[
https://issues.apache.org/jira/browse/IMPALA-14766?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Fang-Yu Rao updated IMPALA-14766:
---------------------------------
Summary: Unset JAVA_TOOL_OPTIONS before running
rpc_private_key_password_cmd_ (was: Unset Unset JAVA_TOOL_OPTIONS before
running rpc_private_key_password_cmd_)
> Unset JAVA_TOOL_OPTIONS before running rpc_private_key_password_cmd_
> --------------------------------------------------------------------
>
> Key: IMPALA-14766
> URL: https://issues.apache.org/jira/browse/IMPALA-14766
> Project: IMPALA
> Issue Type: Bug
> Reporter: Fang-Yu Rao
> Priority: Major
> Attachments:
> 0001-Unset-JAVA_TOOL_OPTIONS-before-running-rpc_private_k.patch
>
>
> We found that when Impala server is running with SSL enabled, if we add
> "{{{}-agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=*:5005{}}}"
> to {{{}JAVA_TOOL_OPTIONS{}}}, the Impala server could not be started with
> the following error.
> {code:java}
> W20260219 23:38:28.304831 518945 messenger.cc:122] could not get RPC password
> from configured command: Runtime error: failed to run private key password
> command: Runtime error:
> /var/run/cloudera-scm-agent/process/1546344460-impala-IMPALAD/altscript.sh:
> process exited with non-zero status 2: Picked up JAVA_TOOL_OPTIONS:
> -Xms4294967296 -Xmx4294967296
> -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=*:5005
> -XX:OnOutOfMemoryError=/opt/cloudera/cm-agent/service/common/killparent.sh
> --add-opens=java.base/java.io=ALL-UNNAMED
> --add-opens=java.base/java.lang.module=ALL-UNNAMED
> --add-opens=java.base/java.lang.ref=ALL-UNNAMED
> --add-opens=java.base/java.lang.reflect=ALL-UNNAMED
> --add-opens=java.base/java.lang=ALL-UNNAMED
> --add-opens=java.base/java.net=ALL-UNNAMED
> --add-opens=java.base/java.nio.charset=ALL-UNNAMED
> --add-opens=java.base/java.nio.file.attribute=ALL-UNNAMED
> --add-opens=java.base/java.nio=ALL-UNNAMED
> --add-opens=java.base/java.security=ALL-UNNAMED
> --add-opens=java.base/java.util.concurrent=ALL-UNNAMED
> --add-opens=java.base/java.util.jar=ALL-UNNAMED
> --add-opens=java.base/java.util.zip=ALL-UNNAMED
> --add-opens=java.base/java.util=ALL-UNNAMED
> --add-opens=java.base/jdk.internal.loader=ALL-UNNAMED
> --add-opens=java.base/jdk.internal.math=ALL-UNNAMED
> --add-opens=java.base/jdk.internal.module=ALL-UNNAMED
> --add-opens=java.base/jdk.internal.ref=ALL-UNNAMED
> --add-opens=java.base/jdk.internal.reflect=ALL-UNNAMED
> --add-opens=java.base/jdk.internal.util.jar=ALL-UNNAMED
> --add-opens=java.base/sun.nio.fs=ALL-UNNAMED
> --add-opens=jdk.dynalink/jdk.dynalink.beans=ALL-UNNAMED
> --add-opens=jdk.dynalink/jdk.dynalink.linker.support=ALL-UNNAMED
> --add-opens=jdk.dynalink/jdk.dynalink.linker=ALL-UNNAMED
> --add-opens=jdk.dynalink/jdk.dynalink.support=ALL-UNNAMED
> --add-opens=jdk.dynalink/jdk.dynalink=ALL-UNNAMED
> --add-opens=jdk.management.jfr/jdk.management.jfr=ALL-UNNAMED
> --add-opens=jdk.management/com.sun.management.internal=ALL-UNNAMED
> --add-exports=java.base/sun.net.dns=ALL-UNNAMED
> --add-exports=java.base/sun.net.util=ALL-UNNAMED
> -javaagent:/opt/cloudera/parcels/CDH-7.3.2-1.cdh7.3.2.p0.75933187/lib/impala/lib/jamm-0.4.0.jar
> --add-opens=java.base/java.lang=ALL-UNNAMED
> --add-opens=java.base/java.nio=ALL-UNNAMED
> --add-opens=java.base/java.util.regex=ALL-UNNAMED
> --add-opens=java.base/sun.nio.ch=ALL-UNNAMED -Dsun.java.command=impalad
> ERROR: transport error 202: bind failed: Address already in use
> ERROR: JDWP Transport dt_socket failed to initialize, TRANSPORT_INIT(510)
> JDWP exit error AGENT_ERROR_TRANSPORT_INIT(197): No transports initialized
> [src/jdk.jdwp.agent/share/native/libjdwp/debugInit.c:744]
> I20260219 23:38:28.307538 518945 messenger.cc:183] shutting down messenger
> impala-server
> {code}
>
> This is due to the failure of {{security::GetPasswordFromShellCommand(
> rpc_private_key_password_cmd_, &ret)}} at
> [https://github.com/apache/impala/blob/a2ea1be/be/src/kudu/rpc/messenger.cc#L126].
> This is because {{rpc_private_key_password_cmd_}}, a Java program, inherits
> the value of {{JAVA_TOOL_OPTIONS}} from the Impala process, and hence tries
> to listen on the same port of 5005, which has been used already by the Impala
> process.
> Therefore, we should unset {{JAVA_TOOL_OPTIONS}} before executing the command
> {{rpc_private_key_password_cmd_}}.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
