XWiki on Docker behind Proxy ignores JAVA_OPTS

cd-zbfs · July 14, 2020, 6:05am

Hi,

I try to get a XWiki demo on our docker host up and running. I used the following docker-compose.yml.
As you can see we have a corporate proxy which has to be set to access the internet.

version: '2'
networks:
  bridge:
    driver: bridge
services:
  web:
    image: "xwiki:stable-mysql-tomcat"
    container_name: xwiki-web
    depends_on:
      - db
    ports:
      - "8082:8080"
    environment:
      - XWIKI_VERSION=xwiki
      - DB_USER=xwiki
      - DB_PASSWORD=xwiki
      - DB_DATABASE=xwiki
      - DB_HOST=xwiki-db
      - JAVA_OPTS="-Dhttp.proxyHost=10.x.x.x -Dhttp.proxyPort=80 -Dhttps.proxyHost=10.x.x.x -Dhttps.proxyPort=80"
    volumes:
      - xwiki-data:/usr/local/xwiki
    networks:
      - bridge
  db:
    image: "mysql:5.7"
    container_name: xwiki-db
    volumes:
      - ./12/mysql-tomcat/mysql/xwiki.cnf:/etc/mysql/conf.d/xwiki.cnf
      - mysql-data:/var/lib/mysql
    environment:
      - MYSQL_ROOT_PASSWORD=xwiki
      - MYSQL_USER=xwiki
      - MYSQL_PASSWORD=xwiki
      - MYSQL_DATABASE=xwiki
    networks:
      - bridge
volumes:
  mysql-data: {}
  xwiki-data: {}

I get the setup wizard and can add a admin account but in the second step the list of flavors remains empty.

I see the proxy is set via JAVA_OPTS in the container startup logs

xwiki-web | NOTE: Picked up JDK_JAVA_OPTIONS:  --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED
xwiki-web | 14-Jul-2020 05:50:27.518 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server version name:   Apache Tomcat/8.5.57
xwiki-web | 14-Jul-2020 05:50:27.529 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server built:          Jun 30 2020 21:49:10 UTC
xwiki-web | 14-Jul-2020 05:50:27.529 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Server version number: 8.5.57.0
xwiki-web | 14-Jul-2020 05:50:27.530 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log OS Name:               Linux
xwiki-web | 14-Jul-2020 05:50:27.530 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log OS Version:            5.4.0-40-generic
xwiki-web | 14-Jul-2020 05:50:27.531 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Architecture:          amd64
xwiki-web | 14-Jul-2020 05:50:27.531 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Java Home:             /opt/java/openjdk
xwiki-web | 14-Jul-2020 05:50:27.532 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log JVM Version:           11.0.7+10
xwiki-web | 14-Jul-2020 05:50:27.532 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log JVM Vendor:            AdoptOpenJDK
xwiki-web | 14-Jul-2020 05:50:27.532 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log CATALINA_BASE:         /usr/local/tomcat
xwiki-web | 14-Jul-2020 05:50:27.533 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log CATALINA_HOME:         /usr/local/tomcat
xwiki-web | 14-Jul-2020 05:50:27.534 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.lang=ALL-UNNAMED
xwiki-web | 14-Jul-2020 05:50:27.535 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.io=ALL-UNNAMED
xwiki-web | 14-Jul-2020 05:50:27.535 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED
xwiki-web | 14-Jul-2020 05:50:27.536 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.util.logging.config.file=/usr/local/tomcat/conf/logging.properties
xwiki-web | 14-Jul-2020 05:50:27.536 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
xwiki-web | 14-Jul-2020 05:50:27.537 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dhttp.proxyHost=10.x.x.x -Dhttp.proxyPort=80 -Dhttps.proxyHost=10.x.x.x -Dhttps.proxyPort=80
xwiki-web | 14-Jul-2020 05:50:27.537 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Xmx1024m
xwiki-web | 14-Jul-2020 05:50:27.537 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH=true
xwiki-web | 14-Jul-2020 05:50:27.538 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.apache.catalina.connector.CoyoteAdapter.ALLOW_BACKSLASH=true
xwiki-web | 14-Jul-2020 05:50:27.538 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.security.egd=file:/dev/./urandom
xwiki-web | 14-Jul-2020 05:50:27.539 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djdk.tls.ephemeralDHKeySize=2048
xwiki-web | 14-Jul-2020 05:50:27.539 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.protocol.handler.pkgs=org.apache.catalina.webresources
xwiki-web | 14-Jul-2020 05:50:27.540 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.apache.catalina.security.SecurityListener.UMASK=0027
xwiki-web | 14-Jul-2020 05:50:27.540 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dignore.endorsed.dirs=
xwiki-web | 14-Jul-2020 05:50:27.540 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcatalina.base=/usr/local/tomcat
xwiki-web | 14-Jul-2020 05:50:27.541 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcatalina.home=/usr/local/tomcat
xwiki-web | 14-Jul-2020 05:50:27.541 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.io.tmpdir=/usr/local/tomcat/temp

