Project

General

Profile

V2-9-1 Reference » History » Version 2

Henning Blohm, 16.01.2022 18:01

1 2 Henning Blohm
p=. Please find the detailed documentation of v2.9.1 below.
2
3
p=. A PDF version can be downloaded here: attachment:"z2_env_fulldoc_2_9_1.pdf".
4
5
6
7
8
9
p{ text-align:center; font-size:large; }. System Development
10
11
12
p{ text-align:center; font-size:large; }. for Java 
13
14
15
p{ text-align:center; font-size:large; }. with the z2-Environment
16
17
18
19
20
21
p=. Version 2.9.1
22
23
24
25
26
p=. Last updated on:
27
28
29
p=. January 16, 2022
30
31
32
1.  [[#Introduction|Introduction]] 
33
1.1.  [[#What is the z2-Environment|What is the z2-Environment]] 
34
1.2.  [[#Online resources|Online resources]] 
35
2.  [[#Installing and Understanding a Z2 Home|Installing and Understanding a Z2 Home]] 
36
2.1.  [[#The z2-base Distribution|The z2-base Distribution]] 
37
2.2.  [[#Home install in 2 minutes|Home install in 2 minutes]] 
38
2.3.  [[#Folder Structure of a Z2 Home|Folder Structure of a Z2 Home]] 
39
2.4.  [[#Starting and synchronizing|Starting and synchronizing]] 
40
2.5.  [[#Important System Properties|Important System Properties]] 
41
2.6.  [[#The Base Repository|The Base Repository]] 
42
2.7.  [[#Worker Processes and Home Layouts|Worker Processes and Home Layouts]] 
43
3.  [[#Anatomy|Anatomy]] 
44
3.1.  [[#Working on-demand|Working on-demand]] 
45
3.1.1.  [[#The Resource Management System|The Resource Management System]] 
46
3.1.2.  [[#The z2 Command Line, the Embedded Runtime and the Main Runner|The z2 Command Line, the Embedded Runtime and the Main Runner]] 
47
3.2.  [[#Components and Component Repositories|Components and Component Repositories]] 
48
3.2.1.  [[#Synchronization with updates|Synchronization with updates]] 
49
3.2.2.  [[#File system support|File system support]] 
50
3.2.3.  [[#Subversion support|Subversion support]] 
51
3.2.4.  [[#Git support|Git support]] 
52
3.2.5.  [[#Maven Repository Support|Maven Repository Support]] 
53
3.2.6.  [[#Component Types and Component Factories|Component Types and Component Factories]] 
54
3.2.7.  [[#Dynamic Component Properties|Dynamic Component Properties]] 
55
3.2.8.  [[#Using Dynamic Property Expressions with JEXL3|Using Dynamic Property Expressions with JEXL3]] 
56
3.2.9.  [[#Java Naming and Directory Interface (JNDI) support|Java Naming and Directory Interface (JNDI) support]] 
57
3.2.10.  [[#Link Components and Component Linking|Link Components and Component Linking]] 
58
3.3.  [[#Unit of Work and transaction management|Unit of Work and transaction management]] 
59
4.  [[#Constructing a Z2 system|Constructing a Z2 system]] 
60
4.1.  [[#Add-ons|Add-ons]] 
61
5.  [[#Developing with the z2-Environment|Developing with the z2-Environment]] 
62
5.1.  [[#A note on what JDK to use|A note on what JDK to use]] 
63
5.2.  [[#Workspace development using the Dev Repository |Workspace development using the Dev Repository]] 
64
5.2.1.  [[#Recommended folder structure |Recommended folder structure]] 
65
5.3.  [[#The Eclipsoid Plug-in|The Eclipsoid Plug-in]] 
66
5.4.  [[#Using the Offline Mode|Using the Offline Mode]] 
67
5.4.1.  [[#How the offline mode is used. |How the offline mode is used.]] 
68
5.4.2.  [[#Enabling Offline mode at start time |Enabling Offline mode at start time]] 
69
5.4.3.  [[#Toggling Offline Mode during Development |Toggling Offline Mode during Development]] 
70
5.5.  [[#In-container unit testing using Z2 Jupiter|In-container unit testing using Z2 Jupiter]] 
71
5.6.  [[#Retrieving jars from Z2|Retrieving jars from Z2]] 
72
6.  [[#Managing z2|Managing z2]] 
73
6.1.  [[#The Basic Admin Interface|The Basic Admin Interface]] 
74
6.2.  [[#The JMX Read-Only Web Interface|The JMX Read-Only Web Interface]] 
75
6.3.  [[#The JMX Remoting Command Line Interface|The JMX Remoting Command Line Interface]] 
76
7.  [[#Enhanced Basis Features|Enhanced Basis Features]] 
77
7.1.  [[#The Binary Hub Component Repository|The Binary Hub Component Repository]] 
78
7.2.  [[#The Gateway for Zero-Downtime-Upgrades |The Gateway for Zero-Downtime-Upgrades]] 
79
8.  [[#Component type reference|Component type reference]] 
80
8.1.  [[#Core component properties|Core component properties]] 
81
8.2.  [[#“Any” components (core)|“Any” components (core)]] 
82
8.3.  [[#Component Factories (core)|Component Factories (core)]] 
83
8.4.  [[#Data Source components (z2-base)|Data Source components (z2-base)]] 
84
8.4.1.  [[#Data Source Specific Configuration|Data Source Specific Configuration]] 
85
8.4.2.  [[#Data Source Types|Data Source Types]] 
86
8.5.  [[#File system component repositories (core)|File system component repositories (core)]] 
87
8.6.  [[#GIT component repositories (core)|GIT component repositories (core)]] 
88
8.7.  [[#Java components (core)|Java components (core)]] 
89
8.7.1.  [[#Classloaders|Classloaders]] 
90
8.7.2.  [[#Includes|Includes]] 
91
8.8.  [[#JUL configurations (z2-base)|JUL configurations (z2-base)]] 
92
8.9.  [[#Link Components|Link Components]] 
93
8.10.  [[#Log4J configurations (z2-base)|Log4J configurations (z2-base)]] 
94
8.11.  [[#Main Program Components (core)|Main Program Components (core)]] 
95
8.12.  [[#Maven component repositories (z2-base)|Maven component repositories (z2-base)]] 
96
8.13.  [[#Maven component repository fragments (z2-base)|Maven component repository fragments (z2-base)]] 
97
8.14.  [[#Subversion component repositories (core)|Subversion component repositories (core)]] 
98
8.15.  [[#System States (core)|System States (core)]] 
99
8.16.  [[#Web applications (z2-base)|Web applications (z2-base)]] 
100
8.17.  [[#Web servers (z2-base)|Web servers (z2-base)]] 
101
8.18.  [[#Worker Processes (z2-base)|Worker Processes (z2-base)]] 
102
8.18.1.  [[#System Property Propagation from Home to Worker Process|System Property Propagation from Home to Worker Process]] 
103
8.18.2.  [[#Special considerations when specifying VM options using blanks and quotes|Special considerations when specifying VM options using blanks and quotes]] 
104
9.  [[#Securing z2 for Production Use|Securing z2 for Production Use]] 
105
9.1.  [[#Securing Access to Ports|Securing Access to Ports]] 
106
9.2.  [[#Non-Localhost-Whitelisting|Non-Localhost-Whitelisting]] 
107
108
h2. Introduction
109
110
111
p. Developing applications for the Java platform typically involves a number of steps that are needed to be performed before execution. At the least it is required to run a Java compiler that turns Java source code into executable byte code.
