UCS und Keycloak

UCS - Univention Corporate Server
1

Unsere aktuelle UCS Version: Current UCS version is 5.0-10 errata1385

Beim Versuch Keycloak zu installieren bricht die Installation immer mit einem Fehler ab: Permission denied.

Could not copy machine.secret to container: [Errno 2] No such file or directory: ‘/var/lib/docker/overlay2/c96d357b0605648d9574ba4fc214316335ca8d8805e86ecca944de01bb335e05/merged/etc/machine.secret’ (Exception in thread “main” java.lang.ExceptionInInitializerError
at java.base/sun.nio.ch.FileChannelImpl.(FileChannelImpl.java:132)
at java.base/sun.nio.ch.FileChannelImpl.open(FileChannelImpl.java:154)
at java.base/sun.nio.fs.UnixChannelFactory.newFileChannel(UnixChannelFactory.java:134)
at java.base/sun.nio.fs.UnixChannelFactory.newFileChannel(UnixChannelFactory.java:146)
at java.base/sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:216)
at java.base/java.nio.file.Files.newByteChannel(Files.java:380)
at java.base/java.nio.file.Files.newByteChannel(Files.java:432)
at java.base/java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:422)
at java.base/java.nio.file.Files.newInputStream(Files.java:160)
at io.quarkus.bootstrap.runner.QuarkusEntryPoint.doRun(QuarkusEntryPoint.java:59)
at io.quarkus.bootstrap.runner.QuarkusEntryPoint.main(QuarkusEntryPoint.java:37)
Caused by: java.io.IOException: Permission denied
at java.base/sun.nio.ch.FileDispatcherImpl.init(Native Method)
at java.base/sun.nio.ch.FileDispatcherImpl.(FileDispatcherImpl.java:38)
… 11 more
Exception in thread “main” java.lang.ExceptionInInitializerError
at java.base/sun.nio.ch.FileChannelImpl.(FileChannelImpl.java:132)
at java.base/sun.nio.ch.FileChannelImpl.open(FileChannelImpl.java:154)
at java.base/sun.nio.fs.UnixChannelFactory.newFileChannel(UnixChannelFactory.java:134)
at java.base/sun.nio.fs.UnixChannelFactory.newFileChannel(UnixChannelFactory.java:146)
at java.base/sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:216)
at java.base/java.nio.file.Files.newByteChannel(Files.java:380)
at java.base/java.nio.file.Files.newByteChannel(Files.java:432)
at java.base/java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:422)
at java.base/java.nio.file.Files.newInputStream(Files.java:160)
at io.quarkus.bootstrap.runner.QuarkusEntryPoint.doRun(QuarkusEntryPoint.java:59)
at io.quarkus.bootstrap.runner.QuarkusEntryPoint.main(QuarkusEntryPoint.java:37)
Caused by: java.io.IOException: Permission denied
at java.base/sun.nio.ch.FileDispatcherImpl.init(Native Method)
at java.base/sun.nio.ch.FileDispatcherImpl.(FileDispatcherImpl.java:38)
… 11 more
Exception in thread “main” java.lang.ExceptionInInitializerError
at java.base/sun.nio.ch.FileChannelImpl.(FileChannelImpl.java:132)
at java.base/sun.nio.ch.FileChannelImpl.open(FileChannelImpl.java:154)
at java.base/sun.nio.fs.UnixChannelFactory.newFileChannel(UnixChannelFactory.java:134)
at java.base/sun.nio.fs.UnixChannelFactory.newFileChannel(UnixChannelFactory.java:146)
at java.base/sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:216)
at java.base/java.nio.file.Files.newByteChannel(Files.java:380)
at java.base/java.nio.file.Files.newByteChannel(Files.java:432)
at java.base/java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:422)
at java.base/java.nio.file.Files.newInputStream(Files.java:160)
at io.quarkus.bootstrap.runner.QuarkusEntryPoint.doRun(QuarkusEntryPoint.java:59)
at io.quarkus.bootstrap.runner.QuarkusEntryPoint.main(QuarkusEntryPoint.java:37)
Caused by: java.io.IOException: Permission denied
at java.base/sun.nio.ch.FileDispatcherImpl.init(Native Method)
at java.base/sun.nio.ch.FileDispatcherImpl.(FileDispatcherImpl.java:38)
… 11 more
Exception in thread “main” java.lang.ExceptionInInitializerError
at java.base/sun.nio.ch.FileChannelImpl.(FileChannelImpl.java:132)
at java.base/sun.nio.ch.FileChannelImpl.open(FileChannelImpl.java:154)
at java.base/sun.nio.fs.UnixChannelFactory.newFileChannel(UnixChannelFactory.java:134)
at java.base/sun.nio.fs.UnixChannelFactory.newFileChannel(UnixChannelFactory.java:146)
at java.base/sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:216)
at java.base/java.nio.file.Files.newByteChannel(Files.java:380)
at java.base/java.nio.file.Files.newByteChannel(Files.java:432)
at java.base/java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:422)
at java.base/java.nio.file.Files.newInputStream(Files.java:160)
at io.quarkus.bootstrap.runner.QuarkusEntryPoint.doRun(QuarkusEntryPoint.java:59)
at io.quarkus.bootstrap.runner.QuarkusEntryPoint.main(QuarkusEntryPoint.java:37)
Caused by: java.io.IOException: Permission denied
at java.base/sun.nio.ch.FileDispatcherImpl.init(Native Method)
at java.base/sun.nio.ch.FileDispatcherImpl.(FileDispatcherImpl.java:38)
… 11 more
Exception in thread “main” java.lang.ExceptionInInitializerError
at java.base/sun.nio.ch.FileChannelImpl.(FileChannelImpl.java:132)
at java.base/sun.nio.ch.FileChannelImpl.open(FileChannelImpl.java:154)
at java.base/sun.nio.fs.UnixChannelFactory.newFileChannel(UnixChannelFactory.java:134)
at java.base/sun.nio.fs.UnixChannelFactory.newFileChannel(UnixChannelFactory.java:146)
at java.base/sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:216)
at java.base/java.nio.file.Files.newByteChannel(Files.java:380)
at java.base/java.nio.file.Files.newByteChannel(Files.java:432)
at java.base/java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:422)
at java.base/java.nio.file.Files.newInputStream(Files.java:160)
at io.quarkus.bootstrap.runner.QuarkusEntryPoint.doRun(QuarkusEntryPoint.java:59)
at io.quarkus.bootstrap.runner.QuarkusEntryPoint.main(QuarkusEntryPoint.java:37)
Caused by: java.io.IOException: Permission denied
at java.base/sun.nio.ch.FileDispatcherImpl.init(Native Method)
at java.base/sun.nio.ch.FileDispatcherImpl.(FileDispatcherImpl.java:38)
… 11 more
Exception in thread “main” java.lang.ExceptionInInitializerError
at java.base/sun.nio.ch.FileChannelImpl.(FileChannelImpl.java:132)
at java.base/sun.nio.ch.FileChannelImpl.open(FileChannelImpl.java:154)
at java.base/sun.nio.fs.UnixChannelFactory.newFileChannel(UnixChannelFactory.java:134)
at java.base/sun.nio.fs.UnixChannelFactory.newFileChannel(UnixChannelFactory.java:146)
at java.base/sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:216)
at java.base/java.nio.file.Files.newByteChannel(Files.java:380)
at java.base/java.nio.file.Files.newByteChannel(Files.java:432)
at java.base/java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:422)
at java.base/java.nio.file.Files.newInputStream(Files.java:160)
at io.quarkus.bootstrap.runner.QuarkusEntryPoint.doRun(QuarkusEntryPoint.java:59)
at io.quarkus.bootstrap.runner.QuarkusEntryPoint.main(QuarkusEntryPoint.java:37)
Caused by: java.io.IOException: Permission denied
at java.base/sun.nio.ch.FileDispatcherImpl.init(Native Method)
at java.base/sun.nio.ch.FileDispatcherImpl.(FileDispatcherImpl.java:38)
… 11 more
Exception in thread “main” java.lang.ExceptionInInitializerError
at java.base/sun.nio.ch.FileChannelImpl.(FileChannelImpl.java:132)
at java.base/sun.nio.ch.FileChannelImpl.open(FileChannelImpl.java:154)
at java.base/sun.nio.fs.UnixChannelFactory.newFileChannel(UnixChannelFactory.java:134)
at java.base/sun.nio.fs.UnixChannelFactory.newFileChannel(UnixChannelFactory.java:146)
at java.base/sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:216)
at java.base/java.nio.file.Files.newByteChannel(Files.java:380)
at java.base/java.nio.file.Files.newByteChannel(Files.java:432)
at java.base/java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:422)
at java.base/java.nio.file.Files.newInputStream(Files.java:160)
at io.quarkus.bootstrap.runner.QuarkusEntryPoint.doRun(QuarkusEntryPoint.java:59)
at io.quarkus.bootstrap.runner.QuarkusEntryPoint.main(QuarkusEntryPoint.java:37)
Caused by: java.io.IOException: Permission denied