But I get a bunch of errors regarding internet access. Like

xwiki-web | 14-Jul-2020 05:50:47.781 INFO [main] org.apache.catalina.startup.Catalina.start Server startup in 20143 ms
xwiki-web | 2020-07-14 05:50:57,693 [Core extension repository updater] ERROR aultExtensionRepositoryManager - Unexpected error when trying to find extension [commons-daemon:commons-daemon/1.2.2] in repository [maven-xwiki:maven:https://nexus.xwiki.org/nexus/content/groups/public]
xwiki-web | org.xwiki.extension.ResolveException: Failed to resolve artifact [commons-daemon:commons-daemon:jar:1.2.2] descriptor
xwiki-web |     at org.xwiki.extension.repository.aether.internal.AetherExtensionRepository.resolveMaven(AetherExtensionRepository.java:492)

and

xwiki-web | 2020-07-14 05:53:08,117 [Core extension repository updater] ERROR aultExtensionRepositoryManager - Unexpected error when trying to find extension [commons-daemon:commons-daemon/1.2.2] in repository [store.xwiki.com:xwiki:https://store.xwiki.com/xwiki/rest]
xwiki-web | org.xwiki.extension.ResolveException: Failed to create extension object for extension [commons-daemon:commons-daemon/1.2.2]

Also tcpdump shows me direct access from the host to xwiki.org subdomains.

$ tcpdump -i eth0 -v port 443
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes
07:50:47.552831 IP (tos 0x0, ttl 63, id 31618, offset 0, flags [DF], proto TCP (6), length 60)
    host.47050 > maven.xwiki.org.https: Flags [S], cksum 0x16f8 (incorrect -> 0xd746), seq 957798078, win 64240, options [mss 1460,sackOK,TS val 2657089348 ecr 0,nop,wscale 7], length 0
07:50:48.563774 IP (tos 0x0, ttl 63, id 31619, offset 0, flags [DF], proto TCP (6), length 60)
    host.47050 > maven.xwiki.org.https: Flags [S], cksum 0x16f8 (incorrect -> 0xd353), seq 957798078, win 64240, options [mss 1460,sackOK,TS val 2657090359 ecr 0,nop,wscale 7], length 0
07:50:50.579811 IP (tos 0x0, ttl 63, id 31620, offset 0, flags [DF], proto TCP (6), length 60)
    host.47050 > maven.xwiki.org.https: Flags [S], cksum 0x16f8 (incorrect -> 0xcb73), seq 957798078, win 64240, options [mss 1460,sackOK,TS val 2657092375 ecr 0,nop,wscale 7], length 0
07:50:54.739770 IP (tos 0x0, ttl 63, id 31621, offset 0, flags [DF], proto TCP (6), length 60)
    host.47050 > maven.xwiki.org.https: Flags [S], cksum 0x16f8 (incorrect -> 0xbb33), seq 957798078, win 64240, options [mss 1460,sackOK,TS val 2657096535 ecr 0,nop,wscale 7], length 0
07:50:57.979285 IP (tos 0x0, ttl 63, id 1815, offset 0, flags [DF], proto TCP (6), length 60)
    host.33084 > store.xwiki.com.https: Flags [S], cksum 0x7da5 (incorrect -> 0xe269), seq 3895818074, win 64240, options [mss 1460,sackOK,TS val 424735062 ecr 0,nop,wscale 7], length 0
07:50:58.995766 IP (tos 0x0, ttl 63, id 1816, offset 0, flags [DF], proto TCP (6), length 60)

A curl with the same proxy set can load the webpage just fine.

