pki-bot / pki-issues-final

0 stars 0 forks source link

Service should not start if selftest fails #739

Closed pki-bot closed 4 years ago

pki-bot commented 4 years ago

This issue was migrated from Pagure Issue #745. Originally filed by edewata (@edewata) on 2013-09-19 18:30:23:


When the Tomcat is started it will run the selftests for each subsystem. Currently if the test fails the engine for the subsystem will not run, but the error will only be shown in the system log, so the admin may not be aware of the failure. Also, the Tomcat server and the web application for that subsystem will continue to run and accept client connections, which can lead to confusions or additional risks.

One solution is to shutdown Tomcat if there's a failure, but this will affect other subsystems running in the same instance.

Another solution is to undeploy the web application of the failing subsystem. This way client will know immediately that the service is unavailable, and other subsystems running on the same instance can still continue to run.

pki-bot commented 4 years ago

Comment from edewata (@edewata) at 2013-09-27 20:56:53

There are several ways to stop/undeploy a web application:

  1. Suppose Tomcat Manager web application is installed in the instance, the selftest subsystem can call the Tomcat Manager to stop the failing subsystem. See:

Stopping a subsystem using Tomcat Manager doesn't seem to be permanent. The subsystem will start again when Tomcat is restarted, but then it will stop again if the selftest is still failing. After fixing the problem, the subsystem can be restarted via the Tomcat Manager.

  1. Suppose the subsystem is installed outside the 'webapps' folder, it can be undeployed by removing the context.xml for that subsystem. See:

This method seems to be permanent, but it requires direct access to the file system. Redeploying the subsystem requires recreating the context.xml.

pki-bot commented 4 years ago

Comment from cfu (@cfu) at 2014-04-29 18:30:26

is this a dupe of this? https://fedorahosted.org/pki/ticket/947 Startup should fail if self tests fail.

pki-bot commented 4 years ago

Comment from edewata (@edewata) at 2014-04-29 18:55:09

I think 947 is a duplicate of this ticket, but when deciding the solution we need to consider how IPA will be able to detect selftest errors.

pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2014-09-18 02:59:32

Proposed Milestone: 10.2.3 (per CS Meeting of 09/17/2014)

[PKI TRAC Ticket 947 - Startup should fail if self tests fail.] marked as duplicate of https://fedorahosted.org/pki/ticket/745 PKI TRAC Ticket 745 - Service should not start if selftest fails (per CS Meeting of 09/17/2014)

pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2014-09-26 01:25:11

proposed Milestone: 10.2.3 - Per Dogtag 10.2.3 meeting of 09/25/2014

pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2015-01-15 01:07:49

Per Dogtag 10.2.X meeting of 01/14/2015: Milestone 10.2.2

pki-bot commented 4 years ago

Comment from edewata (@edewata) at 2015-01-28 21:53:04

master: 22ff1fbd2de37395e219a7e7362722517a3f4dc3

pki-bot commented 4 years ago

Comment from edewata (@edewata) at 2017-02-27 14:10:59

Metadata Update from @edewata: