Uploaded image for project: 'RH-SSO'
  1. RH-SSO
  2. RHSSO-1889

[RH-SSO 7.4.41+ images] Add pre-launch check verifying 0775 permissions of ${JBOSS_HOME}/modules directory

XMLWordPrintable

    • False
    • False
    • User Experience
    • Workaround Exists
    • Hide

      Deploy custom module more below (under the /base subdirectory of the "${JBOSS_HOME}" directory):

      sh-4.4$ stat -c %a /opt/eap/modules/system/layers      
755
sh-4.4$ stat -c %a /opt/eap/modules/system/layers/base/
775
      Show
      Deploy custom module more below (under the /base subdirectory of the "${JBOSS_HOME}" directory): sh-4.4$ stat -c %a /opt/eap/modules/system/layers 755 sh-4.4$ stat -c %a /opt/eap/modules/system/layers/base/ 775
    • Hide
      1. Run RH-SSO 7.4-41 or newer release of the RH-SSO 7.4 container image on OpenShift.
      2. Try to create new directory under "${JBOSS_HOME}/modules" patch.

      How Reproducible:
      Always 

      Current Result:

      sh-4.4$ mkdir -pv /opt/eap/modules/com/microsoft/main
mkdir: cannot create directory '/opt/eap/modules/com': Permission denied

      Expected Result:
      Custom (sub)directory under "${JBOSS_HOME}/modules" is created correctly.

      Show
      Run RH-SSO 7.4-41 or newer release of the RH-SSO 7.4 container image on OpenShift. Try to create new directory under "${JBOSS_HOME}/modules" patch. How Reproducible: Always  Current Result: sh-4.4$ mkdir -pv /opt/eap/modules/com/microsoft/main mkdir: cannot create directory '/opt/eap/modules/com': Permission denied Expected Result: Custom (sub)directory under " ${JBOSS_HOME}/modules " is created correctly.

      Starting from RH-SSO 7.4-41 release of the RH-SSO container image the permissions of "$\JBOSS_HOME}/modules" directory changed (got reduced) from former 0775 mode to 0755 mode.

      This change is caused by version bump of the cct_module from 0.39.3 tag to 0.39.5 tag. See further analysis in the original report for additional details.

      As a side effect of this change, it is not possible to apply custom / additional JBoss modules directly under the "${JBOSS_HOME}/modules" location (directory path).

      Only possible workaround is to apply these modules below the directory structure into "${JBOSS_HOME}/modules/system/layers/base/" directory path.

      Since this change is breaking UX seen in RH-SSO 7.4-40 and earlier versions, and UX seen in RH-SSO 7.5.0+ container images, IMHO we should revert (fix) the permissions back to the original "0775" mode.

              rh_vmuzikar Václav Muzikář
              rhn-jlieskov Ján Lieskovský (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: