Difference between revisions of "Atlas:StorageRequirements"

Un article de lcgwiki.
Jump to: navigation, search
Ligne 1: Ligne 1:
 
= Introduction =
 
= Introduction =
* Information only for T2s.
+
* Information only for T2s (and T3s).
* Information only for DPM for the moment.
+
* ACL information only for DPM for the moment.
* There is still an uncertainty with ATLASGROUPDISK
 
 
* Atlas official requirements in http://indico.cern.ch/materialDisplay.py?contribId=1&materialId=slides&confId=37181  
 
* Atlas official requirements in http://indico.cern.ch/materialDisplay.py?contribId=1&materialId=slides&confId=37181  
 
** but contents are not final yet.
 
** but contents are not final yet.
* There is a technical limitation in DPM. Atlas has contacted DPM developpers. The proper implementation is expected to be available in September?.
 
  
= 2008 =
+
* There is still an uncertainty with ATLASGROUPDISK due to a technical limitation in DPM. Atlas has contacted DPM developpers. The proper implementation is expected to be available in September.
* Unless mentioned, the size is for a typical T2 with ~500 CPU’s
+
 
* Site admin's are requested to create the space tokens, <strike>but namespace directories can be left to atlas production if the top directory is properly set up. (Of course they are welcome to create them by themselves).</strike>
+
-----
 +
* Unless mentioned, the size is for a typical T2 with ~500 CPUfs and ~100 TB disk
 +
* Site admin's are requested to create at least the space tokens. The namespace directories can be left to atlas production if the top directory is properly set up so that <code>/atlas/Role=production</code> is allowed to execute dpns-mkdir and dpns-setacl remotely. (Of course they are welcome to create them by themselves).
 +
* A T3 will need ATLASDATADISK if it would like to receive real data,  ATLASMCDISK to received simulated data, ATLASGROUPDISK to receive group analysis data, and ATLASPRODDISK to contribute official production.  ATLASUSERDISK is not necessary, but may be needed if the site contributes non-local user analysis.
 +
 
 +
 
 +
* In general 'read' permission should be given to all ALL users everywhere.
 +
* In general 'write' permission should be given to /atlas/Role=production everywhere, so that the ATLAS central deletion tool can work.
 +
 
 +
 
 +
== ATLAS top directory ==
 +
* On this page the top directory for ATLAS is represented by <code>.../atlas</code>. Each site should replace it according to their SE configuration.
 +
** eg. It is <code>lapp-se01.in2p3.fr:/dpm/in2p3.fr/home/atlas</code> for lapp.
 +
* this top directory is recommended to be configured so that an ordinary user cannot create a file/directory directly underneath.
 +
* the default ACL of this top directory is recommended to have write permission to /atlas/Role=production and /atlas/Role=lcgadmin, so that new directories can be created by ATLAS administration.
 +
 
 +
 
 +
== Summary table for Space token and Name space ==
  
 
{| border="1" width="100%"
 
{| border="1" width="100%"
| width="20%" | space token  
+
| space token  
| width="20%" | voms group to be associated
+
| voms group to be associated
| width="20%" | space to be reserved
+
| space to be reserved
 
| namespace directory(-ies) to be created
 
| namespace directory(-ies) to be created
 
|-----
 
|-----
| ATLASDATADISK
+
| [[#ATLASDATADISK|ATLASDATADISK]]
 
| /atlas/Role=production
 
| /atlas/Role=production
 
| [[#ATLASDATADISK|see below*]]
 
| [[#ATLASDATADISK|see below*]]
| /home/atlas/atlasdatadisk <pre>
+
| .../atlas/atlasdatadisk  
# group: atlas/Role=production
 
user::rwx
 
group::rwx              #effective:rwx
 
group:atlas/Role=production:rwx        #effective:rwx
 
mask::rwx
 
other::r-x
 
default:user::rwx
 
default:group::rwx
 
default:group:atlas/Role=production:rwx
 
default:mask::rwx
 
default:other::r-x
 
</pre>
 
 
|-----
 
|-----
 
| [[#ATLASMCDISK|ATLASMCDISK]]
 
| [[#ATLASMCDISK|ATLASMCDISK]]
 
