docker-mid-server icon indicating copy to clipboard operation
docker-mid-server copied to clipboard

incorrect permissions on log4j-core.jar

Open fivovic opened this issue 3 years ago • 1 comments

Deploying rome.latest fails during the upgrade step due to root:root permissions on /opt/agent/lib/log4j-core.jar:

/opt/agent/logs/dist_upgrade.log.0 shows:

09/05/22 08:34:34 (936)  |  INFO  |  /opt/agent/lib/log4j-core.jar cannot be deleted: /opt/agent/lib/log4j-core.jar (Permission denied)
586706ms left to timeout for deleting files. Retrying in 1000ms...
09/05/22 08:34:35 (937)  |  INFO  |  /opt/agent/lib/log4j-core.jar cannot be deleted: /opt/agent/lib/log4j-core.jar (Permission denied)
585705ms left to timeout for deleting files. Retrying in 1000ms...

Loops for 300s, resulting in container death:

DOCKER MONITOR: /opt/agent/logs/agent0.log.0 last updated 320 sec ago
DOCKER MONITOR: /opt/agent/logs/agent0.log.0 was not updated for 300sec, MID server potentially frozen.
DOCKER MONITOR: Stopping MID server process 1 now!
DOCKER: Stop MID server
ServiceNow MID Server is not running.

Permissions within /opt/agent/lib/:

-rwxr-xr-x.  1 mid  mid    301872 Jul 21 12:39 log4j-api.jar
-rwxr-xr-x.  1 root root  1770485 Jul 30 20:17 log4j-core.jar
-rwxr-xr-x.  1 mid  mid     23702 Jul 21 12:39 log4j-over-slf4j.jar

I suspect line 63 is the cause due to running after a chown -R mid:mid /opt/* on line 33:

https://github.com/bmoers/docker-mid-server/blob/a8c0d4bd13cc313981a1eb7ccd98f64baf33efec/docker/Dockerfile#L63

Adding this line below 63 and rebuilding the image does resolve the issue:

RUN chown mid:mid /opt/agent/lib/log4j-core*.jar

It is likely there is a more elegant solution, but this has worked for us.

fivovic avatar Sep 05 '22 10:09 fivovic

Experiencing the same issue with :rome, :sandiego and :tokyo.

Had to install with :quebec to be able to have ServiceNow upgrade to the correct version of the MID server.

EricTherrien avatar Dec 10 '22 20:12 EricTherrien