$ curl --proxy 10.x.x.x:80 https://maven.xwiki.org
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<html>
 <head>
  <title>Index of /</title>
 </head>
 <body>
<h1>Index of /</h1>
<pre><img src="/icons/blank.gif" alt="Icon "> <a href="?C=N;O=D">Name</a>                    <a href="?C=M;O=A">Last modified</a>      <a href="?C=S;O=A">Size</a>  <a href="?C=D;O=A">Description</a><hr><img src="/icons/folder.gif" alt="[DIR]"> <a href="externals/">externals/</a>              16-Jun-2020 00:36    -
<img src="/icons/folder.gif" alt="[DIR]"> <a href="lts/">lts/</a>                    14-Jul-2020 00:02    -
<img src="/icons/unknown.gif" alt="[   ]"> <a href="public.gpg">public.gpg</a>              26-Sep-2012 16:04  1.6K
<img src="/icons/folder.gif" alt="[DIR]"> <a href="releases/">releases/</a>               14-Jul-2020 01:58    -
<img src="/icons/folder.gif" alt="[DIR]"> <a href="site/">site/</a>                   27-Feb-2014 01:14    -
<img src="/icons/folder.gif" alt="[DIR]"> <a href="snapshots/">snapshots/</a>              30-Jun-2020 16:12    -
<img src="/icons/folder.gif" alt="[DIR]"> <a href="stable/">stable/</a>                 14-Jul-2020 00:34    -
<img src="/icons/folder.gif" alt="[DIR]"> <a href="superstable/">superstable/</a>            14-Jul-2020 00:02    -
<img src="/icons/unknown.gif" alt="[   ]"> <a href="xwiki.list">xwiki.list</a>              06-Sep-2014 20:47   48
<hr></pre>
<address>Apache/2.2.22 (Debian) Server at maven.xwiki.org Port 443</address>
</body></html>

Did I miss anything? Is there anything else I have to set to get xwiki on docker to use the proxy?

thanks
cd

jwielsch · July 15, 2020, 10:20am

Hey, you put the http and the https proxy port to 80. is that correct? perhaps it should be 80 and 443?! just guessing.

Regards.

EDIT

I have never set any proxy ports - and xwiki runs just fine with haproxy.

my java_opts:

JAVA_OPTS="-Xmx2048m -Djava.awt.headless=true"

EDIT 2

Welcome to the community

cd-zbfs · July 15, 2020, 10:36am

Hi,

this is not a reverse proxy like HAProxy but a corporate proxy from the client (or in this case server) to the internet.
I checked and both (http and https) protocols are proxyed over port 80 so this checks out.
Also there is no SSL Inspection active on the proxy.

My problem is as far as I can tell (tcpdump and error logs) the proxy setting via JAVA_OPTS is not honored by xwiki or at least not by the setup wizard.

I got the JAVA_OPTS settings hint from here https://www.xwiki.org/xwiki/bin/view/Documentation/AdminGuide/Installation/#HRunningXWikibehindaproxyserver
I’m wondering if this is outdated information or if it does not work with the docker image.

Thanks for the welcome.
cd

jwielsch · July 15, 2020, 11:01am

ok, my fault. Sorry.

Perhaps you should give this a try:

on https://serverfault.com/questions/177273/set-up-http-proxy-for-tomcat-web-server there is an entry which says:

To get tomcat running inside my docker container I used the following settings:
JAVA_OPTS=-Dhttps.proxyHost=PROXYHOST -Dhttps.proxyPort=PROXYPORT -DproxySet=true -DproxyHost=PROXYHOST -DproxyPort=PROXYPORT

Perhaps it runs with

-DproxySet=true

But: just guessing

cd-zbfs · July 15, 2020, 2:20pm

Hi,

thanks for the link. I tried it with
- JAVA_OPTS="-Dhttp.proxyHost=10.x.x.x -Dhttp.proxyPort=80 -Dhttps.proxyHost=10.x.x.x -Dhttps.proxyPort=80 -Dhttp.proxySet=true"

docker-compose rm -f -s -v
docker volume rm docker-xwiki_xwiki-data  docker-xwiki_mysql-data
docker-compose up