| /atlas/Role=production
 
| /atlas/Role=production
| 15TB <br> (60TB for 100% AOD) [[#ATLASMCDISK|see below*]]
+
| 15TB <br> (60TB&nbsp;for 100%&nbsp;AOD) [[#ATLASMCDISK|see below*]]
| /home/atlas/atlasmcdisk <br> write permission only to atlas/Role=production
+
| .../atlas/atlasmcdisk <br> write permission only to atlas/Role=production
 
|-----
 
|-----
 
| [[#ATLASPRODDISK|ATLASPRODDISK]]
 
| [[#ATLASPRODDISK|ATLASPRODDISK]]
 
| /atlas/Role=production
 
| /atlas/Role=production
 
| 2TB ([[#ATLASPRODDISK|see below*]])
 
| 2TB ([[#ATLASPRODDISK|see below*]])
| /home/atlas/atlasproddisk <br> write permission only to atlas/Role=production
+
| .../atlas/atlasproddisk <br> write permission only to atlas/Role=production
 
|-----
 
|-----
 
| [[#ATLASGROUPDISK|ATLASGROUPDISK]]
 
| [[#ATLASGROUPDISK|ATLASGROUPDISK]]
 
| /atlas
 
| /atlas
 
| 6TB ([[#ATLASGROUPDISK|see below*]])
 
| 6TB ([[#ATLASGROUPDISK|see below*]])
| /home/atlas/atlasgroupdisk/phys-exotics <br> write permission to atlas/Role=production, /atlas/phys-exotics/Role=production
+
| .../atlas/atlasgroupdisk <br> write permission to atlas/Role=production
<br><br> /home/atlas/atlasgroupdisk/phys-higgs <br> write permission to atlas/Role=production, /atlas/phys-higgs/Role=production
+
<br><br>.../atlas/atlasgroupdisk/$GROUP <br> write permission to atlas/Role=production and /atlas/$GROUP/Role=production
<br><br> /home/atlas/atlasgroupdisk/phys-susy<br> write permission to atlas/Role=production, /atlas/phys-susy/Role=production
+
<br><br>([[#ATLASGROUPDISK|see below*]])
<br><br> /home/atlas/atlasgroupdisk/phys-beauty<br> write permission to atlas/Role=production, /atlas/phys-beauty/Role=production
 
<br><br> /home/atlas/atlasgroupdisk/phys-sm<br> write permission to atlas/Role=production, /atlas/phys-sm/Role=production
 
 
|-----
 
|-----
 
| [[#ATLASUSERDISK|ATLASUSERDISK]]
 
| [[#ATLASUSERDISK|ATLASUSERDISK]]
 
| /atlas
 
| /atlas
 
| 5TB ([[#ATLASUSERDISK|see below*]])
 
| 5TB ([[#ATLASUSERDISK|see below*]])
| /atlas/user <br> write permission to all ATLAS users
+
| .../atlas/user <br> write permission to all ATLAS users
 +
<br>write permission to /atlas/Role=production for central deletion
 
|-----
 
|-----
| [[#ATLASUSERDISK|ATLASUSERDISK]]
+
| [[#ATLASLOCALGROUPDISK|ATLASLOCALGROUPDISK]]
 
| /atlas/<locality>, <locality>=fr,ro,cn,jp,...
 
| /atlas/<locality>, <locality>=fr,ro,cn,jp,...
 
| sites to decide
 
| sites to decide
| /atlas/<locality>/user <br> write permission to local ATLAS users
+
| .../atlas/<locality>/user <br> write permission to local ATLAS users
 
|}
 
|}
 
== ATLAS top directory ==
 
* below it is represented by <code>/atlas</code>. Each site should replace it according to their local structure.
 
** eg. It is <code>lapp-se01.in2p3.fr:/dpm/in2p3.fr/home/atlas</code> for lapp.
 
* this top directory is recommended to be configured so that an ordinary user cannot create a file/directory directly underneath.
 
* the default ACL of this top directory is recommended to have write permission to /atlas/Role=production and /atlas/Role=lcgadmin.
 
  
 
== ATLASDATADISK ==
 
== ATLASDATADISK ==
 
* Estimation of size comes later
 
* Estimation of size comes later
 
* group associated with the space token: /atlas/Role=production
 
* group associated with the space token: /atlas/Role=production
* namespace to be created: /atlas/atlasdatadisk
+
* namespace to be created: .../atlas/atlasdatadisk
 
** Normally, sites already have this namespace created.
 
** Normally, sites already have this namespace created.
 
* namespace acl:
 
* namespace acl:
Ligne 93: Ligne 89:
  
 
== ATLASMCDISK ==
 
== ATLASMCDISK ==
* 15TB for a typical T2 with ~500 CPU’s and ~100 TB disk
+
* 15TB for a typical T2 with ~500 CPUfs and ~100 TB disk
* 60TB for a T2 requesting for 100% AOD.
+
** 60TB for a T2 requesting for 100% AOD.
* The size may increase in case D1PD comes in this space.
+
** The size may increase in case D1PD comes in this space.
 
* namespace to be created: <code>/atlas/atlasmcdisk</code>
 
* namespace to be created: <code>/atlas/atlasmcdisk</code>
 
** Normally, sites already have this namespace created.
 
** Normally, sites already have this namespace created.
Ligne 114: Ligne 110:
  
 
== ATLASPRODDISK ==
 
== ATLASPRODDISK ==
* 2TB for a typical T2 with ~500 CPU’s (the size is to be re-visited)
+
* 2TB for a typical T2 with ~500 CPUfs (the size is to be re-visited)
* Namespace to be created and its ACL: /atlas/atlasproddisk, write permission only to /atlas/Role=production
+
** scales with the CPU capacity of the site.
 +
** will be larger if the reconstruction jobs run on the site.
 +
* Namespace to be created and its ACL: .../atlas/atlasproddisk, write permission only to /atlas/Role=production
 
<pre>
 
<pre>
 
# group: atlas/Role=production
 
# group: atlas/Role=production
Ligne 131: Ligne 129:
  
 
== ATLASGROUPDISK ==
 
== ATLASGROUPDISK ==
* 6TB for a typical T2 with ~500 CPU’s and ~100 TB disk
+
* 6TB for a typical T2 with ~500 CPUfs and ~100 TB disk
* The size may decrease in case D1PD goes into ATLASMCDISK.
+
** The size may decrease in case D1PD goes into ATLASMCDISK.
 
* namespaces to be created and their ACLs:
 
* namespaces to be created and their ACLs:
** /atlas/atlasgroupdisk, write permission only to /atlas/Role=production
+
** .../atlas/atlasgroupdisk, write permission only to /atlas/Role=production
** /atlas/atlasgroupdisk/phys-exotics, write permission to atlas/Role=production, /atlas/phys-exotics/Role=production
+
** .../atlas/atlasgroupdisk/$GROUP, write permission to atlas/Role=production and /atlas/$GROUP/Role=production ($GROUP = phys-beauty, phys-exotics, phys-gener, phys-hi, phys-higgs, phys-lumin, phys-sm, phys-susy, phys-top, perf-egamma, perf-flavtag, perf-jets, perf-muons, perf-tau, etc.)
 
<pre>
 
<pre>
 
# group: atlas/Role=production
 
# group: atlas/Role=production
Ligne 154: Ligne 152:
  
 
== ATLASUSERDISK ==
 
== ATLASUSERDISK ==
* 5TB for a typical T2 with ~500 CPU’s and ~100 TB disk
+
* 5TB for a typical T2 with ~500 CPUfs and ~100 TB disk
* namespaces to be created and their ACLs: /atlas/user, write permission to all ATLAS users
+
* namespace to be created: .../atlas/user
 +
* ACL: write permission to all ATLAS users
 
* Normally, sites already have this namespace created by user analysis jobs so far.
 
* Normally, sites already have this namespace created by user analysis jobs so far.
 
* example commands
 
* example commands
** <code>dpns-mkdir lcg-se01.icepp.jp:/dpm/icepp.jp/home/atlas/user</code>
+
** <code>dpns-mkdir .../atlas/user</code>
** <code>dpns-setacl -m g:atlas:rwx,m:rwx,d:g:atlas:r-x lcg-se01.icepp.jp:/dpm/icepp.jp/home/atlas/user</code>
+
** <code>dpns-setacl -m g:atlas:rwx,m:rwx,d:g:atlas:r-x .../atlas/user</code>
** <code>dpns-getacl /dpm/icepp.jp/home/atlas/user</code>
+
** <code>dpns-getacl .../atlas/user</code>
<pre>
+
<ul><pre>
# file: /dpm/icepp.jp/home/atlas/user
 
# owner: root
 
 
# group: atlas
 
# group: atlas
 
user::rwx
 
user::rwx
Ligne 175: Ligne 172:
 
default:mask::rwx
 
default:mask::rwx
 
default:other::r-x
 
default:other::r-x
</pre>
+
</pre></ul>
  
  
 
== ATLASLOCALGROUPDISK ==
 
== ATLASLOCALGROUPDISK ==
 
* size to be decided by sites.
 
