search

DependencyTrack / dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
https://dependencytrack.org/
Apache License 2.0
2.59k stars 542 forks source link

Cant access API for login POST http://localhost:8081/api/v1/user/login 404 (Not Found) #2205

Open WeissFabian opened 1 year ago

WeissFabian commented 1 year ago

Current Behavior

When I try to login I get a "POST http://localhost:8081/api/v1/user/login 404 (Not Found)" error.

The docker container starts up fine: image

As far as I can see the frontend container also includes the correct API path: image

When I try to ping the port 8081 it works: image

I dont have this behavior, which is refused not 404: https://github.com/DependencyTrack/dependency-track/issues/1074

Steps to Reproduce

Run these commands: https://docs.dependencytrack.org/getting-started/deploy-docker/#quickstart-docker-compose

Run Chrome with flags to prevent CROS errors --disable-web-security --user-data-dir=~/devChromeTemp --cookies-without-same-site-must-be-secure

Expected Behavior

Being able to access the API

Dependency-Track Version

4.6.1

Dependency-Track Distribution

Container Image

Database Server

N/A

Database Server Version

No response

Browser

Google Chrome

Checklist

syalioune commented 1 year ago

Hello @WeissFabian,

Few questions :

WeissFabian commented 1 year ago

Where do you see that "POST http://localhost:8081/api/v1/user/login 404 (Not Found)" error ? Can you provide some screenshots ? I see the error when checking the chrome console, as well as getting a popup error message

