Upgrade Docker Image to Shibboleth 4

Mon Sep 7 12:57:57 UTC 2020

The CSCFI Image works great, thanks, I just had to add a parameter to 
build.sh to make it silent :

RUN /opt/shibboleth-idp/bin/build.sh -Didp.target.dir=/opt/shibboleth-idp

Now I have another problem that looks like a file or a permission is 
missing (see below for stack trace).

java.io.FileNotFoundException: 
/opt/shibboleth-idp/jetty-base/jetty.state (Permission denied)

Do I have to create this file manually? If so, which permissions should 
I use?

Step 16/16 : RUN /opt/jetty-home/bin/jetty.sh restart
  ---> Running in 23f1215149e6
Stopping Jetty: ERROR: no pid found at /var/run/jetty/jetty.pid
Starting Jetty: 2020-09-07 12:43:59.480:INFO::main: Logging initialized 
@1198ms to org.eclipse.jetty.util.log.StdErrLog
2020-09-07 12:44:00.481:INFO:oejs.SetUIDListener:main: Setting umask=02
2020-09-07 12:44:00.554:INFO:oejs.SetUIDListener:main: Opened 
ServerConnector at 7975d1d8{SSL, (ssl, alpn, h2)}{0.0.0.0:8443}
2020-09-07 12:44:00.557:INFO:oejs.SetUIDListener:main: Opened 
ServerConnector at 18f8cd79{HTTP/1.1, (http/1.1, h2c)}{0.0.0.0:8080}
2020-09-07 12:44:00.558:INFO:oejs.SetUIDListener:main: Setting UID=1000
2020-09-07 12:44:00.576:WARN:oejuc.FileNoticeLifeCycleListener:main:
java.io.FileNotFoundException: 
/opt/shibboleth-idp/jetty-base/jetty.state (Permission denied)
     at java.base/java.io.FileOutputStream.open0(Native Method)
     at java.base/java.io.FileOutputStream.open(FileOutputStream.java:298)
     at java.base/java.io.FileOutputStream.<init>(FileOutputStream.java:237)
     at java.base/java.io.FileOutputStream.<init>(FileOutputStream.java:158)
     at java.base/java.io.FileWriter.<init>(FileWriter.java:82)
     at 
org.eclipse.jetty.util.component.FileNoticeLifeCycleListener.writeState(FileNoticeLifeCycleListener.java:44)
     at 
org.eclipse.jetty.util.component.FileNoticeLifeCycleListener.lifeCycleStarting(FileNoticeLifeCycleListener.java:57)
     at 
org.eclipse.jetty.util.component.AbstractLifeCycle.setStarting(AbstractLifeCycle.java:204)
     at 
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:71)
     at 
org.eclipse.jetty.xml.XmlConfiguration.lambda$main$1(XmlConfiguration.java:1929)
     at java.base/java.security.AccessController.doPrivileged(Native Method)
     at 
org.eclipse.jetty.xml.XmlConfiguration.main(XmlConfiguration.java:1878)
     at 
java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native 
Method)
     at 
java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
     at 
java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
     at java.base/java.lang.reflect.Method.invoke(Method.java:566)
     at org.eclipse.jetty.start.Main.invokeMain(Main.java:218)
     at org.eclipse.jetty.start.Main.start(Main.java:491)
     at org.eclipse.jetty.start.Main.main(Main.java:77)
2020-09-07 12:44:00.586:INFO:oejs.Server:main: jetty-9.4.29.v20200521; 
built: 2020-05-21T17:20:40.598Z; git: 
77c232aed8a45c818fd27232278d9f95a021095e; jvm 11.0.7+11-alpine-r1
2020-09-07 12:44:00.613:INFO:oejdp.ScanningAppProvider:main: Deployment 
monitor [file:///opt/shibboleth-idp/jetty-base/webapps/] at interval 1
. . 2020-09-07 12:44:08.127:INFO:oeja.AnnotationConfiguration:main: 
Scanning elapsed time=4429ms
2020-09-07 12:44:08.802:INFO:oejshC.idp:main: No Spring 
WebApplicationInitializer types detected on classpath
2020-09-07 12:44:09.454:INFO:oejs.session:main: DefaultSessionIdManager 
workerName=node0
2020-09-07 12:44:09.456:INFO:oejs.session:main: No SessionScavenger set, 
using defaults
2020-09-07 12:44:09.461:INFO:oejs.session:main: node0 Scavenging every 
600000ms
2020-09-07 12:44:09.517:INFO:oejshC.idp:main: Initializing Spring root 
WebApplicationContext
. . Warning: Nashorn engine is planned to be removed from a future JDK 
release
. . Warning: Nashorn engine is planned to be removed from a future JDK 
release
. . 2020-09-07 12:44:31.630:INFO:oejshC.idp:main: Initializing Spring 
DispatcherServlet 'idp'
2020-09-07 12:44:34.098:INFO:oejsh.ContextHandler:main: Started 
o.e.j.w.WebAppContext at 29a5f4e7{Shibboleth Identity 
Provider,/idp,[file:///tmp/jetty-0_0_0_0-8443-idp_war-_idp-any-2395631551190150044.dir/webinf/, 
jar:file:///opt/shibboleth-idp/war/idp.war!/],AVAILABLE}{/opt/shibboleth-idp/war/idp.war}
2020-09-07 12:44:34.144:INFO:oejus.SslContextFactory:main: 
x509=X509 at 46f77687(jetty,h=[jetty.eclipse.org],w=[]) for 
Server at 74948d11[provider=null,keyStore=file:///opt/shibboleth-idp/jetty-base/etc/keystore,trustStore=file:///opt/shibboleth-idp/jetty-base/etc/keystore]
2020-09-07 12:44:34.167:INFO:oejus.SslContextFactory:main: 
x509=X509 at 9aa9e4a(mykey,h=[],w=[]) for 
Server at 74948d11[provider=null,keyStore=file:///opt/shibboleth-idp/jetty-base/etc/keystore,trustStore=file:///opt/shibboleth-idp/jetty-base/etc/keystore]
2020-09-07 12:44:34.255:INFO:oejs.AbstractConnector:main: Started 
ServerConnector at 7975d1d8{SSL, (ssl, alpn, h2)}{0.0.0.0:8443}
2020-09-07 12:44:34.268:INFO:oejs.AbstractConnector:main: Started 
ServerConnector at 18f8cd79{HTTP/1.1, (http/1.1, h2c)}{0.0.0.0:8080}
2020-09-07 12:44:34.269:INFO:oejs.Server:main: Started @35987ms
2020-09-07 12:44:34.269:WARN:oejuc.FileNoticeLifeCycleListener:main:
java.io.FileNotFoundException: 
/opt/shibboleth-idp/jetty-base/jetty.state (Permission denied)
     at java.base/java.io.FileOutputStream.open0(Native Method)
     at java.base/java.io.FileOutputStream.open(FileOutputStream.java:298)
     at java.base/java.io.FileOutputStream.<init>(FileOutputStream.java:237)
     at java.base/java.io.FileOutputStream.<init>(FileOutputStream.java:158)
     at java.base/java.io.FileWriter.<init>(FileWriter.java:82)
     at 
org.eclipse.jetty.util.component.FileNoticeLifeCycleListener.writeState(FileNoticeLifeCycleListener.java:44)
     at 
org.eclipse.jetty.util.component.FileNoticeLifeCycleListener.lifeCycleStarted(FileNoticeLifeCycleListener.java:63)
     at 
org.eclipse.jetty.util.component.AbstractLifeCycle.setStarted(AbstractLifeCycle.java:193)
     at 
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
     at 
org.eclipse.jetty.xml.XmlConfiguration.lambda$main$1(XmlConfiguration.java:1929)
     at java.base/java.security.AccessController.doPrivileged(Native Method)
     at 
org.eclipse.jetty.xml.XmlConfiguration.main(XmlConfiguration.java:1878)
     at 
java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native 
Method)
     at 
java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
     at 
java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
     at java.base/java.lang.reflect.Method.invoke(Method.java:566)
     at org.eclipse.jetty.start.Main.invokeMain(Main.java:218)
     at org.eclipse.jetty.start.Main.start(Main.java:491)
     at org.eclipse.jetty.start.Main.main(Main.java:77)

