opendev/system-config
Code Issues Proposed changes

No lookups in Gerrit's log4j2 message formatting

Browse Source 
This is a safety net in case Gerrit or one of its plugins is using
log4j2 in unsafe ways.

Change-Id: I9d0a05fdad379a1e47f88cc6faa9425614f6515b
This commit is contained in:
Jeremy Stanley 2021-12-10 20:07:36 +00:00
parent 999edcc88b
commit 4b173eaddb
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
playbooks/roles/gerrit/templates/docker-compose.yaml.j2
View File

@ -33,6 +33,7 @@ services:
environment: environment:
JAVA_OPTIONS: >- JAVA_OPTIONS: >-
-Xlog:gc*:file=/var/gerrit/logs/jvm_gc.log:time,uptime,tid,level,tags:filecount=10,filesize=20M -Xlog:gc*:file=/var/gerrit/logs/jvm_gc.log:time,uptime,tid,level,tags:filecount=10,filesize=20M
-Dlog4j2.formatMsgNoLookups=true
{% if gerrit_heap_limit is defined %} {% if gerrit_heap_limit is defined %}
-Xmx{{ gerrit_heap_limit }} -Xmx{{ gerrit_heap_limit }}
{% endif %} {% endif %}