Taher, It is not the vendor of hosting services dictating the GRC policies and procedures IT organisations and/or (implementation) service providers (consultants, developers, etc) need to adhere to. They merely convey the boundaries they operate in and have a price for their services that is based on the risk they run and can divide amongst their customers and the influences of the market.
GRC policies and procedures are dictated and upheld by the companies that employ an DEVOPS staff, or buy external services. Maybe you haven't had the opportunity to work in/with organisations who have certified their processes. And any company is different in how they assess, address and mitigate the risks that threaten their reputation and the underlying existence of the company. But it leads to the reason why SLAs (e.g. regarding uptime and performance) exists. Best regards, Pierre Smits ORRTIZ.COM <http://www.orrtiz.com> OFBiz based solutions & services OFBiz Extensions Marketplace http://oem.ofbizci.net/oci-2/ On Sun, Jul 17, 2016 at 11:56 AM, Taher Alkhateeb < [email protected]> wrote: > Hi Pierre, > > By the way if you don't want to / cannot copy the .gradle folder then I'm > afraid you have to build a new jar yourself because the generated Jar > contains the absolute Class-Path entries for all other jars required. If > you want to put them in a different folder then you have to regenerate the > Jar with the correct classpath entries (or alternatively include them in > your -cp arguments). It's a few lines of code in Gradle but you should be > familiar with configurations and iterations and some closure logic. So I > think your safest bet is to just copy the .gradle folder to your production > environment. > > With that being said, I find the requirements for your production > environment quite draconian! I haven't seen anything like that before. I > can spin off a droplet in DigitalOcean for 10$ a month that can do pretty > much everything I need. If you're not stuck with them I think it would be a > good idea to consider other vendors. > > Regrads, > > Taher Alkhateeb > > On Sun, Jul 17, 2016 at 4:47 AM, Pierre Smits <[email protected]> > wrote: > > > Hi Taher, > > > > Bringing the dev environment up to the latest revision did the trick. > > Thanks! > > > > Even > > > > Pierre Smits > > > > ORRTIZ.COM <http://www.orrtiz.com> > > OFBiz based solutions & services > > > > OFBiz Extensions Marketplace > > http://oem.ofbizci.net/oci-2/ > > > > On Sat, Jul 16, 2016 at 9:10 PM, Taher Alkhateeb < > > [email protected] > > > wrote: > > > > > Hi Pierre, > > > > > > Maybe try it without the word apache because you're on an older > revision? > > > > > > On Jul 16, 2016 9:10 PM, "Pierre Smits" <[email protected]> > wrote: > > > > > > > Hi Taher, > > > > > > > > You said: 'You can run the system by typing java -cp > > > build/libs/jarname.jar > > > > org.apache.ofbiz.base.start.Start or running the jar directly. > > > > > > > > I tried: > > > > > > > > java -cp build/libs/ofbiz-gradle.jar > org.apache.ofbiz.base.start.Start > > > > > > > > I guess that 'ofbiz-gradle.jar' is the 'jarname.jar' you mentioned. > > > > > > > > But that resulted in: > > > > > > > > Error: Could not find or load main class > > > org.apache.ofbiz.base.start.Start > > > > > > > > > > > > Best regards, > > > > > > > > > > > > Pierre Smits > > > > > > > > ORRTIZ.COM <http://www.orrtiz.com> > > > > OFBiz based solutions & services > > > > > > > > OFBiz Extensions Marketplace > > > > http://oem.ofbizci.net/oci-2/ > > > > > > > > On Sat, Jul 16, 2016 at 7:06 PM, Pierre Smits < > [email protected]> > > > > wrote: > > > > > > > > > Thanks. > > > > > > > > > > In a wadload of postgresql jars found I got: > > > > > > > > > > > > > > > > > > > > > > > > > ./Users/pierre/.gradle/caches/modules-2/files-2.1/postgresql/postgresql/9.0-801.jdbc4/153f2f92a786f12fc111d0111f709012df87c808/postgresql-9.0-801.jdbc4.jar > > > > > > > > > > So that adds to the traceability issue I have. A pom in one folder > > and > > > a > > > > > jar in another, no apparent relation and no logging. More digging > to > > > do. > > > > :( > > > > > > > > > > Best regards, > > > > > > > > > > Pierre Smits > > > > > > > > > > ORRTIZ.COM <http://www.orrtiz.com> > > > > > OFBiz based solutions & services > > > > > > > > > > OFBiz Extensions Marketplace > > > > > http://oem.ofbizci.net/oci-2/ > > > > > > > > > > On Sat, Jul 16, 2016 at 6:54 PM, Taher Alkhateeb < > > > > > [email protected]> wrote: > > > > > > > > > >> find . -iname "*postgres*.jar" > > > > >> > > > > >> On Jul 16, 2016 7:50 PM, "Pierre Smits" <[email protected]> > > > wrote: > > > > >> > > > > >> > Hmm. > > > > >> > > > > > >> > It seems I overlooked that it was a directory. > > > > >> > > > > > >> > This is what I have in the directory: > > > > >> > > > > > >> > Pierres-MacBook-Pro:files-2.1 pierre$ ls > > > > >> > > > > > >> > > > > > >> > > > > > > > > > > ./caches/modules-2/files-2/postgresql/postgresql/9.0-801.jdbc4/58952dea25c6251a7666d8eea01e4a31da0f8cf7 > > > > >> > > > > > >> > postgresql-9.0-801.jdbc4.pom > > > > >> > > > > > >> > And the pom file contains: > > > > >> > > > > > >> > <?xml version="1.0"?> > > > > >> > > > > > >> > <project> > > > > >> > > > > > >> > <modelVersion>4.0.0</modelVersion> > > > > >> > > > > > >> > <groupId>postgresql</groupId> > > > > >> > > > > > >> > <artifactId>postgresql</artifactId> > > > > >> > > > > > >> > <packaging>jar</packaging> > > > > >> > > > > > >> > <name>PostgreSQL JDBC Driver</name> > > > > >> > > > > > >> > <version>9.0-801.jdbc4</version> > > > > >> > > > > > >> > <url>http://jdbc.postgresql.org</url> > > > > >> > > > > > >> > <description>The PostgreSQL Driver JDBC4</description> > > > > >> > > > > > >> > <licenses> > > > > >> > > > > > >> > <license> > > > > >> > > > > > >> > <name>BSD License</name> > > > > >> > > > > > >> > <url>http://jdbc.postgresql.org/license.html</url> > > > > >> > > > > > >> > <distribution>repo</distribution> > > > > >> > > > > > >> > </license> > > > > >> > > > > > >> > </licenses> > > > > >> > > > > > >> > </project> > > > > >> > > > > > >> > > > > > >> > I am yet to find the actual jar on my Mac. > > > > >> > > > > > >> > > > > > >> > Best regards, > > > > >> > > > > > >> > Pierre Smits > > > > >> > > > > > >> > ORRTIZ.COM <http://www.orrtiz.com> > > > > >> > OFBiz based solutions & services > > > > >> > > > > > >> > OFBiz Extensions Marketplace > > > > >> > http://oem.ofbizci.net/oci-2/ > > > > >> > > > > > >> > On Sat, Jul 16, 2016 at 6:42 PM, Taher