Le 07/09/2020 à 11:20, Ian Young a écrit :
>
>> On 2020-09-07, at 09:25, Julien Cochennec <julien.cochennec at ac-orleans-tours.fr> wrote:
>>
>> Hi, Id 'like to test the Docker image for Shibboleth IDP 4.
>>
>> I'm using this : https://hub.docker.com/r/unicon/shibboleth-idp/dockerfile
>>
> This particular image, from Unicon, doesn't seem to be maintained any more. As you've noted, it is in any case for IdP V3 and not even the most recent version of that.
>
>
>> Can I change those values to build an IDP V4 Docker image?
> Perhaps in principle. As Alan says, you need to fix all the prerequisites, not just the IdP version.
>
> Given that this image no longer seems to be maintained, though, it might be easier to start with one of the forks, e.g. the one from csc.fi:
>
>      Image: https://hub.docker.com/r/cscfi/shibboleth-idp
>      Source: https://github.com/CSCfi/shibboleth-idp-dockerized
>
> There's also the InCommon TIER image:
>
>      https://hub.docker.com/r/tier/shib-idp
>
> Read this page for more details:
>
>      https://spaces.at.internet2.edu/display/ITAP/InCommon+Trusted+Access+Platform+Release
>
> These are actively maintained and kept pretty well up to date.
>
>
>> If so, what will I need to do to build a v4 SP from this https://hub.docker.com/r/unicon/shibboleth-sp/dockerfile ?
>>
> Version numbers for the IdP and SP are not connected. The latest version of the SP is 3.1.0; there is no V4 at this time.
>
>
>      -- Ian
>
>
>
>
>
-- 
Julien Cochennec
Pôle de compétences - gestion des identités

Mél julien.cochennec at ac-orleans-tours.fr
Tél 02 38 83 48 88

DSI - Rectorat d'Orléans-Tours
10 Rue Molière
45000 Orléans
www.ac-orleans-tours.fr

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20200907/bffbbe6b/attachment.htm>