Keycloak Docker Compose with Version 18.0 #12477

MichaelKoch11 · 2022-06-13T10:38:54Z

MichaelKoch11
Jun 13, 2022

I have some questions to Setup Keycloak -Quarkus with Mysql database.

I want to setup keyclaok 18.0.0 Quarkus distribution in docker Compose.

The certificates i use, i have created with https://github.com/FiloSottile/mkcert .

But after startup, the webpage https://localhost:8445/admin/master/console/ always reload, with errror messages below.

How can I successfully setup Keycloak?
Where have I made a mistake?

Here is my Dockerfile

ARG KC_DB_USERNAME
ARG KC_DB_PASSWORD
ARG KEYCLOAK_DATASOURCE_URL


FROM quay.io/keycloak/keycloak:18.0 as builder

ENV KC_METRICS_ENABLED=true
ENV KC_FEATURES=token-exchange
RUN /opt/keycloak/bin/kc.sh build --db=mysql

FROM quay.io/keycloak/keycloak:18.0
COPY --from=builder /opt/keycloak/lib/quarkus/ /opt/keycloak/lib/quarkus/
WORKDIR /opt/keycloak

ENTRYPOINT ["/opt/keycloak/bin/kc.sh", "start", "--spi-connections-jpa-default-migration-strategy=update", "--db-username=$KC_DB_USERNAME", "--db-password=$KC_DB_PASSWORD" ,"--db-url=$KEYCLOAK_DATASOURCE_URL", "--https-certificate-file=/etc/x509/https/tls.crt", "--https-certificate-key-file=/etc/x509/https/tls.key"]

Here is my Docker-compose

version: '2'

services:
  keycloak:
        image: keycloak-local:18.0
        restart: always
        command: start
        environment:
          KEYCLOAK_USER: admin
          KEYCLOAK_PASSWORD: password
          KEYCLOAK_ADMIN: admin
          KEYCLOAK_ADMIN_PASSWORD: password
          KC_DB_USERNAME: user
          KC_DB_PASSWORD: password
          KC_HOSTNAME: keycloak:8445
          KEYCLOAK_DATASOURCE_URL: 'jdbc:mysql://dbkeycloak/:dbkeycloak'   
          TZ: UTC
          JAVA_OPTS_APPEND: -Dkeycloak.migration.strategy=OVERWRITE_EXISTING
        volumes:
          - ./config/cert/keycloak.net.local+1.pem:/etc/x509/https/tls.crt
          - ./config/cert/keycloak.net.local+1-key.pem:/etc/x509/https/tls.key   
        ports:
          - 8080:8080
          - 8443:8443
        depends_on:
          dbkeycloak    

  dbkeycloak:
      image: mysql:5.7
      restart: always
      environment:
        MYSQL_DATABASE: dbkeycloak
        MYSQL_USER: user
        MYSQL_PASSWORD: password
        MYSQL_ROOT_PASSWORD: password
        TZ: UTC
      volumes_from:
        - keycloak-volume-db

    
  #Sitekick
  keycloak-volume-db:
    image: rawmind/alpine-volume:0.0.2-4
    environment:
      SERVICE_GID: '0'
      SERVICE_UID: '0'
      SERVICE_VOLUME: /var/lib/mysql
    network_mode: none
    volumes:
    - keycloak_access_db:/var/lib/mysql

volumes:
  keycloak_access_db:
    driver: local

When loading https://localhost:8445/admin/master/console/ in Browser I got this error messages:

Here is also my log from the keycloak container after first startup (After dockercompose down and up I got error message not anymore):

Appending additional Java properties to JAVA_OPTS: -Dkeycloak.migration.strategy=OVERWRITE_EXISTING

2022-06-13 09:51:38,238 INFO  [org.keycloak.common.Profile] (main) Preview feature enabled: token_exchange

2022-06-13 09:51:38,265 INFO  [org.keycloak.quarkus.runtime.hostname.DefaultHostnameProvider] (main) Hostname settings: FrontEnd: keycloak:8445, Strict HTTPS: true, Path: <request>, Strict BackChannel: false, Admin: <request>, Port: -1, Proxied: false

2022-06-13 09:51:39,727 WARN  [org.infinispan.PERSISTENCE] (keycloak-cache-init) ISPN000554: jboss-marshalling is deprecated and planned for removal

2022-06-13 09:51:39,806 WARN  [org.infinispan.CONFIG] (keycloak-cache-init) ISPN000569: Unable to persist Infinispan internal caches as no global state enabled

2022-06-13 09:51:39,832 INFO  [org.infinispan.CONTAINER] (keycloak-cache-init) ISPN000556: Starting user marshaller 'org.infinispan.jboss.marshalling.core.JBossUserMarshaller'

2022-06-13 09:51:40,174 INFO  [org.infinispan.CONTAINER] (keycloak-cache-init) ISPN000128: Infinispan version: Infinispan 'Triskaidekaphobia' 13.0.8.Final

2022-06-13 09:51:40,406 INFO  [org.infinispan.CLUSTER] (keycloak-cache-init) ISPN000078: Starting JGroups channel `ISPN`

2022-06-13 09:51:40,406 INFO  [org.infinispan.CLUSTER] (keycloak-cache-init) ISPN000088: Unable to use any JGroups configuration mechanisms provided in properties {}. Using default JGroups configuration!

