What’s new in dCache 10.1
Release notes
Highlights
- Experimental support for NFS-over-TLS
Incompatibilities
- starting with dcache–10.1.0 Java 17 is required for runtime.
- Transfer managers database functionality has been removed.
Acknowledgments
(tbd, this section uses markdown formatting)
Release 10.1.5
CI
Pipeline optimizations.
pool
Fix double decrement on active hsm requests. This addresses the issue of pools stopping flushing to tape with “Negative number of active requests”.
When a thread performing I/O gets interrupted, then an InterruptedIOException might be thrown. A DCAP mover will treat and propagate such an exception as a disk I/O error, thus disabling the pool. This fix reduces false positive disk I/O errors.
Changelog 10.1.4..10.1.5
- 19915761ec
- [maven-release-plugin] prepare release 10.1.5
- 297eac0550
- pool: don’t treat InterruptedIOException as a disk IO error
- 8c9ff6bd4a
- pool: fix double decrement of hsm requests
- 927d9a1a6d
- ci: split container image registry and repository
- cc5a438b55
- [maven-release-plugin] prepare for next development iteration
Release 10.1.4
bulk
The current release fixed broken command activities
.
Changelog 10.1.3..10.1.4
- 51e9ab1acc
- [maven-release-plugin] prepare release 10.1.4
- 991e26ec09
- ci: run spotbugs only on master branch
- 082d2d55c8
- bulk: fix broken command
activities
- 90199cf135
- [maven-release-plugin] prepare for next development iteration
Release 10.1.3
bulk
When specifying an empty target, bulk proceeded to process the request instead of failing fast. This is now fixed.
ci
Release process improvements.
gplazma
Fixed the tokenExchange plugin in gplazma so that there is no error on start.
A previous commit, leading to the last bugfix releases being blacklisted, introduced a regression in the multimap plugin. Where the ‘op’ principal type is used, logins will fail with dCache logging a stacktrace like
java.lang.RuntimeException: Failed to create principal: java.lang.NoSuchMethodException: org.dcache.auth.OAuthProviderPrincipal.<init>(java.lang.String)
.
This is now fixed.
Changelog 10.1.2..10.1.3
- dfb446f695
- [maven-release-plugin] prepare release 10.1.3
- a89c5034bc
- gplazma: multimap fix op regression
- c9d8b092d1
- bulk: check targets for empty strings
- b29c463b73
- gplazma2-oidc-te: fix invalid initialization of plugin
- a6fffd4069
- ci: use llm to generate release notes
- b368ef45e2
- [maven-release-plugin] prepare for next development iteration
Release 10.1.2
doc
Better documentation clarifying OIDC provider ID and issue claim.
Changelog 10.1.1..10.1.2
- 9d84bef8eb
- [maven-release-plugin] prepare release 10.1.2
- 47ee70a323
- github: add action for atumatic github-release
- 248292f1ed
- gplazma alise initial version of plugin
- 2e68af57ca
- common: add issuer URI to OAuthProviderPrincipal
- 1cb8f34c5f
- docs: clarify OIDC provider ID and issue claim
- 03cda0e37c
- [maven-release-plugin] prepare for next development iteration
Release 10.1.1
CI
Improve our CI pipleline.
TAPE-API
Release by relative path works.
Changelog 10.1.0..10.1.1
- a1c95c3d48
- [maven-release-plugin] prepare release 10.1.1
- 6a98d68906
- WLG TAPE REST API: fix handling of frontend.root in release API
- 0bb8a782ed
- gitlab: mirror tags
- 45a2e32c3d
- [maven-release-plugin] prepare for next development iteration
Release 10.1.0
gplazma
-
storage.stage
OIDC claims are now supported.
httpd
Fixed links to dCache documentation.
NFS
dCache NFS door supports RPC-over-TLS protocol extension for data-in-transit protection. To work
with pNFS, host certificates must be installed on NFS doors and pools. As pNFS uses multipath addresses
for client redirection, the host certificates must include the IPv4/IPv6 records
in Subject Alternative Name
.