Thexwiki startup log also shows the changed JAVA_OPTS

xwiki-web | 15-Jul-2020 14:11:57.214 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.lang=ALL-UNNAMED
xwiki-web | 15-Jul-2020 14:11:57.215 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.base/java.io=ALL-UNNAMED
xwiki-web | 15-Jul-2020 14:11:57.215 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: --add-opens=java.rmi/sun.rmi.transport=ALL-UNNAMED
xwiki-web | 15-Jul-2020 14:11:57.216 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.util.logging.config.file=/usr/local/tomcat/conf/logging.properties
xwiki-web | 15-Jul-2020 14:11:57.216 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager
xwiki-web | 15-Jul-2020 14:11:57.217 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dhttp.proxyHost=10.x.x.x -Dhttp.proxyPort=80 -Dhttps.proxyHost=10.x.x.x -Dhttps.proxyPort=80 -Dhttp.proxySet=true
xwiki-web | 15-Jul-2020 14:11:57.217 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Xmx1024m
xwiki-web | 15-Jul-2020 14:11:57.218 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.apache.tomcat.util.buf.UDecoder.ALLOW_ENCODED_SLASH=true
xwiki-web | 15-Jul-2020 14:11:57.218 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.apache.catalina.connector.CoyoteAdapter.ALLOW_BACKSLASH=true
xwiki-web | 15-Jul-2020 14:11:57.219 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.security.egd=file:/dev/./urandom
xwiki-web | 15-Jul-2020 14:11:57.219 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djdk.tls.ephemeralDHKeySize=2048
xwiki-web | 15-Jul-2020 14:11:57.220 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.protocol.handler.pkgs=org.apache.catalina.webresources
xwiki-web | 15-Jul-2020 14:11:57.221 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dorg.apache.catalina.security.SecurityListener.UMASK=0027
xwiki-web | 15-Jul-2020 14:11:57.221 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dignore.endorsed.dirs=
xwiki-web | 15-Jul-2020 14:11:57.221 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcatalina.base=/usr/local/tomcat
xwiki-web | 15-Jul-2020 14:11:57.222 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Dcatalina.home=/usr/local/tomcat
xwiki-web | 15-Jul-2020 14:11:57.222 INFO [main] org.apache.catalina.startup.VersionLoggerListener.log Command line argument: -Djava.io.tmpdir=/usr/local/tomcat/temp

But I still see the direct connections in tcpdump (ignoring the proxy) and the following errors in the log

xwiki-web | 2020-07-15 14:12:27,653 [Core extension repository updater] ERROR aultExtensionRepositoryManager - Unexpected error when trying to find extension [commons-daemon:commons-daemon/1.2.2] in repository [maven-xwiki:maven:https://nexus.xwiki.org/nexus/content/groups/public]

xwiki-web | Caused by: org.eclipse.aether.resolution.ArtifactResolutionException: Could not transfer artifact commons-daemon:commons-daemon:pom:1.2.2 from/to maven-xwiki (https://nexus.xwiki.org/nexus/content/groups/public): Connect to nexus.xwiki.org:443 timed out

xwiki-web | Caused by: org.eclipse.aether.transfer.ArtifactTransferException: Could not transfer artifact commons-daemon:commons-daemon:pom:1.2.2 from/to maven-xwiki (https://nexus.xwiki.org/nexus/content/groups/public): Connect to nexus.xwiki.org:443 timed out

And the Flavor list in the setup wizard remains empty.

Regards,
cd

jwielsch · July 16, 2020, 5:30am

What about setting environment variables to the container?

When you build the image, or using the --env flag when you create or run the container, you can set one or more of the following variables to the appropriate value. This method makes the image less portable, so if you have Docker 17.07 or higher, you should configure the Docker client instead.

Variable	Dockerfile example	`docker run` Example
`HTTP_PROXY`	`ENV HTTP_PROXY "http://127.0.0.1:3001"`	`--env HTTP_PROXY="http://127.0.0.1:3001"`
`HTTPS_PROXY`	`ENV HTTPS_PROXY "https://127.0.0.1:3001"`	`--env HTTPS_PROXY="https://127.0.0.1:3001"`
`FTP_PROXY`	`ENV FTP_PROXY "ftp://127.0.0.1:3001"`	`--env FTP_PROXY="ftp://127.0.0.1:3001"`
`NO_PROXY`	`ENV NO_PROXY "*.test.example.com,.example2.com"`	`--env NO_PROXY="*.test.example.com,.example2.com"`

cd-zbfs · July 16, 2020, 10:04am

Hi,

I tried the setting the proxy via docker client config.

$ cat ~/.docker/config.json
{
 "proxies":
 {
   "default":
   {
     "httpProxy": "http://10.x.x.x:80",
     "httpsProxy": "http://10.x.x.x:80",
     "noProxy": "localhost,172.0.0.0/8"
   }
 }
}

docker inspect shows the active ENV variables. I don’t know why they are doubled but it does not work. But it does not change anything on a fresh install. tcpdump shows direct connections irgnoring the proxy. the docker container log shows the same timeout errors.
A doku-wiki and kanboard test docker container on the same system with the same proxy ENV config works and I can load extensions etc from within the webapps via the proxy.

