Chapter 3. Downloading and Verifying the Packages
JBoss EAP 8.1 is available in a ZIP format. ZIP files are available from the Red Hat Customer Portal at https://access.redhat.com.
To guarantee authenticity of the downloaded software, verify the authenticity of the files and their source.
Other formats, like Installer Installation or containerized image for JBoss EAP that is designed for use with OpenShift, are not supported for a CC compliant system.
Unless specifically stated otherwise, the screen shots and other samples shown in this section are examples only. The actual presentation of the downloaded websites may change over time.
3.1. About the Red Hat Customer Portal Copy linkLink copied to clipboard!
The Red Hat Customer Portal is the centralized platform for Red Hat knowledge and subscription resources. Use the Red Hat Customer Portal to:
- Manage and maintain Red Hat entitlements and support contracts
- Download officially-supported software
- Access product documentation and the Red Hat Knowledgebase
- Contact Red Hat Support
- File bugs against Red Hat products
The Customer Portal is available here: https://access.redhat.com.
3.2. Verify the Authenticity of the Download Site Copy linkLink copied to clipboard!
Red Hat Customer Portal and Red Hat Network are both secure sites. This is indicated by the 'security padlock' icon in the browser status bar.
If the 'security padlock' is not visible, check the authenticity of the site by viewing the identity certificate.
Checking Site Security with Firefox
- In the address bar, click the padlock icon.
- From the pop-up box, click Connection Secure.
- In the next pop-up box, click More Information.
- From the Page Info window, click Security.
- To view the site certificate, click View Certificate.
- The certificate displays details such as who owns the site, who issued the certificate, when it was issued, when it expires and fingerprint verification strings.
Figure 3.1. Example of the Red Hat Network SSL Certificate
If neither of the lock icons are present in your browser and a verified certificate cannot be found, you may not be connected to the correct site. If you are unable to reach the secure Red Hat Customer Portal site, contact Red Hat Support and report this problem.
3.3. Verify the Downloaded Files Copy linkLink copied to clipboard!
Each downloaded file needs to be checked to verify that it is for the certified version of JBoss EAP 8.1. The Red Hat Customer Portal lists the SHA-256 hash sum for each file. If the SHA-256 hash sum of a downloaded file matches that quoted on the Red Hat Customer Portal, you can assume it is verified.
For JBoss downloads, you can view the SHA-256 hash sum on the Software Details page for each file, by clicking on the file name in the Download File list. For Red Hat Enterprise Linux downloads, the SHA-256 hash sum is listed next to the ISO download link.
On Apple OSX, the sha256 command must be replaced with shasum -a 256. On Microsoft Windows, a third-party SHA256 hash sum utility is required as there is no native utility.
Using the sha256sum tool on Linux or Unix
- Open a terminal, and navigate to the directory where the file was downloaded.
-
Execute the
sha256sumcommand (or equivalent) on the file.
For example:
$ sha256sum jboss-eap-8.1.0.zip
c00ba9f5447a2e6280c0b55f3521052d1b53c18f08eea4acf366e572201f8a2b *jboss-eap-8.1.0.zip
The value generated by the sha256sum utility must match the value displayed on the Red Hat Customer Portal for the file. If they are not the same, your download is either incomplete or corrupt, and you will need to download the file again. If the checksum will still not successfully validate after several attempted downloads, contact Red Hat Support for assistance.
To generate a checksum for a downloaded file, the sha256sum command can be used on most Linux and Unix operating systems. Mac OS X includes the equivalent command shasum -a 256.
If you are using Microsoft Windows you must download a third party utility to perform these steps because Microsoft Windows does not include a SHA-256 checksum tool.
3.4. Zip Installation Copy linkLink copied to clipboard!
The JBoss EAP 8.1 ZIP file is available from the Customer Portal. The ZIP file installation is platform-independent and is the preferred way to install JBoss EAP 8.1 on all supported platforms.
3.4.1. Download JBoss EAP Copy linkLink copied to clipboard!
This topic covers the steps to download the required archive.
Download the ZIP file
- Log into the Red Hat Customer Portal at https://access.redhat.com.
- Click Downloads.
- Click Red Hat JBoss Enterprise Application Platform in the Product Downloads list.
- Select 8.1 from the Version drop-down menu.
- Select Red Hat JBoss Enterprise Application Platform 8.1.x from the list of Releases and click Download.
- Select Red Hat JBoss Enterprise Application Platform 8.1 Update 00.1 Maven Repository from the list of patches and click Download.
- When the downloads have finished, verify that the checksum of the downloaded files match the checksum listed on the Customer Portal. See Verify the Downloaded Files.
JBoss EAP 8.1 has been downloaded successfully to the target machine, and is ready for installation.
3.4.2. Install JBoss EAP (ZIP Installation) Copy linkLink copied to clipboard!
This topic covers the steps to install JBoss EAP 8.1 using the downloaded ZIP file.
Once the JBoss EAP ZIP installation file has been downloaded, it can be installed by extracting the package contents.
If necessary, move the ZIP file to the server and location where JBoss EAP should be installed.
NoteThe user who will be running JBoss EAP must have read and write access to this directory.
Extract the ZIP archive.
