Skip to content

Add initial 'updating to OSG 25' docs #290

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open

Add initial 'updating to OSG 25' docs #290

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
087878b
Add news page and update guide for OSG 25
mwestphall Sep 18, 2025
3f281d5
Update existing documentation with references to OSG 25
mwestphall Sep 18, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions docs/common/help.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,7 @@ support inquiry:

* Troubleshooting sections or pages for the problematic software
* Recent OSG Software release notes
- [OSG 25](../release/osg-25.md)
- [OSG 24](../release/osg-24.md)
- [OSG 23](../release/osg-23.md)
* [Outage](https://status.opensciencegrid.org/) information for OSG services
Expand Down
70 changes: 39 additions & 31 deletions docs/common/yum.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,8 +50,8 @@ Their names start with `osg-upcoming` and have the same structure as our standar
as well as the same guarantees of quality and production-readiness.

There are separate sets of upcoming repositories for each release series.
For example, the [OSG 24 repos](https://repo.osg-htc.org/osg/24-main/) have corresponding
[24-upcoming repos](https://repo.osg-htc.org/osg/24-upcoming/).
For example, the [OSG 25 repos](https://repo.osg-htc.org/osg/25-main/) have corresponding
[25-upcoming repos](https://repo.osg-htc.org/osg/25-upcoming/).
The upcoming repositories are meant to be layered on top of our standard repositories:
installing software from the upcoming repositories requires also enabling the standard repositories from the same release.

Expand All @@ -65,6 +65,8 @@ supported by the OSG.

The definitive list of software in the contrib repository can be found here:

- [OSG 25 EL9 contrib software repository](https://repo.osg-htc.org/osg/25-contrib/el9/x86_64/)
- [OSG 25 EL8 contrib software repository](https://repo.osg-htc.org/osg/25-contrib/el8/x86_64/)
- [OSG 24 EL9 contrib software repository](https://repo.osg-htc.org/osg/24-contrib/el9/x86_64/)
- [OSG 24 EL8 contrib software repository](https://repo.osg-htc.org/osg/24-contrib/el8/x86_64/)
- [OSG 23 EL9 contrib software repository](https://repo.osg-htc.org/osg/23-contrib/el9/x86_64/)
Expand All @@ -86,6 +88,18 @@ The repositories to enable, as well as the instructions to enable them, are OS-d
or if the `enabled` line is missing
(i.e. it is enabled unless specified otherwise.)

#### Rocky Linux 9/10

- Ensure that the `crb` repo in `/etc/yum.repos.d/rocky.repo` is enabled

#### AlmaLinux 9/10

- Ensure that the `crb` repo in `/etc/yum.repos.d/almalinux-crb.repo` is enabled

#### CentOS Stream 9/10

- Ensure that the `crb` repo in `/etc/yum.repos.d/centos.repo` is enabled

#### CentOS Stream 8

- Ensure that the `extras` repo in `/etc/yum.repos.d/CentOS-Stream-Extras.repo` is enabled.
Expand All @@ -106,18 +120,6 @@ The repositories to enable, as well as the instructions to enable them, are OS-d
- Ensure that the `CodeReady Linux Builder` channel is enabled.
See [Red Hat's instructions](https://access.redhat.com/articles/4348511#enable) on how to enable this repo.

#### Rocky Linux 9

- Ensure that the `crb` repo in `/etc/yum.repos.d/rocky.repo` is enabled

#### AlmaLinux 9

- Ensure that the `crb` repo in `/etc/yum.repos.d/almalinux-crb.repo` is enabled

#### CentOS Stream 9

- Ensure that the `crb` repo in `/etc/yum.repos.d/centos.repo` is enabled

### Install the EPEL repositories

OSG software depends on packages distributed via the [EPEL](https://fedoraproject.org/wiki/EPEL) repositories.
Expand All @@ -126,10 +128,12 @@ You must install and enable these first.
- Install the EPEL repository, if not already present. Choose the right version to match your OS version.