image

What do you see in docker compose logs ? That is the docker compose log output: dependencytracker-dtrack-frontend-1 | /docker-entrypoint.sh: /docker-entrypoint.d/ is not empty, will attempt to perform configuration dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:01,275 INFO [EmbeddedJettyServer] alpine-executable-war v2.1.0 (857eb46d-5864-4dd3-918a-152c4c1b7fa9) built on: 2022-10-09T07:15:51Z dependencytracker-dtrack-frontend-1 | /docker-entrypoint.sh: Looking for shell scripts in /docker-entrypoint.d/ dependencytracker-dtrack-frontend-1 | /docker-entrypoint.sh: Launching /docker-entrypoint.d/10-listen-on-ipv6-by-default.sh dependencytracker-dtrack-frontend-1 | 10-listen-on-ipv6-by-default.sh: info: can not modify /etc/nginx/conf.d/default.conf (read-only file system?) dependencytracker-dtrack-frontend-1 | /docker-entrypoint.sh: Launching /docker-entrypoint.d/20-envsubst-on-templates.sh dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,184 INFO [Config] -------------------------------------------------------------------------------- dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,185 INFO [Config] OS Name: Linux dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,185 INFO [Config] OS Version: 5.15.49-linuxkit dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,185 INFO [Config] OS Arch: amd64 dependencytracker-dtrack-frontend-1 | /docker-entrypoint.sh: Launching /docker-entrypoint.d/30-oidc-configuration.sh dependencytracker-dtrack-frontend-1 | /docker-entrypoint.sh: Launching /docker-entrypoint.d/30-tune-worker-processes.sh dependencytracker-dtrack-frontend-1 | /docker-entrypoint.sh: Configuration complete; ready for start up dependencytracker-dtrack-frontend-1 | 2022/11/29 10:05:01 [notice] 1#1: using the "epoll" event method dependencytracker-dtrack-frontend-1 | 2022/11/29 10:05:01 [notice] 1#1: nginx/1.23.1 dependencytracker-dtrack-frontend-1 | 2022/11/29 10:05:01 [notice] 1#1: built by gcc 11.2.1 20220219 (Alpine 11.2.1_git20220219) dependencytracker-dtrack-frontend-1 | 2022/11/29 10:05:01 [notice] 1#1: OS: Linux 5.15.49-linuxkit dependencytracker-dtrack-frontend-1 | 2022/11/29 10:05:01 [notice] 1#1: getrlimit(RLIMIT_NOFILE): 1048576:1048576 dependencytracker-dtrack-frontend-1 | 2022/11/29 10:05:01 [notice] 1#1: start worker processes dependencytracker-dtrack-frontend-1 | 2022/11/29 10:05:01 [notice] 1#1: start worker process 25 dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,186 INFO [Config] CPU Cores: 6 dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,188 INFO [Config] Max Memory: 9.6 GB (10,309,074,944.0 bytes) dependencytracker-dtrack-frontend-1 | 2022/11/29 10:05:01 [notice] 1#1: start worker process 26 dependencytracker-dtrack-frontend-1 | 2022/11/29 10:05:01 [notice] 1#1: start worker process 27 dependencytracker-dtrack-frontend-1 | 2022/11/29 10:05:01 [notice] 1#1: start worker process 28 dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,188 INFO [Config] Java Vendor: Eclipse Adoptium dependencytracker-dtrack-frontend-1 | 2022/11/29 10:05:01 [notice] 1#1: start worker process 29 dependencytracker-dtrack-frontend-1 | 2022/11/29 10:05:01 [notice] 1#1: start worker process 30 dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,189 INFO [Config] Java Version: 17.0.4.1+1 dependencytracker-dtrack-frontend-1 | 172.19.0.1 - - [29/Nov/2022:10:35:44 +0000] "GET /static/config.json HTTP/1.1" 200 222 "http://localhost:8080/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" "-" dependencytracker-dtrack-frontend-1 | 172.19.0.1 - - [29/Nov/2022:12:27:08 +0000] "GET /login?redirect=%2Fdashboard HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" "-" dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,189 INFO [Config] Java Home: /opt/java/openjdk dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,190 INFO [Config] Java Temp: /tmp dependencytracker-dtrack-frontend-1 | 172.19.0.1 - - [29/Nov/2022:12:27:08 +0000] "GET /static/config.json HTTP/1.1" 200 222 "http://localhost:8080/login?redirect=%2Fdashboard" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" "-" dependencytracker-dtrack-frontend-1 | 172.19.0.1 - - [29/Nov/2022:12:31:28 +0000] "GET /login?redirect=%2Fdashboard HTTP/1.1" 304 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36" "-" dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,190 INFO [Config] User: dtrack dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,190 INFO [Config] User Home: /data/ dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,190 INFO [Config] -------------------------------------------------------------------------------- dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,190 INFO [Config] Initializing Configuration dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,191 INFO [Config] System property alpine.application.properties not specified dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,191 INFO [Config] Loading application.properties from classpath dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,195 INFO [Config] -------------------------------------------------------------------------------- dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,196 INFO [Config] Application: Dependency-Track dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,196 INFO [Config] Version: 4.6.3 dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,196 INFO [Config] Built-on: 2022-11-18T09:27:50Z dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,196 INFO [Config] -------------------------------------------------------------------------------- dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,196 INFO [Config] Framework: Alpine dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,197 INFO [Config] Version : 2.1.0 dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,197 INFO [Config] Built-on: 2022-10-09T07:15:51Z dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,197 INFO [Config] -------------------------------------------------------------------------------- dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,244 INFO [RequirementsVerifier] Initializing requirements verifier dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:02,244 INFO [UpgradeInitializer] Initializing upgrade framework dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:08,123 INFO [PersistenceManagerFactory] Initializing persistence framework dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:08,383 INFO [DefaultObjectGenerator] Initializing default object generator dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:08,396 INFO [DefaultObjectGenerator] Dispatching event to reindex licenses dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:08,398 INFO [DefaultObjectGenerator] Dispatching event to reindex projects dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:08,399 INFO [DefaultObjectGenerator] Dispatching event to reindex components dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:08,400 INFO [DefaultObjectGenerator] Dispatching event to reindex vulnerablesoftware dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:08,402 INFO [DefaultObjectGenerator] Synchronizing permissions to datastore dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:08,664 INFO [DefaultObjectGenerator] Synchronizing SPDX license definitions to datastore dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:11,863 INFO [DefaultObjectGenerator] Synchronizing default repositories to datastore dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:11,877 INFO [DefaultObjectGenerator] Synchronizing config properties to datastore dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:11,920 INFO [DefaultObjectGenerator] Synchronizing notification publishers to datastore dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:12,010 INFO [CweImporter] Synchronizing CWEs with datastore dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:13,315 INFO [CweImporter] CWE synchronization complete dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:13,317 INFO [EventSubsystemInitializer] Initializing asynchronous event subsystem dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:13,351 INFO [NotificationSubsystemInitializer] Initializing notification service dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:13,390 INFO [AlpineServlet] Starting Dependency-Track dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:16,200 INFO [AlpineServlet] Dependency-Track is ready dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:16,203 INFO [NvdMirrorServlet] Initializing NVD mirror dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:16,204 INFO [FileSystemResourceServlet] Initializing filesystem resource servlet dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:23,345 INFO [PortfolioMetricsUpdateTask] Executing portfolio metrics update dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:23,352 INFO [VulnerabilityMetricsUpdateTask] Executing metrics update on vulnerability database dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:23,384 INFO [PortfolioMetricsUpdateTask] Completed portfolio metrics update in 00:00:037 dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:23,385 INFO [ClearComponentAnalysisCacheTask] Clearing ComponentAnalysisCache dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:23,387 INFO [OsvDownloadTask] Google OSV mirroring is disabled. No ecosystem selected. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:05:23,388 INFO [ClearComponentAnalysisCacheTask] Complete dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:12,511 INFO [VulnerabilityMetricsUpdateTask] Completed metrics update on vulnerability database in 00:49:159 dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:13,344 INFO [VulnDbSyncTask] Starting VulnDB mirror synchronization task dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:13,344 INFO [NistMirrorTask] Starting NIST mirroring task dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:13,345 INFO [VulnDbSyncTask] VulnDB mirror directory does not exist. Skipping. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:13,355 INFO [NistMirrorTask] Downloading files at Tue Nov 29 10:06:13 UTC 2022 dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,408 INFO [NistMirrorTask] Using cached version of nvdcve-1.1-modified.json.gz dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,408 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2022.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,408 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2021.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,408 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2020.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,408 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2019.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,408 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2018.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,408 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2017.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,408 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2016.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,409 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2015.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,409 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2014.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,409 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2013.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,409 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2012.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,409 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2011.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,409 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2010.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,409 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2009.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,409 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2008.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,409 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2007.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,409 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2006.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,410 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2005.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,410 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2004.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,410 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2003.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,411 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2002.json.gz not necessary. Will use modified feed for updates. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,414 INFO [NistMirrorTask] NIST mirroring complete dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,414 INFO [NistMirrorTask] Time spent (d/l): 0ms dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,414 INFO [NistMirrorTask] Time spent (parse): 0ms dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,415 INFO [NistMirrorTask] Time spent (total): 1070ms dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,420 INFO [EpssMirrorTask] Starting EPSS mirroring task dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,423 INFO [EpssMirrorTask] Retrieval of epss_scores-current.csv.gz not necessary. dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,424 INFO [EpssMirrorTask] EPSS mirroring complete dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,424 INFO [EpssMirrorTask] Time spent (d/l): 0ms dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,425 INFO [EpssMirrorTask] Time spent (parse): 0ms dependencytracker-dtrack-apiserver-1 | 2022-11-29 10:06:14,426 INFO [EpssMirrorTask] Time spent (total): 4ms dependencytracker-dtrack-apiserver-1 | 2022-11-29 11:05:13,347 INFO [InternalComponentIdentificationTask] Starting internal component identification dependencytracker-dtrack-apiserver-1 | 2022-11-29 11:05:13,351 INFO [RepositoryMetaAnalyzerTask] Portfolio component repository metadata analysis complete dependencytracker-dtrack-apiserver-1 | 2022-11-29 11:05:13,392 INFO [InternalComponentIdentificationTask] Internal component identification completed in 00:00:01 dependencytracker-dtrack-apiserver-1 | 2022-11-29 11:05:23,344 INFO [PortfolioMetricsUpdateTask] Executing portfolio metrics update dependencytracker-dtrack-apiserver-1 | 2022-11-29 11:05:23,345 INFO [VulnerabilityMetricsUpdateTask] Executing metrics update on vulnerability database dependencytracker-dtrack-apiserver-1 | 2022-11-29 11:05:23,349 INFO [PortfolioMetricsUpdateTask] Completed portfolio metrics update in 00:00:004 dependencytracker-dtrack-apiserver-1 | 2022-11-29 11:05:52,382 INFO [VulnerabilityMetricsUpdateTask] Completed metrics update on vulnerability database in 00:29:037 dependencytracker-dtrack-apiserver-1 | 2022-11-29 12:05:23,343 INFO [PortfolioMetricsUpdateTask] Executing portfolio metrics update dependencytracker-dtrack-apiserver-1 | 2022-11-29 12:05:23,343 INFO [VulnerabilityMetricsUpdateTask] Executing metrics update on vulnerability database dependencytracker-dtrack-apiserver-1 | 2022-11-29 12:05:23,345 INFO [PortfolioMetricsUpdateTask] Completed portfolio metrics update in 00:00:002 dependencytracker-dtrack-apiserver-1 | 2022-11-29 12:06:05,307 INFO [VulnerabilityMetricsUpdateTask] Completed metrics update on vulnerability database in 00:41:964