2022-06-13 09:51:40,503 WARN  [org.jgroups.protocols.UDP] (keycloak-cache-init) JGRP000015: the send buffer of socket MulticastSocket was set to 1.00MB, but the OS only allocated 212.99KB

2022-06-13 09:51:40,504 WARN  [org.jgroups.protocols.UDP] (keycloak-cache-init) JGRP000015: the receive buffer of socket MulticastSocket was set to 20.00MB, but the OS only allocated 212.99KB

2022-06-13 09:51:40,504 WARN  [org.jgroups.protocols.UDP] (keycloak-cache-init) JGRP000015: the send buffer of socket MulticastSocket was set to 1.00MB, but the OS only allocated 212.99KB

2022-06-13 09:51:40,505 WARN  [org.jgroups.protocols.UDP] (keycloak-cache-init) JGRP000015: the receive buffer of socket MulticastSocket was set to 25.00MB, but the OS only allocated 212.99KB

2022-06-13 09:51:42,525 INFO  [org.jgroups.protocols.pbcast.GMS] (keycloak-cache-init) 175003b4e4e5-16659: no members discovered after 2005 ms: creating cluster as coordinator

2022-06-13 09:51:42,546 INFO  [org.infinispan.CLUSTER] (keycloak-cache-init) ISPN000094: Received new cluster view for channel ISPN: [175003b4e4e5-16659|0] (1) [175003b4e4e5-16659]

2022-06-13 09:51:42,555 INFO  [org.infinispan.CLUSTER] (keycloak-cache-init) ISPN000079: Channel `ISPN` local address is `175003b4e4e5-16659`, physical addresses are `[172.20.0.3:60938]`

2022-06-13 09:51:43,313 INFO  [org.keycloak.connections.infinispan.DefaultInfinispanConnectionProviderFactory] (main) Node name: 175003b4e4e5-16659, Site name: null

2022-06-13 09:51:45,400 INFO  [org.keycloak.quarkus.runtime.storage.database.liquibase.QuarkusJpaUpdaterProvider] (main) Initializing database schema. Using changelog META-INF/jpa-changelog-master.xml

2022-06-13 09:53:22,636 INFO  [org.keycloak.services] (main) KC-SERVICES0050: Initializing master realm

2022-06-13 09:53:26,583 INFO  [org.keycloak.services] (main) KC-SERVICES0009: Added user 'admin' to realm 'master'

2022-06-13 09:53:27,014 INFO  [io.quarkus] (main) Keycloak 18.0.0 on JVM (powered by Quarkus 2.7.5.Final) started in 114.110s. Listening on: https://0.0.0.0:8443

2022-06-13 09:53:27,021 INFO  [io.quarkus] (main) Profile prod activated. 

2022-06-13 09:53:27,022 INFO  [io.quarkus] (main) Installed features: [agroal, cdi, hibernate-orm, jdbc-h2, jdbc-mariadb, jdbc-mssql, jdbc-mysql, jdbc-oracle, jdbc-postgresql, keycloak, narayana-jta, reactive-routes, resteasy, resteasy-jackson, smallrye-context-propagation, smallrye-health, smallrye-metrics, vault, vertx]

2022-06-13 09:54:34,855 ERROR [org.jboss.threads.errors] (executor-thread-9) Thread Thread[executor-thread-9,5,main] threw an uncaught exception: java.lang.RuntimeException: java.io.IOException: java.io.IOException: io.netty.handler.ssl.SslClosedEngineException: SSLEngine closed already

at io.quarkus.resteasy.runtime.standalone.VertxHttpRequest$VertxExecutionContext$VertxHttpAsyncResponse.vertxFlush(VertxHttpRequest.java:396)

at io.quarkus.resteasy.runtime.standalone.VertxHttpRequest$VertxExecutionContext$VertxHttpAsyncResponse$1.run(VertxHttpRequest.java:326)

at io.quarkus.vertx.core.runtime.VertxCoreRecorder$13.runWith(VertxCoreRecorder.java:543)

at org.jboss.threads.EnhancedQueueExecutor$Task.run(EnhancedQueueExecutor.java:2449)

at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1478)

at org.jboss.threads.DelegatingRunnable.run(DelegatingRunnable.java:29)

at org.jboss.threads.ThreadLocalResettingRunnable.run(ThreadLocalResettingRunnable.java:29)

at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30)

at java.base/java.lang.Thread.run(Thread.java:829)

Caused by: java.io.IOException: java.io.IOException: io.netty.handler.ssl.SslClosedEngineException: SSLEngine closed already

at io.quarkus.resteasy.runtime.standalone.VertxOutputStream.close(VertxOutputStream.java:128)

at io.quarkus.resteasy.runtime.standalone.VertxHttpResponse.finish(VertxHttpResponse.java:145)

at io.quarkus.resteasy.runtime.standalone.VertxHttpRequest$VertxExecutionContext$VertxHttpAsyncResponse.vertxFlush(VertxHttpRequest.java:394)

... 8 more

Caused by: java.io.IOException: io.netty.handler.ssl.SslClosedEngineException: SSLEngine closed already

at io.quarkus.resteasy.runtime.standalone.VertxBlockingOutput.write(VertxBlockingOutput.java:74)

at io.quarkus.resteasy.runtime.standalone.VertxHttpResponse.writeBlocking(VertxHttpResponse.java:172)

at io.quarkus.resteasy.runtime.standalone.VertxOutputStream.close(VertxOutputStream.java:126)

... 10 more

Caused by: io.netty.handler.ssl.SslClosedEngineException: SSLEngine closed already

at io.netty.handler.ssl.SslHandler.wrap(SslHandler.java:859)

at io.netty.handler.ssl.SslHandler.wrapAndFlush(SslHandler.java:798)

at io.netty.handler.ssl.SslHandler.flush(SslHandler.java:779)

at io.netty.channel.AbstractChannelHandlerContext.invokeFlush0(AbstractChannelHandlerContext.java:750)

at io.netty.channel.AbstractChannelHandlerContext.invokeFlush(AbstractChannelHandlerContext.java:742)

at io.netty.channel.AbstractChannelHandlerContext.flush(AbstractChannelHandlerContext.java:728)

at io.netty.handler.codec.http2.Http2ConnectionHandler.flush(Http2ConnectionHandler.java:189)

at io.netty.channel.AbstractChannelHandlerContext.invokeFlush0(AbstractChannelHandlerContext.java:750)

at io.netty.channel.AbstractChannelHandlerContext.invokeFlush(AbstractChannelHandlerContext.java:742)

at io.netty.channel.AbstractChannelHandlerContext.flush(AbstractChannelHandlerContext.java:728)

at io.netty.channel.DefaultChannelPipeline.flush(DefaultChannelPipeline.java:967)

at io.netty.channel.AbstractChannel.flush(AbstractChannel.java:254)

at io.vertx.core.http.impl.VertxHttp2ConnectionHandler.writeHeaders(VertxHttp2ConnectionHandler.java:203)

at io.vertx.core.http.impl.VertxHttp2Stream.doWriteHeaders(VertxHttp2Stream.java:188)

at io.vertx.core.http.impl.Http2ServerStream.doWriteHeaders(Http2ServerStream.java:117)

at io.vertx.core.http.impl.VertxHttp2Stream.lambda$writeHeaders$6(VertxHttp2Stream.java:182)

at io.netty.util.concurrent.AbstractEventExecutor.safeExecute(AbstractEventExecutor.java:164)

at io.netty.util.concurrent.SingleThreadEventExecutor.runAllTasks(SingleThreadEventExecutor.java:469)

at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:500)

at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:986)

at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74)

... 2 more

XcrigX · 2022-06-13T15:54:18Z

XcrigX
Jun 13, 2022

Caveat: I'm new to keycloak - still trying to figure it out myself.

Your hostname doesn't look correct to me:
KC_HOSTNAME: keycloak:8445
You maybe want to use localhost there for your setup? And not specify the port.

1 reply

thomasdarimont Jun 13, 2022
Collaborator

You can configure your frontend hostname / port separately, e.g.:

KC_HOSTNAME=id.acme.test
KC_HOSTNAME_PORT=8443

MichaelKoch11 · 2022-06-22T06:57:47Z

MichaelKoch11
Jun 22, 2022
Author

I removed the port in the hostname and added keycloak 127.0.0.1 in the "hosts" file of windows, then everything started.
Thanks for your help.

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Keycloak Docker Compose with Version 18.0 #12477

Uh oh!

{{title}}

Uh oh!

Replies: 2 comments 1 reply

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Keycloak Docker Compose with Version 18.0 #12477

Uh oh!

MichaelKoch11 Jun 13, 2022

Replies: 2 comments · 1 reply

Uh oh!

XcrigX Jun 13, 2022

Uh oh!

thomasdarimont Jun 13, 2022 Collaborator

Uh oh!

MichaelKoch11 Jun 22, 2022 Author

MichaelKoch11
Jun 13, 2022

Replies: 2 comments 1 reply

XcrigX
Jun 13, 2022

thomasdarimont Jun 13, 2022
Collaborator

MichaelKoch11
Jun 22, 2022
Author