112
113
114
p. Coding environments like the Eclipse or the IntelliJ Integrated Development Environments do a great job of hiding these operations to the user for simple applications. When applications become more complex though, modularization needs and team development approaches ask for more sophisticated tools to make sure that growing system complexity can be managed.
115
116
117
p. The traditional development approach for Java applications resembles that of Desktop applications. Apart from compiling source code into an executable representation, execution of additional operations, the _build process_, needs to be completed before execution. This includes resolution of module dependencies and packaging of generated as well as retrieved artifacts into some _*deployable*_ file format that will be installed (_deployed_) in some execution environment. For Java applications the latter is either a standalone Java Virtual Machine (JVM) or an application server.
118
119
120
p. For Desktop applications that can assume very little about their execution environment it is a necessity to be self-contained and easily distributable in some file format.
121
122
123
p. The situation for Intranet and Internet applications is different. A major part of the life cycle of a business application installation consists of change: ongoing development, customization, extension, and repair. 
124
125
126
p. All but the most trivial business applications are a composition of subsystems that make strong assumptions on the presence and behavior of other subsystems – all together forming a software system that offers a wide range of access methods, performs recurring background jobs, integrates with other systems in whole landscape of systems, and operates over a shared and evolving data asset.
127
128
129
p. Platforms that are heavily geared towards development and operation of business applications, such as SAP's ABAP environment or Oracle's PL/SQL platform therefore take a different view. Instead of mimicking the concept of a most generic operating system that runs largely independent, locally _installed _binary applications, the focus of these environments is to perform the functions of a large highly interconnected software system at scale, agnostic to the single machine, with as little local configuration as possible. Instead of being the end of a tool chain that is a mere executor of binary code in some undecipherable interplay, a centrally defined, customizable and extensible system definition in the form of source code and configuration that is executable without build process complexities by arbitrarily many machine nodes running the platform is crucial to managing software life cycle complexity at scale. 
130
131
132
p. The z2-Environment brings these qualities to the world of Java applications. We call it the _system-centric _approach.
133
134
135
h3. What is the z2-Environment
136
137
138
p. Practically speaking the z2-Environment is a Java-based runtime environment that knows how to update itself from source code and configurations stored in repositories of various technologies, including source control systems like Git and Subversion or just a plain old file system.
139
140
141
p. Z2 defines an extensible component and modularization model that, based on few basic paradigms and interfaces, allows to construct full-blown modular application systems.
142
143
144
p. The z2-Environment can be used to build Java EE Web applications as well as standalone Java applications without restricting the use of third-party libraries and popular frameworks like the Spring Framework, Hibernate/JPA, and many more.
145
146
147
p. Z2 is strictly implemented on Java:
148
149
* Versions before 2.4 require Java 6 and support Java 6 and Java 7  language levels. 
150
* As of version 2.4, Z2 requires Java 8,
151
* As of version 2.6, Z2 requires Java 9 and supports Java 9 and Java 10,
152
* As of version 2.7, Z2 requires Java 9 and supports Java 9, Java 10, and Java 11.
153
* As of version 2.8, Z2 requires Java 9 and supports Java 9, and higher up to Java 13.
154
* As of version 2.9, Z2 requires Java 11 and supports Java 15 and higher.
155
156
p. See also [[#A note on what JDK to use|A note on what JDK to use]]  for more details.
157
158
159
h3. Online resources
160
161
162
p. Z2 can be installed and tried out in a matter of minutes. There are various how-tos and samples available that explain and demonstrate the use of Z2. 
163
164
165
p. This documentation and high-level information can be found in the Wiki at 
166
167
168
p. "https://redmine.z2-environment.net/projects/z2-environment/wiki":https://redmine.z2-environment.net/projects/z2-environment/wiki 
169
170
171
h2. Installing and Understanding a Z2 Home
172
173
174
p. In order to access component repositories and to implement its component and modularization model at runtime, the elementary capabilities of Z2 need to be installed as a normal Java program in binary form. The most fundamental features of Z2 are implemented in the _z2 core_. It's source code and its simple build script, including instructions, can be found on the Wiki site. We call a local installation of a z2-core a _z2 Home_.
175
176
177
p. In its basic form, the z2 core knows little more than running Java main programs from source in a modular context. In order to turn a z2 home into a node of a capable system we need to connect it to repositories defining further component types, libraries, and applications.
178
179
180
p. This is done by declaring component repository components as will be explained below. Choosing remote repositories will give you a system that is centrally defined and scales easily with consistent updates. 
181
182
183
p. Choosing only local repositories will leads to system that can be maintained and distributed like a Scripting language application, albeit being implemented using Java.
184
185
186
h3. The z2-base Distribution
187
188
189
p. Starting with version 2.6, when you download z2 for installation, you are encouraged to download the *z2-base distribution* from the Web site. The z2-base distribution does not only contain the z2 core but also a locally configured *z2-base.base* repository in the *base* folder (see below), providing the Jetty Web Container and other components that are useful for most anything you might want to do, without requiring remote access to the z2-base Git repositories. 
190
191
192
p. The alternative is to use the *z2-core distribution* that only contains the z2-core binaries and has a remote-configured z2-base repository. For larger applications where the need for z2 home updates should be minimized this would be the right choice. 
193
194
195
p. To sum it up:
196
197
| Distribution| Contains| When to use |
198
| z2-base| The z2 core binaries and a locally configured z2-base.base repository. | Getting started. Needs no remote access to anywhere and can be easily extended using local modules (see [[#Developing with the z2-Environment|#develop]] ). |
199
| z2-core| The z2 core binaries and a remote configured z2-base.base repository. | Updating or setting up a distributed system that is configured and extended using remote repositories. |
200
201
202
203
h3. Home install in 2 minutes
204
205
206
p. Generally you install a z2 Home by downloading and unpacking a z2 base distribution from the Web site. Distribution ZIP an TAR archives are named including the distribution base name (e.g. z2-base), the version branch, as well as the actual build time stamp.
207
208
209
p. For example, from a linux command line prompt you might run:
210
211
212
<pre><code class="bash">mkdir install
213
cd install
214
wget http://download.z2-environment.net/z2/z2-base-v2.9.tar.gz
215
tar xf z2-base-v2.9.tar.gz
216
z2-base.core/bin/gui.sh</code></pre>
217
218
219
p. installing a z2 Home at z2-base.core in the install folder and starting the development graphical user interface. 
220
221
222
h3. Folder Structure of a Z2 Home
223
224
225
p. Typically a home installation folder has the following file and folder structure:
226
227
228
**bin**
229
230
231
p. This folder holds the actual z2 start code and shell scripts. This is from where you run z2.
232
233
234
235
**local**
236
237
238
p. This folder holds all core modules that have been pre-compiled as part of the z2-core build. Normally you do not need to touch anything in here.
239
240
241
242
**base**
243
244
245
p. When using the z2-base distribution this folder holds the complete z2-base.base modules. The z2-base.base repository is the application foundation on z2 and holds the Jetty web container and some fundamental libraries and applications.
246
247
248
249
**config**
250
251
252
p. The config folder is another z2 component repository meant to be used to define modules that tweak or add configuration to z2, in particular other sources of modules. By default there is a repos module that binds the base repo (see one row up). 
253
254
255
256
**licenses**
257
258
259
p. This folder holds a reference or copy of all licenses per library and module that is part of the distribution you installed. A browsable version of this content can be found on release page on the Wiki. For example, for version 2.9, go here: 
260
261
262
263
p. "https://redmine.z2-environment.net/projects/z2-environment/wiki/V2":https://redmine.z2-environment.net/projects/z2-environment/wiki/V29-Licenses "9":https://redmine.z2-environment.net/projects/z2-environment/wiki/V29-Licenses "-Licenses":https://redmine.z2-environment.net/projects/z2-environment/wiki/V29-Licenses 
264
265
266
267
p. Note: To our knowledge, there are no non-business-friendly OSS licenses, but you need to check for yourself.
268
269
270
271
**LICENSE.txt and THIRD-PARTY-LICENSES.txt**
272
273
274
p. The license you retrieved z2 under, the Apache 2 Open Source Software license, as well as information on how to find out about third-party licenses, just as above.
275
276
277
278
**work**
279
280
281
p. During runtime z2 needs to store essentially transient data like compilation results or other cached data. While a running z2 may not be able to handle a missing work folder, it is generally ok and sometimes even helpful to remove all transient work data when z2 is down. This folder is generated during runtime and not part of the distribution.
282
283
284
285
**data**
286
287
288
p. The data folder is used by applications that need to maintain local, file-system stored data, for longer. In short: The data folder should not be deleted casually and, depending on your application, it may be advisable to have it point to particularly reliable storage.
289
290
291
292
**logs**
293
294
295
p. The place to write log files to. Z2 itself writes its log output into logs/home_0_0.log.
296
297
298
299
p. A few files are important in the bin folder:
300
301
302
p. *runtime.properties*
303
304
305
p. The properties stored in runtime.properties are loaded by the home process and all worker processes into the respective JVM system properties. See also [[#Important System Properties|#systemProps]] .
306
307
308
p. *launch.properties*
309
310
311
p. A z2 home can be started in different “modes”. This is a convenience feature to simplify the application of various Virtual Machine settings for the home process (many of which propagate to worker processes – including debug settings).
312
313
314
p. A typical launch.properties file looks like this:
315
316
317
<pre><code class="bash">#
318
# alternative VM profiles for the home process
319
# VM opts
320
# default
321
#
322
home.vmopts=\
323
	-Xmx64M -cp z.jar \
324
	-Dcom.sun.management.config.file=management.properties \
325
	-Djava.util.logging.config.file=logging.properties \
326
	-Dcom.zfabrik.home.concurrency=5 \
327
	-Dcom.zfabrik.home.start=environment/home
328
329
# override when -mode debug
330
home.vmopts.debug=-Xdebug -Xnoagent -Xrunjdwp:transport=dt_socket,suspend=n,server=y,address=5000 -Dworker.debug=true
331
332
# override when -mode verbose
333
home.vmopts.verbose=-verbose:gc -XX:+PrintClassHistogram
334
</code></pre>
335
336
337
338
h3. Starting and synchronizing
339
340
341
p. In order to start Z2 in server mode, change into the folder *Z2_HOME/bin*
342
343
344
p. If you prefer a simple console view, you can start the z2 Environment by issueing the command *./go.sh* (on Linux/Mac OS) or *go.bat** *(on Windows).
345
346
347
p. There are several options you may use to alter the default behavior. Most notably, if you start using 
348
349
350
<pre><code class="bash">	./go.sh -mode:debug  </code></pre>
351
352
353
p. the z2 Environment will start with debug settings (see launch.properties above).
354
355
356
p. If you start using
357
358
359
<pre><code class="bash">	./go.sh - -np</code></pre>
360
361
362
p. the home process will end up showing an input prompt – which is favorable to running as background process (e.g. using nohup or via an init script on Linux). And of course, if you run
363
364
365
<pre><code class="bash">	./go.sh -mode:debug - -np</code></pre>
366
367
368
p. you will get both.
369
370
371
p. The general syntax is
372
373
374
<pre><code class="bash">./go.sh <parameters for the launcher> - <parameters for the home process></code></pre>
375
376
377
p. where the launcher is the small program that computes the actual Java command line as indicated in the previous section.
378
379
380
p. When running the z2 Environment locally, in particular during application development, it is convenient to have a graphical user interface (GUI). Adding the *gui* option achieves just that. For example
381
382
383
p. 	./go.sh -mode:debug - -gui 
384
385
386
p. starts the home process with a Java GUI  that allows to scroll through the home and worker processes console output and to manage synchronizations as well as the current list of worker processes.
387
388
389
p. The gui shell command is a shortcut that spares you the *gui* option. I.e 
390
391
392
p. 	./gui.sh 
393
394
395
*is a short version of *.***/go.sh - -gui***.**
396
397
398
h3. *Important System Properties*
399
400
401
p. *Some system properties can be set on the command line (or launch.properties) or for all z2 processes (e. g. in runtime.properties, see **[[#Folder Structure of a Z2 Home|Folder Structure of a Z2 Home]] *).
402
403
404
| Property name| Meaning |
405
| com.zfabrik.mode| Set to “development” for development mode. Some features, such as test code and switchboard, will be ignored unless in development mode. This applies to the home process and worker processes. |
406
| com.zfabrik.offline| If set to true, enables the offline mode (see [[#Using the Offline Mode|#offlineMode]] ). Can be toggled on the GUI. Will be automatically propagated to worker processes at synchronization. |
407
| com.zfabrik.config| Name of the system config file to be loaded by all processes. Defaults to runtime.properties. This applies to the home process and worker processes. |
408
| com.zfabrik.home| The z2 Home folder, i.e. where the z2 core is installed.If not specified when starting Z2, this property is determined by checking for the environment variable Z2_HOME. If that is not set either, it defaults to “..”, one up from the current work folder, which is the installation folder, if you are in the bin folder of standard z2 Home folder structure.  |
409
| com.zfabrik.home.layout| Home layout to start by the home process. This determines the worker processes to start. Technically this will be appended to the setting com.zfabrik.home.start. This setting applies only to the home process.  |
410
| com.zfabrik.home.start| Comma separated list of dependency components (in particular system states) to prepare at start and after each synchronization by the home process. This setting applies only to the home process.  |
411
| com.zfabrik.java.level| Java language level used for compilation. Can be 6,7,8. Determined by the Java runtime in use. |
412
| com.zfabrik.home.autoVerifyInterval| Interval in seconds after which the home process will run a verification (an attempt to attain all target states) again. Defaults to none (undefined). This applies only to the home process. |
413
| com.zfabrik.dev.local.workspace| Setting of the development repository defining where to check for “armed” modules. See also [[#Workspace development using the Dev Repository |#devRepo]] . Relative to current working folder, which is typically the Z2_HOME/bin.  Typically set to “../../..”, i. e. in the direct neighborhood of Z2_HOME. This applies only to the home process. |
414
| com.zfabrik.dev.local.depth| Setting of the development repository defining how deep the Dev Repo scans for LOCAL files. Depth is measured in path distance from the roots set via the system property  com.zfabrik.dev.local.workspace. Defaults to 3. See also [[#Workspace development using the Dev Repository |#devRepo]] . |
415
| com.zfabrik.repo.mode| General repository access mode. If set to “relaxed”, repositories will attempt to work on previously cached resources in case of technical repository access failures during synchronization. If set to “strict” (which is the default), technical failures will lead to a failure in synchronization, even if local resources are available. This feature is useful for offline or bad connectivity situations.  |
416
417
418
419
p. Note see also [[#Worker Processes (z2-base)|#workerProcesses]]  on how to make sure properties are propagated to worker processes.  More important system properties, including some that will be set by z2 at runtime, can be found in the "Foundation":http://www.z2-environment.net/javadoc/com.zfabrik.core.api!2Fjava/api/com/zfabrik/util/runtime/Foundation.html  class.
420
421
422
h3. The Base Repository
423
424
425
p. The Z2 core that gets cloned (or checked out) to create a Z2 Home contains exactly what is needed to be able to bootstrap a running environment. All further definitions, code, and configuration is retrieved via additional component repositories that are typically accessed remotely. 
426
427
428
p. The starting point, from the perspective of the Z2 core is the so-called _Base Repository_.
429
430
431
p. The Base Repository is defined in *Z2_HOME/local/com.zfabrik.boot.config/baseRepository.properties. *By default the Base Repository points to the *z2-base.base* repository hosted on z2-environment.net. 
432
433
434
p. When you create your own system, this is an important customization point. We will get to that in [[#Constructing a Z2 system|Constructing a Z2 system]]  after we have learned a about [[#Components and Component Repositories|Components and Component Repositories]] .
435
436
437
h3. Worker Processes and Home Layouts
438
439
440
p. As indicated above the z2-Environment can manage further JVM processes to better support heterogeneous load scenarios without compromising the ability to apply updates consistently nor the stability of the home process
441
442
443
p. Worker processes are, from a home process perspective, regular z2 components. See also the documentation of the component type *com.zfabrik.worker* below. What makes worker processes special is their virtual machine configurations and the set of target system states to attain (see *com.zfabrik.systemState* below). System states, on the other hand, group components to be started and kept alive during synchronization and verification. 
444
445
446
p. When a worker process component is initialized (we say prepared), it starts a JVM, as configured, that loads another instance of the z2-environment that in turn attempts to attain the configured target system states.
447
448
449
p. Worker processes are typically prepared as dependency of a home layout. A home layout – by convention -  is simply a system state that is used to define the components that are expected to be prepared in a home process, initially and at the conclusion of a synchronization.
450
451
!{height:14.579cm;width:12.002cm;}10000201000003B10000047C0381106D3BD4ED46.png!
452
453
454
p. A typical home layout declaration for a single worker process to be executed looks like this:
455
456
457
p. com.zfabrik.component.type=com.zfabrik.systemState
458
459
com.zfabrik.component.dependencies=\
460
  environment/webWorker
461
462
463
p. Home layouts are useful to define node specific configurations running individual worker process configuration combinations from the very same shared configuration store to achieve maximum  functional flexibility in a distributed deployment without distributing configuration information. All that is required to start z2 with a given home layout is a change in command line settings.
464
465
466
h2. Anatomy
467
468
469
h3. Working on-demand
470
471
472
p. Much of the goodness of the Z2-Environment comes from the fact that it has a pervasive on-demand architecture. That means that whenever the runtime binds resources it is for a clear and understandable reason, either because a need (a dependency) has been declared or the specific task at hand requires so. 
473
474
475
p. While that sounds trivial, it is not so. Unlike implicit “start of everything deployed” or “everything in a list” approach that many application servers implement, binding of runtime resources from the potentially large pool of components available in a component repository (see below) happens strictly as required based on target states configuration – which eventually translates to simplified on-demand operations of large scale out scenarios with heterogeneous node assignments.
476
477
478
p. The sibling of the load-on-demand approach is the unload-on-invalidity approach. When repository definitions have been updated, in development but also in production scenarios, Z2 runtimes can adapt to the changes made. That requires to understand what component definitions have become invalid and to “unload” these from memory. Because of the modular nature of components and the heavy re-use of resource, invalidation of one component typically implies that others, dependant components have implicitly become invalid as well. 
479
480
481
p. For example, a change in an API  defined in some Java component may imply that web applications have to be restarted.
482
483
484
p. The abstraction for resources that have dependent resources is the Resource Management system of Z2.
485
486
487
h4. The Resource Management System
488
489
490
p. The Resource Management system is at the heart of the Z2 runtime. Essentially anything that binds runtime memory or represents components is internally modeled as extensions of the Resource class (see "Resource":http://www.z2-environment.net/javadoc/com.zfabrik.core.api!2Fjava/api/com/zfabrik/resources/provider/Resource.html ). 
491
492
493
p. Resources represent any kind of abstraction that may be made available for some time and that may have dependencies onto other abstract resources, such as cache regions, applications, etc. In particular z2 components are resources.
494
495
496
p. Resources are provided by Resource Providers that establish a namespace of resources. One of which is the components resource provider that uses the component factory mechanism to delegate resource construction further.
497
498
499
p. A resource can be asked for objects implementing or extending any given Java type using the "IResourceHandle":http://www.z2-environment.net/javadoc/com.zfabrik.core.api!2Fjava/api/com/zfabrik/resources/IResourceHandle.html  interface. For components, the IComponentsLookup.lookup method is simply a delegating facade to that.
500
501
502
p. A complete description of the resource management system is beyond the scope of this section. Please see the documentation of the com.zfabrik.resources packages in the " core API Javadocs":http://www.z2-environment.net/javadoc/com.zfabrik.core.api!2Fjava/api/index.html .
503
504
505
h4. The z2 Command Line, the Embedded Runtime and the Main Runner
506
507
508
p. The Z2 environment can be used as a multi-process server environment, which is what we looked at above, or embedded. The z2 command line that was used already in [[#Starting and synchronizing|Starting and synchronizing]]  is provided by the z.jar library in Z2_HOME/bin. Invoke
509
510
511
<pre><code class="bash">java -jar z.jar  -?</code></pre>
512
513
514
p. to see all options.
515
516
517
p. One particular way of using z2 that we want to look at in detail in this section is the embedded mode. Running it embedded simply means to initialize the resource management system and component system from within another JVM process.
518
519
520
p. This execution mode can be handy for various purposes:
521
522
* You can use it to run “Main” programs (see XYZ) that are defined in some component repository from the command line w/o worrying about local build environments (and dependency resolution)
523
* Sometimes you have no control over the execution mode because your code has been started by some other infrastructure. This is for example true for Hadoop Map-Reduce jobs. In that case the Hadoop Map-Reduce implementation starts tasks from a simple JAR file on some machine. Using the embedded mode we can execute Map-Reduce jobs defined in component repositories, without complicated job assembly into a hadoop job jar.
524
525
p. To facilitate the embedded mode, the Z2 launcher z.jar must be invoked accordingly.
526
527
528
p. Pre-requisite to using Z2 in an embedded way is to have a Z2 home installation in file system reach. That home installation will be used to cache component repository content and binaries – i.e. it is essential to actually implement Z2.
529
530
531
p. When you open a console and run
532
533
534
p. java -cp z.jar com.zfabrik.launch.MainRunner
535
536
537
p. you will get
538
539
540
<pre><code class="bash">z2 MainRunner: Main program execution of z2 components. 
541
542
SYNOPSIS 
543
544
java -DcomponentName=<component name> -cp z.jar MainRunner <args> 
545
546
OPTIONS 
547
548
   <component name> 
549
       A component name in Z2 identifying a main program component 
550
        
551
   <args> 
552
       Parameters passed to the main program 
553
554
NOTES 
555
556
Make sure to either set a Z2_HOME environment variable pointing to the  
557
relevant z2 home installation or specify the system property com.zfabrik.home 
558
when calling the MainRunner: 
559
560
java -DcomponentName=<component name> -Dcom.zfabrik.home=<home folder> -cp z.jar com.zfabrik.launch.MainRunner <args>
561
</code></pre>
562
563
564
p. explaining the most direct way of using the embedded mode.
565
566
567
p. There are several Main programs that come with the z2-base system. For example a tool to retrieve binaries from Z2: *com.zfabrik.dev.util/jarRetriever*
568
569
570
p. Running: 
571
572
573
p. java -DcomponentName=com.zfabrik.dev.util/jarRetriever -cp z.jar
574
com.zfabrik.launch.MainRunner -out test com.zfabrik.dev.util
575
576
577
p. Retrieves the binaries of the Java component *com.zfabrik.dev.util/java* into the folder *test*. See also "com.zfabrik.dev.util":http://www.z2-environment.net/javadoc/com.zfabrik.dev.util!2Fjava/impl/index.html . Note that the environment variable Z2_HOME was assumed to be set. Otherwise use the system property *com.zfabrik.home* to specify the home path.
578
579
580
p. *Compatibility note:* The z_embedded.jar used for embedded execution in previous z2 versions is still present and identical to z.jar except for its main-class com.zfabrik.launch.MainRunner.
581
582
583
p. Another way of embedded execution is programmatically via the "ProcessRunner":http://www.z2-environment.net/javadoc/com.zfabrik.core.api!2Fjava/api/com/zfabrik/launch/ProcessRunner.html  class.
584
585
586
h3. Components and Component Repositories
587
588
589
p. Everything you ever touch that the z2 Environment is supposed to understand is organized in _Components. _Z2 is built around the concept of named components that are defined in a well-defined repository structure. The level of understanding of resources that are used to implement some functionality in z2 is essential so that z2 understands when resources have been modified and corresponding runtime objects have become invalid and so that z2 is extensible by new semantics, that is new types of components.
590
591
592
p. More specifically the term Component translates in z2 to runtime objects that implement semantics according to a _Component Type_, have a well-defined, location-derived name, and are declared by a set of properties and optionally any kind of file type resources – e.g. holding the files of a Web Application.
593
594
595
p. Component properties are accessible within z2 via the IComponentsManager interface providing IComponentDescriptor instances.
596
597
598
p. Component properties are typically declared via *.properties file resources in stores backing component repositories such as Git, Subversion, or a file system.
599
600
601
p. Component properties can be declared in a static, non-computed way but also with some dynamic handling as descibed in [[#Dynamic Component Properties|Dynamic Component Properties]] .
602
603
604
p. Even more specifically, most existing Component Repositories implement the following folder structures that define components as shown in the right column: 
605
606
| …<module>/<local>.properties...| Defines component <module>/<local> of type of value of the property com.zfabrik.component.type as set in the property file <local>.properties. |
607
| ...<module>/<sub>/ 	z.properties	<file/folder>	<file/folder>	…...| Defines component <module>/<sub> of type of value of the property com.zfabrik.component.type as set in the property file z.properties.The component has furthermore all resources defined in all files and folders under <sub>.These can be accessed using IComponentsManager.INSTANCE.retrieve(<folder>/<sub>) |
608
609
610
611
p. The module taxonomy has no little technical meaning to Z2. There is no internal Object representing a module. Via conventions however the module (as being the path without its last segment) has a rather prominent function:
612
613
* Typically the module matches the development project granularity
614
* The resolution of Java resources for a component defaults to <module>/java (see [[#Java components (core)|Java components]] ).
615
* If two component repositories define components of an equally named module, no component of that module of the repository with the lower priority will be visible.
616
617
p. Component repositories define the reality for the z2 environment. So it is important to understand this concept to understand z2.
618
619
620
p. Component repositories are, of course, declared as components itself. Consequently, component repositories may hold further definitions of component repositories – potentially leading to some reality distortion (aka Bootstrapping) issues – in the rare case you do advanced repository wiring.
621
622
623
p. When the z2 Environment starts up it has a hard coded knowledge of the _Local Repository_ that is stored in *Z2_HOME/local* (see also above). It is the root of the Z2 component universe from a Z2 Home perspective. 
624
625
626
p. The Local Repository also defines the Base Repository, that we briefly touched on in [[#The Base Repository|The Base Repository]]  and will meet again in [[#Constructing a Z2 system|Constructing a Z2 system]] .
627
628
629
p. The following diagram is an overview over the few entities that really are the heart of Z2 core – from component repository to resource via synchronization:
630
631
!{height:6.189cm;width:17cm;}100002010000060D00000234C0ED4E95AC562BA6.png!
632
633
634
p. The notable exception to the repository structure above is Maven component repositories and – to some extent – the Hub Component Repository. The former derives Java components from Maven repository artifacts. That is, while the underlying structure is completely different, the repository implementation presents it in a Z2 compliant way (see [[#Maven Repository Support|Maven component repositories]] ).
635
636
637
p. The Hub Component Repository turns a Z2 system into a repository for another Z2 system with the purpose of reducing bandwidth requirements for the original repositories or to not send source code over the wire (see [[#The Binary Hub Component Repository|the Hub Component Repository]] ). 
638
639
640
h4. Synchronization with updates
641
642
643
p. At times, frequently when you are developing and less frequently in production, you want your runtimes to get up to date with respect to repository contents. That process is called _Synchronization. _The ability to synchronize with repositories is a particular capability of the z2-Environment and responsible for much of its goodness.
644
645
646
p. The synchronization process happens in three phases: At first, in the pre-invalidation phase, all component repositories (actually all “synchronizers”, but component repositories are generally connected to synchronizers. See also "ISynchronizer":http://www.z2-environment.net/javadoc/com.zfabrik.core.api!2Fjava/api/com/zfabrik/util/sync/ISynchronizer.html ) are asked to check whether there are updates available and what components (by name) will be affected. In the simplest case, the file system stored component repository, the check will examine folders to find out whether files have changed since the last time it was asked to check. 
647
648
649
p. When that phase has completed, all components that have been identified to be subject of updates will be invalidated. Invalidation is a concept of the Resource Management systerm underlying z2. Loosely speaking it means that a component is asked to let go of all state but its name. Anything that is dependent on repository content or other components it depended on is to be dropped.
650
651
652
p. In the completion phase of the synchronization, synchronizers are asked to make sure that at the end of the completion phase the runtime has attained operational modes again. That is maybe the most interesting phase, as actions to that end may greatly vary.
653
654
655
p. For example, the home synchronizer (*com.zfabrik.boot.main/homeSynchronizer*) will simply try to attain the home_up state again.
656
657
658
p. The worker synchronizer (*com.zfabrik.workers/workerSynchronizer*) will send all invalidations to the worker processes and then ask them to attain their target states again.
659
660
661
p. Note that synchronizers have a priority and are called in a defined order. So that the worker synchronizer is called before the home synchronizer. As worker processes may have been invalidated in the second phase, it would be unreasonable to first bring them up again (home synchronizer) just to tell them about invalidations once more.
662
663
664
h4. File system support
665
666
667
p. The simplest of all built-in component repositories is the file system component repository. All that is required is a file system folder holding component declarations and component resources in a structure as described above. As laid out below, always make sure the repository is started early on by declaring a participation in the system state *com.zfabrik.boot.main/sysrepo_up*.
668
669
670
p. See [[#File system component repositories (core)|File system component repositories]]  for more details on the configuration of file system component repositories.
671
672
673
_Subversion support_
674
675
676
p. The popular source control management system Subversion (see "www.tigris.org":http://www.tigris.org/ ) was the first repository supported by z2 and still shines in many aspects. 
677
678
679
p. In order to add a subversion component repository, declare a component of type *com.zfabrik.svncr** *as described in [[#Subversion component repositories (core)|Subversion component repositories]] .
680
681
682
p. To avoid problematic licenses, the z2 Environment does unfurtunately not come with the complete built-in Subversion connectivity. Additional configuration steps are required once to complete subservion enabling on your side, as described in the "Subversion How-To":https://redmine.z2-environment.net/projects/z2-environment/wiki/How_to_Subversion .
683
684
685
p. As noted above, it is important to make sure your repository participates in the system state *com.zfabrik.boot.main/sysrepo_up*, i.e. you should add the line
686
687
688
<pre><code class="bash">com.zfabrik.systemStates.participation=com.zfabrik.boot.main/sysrepo_up</code></pre>
689
690
691
p. to the repository declaration. The URL of the repository should point to a repository folder structure  as outlined in [[#Components and Component Repositories|Components and Component Repositories]] . For example, the Base Repository of the z2@base distribution has the URL: 
692
693
694
<pre><code class="bash">http://z2-environment.net/svn/z2-environment/trunk/z2-base.base</code></pre>
695
696
697
h4. Git support
698
699
700
p. The GIT version control system (VCS) is an implementation of a distributed version control system (DVCS). As opposed to centralized VCS, such as Subversion below, in a DVCS users hold a copy (called a _clone_) of the repository content on their local environment, typically the local disk, and can execute all typical modification operations, such as adding files, committing changes, to the Local Repository before sending updates back to a remote repository or retrieving updates from a remote repository.
701
702
703
p. Currently all framework development for Z2 happens in Git. All results are however available from Subversion repositories as well.
704
705
706
p. From a Z2 perspective a DVCS has the advantage of giving a  slightly easier way of getting your own local repository that is fully under your control. Also moving changes between systems has a built-in solution this way. On the downside, you pay by distributing complete copies of your system's repository which may turn into a problem once repositories get significantly bigger than what is actually needed for the given scenario. That's why there is an implied tendency for more and smaller repositories when using Git und fewer but larger repositories when using Subversion.
707
708
709
p. In order to add a Git component repository, declare a component of type *com.zfabrik.gitcr *as described in [[#GIT component repositories (core)|GIT component repositories ]] .
710
711
712
p. As noted before, it is important to make sure your repository participates in the system state *com.zfabrik.boot.main/sysrepo_up*, i.e. you should add the line
713
714
715
<pre><code class="bash">com.zfabrik.systemStates.participation=com.zfabrik.boot.main/sysrepo_up</code></pre>
716
717
718
p. to the repository declaration. 
719
720
721
h4. Maven Repository Support
722
723
724
p. Maven repositories such as "Maven Central":http://search.maven.org/  are a huge source of open-source libraries made available directly by the copyright holder. Maven repositories can be integrated into a Z2 system as component repositories. In fact, most of the samples accessible from the Z2 Wiki as well as prominent add-ons such as the Hibernate and Spring add-on make use of this approach.
725
726
727
p. The main idea is that based on some root artifacts and some maven remote repository configuration, jar artifacts and dependencies will be made available as Java component in Z2 that can be referenced or included as suits best.
728
729
730
p. Artefacts in Maven repos have a fully qualified name of the form
731
732
733
<pre><code class="bash"><groupId>:<artifactId>:<version></code></pre>
734
735
736
p. or
737
738
739
<pre><code class="bash"><groupId>:<artifactId>:<packaging>:<version></code></pre>
740
741
742
p. By default, a jar artifact *<groupId>:<artifactId>:<version>* will result into a Java component of name
743
744
745
<pre><code class="bash"><groupId>:<artifactId>/java</code></pre>
746
747
748
p. As usual with Maven, if resolution root artifacts and dependencies lead to artifacts of the same packaging, group id, and artifact id but with different versions, a conflict resolution takes place (the higher version number will be used). 
749
750
751
p. By default, all non-optional compile scope dependencies will be resolved. The resulting Java component will have the target artifact as API library and all non-optional compile scope dependencies as public references in their mapped form.
752
753
754
p. The z2 core will use lazy component class loaders to make sure that use of include libraries has virtually no runtime penalty.