To enable the RPC-over-TLS capability on pools and nfs doors, the following properties must be enabled:
pool.mover.nfs.enable.rpc-over-tls=true
nfs.enable.rpc-over-tls=true
or
dcache.enable.rpc-over-tls=true
To mount with TLS, clients need to run Linux kernel 6.5 or newer.
mount -o xprtsec=tls nfs-door:/data /mnt/
Known issues: NFS-over-TLS is not enforced by export options. The door/pool must be restarted on certificate updates.
Pool
- Adding PNFSID argument to st ls and rh ls commands to retrieve by specific ID.
Poolmanager
- Staging requests now take account of restrictions due to
storage.stage
claims, where present.
Transfer Managers
- Database functionality is removed.
Changelog from 10.0.0 to 10.1.0
- 45a2e32c3d
- [maven-release-plugin] prepare for next development iteration
- 289660b28d
- [maven-release-plugin] prepare release 10.1.0
- c5301935a6
- libs: update mina-sshd to version 2.13.1
- 91d61a6e98
- github: change mirroring action
- 46bebd2785
- ci: use shorter k8s namespace names
- dfabdbb393
- ci: drop centos–7 based wn. drop cvmfs
- ea976307ef
- ci: split el9 wn initialization from s2 tests
- 2fc65adf42
- [maven-release-plugin] prepare branch @{releaseLabel}
- 7d0973cc87
- http (old): fix links to docu page
- 218dbe01f7
- Fix issue with infinite replicas when replicas > 1
- 9cad174570
- Revert “Fix issue with infinite replicas when replicas > 1”
- 6e0bd00c0d
- Fix issue with infinite replicas when replicas > 1
- fdc37638e5
- book: add perf example
- d8e5a89eb7
- ci: use desy nims repo for CentOS7
- 6ac5de5586
- dcache: refactor DiskSpaceAllocatorTest
- 922ea440d9
- frontend: handle frontend.root variable properly
- 63ae8dd213
- add standard Fermilab license/copyright header neglected in the commit 741a27b19c0458bdd2abc0b0b9affdee681c16ed
- 741a27b19c
- chimera: add CTA HSM StorageInfo extractor
- 3464b9cbad
- ci: start dcache with old pools
- d321e7e24f
- pom: compile code in the same jvm as maven
- 99cf65a4b7
- transfermanager: remote JDO and datanucleaus leftovers
- 5a0a09e152
- tpc: Remove remote transfer manager’s database (#7598)
- 72b593ad33
- Update bulk.properties: add comment
- d772420706
- Revert “Get rid of persistanceManager, persistanceMAnagerFactory and Transaction”
- 1f1ab1d729
- Get rid of persistanceManager, persistanceMAnagerFactory and Transaction inside TransferManager class.