$ unzip JBossEAPZipNameNoteFor Windows Server, right-click the ZIP file and select Extract All.
The directory created by extracting the ZIP archive is the top-level directory for the JBoss EAP installation. This is referred to as
EAP_HOME.Apply required patches.
Start your JBoss EAP server:
EAP_HOME/bin/standalone.shLaunch the Management CLI:
EAP_HOME/bin/jboss-cli.shRun the following command to apply the patch:
[standalone@localhost:9990 /] installer update --maven-repo-files=/path/to/jboss-eap-8.1.0.1-maven-repository.zipRun the following command to restart your JBoss EAP server:
[standalone@localhost:9990 /] shutdown --perform-installation
3.5. Confirming the Version of your JBoss EAP 8.1 Installation Copy linkLink copied to clipboard!
There are three ways to verify the version number of your JBoss EAP 8.1 installation.
Using the -V with the startup script
Retrieve information about the version of your JBoss EAP 8.1 installation by running the same script used to start the server with only the -V switch. If your installation is a standalone or managed domain, for Red Hat Enterprise Linux, this script is either standalone.sh or domain.sh, and on Microsoft Windows Server it is the equivalent .bat scripts. The startup scripts are located in EAP_HOME/bin.
Running the startup script with only the -V switch will not start the server, and does not require the server to be running. It displays information about the JBoss EAP version and its configured Java environment. Below is an example of using it on an installation of JBoss EAP 8.1 on Red Hat Enterprise Linux. Note the version number, JBoss EAP 8.1.GA, displayed as the last line of the output.
$ ./standalone.sh -V
=========================================================================
JBoss Bootstrap Environment
JBOSS_HOME: /home/user/EAP-8.1.0.1
JAVA: java
JAVA_OPTS: -server -verbose:gc -Xloggc:"/home/user/EAP-8.1.0.1/standalone/log/gc.log" -XX:+PrintGCDetails -XX:+PrintGCDateStamps -XX:+UseGCLogFileRotation -XX:NumberOfGCLogFiles=5 -XX:GCLogFileSize=3M -XX:-TraceClassUnloading -Xms1303m -Xmx1303m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true
=========================================================================
09:14:27,815 INFO [org.jboss.modules] (main) JBoss Modules version 2.1.6.Final-redhat-00001
JBoss EAP 8.1 Update 0.1 (WildFly Core 27.1.0.Final-redhat-00010)
Using the Management Console
When the JBoss EAP 8.1 server is running, the version information is displayed at top of the home page of the Web Console, located at http://localhost:9990/console/.
View the console output, or server.log file
When a server is started, the version is echoed to the console, and written to the server log. For standalone configurations the server log is located at EAP_HOME/standalone/log/server.log, and for managed domain servers it is EAP_HOME/domain/servers/SERVER_NAME/log/server.log:
09:17:47,305 INFO [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: JBoss EAP 8.1 Update 0.1 (WildFly Core 27.1.0.Final-redhat-00010) started in 3494ms - Started 299 of 560 services (348 services are lazy, passive or on-demand)
3.6. Updating a Common Criteria Compliant JBoss EAP 8.1 Installation Copy linkLink copied to clipboard!
Updates are regularly released for JBoss EAP, and these updates may include fixes for important security issues. However, any updates to a Common Criteria compliant JBoss EAP installation will invalidate that installation’s Common Criteria certification.
For more information about updating your JBoss EAP 8.1 installation, see the Updating Red Hat JBoss Enterprise Application Platform guide.
Not applying security updates is potentially a serious risk. If security updates are released, it is at your discretion whether to apply them to a Common Criteria Compliant JBoss EAP installation. You may wish to forgo Common Criteria certification in favor of applying updates that resolve security issues.
3.6.1. Updating your installation offline using the Management CLI Copy linkLink copied to clipboard!
You can use the Management CLI to update JBoss EAP 8.1 and apply patches offline in a stand-alone server or servers in a managed domain. You will need to specify the location of the Maven repository that contains the required artifacts to update your server.
Prerequisites
You have the Maven archive repository containing the required artifacts locally on your machine.
You can download the Maven repository for your update from the Red Hat Customer Portal.
Procedure
Launch the Management CLI:
EAP_HOME/bin/jboss-cli.shUpdate JBoss EAP offline:
Update JBoss EAP offline in a stand-alone server:
[standalone@localhost:9990 /] installer update --maven-repo-files=<An absolute or a relative path pointing to the local archive file that contains a maven repository>Update JBoss EAP offline in a managed domain:
[domain@localhost:9990 /] installer update --host=target-host --maven-repo-files=<An absolute or a relative path pointing to the local archive file that contains a maven repository>
Restart your JBoss EAP server to complete the update process:
NoteYou must ensure that no other processes are launched from the
JBOSS_EAP/binfolder, such asJBOSS_EAP/bin/jconsole.shandJBOSS_EAP/bin/appclient.sh, when restarting the server with the--perform-installationoption. This precaution prevents conflicts in writing files that might be in use by other processes during the server’s update.Restart your JBoss EAP server in a stand-alone server:
[standalone@localhost:9990 /] shutdown --perform-installationRestart your JBoss EAP server in a managed domain:
[domain@localhost:9990 /] shutdown --host=target-host --perform-installation