Which URI do you use to access the frontend ? I use: http://localhost:8080 to access the frontend which gets automatically routed to: http://localhost:8080/login?redirect=%2Fdashboard

syalioune commented 1 year ago

That's odd. What happens when you directly request http://localhost:8081/api/version ? Can you also please completely expand axios error payload in chrome dev console ?

WeissFabian commented 1 year ago

What happens when you directly request http://localhost:8081/api/version ? I cant even access the /api/version url image

Can you also please completely expand axios error payload in chrome dev console ? image

But both the containers look like they started up. image

Docker log of apiserver: 2022-11-29 11:05:01 2022-11-29 10:05:01,275 INFO [EmbeddedJettyServer] alpine-executable-war v2.1.0 (857eb46d-5864-4dd3-918a-152c4c1b7fa9) built on: 2022-10-09T07:15:51Z 2022-11-29 11:05:02 2022-11-29 10:05:02,184 INFO [Config] -------------------------------------------------------------------------------- 2022-11-29 11:05:02 2022-11-29 10:05:02,185 INFO [Config] OS Name: Linux 2022-11-29 11:05:02 2022-11-29 10:05:02,185 INFO [Config] OS Version: 5.15.49-linuxkit 2022-11-29 11:05:02 2022-11-29 10:05:02,185 INFO [Config] OS Arch: amd64 2022-11-29 11:05:02 2022-11-29 10:05:02,186 INFO [Config] CPU Cores: 6 2022-11-29 11:05:02 2022-11-29 10:05:02,188 INFO [Config] Max Memory: 9.6 GB (10,309,074,944.0 bytes) 2022-11-29 11:05:02 2022-11-29 10:05:02,188 INFO [Config] Java Vendor: Eclipse Adoptium 2022-11-29 11:05:02 2022-11-29 10:05:02,189 INFO [Config] Java Version: 17.0.4.1+1 2022-11-29 11:05:02 2022-11-29 10:05:02,189 INFO [Config] Java Home: /opt/java/openjdk 2022-11-29 11:05:02 2022-11-29 10:05:02,190 INFO [Config] Java Temp: /tmp 2022-11-29 11:05:02 2022-11-29 10:05:02,190 INFO [Config] User: dtrack 2022-11-29 11:05:02 2022-11-29 10:05:02,190 INFO [Config] User Home: /data/ 2022-11-29 11:05:02 2022-11-29 10:05:02,190 INFO [Config] -------------------------------------------------------------------------------- 2022-11-29 11:05:02 2022-11-29 10:05:02,190 INFO [Config] Initializing Configuration 2022-11-29 11:05:02 2022-11-29 10:05:02,191 INFO [Config] System property alpine.application.properties not specified 2022-11-29 11:05:02 2022-11-29 10:05:02,191 INFO [Config] Loading application.properties from classpath 2022-11-29 11:05:02 2022-11-29 10:05:02,195 INFO [Config] -------------------------------------------------------------------------------- 2022-11-29 11:05:02 2022-11-29 10:05:02,196 INFO [Config] Application: Dependency-Track 2022-11-29 11:05:02 2022-11-29 10:05:02,196 INFO [Config] Version: 4.6.3 2022-11-29 11:05:02 2022-11-29 10:05:02,196 INFO [Config] Built-on: 2022-11-18T09:27:50Z 2022-11-29 11:05:02 2022-11-29 10:05:02,196 INFO [Config] -------------------------------------------------------------------------------- 2022-11-29 11:05:02 2022-11-29 10:05:02,196 INFO [Config] Framework: Alpine 2022-11-29 11:05:02 2022-11-29 10:05:02,197 INFO [Config] Version : 2.1.0 2022-11-29 11:05:02 2022-11-29 10:05:02,197 INFO [Config] Built-on: 2022-10-09T07:15:51Z 2022-11-29 11:05:02 2022-11-29 10:05:02,197 INFO [Config] -------------------------------------------------------------------------------- 2022-11-29 11:05:02 2022-11-29 10:05:02,244 INFO [RequirementsVerifier] Initializing requirements verifier 2022-11-29 11:05:02 2022-11-29 10:05:02,244 INFO [UpgradeInitializer] Initializing upgrade framework 2022-11-29 11:05:08 2022-11-29 10:05:08,123 INFO [PersistenceManagerFactory] Initializing persistence framework 2022-11-29 11:05:08 2022-11-29 10:05:08,383 INFO [DefaultObjectGenerator] Initializing default object generator 2022-11-29 11:05:08 2022-11-29 10:05:08,396 INFO [DefaultObjectGenerator] Dispatching event to reindex licenses 2022-11-29 11:05:08 2022-11-29 10:05:08,398 INFO [DefaultObjectGenerator] Dispatching event to reindex projects 2022-11-29 11:05:08 2022-11-29 10:05:08,399 INFO [DefaultObjectGenerator] Dispatching event to reindex components 2022-11-29 11:05:08 2022-11-29 10:05:08,400 INFO [DefaultObjectGenerator] Dispatching event to reindex vulnerablesoftware 2022-11-29 11:05:08 2022-11-29 10:05:08,402 INFO [DefaultObjectGenerator] Synchronizing permissions to datastore 2022-11-29 11:05:08 2022-11-29 10:05:08,664 INFO [DefaultObjectGenerator] Synchronizing SPDX license definitions to datastore 2022-11-29 11:05:11 2022-11-29 10:05:11,863 INFO [DefaultObjectGenerator] Synchronizing default repositories to datastore 2022-11-29 11:05:11 2022-11-29 10:05:11,877 INFO [DefaultObjectGenerator] Synchronizing config properties to datastore 2022-11-29 11:05:11 2022-11-29 10:05:11,920 INFO [DefaultObjectGenerator] Synchronizing notification publishers to datastore 2022-11-29 11:05:12 2022-11-29 10:05:12,010 INFO [CweImporter] Synchronizing CWEs with datastore 2022-11-29 11:05:13 2022-11-29 10:05:13,315 INFO [CweImporter] CWE synchronization complete 2022-11-29 11:05:13 2022-11-29 10:05:13,317 INFO [EventSubsystemInitializer] Initializing asynchronous event subsystem 2022-11-29 11:05:13 2022-11-29 10:05:13,351 INFO [NotificationSubsystemInitializer] Initializing notification service 2022-11-29 11:05:13 2022-11-29 10:05:13,390 INFO [AlpineServlet] Starting Dependency-Track 2022-11-29 11:05:16 2022-11-29 10:05:16,200 INFO [AlpineServlet] Dependency-Track is ready 2022-11-29 11:05:16 2022-11-29 10:05:16,203 INFO [NvdMirrorServlet] Initializing NVD mirror 2022-11-29 11:05:16 2022-11-29 10:05:16,204 INFO [FileSystemResourceServlet] Initializing filesystem resource servlet 2022-11-29 11:05:23 2022-11-29 10:05:23,345 INFO [PortfolioMetricsUpdateTask] Executing portfolio metrics update 2022-11-29 11:05:23 2022-11-29 10:05:23,352 INFO [VulnerabilityMetricsUpdateTask] Executing metrics update on vulnerability database 2022-11-29 11:05:23 2022-11-29 10:05:23,384 INFO [PortfolioMetricsUpdateTask] Completed portfolio metrics update in 00:00:037 2022-11-29 11:05:23 2022-11-29 10:05:23,385 INFO [ClearComponentAnalysisCacheTask] Clearing ComponentAnalysisCache 2022-11-29 11:05:23 2022-11-29 10:05:23,387 INFO [OsvDownloadTask] Google OSV mirroring is disabled. No ecosystem selected. 