java - Keycloak - 无法启动嵌入式服务器 : WFLYEMB0022: Cannot invoke 'start' on embedded process: Parameter 'abstractPath' must not be empty

Question

我有一个 Keycloak 实例通过容器注册表在 Heroku PM dyno 上独立运行。最近，此应用程序崩溃并显示以下日志。自 5 月 25 日以来，我没有更改代码，此时一切正常。 heroku dyno 没有接近任何限制。我的本地版本没问题。因此，我认为一定发生了以下情况之一。

基于独立设置的部署数据的一些损坏

底层镜像的变化-keycloak/11.0.2

我的容器注册表中损坏的图像正在覆盖内容

调试我试过:

验证数据库设置正确 - 它们很好

验证对数据库的查询是否按预期工作 - 也很好

重新启动应用程序，部署应用程序，重建镜像 - 所有相同的错误消息

使用新镜像 12.0.0 重新部署应用程序 - 相同的错误消息

通过按钮部署了此镜像的简单版本 ( https://github.com/mieckert/keycloak-heroku ) - 这在第一次部署时有效并按预期连接到数据库。但是，当我重新推送并重新发布完全相同的代码时，出现了相同的错误。

我接下来应该尝试什么？
日志:

Jun 09 08:50:28 Release v66 created by user [EMAIL]
Jun 09 08:50:28 Deployed web (c19fbf3aed30) by user [EMAIL]
Jun 09 08:50:39 Starting process with command `-b 0.0.0.0`
Jun 09 08:50:40  Found database configuration in [CORRECT DETAILS WERE HERE]
Jun 09 08:50:43  Added [EMAIL] to '/opt/jboss/keycloak/standalone/configuration/keycloak-add-user.json', restart server to load user
Jun 09 08:50:43  -b 0.0.0.0
Jun 09 08:50:43  =========================================================================
Jun 09 08:50:43    Using PostgreSQL database
Jun 09 08:50:43  =========================================================================
Jun 09 08:50:44  15:50:44,394 INFO  [org.jboss.modules] (CLI command executor) JBoss Modules version 1.10.2.Final
Jun 09 08:50:44  15:50:44,451 INFO  [org.jboss.msc] (CLI command executor) JBoss MSC version 1.4.12.Final
Jun 09 08:50:44  15:50:44,459 INFO  [org.jboss.threads] (CLI command executor) JBoss Threads version 2.4.0.Final
Jun 09 08:50:44  15:50:44,576 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0049: Keycloak 12.0.0 (WildFly Core 13.0.3.Final) starting
Jun 09 08:50:44  15:50:44,611 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-2) MSC000001: Failed to start service jboss.as: org.jboss.msc.service.StartException in service jboss.as: Failed to start service
Jun 09 08:50:44     at org.jboss.msc@1.4.12.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1731)
Jun 09 08:50:44     at org.jboss.msc@1.4.12.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1559)
Jun 09 08:50:44     at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
Jun 09 08:50:44     at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
Jun 09 08:50:44     at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
Jun 09 08:50:44     at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
Jun 09 08:50:44     at java.base/java.lang.Thread.run(Thread.java:834)
Jun 09 08:50:44  Caused by: java.lang.IllegalArgumentException: COM00008: Parameter 'abstractPath' must not be empty
Jun 09 08:50:44     at org.wildfly.common@1.5.4.Final//org.wildfly.common.Assert.checkNotEmptyParam(Assert.java:104)
Jun 09 08:50:44     at org.jboss.as.controller@13.0.3.Final//org.jboss.as.controller.services.path.AbsolutePathService.convertPath(AbsolutePathService.java:70)
Jun 09 08:50:44     at org.jboss.as.controller@13.0.3.Final//org.jboss.as.controller.services.path.AbsolutePathService.<init>(AbsolutePathService.java:49)
Jun 09 08:50:44     at org.jboss.as.controller@13.0.3.Final//org.jboss.as.controller.services.path.AbsolutePathService.addService(AbsolutePathService.java:59)
Jun 09 08:50:44     at org.jboss.as.controller@13.0.3.Final//org.jboss.as.controller.services.path.AbsolutePathService.addService(AbsolutePathService.java:53)
Jun 09 08:50:44     at org.jboss.as.controller@13.0.3.Final//org.jboss.as.controller.services.path.PathManagerService.addAbsolutePathService(PathManagerService.java:259)
Jun 09 08:50:44     at org.jboss.as.controller@13.0.3.Final//org.jboss.as.controller.services.path.PathManagerService.addHardcodedAbsolutePath(PathManagerService.java:160)
Jun 09 08:50:44     at org.jboss.as.server@13.0.3.Final//org.jboss.as.server.ServerPathManagerService.addService(ServerPathManagerService.java:55)
Jun 09 08:50:44     at org.jboss.as.server@13.0.3.Final//org.jboss.as.server.ApplicationServerService.start(ApplicationServerService.java:179)
Jun 09 08:50:44     at org.jboss.msc@1.4.12.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1739)
Jun 09 08:50:44     at org.jboss.msc@1.4.12.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1701)
Jun 09 08:50:44     ... 6 more
Jun 09 08:50:44  Cannot start embedded server: WFLYEMB0022: Cannot invoke 'start' on embedded process: WFLYSRV0141: Cannot start server: JBTHR00005: Operation failed: Failed to start service: COM00008: Parameter 'abstractPath' must not be empty

我的 docker 入口点文件

 
# Set database config from Heroku DATABASE_URL or HEROKU_POSTGRESQL_ORANGE_URL
if [ "$DATABASE_URL" != "" ]; then
   echo "Found database configuration in DATABASE_URL=$DATABASE_URL"
 
   regex='^postgres://([a-zA-Z0-9_-]+):([a-zA-Z0-9]+)@([a-z0-9.-]+):([[:digit:]]+)/([a-zA-Z0-9_-]+)$'
   if [[ $DATABASE_URL =~ $regex ]]; then
       export DB_ADDR=${BASH_REMATCH[3]}
       export DB_PORT=${BASH_REMATCH[4]}
       export DB_DATABASE=${BASH_REMATCH[5]}
       export DB_USER=${BASH_REMATCH[1]}
       export DB_PASSWORD=${BASH_REMATCH[2]}
 
       echo "DB_ADDR=$DB_ADDR, DB_PORT=$DB_PORT, DB_DATABASE=$DB_DATABASE, DB_USER=$DB_USER, DB_PASSWORD=$DB_PASSWORD"
       export DB_VENDOR=postgres
   fi
 
fi
 
# usage: file_env VAR [DEFAULT]
#    ie: file_env 'XYZ_DB_PASSWORD' 'example'
# (will allow for "$XYZ_DB_PASSWORD_FILE" to fill in the value of
#  "$XYZ_DB_PASSWORD" from a file, especially for Docker's secrets feature)
file_env() {
   local var="$1"
   local fileVar="${var}_FILE"
   local def="${2:-}"
   if [ "${!var:-}" ] && [ "${!fileVar:-}" ]; then
       echo >&2 "error: both $var and $fileVar are set (but are exclusive)"
       exit 1
   fi
   local val="$def"
   if [ "${!var:-}" ]; then
       val="${!var}"
   elif [ "${!fileVar:-}" ]; then
       val="$(< "${!fileVar}")"
   fi
   export "$var"="$val"
   unset "$fileVar"
}
 
##################
# Add admin user #
##################
 
file_env 'KEYCLOAK_USER'
file_env 'KEYCLOAK_PASSWORD'
 
if [ $KEYCLOAK_USER ] && [ $KEYCLOAK_PASSWORD ]; then
   /opt/jboss/keycloak/bin/add-user-keycloak.sh --user $KEYCLOAK_USER --password $KEYCLOAK_PASSWORD || echo "User already exists."
fi
 
############
# Hostname #
############
 
if [ "$KEYCLOAK_HOSTNAME" != "" ]; then
   SYS_PROPS="-Dkeycloak.hostname.provider=fixed -Dkeycloak.hostname.fixed.hostname=$KEYCLOAK_HOSTNAME"
 
   if [ "$KEYCLOAK_HTTP_PORT" != "" ]; then
       SYS_PROPS+=" -Dkeycloak.hostname.fixed.httpPort=$KEYCLOAK_HTTP_PORT"
   fi
 
   if [ "$KEYCLOAK_HTTPS_PORT" != "" ]; then
       SYS_PROPS+=" -Dkeycloak.hostname.fixed.httpsPort=$KEYCLOAK_HTTPS_PORT"
   fi
fi
 
################
# Realm import #
################
 
if [ "$KEYCLOAK_IMPORT" ]; then
   SYS_PROPS+=" -Dkeycloak.import=$KEYCLOAK_IMPORT"
fi
 
########################
# JGroups bind options #
########################
 
if [ -z "$BIND" ]; then
   BIND=$(hostname -i)
fi
if [ -z "$BIND_OPTS" ]; then
   for BIND_IP in $BIND
   do
       BIND_OPTS+=" -Djboss.bind.address=$BIND_IP -Djboss.bind.address.private=$BIND_IP "
   done
fi
SYS_PROPS+=" $BIND_OPTS"
 
#################
# Configuration #
#################
 
# If the server configuration parameter is not present, append the HA profile.
if echo "$@" | egrep -v -- '-c |-c=|--server-config |--server-config='; then
   SYS_PROPS+=" -c=standalone-ha.xml"
fi
 
