Lifecycle Manager: Java Install Failure

Introduction

Under certain circumstances, OpsCenter Lifecycle Manager may fail to install java unless the OpsCenter version being used is at least 6.0.11 in the 6.0.x series, or 6.1.4 in the 6.1.x series. This issue may manifest with one of two potential error messages:

The first potential error message: 

404 Client Error: Not Found for url: http://download.oracle.com/otn-pub/java/jdk/8u144-b01/090f390dda5b47b9b721c7dfaa008135/server-jre-8u144-linux-x64.tar.gz?AuthParam=1508506248_c42953569bc9a2e456e1904620c28858

The second potential error message:

No such file or directory: 'local_policy.jar'

Resolution

The best resolution is upgrade Opscenter to 6.0.11 or greater in the 6.0.x release series, or 6.1.4 or greater in the 6.1.x release series. These releases address the issue.

Additional Workarounds

If upgrade is not immediately possible, several workarounds are possible:

1. Update Java Version and Disable manage-jce:
   1. The latest update, build, and hash values can be obtained from Oracle. Java 8 u144 is no longer available for download; obtain the latest version information and enter it into the java-setup page of the relevant configuration profiles.
   2. Additionally, disable manage-jce in the java-setup page of the relevant configuration profiles. This means that LCM will not automatically install the unlimited strength JCE policy files. If you are adding nodes to an existing cluster with node-to-node or client-to-node encryption enabled, you are likely to encounter encryption errors from DSE. These can be resolved by manually installing the JCE using the Oracle Jar procedure outlined in Installing JCE.
2. Download the Oracle JRE u144 or lower from a local mirror using the information from Offline Installation of DSE. Note that older versions of Oracle Java may contain known vulnerabilities and running the latest version is recommended.
3. Install Java on target nodes outside of LCM, prior to running an LCM install job. You may optionally uncheck the manage-java checkbox in the java-setup page of the relevant configuration profiles so that LCM will not attempt to install java at all. If you do not uncheck this option, LCM should detect if the correct version of java is pre-installed and will not attempt to download or install that version again.

Additional Details

Two changes from Oracle combined to cause this issue:

1. Java 8 u144 was deprecated and is no longer available for download, causing the 404 download error.
2. Oracle changed moved the export-strength JCE policy files in Java 8 u151 and greater, which caused LCM to be unable to perform JCE installs on those versions. Once the download error is resolved by entering the latest Java version information, the JCE policy file changes cause LCM to error during JCE installation.