SBOM-API index write lock

[llTimKramer]

Hi,

I'm encountering an issue with the SBOM-API (deployed with Docker and the latest image) logging multiple errors about a write lock in the index.

2024-07-22 18:49:34,575 ERROR [VulnerabilityIndexer] An error occurred while adding document to index
java.nio.file.NoSuchFileException: /data/.dependency-track/index/vulnerability/write.lock
	at java.base/sun.nio.fs.UnixException.translateToIOException(Unknown Source)
	at java.base/sun.nio.fs.UnixException.rethrowAsIOException(Unknown Source)
	at java.base/sun.nio.fs.UnixException.rethrowAsIOException(Unknown Source)
	at java.base/sun.nio.fs.UnixPath.toRealPath(Unknown Source)
	at org.apache.lucene.store.NativeFSLockFactory.obtainFSLock(NativeFSLockFactory.java:108)
	at org.apache.lucene.store.FSLockFactory.obtainLock(FSLockFactory.java:41)
	at org.apache.lucene.store.BaseDirectory.obtainLock(BaseDirectory.java:45)
	at org.apache.lucene.index.IndexWriter.<init>(IndexWriter.java:923)
	at org.dependencytrack.search.IndexManager.openIndex(IndexManager.java:238)
	at org.dependencytrack.search.IndexManager.getIndexWriter(IndexManager.java:268)
	at org.dependencytrack.search.IndexManager.addDocument(IndexManager.java:312)
	at org.dependencytrack.search.VulnerabilityIndexer.add(VulnerabilityIndexer.java:67)
	at java.base/java.lang.Iterable.forEach(Unknown Source)
	at org.dependencytrack.search.VulnerabilityIndexer.reindex(VulnerabilityIndexer.java:100)
	at org.dependencytrack.tasks.IndexTask.inform(IndexTask.java:66)
	at alpine.event.framework.BaseEventService.lambda$publish$0(BaseEventService.java:110)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
	at java.base/java.lang.Thread.run(Unknown Source)
	Suppressed: java.nio.file.AccessDeniedException: /data/.dependency-track/index/vulnerability/write.lock
		at java.base/sun.nio.fs.UnixException.translateToIOException(Unknown Source)
		at java.base/sun.nio.fs.UnixException.rethrowAsIOException(Unknown Source)
		at java.base/sun.nio.fs.UnixException.rethrowAsIOException(Unknown Source)
		at java.base/sun.nio.fs.UnixFileSystemProvider.newByteChannel(Unknown Source)
		at java.base/java.nio.file.Files.newByteChannel(Unknown Source)
		at java.base/java.nio.file.Files.createFile(Unknown Source)
		at org.apache.lucene.store.NativeFSLockFactory.obtainFSLock(NativeFSLockFactory.java:98)
		... 14 common frames omitted

Is this a problem, and if so, how can I fix it?

Thank you.

Best regards,
Tim

[llTimKramer]

Hi,

nobody able to help?

[nscuro]

Are you mounting the /data directory of the container to either a host path, or a Docker volume?

The error:

AccessDeniedException: /data/.dependency-track/index/vulnerability/write.lock

Hints that the container process does not have sufficient (i.e. write) permissions.

[llTimKramer]

Hi,

thanks for your reply. I'm using the docker volume to mount the data path. Its basically a 1to1 copy of the compose file in the documentation. (https://docs.dependencytrack.org/getting-started/deploy-docker/#docker-compose-automated--orchestration)

[nscuro]

Hmmm... Are you running this on Linux? Particularly, a Linux installation with SELinux enabled (Red Hat, Fedora, ...)?

In that case you may need to add the :Z suffix to the volume: https://docs.docker.com/storage/bind-mounts/#configure-the-selinux-label

[llTimKramer]

Yes, running Ubuntu 22.04 as host OS. If I remember right Ubuntu is using AppArmor instead of SELinux?

[llTimKramer]

Hi again, thanks for the hint. I looked today into the file permissions and for some reasons the file permissions were changed and after restoring the file permissions everything is working again.