Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-12897

Migration fails when vault is configured

XMLWordPrintable

      When password vault is configured in EAP 6.4 like:

      <vault>
        <vault-option name="KEYSTORE_URL" value="${jboss.home.dir}/vault/vault.keystore"/>
        <vault-option name="KEYSTORE_PASSWORD" value="MASK-5dOaAVafCSd"/>
        <vault-option name="KEYSTORE_ALIAS" value="vault"/>
        <vault-option name="SALT" value="1234abcd"/>
        <vault-option name="ITERATION_COUNT" value="120"/>
        <vault-option name="ENC_FILE_DIR" value="${jboss.home.dir}/vault/"/>
      </vault>
      

      miguration from EAP 6.4 to EAP 7.0 fails because the embed-server is unable to start due to missing the vault files:

      2017-08-30 16:46:44,984 ERROR [management-operation] WFLYCTL0013: Operation ("add") failed - address: ([("core-service" => "vault")]): java.lang.RuntimeException: WFLYSRV0076: Error initializing vault --  org.jboss.as.server.services.security.VaultReaderException: WFLYSRV0227: Vault Reader Exception:
              at org.jboss.as.server.services.security.VaultAddHandler.performRuntime(VaultAddHandler.java:86) [wildfly-server-2.1.2.Final-redhat-1.jar:2.1.2.Final-redhat-1]
              at org.jboss.as.controller.AbstractAddStepHandler.performRuntime(AbstractAddStepHandler.java:337) [wildfly-controller-2.1.2.Final-redhat-1.jar:2.1.2.Final-redhat-1]
              at org.jboss.as.controller.AbstractAddStepHandler$1.execute(AbstractAddStepHandler.java:151) [wildfly-controller-2.1.2.Final-redhat-1.jar:2.1.2.Final-redhat-1]
              at org.jboss.as.controller.AbstractOperationContext.executeStep(AbstractOperationContext.java:890) [wildfly-controller-2.1.2.Final-redhat-1.jar:2.1.2.Final-redhat-1]
              at org.jboss.as.controller.AbstractOperationContext.processStages(AbstractOperationContext.java:659) [wildfly-controller-2.1.2.Final-redhat-1.jar:2.1.2.Final-redhat-1]
              at org.jboss.as.controller.AbstractOperationContext.executeOperation(AbstractOperationContext.java:370) [wildfly-controller-2.1.2.Final-redhat-1.jar:2.1.2.Final-redhat-1]
              at org.jboss.as.controller.OperationContextImpl.executeOperation(OperationContextImpl.java:1344) [wildfly-controller-2.1.2.Final-redhat-1.jar:2.1.2.Final-redhat-1]
              at org.jboss.as.controller.ModelControllerImpl.boot(ModelControllerImpl.java:485) [wildfly-controller-2.1.2.Final-redhat-1.jar:2.1.2.Final-redhat-1]
              at org.jboss.as.controller.AbstractControllerService.boot(AbstractControllerService.java:387) [wildfly-controller-2.1.2.Final-redhat-1.jar:2.1.2.Final-redhat-1]
              at org.jboss.as.controller.AbstractControllerService.boot(AbstractControllerService.java:349) [wildfly-controller-2.1.2.Final-redhat-1.jar:2.1.2.Final-redhat-1]
              at org.jboss.as.server.ServerService.boot(ServerService.java:392) [wildfly-server-2.1.2.Final-redhat-1.jar:2.1.2.Final-redhat-1]
              at org.jboss.as.server.ServerService.boot(ServerService.java:365) [wildfly-server-2.1.2.Final-redhat-1.jar:2.1.2.Final-redhat-1]
              at org.jboss.as.controller.AbstractControllerService$1.run(AbstractControllerService.java:299) [wildfly-controller-2.1.2.Final-redhat-1.jar:2.1.2.Final-redhat-1]
              at java.lang.Thread.run(Thread.java:748) [rt.jar:1.8.0_141]
      Caused by: org.jboss.as.server.services.security.VaultReaderException: WFLYSRV0227: Vault Reader Exception:
              at org.jboss.as.server.services.security.RuntimeVaultReader.createVault(RuntimeVaultReader.java:98) [wildfly-server-2.1.2.Final-redhat-1.jar:2.1.2.Final-redhat-1]
              at org.jboss.as.server.services.security.VaultAddHandler.performRuntime(VaultAddHandler.java:84) [wildfly-server-2.1.2.Final-redhat-1.jar:2.1.2.Final-redhat-1]
              ... 13 more
      Caused by: org.jboss.security.vault.SecurityVaultException: java.lang.RuntimeException: PBOX00140: Unable to get keystore (/opt/jboss-eap-7.0.0/vault/vault.keystore)
              at org.picketbox.plugins.vault.PicketBoxSecurityVault.init(PicketBoxSecurityVault.java:210) [picketbox-4.9.6.Final-redhat-1.jar:4.9.6.Final-redhat-1]
              at org.jboss.as.server.services.security.RuntimeVaultReader.createVault(RuntimeVaultReader.java:96) [wildfly-server-2.1.2.Final-redhat-1.jar:2.1.2.Final-redhat-1]
              ... 14 more
      Caused by: java.lang.RuntimeException: PBOX00140: Unable to get keystore (/opt/jboss-eap-7.0.0/vault/vault.keystore)
              at org.picketbox.plugins.vault.PicketBoxSecurityVault.getKeyStore(PicketBoxSecurityVault.java:691) [picketbox-4.9.6.Final-redhat-1.jar:4.9.6.Final-redhat-1]
              at org.picketbox.plugins.vault.PicketBoxSecurityVault.init(PicketBoxSecurityVault.java:205) [picketbox-4.9.6.Final-redhat-1.jar:4.9.6.Final-redhat-1]
              ... 15 more
      Caused by: java.io.FileNotFoundException: /opt/jboss-eap-7.0.0/vault/vault.keystore (No such file or directory)
              at java.io.FileInputStream.open0(Native Method) [rt.jar:1.8.0_141]
              at java.io.FileInputStream.open(FileInputStream.java:195) [rt.jar:1.8.0_141]
              at java.io.FileInputStream.<init>(FileInputStream.java:138) [rt.jar:1.8.0_141]
              at org.picketbox.util.KeyStoreUtil.getKeyStore(KeyStoreUtil.java:150) [picketbox-4.9.6.Final-redhat-1.jar:4.9.6.Final-redhat-1]
              at org.picketbox.plugins.vault.PicketBoxSecurityVault.getKeyStore(PicketBoxSecurityVault.java:688) [picketbox-4.9.6.Final-redhat-1.jar:4.9.6.Final-redhat-1]
              ... 16 more
      
