You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@iggy.apache.org by "justinmclean (via GitHub)" <gi...@apache.org> on 2026/09/17 01:27:17 UTC
[I] Warn when the server in a container listens only on loopback, and say how to recover a lost root password [iggy]
justinmclean opened a new issue, #4209:
URL: https://github.com/apache/iggy/issues/4209
### Description
`docker run -p 8090:8090 apache/iggy` starts cleanly, but the host can't connect to it.
The published image (`core/server/Dockerfile`) sets no listener addresses, so the server listens on the `127.0.0.1` defaults from `config.toml`. Nothing in the log says so. The startup check in `validate_client_facing_address` (`core/configs/src/server_config/validators.rs`) only covers wildcard addresses, not loopback.
On first start with no root credentials set, the server logs a generated root password once. If that's missed, the only way to recover is to delete the data directory. Only the README says so.
### Affected area / component
Iggy server, Configuration
### Proposed solution
- When the server runs in a container and the client-facing listener is on a loopback address, log a warning. Name the setting to change, for example `IGGY_TCP_ADDRESS=0.0.0.0:8090` together with `IGGY_NODE_ADVERTISED_ADDRESS`. It should be a warning, not an error, since loopback-only is sometimes intended. Outside a container, loopback is the normal default and needs no warning.
- Add the recovery step to the generated password message in `core/server/src/boot/credentials.rs`, for example "This is shown once. To reset it, delete the data directory."
### Alternatives considered
Set the listener addresses in the published image, as the repository's own `Dockerfile` does. That also needs `IGGY_NODE_ADVERTISED_ADDRESS`, which the image can't know, so the server would refuse to start instead.
### Contribution
- [ ] I'm willing to submit a pull request to implement this feature
### Good first issue
- [ ] I think this could be a good first issue for a new contributor
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@iggy.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Warn when the server in a container listens only on loopback, and say how to recover a lost root password [iggy]
Posted by "hubcio (via GitHub)" <gi...@apache.org>.
hubcio closed issue #4209: Warn when the server in a container listens only on loopback, and say how to recover a lost root password
URL: https://github.com/apache/iggy/issues/4209
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@iggy.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Warn when the server in a container listens only on loopback, and say how to recover a lost root password [iggy]
Posted by "kunaldevxxx (via GitHub)" <gi...@apache.org>.
kunaldevxxx commented on issue #4209:
URL: https://github.com/apache/iggy/issues/4209#issuecomment-5713694647
I'd like to work on this. Will open a PR with the fix shortly — please assign it to me. @justinmclean
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@iggy.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Warn when the server in a container listens only on loopback, and say how to recover a lost root password [iggy]
Posted by "justinmclean (via GitHub)" <gi...@apache.org>.
justinmclean commented on issue #4209:
URL: https://github.com/apache/iggy/issues/4209#issuecomment-5707056412
The root password hint part of this is now a good first issue in #4211. This issue covers the loopback warning.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@iggy.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] Warn when the server in a container listens only on loopback, and say how to recover a lost root password [iggy]
Posted by "hubcio (via GitHub)" <gi...@apache.org>.
hubcio commented on issue #4209:
URL: https://github.com/apache/iggy/issues/4209#issuecomment-5714535170
@kunaldevxxx assigned
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@iggy.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org