-
Notifications
You must be signed in to change notification settings - Fork 246
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Issue with community docker-compose and jceks keystore #933
Comments
Hello, cannot reproduce it with current community-docker-compose.yml can you provide a compose configuration which exhibit the issue? $ docker compose -f community-docker-compose.yml up -d
$ docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
520de4d86c94 alfresco/alfresco-acs-nginx:3.4.2 "/entrypoint.sh" 3 minutes ago Up 3 minutes 80/tcp, 0.0.0.0:8080->8080/tcp, :::8080->8080/tcp docker-compose-proxy-1
3cdf5cedb60a alfresco/alfresco-transform-core-aio:3.1.0 "/bin/sh -c 'java $J…" 3 minutes ago Up 3 minutes 0.0.0.0:8090->8090/tcp, :::8090->8090/tcp docker-compose-transform-core-aio-1
ab6a76fad21c alfresco/alfresco-share:7.4.0.1 "/usr/local/tomcat/s…" 3 minutes ago Up 3 minutes 8000/tcp, 8080/tcp docker-compose-share-1
0b8c0b3fc2b9 postgres:14.4 "docker-entrypoint.s…" 3 minutes ago Up 3 minutes 0.0.0.0:5432->5432/tcp, :::5432->5432/tcp docker-compose-postgres-1
a2309c32234e alfresco/alfresco-activemq:5.17.1-jre11-rockylinux8 "/bin/sh -c './init.…" 3 minutes ago Up 3 minutes 0.0.0.0:5672->5672/tcp, :::5672->5672/tcp, 0.0.0.0:8161->8161/tcp, :::8161->8161/tcp, 0.0.0.0:61613->61613/tcp, :::61613->61613/tcp, 0.0.0.0:61616->61616/tcp, :::61616->61616/tcp docker-compose-activemq-1
e9f4c7aa2a9b alfresco/alfresco-content-app:4.0.0 "/docker-entrypoint.…" 3 minutes ago Up 3 minutes 8080/tcp docker-compose-content-app-1
1645656d9d0f alfresco/alfresco-content-repository-community:7.4.0.1 "catalina.sh run -se…" 3 minutes ago Up 3 minutes 8000/tcp, 8080/tcp, 10001/tcp docker-compose-alfresco-1
40df315a0839 alfresco/alfresco-search-services:2.0.7 "/bin/sh -c '$DIST_D…" 3 minutes ago Up 3 minutes 10001/tcp, 0.0.0.0:8083->8983/tcp, :::8083->8983/tcp docker-compose-solr6-1 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
It looks like fips mode is being intialized (by default? I don't see anything specifying it).
When the alfresco-content-repository-community-7.4.0 starts, it complains of JCEKS not found.
This is because the openjdk 17 used is apparently defaulting to FIPS mode.
My solution to start the docker compose stack was to add '-Dcom.redhat.fips=false' to the JAVA_OPTS in the docker-compose file. Then the entire stack initializes correctly.
I found this solution in a few different places around the web with some quick googling. Apparently the JCEKS format keystore is not supported in FIPS mode. So the correct solution is to switch to a different keystore type and adjust the docker-compose file.
The text was updated successfully, but these errors were encountered: