Bug 1975010 - FreeIPA replica deployment fails with multiple "NoClassDefFoundError: Unable to load builtin provider" warnings
Summary: FreeIPA replica deployment fails with multiple "NoClassDefFoundError: Unable ...
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: pki-core
Version: rawhide
Hardware: All
OS: Linux
unspecified
high
Target Milestone: ---
Assignee: Endi Sukma Dewata
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: openqa
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-06-22 22:52 UTC by Adam Williamson
Modified: 2021-06-23 15:20 UTC (History)
11 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-06-23 15:20:51 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
Full /var/log tarball from an occurrence of the failure in openQA (1.72 MB, application/octet-stream)
2021-06-22 22:53 UTC, Adam Williamson
no flags Details

Description Adam Williamson 2021-06-22 22:52:19 UTC
With recent Rawhide composes - after pki-core-10.11.0-0.4.alpha2.fc35 landed to fix https://bugzilla.redhat.com/show_bug.cgi?id=1965721 - FreeIPA replica deployment is now failing with different errors. The console shows:

CA configuration failed.
The ipa-replica-install command failed. See /var/log/ipareplica-install.log for more information.

The problems in ipareplica-install.log start here:

DEBUG: Command: pki -d /etc/pki/pki-tomcat/alias -f /etc/pki/pki-tomcat/password.conf -U https://ipa002.test.openqa.fedoraproject.org:443 ca-range-request request --install-token /tmp/tmp6
8s29qdg/install-token --output-format json --debug
INFO: Connecting to https://ipa002.test.openqa.fedoraproject.org:443
WARN: RESTEASY002145: NoClassDefFoundError: Unable to load builtin provider org.jboss.resteasy.plugins.providers.IIOImageProvider from jar:file:/usr/share/java/resteasy/resteasy-jaxrs.jar!/META-INF/services/javax.ws.rs.ext.Providers
java.lang.NoClassDefFoundError: javax/annotation/Priority
        at org.jboss.resteasy.spi.ResteasyProviderFactory.getPriority(ResteasyProviderFactory.java:1425)
        at org.jboss.resteasy.spi.ResteasyProviderFactory.registerProvider(ResteasyProviderFactory.java:1463)
        at org.jboss.resteasy.spi.ResteasyProviderFactory.registerProvider(ResteasyProviderFactory.java:1398)
        at org.jboss.resteasy.plugins.providers.RegisterBuiltin.registerProviders(RegisterBuiltin.java:133)
        at org.jboss.resteasy.plugins.providers.RegisterBuiltin.register(RegisterBuiltin.java:45)
        at org.jboss.resteasy.client.jaxrs.ResteasyClientBuilder.getProviderFactory(ResteasyClientBuilder.java:334)
        at org.jboss.resteasy.client.jaxrs.ResteasyClientBuilder.build(ResteasyClientBuilder.java:367)
        at com.netscape.certsrv.client.PKIConnection.<init>(PKIConnection.java:198)
        at com.netscape.certsrv.client.PKIClient.<init>(PKIClient.java:76)
        at com.netscape.certsrv.client.PKIClient.<init>(PKIClient.java:65)
        at com.netscape.cmstools.cli.MainCLI.getClient(MainCLI.java:592)
        at org.dogtagpki.cli.CLI.getClient(CLI.java:207)
        at com.netscape.cmstools.ca.CACLI.getSubsystemClient(CACLI.java:66)
        at com.netscape.cmstools.range.RangeRequestCLI.execute(RangeRequestCLI.java:80)
        at org.dogtagpki.cli.CommandCLI.execute(CommandCLI.java:58)
        at org.dogtagpki.cli.CLI.execute(CLI.java:357)
        at org.dogtagpki.cli.CLI.execute(CLI.java:357)
        at com.netscape.cmstools.cli.SubsystemCLI.execute(SubsystemCLI.java:79)
        at org.dogtagpki.cli.CLI.execute(CLI.java:357)
        at com.netscape.cmstools.cli.MainCLI.execute(MainCLI.java:665)
        at com.netscape.cmstools.cli.MainCLI.main(MainCLI.java:701)
Caused by: java.lang.ClassNotFoundException: javax.annotation.Priority
        at java.base/jdk.internal.loader.BuiltinClassLoader.loadClass(BuiltinClassLoader.java:581)
        at java.base/jdk.internal.loader.ClassLoaders$AppClassLoader.loadClass(ClassLoaders.java:178)
        at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:522)
        ... 21 more

after that, there are a lot more similar warnings, then eventually we get to this:

CalledProcessError: Command '['pki', '-d', '/etc/pki/pki-tomcat/alias', '-f', '/etc/pki/pki-tomcat/password.conf', '-U', 'https://ipa002.test.openqa.fedoraproject.org:443', 'ca-range-reque
st', 'request', '--install-token', '/tmp/tmp68s29qdg/install-token', '--output-format', 'json', '--debug']' returned non-zero exit status 255.
  File "/usr/lib/python3.10/site-packages/pki/server/pkispawn.py", line 575, in main
    scriptlet.spawn(deployer)
  File "/usr/lib/python3.10/site-packages/pki/server/deployment/scriptlets/configuration.py", line 585, in spawn
    subsystem.request_ranges(master_url, session_id=deployer.install_token.token)
  File "/usr/lib/python3.10/site-packages/pki/server/subsystem.py", line 1112, in request_ranges
    request_range = self.request_range(
  File "/usr/lib/python3.10/site-packages/pki/server/subsystem.py", line 1101, in request_range
    output = subprocess.check_output(cmd)
  File "/usr/lib64/python3.10/subprocess.py", line 420, in check_output
    return run(*popenargs, stdout=PIPE, timeout=timeout, check=True,
  File "/usr/lib64/python3.10/subprocess.py", line 524, in run
    raise CalledProcessError(retcode, process.args,


2021-06-22T11:10:53Z CRITICAL Failed to configure CA instance
2021-06-22T11:10:53Z CRITICAL See the installation logs and the following files/directories for more information:
2021-06-22T11:10:53Z CRITICAL   /var/log/pki/pki-tomcat

I will attach the full /var/log tarball.

Comment 1 Adam Williamson 2021-06-22 22:53:38 UTC
Created attachment 1793267 [details]
Full /var/log tarball from an occurrence of the failure in openQA

Comment 2 Endi Sukma Dewata 2021-06-23 00:01:15 UTC
Could you retry with pki-core-11.0.0-0.1.alpha1.fc35 and resteasy-3.0.26-11.fc35? Thanks.

Comment 3 Adam Williamson 2021-06-23 00:11:34 UTC
This is still happening as of today, so it would have been with that version of resteasy, I think. pki-core looks like it was only just built, though, so we'll see how tomorrow's compose goes.

Comment 4 Adam Williamson 2021-06-23 15:20:51 UTC
Replica tests passed today. Thanks!


Note You need to log in before you can comment on or make changes to this bug.