:::console
## EPEL 8 (For RHEL 8 and CentOS Stream 8, Rocky Linux 8, AlmaLinux 8)
root@host # yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
## EPEL 10 (For RHEL 10 and CentOS Stream 10, Rocky Linux 10, AlmaLinux 10)
root@host # yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-10.noarch.rpm
## EPEL 9 (For RHEL 9 and CentOS Stream 9, Rocky Linux 9, AlmaLinux 9)
root@host # yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm
## EPEL 8 (For RHEL 8 and CentOS Stream 8, Rocky Linux 8, AlmaLinux 8)
root@host # yum install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm

- Verify that `/etc/yum.repos.d/epel.repo` exists; the `[epel]` section should contain:

Expand All @@ -152,6 +156,21 @@ For instructions on upgrading from one OSG series to another, see the
1. Install the OSG repository for your OS version and the [OSG release series](../release/release_series.md) that you wish to
use:

- OSG 25 EL10:

:::console
root@host # yum install https://repo.osg-htc.org/osg/25-main/osg-25-main-el10-release-latest.rpm

- OSG 25 EL9:

:::console
root@host # yum install https://repo.osg-htc.org/osg/25-main/osg-25-main-el9-release-latest.rpm

- OSG 25 EL8:

:::console
root@host # yum install https://repo.osg-htc.org/osg/25-main/osg-25-main-el8-release-latest.rpm

- OSG 24 EL9:

:::console
Expand Down Expand Up @@ -197,34 +216,23 @@ For production services, we suggest only changing software versions during contr
Therefore we recommend security-only automatic updates or disabling automatic updates entirely.

!!! note
Automatic updates for EL8 and EL9 variants are provided in the `dnf-automatic` RPM,
Automatic updates for EL8+ variants are provided in the `dnf-automatic` RPM,
which is not installed by default.

To enable only security related automatic updates:

- On EL8 and EL9 variants, edit `/etc/dnf/automatic.conf` and set `upgrade_type = security`
- On EL8+ variants, edit `/etc/dnf/automatic.conf` and set `upgrade_type = security`

CentOS 7, CentOS Stream 8, and CentOS Stream 9 do not support security-only automatic updates;
CentOS Stream 8, 9, and 10 do not support security-only automatic updates;
doing any of the above steps will prevent automatic updates from happening at all.

To disable automatic updates entirely:

- On EL8 and EL9 variants, run:
- On EL8+ variants, run:

:::console
root@host # systemctl disable --now dnf-automatic.timer

### Configuring Spacewalk priorities ###

Sites using [Spacewalk](https://spacewalkproject.github.io/) to manage RPM packages will need to configure OSG Yum
repository priorities using their Spacewalk ID. For example, if the OSG 3.4 repository's Spacewalk ID is
`centos_7_osg34_dev`, modify `/etc/yum/pluginconf.d/90-osg.conf` to include the following:

```
[centos_7_osg_34_dev]
priority = 98
```

Repository Mirrors
------------------

Expand Down
5 changes: 5 additions & 0 deletions docs/data/osdf/install-cache-rpm.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -63,6 +63,11 @@ The cache service is provided by the `osdf-cache` RPM.
Install it using one of the following commands:


OSG 25:
```console
root@host # yum install osdf-cache
```

OSG 24:
```console
root@host # yum install osdf-cache
Expand Down
8 changes: 4 additions & 4 deletions docs/data/osdf/install-origin-rpm.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,8 +3,8 @@ title: Installing the OSDF Origin by RPM
Installing the OSDF Origin by RPM
=================================

!!! warning "OSG 24"
This installation guide requires OSG 24
!!! warning "OSG 24+"
This installation guide requires OSG 24 or OSG 25

!!! tip "Upgrading from a non-Pelican origin?"
This installation guide also walks you through upgrading an origin that you installed prior to OSG 24.
Expand Down Expand Up @@ -44,10 +44,10 @@ As with all OSG software installations, there are some one-time steps to prepare

* Obtain root access to the host
* Prepare [the required Yum repositories](../../common/yum.md);
the [OSG 24 repositories](../../common/yum.md#install-the-osg-repositories) should be used.
the [OSG 25 repositories](../../common/yum.md#install-the-osg-repositories) should be used.

!!! danger "Upgrading to a Pelican origin"
If you are upgrading from a pre-Pelican OSDF origin, update all of your OSG 23 packages before installing the OSG 24
If you are upgrading from a pre-Pelican OSDF origin, update all of your OSG 23 packages before installing the OSG 25
repositories:

:::console
Expand Down
4 changes: 0 additions & 4 deletions docs/data/run-frontier-squid-container.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -78,10 +78,6 @@ on configuration customization.
Running a Frontier Squid Container
----------------------------------

!!! info "Where is the OSG 24 container?"
We are actively reworking our image build infrastructure for OSG 24 and expect to have all OSG Software containers
available by the end of 2024.

To run a Frontier Squid container with the defaults:

```console
Expand Down
5 changes: 5 additions & 0 deletions docs/data/xrootd/xrootd-authorization.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -349,6 +349,11 @@ pair, `xrootd-client`, and `voms-clients-cpp` installed:
If your transfer does not succeed, re-run `xrdcp` with `--debug 2` for more information.


Updating to OSG 25
------------------

There are no manual steps necessary for authentication to work when upgrading from OSG 24 to OSG 25.

Updating to OSG 24
------------------

Expand Down
38 changes: 38 additions & 0 deletions docs/release/osg-25.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,38 @@
title: OSG 25 News

OSG 25 News
===========

**Supported OS Versions:** EL8, EL9, EL10 (see [this document](supported_platforms.md) for details)

OSG 25 is the third release series following our [annual release schedule](release_series.md) and includes support for
EL10.

The initial release includes GlideinWMS 3.10.15, HTCondor 25.0.1, HTCondor 25.1.1, HTCondor-CE 25.0, and XRootD 5.8.4.

OSG 25 will be supported for [approximately two years total](release_series.md#series-life-cycle).

Latest News
-----------

#### Package removals ####

The following packages were removed from OSG 24:

- `cigetcert`: CILogon CA retired
- `cilogon-openid-ca-cert`: CILogon CA retired
- `openbao`: available in EPEL
- `oidc-agent`: available in EPEL
- `vault`: Superseded by openbao

Announcements
-------------

Updates to critical packages are also announced by email and are sent to the following recipients and lists:

- [Registered administrative contacts](../common/registration.md#registering-resources)
- [[email protected]](https://listserv.fnal.gov/scripts/wa.exe?A0=OSG-GENERAL)
- [[email protected]](https://listserv.fnal.gov/scripts/wa.exe?A0=OSG-OPERATIONS)
- [[email protected]](https://listserv.fnal.gov/scripts/wa.exe?A0=OSG-SITES)
- [[email protected]](https://listserv.fnal.gov/scripts/wa.exe?A0=site-announce)
- [[email protected]](https://groups.google.com/a/osg-htc.org/g/software-discuss)
3 changes: 3 additions & 0 deletions docs/release/release_series.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,9 @@ Series Overviews

Since the start of the RPM-based OSG Software Stack, we have offered the following release series:

- **OSG 25** (started September 2025) introduces support for EL10.
The initial release includes GlideinWMS 3.10.15, HTCondor 25.0.1, HTCondor 25.1.1, HTCondor-CE 25.0, and XRootD 5.8.4.

- **OSG 24** (started October 2024) introduces support for the ARM architecture.
The initial release includes GlideinWMS 3.10.7, HTCondor 24.0.1, HTCondor 24.1.1, HTCondor-CE 24.0, and XRootD 5.7.0.