* size to be decided by sites.
* the resources not included in the pledge.
+
** the resources not included in the pledge.
* name space: /atlas/fr/user (or /atlas/ro/user, /atlas/cn/user, /atlas/jp/user, etc.)
+
* name space: .../atlas/fr/user (or .../atlas/ro/user, .../atlas/cn/user, .../atlas/jp/user, etc.)
 
* ACL: write permission only to /atlas/fr group (or /atlas/ro, /atlas/cn, /atlas/jp correspondingly)
 
* ACL: write permission only to /atlas/fr group (or /atlas/ro, /atlas/cn, /atlas/jp correspondingly)
 
* example ACL:
 
* example ACL:
 +
<ul><pre>
 +
# group: atlas/fr
 +
user::rwx
 +
group::rwx
 +
group:atlas/Role=production:rwx
 +
group:atlas/fr:rwx
 +
mask::rwx
 +
other::r-x
 +
default:user::rwx
 +
default:group::r-x
 +
default:group:atlas/Role=production:rwx
 +
default:mask::rwx
 +
default:other::r-x
 +
</pre></ul>

Version du 16:42, 7 juillet 2008

Introduction

  • There is still an uncertainty with ATLASGROUPDISK due to a technical limitation in DPM. Atlas has contacted DPM developpers. The proper implementation is expected to be available in September.

  • Unless mentioned, the size is for a typical T2 with ~500 CPUfs and ~100 TB disk
  • Site admin's are requested to create at least the space tokens. The namespace directories can be left to atlas production if the top directory is properly set up so that /atlas/Role=production is allowed to execute dpns-mkdir and dpns-setacl remotely. (Of course they are welcome to create them by themselves).
  • A T3 will need ATLASDATADISK if it would like to receive real data, ATLASMCDISK to received simulated data, ATLASGROUPDISK to receive group analysis data, and ATLASPRODDISK to contribute official production. ATLASUSERDISK is not necessary, but may be needed if the site contributes non-local user analysis.


  • In general 'read' permission should be given to all ALL users everywhere.
  • In general 'write' permission should be given to /atlas/Role=production everywhere, so that the ATLAS central deletion tool can work.


ATLAS top directory

  • On this page the top directory for ATLAS is represented by .../atlas. Each site should replace it according to their SE configuration.
    • eg. It is lapp-se01.in2p3.fr:/dpm/in2p3.fr/home/atlas for lapp.
  • this top directory is recommended to be configured so that an ordinary user cannot create a file/directory directly underneath.
  • the default ACL of this top directory is recommended to have write permission to /atlas/Role=production and /atlas/Role=lcgadmin, so that new directories can be created by ATLAS administration.


Summary table for Space token and Name space

space token voms group to be associated space to be reserved namespace directory(-ies) to be created
ATLASDATADISK /atlas/Role=production see below* .../atlas/atlasdatadisk
ATLASMCDISK /atlas/Role=production 15TB
(60TB for 100% AOD) see below*
.../atlas/atlasmcdisk
write permission only to atlas/Role=production
ATLASPRODDISK /atlas/Role=production 2TB (see below*) .../atlas/atlasproddisk
write permission only to atlas/Role=production
ATLASGROUPDISK /atlas 6TB (see below*) .../atlas/atlasgroupdisk
write permission to atlas/Role=production



.../atlas/atlasgroupdisk/$GROUP
write permission to atlas/Role=production and /atlas/$GROUP/Role=production

(see below*)

ATLASUSERDISK /atlas 5TB (see below*) .../atlas/user
write permission to all ATLAS users


write permission to /atlas/Role=production for central deletion

ATLASLOCALGROUPDISK /atlas/<locality>, <locality>=fr,ro,cn,jp,... sites to decide .../atlas/<locality>/user
write permission to local ATLAS users