############
# DB setup #
############
 
file_env 'DB_USER'
file_env 'DB_PASSWORD'
 
# Lower case DB_VENDOR
DB_VENDOR=`echo $DB_VENDOR | tr A-Z a-z`
 
# Detect DB vendor from default host names
if [ "$DB_VENDOR" == "" ]; then
   if (getent hosts postgres &>/dev/null); then
       export DB_VENDOR="postgres"
   elif (getent hosts mysql &>/dev/null); then
       export DB_VENDOR="mysql"
   elif (getent hosts mariadb &>/dev/null); then
       export DB_VENDOR="mariadb"
   fi
fi
 
# Detect DB vendor from legacy `*_ADDR` environment variables
if [ "$DB_VENDOR" == "" ]; then
   if (printenv | grep '^POSTGRES_ADDR=' &>/dev/null); then
       export DB_VENDOR="postgres"
   elif (printenv | grep '^MYSQL_ADDR=' &>/dev/null); then
       export DB_VENDOR="mysql"
   elif (printenv | grep '^MARIADB_ADDR=' &>/dev/null); then
       export DB_VENDOR="mariadb"
   fi
fi
 
# Default to H2 if DB type not detected
if [ "$DB_VENDOR" == "" ]; then
   export DB_VENDOR="h2"
fi
 
# Set DB name
case "$DB_VENDOR" in
   postgres)
       DB_NAME="PostgreSQL";;
   mysql)
       DB_NAME="MySQL";;
   mariadb)
       DB_NAME="MariaDB";;
   h2)
       DB_NAME="Embedded H2";;
   *)
       echo "Unknown DB vendor $DB_VENDOR"
       exit 1
esac
 
# Append '?' in the beggining of the string if JDBC_PARAMS value isn't empty
export JDBC_PARAMS=$(echo ${JDBC_PARAMS} | sed '/^$/! s/^/?/')
 
# Convert deprecated DB specific variables
function set_legacy_vars() {
 local suffixes=(ADDR DATABASE USER PASSWORD PORT)
 for suffix in "${suffixes[@]}"; do
   local varname="$1_$suffix"
   if [ ${!varname} ]; then
     echo WARNING: $varname variable name is DEPRECATED replace with DB_$suffix
     export DB_$suffix=${!varname}
   fi
 done
}
set_legacy_vars `echo $DB_VENDOR | tr a-z A-Z`
 
# Configure DB
 
echo "========================================================================="
echo ""
echo "  Using $DB_NAME database"
echo ""
echo "========================================================================="
echo ""
 
if [ "$DB_VENDOR" != "h2" ]; then
   /bin/sh /opt/jboss/tools/databases/change-database.sh $DB_VENDOR
fi
 
/opt/jboss/tools/x509.sh
/opt/jboss/tools/jgroups.sh $JGROUPS_DISCOVERY_PROTOCOL $JGROUPS_DISCOVERY_PROPERTIES
/opt/jboss/tools/autorun.sh
 
##################
# Start Keycloak #
##################
 
exec /opt/jboss/keycloak/bin/standalone.sh $SYS_PROPS $@ -Djboss.http.port=$PORT
exit $?
 

我的 Dockerfile:

 
COPY docker-entrypoint.sh /opt/jboss/tools
 
ENTRYPOINT [ "/opt/jboss/tools/docker-entrypoint.sh" ]
 
CMD ["-b", "0.0.0.0"]
 
RUN mkdir -p /opt/jboss/keycloak/themes/my_theme/
COPY /my_theme/ /opt/jboss/keycloak/themes/my_theme/

Answer 1

我遇到了这个完全相同的问题，并且能够通过设置一个全新的 Keycloak Heroku 应用程序来解决这个问题，在那里重新部署我的代码，然后重命名我的应用程序，以便从旧应用程序到新应用程序的流量。如果您需要，我可以提供有关此的详细信息，但这导致了一个新的 Keycloak 服务器(dyno)，一旦扩展到 Performance-M，它的运行方式与以前完全相同(afaik，Keycloak 配置存储在底层数据库中，所以如果您将您的原始数据库附加到新的 dyno 应用程序，然后您应该没问题)
我在过去一周左右遇到了完全相同的问题。我实际上也在运行不同版本的 Keycloak v10，最初尝试升级到 v13 以解决问题，但没有成功。我认为您说发生了某种损坏是正确的，因为当第一次失败发生时，我的实例也没有受到影响。我检查了 Heroku 更新日志中是否有任何会影响我的部署的内容，因为故障似乎发生在每日 dyno 重启后，但我在那里什么也没找到)
我认为您是正确的，这里存在某种损坏或潜在错误，可能是难以重现的错误，可能是 WildFly 代码、JVM、Keycloak 或与 Heroku 相关的东西