Upgrade version about ansible-role-solr HOT 7 CLOSED

Looking forward to this as well.

from ansible-role-solr.

So I have just tested this, you can remove the following files to force re-installation while the platform stays online (at least on my side)

• symlink under solr_install_path
• /etc/init.d/solr (otherwise "Run Solr installation script" fails)

Then re-run ansible to make it install the newest version and re-create the symlink for you after installation.

from ansible-role-solr.

This issue has been marked 'stale' due to lack of recent activity. If there is no further activity, the issue will be closed in another 30 days. Thank you for your contribution!

Please read this blog post to see the reasons why I mark issues as stale.

from ansible-role-solr.

This issue has been closed due to inactivity. If you feel this is in error, please reopen the issue or file a new issue with the relevant details.

from ansible-role-solr.

In order to update to the latest version 8.11.1 ...

I took these steps on my solr server before running the playbook:

• remove the /opt/solr symlink
  rm /opt/solr

• rename /etc/init.d/solr
  mv /etc/init.d/solr /etc/init.d/solr-backup

• copy /etc/default/solr.in.sh (to create a backup)
  cp /etc/default/solr.in.sh /etc/default/solr.in.sh.solr-backup

• rename /var/solr/data/solr.xml
  mv /var/solr/data/solr.xml /var/solr/data/solr.xml.solr-backup

• rename /var/solr/log4j2.xml ...
  mv /var/solr/log4j2.xml /var/solr/log4j2.xml.solr-backup

After this my playbook ran through to the end, and it updated solr, in my case no solr downtime was experienced.

from ansible-role-solr.

Note that running the current playbook installs Solr 8.11.1, this contains the now outdated log4j 2.16.0

Note that the solr team still considers log4j 2.16.0 to be not causing a security issue within solr (of course in other contexts it is a security issue):
https://solr.apache.org/security.html
https://solr.apache.org/security.html#apache-solr-affected-by-apache-log4j-cve-2021-44228
https://cwiki.apache.org/confluence/display/SOLR/SolrSecurity#SolrSecurity-SolrandVulnerabilityScanningTools

To play it safe, it is possible to swap out the log4j *.jar files to the latest version (at time of writing, 2.17.1).

We did this without any noticed bad effects (YMMV):

download and extract https://dlcdn.apache.org/logging/log4j/2.17.1/apache-log4j-2.17.1-bin.tar.gz

replace the *.jar files in:
/opt/solr/server/lib/ext/
... with the 2.17.1 versions from the download

from ansible-role-solr.

@michaellenahan - Yeah, since it seems the Solr usage isn't affected, I'm okay with just keeping 2.16.0 running on my servers for now. I'm still following the discussion around Log4J and will update the role's defaults quickly again if I see any further developments.

from ansible-role-solr.