[Backport release-24.05] keycloak: 24.0.5 -> 25.0.6

[NickCao]

Description of changes

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
  • sandbox = relaxed
  • sandbox = true
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
• Fits CONTRIBUTING.md.

---

Add a 👍 reaction to pull requests you find important.

[teutat3s]

It's probably failing because the feature name is not valid. I also saw references to hostname:v1 in the docs, but it's seems the feature name is hostname-v1.
Source: https://www.keycloak.org/server/features

[mweinelt]

Any particular reason for this backport? And is it free of breaking changes?

[teutat3s]

Any particular reason for this backport? And is it free of breaking changes?

#318814 (comment)

[teutat3s]

Some additional observations that caught my eye while trying to debug this. I could not spot clues to a solution yet.

❯ nix build --print-build-logs -f . nixosTests.keycloak.postgres.driverInteractive
...
WARN  [org.key.com.Profile] (main) Deprecated features enabled: hostname:v1
WARN  [org.key.qua.run.cli.Picocli] (main) The following run time non-cli options were found, but will be ignored during build time:
  kc.db-url-host, kc.db-url-database, kc.db-url-port, kc.db-url-properties, kc.db-username, kc.db-password, kc.hostname,
  kc.hostname-strict-backchannel, kc.http-host, kc.http-port, kc.https-port, kc.https-certificate-file, kc.https-certificate-key-file, kc.proxy
...

and

$ kc.sh --config-file /nix/store/j05dgml8criznlavvxz9yd9zp7rirshy-keycloak.conf show-config
Current Mode: production
Current Configuration:
	kc.config.built =  true (SysPropConfigSource)
	kc.config.file =  /nix/store/j05dgml8criznlavvxz9yd9zp7rirshy-keycloak.conf (SysPropConfigSource)
	kc.db =  postgres (j05dgml8criznlavvxz9yd9zp7rirshy-keycloak.conf)
	kc.db-password =  ******* (j05dgml8criznlavvxz9yd9zp7rirshy-keycloak.conf)
	kc.db-url-database =  keycloak (j05dgml8criznlavvxz9yd9zp7rirshy-keycloak.conf)
	kc.db-url-host =  localhost (j05dgml8criznlavvxz9yd9zp7rirshy-keycloak.conf)
	kc.db-url-port =  5432 (j05dgml8criznlavvxz9yd9zp7rirshy-keycloak.conf)
	kc.db-url-properties =   (j05dgml8criznlavvxz9yd9zp7rirshy-keycloak.conf)
	kc.db-username =  keycloak (j05dgml8criznlavvxz9yd9zp7rirshy-keycloak.conf)
	kc.hostname =  acme.test (j05dgml8criznlavvxz9yd9zp7rirshy-keycloak.conf)
	kc.http-host =  0.0.0.0 (j05dgml8criznlavvxz9yd9zp7rirshy-keycloak.conf)
	kc.http-port =  80 (j05dgml8criznlavvxz9yd9zp7rirshy-keycloak.conf)
	kc.http-relative-path =  / (j05dgml8criznlavvxz9yd9zp7rirshy-keycloak.conf)
	kc.https-certificate-file =  /run/keycloak/ssl/ssl_cert (j05dgml8criznlavvxz9yd9zp7rirshy-keycloak.conf)
	kc.https-certificate-key-file =  /run/keycloak/ssl/ssl_key (j05dgml8criznlavvxz9yd9zp7rirshy-keycloak.conf)
	kc.https-port =  443 (j05dgml8criznlavvxz9yd9zp7rirshy-keycloak.conf)
	kc.log-console-output =  default (classpath keycloak.conf)
	kc.proxy =  none (j05dgml8criznlavvxz9yd9zp7rirshy-keycloak.conf)
	kc.spi-hostname-v2-hostname =  acme.test (j05dgml8criznlavvxz9yd9zp7rirshy-keycloak.conf)
	kc.version =  25.0.1 (SysPropConfigSource)

[NickCao]

In an unexpected turn of events, I found out why this was not working in #346439

[teutat3s]

Result of nixpkgs-review pr 323480 run on x86_64-linux 1

3 tests built:

• nixosTests.keycloak.mariadb
• nixosTests.keycloak.mysql
• nixosTests.keycloak.postgres

1 package built:

• pkgs.keycloak

[teutat3s]

@ofborg test keycloak

[NickCao]

Let's add the commit raising test vm memory size, should help with the flaky tests.

[NickCao]

So they only support one major version: https://endoflife.date/keycloak

We might as well leave it as is. Version 25 is no better than 24 in terms of support now.

[dkowis]

https://www.keycloak.org/2024/10/release-updates

Just FYI, keycloak is changing the way they do releases so that it's less disruptive, and hopefully this will be easier to deal with.