Open ghstridr opened 1 year ago
Hello,
cannot reproduce it with current community-docker-compose.yml
can you provide a compose configuration which exhibit the issue?
$ docker compose -f community-docker-compose.yml up -d
$ docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
520de4d86c94 alfresco/alfresco-acs-nginx:3.4.2 "/entrypoint.sh" 3 minutes ago Up 3 minutes 80/tcp, 0.0.0.0:8080->8080/tcp, :::8080->8080/tcp docker-compose-proxy-1
3cdf5cedb60a alfresco/alfresco-transform-core-aio:3.1.0 "/bin/sh -c 'java $J…" 3 minutes ago Up 3 minutes 0.0.0.0:8090->8090/tcp, :::8090->8090/tcp docker-compose-transform-core-aio-1
ab6a76fad21c alfresco/alfresco-share:7.4.0.1 "/usr/local/tomcat/s…" 3 minutes ago Up 3 minutes 8000/tcp, 8080/tcp docker-compose-share-1
0b8c0b3fc2b9 postgres:14.4 "docker-entrypoint.s…" 3 minutes ago Up 3 minutes 0.0.0.0:5432->5432/tcp, :::5432->5432/tcp docker-compose-postgres-1
a2309c32234e alfresco/alfresco-activemq:5.17.1-jre11-rockylinux8 "/bin/sh -c './init.…" 3 minutes ago Up 3 minutes 0.0.0.0:5672->5672/tcp, :::5672->5672/tcp, 0.0.0.0:8161->8161/tcp, :::8161->8161/tcp, 0.0.0.0:61613->61613/tcp, :::61613->61613/tcp, 0.0.0.0:61616->61616/tcp, :::61616->61616/tcp docker-compose-activemq-1
e9f4c7aa2a9b alfresco/alfresco-content-app:4.0.0 "/docker-entrypoint.…" 3 minutes ago Up 3 minutes 8080/tcp docker-compose-content-app-1
1645656d9d0f alfresco/alfresco-content-repository-community:7.4.0.1 "catalina.sh run -se…" 3 minutes ago Up 3 minutes 8000/tcp, 8080/tcp, 10001/tcp docker-compose-alfresco-1
40df315a0839 alfresco/alfresco-search-services:2.0.7 "/bin/sh -c '$DIST_D…" 3 minutes ago Up 3 minutes 10001/tcp, 0.0.0.0:8083->8983/tcp, :::8083->8983/tcp docker-compose-solr6-1
It looks like fips mode is being intialized (by default? I don't see anything specifying it). When the alfresco-content-repository-community-7.4.0 starts, it complains of JCEKS not found. This is because the openjdk 17 used is apparently defaulting to FIPS mode.
My solution to start the docker compose stack was to add '-Dcom.redhat.fips=false' to the JAVA_OPTS in the docker-compose file. Then the entire stack initializes correctly.
I found this solution in a few different places around the web with some quick googling. Apparently the JCEKS format keystore is not supported in FIPS mode. So the correct solution is to switch to a different keystore type and adjust the docker-compose file.