      2017-08-30 16:46:44,994 FATAL [server] WFLYSRV0056: Server boot has failed in an unrecoverable manner; exiting. See previous messages for details.
      2017-08-30 16:46:45,035 INFO  [as] WFLYSRV0050: JBoss EAP 7.0.0.GA (WildFly Core 2.1.2.Final-redhat-1) stopped in 23ms
      2017-08-30 16:46:45,051 ERROR [logger] Migration failed: org.jboss.migration.core.ServerMigrationFailureException: java.lang.IllegalStateException: WFLYEMB0022: Cannot invoke 'start' on embedded process
              at org.jboss.migration.core.task.TaskExecutionImpl.run(TaskExecutionImpl.java:174) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.core.task.TaskExecutionImpl.execute(TaskExecutionImpl.java:159) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.core.task.TaskContextImpl.execute(TaskContextImpl.java:68) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.core.task.TaskContextImpl.execute(TaskContextImpl.java:32) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.wfly10.config.task.ServerConfigurationsMigration$Task$1.onYes(ServerConfigurationsMigration.java:139) [jboss-server-migration-wildfly10.0-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.core.console.UserConfirmation.execute(UserConfirmation.java:76) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.wfly10.config.task.ServerConfigurationsMigration$Task.confirmConfig(ServerConfigurationsMigration.java:148) [jboss-server-migration-wildfly10.0-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.wfly10.config.task.ServerConfigurationsMigration$Task.confirmAllConfigs(ServerConfigurationsMigration.java:128) [jboss-server-migration-wildfly10.0-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.wfly10.config.task.ServerConfigurationsMigration$Task.run(ServerConfigurationsMigration.java:104) [jboss-server-migration-wildfly10.0-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.core.task.TaskExecutionImpl.run(TaskExecutionImpl.java:169) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.core.task.TaskExecutionImpl.execute(TaskExecutionImpl.java:159) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.core.task.TaskContextImpl.execute(TaskContextImpl.java:68) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.core.task.TaskContextImpl.execute(TaskContextImpl.java:32) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.wfly10.config.task.StandaloneServerMigration$1.run(StandaloneServerMigration.java:59) [jboss-server-migration-wildfly10.0-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.core.console.UserConfirmationServerMigrationTask.runTask(UserConfirmationServerMigrationTask.java:58) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.core.console.UserConfirmationServerMigrationTask.confirmTaskRun(UserConfirmationServerMigrationTask.java:50) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.core.console.UserConfirmationServerMigrationTask.run(UserConfirmationServerMigrationTask.java:63) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.core.env.SkippableByEnvServerMigrationTask.run(SkippableByEnvServerMigrationTask.java:47) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.core.task.TaskExecutionImpl.run(TaskExecutionImpl.java:169) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.core.task.TaskExecutionImpl.execute(TaskExecutionImpl.java:159) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.core.task.TaskContextImpl.execute(TaskContextImpl.java:68) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.core.task.TaskContextImpl.execute(TaskContextImpl.java:32) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.wfly10.config.task.ServerMigration.run(ServerMigration.java:45) [jboss-server-migration-wildfly10.0-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.wfly10.WildFlyServer10.migrate(WildFlyServer10.java:47) [jboss-server-migration-wildfly10.0-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.core.ServerMigration$1.run(ServerMigration.java:153) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.core.task.TaskExecutionImpl.run(TaskExecutionImpl.java:169) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.core.ServerMigration.run(ServerMigration.java:160) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.cli.CommandLineServerMigration.main(CommandLineServerMigration.java:114) [jboss-server-migration-cli-1.0.1.Final.jar:1.0.1.Final]
      Caused by: java.lang.IllegalStateException: WFLYEMB0022: Cannot invoke 'start' on embedded process
