cfml #docker-commandbox

Jordan Clark

06/20/2023, 12:07 AM

@jclausen since we've hit a roadblock with the ortus commandbox alpine image and fusionreactor, do you or anyone else have any recommendation to the default ubuntu or the or RHEL image for running Lucee 5?

jclausen

06/20/2023, 12:29 AM

@Jordan Clark what is the roadblock. You probably can’t use Fusion Reactor without a full JDK image.

jclausen

06/20/2023, 12:29 AM

You might want to try the Ubuntu-based JDK image

Jordan Clark

06/20/2023, 12:30 AM

apparently alpine linux doesn't have the correct Glibc libraries to run the fusionreactor agent, so the jvm fails to launch commandbox when its installed

jclausen

06/20/2023, 12:30 AM

I’ve never had any problems running the CommandBox Fusion Reactor module on a JDK image.

Jordan Clark

06/20/2023, 1:20 AM

with a few tweaks it looks like the ubuntu image works with fusionreactor and the final image size is only ~150mb bigger than alpine, so not the end of the world

🚀 1

dougcain

07/12/2023, 11:41 AM

@jclausen thanks for putting the Adobe updates on forgebox so quickly - from the security bulletin (https://helpx.adobe.com/coldfusion/kb/coldfusion-2018-update-17.html) it says it needs some JVM options for the security patch: For Application Servers

On JEE installations, set the following JVM flag, "-Djdk.serialFilter= !org.mozilla.**;!com.sun.syndication.**;!org.apache.commons.beanutils.**; !org.jgroups.**", in the respective startup file depending on the type of Application Server being used.

Is this something that should go into the base commandbox? I have added to my server.json for the moment but wondered if there is a better way of making sure the default commandbox already has them?

👍 3

Josh

07/17/2023, 12:40 AM

Anyone got a good workflow for using Kubernetes secrets for injecting application environment vars to commandbox containers? So far we've had to inject at build in our CI/CD, but really don't want to do this anymore.

dougcain

07/17/2023, 9:46 AM

@jclausen / @bdw429s any ETA on updated forgebox Adobe CF engines?

dougcain

07/20/2023, 1:16 PM

@jclausen seems like deja vu - any ETA on the updated forgebox adobe cf updates?

jclausen

07/20/2023, 1:24 PM

Should be later this morning

jclausen

07/20/2023, 2:13 PM

@dougcain Forgebox engines are all updated. CommandBox Docker images are building now.

dougcain

07/20/2023, 2:24 PM

awsome, thanks

dougcain

07/20/2023, 2:36 PM

oh @jclausen did you notice they added a bit to the JVM arg for the update should now be: -Djdk.serialFilter= !org.mozilla.**;!com.sun.syndication.**;!org.apache.commons.beanutils.**;!org.jgroups.**;!com.sun.rowset.**
From https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html

jclausen

07/20/2023, 2:39 PM

Ugh.

jclausen

07/20/2023, 2:39 PM

I’ll fix that in the images.

dougcain

07/20/2023, 2:44 PM

all fun and games in security land

Cory Howitz

07/20/2023, 2:45 PM

isn't that though if its running on something like wildfly?

bdw429s

07/20/2023, 3:20 PM

It's for any servlet deployment outside of Adobe's baked-in Tomcat install

jclausen

07/20/2023, 3:54 PM

Of note: Your server will not start if you copy/paste the args directly from the tech note. 🤦 You will need to remove the space after the

sign: -Djdk.serialFilter=!org.mozilla.**;!com.sun.syndication.**;!org.apache.commons.beanutils.**;!org.jgroups.**;!com.sun.rowset.**

bdw429s

07/20/2023, 4:09 PM

@Mark Takata (Adobe) ☝️ Can this be updated please?

chapmandu

07/25/2023, 4:03 AM

Hello All... How do you folks generally handle Docker builds for different environments.. In my particular case, when I run the docker build, I only want to

box install commandbox-fusionreactor

in production.. Interested to hear your approach. Thanks in advance..

bhartsfield

09/13/2023, 2:32 PM

Anyone successfully running commandbox/lucee on a windows servercore image? Any maintained, prewarmed image goodness out there I should know about before digging in?

👀 1

gmurphy

09/13/2023, 2:37 PM

@bhartsfield I was able to run CommandBox from there. It was a while ago.

👍 1

Tim Badolato

09/13/2023, 8:43 PM

I'm trying to upgrade Lucee to patch the recent security vuln, but I keep getting this error after restarting my container:

Copy code

You've asked for the engine [lucee@5.3.12.1] to be started,
   | but this server home already has [lucee@5.3.10+120] deployed to it!
   | In order to get the new version, you need to run 'server forget' on t
   | his server and start it again

If I ssh into the container and run 'box server forget', the whole instance shuts off before it completes. Then I tried from the host, running the command on the app directory, which succeeds, but after restarting the container, I get the same error. Any ideas? What does the

box server forget

actually do? Can I just do a

rm -rf

command on a directory to do it manually?

gavinbaumanis

09/21/2023, 7:08 AM

Hi Everyone, Is there a convenient way that I can uninstall the ortus hibernate extension and install the Lucee 3.5.5.x one( we cannot use 5,x - yet) That doesn;t require me to use a dockerfile and re-create the image? I am using docker compose to join in a DB and mailserver container to the commandbox image. But compose doesn't support "copy" - so I can't stick it in the deploy folder. I also tried by specifiying the LUCEE_EXTENSION env variable - but that didn't work. I am using the psuedo constructor of Application.cfc and the adminAPI to uninstall then adds in the one I want. so I have the app working - now - but I'd rather it wasnt in the code.

gavinbaumanis

09/28/2023, 3:16 AM

@mborn @jclausen I THINK I have found the issue I am having with using the Ortus Hibernate extension / Hibernate 5.x.... An exception is thrown where ever I use a transaction / transactionCommit(). In my Application.cfc I have the following ORM settings; (which with 3.5.x means I need to use transactions... as I don't have

flushAtRequestEnd

at play...)

Copy code

this.ormSettings = {
		datasource = "GSN",
		dialect = "MySQL",
		dbCreate = "none",
		cfcLocation = "/gsncfc/db",
		automanageSession = false,
		flushAtRequestEnd = false,
		useDBForMapping = false,
		eventHandling = true,
		eventHandler = "gsncfc.db.GlobalEventHandler",
		logSQL = false
	};

gavinbaumanis

10/10/2023, 9:24 PM

Hi @jclausen ... Are these tags missing a leading "5" from the version?

dougcain

10/11/2023, 2:07 PM

@jclausen any news on the cf2023 / 21 updates going to forgebox?

Ayushi

11/01/2023, 3:24 PM

Copy code

Hi I am running docker container of ortussolutions/commandbox:adobe2021-3.8.0
with cfengine = adobe@2021 on ECS Fargate task. 
When container starts running it is missing all these packages mentioned in install.txt file: 
packages=felixclassloader\:2021.0.3.329779,zip:\2021.0.02.328618,chart\:2021.0.02.328618,pdf\:2021.0.02.328618,awss3legacy\:2021.0.02.328618,feed\:2021.0.02.328618,sqlserver\:2021.0.02.328618,document\:2021.0.02.328618,scheduler\:2021.0.02.328618,debugger\:2021.0.02.328618,mail\:2021.0.02.328618,image\:2021.0.02.328618,spreadsheet\:2021.0.02.328618,caching\:2021.0.02.328618,adminapi\:2021.0.02.328618,administrator\:2021.0.02.328618

All this packages are needed for our coldfusion application. I tried installing all the packages via below  command in dockerfile but it doesn't help:

FROM ortussolutions/commandbox:adobe2021-3.8.0

WORKDIR /app ENV ACCEPT_EULA "Y" RUN box cfpm import /app/config/install.txt

Copy code

Also, I tried running this command as entrypoint script but still getting same error. Since the docker image  (ortussolutions/commandbox:adobe2021-3.8.0 ) once start running the container, it create WEB_INF dir and other startup process post which only it accept this command ( box cfpm import /app/config/install.txt_  to work. 


For this we have to wait around 4-5 minutes then execute this command manually in docker cotnainer to get all packages installed. Anyway we can automate that during docker build.