[FLINK-2607] Shade plugin copies signature files from original jar into fat jar

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 0.9, 0.10.0
• Fix Version/s: 0.9.2, 0.10.0
• Component/s: Quickstarts
• Assignee: Maximilian Michels
• Reporter: Maximilian Michels
• Created: 02/Sep/15 10:23
• Updated: 14/Oct/15 14:14
• Resolved: 14/Oct/15 14:14

Description

The Quickstart project contains a Maven configuration that builds a fat jar using the Maven Shade plugin. It copies the META-INF folder of the original jar into the fat jar as well. That can lead to a SecurityException when submitting jobs to the cluster because the signature file contained in the original jar is not suitable for the fat jar.

 java.lang.SecurityException: Invalid signature file digest for Manifest main attributes

The solution is to change the configuration of the Shade plugin to ignore the signature files in the META-INF folder when copying the dependencies to the fat jar.

See also:

http://zhentao-li.blogspot.ch/2012/06/maven-shade-plugin-invalid-signature.html
http://stackoverflow.com/questions/999489/invalid-signature-file-when-attempting-to-run-a-jar