Skip to main content


Eclipse Community Forums
Forum Search:

Search      Help    Register    Login    Home
Home » Newcomers » Newcomers » Need Eclipse public URLs for locked down proxy server
Need Eclipse public URLs for locked down proxy server [message #1785858] Fri, 20 April 2018 18:05 Go to next message
Ben Schwartz is currently offline Ben SchwartzFriend
Messages: 2
Registered: April 2018
Junior Member
Hello,
I'm new to supporting Eclipse so bear with me please.

I'm setting up a Citrix XenDesktop VDI environment for my company. The guest VMs run Windows 10 Enterprise. I installed the latest Eclipse Oxygen 64bit with Java tools on my gold image. This VM was able to access the public internet. Eclipse installed and started fine. I installed this one:
* eclipse-inst-win64.exe

I deployed some VMs from this gold image in VDI on a separate VLAN which does not have public internet access. I have a proxy server address set in the Windows OS settings, and the proxy does work. For example, anti-virus agent cloud server traffic runs through the proxy, works fine. The proxy server is locked down to allow only URLs we add.

When I attempt to open Eclipse client on the Windows VM I get this error:
"The Eclipse executable launcher was unable to locate its companion shared library".

I assume it's reaching out to public URLs that I need to add to my proxy server. I found this one and wondering what other specific URLs must be added to ensure Eclipse will start up correctly, and will be able to further download other packages and updates in the future.
* http://download.eclipse.org/releases/oxygen/

Thanks in advance for any help!!
-Ben
Re: Need Eclipse public URLs for locked down proxy server [message #1785866 is a reply to message #1785858] Sat, 21 April 2018 04:47 Go to previous messageGo to next message
Ed Merks is currently offline Ed MerksFriend
Messages: 29349
Registered: July 2009
Senior Member
When you say, you installed this one "eclipse-inst-win64.exe" you mean you downloaded that and ran it in order to create one more more installations?

Note that the installer, by default, creates an installation that uses a shared bundle pool. By default the agent and pool are in ~/.p2 You can read these related threads for more details:

https://www.eclipse.org/forums/index.php/m/1746518/?srch=pool+read-only#msg_1746518
https://www.eclipse.org/forums/index.php/m/1741244/?srch=pool+read-only#msg_1741244

I imagine it is likely the case that you didn't notice this, so while your golden image contains the installation, the golden image doesn't contain the shared agent and pool that the installation uses and needs...

You can disable the use of a shared bundle pool via the menu in the upper right, i.e., the toggle next to the Bundle Pools... This will create an installation that is self-contained. Or you can use the dialog to locate the agent and pool somewhere else, i.e., somewhere that will be in your gold image at the end. This is particularly useful if you want to create more than one installation, e.g., the Java IDE and the JEE IDE, because the two installation will share a single copy of most of the libraries, i.e., all the common libraries (and there are many hundreds of those), significantly reducing disk usage.

As for internet access, that's definitely not the startup problem, but yes, an IDE will access the internet in various ways. It's not a huge list of URIs, but I'm not sure the nature of your listing. I.e., can you add http:/download.eclipse.org/ to the list, or do you need to list each and every URI under that URI that will be accessed separately? That's definitely a much larger list...

Re: Need Eclipse public URLs for locked down proxy server [message #1786053 is a reply to message #1785866] Tue, 24 April 2018 22:54 Go to previous messageGo to next message
Ben Schwartz is currently offline Ben SchwartzFriend
Messages: 2
Registered: April 2018
Junior Member
Hi Ed,
Thanks for the input!

I did indeed download 'eclipse-inst-win64.exe' and installed this on my gold image. I did not know about the bundle pool you mentioned! Good to know.

I do have these 10 or so VMs being used right now in VDI, and I needed to fix Eclipse on them, so I figured I'd try reinstalling this .EXE, and narrowing down the list of URLs I need to add to the proxy.

We added eclipse.org to the proxy server, and installation progressed further, apparantly adding eclipse.org gives access to all download.eclipse.org URLs. Then looked at proxy logs and found the below 3 mirrors the installer was reaching out to. We added those to the proxy. From the packages list prompt in the install wizard I selected "Eclipse IDE for Java Developers". Eventually the installation succeeded!

1524601135.353      0 proxyip TCP_DENIED/403 3861 CONNECT www.eclipse.org:443 - HIER_NONE/- text/html
1524601328.043      0 proxyip TCP_DENIED/403 4029 GET http://mirror.cc.vt.edu/pub/eclipse/releases/oxygen/201804111000/content.xml.xz - HIER_NONE/- text/html
1524601328.678      0 proxyip TCP_DENIED/403 4014 GET http://ftp.osuosl.org/pub/eclipse/releases/oxygen/201804111000/content.jar - HIER_NONE/- text/html
1524601624.474      0 proxyip TCP_DENIED/403 4023 GET http://ftp.osuosl.org/pub/eclipse/releases/oxygen/201804111000/content.xml.xz - HIER_NONE/- text/html
1524601629.646      0 proxyip TCP_DENIED/403 4029 GET http://mirror.cc.vt.edu/pub/eclipse/releases/oxygen/201804111000/content.xml.xz - HIER_NONE/- text/html
1524601630.172      0 proxyip TCP_DENIED/403 4039 GET http://mirrors.syringanetworks.net/eclipse/releases/oxygen/201804111000/content.jar - HIER_NONE/- text/html
1524602759.188      0 proxyip TCP_DENIED/403 4029 GET http://mirror.cc.vt.edu/pub/eclipse/releases/oxygen/201804111000/content.xml.xz - HIER_NONE/- text/html
1524602759.901      0 proxyip TCP_DENIED/403 4020 GET http://mirror.cc.vt.edu/pub/eclipse/releases/oxygen/201804111000/content.jar - HIER_NONE/- text/html

There was a hiccup that said download was taking too long, then it errored out. I clicked the option button in the top right of the wizard with the orange exclamation mark > clicked "UPDATE". It re-downloaded from the mirrors, and eventually installation completed. I can now Launch Eclipse.

Questions:
1. Does this Eclipse Oxygen installer, with IDE for Java dev selected, always reach out to these same mirrors? If not is there a way to force that during installation? I don't want to add all mirrors to my proxy when the other VDI users install Eclipse.
2. Going forward with a working client, do updates only come from downloads.eclipse.org as listed in the "updates" section of the options? If they need to download more repos or other tools, will they reach out to eclipse.org or will i need to add more mirrors?

Thanks,
Ben
Re: Need Eclipse public URLs for locked down proxy server [message #1786058 is a reply to message #1786053] Wed, 25 April 2018 04:01 Go to previous message
Ed Merks is currently offline Ed MerksFriend
Messages: 29349
Registered: July 2009
Senior Member
1. No, not necessarily. In the installer's advanced mode, you (the user) can turn the use of mirrors off, but in simple mode, there is no dialog control for that. In general the mirrors that can be used (to download artifacts) are returned by the Eclipse server via a URL with a query string for the file being accessed. They're supposed to be sorted based on proximity to the requester, but the order seems to be based mostly on time zone, and for me in Berlin, South Africa is really not so close. So the underlying framework generally probes all the mirrors; it sorts the artifacts needed by size and starts with the smallest ones. It uses these probes to calculate which mirrors are actually fast so that those can be used more frequently. Mirrors that fail it will stop using. Since that design was in place, the Eclipse Foundation also added a so-called transparent mirroring mechanism to the download.eclipse.org server so when requesting largish content and artifact metadata, that will kick in; there is no control for disabling that because it's just the behavior of the server. But I thought it was supposed to be transparent to the requester, but looking at your list above, that seems not to be the case; probably because an HTTP redirect status code is sent to the requester which then follows that redirect. So while we could add something to disable the use of mirrors for downloading artifacts, we can do nothing about the download.eclipse.org server's transparent mirroring behavior.

2. The product catalog that Oomph creates only uses sites on download.eclipse.org. The product catalog itself is on www.eclipse.org. Those are the only two servers that are used. But other tools that developers might want might well not be hosted by an Eclipse server.
Previous Topic:Unable to install KURA on Raspberry pi 2 B V1.1 model
Next Topic:Cannot run new class in package?
Goto Forum:
  


Current Time: Sun May 20 19:52:44 GMT 2018

Powered by FUDForum. Page generated in 0.02590 seconds
.:: Contact :: Home ::.

Powered by: FUDforum 3.0.2.
Copyright ©2001-2010 FUDforum Bulletin Board Software

Back to the top