2022-11-29 11:05:23 2022-11-29 10:05:23,388 INFO [ClearComponentAnalysisCacheTask] Complete 2022-11-29 11:06:12 2022-11-29 10:06:12,511 INFO [VulnerabilityMetricsUpdateTask] Completed metrics update on vulnerability database in 00:49:159 2022-11-29 11:06:13 2022-11-29 10:06:13,344 INFO [VulnDbSyncTask] Starting VulnDB mirror synchronization task 2022-11-29 11:06:13 2022-11-29 10:06:13,344 INFO [NistMirrorTask] Starting NIST mirroring task 2022-11-29 11:06:13 2022-11-29 10:06:13,345 INFO [VulnDbSyncTask] VulnDB mirror directory does not exist. Skipping. 2022-11-29 11:06:13 2022-11-29 10:06:13,355 INFO [NistMirrorTask] Downloading files at Tue Nov 29 10:06:13 UTC 2022 2022-11-29 11:06:14 2022-11-29 10:06:14,408 INFO [NistMirrorTask] Using cached version of nvdcve-1.1-modified.json.gz 2022-11-29 11:06:14 2022-11-29 10:06:14,408 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2022.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,408 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2021.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,408 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2020.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,408 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2019.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,408 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2018.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,408 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2017.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,408 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2016.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,409 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2015.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,409 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2014.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,409 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2013.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,409 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2012.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,409 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2011.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,409 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2010.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,409 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2009.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,409 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2008.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,409 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2007.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,409 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2006.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,410 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2005.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,410 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2004.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,410 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2003.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,411 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2002.json.gz not necessary. Will use modified feed for updates. 2022-11-29 11:06:14 2022-11-29 10:06:14,414 INFO [NistMirrorTask] NIST mirroring complete 2022-11-29 11:06:14 2022-11-29 10:06:14,414 INFO [NistMirrorTask] Time spent (d/l): 0ms 2022-11-29 11:06:14 2022-11-29 10:06:14,414 INFO [NistMirrorTask] Time spent (parse): 0ms 2022-11-29 11:06:14 2022-11-29 10:06:14,415 INFO [NistMirrorTask] Time spent (total): 1070ms 2022-11-29 11:06:14 2022-11-29 10:06:14,420 INFO [EpssMirrorTask] Starting EPSS mirroring task 2022-11-29 11:06:14 2022-11-29 10:06:14,423 INFO [EpssMirrorTask] Retrieval of epss_scores-current.csv.gz not necessary. 2022-11-29 11:06:14 2022-11-29 10:06:14,424 INFO [EpssMirrorTask] EPSS mirroring complete 2022-11-29 11:06:14 2022-11-29 10:06:14,424 INFO [EpssMirrorTask] Time spent (d/l): 0ms 2022-11-29 11:06:14 2022-11-29 10:06:14,425 INFO [EpssMirrorTask] Time spent (parse): 0ms 2022-11-29 11:06:14 2022-11-29 10:06:14,426 INFO [EpssMirrorTask] Time spent (total): 4ms 2022-11-29 12:05:13 2022-11-29 11:05:13,347 INFO [InternalComponentIdentificationTask] Starting internal component identification 2022-11-29 12:05:13 2022-11-29 11:05:13,351 INFO [RepositoryMetaAnalyzerTask] Portfolio component repository metadata analysis complete 2022-11-29 12:05:13 2022-11-29 11:05:13,392 INFO [InternalComponentIdentificationTask] Internal component identification completed in 00:00:01 2022-11-29 12:05:23 2022-11-29 11:05:23,344 INFO [PortfolioMetricsUpdateTask] Executing portfolio metrics update 2022-11-29 12:05:23 2022-11-29 11:05:23,345 