              at org.wildfly.core.embedded.EmbeddedManagedProcessImpl.invokeOnServer(EmbeddedManagedProcessImpl.java:93) [wildfly-embedded-3.0.0.Beta31.jar:3.0.0.Beta31]
              at org.wildfly.core.embedded.EmbeddedManagedProcessImpl.start(EmbeddedManagedProcessImpl.java:55) [wildfly-embedded-3.0.0.Beta31.jar:3.0.0.Beta31]
              at org.jboss.migration.wfly10.config.management.impl.EmbeddedStandaloneServerConfiguration.startConfiguration(EmbeddedStandaloneServerConfiguration.java:73) [jboss-server-migration-wildfly10.0-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.wfly10.config.management.impl.AbstractManageableServerConfiguration.start(AbstractManageableServerConfiguration.java:67) [jboss-server-migration-wildfly10.0-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.wfly10.config.task.ServerConfigurationMigration$1.run(ServerConfigurationMigration.java:97) [jboss-server-migration-wildfly10.0-1.0.1.Final.jar:1.0.1.Final]
              at org.jboss.migration.core.task.TaskExecutionImpl.run(TaskExecutionImpl.java:169) [jboss-server-migration-core-1.0.1.Final.jar:1.0.1.Final]
              ... 27 more
      Caused by: org.wildfly.core.embedded.EmbeddedProcessStartException: WFLYEMB0021: Cannot start embedded process
              at org.wildfly.core.embedded.EmbeddedStandaloneServerFactory$StandaloneServerImpl.start(EmbeddedStandaloneServerFactory.java:321) [wildfly-embedded-3.0.0.Beta31.jar:3.0.0.Beta31]
              at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.8.0_141]
              at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) [rt.jar:1.8.0_141]
              at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.8.0_141]
              at java.lang.reflect.Method.invoke(Method.java:498) [rt.jar:1.8.0_141]
              at org.wildfly.core.embedded.EmbeddedManagedProcessImpl.invokeOnServer(EmbeddedManagedProcessImpl.java:81) [wildfly-embedded-3.0.0.Beta31.jar:3.0.0.Beta31]
              ... 32 more
      Caused by: java.util.concurrent.ExecutionException: Operation failed
              at org.jboss.threads.AsyncFutureTask.operationFailed(AsyncFutureTask.java:74) [jboss-threads-2.2.1.Final.jar:2.2.1.Final]
              at org.jboss.threads.AsyncFutureTask.get(AsyncFutureTask.java:268) [jboss-threads-2.2.1.Final.jar:2.2.1.Final]
              at org.wildfly.core.embedded.EmbeddedStandaloneServerFactory$StandaloneServerImpl.start(EmbeddedStandaloneServerFactory.java:302) [wildfly-embedded-3.0.0.Beta31.jar:3.0.0.Beta31]
              ... 37 more
      Caused by: java.lang.Exception: WFLYSRV0056: Server boot has failed in an unrecoverable manner; exiting. See previous messages for details.
              at org.jboss.as.server.BootstrapListener.bootFailure(BootstrapListener.java:87) [wildfly-server-3.0.0.Beta31.jar:3.0.0.Beta31]
              at org.jboss.as.server.ServerService.boot(ServerService.java:384) [wildfly-server-3.0.0.Beta31.jar:3.0.0.Beta31]
              at org.jboss.as.controller.AbstractControllerService$1.run(AbstractControllerService.java:299) [wildfly-controller-3.0.0.Beta31.jar:3.0.0.Beta31]
              at java.lang.Thread.run(Thread.java:748) [rt.jar:1.8.0_141]
      
      2017-08-30 16:46:45,067 INFO  [logger] 
      ------------------------------------------------------------------------------------------------------------
       Task Summary
      ------------------------------------------------------------------------------------------------------------
      
       server ............................................................................................ FAIL
        standalone ....................................................................................... FAIL
         standalone-configurations ....................................................................... FAIL
          standalone-configuration(source=/opt/jboss-eap-6.4.0/standalone/configuration/standalone.xml) .. FAIL
      
      ------------------------------------------------------------------------------------------------------------
       Migration Result: FAIL
      ------------------------------------------------------------------------------------------------------------
      

      As a workaround, copying the vault keystore (${jboss.home.dir}/vault/vault.keystore) and the encrypted files under directory (${jboss.home.dir}/vault/) are required before executing the migration tool.

              emartins@redhat.com Eduardo Martins
              okotek@redhat.com Ondrej Kotek
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: