[FINERACT-975] /tmp needs to be writeable in container

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 1.4.0
• Fix Version/s: 1.4.0
• Assignee: Michael Vorburger
• Reporter: Michael Vorburger
• Created: 14/May/20 08:52
• Updated: 19/May/20 22:02
• Resolved: 19/May/20 22:02

Description

See FINERACT-932 for general background. This error log can and should be "fixed":

java.nio.file.AccessDeniedException: /opt/bitnami/tomcat/temp/MIME5202211049703909640.tmp

        at sun.nio.fs.UnixException.translateToIOException (UnixException.java:90)
        at sun.nio.fs.UnixException.rethrowAsIOException (UnixException.java:111)
        at sun.nio.fs.UnixException.rethrowAsIOException (UnixException.java:116)
        at sun.nio.fs.UnixFileSystemProvider.newByteChannel (UnixFileSystemProvider.java:219)
        at java.nio.file.Files.newByteChannel (Files.java:370)
        at java.nio.file.Files.createFile (Files.java:647)
        at java.nio.file.TempFileHelper.create (TempFileHelper.java:137)
        at java.nio.file.TempFileHelper.createTempFile (TempFileHelper.java:160)
        at java.nio.file.Files.createTempFile (Files.java:912)
        at org.jvnet.mimepull.MemoryData.createTempFile (MemoryData.java:100)
        at org.jvnet.mimepull.MemoryData.createNext (MemoryData.java:70)
        at org.jvnet.mimepull.Chunk.createNext (Chunk.java:34)
        at org.jvnet.mimepull.DataHead.addBody (DataHead.java:57)
        at org.jvnet.mimepull.MIMEPart.addBody (MIMEPart.java:214)
        at org.jvnet.mimepull.MIMEMessage.makeProgress (MIMEMessage.java:242)
        at org.jvnet.mimepull.MIMEMessage.parseAll (MIMEMessage.java:160)
        at org.jvnet.mimepull.MIMEMessage.getAttachments (MIMEMessage.java:86)
        at com.sun.jersey.multipart.impl.MultiPartReaderClientSide.readMultiPart (MultiPartReaderClientSide.java:205)
        at com.sun.jersey.multipart.impl.MultiPartReaderServerSide.readMultiPart (MultiPartReaderServerSide.java:80)
        at com.sun.jersey.multipart.impl.MultiPartReaderClientSide.readFrom (MultiPartReaderClientSide.java:158)
        at com.sun.jersey.multipart.impl.MultiPartReaderClientSide.readFrom (MultiPartReaderClientSide.java:85)
        at com.sun.jersey.spi.container.ContainerRequest.getEntity (ContainerRequest.java:490)
        at com.sun.jersey.spi.container.ContainerRequest.getEntity (ContainerRequest.java:555)
        at com.sun.jersey.multipart.impl.FormDataMultiPartDispatchProvider$FormDataInjectableValuesProvider.getInjectableValues (FormDataMultiPartDispatchProvider.java:122)
        at com.sun.jersey.server.impl.model.method.dispatch.AbstractResourceMethodDispatchProvider$EntityParamInInvoker.getParams (AbstractResourceMethodDispatchProvider.java:153)
        at com.sun.jersey.server.impl.model.method.dispatch.AbstractResourceMethodDispatchProvider$TypeOutInvoker._dispatch (AbstractResourceMethodDispatchProvider.java:183)
        at com.sun.jersey.server.impl.model.method.dispatch.ResourceJavaMethodDispatcher.dispatch (ResourceJavaMethodDispatcher.java:75)
        at com.sun.jersey.server.impl.uri.rules.HttpMethodRule.accept (HttpMethodRule.java:302)
        at com.sun.jersey.server.impl.uri.rules.ResourceClassRule.accept (ResourceClassRule.java:108)
        at com.sun.jersey.server.impl.uri.rules.RightHandPathRule.accept (RightHandPathRule.java:147)
        at com.sun.jersey.server.impl.uri.rules.RootResourceClassesRule.accept (RootResourceClassesRule.java:84)
        at com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest (WebApplicationImpl.java:1542)
        at com.sun.jersey.server.impl.application.WebApplicationImpl._handleRequest (WebApplicationImpl.java:1473)
        at com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest (WebApplicationImpl.java:1419)
        at com.sun.jersey.server.impl.application.WebApplicationImpl.handleRequest (WebApplicationImpl.java:1409)
        at com.sun.jersey.spi.container.servlet.WebComponent.service (WebComponent.java:409)
        at com.sun.jersey.spi.container.servlet.ServletContainer.service (ServletContainer.java:558)
        at com.sun.jersey.spi.container.servlet.ServletContainer.service (ServletContainer.java:733)
        at javax.servlet.http.HttpServlet.service (HttpServlet.java:741)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter (ApplicationFilterChain.java:231)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter (ApplicationFilterChain.java:166)
        at org.apache.tomcat.websocket.server.WsFilter.doFilter (WsFilter.java:53)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter (ApplicationFilterChain.java:193)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter (ApplicationFilterChain.java:166)
        at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke (FilterSecurityInterceptor.java:115)
        at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter (FilterSecurityInterceptor.java:90)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter (ApplicationFilterChain.java:193)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter (ApplicationFilterChain.java:166)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:320)
        at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke (FilterSecurityInterceptor.java:115)
        at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter (FilterSecurityInterceptor.java:90)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:334)
        at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter (ExceptionTranslationFilter.java:118)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:334)
        at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter (AnonymousAuthenticationFilter.java:111)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:334)
        at org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter (SecurityContextHolderAwareRequestFilter.java:158)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:334)
        at org.apache.fineract.infrastructure.security.filter.InsecureTwoFactorAuthenticationFilter.doFilter (InsecureTwoFactorAuthenticationFilter.java:78)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:334)
        at org.springframework.web.filter.OncePerRequestFilter.doFilter (OncePerRequestFilter.java:113)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:334)
        at org.springframework.web.filter.OncePerRequestFilter.doFilter (OncePerRequestFilter.java:113)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:334)
        at org.springframework.web.filter.OncePerRequestFilter.doFilter (OncePerRequestFilter.java:113)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:334)
        at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter (SecurityContextPersistenceFilter.java:82)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:334)
        at org.springframework.security.web.access.channel.ChannelProcessingFilter.doFilter (ChannelProcessingFilter.java:157)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:334)
        at org.springframework.security.web.FilterChainProxy.doFilterInternal (FilterChainProxy.java:215)
        at org.springframework.security.web.FilterChainProxy.doFilter (FilterChainProxy.java:186)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter (ApplicationFilterChain.java:193)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter (ApplicationFilterChain.java:166)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:320)
        at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke (FilterSecurityInterceptor.java:126)
        at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter (FilterSecurityInterceptor.java:90)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:334)
        at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter (ExceptionTranslationFilter.java:118)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:334)
        at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter (AnonymousAuthenticationFilter.java:111)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:334)
        at org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter (SecurityContextHolderAwareRequestFilter.java:158)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:334)
        at org.apache.fineract.infrastructure.security.filter.InsecureTwoFactorAuthenticationFilter.doFilter (InsecureTwoFactorAuthenticationFilter.java:78)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:334)
        at org.springframework.security.web.header.HeaderWriterFilter.doHeadersAfter (HeaderWriterFilter.java:92)
        at org.springframework.security.web.header.HeaderWriterFilter.doFilterInternal (HeaderWriterFilter.java:77)
        at org.springframework.web.filter.OncePerRequestFilter.doFilter (OncePerRequestFilter.java:119)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:334)
        at org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter.doFilterInternal (WebAsyncManagerIntegrationFilter.java:56)
        at org.springframework.web.filter.OncePerRequestFilter.doFilter (OncePerRequestFilter.java:119)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:334)
        at org.springframework.security.web.authentication.www.BasicAuthenticationFilter.doFilterInternal (BasicAuthenticationFilter.java:204)
        at org.apache.fineract.infrastructure.security.filter.TenantAwareBasicAuthenticationFilter.doFilterInternal (TenantAwareBasicAuthenticationFilter.java:145)
        at org.springframework.web.filter.OncePerRequestFilter.doFilter (OncePerRequestFilter.java:119)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:334)
        at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter (SecurityContextPersistenceFilter.java:105)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:334)
        at org.springframework.security.web.access.channel.ChannelProcessingFilter.doFilter (ChannelProcessingFilter.java:157)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter (FilterChainProxy.java:334)
        at org.springframework.security.web.FilterChainProxy.doFilterInternal (FilterChainProxy.java:215)
        at org.springframework.security.web.FilterChainProxy.doFilter (FilterChainProxy.java:178)
        at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate (DelegatingFilterProxy.java:358)
        at org.springframework.web.filter.DelegatingFilterProxy.doFilter (DelegatingFilterProxy.java:271)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter (ApplicationFilterChain.java:193)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter (ApplicationFilterChain.java:166)
        at org.springframework.boot.web.servlet.support.ErrorPageFilter.doFilter (ErrorPageFilter.java:128)
        at org.springframework.boot.web.servlet.support.ErrorPageFilter.access$000 (ErrorPageFilter.java:66)
        at org.springframework.boot.web.servlet.support.ErrorPageFilter$1.doFilterInternal (ErrorPageFilter.java:103)
        at org.springframework.web.filter.OncePerRequestFilter.doFilter (OncePerRequestFilter.java:119)
        at org.springframework.boot.web.servlet.support.ErrorPageFilter.doFilter (ErrorPageFilter.java:121)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter (ApplicationFilterChain.java:193)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter (ApplicationFilterChain.java:166)
        at org.springframework.boot.actuate.metrics.web.servlet.WebMvcMetricsFilter.doFilterInternal (WebMvcMetricsFilter.java:109)
        at org.springframework.web.filter.OncePerRequestFilter.doFilter (OncePerRequestFilter.java:119)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter (ApplicationFilterChain.java:193)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter (ApplicationFilterChain.java:166)
        at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal (CharacterEncodingFilter.java:201)
        at org.springframework.web.filter.OncePerRequestFilter.doFilter (OncePerRequestFilter.java:119)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter (ApplicationFilterChain.java:193)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter (ApplicationFilterChain.java:166)
        at org.springframework.web.filter.ForwardedHeaderFilter.doFilterInternal (ForwardedHeaderFilter.java:158)
        at org.springframework.web.filter.OncePerRequestFilter.doFilter (OncePerRequestFilter.java:119)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter (ApplicationFilterChain.java:193)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter (ApplicationFilterChain.java:166)
        at org.apache.catalina.core.StandardWrapperValve.invoke (StandardWrapperValve.java:202)
        at org.apache.catalina.core.StandardContextValve.invoke (StandardContextValve.java:96)
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke (AuthenticatorBase.java:541)
        at org.apache.catalina.core.StandardHostValve.invoke (StandardHostValve.java:139)
        at org.apache.catalina.valves.ErrorReportValve.invoke (ErrorReportValve.java:92)
        at org.apache.catalina.valves.AbstractAccessLogValve.invoke (AbstractAccessLogValve.java:690)
        at org.apache.catalina.core.StandardEngineValve.invoke (StandardEngineValve.java:74)
        at org.apache.catalina.connector.CoyoteAdapter.service (CoyoteAdapter.java:343)
        at org.apache.coyote.http11.Http11Processor.service (Http11Processor.java:373)
        at org.apache.coyote.AbstractProcessorLight.process (AbstractProcessorLight.java:65)
        at org.apache.coyote.AbstractProtocol$ConnectionHandler.process (AbstractProtocol.java:868)
        at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun (NioEndpoint.java:1590)
        at org.apache.tomcat.util.net.SocketProcessorBase.run (SocketProcessorBase.java:49)
        at java.util.concurrent.ThreadPoolExecutor.runWorker (ThreadPoolExecutor.java:1128)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:628)
        at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run (TaskThread.java:61)
        at java.lang.Thread.run (Thread.java:834)

and also similarly:

java.io.IOException: Permission denied

        at java.io.UnixFileSystem.createFileExclusively (Native Method)
        at java.io.File.createTempFile (File.java:2092)
        at java.io.File.createTempFile (File.java:2138)
        at com.sun.jersey.multipart.impl.MultiPartReaderClientSide.createMimeConfig (MultiPartReaderClientSide.java:121)
        at com.sun.jersey.multipart.impl.MultiPartReaderClientSide.<init> (MultiPartReaderClientSide.java:109)
        at com.sun.jersey.multipart.impl.MultiPartReaderServerSide.<init> (MultiPartReaderServerSide.java:71)
        at jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance0 (Native Method)
        at jdk.internal.reflect.NativeConstructorAccessorImpl.newInstance (NativeConstructorAccessorImpl.java:62)
        at jdk.internal.reflect.DelegatingConstructorAccessorImpl.newInstance (DelegatingConstructorAccessorImpl.java:45)
        at java.lang.reflect.Constructor.newInstance (Constructor.java:490)
        at com.sun.jersey.core.spi.component.ComponentConstructor._getInstance (ComponentConstructor.java:210)
        at com.sun.jersey.core.spi.component.ComponentConstructor.getInstance (ComponentConstructor.java:180)
        at com.sun.jersey.core.spi.component.ProviderFactory.__getComponentProvider (ProviderFactory.java:166)
        at com.sun.jersey.core.spi.component.ProviderFactory.getComponentProvider (ProviderFactory.java:137)
        at com.sun.jersey.core.spi.component.ProviderServices.getComponent (ProviderServices.java:283)
        at com.sun.jersey.core.spi.component.ProviderServices.getServices (ProviderServices.java:163)
        at com.sun.jersey.core.spi.factory.MessageBodyFactory.initReaders (MessageBodyFactory.java:176)
        at com.sun.jersey.core.spi.factory.MessageBodyFactory.init (MessageBodyFactory.java:162)
        at com.sun.jersey.server.impl.application.WebApplicationImpl._initiate (WebApplicationImpl.java:1338)
        at com.sun.jersey.server.impl.application.WebApplicationImpl.access$700 (WebApplicationImpl.java:180)
        at com.sun.jersey.server.impl.application.WebApplicationImpl$13.f (WebApplicationImpl.java:799)
        at com.sun.jersey.server.impl.application.WebApplicationImpl$13.f (WebApplicationImpl.java:795)
        at com.sun.jersey.spi.inject.Errors.processWithErrors (Errors.java:193)
        at com.sun.jersey.server.impl.application.WebApplicationImpl.initiate (WebApplicationImpl.java:795)
        at com.sun.jersey.spi.spring.container.servlet.SpringServlet.initiate (SpringServlet.java:117)
        at com.sun.jersey.spi.container.servlet.ServletContainer$InternalWebComponent.initiate (ServletContainer.java:339)
        at com.sun.jersey.spi.container.servlet.WebComponent.load (WebComponent.java:605)
        at com.sun.jersey.spi.container.servlet.WebComponent.init (WebComponent.java:207)
        at com.sun.jersey.spi.container.servlet.ServletContainer.init (ServletContainer.java:394)
        at com.sun.jersey.spi.container.servlet.ServletContainer.init (ServletContainer.java:577)
        at javax.servlet.GenericServlet.init (GenericServlet.java:158)
        at org.apache.catalina.core.StandardWrapper.initServlet (StandardWrapper.java:1134)
        at org.apache.catalina.core.StandardWrapper.load (StandardWrapper.java:986)
        at org.apache.catalina.core.StandardContext.loadOnStartup (StandardContext.java:4876)
        at org.apache.catalina.core.StandardContext.startInternal (StandardContext.java:5185)
        at org.apache.catalina.util.LifecycleBase.start (LifecycleBase.java:183)
        at org.apache.catalina.core.ContainerBase.addChildInternal (ContainerBase.java:717)
        at org.apache.catalina.core.ContainerBase.addChild (ContainerBase.java:690)
        at org.apache.catalina.core.StandardHost.addChild (StandardHost.java:705)
        at org.apache.catalina.startup.HostConfig.deployWAR (HostConfig.java:978)
        at org.apache.catalina.startup.HostConfig$DeployWar.run (HostConfig.java:1849)
        at java.util.concurrent.Executors$RunnableAdapter.call (Executors.java:515)
        at java.util.concurrent.FutureTask.run (FutureTask.java:264)
        at org.apache.tomcat.util.threads.InlineExecutorService.execute (InlineExecutorService.java:75)
        at java.util.concurrent.AbstractExecutorService.submit (AbstractExecutorService.java:118)
        at org.apache.catalina.startup.HostConfig.deployWARs (HostConfig.java:773)
        at org.apache.catalina.startup.HostConfig.deployApps (HostConfig.java:427)
        at org.apache.catalina.startup.HostConfig.start (HostConfig.java:1576)
        at org.apache.catalina.startup.HostConfig.lifecycleEvent (HostConfig.java:309)
        at org.apache.catalina.util.LifecycleBase.fireLifecycleEvent (LifecycleBase.java:123)
        at org.apache.catalina.util.LifecycleBase.setStateInternal (LifecycleBase.java:423)
        at org.apache.catalina.util.LifecycleBase.setState (LifecycleBase.java:366)
        at org.apache.catalina.core.ContainerBase.startInternal (ContainerBase.java:936)
        at org.apache.catalina.core.StandardHost.startInternal (StandardHost.java:841)
        at org.apache.catalina.util.LifecycleBase.start (LifecycleBase.java:183)
        at org.apache.catalina.core.ContainerBase$StartChild.call (ContainerBase.java:1384)
        at org.apache.catalina.core.ContainerBase$StartChild.call (ContainerBase.java:1374)
        at java.util.concurrent.FutureTask.run (FutureTask.java:264)
        at org.apache.tomcat.util.threads.InlineExecutorService.execute (InlineExecutorService.java:75)
        at java.util.concurrent.AbstractExecutorService.submit (AbstractExecutorService.java:140)
        at org.apache.catalina.core.ContainerBase.startInternal (ContainerBase.java:909)
        at org.apache.catalina.core.StandardEngine.startInternal (StandardEngine.java:262)
        at org.apache.catalina.util.LifecycleBase.start (LifecycleBase.java:183)
        at org.apache.catalina.core.StandardService.startInternal (StandardService.java:421)
        at org.apache.catalina.util.LifecycleBase.start (LifecycleBase.java:183)
        at org.apache.catalina.core.StandardServer.startInternal (StandardServer.java:930)
        at org.apache.catalina.util.LifecycleBase.start (LifecycleBase.java:183)
        at org.apache.catalina.startup.Catalina.start (Catalina.java:633)
        at jdk.internal.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)
        at jdk.internal.reflect.NativeMethodAccessorImpl.invoke (NativeMethodAccessorImpl.java:62)
        at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke (DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke (Method.java:566)
        at org.apache.catalina.startup.Bootstrap.start (Bootstrap.java:343)
        at org.apache.catalina.startup.Bootstrap.main (Bootstrap.java:474)

Issue Links

• blocks: FINERACT-932 Parent Issue for Error Logs seeing during "normal" usage (e.g. on fineract.dev)
• duplicates: FINERACT-830 Use distroless base image instead of bitnami/tomcat in container
• is blocked by: FINERACT-830 Use distroless base image instead of bitnami/tomcat in container