INFO [VulnerabilityMetricsUpdateTask] Executing metrics update on vulnerability database 2022-11-29 12:05:23 2022-11-29 11:05:23,349 INFO [PortfolioMetricsUpdateTask] Completed portfolio metrics update in 00:00:004 2022-11-29 12:05:52 2022-11-29 11:05:52,382 INFO [VulnerabilityMetricsUpdateTask] Completed metrics update on vulnerability database in 00:29:037 2022-11-29 13:05:23 2022-11-29 12:05:23,343 INFO [PortfolioMetricsUpdateTask] Executing portfolio metrics update 2022-11-29 13:05:23 2022-11-29 12:05:23,343 INFO [VulnerabilityMetricsUpdateTask] Executing metrics update on vulnerability database 2022-11-29 13:05:23 2022-11-29 12:05:23,345 INFO [PortfolioMetricsUpdateTask] Completed portfolio metrics update in 00:00:002 2022-11-29 13:06:05 2022-11-29 12:06:05,307 INFO [VulnerabilityMetricsUpdateTask] Completed metrics update on vulnerability database in 00:41:964 2022-11-29 14:05:23 2022-11-29 13:05:23,345 INFO [PortfolioMetricsUpdateTask] Executing portfolio metrics update 2022-11-29 14:05:23 2022-11-29 13:05:23,345 INFO [VulnerabilityMetricsUpdateTask] Executing metrics update on vulnerability database 2022-11-29 14:05:23 2022-11-29 13:05:23,348 INFO [PortfolioMetricsUpdateTask] Completed portfolio metrics update in 00:00:003 2022-11-29 14:06:05 2022-11-29 13:06:05,733 INFO [VulnerabilityMetricsUpdateTask] Completed metrics update on vulnerability database in 00:42:388 2022-11-29 15:05:23 2022-11-29 14:05:23,385 INFO [PortfolioMetricsUpdateTask] Executing portfolio metrics update 2022-11-29 15:05:23 2022-11-29 14:05:23,387 INFO [VulnerabilityMetricsUpdateTask] Executing metrics update on vulnerability database 2022-11-29 15:05:23 2022-11-29 14:05:23,390 INFO [PortfolioMetricsUpdateTask] Completed portfolio metrics update in 00:00:004 2022-11-29 15:05:58 2022-11-29 14:05:58,209 INFO [VulnerabilityMetricsUpdateTask] Completed metrics update on vulnerability database in 00:34:822 2022-12-01 07:09:04 2022-12-01 06:09:04,902 INFO [EmbeddedJettyServer] alpine-executable-war v2.1.0 (857eb46d-5864-4dd3-918a-152c4c1b7fa9) built on: 2022-10-09T07:15:51Z 2022-12-01 07:09:16 2022-12-01 06:09:16,009 INFO [Config] -------------------------------------------------------------------------------- 2022-12-01 07:09:16 2022-12-01 06:09:16,013 INFO [Config] OS Name: Linux 2022-12-01 07:09:16 2022-12-01 06:09:16,014 INFO [Config] OS Version: 5.15.49-linuxkit 2022-12-01 07:09:16 2022-12-01 06:09:16,015 INFO [Config] OS Arch: amd64 2022-12-01 07:09:16 2022-12-01 06:09:16,016 INFO [Config] CPU Cores: 6 2022-12-01 07:09:16 2022-12-01 06:09:16,024 INFO [Config] Max Memory: 9.6 GB (10,309,074,944.0 bytes) 2022-12-01 07:09:16 2022-12-01 06:09:16,025 INFO [Config] Java Vendor: Eclipse Adoptium 2022-12-01 07:09:16 2022-12-01 06:09:16,030 INFO [Config] Java Version: 17.0.4.1+1 2022-12-01 07:09:16 2022-12-01 06:09:16,031 INFO [Config] Java Home: /opt/java/openjdk 2022-12-01 07:09:16 2022-12-01 06:09:16,032 INFO [Config] Java Temp: /tmp 2022-12-01 07:09:16 2022-12-01 06:09:16,033 INFO [Config] User: dtrack 2022-12-01 07:09:16 2022-12-01 06:09:16,034 INFO [Config] User Home: /data/ 2022-12-01 07:09:16 2022-12-01 06:09:16,034 INFO [Config] -------------------------------------------------------------------------------- 2022-12-01 07:09:16 2022-12-01 06:09:16,035 INFO [Config] Initializing Configuration 2022-12-01 07:09:16 2022-12-01 06:09:16,037 INFO [Config] System property alpine.application.properties not specified 2022-12-01 07:09:16 2022-12-01 06:09:16,038 INFO [Config] Loading application.properties from classpath 2022-12-01 07:09:16 2022-12-01 06:09:16,078 INFO [Config] -------------------------------------------------------------------------------- 2022-12-01 07:09:16 2022-12-01 06:09:16,079 INFO [Config] Application: Dependency-Track 2022-12-01 07:09:16 2022-12-01 06:09:16,080 INFO [Config] Version: 4.6.3 2022-12-01 07:09:16 2022-12-01 06:09:16,081 INFO [Config] Built-on: 2022-11-18T09:27:50Z 2022-12-01 07:09:16 2022-12-01 06:09:16,081 INFO [Config] -------------------------------------------------------------------------------- 2022-12-01 07:09:16 2022-12-01 06:09:16,082 INFO [Config] Framework: Alpine 2022-12-01 07:09:16 2022-12-01 06:09:16,082 INFO [Config] Version : 2.1.0 2022-12-01 07:09:16 2022-12-01 06:09:16,082 INFO [Config] Built-on: 2022-10-09T07:15:51Z 2022-12-01 07:09:16 2022-12-01 06:09:16,083 INFO [Config] -------------------------------------------------------------------------------- 2022-12-01 07:09:16 2022-12-01 06:09:16,340 INFO [RequirementsVerifier] Initializing requirements verifier 2022-12-01 07:09:16 2022-12-01 06:09:16,341 INFO [UpgradeInitializer] Initializing upgrade framework 2022-12-01 07:13:23 2022-12-01 06:13:23,051 INFO [EmbeddedJettyServer] alpine-executable-war v2.1.0 (857eb46d-5864-4dd3-918a-152c4c1b7fa9) built on: 2022-10-09T07:15:51Z 2022-12-01 07:13:25 2022-12-01 06:13:25,928 INFO [Config] -------------------------------------------------------------------------------- 2022-12-01 07:13:25 2022-12-01 06:13:25,931 INFO [Config] OS Name: Linux 2022-12-01 07:13:25 2022-12-01 06:13:25,931 INFO [Config] OS Version: 5.15.49-linuxkit 2022-12-01 07:13:25 2022-12-01 06:13:25,931 INFO [Config] OS Arch: amd64 2022-12-01 07:13:25 2022-12-01 06:13:25,932 INFO [Config] CPU Cores: 6 2022-12-01 07:13:25 2022-12-01 06:13:25,938 INFO [Config] Max Memory: 9.6 GB (10,309,074,944.0 bytes) 2022-12-01 07:13:25 2022-12-01 06:13:25,939 INFO [Config] Java Vendor: Eclipse Adoptium 2022-12-01 