Fang-Yu Rao created IMPALA-14766:
------------------------------------
Summary: Unset Unset JAVA_TOOL_OPTIONS before running
rpc_private_key_password_cmd_
Key: IMPALA-14766
URL: https://issues.apache.org/jira/browse/IMPALA-14766
Project: IMPALA
Issue Type: Bug
Reporter: Fang-Yu Rao
Attachments:
0001-Unset-JAVA_TOOL_OPTIONS-before-running-rpc_private_k.patch
We found that when Impala server is running with SSL enabled, if we add
"{{{}-agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=*:5005{}}}"
to {{{}JAVA_TOOL_OPTIONS{}}}, the Impala server could not be started with the
following error.
{code:java}
W20260219 23:38:28.304831 518945 messenger.cc:122] could not get RPC password
from configured command: Runtime error: failed to run private key password
command: Runtime error:
/var/run/cloudera-scm-agent/process/1546344460-impala-IMPALAD/altscript.sh:
process exited with non-zero status 2: Picked up JAVA_TOOL_OPTIONS:
-Xms4294967296 -Xmx4294967296
-agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=*:5005
-XX:OnOutOfMemoryError=/opt/cloudera/cm-agent/service/common/killparent.sh
--add-opens=java.base/java.io=ALL-UNNAMED
--add-opens=java.base/java.lang.module=ALL-UNNAMED
--add-opens=java.base/java.lang.ref=ALL-UNNAMED
--add-opens=java.base/java.lang.reflect=ALL-UNNAMED
--add-opens=java.base/java.lang=ALL-UNNAMED
--add-opens=java.base/java.net=ALL-UNNAMED
--add-opens=java.base/java.nio.charset=ALL-UNNAMED
--add-opens=java.base/java.nio.file.attribute=ALL-UNNAMED
--add-opens=java.base/java.nio=ALL-UNNAMED
--add-opens=java.base/java.security=ALL-UNNAMED
--add-opens=java.base/java.util.concurrent=ALL-UNNAMED
--add-opens=java.base/java.util.jar=ALL-UNNAMED
--add-opens=java.base/java.util.zip=ALL-UNNAMED
--add-opens=java.base/java.util=ALL-UNNAMED
--add-opens=java.base/jdk.internal.loader=ALL-UNNAMED
--add-opens=java.base/jdk.internal.math=ALL-UNNAMED
--add-opens=java.base/jdk.internal.module=ALL-UNNAMED
--add-opens=java.base/jdk.internal.ref=ALL-UNNAMED
--add-opens=java.base/jdk.internal.reflect=ALL-UNNAMED
--add-opens=java.base/jdk.internal.util.jar=ALL-UNNAMED
--add-opens=java.base/sun.nio.fs=ALL-UNNAMED
--add-opens=jdk.dynalink/jdk.dynalink.beans=ALL-UNNAMED
--add-opens=jdk.dynalink/jdk.dynalink.linker.support=ALL-UNNAMED
--add-opens=jdk.dynalink/jdk.dynalink.linker=ALL-UNNAMED
--add-opens=jdk.dynalink/jdk.dynalink.support=ALL-UNNAMED
--add-opens=jdk.dynalink/jdk.dynalink=ALL-UNNAMED
--add-opens=jdk.management.jfr/jdk.management.jfr=ALL-UNNAMED
--add-opens=jdk.management/com.sun.management.internal=ALL-UNNAMED
--add-exports=java.base/sun.net.dns=ALL-UNNAMED
--add-exports=java.base/sun.net.util=ALL-UNNAMED
-javaagent:/opt/cloudera/parcels/CDH-7.3.2-1.cdh7.3.2.p0.75933187/lib/impala/lib/jamm-0.4.0.jar
--add-opens=java.base/java.lang=ALL-UNNAMED
--add-opens=java.base/java.nio=ALL-UNNAMED
--add-opens=java.base/java.util.regex=ALL-UNNAMED
--add-opens=java.base/sun.nio.ch=ALL-UNNAMED -Dsun.java.command=impalad
ERROR: transport error 202: bind failed: Address already in use
ERROR: JDWP Transport dt_socket failed to initialize, TRANSPORT_INIT(510)
JDWP exit error AGENT_ERROR_TRANSPORT_INIT(197): No transports initialized
[src/jdk.jdwp.agent/share/native/libjdwp/debugInit.c:744]
I20260219 23:38:28.307538 518945 messenger.cc:183] shutting down messenger
impala-server
{code}
This is due to the failure of {{security::GetPasswordFromShellCommand(
rpc_private_key_password_cmd_, &ret)}} at
[https://github.com/apache/impala/blob/a2ea1be/be/src/kudu/rpc/messenger.cc#L126].
This is because {{rpc_private_key_password_cmd_}}, a Java program, inherits
the value of {{JAVA_TOOL_OPTIONS}} from the Impala process, and hence tries to
listen on the same port of 5005, which has been used already by the Impala
process.
Therefore, we should unset {{JAVA_TOOL_OPTIONS}} before executing the command
{{rpc_private_key_password_cmd_}}.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
