Skip to content

[8.0] Interpret outputPath with LFN: prefix as an absolute one #8603

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
atsareg wants to merge 11 commits into
base: rel-v8r0
Choose a base branch
from
+186 −5
Open

[8.0] Interpret outputPath with LFN: prefix as an absolute one #8603

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
11 commits
Select commit Hold shift + click to select a range
2a0c722
feat: interpret outputPath with LFN: prefix as absolute one
atsareg Jun 12, 2026
f7c0731
feat: make output LFNs globbable
atsareg Jun 12, 2026
be85f81
fix: fixed path evaluation
atsareg Jun 13, 2026
41ccbc4
feat: added documentation on outputData/Path/SE specification
atsareg Jun 15, 2026
f0b58b4
feat: improve the docs quality
atsareg Jun 15, 2026
029ed36
feat: added output data jobWrapper tests
atsareg Jul 21, 2026
424b481
fix: make more explicit file list evaluation test
atsareg Jul 21, 2026
90069dd
fix: make the tests independent of the order of reported files
atsareg Jul 21, 2026
fd9d182
fix: try to please docutils
atsareg Jul 21, 2026
19628b3
fix: more precise documentation for file upload
atsareg Aug 25, 2026
c3e6be2
fix: make a better unique list of globbed LFNs
atsareg Aug 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
30 changes: 27 additions & 3 deletions docs/source/UserGuide/GettingStarted/UserJobs/JDLReference/index.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,11 +70,11 @@ In this section all the attributes that can be used in the DIRAC JDL job descrip
+---------------------+---------------------------------------------+-------------------------------------------------------------------------------------+
| *InputDataPolicy* | Job input data policy | InputDataPolicy = ``"DIRAC.WorkloadManagementSystem.Client.DownloadInputData";`` |
+---------------------+---------------------------------------------+-------------------------------------------------------------------------------------+
| *OutputData* | Job output data files | OutputData = ``{"output1","output2"};`` |
| *OutputData* [1] | Job output data files | OutputData = ``{"output1","output2"};`` |
+---------------------+---------------------------------------------+-------------------------------------------------------------------------------------+
| *OutputPath* | The output data path in the File Catalog | OutputPath = ``{"/myjobs/output"};`` |
| *OutputPath* [2] | The output data path in the File Catalog | OutputPath = ``{"/myjobs/output"};`` |
+---------------------+---------------------------------------------+-------------------------------------------------------------------------------------+
| *OutputSE* | The output data Storage Element | OutputSE = ``{"DIRAC-USER"};`` |
| *OutputSE* [3] | The output data Storage Element | OutputSE = ``{"DIRAC-USER"};`` |
+---------------------+---------------------------------------------+-------------------------------------------------------------------------------------+
| |
| :subtitle:`Parametric Jobs` |
Expand All @@ -91,3 +91,27 @@ In this section all the attributes that can be used in the DIRAC JDL job descrip
+---------------------+---------------------------------------------+-------------------------------------------------------------------------------------+
| *ParameterFactor* | Parameter multiplier | ParameterFactor = 1.1; (default 1.) |
+---------------------+---------------------------------------------+-------------------------------------------------------------------------------------+

1. Elements of OutputData can be specified in several forms:

- filenames; in this case files with the specified names will be looked for in the job directory and uploaded
to a location specified by the OutputPath (see below);
- filenames with wild cards, e.g. ``"*.log"`` ; same after the filenames expansion;
- output data specified in a form ``"LFN:/vo/full/destination/path/filename"``; in this case the file ``"filename"``
in the job directory will be uploaded to the specified LFN path without taking into account the OutputPath.
Note that "filename" here can be also specified with wild cards, e.g. ``"LFN:/vo/full/destination/path/*.log"`` .

2. The OutputPath can be specified in several ways

- if not given, it will be taken as the user's home directory + the job directory
for example ``"/lhcb/user/a/atsareg/1234/1234567"``, where 1234567 is the job ID;
- if given as a path starting with "/", it will be appended to the user's home
directory, e.g. outputPath = ``"/my/analysis"`` will make output files to go to the
``"/lhcb/user/a/atsareg/my/analysis"`` directory
- if given as ``"LFN:/output/path"``, it will be taken as an absolute path for
output files in the logical namespace. It is the responsibility of the user to make
sure that this path is accessible for writing for the user's data.
Comment on lines +111 to +113

@fstagni fstagni Aug 7, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would like to double check this. What if the user is indeed "not prevented" to upload to such location, but there are no effective policies preventing it? For example, is a simple user prevented from specifying "LFN:/lhcb/user/a/anotheruser" ?

@marianne013 marianne013 Aug 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What does prevent it now, if anything ? We've been getting around this restriction for ever by using dirac-dms-add-file directly.

@fstagni fstagni Aug 7, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I am not trying to fix the whole loose security system of the grid, because as we know "the tokens will solve that" ™️
But at least we can try to fix one such use case server side.

@marianne013 marianne013 Aug 7, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If you are feeling ambitious ;-). But I have never seen an incident like that.


3. If multiple output SEs are specified, they will be tried one-by-onefor redundancy for each
output file until the first successful file upload. No more than one replica will be created
for each file.
23 changes: 21 additions & 2 deletions src/DIRAC/WorkloadManagementSystem/JobWrapper/JobWrapper.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -951,9 +951,24 @@ def __transferOutputDataFiles(self, outputData, outputSE, outputPath):
else:
nonlfnList.append(out)

# Check whether list of outputData has a globbable pattern
# Check whether the list of LFNs has globbable patterns
globbedLfnList = []
for lfn in lfnList:
lfnPath = os.path.dirname(lfn)
lfnLocal = os.path.basename(lfn)
globbedLfnList += [os.path.join(lfnPath, gLfn) for gLfn in getGlobbedFiles(lfnLocal)]

if globbedLfnList:
globbedLfnList = List.uniqueElements(globbedLfnList)
if globbedLfnList != lfnList:
self.log.info(
"Found a pattern in the output data LFN list, LFNs to upload are:", ", ".join(globbedLfnList)
)
lfnList = globbedLfnList

@fstagni fstagni Aug 26, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

My llm sees the following issues:

  1. No global deduplication: List.uniqueElements is applied per-LFN, but if multiple LFNs have overlapping glob patterns, globbedLfnList can still contain duplicates.
  2. Comparison can fail due to duplicates: globbedLfnList != lfnList might always be True if duplicates inflate the list, even when no useful expansion occurred.
  3. Order not preserved: The result order depends on input order + glob expansion order, which may be inconsistent. [we might ignore this]

Better approach:

globbedLfnList = []
for lfn in lfnList:
    lfnPath = os.path.dirname(lfn)
    lfnLocal = os.path.basename(lfn)
    globbedLfnList += [os.path.join(lfnPath, gLfn) for gLfn in getGlobbedFiles(lfnLocal)]

if globbedLfnList:
    globbedLfnList = List.uniqueElements(globbedLfnList)
    if globbedLfnList != lfnList:
        self.log.info("Found a pattern in the output data LFN list, LFNs to upload are:", ", ".join(globbedLfnList))
        lfnList = globbedLfnList

# Check whether the list of outputData has a globbable pattern
Comment thread
fstagni marked this conversation as resolved.
globbedOutputList = List.uniqueElements(getGlobbedFiles(nonlfnList))
if globbedOutputList != nonlfnList and globbedOutputList:
if globbedOutputList and globbedOutputList != nonlfnList:
self.log.info(
"Found a pattern in the output data file list, files to upload are:", ", ".join(globbedOutputList)
)
Expand Down Expand Up @@ -1113,6 +1128,10 @@ def __getLFNfromOutputFile(self, outputFile, outputPath=""):
# If output path is given, append it to the user path and put output files in this directory
if outputPath.startswith("/"):
outputPath = outputPath[1:]
# If output path is given with the LFN: prefix, take it as an absolute path
elif outputPath.startswith("LFN:"):
outputPath = outputPath[4:]
basePath = ""
Comment on lines +1131 to +1134

@fstagni fstagni Jun 15, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Shouldn't this block be before the previous 2 lines? For the case when outputPath == "LFN:/some/where/some/thing.xyz"

else:
# By default the output path is constructed from the job id
subdir = str(int(self.jobID / 1000))
Expand Down
138 changes: 138 additions & 0 deletions src/DIRAC/WorkloadManagementSystem/JobWrapper/test/Test_JobWrapper.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,7 @@
import shutil
import pytest
from unittest.mock import MagicMock
from pathlib import Path

from DIRAC import gLogger

Expand All @@ -16,6 +17,14 @@

getSystemSectionMock = MagicMock()
getSystemSectionMock.return_value = "aValue"
uploadSandboxMock = MagicMock()
uploadSandboxMock.return_value = {"OK": True}


def uploadFileMockFunc(**kwargs):
destinationSEList = kwargs["destinationSEList"]
return {"OK": True, "Value": {"uploadedSE": destinationSEList[0]}}


gLogger.setLevel("DEBUG")

Expand Down Expand Up @@ -48,6 +57,135 @@ def test_InputData(mocker):
assert res["OK"]


@pytest.fixture
def jobIDPath():
"""Return the path to the job ID file."""
# Create a temporary directory named ./123123/
jobid = "123123"
p = Path(jobid)
if p.exists():
shutil.rmtree(jobid)
p.mkdir()

# Output sandbox files
(p / "std.out").touch()
(p / "std.err").touch()
# Output data files
(p / "00232454_00000244.xml").touch()
(p / "result_dir").mkdir()
(p / "result_dir" / "output.xml").touch()
(p / "result_dir" / "output.txt").touch()
(p / "00232454_00000244_1.sim").touch()
(p / "1720442808testFileUpload.txt").touch()
(p / "testFileUploadFullLFN.txt").touch()

yield int(jobid)

# Remove the temporary directory
shutil.rmtree(jobid)


@pytest.mark.parametrize(
"outputData, outputPath, expectedResult",
[
(
"00232454_00000244.xml",
None,
"/dirac/user/u/unknown/123/123123/00232454_00000244.xml",
),
(
"00232454_00000244*",
None,
[
"/dirac/user/u/unknown/123/123123/00232454_00000244.xml, "
"/dirac/user/u/unknown/123/123123/00232454_00000244_1.sim",
"/dirac/user/u/unknown/123/123123/00232454_00000244_1.sim, "
"/dirac/user/u/unknown/123/123123/00232454_00000244.xml",
],
),
(
"*.txt",
None,
[
"/dirac/user/u/unknown/123/123123/1720442808testFileUpload.txt, "
"/dirac/user/u/unknown/123/123123/testFileUploadFullLFN.txt",
"/dirac/user/u/unknown/123/123123/testFileUploadFullLFN.txt, "
"/dirac/user/u/unknown/123/123123/1720442808testFileUpload.txt",
],
),
(
"00232454_00000244.xml",
"/my_output_dir/00232454",
"/dirac/user/u/unknown/my_output_dir/00232454/00232454_00000244.xml",
),
(
"00232454_00000244.xml",
"LFN:/dirac/prod/00232454",
"/dirac/prod/00232454/00232454_00000244.xml",
),
(
"LFN:/dirac/prod/00232454/00232454_00000244.xml",
None,
"/dirac/prod/00232454/00232454_00000244.xml",
),
(
"LFN:/dirac/prod/00232454/00232454_00000244.xml",
"/my_output_dir/00232454",
"/dirac/prod/00232454/00232454_00000244.xml",
),
(
"result_dir",
None,
[
"/dirac/user/u/unknown/123/123123/output.xml, /dirac/user/u/unknown/123/123123/output.txt",
"/dirac/user/u/unknown/123/123123/output.txt, /dirac/user/u/unknown/123/123123/output.xml",
],
),
(
"result_dir/*.xml",
None,
"/dirac/user/u/unknown/123/123123/output.xml",
),
(
"result_dir/*.xml",
"/my_output_dir/00232454",
"/dirac/user/u/unknown/my_output_dir/00232454/output.xml",
),
],
)
def test_OutputData(mocker, jobIDPath, outputData, outputPath, expectedResult):
mocker.patch(
"DIRAC.WorkloadManagementSystem.JobWrapper.JobWrapper.getSystemSection", side_effect=getSystemSectionMock
)
mocker.patch(
"DIRAC.DataManagementSystem.Client.FailoverTransfer.FailoverTransfer.transferAndRegisterFile",
side_effect=uploadFileMockFunc,
)
mocker.patch(
"DIRAC.WorkloadManagementSystem.Client.SandboxStoreClient.SandboxStoreClient.uploadFilesAsSandboxForJob",
side_effect=uploadSandboxMock,
)

jw = JobWrapper(jobIDPath)
os.chdir(str(jw.jobID))
jw.jobArgs = {
"OutputData": outputData,
"OutputPath": outputPath,
"Owner": "duser",
"OutputSE": "DIRAC-disk",
"OutputSandbox": ["std.out", "std.err"],
}

jw.failedFlag = False
jw.dm = dm_mock
jw.fc = fc_mock

result = jw.processJobOutputs()
os.chdir(jw.root)
assert result["OK"]
assert jw.jobReport.jobParameters[0][1] in expectedResult


def test_performChecks():
wd = Watchdog(
pid=os.getpid(),
Expand Down
Loading