at java.base/sun.nio.ch.FileDispatcherImpl.init(Native Method)
at java.base/sun.nio.ch.FileDispatcherImpl.(FileDispatcherImpl.java:38)
… 11 more
Exception in thread “main” java.lang.ExceptionInInitializerError
at java.base/sun.nio.ch.FileChannelImpl.(FileChannelImpl.java:132)
at java.base/sun.nio.ch.FileChannelImpl.open(FileChannelImpl.java:154)
at java.base/sun.nio.fs.UnixChannelFactory.newFileChannel(UnixChannelFactory.java:134)
at java.base/sun.nio.fs.UnixChannelFactory.newFileChannel(UnixChannelFactory.java:146)
at java.base/sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:216)
at java.base/java.nio.file.Files.newByteChannel(Files.java:380)
at java.base/java.nio.file.Files.newByteChannel(Files.java:432)
at java.base/java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:422)
at java.base/java.nio.file.Files.newInputStream(Files.java:160)
at io.quarkus.bootstrap.runner.QuarkusEntryPoint.doRun(QuarkusEntryPoint.java:59)
at io.quarkus.bootstrap.runner.QuarkusEntryPoint.main(QuarkusEntryPoint.java:37)
Caused by: java.io.IOException: Permission denied
at java.base/sun.nio.ch.FileDispatcherImpl.init(Native Method)
at java.base/sun.nio.ch.FileDispatcherImpl.(FileDispatcherImpl.java:38)
… 11 more
Exception in thread “main” java.lang.ExceptionInInitializerError
at java.base/sun.nio.ch.FileChannelImpl.(FileChannelImpl.java:132)
at java.base/sun.nio.ch.FileChannelImpl.open(FileChannelImpl.java:154)
at java.base/sun.nio.fs.UnixChannelFactory.newFileChannel(UnixChannelFactory.java:134)
at java.base/sun.nio.fs.UnixChannelFactory.newFileChannel(UnixChannelFactory.java:146)
at java.base/sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:216)
at java.base/java.nio.file.Files.newByteChannel(Files.java:380)
at java.base/java.nio.file.Files.newByteChannel(Files.java:432)
at java.base/java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:422)
at java.base/java.nio.file.Files.newInputStream(Files.java:160)
at io.quarkus.bootstrap.runner.QuarkusEntryPoint.doRun(QuarkusEntryPoint.java:59)
at io.quarkus.bootstrap.runner.QuarkusEntryPoint.main(QuarkusEntryPoint.java:37)
Caused by: java.io.IOException: Permission denied
at java.base/sun.nio.ch.FileDispatcherImpl.init(Native Method)
at java.base/sun.nio.ch.FileDispatcherImpl.(FileDispatcherImpl.java:38)
… 11 more
Exception in thread “main” java.lang.ExceptionInInitializerError
at java.base/sun.nio.ch.FileChannelImpl.(FileChannelImpl.java:132)
at java.base/sun.nio.ch.FileChannelImpl.open(FileChannelImpl.java:154)
at java.base/sun.nio.fs.UnixChannelFactory.newFileChannel(UnixChannelFactory.java:134)
at java.base/sun.nio.fs.UnixChannelFactory.newFileChannel(UnixChannelFactory.java:146)
at java.base/sun.nio.fs.UnixFileSystemProvider.newByteChannel(UnixFileSystemProvider.java:216)
at java.base/java.nio.file.Files.newByteChannel(Files.java:380)
at java.base/java.nio.file.Files.newByteChannel(Files.java:432)
at java.base/java.nio.file.spi.FileSystemProvider.newInputStream(FileSystemProvider.java:422)
at java.base/java.nio.file.Files.newInputStream(Files.java:160)
at io.quarkus.bootstrap.runner.QuarkusEntryPoint.doRun(QuarkusEntryPoint.java:59)
at io.quarkus.bootstrap.runner.QuarkusEntryPoint.main(QuarkusEntryPoint.java:37)
Caused by: java.io.IOException: Permission denied
at java.base/sun.nio.ch.FileDispatcherImpl.init(Native Method)
at java.base/sun.nio.ch.FileDispatcherImpl.(FileDispatcherImpl.java:38)
… 11 more

Ich kann im Container über docker -it Befehle ausführen, bekomme da aber auch nur Permission denied.

Da es jetzt für diese Version keine weiteren Sicherheitspatche mehr geben wird, ohne Keycloak ein Upgrade nicht möglich ist, ist das mehr als ärgerlich!

Hat jemand eine Idee, warum da nicht genügend Rechte vorhanden sind, bzw. was ich sonst tun kann?

Der Ox-Connector läuft sauber in einem anderen Docker-Container, von daher sind für Docker selbst auf jeden Fall die notwendigen Rechte vorhanden.