diff --git a/cargo/Installation.html b/cargo/Installation.html index 84e3916586..392ba72e5b 100644 --- a/cargo/Installation.html +++ b/cargo/Installation.html @@ -350,8 +350,8 @@
Warning: the proposed solution only works on Linux, see MNG-6437
-Cargo supports passing system properties Passing system properties. So, to start Tomcat in security mode, you need to specify two system properties:
+Warning: the proposed solution only works on Linux, see MNG-6437.
+Cargo supports passing system properties. So, to start Tomcat in security mode, you need to specify two system properties:
java.security.manager
java.security.policy
Tip submitted by Claude Brisson
-UPDATE: This solution doesn't work on Windows for now: @cargo.repository@
, @cargo.container@
and @cargo.webapp@
should be URIs and not paths
This solution doesn't work on Windows for now: @cargo.repository@
, @cargo.container@
and @cargo.webapp@
should be URIs and not paths.
Jetty 8.x has its own security manager, which can be enabled by enabling the jetty-policy.xml
module, but it will search for its policies files under a lib/policy
directory located in the same location as start.jar
, inaccessible to Cargo's custom configuration folders.
So we'll stick to the Jetty 9.x container. In Jetty 9.x there is no internal security manager, so we'll directly run Jetty 9.x under the standard java.lang.SecurityManager
.
We'll first need a mywebapp.policy
policy file. It gives rights to Jetty itself:
ArtifactTransferException
s with the OW2 snapshot repository (which was defined as HTTP over a decade back). You can work around these using the instructions in the chapter ArtifactTransferException
with Maven 3.8.1 onwards.ArtifactTransferException
s with the OW2 snapshot repository (which was defined as HTTP over a decade back). You can work around these using the instructions in the chapter ArtifactTransferException
with Maven 3.8.1 onwards.
cat core/samples/java/containers.log
in it (on all CI jobs for the last build, as we split the container tests into multiple parallel jobs to reduce the total time required for integration testing). It should indicate status 0
for all containers:This container is automatically tested by the Continous Integration system every time there is a code change.
- The server used for tests is downloaded from: https://repo.maven.apache.org/maven2/org/apache/tomcat/tomcat/9.0.81/tomcat-9.0.81.zip