Use Candlepin project official image

[ehelms]

Attempting to use the Candlepin project's official container, but running into errors I do not understand:

2025-03-07 02:22:21,154 [thread=Thread-0 (ActiveMQ-server-ActiveMQServerImpl::name=localhost)] [=, org=, csid=] WARN  org.apache.activemq.artemis.core.server - AMQ222216: Security problem while authenticating: AMQ229031: Unable to validate user from invm:0. Username: null; SSL certificate subject DN: unavailable
2025-03-07 02:22:21,156 [thread=main] [=, org=, csid=] WARN  org.candlepin.audit.ArtemisMessageSource - Unable to reconnect message listeners. Messages will not be received: event.default
org.apache.activemq.artemis.api.core.ActiveMQSecurityException: AMQ229031: Unable to validate user from invm:0. Username: null; SSL certificate subject DN: unavailable

[nikosmoum]

what was the reason for this change? Once I undid this change and let the config files be under /etc/tomcat then it worked

[ehelms]

I think I ran into errors originally with this path. And then I assumed since tomcat is in /opt/tomcat and there is a conf directory in there that it should use that. Since it wouldn't want to clash with system tomcat from package.

What is the expectation for where configuration files should live with this image?

[ehelms]

I tested this locally and got a green result. Pushed update to this PR and we'll see what automation says.

[nikosmoum]

I see in the candlepin image we build we use /opt/tomcat/conf, so I have no idea why that doesn't work. I'll try to tinker a bit more on monday to see why

[nikosmoum]

@ehelms so it looks like the reason it worked previously by using /etc/tomcat/conf was because the wrong container was still being used (the one with the rpms). I had to do a few changes to get it working. Should I push a commit to this PR?

[nikosmoum]

You can find the diff here: nikosmoum@94d127d

[ehelms]

@ekohl How do you see your config in containers work (#102) squaring with this kind of change?

[ekohl]

@ekohl How do you see your config in containers work (#102) squaring with this kind of change?

We can still create a container that is FROM quay.io/candlepin/candlepin:4.4.20-1 and adds the config files & expose env vars. Maintenance wise we'll have to see what's best. I think quay can rebuild containers automatically if the base layer changes so that's something to investigate IMHO.

[ehelms]

Sure, or post a diff.

…

On Wed, Mar 26, 2025, 5:53 PM Nikos Moumoulidis ***@***.***> wrote: ***@***.**** commented on this pull request. ------------------------------ In roles/candlepin/defaults/main.yml <#104 (comment)> : > candlepin_db_host: localhost candlepin_db_port: 5432 candlepin_db_ssl: false candlepin_db_ssl_ca: None candlepin_db_ssl_verify: true + +candlepin_tomcat_home: /opt/tomcat/conf @ehelms <https://github.com/ehelms> so it looks like the reason it worked previously by using /etc/tomcat/conf was because the wrong container was still being used (the one with the rpms). I had to do a few changes to get it working. Should I push a commit to this PR? — Reply to this email directly, view it on GitHub <#104 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AACHT46PW24CDPADXLUIS4T2WLEPRAVCNFSM6AAAAABYQEX2COVHI2DSMVQWIX3LMV43YUDVNRWFEZLROVSXG5CSMV3GSZLXHMZDOMJXHE3DOMJUGY> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[ehelms]

@nikosmoum Updated based on your diff

[ehelms]

Moved: theforeman/candlepin-oci-images#2