07:13:25 2022-12-01 06:13:25,941 INFO [Config] Java Version: 17.0.4.1+1 2022-12-01 07:13:25 2022-12-01 06:13:25,942 INFO [Config] Java Home: /opt/java/openjdk 2022-12-01 07:13:25 2022-12-01 06:13:25,943 INFO [Config] Java Temp: /tmp 2022-12-01 07:13:25 2022-12-01 06:13:25,944 INFO [Config] User: dtrack 2022-12-01 07:13:25 2022-12-01 06:13:25,944 INFO [Config] User Home: /data/ 2022-12-01 07:13:25 2022-12-01 06:13:25,945 INFO [Config] -------------------------------------------------------------------------------- 2022-12-01 07:13:25 2022-12-01 06:13:25,945 INFO [Config] Initializing Configuration 2022-12-01 07:13:25 2022-12-01 06:13:25,947 INFO [Config] System property alpine.application.properties not specified 2022-12-01 07:13:25 2022-12-01 06:13:25,948 INFO [Config] Loading application.properties from classpath 2022-12-01 07:13:25 2022-12-01 06:13:25,956 INFO [Config] -------------------------------------------------------------------------------- 2022-12-01 07:13:25 2022-12-01 06:13:25,957 INFO [Config] Application: Dependency-Track 2022-12-01 07:13:25 2022-12-01 06:13:25,958 INFO [Config] Version: 4.6.3 2022-12-01 07:13:25 2022-12-01 06:13:25,959 INFO [Config] Built-on: 2022-11-18T09:27:50Z 2022-12-01 07:13:25 2022-12-01 06:13:25,959 INFO [Config] -------------------------------------------------------------------------------- 2022-12-01 07:13:25 2022-12-01 06:13:25,960 INFO [Config] Framework: Alpine 2022-12-01 07:13:25 2022-12-01 06:13:25,961 INFO [Config] Version : 2.1.0 2022-12-01 07:13:25 2022-12-01 06:13:25,961 INFO [Config] Built-on: 2022-10-09T07:15:51Z 2022-12-01 07:13:25 2022-12-01 06:13:25,962 INFO [Config] -------------------------------------------------------------------------------- 2022-12-01 07:13:26 2022-12-01 06:13:26,112 INFO [RequirementsVerifier] Initializing requirements verifier 2022-12-01 07:13:26 2022-12-01 06:13:26,113 INFO [UpgradeInitializer] Initializing upgrade framework 2022-12-01 07:13:33 2022-12-01 06:13:33,841 INFO [PersistenceManagerFactory] Initializing persistence framework 2022-12-01 07:13:34 2022-12-01 06:13:34,168 INFO [DefaultObjectGenerator] Initializing default object generator 2022-12-01 07:13:34 2022-12-01 06:13:34,193 INFO [DefaultObjectGenerator] Dispatching event to reindex licenses 2022-12-01 07:13:34 2022-12-01 06:13:34,196 INFO [DefaultObjectGenerator] Dispatching event to reindex projects 2022-12-01 07:13:34 2022-12-01 06:13:34,196 INFO [DefaultObjectGenerator] Dispatching event to reindex components 2022-12-01 07:13:34 2022-12-01 06:13:34,197 INFO [DefaultObjectGenerator] Dispatching event to reindex vulnerablesoftware 2022-12-01 07:13:34 2022-12-01 06:13:34,199 INFO [DefaultObjectGenerator] Synchronizing permissions to datastore 2022-12-01 07:13:34 2022-12-01 06:13:34,505 INFO [DefaultObjectGenerator] Synchronizing SPDX license definitions to datastore 2022-12-01 07:13:39 2022-12-01 06:13:39,523 INFO [DefaultObjectGenerator] Synchronizing default repositories to datastore 2022-12-01 07:13:39 2022-12-01 06:13:39,551 INFO [DefaultObjectGenerator] Synchronizing config properties to datastore 2022-12-01 07:13:39 2022-12-01 06:13:39,616 INFO [DefaultObjectGenerator] Synchronizing notification publishers to datastore 2022-12-01 07:13:39 2022-12-01 06:13:39,748 INFO [CweImporter] Synchronizing CWEs with datastore 2022-12-01 07:13:41 2022-12-01 06:13:41,424 INFO [CweImporter] CWE synchronization complete 2022-12-01 07:13:41 2022-12-01 06:13:41,428 INFO [EventSubsystemInitializer] Initializing asynchronous event subsystem 2022-12-01 07:13:41 2022-12-01 06:13:41,460 INFO [NotificationSubsystemInitializer] Initializing notification service 2022-12-01 07:13:41 2022-12-01 06:13:41,504 INFO [AlpineServlet] Starting Dependency-Track 2022-12-01 07:13:46 2022-12-01 06:13:46,217 INFO [AlpineServlet] Dependency-Track is ready 2022-12-01 07:13:46 2022-12-01 06:13:46,220 INFO [NvdMirrorServlet] Initializing NVD mirror 2022-12-01 07:13:46 2022-12-01 06:13:46,220 INFO [FileSystemResourceServlet] Initializing filesystem resource servlet 2022-12-01 07:13:51 2022-12-01 06:13:51,453 INFO [PortfolioMetricsUpdateTask] Executing portfolio metrics update 2022-12-01 07:13:51 2022-12-01 06:13:51,455 INFO [VulnerabilityMetricsUpdateTask] Executing metrics update on vulnerability database 2022-12-01 07:13:51 2022-12-01 06:13:51,472 INFO [ClearComponentAnalysisCacheTask] Clearing ComponentAnalysisCache 2022-12-01 07:13:51 2022-12-01 06:13:51,473 INFO [PortfolioMetricsUpdateTask] Completed portfolio metrics update in 00:00:016 2022-12-01 07:13:51 2022-12-01 06:13:51,474 INFO [ClearComponentAnalysisCacheTask] Complete 2022-12-01 07:13:51 2022-12-01 06:13:51,474 INFO [OsvDownloadTask] Google OSV mirroring is disabled. No ecosystem selected. 2022-12-01 07:14:41 2022-12-01 06:14:41,452 INFO [VulnDbSyncTask] Starting VulnDB mirror synchronization task 2022-12-01 07:14:41 2022-12-01 06:14:41,452 INFO [NistMirrorTask] Starting NIST mirroring task 2022-12-01 07:14:41 2022-12-01 06:14:41,453 INFO [VulnDbSyncTask] VulnDB mirror directory does not exist. Skipping. 2022-12-01 07:14:41 2022-12-01 06:14:41,473 INFO [NistMirrorTask] Downloading files at Thu Dec 01 06:14:41 UTC 2022 2022-12-01 07:14:44 2022-12-01 06:14:44,979 INFO [NistMirrorTask] Initiating download of https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-modified.json.gz 2022-12-01 07:14:45 2022-12-01 06:14:45,711 INFO [NistMirrorTask] Downloading... 