Starting up aplication using vert.x as non-root user: -Dvertx.disableFileCaching=true

[Haddock]

Hello,

our application using vert.x used to run a long time as user root. We are now working on changing this as this is a security vulnerability. Starting up as non-root user gave the error "Failed to create cache dir". Okay, vert.x creates a cache dir on the fly, which is not possible any more without root privilege.

So we set -Dvertx.disableFileCaching=true. But then the application did not start up any more. Then we tried with -Dvertx.disableFileCPResolvin=true and this worked to some part. The application starts up and all the headless use cases work, but it is not possible to access the application frontend in the web browser. We get this error message when doing so which shows up in the log endlessly unless you kill the application process:

15-06-2021 14:52:28.546 [vert.x-eventloop-thread-3] WARN n.i.d.p.rest.RestVerticleProvider.lambda$start$2 - Redirect: https://myIp:8443/dcb/dashboard/

The browser says ERR_TOO_MANY_REDIRECTS. The redirect issue here is beyond my web development skills. So I have to ask here.

I would prefer a solution where the file caching is not disabled that works as non-root user as well. This would solve the redirect issue without having to change any application code. Maybe there is a way this can be done.

If not, I'm hoping for any ideas how I can track down the redirect issue.

Thanks for any hints,

Haddock

[V V]

Hello.

Did you try https://vertx.io/docs/apidocs/io/vertx/core/file/FileSystemOptions.html#DEFAULT_FILE_CACHING_DIR ?

With best regards, 

Vladimir

вт, 15 июн. 2021 г. в 18:11, Haddock <ffm...@web.de>:

--
You received this message because you are subscribed to the Google Groups "vert.x" group.
To unsubscribe from this group and stop receiving emails from it, send an email to vertx+un...@googlegroups.com.
To view this discussion on the web, visit https://groups.google.com/d/msgid/vertx/2b8b5297-2be1-4512-b9c4-e5568c9ff588n%40googlegroups.com.

[Haddock]

This did it, Vladimir :-). Thanks.