Project

General

Profile

Actions

Bug #26199

open

Bug #26195: Maven shade plugin update and ignore signatures

Janino dependency was not provided to plugins causing plugin load issue

Added by Clark ANDRIANASOLO about 1 month ago. Updated about 1 month ago.

Status:
Pending release
Priority:
N/A
Category:
Plugins management
Target version:
Severity:
UX impact:
User visibility:
Effort required:
Very Small
Priority:
0
Name check:
To do
Fix check:
To do
Regression:
No

Description

Plugins could no longer load with the webapp with the following error :

2025-01-16 04:11:59-0500 WARN  org.springframework.web.context.support.AnnotationConfigWebApplicationContext - Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.BeanDefinitionStoreException: Failed to read candidate component class: URL [jar:file:/opt/rudder/share/plugins/cve/cve.jar!/bootstrap/rudder/plugin/CveDefaults.class]
2025-01-16 04:11:59-0500 ERROR org.springframework.web.context.ContextLoader - Context initialization failed
org.springframework.beans.factory.BeanDefinitionStoreException: Failed to read candidate component class: URL [jar:file:/opt/rudder/share/plugins/cve/cve.jar!/bootstrap/rudder/plugin/CveDefaults.class] 

and later :

Caused by: java.lang.SecurityException: Invalid signature file digest for Manifest main attributes 

This is because the org.codehaus.janino dependency was not provided with plugins, as it is declared in Rudder, so we should ignore the filtering of signatures from parent ticket, and provide this in plugins-common

Actions #1

Updated by Clark ANDRIANASOLO about 1 month ago

  • Status changed from New to In progress
Actions #2

Updated by Clark ANDRIANASOLO about 1 month ago

  • Status changed from In progress to Pending technical review
  • Assignee changed from Clark ANDRIANASOLO to Vincent MEMBRÉ
  • Pull Request set to https://github.com/Normation/rudder-plugins/pull/787
Actions #3

Updated by Clark ANDRIANASOLO about 1 month ago

  • Status changed from Pending technical review to Pending release
Actions

Also available in: Atom PDF