2022-12-01 07:14:47 2022-12-01 06:14:47,801 INFO [NistMirrorTask] Uncompressing nvdcve-1.1-modified.json.gz 2022-12-01 07:14:47 2022-12-01 06:14:47,847 INFO [NvdParser] Parsing nvdcve-1.1-modified.json 2022-12-01 07:14:52 2022-12-01 06:14:52,291 INFO [EmbeddedJettyServer] alpine-executable-war v2.1.0 (857eb46d-5864-4dd3-918a-152c4c1b7fa9) built on: 2022-10-09T07:15:51Z 2022-12-01 07:14:54 2022-12-01 06:14:54,319 INFO [Config] -------------------------------------------------------------------------------- 2022-12-01 07:14:54 2022-12-01 06:14:54,323 INFO [Config] OS Name: Linux 2022-12-01 07:14:54 2022-12-01 06:14:54,324 INFO [Config] OS Version: 5.15.49-linuxkit 2022-12-01 07:14:54 2022-12-01 06:14:54,325 INFO [Config] OS Arch: amd64 2022-12-01 07:14:54 2022-12-01 06:14:54,326 INFO [Config] CPU Cores: 6 2022-12-01 07:14:54 2022-12-01 06:14:54,332 INFO [Config] Max Memory: 9.6 GB (10,309,074,944.0 bytes) 2022-12-01 07:14:54 2022-12-01 06:14:54,333 INFO [Config] Java Vendor: Eclipse Adoptium 2022-12-01 07:14:54 2022-12-01 06:14:54,336 INFO [Config] Java Version: 17.0.4.1+1 2022-12-01 07:14:54 2022-12-01 06:14:54,337 INFO [Config] Java Home: /opt/java/openjdk 2022-12-01 07:14:54 2022-12-01 06:14:54,338 INFO [Config] Java Temp: /tmp 2022-12-01 07:14:54 2022-12-01 06:14:54,339 INFO [Config] User: dtrack 2022-12-01 07:14:54 2022-12-01 06:14:54,339 INFO [Config] User Home: /data/ 2022-12-01 07:14:54 2022-12-01 06:14:54,340 INFO [Config] -------------------------------------------------------------------------------- 2022-12-01 07:14:54 2022-12-01 06:14:54,341 INFO [Config] Initializing Configuration 2022-12-01 07:14:54 2022-12-01 06:14:54,343 INFO [Config] System property alpine.application.properties not specified 2022-12-01 07:14:54 2022-12-01 06:14:54,344 INFO [Config] Loading application.properties from classpath 2022-12-01 07:14:54 2022-12-01 06:14:54,354 INFO [Config] -------------------------------------------------------------------------------- 2022-12-01 07:14:54 2022-12-01 06:14:54,355 INFO [Config] Application: Dependency-Track 2022-12-01 07:14:54 2022-12-01 06:14:54,356 INFO [Config] Version: 4.6.3 2022-12-01 07:14:54 2022-12-01 06:14:54,356 INFO [Config] Built-on: 2022-11-18T09:27:50Z 2022-12-01 07:14:54 2022-12-01 06:14:54,356 INFO [Config] -------------------------------------------------------------------------------- 2022-12-01 07:14:54 2022-12-01 06:14:54,357 INFO [Config] Framework: Alpine 2022-12-01 07:14:54 2022-12-01 06:14:54,357 INFO [Config] Version : 2.1.0 2022-12-01 07:14:54 2022-12-01 06:14:54,357 INFO [Config] Built-on: 2022-10-09T07:15:51Z 2022-12-01 07:14:54 2022-12-01 06:14:54,357 INFO [Config] -------------------------------------------------------------------------------- 2022-12-01 07:14:54 2022-12-01 06:14:54,494 INFO [RequirementsVerifier] Initializing requirements verifier 2022-12-01 07:14:54 2022-12-01 06:14:54,495 INFO [UpgradeInitializer] Initializing upgrade framework 2022-12-01 07:15:02 2022-12-01 06:15:02,882 INFO [PersistenceManagerFactory] Initializing persistence framework 2022-12-01 07:15:03 2022-12-01 06:15:03,262 INFO [DefaultObjectGenerator] Initializing default object generator 2022-12-01 07:15:03 2022-12-01 06:15:03,283 INFO [DefaultObjectGenerator] Dispatching event to reindex licenses 2022-12-01 07:15:03 2022-12-01 06:15:03,284 INFO [DefaultObjectGenerator] Dispatching event to reindex projects 2022-12-01 07:15:03 2022-12-01 06:15:03,285 INFO [DefaultObjectGenerator] Dispatching event to reindex components 2022-12-01 07:15:03 2022-12-01 06:15:03,285 INFO [DefaultObjectGenerator] Dispatching event to reindex vulnerablesoftware 2022-12-01 07:15:03 2022-12-01 06:15:03,288 INFO [DefaultObjectGenerator] Synchronizing permissions to datastore 2022-12-01 07:15:03 2022-12-01 06:15:03,542 INFO [DefaultObjectGenerator] Synchronizing SPDX license definitions to datastore 2022-12-01 07:15:19 2022-12-01 06:15:19,840 INFO [DefaultObjectGenerator] Synchronizing default repositories to datastore 2022-12-01 07:15:19 2022-12-01 06:15:19,926 INFO [DefaultObjectGenerator] Synchronizing config properties to datastore 2022-12-01 07:15:20 2022-12-01 06:15:20,313 INFO [DefaultObjectGenerator] Synchronizing notification publishers to datastore 2022-12-01 07:15:20 2022-12-01 06:15:20,993 INFO [CweImporter] Synchronizing CWEs with datastore 2022-12-01 07:15:29 2022-12-01 06:15:29,408 INFO [CweImporter] CWE synchronization complete 2022-12-01 07:15:29 2022-12-01 06:15:29,422 INFO [EventSubsystemInitializer] Initializing asynchronous event subsystem 2022-12-01 07:15:29 2022-12-01 06:15:29,592 INFO [NotificationSubsystemInitializer] Initializing notification service 2022-12-01 07:15:29 2022-12-01 06:15:29,692 INFO [AlpineServlet] Starting Dependency-Track 2022-12-01 07:15:39 2022-12-01 06:15:39,564 INFO [PortfolioMetricsUpdateTask] Executing portfolio metrics update 2022-12-01 07:15:39 2022-12-01 06:15:39,577 INFO [VulnerabilityMetricsUpdateTask] Executing metrics update on vulnerability database 2022-12-01 07:15:39 2022-12-01 06:15:39,736 INFO [ClearComponentAnalysisCacheTask] Clearing ComponentAnalysisCache 2022-12-01 07:15:39 2022-12-01 06:15:39,743 INFO [PortfolioMetricsUpdateTask] Completed portfolio metrics update in 00:00:138 2022-12-01 07:15:39 2022-12-01 06:15:39,755 INFO [OsvDownloadTask] Google OSV mirroring is disabled. No ecosystem selected. 