Alkhateeb < > > > > >> > [email protected] > > > > >> > > wrote: > > > > >> > > > > > >> > > Hi Pierre, > > > > >> > > > > > > >> > > The jar name is there, what is hashed is the directory name. > For > > > > >> example > > > > >> > > the postgresql jar on my computer is > > > > >> > > > > > > >> > > > > > > >> > > > > > >> > > > > > > > > > > ./caches/modules-2/files-2.1/postgresql/postgresql/9.0-801.jdbc4/153f2f92a786f12fc111d0111f709012df87c808/postgresql-9.0-801.jdbc4.jar > > > > >> > > > > > > >> > > > > > > >> > > Regards, > > > > >> > > > > > > >> > > Taher Alkhateeb > > > > >> > > > > > > >> > > On Sat, Jul 16, 2016 at 7:38 PM, Pierre Smits < > > > > [email protected] > > > > >> > > > > > >> > > wrote: > > > > >> > > > > > > >> > > > Taher, > > > > >> > > > > > > > >> > > > Have a look at: > > > > >> > > > > > > > >> > > > > > > > >> > > > > > > >> > > > > > >> > > > > > > > > > > https://issues.apache.org/jira/browse/OFBIZ-7783?focusedCommentId=15380747&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-15380747 > > > > >> > > > > > > > >> > > > It appears that the build proces doesn't only copy the jars, > > but > > > > >> also > > > > >> > > > transforms them. The files stored aren't recognisable. Not > by > > > > their > > > > >> > type > > > > >> > > > nor by name. > > > > >> > > > > > > > >> > > > Best regards, > > > > >> > > > > > > > >> > > > Pierre Smits > > > > >> > > > > > > > >> > > > ORRTIZ.COM <http://www.orrtiz.com> > > > > >> > > > OFBiz based solutions & services > > > > >> > > > > > > > >> > > > OFBiz Extensions Marketplace > > > > >> > > > http://oem.ofbizci.net/oci-2/ > > > > >> > > > > > > > >> > > > On Sat, Jul 16, 2016 at 6:26 PM, Pierre Smits < > > > > >> [email protected]> > > > > >> > > > wrote: > > > > >> > > > > > > > >> > > > > Hi Taher, > > > > >> > > > > > > > > >> > > > > Jacques already implemented a change to the rc scripts in > > the > > > > >> tools > > > > >> > > > > folder, but that works through the gradle build proces. > And > > > > >> building > > > > >> > is > > > > >> > > > > something that isn't allowed on production servers. In > order > > > to > > > > >> meet > > > > >> > > SLAs > > > > >> > > > > they are optimized to maximum uptime and maximum > > performance. > > > > >> > > > > > > > > >> > > > > Best regards, > > > > >> > > > > > > > > >> > > > > Pierre Smits > > > > >> > > > > > > > > >> > > > > ORRTIZ.COM <http://www.orrtiz.com> > > > > >> > > > > OFBiz based solutions & services > > > > >> > > > > > > > > >> > > > > OFBiz Extensions Marketplace > > > > >> > > > > http://oem.ofbizci.net/oci-2/ > > > > >> > > > > > > > > >> > > > > On Sat, Jul 16, 2016 at 6:21 PM, Pierre Smits < > > > > >> > [email protected]> > > > > >> > > > > wrote: > > > > >> > > > > > > > > >> > > > >> Taher, > > > > >> > > > >> > > > > >> > > > >> Deployment is very controlled process/procedure bound by > > > > >> > constraints, > > > > >> > > so > > > > >> > > > >> the deployment process must bring all required elements > > > > together > > > > >> in > > > > >> > to > > > > >> > > > >> something that can be deployed. In OFBiz terminology the > > > > >> convenience > > > > >> > > > >> package or binary release. > > > > >> > > > >> > > > > >> > > > >> In this deployment process this