[UBI] openjdk 11 UBI image & s2i-maven, jolokia errors

[Nigel Jones]

Thanks for forwarding Scott,& the clear explanation Jonathan.

That's a super answer -- in fact it re-enforces why we wanted to move to a
supported image :-)

My only question would be just how to know when the update happens?
Presumably it will be announced here?

Thanks
Nigel

On Tue, 15 Sep 2020 at 09:19, Jonathan Dowland <jdowland at redhat.com> wrote:

> Hi Scott, thanks for passing this on.
>
> The good news is these are two known issues that we are going to resolve
> in a release in the very near future.
>
>  • https://issues.redhat.com/browse/OPENJDK-45 (Jolokia illegal
>  reflective access) - being resolved by dropping Jolokia
>
>  • https://issues.redhat.com/browse/CLOUD-3387
>    (s2i/run attempts to source missing scl-enable-maven)
>
> The next OpenJDK cumulative patch update is due in late October. We will
> release a new container image with fixes for the above two issues (and
> more) approx. a week later — this is so that folks who want a bit more
> time with the bundled Jolokia get the updated OpenJDK in a micro-version
> update before we remove it, and they have a little more breathing room
> to plan a migration without worrying about unpatched CVEs at the same
> time.
>
> Nigel if you have any further questions please just ask!
>
> On Mon, Sep 14, 2020 at 05:43:02PM -0400, Scott McCarty wrote:
> > Pulling Johnathan and Ezekial in who might better know...
> >
> > On Mon, Sep 14, 2020 at 11:37 AM Nigel Jones <nigel at cherrybyte.me.uk>
> wrote:
> >
> > > I should add that our app (which has been put by maven into the
> > > target/assembly directory) is already built/packaged at this point -
> we are
> > > not using S2I
> > >
> > > On Mon, 14 Sep 2020 at 16:34, Nigel Jones <nigel at cherrybyte.me.uk>
> wrote:
> > >
> > >> I've just started trying to use the open jdk 11 UBI-8 image, and have
> my
> > >> java app launching ok
> > >>
> > >> However when launched I see:
> > >>
> > >> jonesn:egeria/ (issue3580) $ docker run egeria
> > >>
> > >>
> > >>
> > >>
> [16:07:29]
> > >> /usr/local/s2i/run: line 15:
> > >> /opt/jboss/container/maven/default//scl-enable-maven: No such file or
> > >> directory
> > >> Starting the Java application using
> > >> /opt/jboss/container/java/run/run-java.sh ...
> > >> INFO exec  java
> > >>
> -javaagent:/usr/share/java/jolokia-jvm-agent/jolokia-jvm.jar=config=/opt/jboss/container/jolokia/etc/jolokia.properties
> > >> -XX:+UseParallelOldGC -XX:MinHeapFreeRatio=10 -XX:MaxHeapFreeRatio=20
> > >> -XX:GCTimeRatio=4 -XX:AdaptiveSizePolicyWeight=90
> -XX:MaxMetaspaceSize=100m
> > >> -XX:+ExitOnOutOfMemoryError -cp "." -jar
> > >> /deployments/server/server-chassis-spring-2.3-SNAPSHOT.jar
> > >> WARNING: An illegal reflective access operation has occurred
> > >> WARNING: Illegal reflective access by org.jolokia.util.ClassUtil
> > >> (file:/usr/share/java/jolokia-jvm-agent/jolokia-jvm.jar) to
> constructor
> > >>
> sun.security.x509.X500Name(java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String)
> > >> WARNING: Please consider reporting this to the maintainers of
> > >> org.jolokia.util.ClassUtil
> > >> WARNING: Use --illegal-access=warn to enable warnings of further
> illegal
> > >> reflective access operations
> > >> WARNING: All illegal access operations will be denied in a future
> release
> > >> I> No access restrictor found, access to any MBean is allowed
> > >> Jolokia: Agent started with URL https://172.17.0.2:8778/jolokia/
> > >>  ODPi Egeria
> > >>
> > >> ^^ last line is our app.
> > >>
> > >> The key parts of the dockerfile are:
> > >>
> > >> FROM registry.access.redhat.com/ubi8/openjdk-11
> > >>
> > >> ARG version=2.3-SNAPSHOT
> > >>
> > >> COPY target/assembly /deployments
> > >>
> > >> ENV JAVA_APP_JAR=server/server-chassis-spring-${version}.jar
> > >> ENV JAVA_LIBDIR=${JAVA_APP_DIR}/server/lib
> > >>
> > >>
> > >> I'm going to research more about Jolokia (new to me) and S2I..  these
> > >> warnings aren't preventing the app from working, but may concern
> anyone
> > >> running them so I'd like to keep
> > >> things clean if at all possible.
> > >>
> > >> Any pointers welcomed!
> > >>
> > >> Thanks
> > >> Nigel Jones (planetf1)
> > >> ODPi Egeria maintainer
> > >> --
> > >> ----
> > >> Nigel Jones
> > >>
> > >
> > >
> > > --
> > > ----
> > > Nigel Jones
> > > _______________________________________________
> > > Ubi mailing list
> > > Ubi at redhat.com
> > > https://www.redhat.com/mailman/listinfo/ubi
> > >
> >
> >
> > --
> >
> > --
> >
> > A First Look at The Podman 2.0 API:
> > http://crunchtools.com/a-first-look-at-the-podman-2-0-api/
> > <http://crunchtools.com/comparison-linux-container-images/>--
> > --
> >
> > Scott McCarty
> > Product Management - Containers, Red Hat Enterprise Linux & OpenShift
> > Email: smccarty at redhat.com
> > Phone: 312-660-3535
> > Cell: 330-807-1043
> > Web: http://crunchtools.com
>
> --
> 👱🏻 Jonathan Dowland <jdowland at redhat.com>
> Senior Software Engineer, OpenJDK, Red Hat
>
>

-- 
----
Nigel Jones
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/ubi/attachments/20200915/e7ae81b0/attachment.htm>