Expand Down
82 changes: 48 additions & 34 deletions docs/release/signing.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,21 +35,21 @@ The OSG Packaging Signing Keys
The OSG Software Team has several GPG keys for signing RPMs;
The key used depends on the OSG version and software repository used, as documented below:

| OSG 23 Automated Signing Key | |
| OSG 25 Automated Signing Key | |
|--------------------|--------------------------------------------------------|
| Location | `/etc/pki/rpm-gpg/RPM-GPG-KEY-OSG-23-auto` |
| Download | [GitHub](https://raw.githubusercontent.com/osg-htc/docs/master/docs/release/RPM-GPG-KEY-OSG-23-auto) |
| Fingerprint | `E2AF 9F6E 239F D62B 5377 05C0 1760 EDF6 4D43 84D0` |
| Key ID | `4d4384d0` |
| Repositories | osg-23-development |
| Location | `/etc/pki/rpm-gpg/RPM-GPG-KEY-OSG-25-auto` |
| Download | [GitHub](https://raw.githubusercontent.com/osg-htc/docs/master/docs/release/RPM-GPG-KEY-OSG-25-auto) |
| Fingerprint | `376C 81EE 1421 311A 0FF4 3C3C 467C D904 222C 5D49` |
| Key ID | `222c5d49` |
| Repositories | osg-25-development |

| OSG 23 Developer Signing Key | |
| OSG 25 Developer Signing Key | |
|--------------------|--------------------------------------------------------|
| Location | `/etc/pki/rpm-gpg/RPM-GPG-KEY-OSG-23-developer` |
| Download | [GitHub](https://raw.githubusercontent.com/osg-htc/docs/master/docs/release/RPM-GPG-KEY-OSG-23-developer) |
| Fingerprint | `4A56 C5BB CDB0 AAA2 DDE9 A690 BDEE E24C 9289 7C00` |
| Key ID | `92897c00` |
| Repositories | All non-development osg-23 repositories |
| Location | `/etc/pki/rpm-gpg/RPM-GPG-KEY-OSG-25-developer` |
| Download | [GitHub](https://raw.githubusercontent.com/osg-htc/docs/master/docs/release/RPM-GPG-KEY-OSG-25-developer) |
| Fingerprint | `962A 9BCD D330 245F 2703 C88B 74E5 BE22 D4E9 B1FC` |
| Key ID | `d4e9b1fc` |
| Repositories | All non-development osg-25 repositories |

| OSG 24 Automated Signing Key | |
|--------------------|--------------------------------------------------------|
Expand All @@ -67,37 +67,40 @@ The key used depends on the OSG version and software repository used, as documen
| Key ID | `effc3be6` |
| Repositories | All non-development osg-24 repositories |

| OSG 25 Automated Signing Key | |
| OSG 23 Automated Signing Key | |
|--------------------|--------------------------------------------------------|
| Location | `/etc/pki/rpm-gpg/RPM-GPG-KEY-OSG-25-auto` |
| Download | [GitHub](https://raw.githubusercontent.com/osg-htc/docs/master/docs/release/RPM-GPG-KEY-OSG-25-auto) |
| Fingerprint | `376C 81EE 1421 311A 0FF4 3C3C 467C D904 222C 5D49` |
| Key ID | `222c5d49` |
| Repositories | osg-25-development |
| Location | `/etc/pki/rpm-gpg/RPM-GPG-KEY-OSG-23-auto` |
| Download | [GitHub](https://raw.githubusercontent.com/osg-htc/docs/master/docs/release/RPM-GPG-KEY-OSG-23-auto) |
| Fingerprint | `E2AF 9F6E 239F D62B 5377 05C0 1760 EDF6 4D43 84D0` |
| Key ID | `4d4384d0` |
| Repositories | osg-23-development |

