Skip to main content

Security updates: eMudhra certificate incident and PHP2Shell: Sonatype is aware of the eMudhra certificate incident and the PHP2Shell vulnerabilities. We are updating our products to address the eMudhra issue and have confirmed that Sonatype products are not impacted by PHP2Shell. Read Sonatype's assessment and guidance

"Failed to write lock file" During Pod Startup Running Sonatype IQ Server

Updated

Problem

When installing Sonatype IQ Server using helm charts, the following error may be observed during pod startup:

com.sonatype.insight.brain.service.InsightFileLock - Failed to write lock file /sonatype-work/lock
java.io.FileNotFoundException: /sonatype-work/lock (Permission denied)

 

Solution

This error indicates that the sonatype-work directory cannot be accessed by the user running Sonatype IQ Server. It can be caused by the uid by which the pod is trying to access the filesystem. By default, in the docker container, IQ Server runs as user "nexus", and that user has uid=997. The sonatype-work directory needs to be accessible by this user. Alternatively, custom configuration options including security context can be set via the values.yaml file.

Reference:

https://github.com/sonatype/helm3-charts/tree/master/charts/nexus-iq

 

Related articles