ATLASDATADISK

  • Estimation of size comes later
  • group associated with the space token: /atlas/Role=production
  • namespace to be created: .../atlas/atlasdatadisk
    • Normally, sites already have this namespace created.
  • namespace acl:
# group: atlas/Role=production
user::rwx
group::rwx              #effective:rwx
group:atlas/Role=production:rwx         #effective:rwx
mask::rwx
other::r-x
default:user::rwx
default:group::rwx
default:group:atlas/Role=production:rwx
default:mask::rwx
default:other::r-x


ATLASMCDISK

  • 15TB for a typical T2 with ~500 CPUfs and ~100 TB disk
    • 60TB for a T2 requesting for 100% AOD.
    • The size may increase in case D1PD comes in this space.
  • namespace to be created: /atlas/atlasmcdisk
    • Normally, sites already have this namespace created.
  • Namespace ACL:
    # group: atlas/Role=production
    user::rwx
    group::rwx              #effective:r-x
    group:atlas/Role=production:rwx         #effective:rwx
    mask::rwx
    other::r-x
    default:user::rwx
    default:group::rwx
    default:group:atlas/Role=production:rwx
    default:mask::rwx
    default:other::r-x
    

ATLASPRODDISK

  • 2TB for a typical T2 with ~500 CPUfs (the size is to be re-visited)
    • scales with the CPU capacity of the site.
    • will be larger if the reconstruction jobs run on the site.
  • Namespace to be created and its ACL: .../atlas/atlasproddisk, write permission only to /atlas/Role=production
# group: atlas/Role=production
user::rwx
group::rwx              #effective:rwx
group:atlas/Role=production:rwx         #effective:rwx
mask::rwx
other::r-x
default:user::rwx
default:group::rwx
default:group:atlas/Role=production:rwx
default:mask::rwx
default:other::r-x

ATLASGROUPDISK

  • 6TB for a typical T2 with ~500 CPUfs and ~100 TB disk
    • The size may decrease in case D1PD goes into ATLASMCDISK.
  • namespaces to be created and their ACLs:
    • .../atlas/atlasgroupdisk, write permission only to /atlas/Role=production
    • .../atlas/atlasgroupdisk/$GROUP, write permission to atlas/Role=production and /atlas/$GROUP/Role=production ($GROUP = phys-beauty, phys-exotics, phys-gener, phys-hi, phys-higgs, phys-lumin, phys-sm, phys-susy, phys-top, perf-egamma, perf-flavtag, perf-jets, perf-muons, perf-tau, etc.)
# group: atlas/Role=production
user::rwx
group::rwx              #effective:rwx
group:atlas/Role=production:rwx         #effective:rwx
group:atlas/phys-exotics/Role=production:rwx         #effective:rwx
mask::rwx
other::r-x
default:user::rwx
default:group::rwx
default:group:atlas/Role=production:rwx
default:group:atlas/phys-exotics/Role=production:rwx
default:mask::rwx
default:other::r-x
    • etc...

ATLASUSERDISK

  • 5TB for a typical T2 with ~500 CPUfs and ~100 TB disk
  • namespace to be created: .../atlas/user
  • ACL: write permission to all ATLAS users
  • Normally, sites already have this namespace created by user analysis jobs so far.
  • example commands
    • dpns-mkdir .../atlas/user
    • dpns-setacl -m g:atlas:rwx,m:rwx,d:g:atlas:r-x .../atlas/user
    • dpns-getacl .../atlas/user
    # group: atlas
    user::rwx
    group::rwx              #effective:rwx
    group:atlas/Role=production:rwx         #effective:rwx
    mask::rwx
    other::r-x
    default:user::rwx
    default:group::r-x
    default:group:atlas/Role=production:rwx
    default:mask::rwx
    default:other::r-x
    


ATLASLOCALGROUPDISK

  • size to be decided by sites.
    • the resources not included in the pledge.
  • name space: .../atlas/fr/user (or .../atlas/ro/user, .../atlas/cn/user, .../atlas/jp/user, etc.)
  • ACL: write permission only to /atlas/fr group (or /atlas/ro, /atlas/cn, /atlas/jp correspondingly)
  • example ACL:
    # group: atlas/fr
    user::rwx
    group::rwx
    group:atlas/Role=production:rwx
    group:atlas/fr:rwx
    mask::rwx
    other::r-x
    default:user::rwx
    default:group::r-x
    default:group:atlas/Role=production:rwx
    default:mask::rwx
    default:other::r-x