Skip to content

Instantly share code, notes, and snippets.

View slaskawi's full-sized avatar

Sebastian Łaskawiec slaskawi

  • Defense Unicorns
  • Poland
View GitHub Profile
@slaskawi
slaskawi / 54017_logs.txt
Created October 16, 2026 04:19
Keycloak #53729 / PR #54017: controlled k3d reproduction with SunJCE PBEWithSHA1AndRC2_40 deliberately disabled; 26.8.0 and PR parent fail, rebuilt PR passes. Stock 26.8.0 starts successfully here; reporter JVM constraints remain unknown. Linux/arm64, no UDS Core.
PR #54017: FRESH-BUILD VERIFICATION
Commit: 895add015ebfe472d0e1be33f3927f2fa5cd45ed
Pod: kc-repro/kc-patched-fresh-no-rc2
Image: keycloak-53729:pr-895add015eb
Image ID: sha256:562363cdc7659b80d528711761d7f4978b5cf3001b963da3c86ad378ee8af6c8
Fresh k3d without UDS Core; Linux/arm64; Red Hat OpenJDK 21.0.12.1.
Same pod configuration as the failing parent, except pod name and image.
The Java agent deliberately removes the same RC2 services. The runtime diagnostic
asserts RC2 remains unavailable, BC loads the generated PKCS12, and the mounted
Kubernetes CA appears in both Keycloak's store and a fresh SunJSSE trust manager.
# Keycloak Bootstrap Speed Report
Date: 2026-06-16
## Environment
- Repo: `defenseunicorns/uds-core`
- Cluster: local k3d UDS dev cluster created with `uds run dev-setup`
- Keycloak chart: `src/keycloak/chart`
- Keycloak image: `quay.io/keycloak/keycloak:26.6.2`
Oct 31 13:24:42 [localhost] journal: Trace[700908767]: [500.966012ms] [497.022807ms] Transaction committed
Oct 31 13:24:44 [localhost] journal: 2017-10-31 13:24:44.224899 W | etcdserver: apply entries took too long [121.180931ms for 1 entries]
Oct 31 13:24:44 [localhost] journal: 2017-10-31 13:24:44.224918 W | etcdserver: avoid queries with large range/delete range!
Oct 31 13:24:47 [localhost] journal: 2017-10-31 13:24:47.699339 W | wal: sync duration of 1.236060053s, expected less than 1s
Oct 31 13:24:49 [localhost] journal: F1031 13:24:49.664849 7745 start_master.go:506] timed out waiting for the condition
Oct 31 13:24:49 [localhost] systemd-machined: Machine 0dd622705470f2449e7ae17925d03947 terminated.
Oct 31 13:24:49 [localhost] oci-register-machine[7786]: 2017/10/31 13:24:49 Register machine: poststop 0dd622705470f2449e7ae17925d039475e9e0f6b3db05301004d5ebce37aaf2f 0 /var/lib/docker/devicemapper/mnt/021d578e95ba866d54a0654b12f06329f56961b7159b409f28e44a8ca7213121/rootfs
Oct 31 13:24:49 [localhost] doc
apiVersion: "v1"
kind: "List"
items:
- apiVersion: v1
kind: DeploymentConfig
metadata:
labels:
environment: "infrastructure"
project: "infinispan"
version: "9.1.0.Final"
oc create secret generic client1-server-keystore --from-file=./client1_server_keystore.jks
oc create secret generic client2-server-keystore --from-file=./client2_server_keystore.jks
<server>
<management>
<security-realms>
<security-realm name="SSLRealm1">
<server-identities>
<ssl>
<keystore path="client_1_server_keystore.jks"
relative-to="jboss.server.config.dir" keystore-password="secret"/>
</ssl>
</server-identities>
# Generating key stores
keytool -genkey -noprompt -trustcacerts -keyalg RSA -alias "client1" -dname "CN=Client_1, OU=Infinispan, O=JBoss, L=Red Hat, ST=World, C=WW" -keypass "secret" -storepass "secret" -keystore "client_1_server_keystore.jks"
keytool -genkey -noprompt -trustcacerts -keyalg RSA -alias "client2" -dname "CN=Client_2, OU=Infinispan, O=JBoss, L=Red Hat, ST=World, C=WW" -keypass "secret" -storepass "secret" -keystore "client_2_server_keystore.jks"
# Generating trust stores
keytool -export -keyalg RSA -alias "client1" -storepass "secret" -file "client1_cert.cer" -keystore "client_1_server_keystore.jks"
keytool -export -keyalg RSA -alias "client2" -storepass "secret" -file "client2_cert.cer" -keystore "client_2_server_keystore.jks"
keytool -import -noprompt -v -trustcacerts -keyalg RSA -alias "client1" -file "client_1_server_keystore.cer" -keypass "secret" -storepass "secret" -keystore "client_1_truststore.jks"
keytool -import -noprompt -v -trustcacerts -keyalg RSA -alias "client2" -file "client_2
$ docker run -m 500M --cpu-quota=600000 jboss/infinispan-server -n
$ docker run -m 500M --cpu-quota=600000 jboss/infinispan-server
JAVA_OPTS already set in environment; overriding default settings with values: -Xms64m -Djava.net.preferIPv4Stack=true -Xmx350m -XX:ParallelGCThreads=6 -XX:ConcGCThreads=6 -Djava.util.concurrent.ForkJoinPool.common.parallelism=6
=========================================================================
JBoss Bootstrap Environment
JBOSS_HOME: /opt/jboss/infinispan-server
JAVA: /usr/lib/jvm/java/bin/java
$ docker pull jboss/infinispan-server