also means that > everything > > > not > > > > >> > needed > > > > >> > > in > > > > >> > > > >> the production environment must be removed: > > > > >> > > > >> > > > > >> > > > >> - java source code > > > > >> > > > >> - build definition files > > > > >> > > > >> - the OFBiz data sets > > > > >> > > > >> - etc > > > > >> > > > >> > > > > >> > > > >> Best regards, > > > > >> > > > >> > > > > >> > > > >> Pierre Smits > > > > >> > > > >> > > > > >> > > > >> ORRTIZ.COM <http://www.orrtiz.com> > > > > >> > > > >> OFBiz based solutions & services > > > > >> > > > >> > > > > >> > > > >> OFBiz Extensions Marketplace > > > > >> > > > >> http://oem.ofbizci.net/oci-2/ > > > > >> > > > >> > > > > >> > > > >> On Sat, Jul 16, 2016 at 6:13 PM, Pierre Smits < > > > > >> > [email protected] > > > > >> > > > > > > > >> > > > >> wrote: > > > > >> > > > >> > > > > >> > > > >>> Hence why I created: > > > > >> > > > >>> > > > > >> > > > >>> > > > > >> > > > >>> - OFBIZ-7796 Running OFBiz as a service fails > > > > >> > > > >>> - OFBIZ-7783 External libraries are not in the OFBiz > > > folder > > > > >> > > > structure > > > > >> > > > >>> - OFBIZ-7782 Duplicates of .properies and Label files > > > > appear > > > > >> > > > >>> > > > > >> > > > >>> Best regards, > > > > >> > > > >>> > > > > >> > > > >>> Pierre Smits > > > > >> > > > >>> > > > > >> > > > >>> ORRTIZ.COM <http://www.orrtiz.com> > > > > >> > > > >>> OFBiz based solutions & services > > > > >> > > > >>> > > > > >> > > > >>> OFBiz Extensions Marketplace > > > > >> > > > >>> http://oem.ofbizci.net/oci-2/ > > > > >> > > > >>> > > > > >> > > > >>> On Sat, Jul 16, 2016 at 5:57 PM, Pierre Smits < > > > > >> > > [email protected]> > > > > >> > > > >>> wrote: > > > > >> > > > >>> > > > > >> > > > >>>> I thought that Gradle was not unlike the other java > based > > > > build > > > > >> > > tools > > > > >> > > > >>>> like Ant and Maven, and that it could generate a jar > too. > > > > >> > > > >>>> > > > > >> > > > >>>> Ohh. I forgot to mention some other requirements: > > > > >> > > > >>>> > > > > >> > > > >>>> - The 3rd party libraries must reside within the > > > > application > > > > >> > > > >>>> - Auditors must be able to track the origin of 3rd > > party > > > > >> > > libraries > > > > >> > > > >>>> residing in applications > > > > >> > > > >>>> > > > > >> > > > >>>> Best regards, > > > > >> > > > >>>> > > > > >> > > > >>>> > > > > >> > > > >>>> Pierre Smits > > > > >> > > > >>>> > > > > >> > > > >>>> ORRTIZ.COM <http://www.orrtiz.com> > > > > >> > > > >>>> OFBiz based solutions & services > > > > >> > > > >>>> > > > > >> > > > >>>> OFBiz Extensions Marketplace > > > > >> > > > >>>> http://oem.ofbizci.net/oci-2/ > > > > >> > > > >>>> > > > > >> > > > >>>> On Sat, Jul 16, 2016 at 5:51 PM, Pierre Smits < > > > > >> > > [email protected] > > > > >> > > > > > > > > >> > > > >>>> wrote: > > > > >> > > > >>>> > > > > >> > > > >>>>> Hi Taher, > > > > >> > > > >>>>> > > > > >> > > > >>>>> Thanks for your quick response. > > > > >> > > > >>>>> > > > > >> > > > >>>>> The reason why this is needed is because I am limited > in > > > my > > > > >> > options > > > > >> > > > in > > > > >> > > > >>>>> hardened servers in production environments, as a > result > > > of > > > > >> GRC > > > > >> > > > policies > > > > >> > > > >>>>> and procedures. > > > > >> > > > >>>>> This entails (amongst others): > > > > >> > > > >>>>> > > > > >> > > > >>>>> - no ports open than those that are required to > > access > > > > the > > > > >> > > server > > > > >> > > > >>>>> environment (ssh) or the application (in the case > of > > > > OFBiz: > > > > >> > the > > > > >> > > > designated > > > > >> > > > >>>>> ajp port. > > > > >> > > > >>>>> - no manual starting of stopping of services other > > than > > > > >> > through > > > > >> > > > >>>>> services (rc scripts) and chron jobs > > > > >> > > > >>>>> - no downloading of software etc from within the > > server > > > > >> > > > >>>>> - no build processes allowed on application servers > > > when > > > > >> the > > > > >> > > > >>>>> reside in the production environment. > > > > >> > > > >>>>> > > > > >> > > > >>>>> I trust that answers your question. > > > > >> > > > >>>>> > > > > >> > > > >>>>> Best regards, > > > > >> > > > >>>>> > > > > >> > > > >>>>> Pierre Smits > > > > >> > > > >>>>> > > > > >> > > > >>>>> ORRTIZ.COM <http://www.orrtiz.com> > > > > >> > > > >>>>> OFBiz based solutions & services > > > > >> > > > >>>>> > > > > >> > > > >>>>> OFBiz Extensions Marketplace > > > > >> > > > >>>>> http://oem.ofbizci.net/oci-2/ > > > > >> > > > >>>>> > > > > >> > > > >>>>> On Sat, Jul 16, 2016 at 5:33 PM, Taher Alkhateeb < > > > > >> > > > >>>>> [email protected]> wrote: > > > > >> > > > >>>>> > > > > >> > > > >>>>>> Hi Pierre, > > > > >> > > > >>>>>> > > > > >> > > > >>>>>> Can I ask what do you want the jar for maybe I can > > > provide > > > > an > > > > >> > > > >>>>>> alternative > > > > >> > > > >>>>>> answer? > > > > >> > > > >>>>>> > > > > >> > > > >>>>>> Taher Alkhateeb > > > > >> > > > >>>>>> > > > > >> > > > >>>>>> On Jul 16, 2016 6:31 PM, "Pierre Smits" < > > > > >> [email protected] > > > > >> > > > > > > >> > > > >>>>>> wrote: > > > > >> > > > >>>>>> > > > > >> > > > >>>>>> > Hi all, > > > > >> > > > >>>>>> > > > > > >> > > > >>>>>> > I am still working my way through how our gradle > > > > >> > implementation > > > > >> > > > >>>>>> works and > > > > >> > > > >>>>>> > how I can apply it in a CI/CD environment. And I > > still > > > > have > > > > >> > some > > > > >> > > > >>>>>> questions. > > > > >> > > > >>>>>> > So I hope someone will help me a bit. > > > > >> > > > >>>>>> > > > > > >> > > > >>>>>> > How do I use the Gradle build process to generate > the > > > > ofbiz > > > > >> > > > >>>>>> executable (the > > > > >> > > > >>>>>> > jar file)? > > > > >> > > > >>>>>> > > > > > >> > > > >>>>>> > > > > > >> > > > >>>>>> > Best regards, > > > > >> > > > >>>>>> > > > > > >> > > > >>>>>> > Pierre Smits > > > > >> > > > >>>>>> > > > > > >> > > > >>>>>> > ORRTIZ.COM <http://www.orrtiz.com> > > > > >> > > > >>>>>> > OFBiz based solutions & services > > > > >> > > > >>>>>> > > > > > >> > > > >>>>>> > OFBiz Extensions Marketplace > > > > >> > > > >>>>>> > http://oem.ofbizci.net/oci-2/ > > > > >> > > > >>>>>> > > > > > >> > > > >>>>>> > > > > >> > > > >>>>> > > > > >> > > > >>>>> > > > > >> > > > >>>> > > > > >> > > > >>> > > > > >> > > > >> > > > > >> > > > > > > > > >> > > > > > > > >> > > > > > > >> > > > > > >> > > > > > > > > > > > > > > > > > > > >
