The WEB-INF folder - I saw a post on TeraTech that said in v6 this would move out of the web root by default? But using 6.2 I still see a /mywebapp/WEB-INF folder. I know I can mod the Tomcat files but was wondering if in v6 there was a simpler method?

Hmm I end up with one in my webroot...

Hmmm, your admin is green?

Yep!

~/www/devenv/repos/website/htdocs  lucee-2-beta ! ❯ ls -la
drwxr-xr-x  6 jpriest staff  4096 Mar 21 13:30 .
drwxr-xr-x 20 jpriest staff  4096 Mar 21 11:11 ..
-rw-r--r--  1 jpriest staff    14 Oct 21 10:05 404.cfm
drwxr-xr-x 25 jpriest staff  4096 Mar 13 14:44 admin
-rw-r--r--  1 jpriest staff 54683 Mar 21 15:43 Application.cfc
...
drwxr-x---  3 root    root   4096 Mar 21 13:30 WEB-INF   <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

That is odd, fresh install?

Yep this in my Docker environment. I can delete it, rebuild and it is regenerated - you can see the ownership is different above in the listing

Which docker image are u using?

This is all DIY - so FROM debian:bookworm-slim, not using a Lucee image. And then just dl'ing the installing and running it within the container

cf_installer=lucee-6.2.1.77-RC-linux-x64-installer.run

wget --no-verbose --directory-prefix=/tmp <https://cdn.lucee.org/$cf_installer>

chmod +x /tmp/$cf_installer
/tmp/$cf_installer --mode unattended --luceepass "adminpassword" --optionfile /tmp/$cf_installer_properties_file

At least it's empty! Ok shouldn't be happening, plz file a bug and I'll investigate Out of curiosity, does this also happen with the lucee images?

I'll open a bug on monday and will try one of the Lucee images as well and let you know! Using mod_cfml - my installer properties:

installdir=/opt/lucee
tomcatport=8888
tomcatshutdownport=8005
tomcatajpport=8009
systemuser=root
startatboot=true
installconn=true
apachecontrolloc=/usr/sbin/apachectl
apachemodulesloc=/usr/lib/apache2/modules
apacheconfigloc=/etc/apache2/apache2.conf
apachelogloc=/var/log/apache2/
installiis=false
installmodcfml=true

My son is playing Minecraft so I can't check now myself

LOL - no worries - enjoy your weekend! 🙂

The timestamp for the folder is from when you make the first request?

I've also seen this on a non-docker Windows clean install: empty WEB-INF directory created in the web root, despite

"mode": "single"

I was looking into the code on my phone last night, I think I know why it's happening

6.2.1.84-SNAPSHOT works great. No more empty WEB-INFs👍

things i do to keep @Brian Reilly happy, we did some work together before to reduce the ability of script kiddies to finger print Lucee, this obviously helps

@zackster So what led me on this whole issue in the first place 🙂 was where does one drop JAR files with no WEB-INF folder LOL Currently in Adobe CF we're dropping the BouncyCastle jar here:

mv /tmp/bcprov-jdk15on-1.53.jar /opt/ColdFusion/cfusion/runtime/lib/bcprov-jdk15on-153.jar \

Long term plans are to move this to inside our app and use this.javasettings to load it but for now I'm trying not to change much while I get Lucee working...

/lucee-server/context/lib

but that's old school, However, drumroll, with 6.2 we have built in support for maven which means you can define the required jars via

CFconfig.json

, or by

application.cfc

or even per

cfc

and Lucee will automatically download and make it available, on the fly https://docs.lucee.org/recipes/maven.html