upstream/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-02-18 18:37:54 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 15

fix: updating the fix for docker ulimits (#46254)

Browse source 
it will now be applied by default

closes: #44232

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
This commit is contained in:
Steven Hawkins 2026-02-12 04:28:53 -05:00 committed by GitHub
parent 479d5546a6
commit 3aa5ab0072
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
4 changed files with 6 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
docs/guides/server/containers.adoc
View file

@ -193,14 +193,7 @@ Opening up `https://localhost:9000/metrics` leads to a page containing operation
=== Known issues with Docker
* If a `RUN dnf install` command seems to be taking an excessive amount of time, then likely your Docker systemd service has the file limit setting `LimitNOFILE` configured incorrectly.
Either update the service configuration to use a better value, such as 1024000, or directly use `ulimit` in the RUN command:
[source, dockerfile]
----
...
RUN ulimit -n 1024000 && dnf install --installroot ...
...
----
Either update the service configuration to use a better value, such as 1024000, or use `--ulimit` in the https://docs.docker.com/reference/cli/docker/buildx/build/#ulimit[docker build command], e.g. `--ulimit nofile=1024000`.
* If you are including provider JARs and your container fails a `start --optimized` with a notification that a provider JAR has changed, this is due to Docker truncating
or otherwise modifying file modification timestamps from what the `build` command recorded to what is seen at runtime.

4
operator/README.md
View file

@ -48,7 +48,7 @@ Vanilla minikube does not support Network Policies, and Cilium implements the CN
Another CNI implementation may work too.
```bash
minikube start --addons ingress --cni cilium
minikube start --addons ingress --cni cilium --cpus=max
```
Enable the Minikube Docker daemon:
@ -113,7 +113,7 @@ minikube addons enable ingress
To avoid skipping tests that are depending on custom Keycloak images, you need to build those first:
```bash
./build-testing-docker-images.sh [SOURCE KEYCLOAK IMAGE TAG] [SOURCE KEYCLOAK IMAGE]
./scripts/build-testing-docker-images.sh [SOURCE KEYCLOAK IMAGE TAG] [SOURCE KEYCLOAK IMAGE]
```
And run the tests passing an extra Java property:

2
operator/scripts/olm-testing.sh
View file

@ -17,7 +17,7 @@ VERSION="86400000.0.0"
(
cd $SCRIPT_DIR/../../quarkus/container
docker build --build-arg KEYCLOAK_DIST=$(ls keycloak-*.tar.gz) . -t "$REGISTRY/${UUID}keycloak:${VERSION}"
docker build --ulimit nofile=1024000 --build-arg KEYCLOAK_DIST=$(ls keycloak-*.tar.gz) . -t "$REGISTRY/${UUID}keycloak:${VERSION}"
docker push "$REGISTRY/${UUID}keycloak:${VERSION}"
)

2
operator/src/main/resources/application.properties
View file

@ -30,3 +30,5 @@ quarkus.operator-sdk.bundle.channels=fast
quarkus.operator-sdk.namespaces=JOSDK_WATCH_CURRENT
quarkus.operator-sdk.generate-with-watched-namespaces=JOSDK_WATCH_CURRENT
quarkus.docker.additional-args=--ulimit,nofile=1024000