Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-21405

Error in wildfly-s2i image when configuring JGroups for SYM and ASYM_ENCRYPT

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Blocker Blocker
    • 39.0.0.Final
    • 40.0.0.Beta1
    • OpenShift
    • None

      I'm using quay.io/wildfly/wildfly-s2i:latest-jdk17 and I see these errors:

      Using openshift launcher.
      2026-01-29 12:02:12 Launching WildFly Server
      INFO Access log is disabled, ignoring configuration.
      INFO Configuring JGroups cluster traffic encryption protocol to SYM_ENCRYPT.
      INFO Configuring JGroups discovery protocol to dns.DNS_PING
      Error applying  CLI script. Embedded server started successfully. The Operations were executed but there were unexpected values. See list of errors in /tmp/cli-script-error-1769688132.cli
      ERROR You have set JGROUPS_CLUSTER_PASSWORD environment variable to configure SYM_ENCRYPT protocol but pbcast.NAKACK2 protocol was not found for TCP stack. Fix your configuration to contain the pbcast.NAKACK2 in the JGroups subsystem for this to happen.
      ERROR You have set JGROUPS_CLUSTER_PASSWORD environment variable to configure SYM_ENCRYPT protocol but pbcast.NAKACK2 protocol was not found for UDP stack. Fix your configuration to contain the pbcast.NAKACK2 in the JGroups subsystem for this to happen.
      

      Same for ASYM_ENCRYPT:

       

      ing openshift launcher.
      2026-01-29 12:18:18 Launching WildFly Server
      INFO Access log is disabled, ignoring configuration.
      INFO Configuring JGroups cluster traffic encryption protocol to ASYM_ENCRYPT.
      WARN Detected missing JGroups encryption configuration, the communication within the cluster will be encrypted using a deprecated version of ASYM_ENCRYPT protocol. You need to set all of these variables to configure ASYM_ENCRYPT using the Elytron keystore: JGROUPS_ENCRYPT_NAME, JGROUPS_ENCRYPT_PASSWORD, JGROUPS_ENCRYPT_KEYSTORE.
      INFO Configuring JGroups discovery protocol to dns.DNS_PING
      Error applying  CLI script. Embedded server started successfully. The Operations were executed but there were unexpected values. See list of errors in /tmp/cli-script-error-1769689098.cli
      ERROR You have set JGROUPS_CLUSTER_PASSWORD environment variable to configure ASYM_ENCRYPT protocol but pbcast.NAKACK2 protocol was not found for TCP stack. Fix your configuration to contain the pbcast.NAKACK2 in the JGroups subsystem for this to happen.
      ERROR You have set JGROUPS_CLUSTER_PASSWORD environment variable to configure ASYM_ENCRYPT protocol but pbcast.NAKACK2 protocol was not found for UDP stack. Fix your configuration to contain the pbcast.NAKACK2 in the JGroups subsystem for this to happen. 

       

       

      This is caused by https://github.com/wildfly/wildfly/commit/083285dbb4#diff-8cc79f22c74a67ba3aeb1d02283424cccaec0d33cba9f1533e20040dc591b0a8 where Jgroups were upgraded to version 5.4. This version introduced multiple protocol changes:

      • pbcast.NAKACK2 -> NACKACK4

      Details:

      https://belaban.blogspot.com/2024/12/jgroups-54-released.html

      https://issues.redhat.com/browse/JGRP-2780

       

      https://github.com/jboss-container-images/jboss-eap-8-openshift-image/blob/eap81-dev/builder-image/tests/features/jgroups.feature contains checks for the removed protocols:

      https://github.com/search?q=repo%3Ajboss-container-images%2Fjboss-eap-8-openshift-image+NAKACK2&type=code

       

              rhn-engineering-rhusar Radoslav Husar
              kanovotn Katerina Odabasi
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: