

  1. Make a backup of /etc/gums/gums.config
  2. Copy the mysql database information from /etc/gums/gums.config to /etc/gums/gums.config.template
  3. Copy /etc/gums/gums.config.template to /etc/gums/gums.config
  4. Start the tomcat6 service
  5. Go to the GUMS interface (e.g.
  6. Go to the Update VO members page and click on the update VO members button
  7. Once completed, there will probably be some errors.
  8. Compare errors to errors on prior vo package update tickets and make sure no new errors have occurred.

VOMS Admin Server

Install and configure voms-admin-server

Install and configure voms-admin-server with this script, entering osg-testing when prompted for the REPO and your own e-mail address when prompted for EMAIL_FROM.

Set up TEST_VO and add yourself as an admin

To add a test VO (named TEST_VO) and add yourself as an admin, use the following script, replacing the USER_EMAIL, USER_CERT_SUBJECT, and USER_COMMON_NAME variables with your own:


USER_CERT_ISSUER="/DC=com/DC=DigiCert-Grid/O=DigiCert Grid/CN=DigiCert Grid CA-1"

voms-admin --vo $VO_NAME --host $HOSTNAME --nousercert create-user \

voms-admin --vo $VO_NAME --host $HOSTNAME --nousercert assign-role \

echo web ui: https://$HOSTNAME:$TOMCAT_PORT/voms/$VO_NAME

Testing the web UI

  1. Add/suspend/restore/delete a user (using your e-mail address for contact)
  2. Verify e-mail receipt of suspension message

XRootD VOMS Testing

This section is intended for OSG Software/Release teams to gather information on testing vomsxrd/xrootd-voms-plugin package. Original plugin named vomsxrd, similar to lcmaps that extracts information for authorization within xrootd of a proxy's voms extension.

You need an xrootd server installation

In the xrootd server yum install the following packages:

  • xrootd
  • xrootd-voms-plugin
  • vo-client

In the xrootd client yum install the following packages:

  • xrootd-client
  • voms-clients
  • vo-client

In the xrootd server add this lines to file /etc/xrootd/xrootd-clustered.cfg

xrootd.seclib /usr/lib64/
sec.protparm gsi -vomsfun:/usr/lib64/ -vomsfunparms:certfmt=raw|vos=cms|dbg -vomsat:2
sec.protocol /usr/lib64 gsi -ca:1 -crl:3

This configuration will only authorize members of VO cms. You can change it to another VO.

Make sure fetch-crl has been run otherwise the xrootd service may fail to start.

In the xrootd client get a proxy without voms extension or with another VO extension different that the one used in the configuration:

[email protected] $ voms-proxy-init -voms mis
Enter GRID pass phrase:
Your identity: /DC=com/DC=DigiCert-Grid/O=Open Science Grid/OU=People/CN=Edgar Mauricio Fajardo Hernandez 2020
Creating temporary proxy ........................... Done
Contacting [/DC=com/DC=DigiCert-Grid/O=Open Science Grid/OU=Services/CN=http/] "mis" Done
Creating proxy ............................................... Done
[email protected] $ xrdcp vomsxrdtest root://
Run: [FATAL] Auth failed

Now get a proxy with cms extension and run it again:

[email protected] $ voms-proxy-init -voms cms
Enter GRID pass phrase:
Your identity: /DC=com/DC=DigiCert-Grid/O=Open Science Grid/OU=People/CN=Edgar Mauricio Fajardo Hernandez 2020
Creating temporary proxy ...................................... Done
Contacting [/DC=ch/DC=cern/OU=computers/] "cms" Done
Creating proxy .......................................... Done
Your proxy is valid until Thu Dec  4 22:53:29 2014
[email protected] $ xrdcp vomsxrdtest root://

XRootD Plugins

Hadoop name node installation

Use the following script with option 1:

set -e

select NODETYPE in namenode datanode gridftp; do
  [[ $NODETYPE ]] && break
case $NODETYPE in
  namenode ) NAMENODE=$HOSTNAME ;;
         * ) read -p 'hostname for NAMENODE? ' NAMENODE ;;
read -p 'ok? [y/N] ' ok
case $ok in
  y*|Y*) ;;  # ok
      *) exit ;;
#yum install --enablerepo=osg-minefield osg-se-hadoop-$NODETYPE
yum install osg-se-hadoop-$NODETYPE
case $NODETYPE in
  namenode|datanode )
    mkdir -p /data/{hadoop,scratch,checkpoint}
    chown -R hdfs:hdfs /data
    sed -i s/NAMENODE/$NAMENODE/ /etc/hadoop/conf.osg/{core,hdfs}-site.xml
    cp /etc/hadoop/conf.osg/{core,hdfs}-site.xml /etc/hadoop/conf/
    touch /etc/hosts_exclude
  gridftp )
    ln -snf conf.osg /etc/hadoop/conf
    sed -i s/NAMENODE/$NAMENODE/ /etc/hadoop/conf.osg/{core,hdfs}-site.xml
    echo "hadoop-fuse-dfs# /mnt/hadoop fuse server=$NAMENODE,port=9000,rdbuffer=131072,allow_other 0 0" >> /etc/fstab
    mkdir /mnt/hadoop
    mount /mnt/hadoop
    cp -v /etc/redhat-release /mnt/hadoop/test-file
    sed -i '/globus_mapping/s/^# *//' /etc/grid-security/gsi-authz.conf
    sed -i s/yourgums.yourdomain/ /etc/lcmaps.db
    mkdir /mnt/hadoop/fnalgrid
    useradd fnalgrid -g fnalgrid
    chown fnalgrid:fnalgrid /mnt/hadoop/fnalgrid
    service globus-gridftp-server start
    if type -t globus-url-copy >/dev/null; then
      globus-url-copy file:////bin/bash  gsiftp://$HOSTNAME/mnt/hadoop/fnalgrid/first_test
      echo globus-url-copy not installed
case $NODETYPE in
  namenode ) su - hdfs -c "hadoop namenode -format" ;;
service hadoop-hdfs-$NODETYPE start

Hadoop data node installation

  1. Run same script as before but with option number 2.
  2. Install xrootd-server:

    yum install xrootd-server
  3. Install xrootd-plugins

    yum install xrootd-cmstfc xrootd-hdfs

GridFTP installation

Run same as script but with option number.

On the name node

[[email protected] ~]# hdfs dfs -ls /test-file
Found 1 items
-rw-r--r--   2 root root          0 2014-07-21 15:57 /test-file

This means your hadoop is working.

Modify the file /etc/xrootd/xrootd-clustered.cfg to look like this:

xrd.port 1094

# The roles this server will play.                                                                                            
all.role server
all.role manager if
# The known managers                                                                                                          

# Allow any path to be exported; this is further refined in the authfile.                                                     
all.export / nostage

# Hosts allowed to use this xrootd cluster                                                                                    
cms.allow host *

### Standard directives                                                                                                       
# Simple sites probably don't need to touch these.                                                                            
# Logging verbosity                                                                                                           
xrootd.trace all -debug
ofs.trace all -debug
xrd.trace all -debug
cms.trace all -debug

# Integrate with CMS TFC, placed in /etc/storage.xml                                                                          
oss.namelib /usr/lib64/ file:/etc/xrootd/storage.xml?protocol=hadoop

xrootd.seclib /usr/lib64/
xrootd.fslib /usr/lib64/
ofs.osslib /usr/lib64/
all.adminpath /var/run/xrootd
all.pidpath /var/run/xrootd

cms.delay startup 10
cms.fxhold 60s
cms.perf int 30s pgm /usr/bin/XrdOlbMonPerf 30 default_stage /opt/xrootd_cache

Create file /etc/xrootd/storage.xml and place this:

<lfn-to-pfn protocol="hadoop" destination-match=".*" path-match=".*/+tmp2/test-file" result="/test-file"/>

For el7 the instrucctions are a little bit different. See:

Now from a node do:

xrdcp --debug 3 root://yourdatanode.yourdomain:1094//tmp2/test-file .

If it is sucessful it would have tested both cmstfc and hdfs plugins