2022-12-01 07:15:39 2022-12-01 06:15:39,776 INFO [ClearComponentAnalysisCacheTask] Complete 2022-12-01 07:15:45 2022-12-01 06:15:45,385 INFO [AlpineServlet] Dependency-Track is ready 2022-12-01 07:15:45 2022-12-01 06:15:45,402 INFO [NvdMirrorServlet] Initializing NVD mirror 2022-12-01 07:15:45 2022-12-01 06:15:45,414 INFO [FileSystemResourceServlet] Initializing filesystem resource servlet 2022-12-01 07:16:29 2022-12-01 06:16:29,544 INFO [VulnDbSyncTask] Starting VulnDB mirror synchronization task 2022-12-01 07:16:29 2022-12-01 06:16:29,544 INFO [VulnDbSyncTask] VulnDB mirror directory does not exist. Skipping. 2022-12-01 07:16:29 2022-12-01 06:16:29,545 INFO [NistMirrorTask] Starting NIST mirroring task 2022-12-01 07:16:29 2022-12-01 06:16:29,558 INFO [NistMirrorTask] Downloading files at Thu Dec 01 06:16:29 UTC 2022 2022-12-01 07:16:29 2022-12-01 06:16:29,565 INFO [NistMirrorTask] Initiating download of https://nvd.nist.gov/feeds/json/cve/1.1/nvdcve-1.1-modified.json.gz 2022-12-01 07:16:31 2022-12-01 06:16:31,013 INFO [NistMirrorTask] Downloading... 2022-12-01 07:16:31 2022-12-01 06:16:31,419 INFO [NistMirrorTask] Uncompressing nvdcve-1.1-modified.json.gz 2022-12-01 07:16:31 2022-12-01 06:16:31,455 INFO [NvdParser] Parsing nvdcve-1.1-modified.json 2022-12-01 07:16:51 2022-12-01 06:16:51,535 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2022.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,535 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2021.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,535 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2020.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,535 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2019.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,535 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2018.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,535 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2017.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,535 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2016.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,535 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2015.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,535 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2014.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,535 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2013.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,536 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2012.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,536 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2011.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,536 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2010.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,536 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2009.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,536 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2008.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,536 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2007.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,536 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2006.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,536 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2005.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,536 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2004.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,536 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2003.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,536 INFO [NistMirrorTask] Retrieval of nvdcve-1.1-2002.json.gz not necessary. Will use modified feed for updates. 2022-12-01 07:16:51 2022-12-01 06:16:51,538 INFO [NistMirrorTask] NIST mirroring complete 2022-12-01 07:16:51 2022-12-01 06:16:51,539 INFO [NistMirrorTask] Time spent (d/l): 1448ms 2022-12-01 07:16:51 2022-12-01 06:16:51,539 INFO [NistMirrorTask] Time spent (parse): 20081ms 2022-12-01 07:16:51 2022-12-01 06:16:51,539 INFO [NistMirrorTask] Time spent (total): 21993ms 2022-12-01 07:16:52 2022-12-01 06:16:52,912 INFO [EpssMirrorTask] Starting EPSS mirroring task 2022-12-01 07:16:52 2022-12-01 06:16:52,926 INFO [EpssMirrorTask] Retrieval of epss_scores-current.csv.gz not necessary. 2022-12-01 07:16:52 2022-12-01 06:16:52,927 INFO [EpssMirrorTask] EPSS mirroring complete 2022-12-01 07:16:52 2022-12-01 06:16:52,929 INFO [EpssMirrorTask] Time spent (d/l): 0ms 2022-12-01 07:16:52 2022-12-01 06:16:52,930 INFO [EpssMirrorTask] Time spent (parse): 0ms 2022-12-01 07:16:52 2022-12-01 06:16:52,931 INFO [EpssMirrorTask] Time spent (total): 15ms 2022-12-01 07:17:25 2022-12-01 06:17:25,968 INFO [VulnerabilityMetricsUpdateTask] Completed metrics update on vulnerability database in 01:46:387

Do you have any idea why the backend does not want to communicate/ does not accept any http requests?

dturiso commented 1 year ago

Did you try to configure API_BASE_URL with the server IP or servername? Probably you're accesing the dtrack server from a different machine, so 127.0.0.1 doesn't correspond to your server but to your own machine.

vimal-cb commented 1 year ago

We are also facing the same issue while deploying the dependencytrack using docker-compose. Both frontend & apiserver docker containers are running in an AWS EC2 instance.

Steps followed

curl -LO https://dependencytrack.org/docker-compose.yml

Note Also, we have tied with the below YAML file. But the issue persists. https://docs.dependencytrack.org/getting-started/deploy-docker/#docker-compose-automated--orchestration