Skywalking: failure enabling TLS in Docker distro of OAP server 8.1.0-es7

Created on 18 Sep 2020  路  6Comments  路  Source: apache/skywalking

Please answer these questions before submitting your issue.

  • Why do you submit this issue?
  • [ ] Question or discussion
  • [x] Bug
  • [ ] Requirement
  • [ ] Feature or performance improvement

Question

  • What do you want to know?

Bug

  • Which version of SkyWalking, OS and JRE?
    Docker OAP server 8.1.0-es7 (https://github.com/apache/skywalking-docker/tree/master/8/8.1.0/oap-es7)

  • Which company or project?

  • What happened?
    When enabling TLS on gRPC listener in OAP server it fails with errors missing required libraries.


Requirement or improvement

  • I managed to resolve the issue by using adoptopenjdk/openjdk11:alpine (instead of openjdk:8-jre-alpine) as base Java image for both base and OAP image.
backend bug docker

Most helpful comment

it's because netty tc-native needs some dynamic libraries which apline doesn't contain. we should release a new base image to adopt to "jdk" instead of "jre".

Since OAP can work fine with jdk11, I prefer to use it as the new base image.
@wu-sheng @kezhenxu94 ^^

All 6 comments

it's because netty tc-native needs some dynamic libraries which apline doesn't contain. we should release a new base image to adopt to "jdk" instead of "jre".

Since OAP can work fine with jdk11, I prefer to use it as the new base image.
@wu-sheng @kezhenxu94 ^^

Work for me. Please update the docker file in the main repo first.

Work for me. Please update the docker file in the main repo first.

main repo doesn't have this issue and uses the jdk based image all the time due to our development and debugging requirement.

@innerpeacez I added this to the k8s release milestone for next version, in case we miss this in next time.

@hanahmily Do you plan to push the 8.1.0 images again for jdk binded?

@pantovad I will recommend you to re package first locally.

And now, when testing https://github.com/apache/skywalking/pull/5722 , I've also found that it(Kubernetes Java client) doesn't work well on openjdk:8-jdk (see https://github.com/kubernetes-client/java/issues/1003 although it just happens in Minikube), thus I used openjdk:11-jdk for the tests, I suggest to upgrade the JDK version in the base image ASAP

JDK11 as next TLS, make sense to me. Just feel strange, why JDK version matters

Was this page helpful?
0 / 5 - 0 ratings

Related issues

cyejing picture cyejing  路  5Comments

gaoweijie picture gaoweijie  路  3Comments

alishangtian picture alishangtian  路  3Comments

itziklavon picture itziklavon  路  4Comments

yang-xiaodong picture yang-xiaodong  路  4Comments