DependencyTrack / DependencyTrack/dependency-track
Dependency Track Api Repeated Crashes on startup
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
The defect may already be reported! Please search for the defect before creating one.
### Current Behavior:
The api server startups up, executes a failed sql statement, retrieves NPM advisories, and then restarts. The api goes through this loop endlessly making it impossible to login through the frontend server or use the rest api.
### Steps to Reproduce:
Use Docker Desktop 3.7
Download a clean version of Dependency Track using docker compose
curl -LO https://dependencytrack.org/docker-compose.yml
docker-compose up -d
The only change inside the docker compose is on the resources key so I can try dependency track on a local machine
resources:
limits:
memory: 5288m
reservations:
memory: 3192m
### Expected Behavior:
The server starts up and stays active.
### Environment:
- Dependency-Track Version: 4.3.6 Built-on: 2021-09-20T14:53:35Z
- Distribution: Docker
- BOM Format & Version:
- Database Server: Default H2
- Browser: FireFox
- Docker Desktop Resources is set so 6GB of memory
### Additional Details:
There is the stacktrace for the database error:
15:22:31.789 INFO [MetricsUpdateTask] Completed metrics update for project: 3baffd28-5679-4427-8cb6-379d2674d025
15:22:31.809 INFO [MetricsUpdateTask] Completed portfolio metrics update
15:22:32.481 ERROR [MetricsUpdateTask] An unknown error occurred while updating metrics
javax.jdo.JDOException: Exception thrown when executing query : SELECT 'org.dependencytrack.model.Vulnerability' AS DN_TYPE,A0.CREATED,A0.CREDITS,A0.CVSSV2BASESCORE,A0.CVSSV2EXPLOITSCORE,A0.CVSSV2IMPACTSCORE,A0.CVSSV2VECTOR,A0.CVSSV3BASESCORE,A0.CVSSV3EXPLOITSCORE,A0.CVSSV3IMPACTSCORE,A0.CVSSV3VECTOR,B0.CWEID,B0.ID,B0."NAME",A0.DESCRIPTION,A0.FRIENDLYVULNID,A0.ID AS NUCORDER0,A0.PATCHEDVERSIONS,A0.PUBLISHED,A0.RECOMMENDATION,A0."REFERENCES",A0.SEVERITY,A0.SOURCE,A0.SUBTITLE,A0.TITLE,A0.UPDATED,A0.UUID,A0.VULNID,A0.VULNERABLEVERSIONS FROM VULNERABILITY A0 LEFT OUTER JOIN CWE B0 ON A0.CWE = B0.ID ORDER BY NUCORDER0
at org.datanucleus.api.jdo.NucleusJDOHelper.getJDOExceptionForNucleusException(NucleusJDOHelper.java:676)
at org.datanucleus.api.jdo.JDOQuery.executeInternal(JDOQuery.java:456)
at org.datanucleus.api.jdo.JDOQuery.execute(JDOQuery.java:263)
at alpine.persistence.AbstractAlpineQueryManager.execute(AbstractAlpineQueryManager.java:148)
at org.dependencytrack.persistence.VulnerabilityQueryManager.getVulnerabilities(VulnerabilityQueryManager.java:284)
at org.dependencytrack.persistence.QueryManager.getVulnerabilities(QueryManager.java:734)
at org.dependencytrack.tasks.MetricsUpdateTask.updateVulnerabilitiesMetrics(MetricsUpdateTask.java:560)
Contributor guide
Assessment
This issue has not been assessed yet.