- d6ed35753b
- pool: add PNFSID to
st ls
andrh ls
commands (#7596) - de2f2681ac
- gplazma: oidc more descriptive offline verification failures
- 9c12ffdb1a
- nearline-storage: update copy n-s-p to respect c:puts, c:gets, c:remove properties
- 100e7d1cc1
- chimera: fix uri_encode to handle special characters
- 17e52201ee
- gplazma token exchange plugin (#7521)
- 6a8dc218cf
- ci: add comments to various pipeline stages
- a473929c65
- ci: add property to control upload options
- fb1f525e38
- ci: disable srmcp test
- ffee5e0a8c
- ci: use python3 for robot test
- 01a2f778af
- ci: pinpoint postgres helm version
- 839fd3e4d4
- Update dcache-minimal-installation.md
- 455885658c
- Update dcache-minimal-installation.md
- e236630e30
- Update dcache-minimal-installation.md
- 2b9783d20c
- Update dcache-minimal-installation.md
- 8a666a6e48
- Update dcache-minimal-installation.md
- 3d8d644500
- Update dcache-minimal-installation.md
- 2531962400
- Update dcache-minimal-installation.md
- ebbd182309
- Update dcache-minimal-installation.md
- a98b0ccf93
- bulk: do not truncate target paths
- 79ea5f837c
- Update dcache-minimal-installation.md
- c38556ba46
- Update dcache-minimal-installation.md
- bc24b22a24
- Update dcache-minimal-installation.md
- 062ae07e81
- Update dcache-minimal-installation.md
- 462e5c92ef
- Update dcache-minimal-installation.md
- 23553513f0
- Update dcache-minimal-installation.md
- 16cf66414a
- Update dcache-minimal-installation.md
- 0a87d50b80
- Update dcache-minimal-installation.md
- c238c6a33f
- Update dcache-minimal-installation.md
- 22eb51d2f9
- Update dcache-minimal-installation.md
- 0b99890982
- Update dcache-minimal-installation.md
- 495a8eaa52
- Update dcache-minimal-installation.md
- 84ac6b24e8
- Update dcache-minimal-installation.md
- 0597b1f47a
- pool: fix miscalculation of offset on short read.
- adce9368f1
- The Kafka bean must be optional for SRM manager.
- 72da8e9592
- chimera: fix loop creation on directory move
- 73366d2e65
- build(deps): bump org.bouncycastle:bcprov-jdk18on from 1.77 to 1.78
- bf4e865732
- chimera: don’t update file mtime on hard links creation
- 2db51de545
- ci: drop –ftp-create-dirs option (as we switch to https)
- 052d56b970
- Support
storage.stage
restriction checking for staging operations - c8f4fdfd64
- common, gplazma-oidc: Add
storage.stage
to activities - 17e7038602
- common: Add debug logging to
Restriction
classes - 5a4669cb18
- common: Avoid redundant path resolution
- 58aa320d22
- common: Improve DenyActivityRestriction tests
- cf8b19ec41
- ci: use almalinux9 for rpm install test
- 5cbe754b81
- rpm: require java–17
- 05b00cd9c2
- ci: take s2 rpm from nexus yum repo
- 2bfe4fae26
- ci: eplocitly specify kubernetes namespace
- 59b6acfabe
- ci: fix typo
- 412bfe2a33
- webdav: use transfermanager+id to identify TPC transfer
- e3bde268d1
- docs: update oidc chapter to explain trust anchors
- cff333d1ef
- nfs,pool: expose NFS-over-TLS capability of dCache
- 8f1a8aa8f6
- Book: Move HA transfer-man. section out of srm-man.
- 16daf3347f
- Add Kafka producer to transfer manager.
- e5386d33a9
- Add Kafka producer to SRM manager.
- aff6ed2097
- ci: log job statup time
- 3b028b7721
- docs: update BUILDING.md
- afd9270893
- pom: use java17 for compilation
- daae5d5292
- libs: update bouncycastle to 1.77, canl to 2.8.3
- b03dd5ad5c
- ci: generate xunit report for s2
- 358bb3b997
- ci: drop sha1 workaround for rhel9 hosts
- 7648539bf0
- common-security: add custom version of ProxyCSRGenerator#generate
- dae9682c42
- webdav: httptpc percent-decode local path
- a1403cb023
- enable all s2 tests
- cd0f95a8a6
- ci: show s2 test case error if failed
- 1154f5a543
- ci: fix s2 test root directory
- 3682618966
- ci: enable s2 tests
- 40e53dfc7a
- build(deps): bump io.netty:netty-codec-http
- d26b9ae031
- qos: add flag to enable/disable role based authorization for transitions
- 51f932083c
- multiple: separate ha command prefix from zk path
- 111b700084
- chimera: make list method to support virtual directory listing
- cbed2f0b93
- Initial cells docu
- 8b9fb33eca
- [maven-release-plugin] prepare for next development iteration