$ docker inspect xwiki-web
[...]
 "Env": [
                "http_proxy=http://10.x.x.x:80",
                "HTTP_PROXY=http://10.x.x.x:80",
                "https_proxy=http://10.x.x.x:80",
                "HTTPS_PROXY=http://10.x.x.x:80",
                "no_proxy=localhost,172.0.0.0/8",
                "NO_PROXY=localhost,172.0.0.0/8",
                "HTTP_PROXY=http://10.x.x.x:80",
                "http_proxy=http://10.x.x.x:80",
                "HTTPS_PROXY=http://10.x.x.x:80",
                "https_proxy=http://10.x.x.x:80",
                "NO_PROXY=localhost,172.0.0.0/8",
                "no_proxy=localhost,172.0.0.0/8",
                "XWIKI_VERSION=xwiki",
                "DB_USER=xwiki",
                "DB_PASSWORD=xwiki",
                "DB_DATABASE=xwiki",
                "DB_HOST=xwiki-db",
                "JAVA_OPTS=\"-Dhttp.proxyHost=10.x.x.x. -Dhttp.proxyPort=80 -Dhttps.proxyHost=10.x.x.x -Dhttps.proxyPort=80 -Dhttp.proxySet=true\"",
                "PATH=/usr/local/tomcat/bin:/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
                "LANG=en_US.UTF-8",
                "LANGUAGE=en_US:en",
[...]

I’m beginning to suspect xwiki behind a corporate proxy is a no-go.

regards
cd

jwielsch · July 16, 2020, 10:14am

so just for me to understand: another docker container on the same host is able to communicate through the proxy. but the xwiki-container can not?

cd-zbfs · July 16, 2020, 11:34am

Hi,

Yes.
There is a bitnami/dokuwiki:0-debian-10 based dokuwiki and a kanboard/kanboard:latest based kanboard installation running on the same host.

Both are PHP Webapps and both have proxy settings active in the config files (and the docker client proxy settings in the ENV section). In both cases the features that require a proxy work.
The dokuwiki for example allows the installation of extensions from the admin menu. (like xwiki the falvors).

regards
cd

jwielsch · July 16, 2020, 12:06pm

thanks for the information.

this is strange. at the latest, if the proxy is entered in the docker, all containers with bridge configuration should use it. therefore the entry as ENV in docker-compose.yaml should be unnecessary.

can you recreate the containers without the proxy-settings in the yaml? i have no test-environment here so i cannot try to reproduce your problem. sorry.

cd-zbfs · July 17, 2020, 11:38am

Hi,

just recreated the container without the JAVA_OPTS setting in the docker-compose.yml.
Proxy settings in ~/.docker/config.json was kept as before.

docker inspect shows a changed “Config”: “Env” without the JAVA_OPTS but still the http[s]_proxy settings.

But no luck, I again see the direct connections from the host to xwiki.org subdomains in tcpdump and the flavor list still is empty.

regards
cd

cd-zbfs · July 17, 2020, 12:31pm

Hi,

I’m an idiot…

In https://www.xwiki.org/xwiki/bin/view/Documentation/AdminGuide/Installation/#HDebuggingproxyconfigurationissues there is an example groovy(?) code to list the proxy settings in the wiki.

For
- JAVA_OPTS="-Dhttp.proxyHost=10.x.x.x -Dhttp.proxyPort=80 -Dhttps.proxyHost=10.x.x.x -Dhttps.proxyPort=80"

this shows
[…]
Name: http.proxyHost = Value 10.x.x.x -Dhttp.proxyPort=80 -Dhttps.proxyHost=10.x.x.x -Dhttps.proxyPort=80 -Dhttp.proxySet=true
[…]

which doesn’t look right.

With
- JAVA_OPTS=-Dhttp.proxyHost=10.x.x.x -Dhttp.proxyPort=80 -Dhttps.proxyHost=10.x.x.x -Dhttps.proxyPort=80

(note the missing “”) it shows

[...]
Name: http.proxyHost = Value 10.x.x.x
Name: http.proxyPort = Value 80
[..]

and the flavor list in the installer shows a list of flavors. Installation works to.

So yeah my problem is solved.

One more thing, https://github.com/xwiki/xwiki-platform/blob/458d4d89e4f91082549676c0182b61a1526b5281/xwiki-platform-core/xwiki-platform-oldcore/src/main/java/com/xpn/xwiki/XWiki.java#L1108 shows the usage of String proxyHost = System.getProperty(“http.proxyHost”); but I couldn’t find any mentioning of https.proxyHost (with the s) anywhere in the code for xwiki. Fortunately we have one proxy for http and https on the same ip and port. I don’t know what happens if you need a different proxy ip/port for https urls. Maybe someone from the xwiki devs could have a look at this.

Will give xwiki a test drive now. Thanks for the help.

regards
cd

jwielsch · July 17, 2020, 12:38pm

it seems i am an idiot, too

most important: it is solved