| OSG 25 Developer Signing Key | |
| OSG 23 Developer Signing Key | |
|--------------------|--------------------------------------------------------|
| Location | `/etc/pki/rpm-gpg/RPM-GPG-KEY-OSG-25-developer` |
| Download | [GitHub](https://raw.githubusercontent.com/osg-htc/docs/master/docs/release/RPM-GPG-KEY-OSG-25-developer) |
| Fingerprint | `962A 9BCD D330 245F 2703 C88B 74E5 BE22 D4E9 B1FC` |
| Key ID | `d4e9b1fc` |
| Repositories | All non-development osg-25 repositories |
| Location | `/etc/pki/rpm-gpg/RPM-GPG-KEY-OSG-23-developer` |
| Download | [GitHub](https://raw.githubusercontent.com/osg-htc/docs/master/docs/release/RPM-GPG-KEY-OSG-23-developer) |
| Fingerprint | `4A56 C5BB CDB0 AAA2 DDE9 A690 BDEE E24C 9289 7C00` |
| Key ID | `92897c00` |
| Repositories | All non-development osg-23 repositories |


You can see the fingerprint for yourself.

On EL 8 and newer (GnuPG >= 2.1.13):
```console
$ gpg --import-options show-only --import < /etc/pki/rpm-gpg/RPM-GPG-KEY-OSG-23-auto
pub rsa4096 2023-06-23 [SC]
E2AF9F6E239FD62B537705C01760EDF64D4384D0
uid OSG 23 Automated Signing Key <[email protected]>
sub rsa4096 2023-06-23 [E]

$ gpg --import-options show-only --import < /etc/pki/rpm-gpg/RPM-GPG-KEY-OSG-23-developer
pub rsa4096 2023-08-15 [SC]
4A56C5BBCDB0AAA2DDE9A690BDEEE24C92897C00
uid OSG 23 Developer Signing Key <[email protected]>
sub rsa4096 2023-08-15 [E]
$ gpg --import-options show-only --import < /etc/pki/rpm-gpg/RPM-GPG-KEY-OSG-25-auto
pub rsa4096/0x467CD904222C5D49 2025-09-04 [SC]
Key fingerprint = 376C 81EE 1421 311A 0FF4 3C3C 467C D904 222C 5D49
uid OSG 25 Automated Signing Key <[email protected]>
sub rsa4096/0xB6751555672E8E10 2025-09-04 [E]

$ gpg --import-options show-only --import < /etc/pki/rpm-gpg/RPM-GPG-KEY-OSG-25-developer
pub rsa4096/0x74E5BE22D4E9B1FC 2025-09-04 [SC]
Key fingerprint = 962A 9BCD D330 245F 2703 C88B 74E5 BE22 D4E9 B1FC
uid OSG 25 Developer Signing Key <[email protected]>
sub rsa4096/0xCADF2A0473B9ADF9 2025-09-04 [E]


$ gpg --import-options show-only --import < /etc/pki/rpm-gpg/RPM-GPG-KEY-OSG-24-auto
pub rsa4096 2024-08-20 [SC]
Expand All @@ -111,5 +114,16 @@ pub rsa4096 2024-08-20 [SC]
uid OSG 24 Developer Signing Key <[email protected]>
sub rsa4096 2024-08-20 [E]

$ gpg --import-options show-only --import < /etc/pki/rpm-gpg/RPM-GPG-KEY-OSG-23-auto
pub rsa4096 2023-06-23 [SC]
E2AF9F6E239FD62B537705C01760EDF64D4384D0
uid OSG 23 Automated Signing Key <[email protected]>
sub rsa4096 2023-06-23 [E]

$ gpg --import-options show-only --import < /etc/pki/rpm-gpg/RPM-GPG-KEY-OSG-23-developer
pub rsa4096 2023-08-15 [SC]
4A56C5BBCDB0AAA2DDE9A690BDEEE24C92897C00
uid OSG 23 Developer Signing Key <[email protected]>
sub rsa4096 2023-08-15 [E]
```

Loading