755
756
757
p. An example configuration of a component repository from a Maven artifact repository may look like this:
758
759
760
<pre><code class="bash">com.zfabrik.systemStates.participation=com.zfabrik.boot.main/sysrepo_up
761
com.zfabrik.component.type=com.zfabrik.mvncr
762
763
mvncr.repository=mavenDefault
764
mvncr.priority=200
765
mvncr.roots=\
766
  org.springframework:spring-context:4.0.2.RELEASE,\
767
  org.springframework:spring-aspects:4.0.2.RELEASE,\
768
  org.springframework:spring-tx:4.0.2.RELEASE,\
769
  org.springframework:spring-orm:4.0.2.RELEASE,\
770
  org.springframework:spring-web:4.0.2.RELEASE,\
771
  org.springframework.security:spring-security-core:3.2.2.RELEASE,\
772
  org.springframework.security:spring-security-web:3.2.2.RELEASE,\
773
  org.springframework.security:spring-security-config:3.2.2.RELEASE,\
774
  org.springframework.security:spring-security-aspects:3.2.2.RELEASE,\
775
  org.hibernate:hibernate-entitymanager:4.3.4.Final,\
776
  aopalliance:aopalliance:1.0,\
777
  org.aspectj:aspectjweaver:1.7.4,\
778
  org.aspectj:aspectjtools:1.6.9,\
779
780
mvncr.excluded=\
781
  org.jboss.spec.javax.transaction:jboss-transaction-api_1.2_spec
782
783
mvncr.managed=\
784
  commons-logging:commons-logging:1.1.2</code></pre>
785
786
787
p. This configuration would imply that the listed roots and all non-optional compile time references would be added as Java components with mapped references as described above. As an exception however, the artifact *org.jboss.spec.javax.transaction:jboss-transaction-api_1.2_spec* would be excluded. Furthermore, the artifact *commons-logging:commons-logging* would exclusively be used in version 1.1.2. Note: Those modifications of the dependency graph resolution correspond to similar Maven configurations (notably as in <exclusions> and <dependencyManagement>).
788
789
790
p. See [[#Maven component repositories (z2-base)|Maven component repositories]]  in the component reference for more details on configuration properties of Maven component repositories.
791
792
793
p. At times, it is useful to not have all required dependency roots in one component declaration but rather allow some modularization-friendly spread out declaration of dependency roots within a system.
794
795
796
p. This is achieved by using Fragments of a  Maven component repository.
797
798
799
p. A fragments adds to the dependency graph but does not define where dependencies are retrieved from, so that the requirement for artifacts can be expressed without wiring the actual system to a specific environment. This is how the standard add-ons express their requirements.
800
801
802
p. Note that having two sets of roots combined and resolved is not equivalent to having to independent Maven Component Repository declaration as version conflict resolution (to the higher version) will always happen within the scope of one Maven component repository. In fact, in most cases having one Maven Component Repository will be the only manageable approach.
803
804
805
p. In order to add a fragment to a Maven Component Repository declare a component of type *com.zfabrik.mvncr.fragment*.
806
807
808
p. See [[#Maven component repository fragments (z2-base)|Maven component repository fragments]]  in the component reference for more details on configuration properties for fragments.
809
810
811
p. When running in Development mode, the repository will also provide the source (classifier) artifact if available, so that the Eclipsoid plugins will provide source code attachments to the development environment whenever possible during classpath resolution.
812
813
814
p. Z2's implementation is based on "Eclipse-Aether":https://eclipse.org/aether/ .
815
816
817
p. As this subject is not completely trivial it is strongly recommended to check out the samples and explanations on the Wiki. Start with the "Maven Component Repository How-to":https://redmine.z2-environment.net/projects/z2-environment/wiki/How_to_Access_a_Maven_Repository .
818
819
820
p. As noted before, it is important to make sure your repository participates in the system state *com.zfabrik.boot.main/sysrepo_up*, i.e. you should add the line
821
822
823
p. com.zfabrik.systemStates.participation=com.zfabrik.boot.main/sysrepo_up
824
825
826
p. to the repository declaration. 
827
828
829
h4. Component Types and Component Factories
830
831
832
p. Every component in Z2 has a type, declared via the component property com.zfabrik.component.type. As indicated above the component type identifies the semantics of a component, i.e. how to treat it and what you can do with it. For example a web application is of type *com.zfabrik.ee.webapp*. Being of that type implies an expected folder structure for the resources that belong to the web application. Also it implies the ability to be made available via a web server. The semantics of a Java component (of type *com.zfabrik.java*) is obviously completely different.
833
834
835
p. _Component Factories_ are in charge of implementing the semantics of a component type. In short a whenever a component is requested via the resource management system, the component factory responsible for the respective component type is asked to create an implementation, more specifically a Resource (see [[#The Resource Management System|The Resource Management System]] ) that implements the actual component. 
836
837
838
p. So, for example, the component factory for web applications knows how to interpret the folder structure of a web application component as the layout of a Java EE web application and how to register this web application with the Jetty web container. The component factory for Java components knows how to check whether code needs to be compiled and how and how to set up class loaders.
839
840
841
h4. Dynamic Component Properties
842
843
844
p. Component properties can be specified to be dynamically evaluated at runtime. I.e. instead of assigning a static string value, input is specified that is processed by custom code before assigned as value to the property.
845
846
847
p. The most obvious use-case for this feature is to support property values that are derived from system properties, process environment variables, or properties of some other component. Built-in support for these use-cases is provided by the JEXL3 processor based on the Apache JEXL library ("http://commons.apache.org/proper/commons-jexl/":http://commons.apache.org/proper/commons-jexl/ ) version 3. See also [[#Using Dynamic Property Expressions with JEXL3|#jexl3support]]  for details.
848
849
850
p. In order to have property values evaluated in a non-static way, the property is extended by a processor type identifier:
851
852
853
<pre><code class="bash"><property name>:<processor type>=<expression></code></pre>
854
855
856
p. with a default processor type “plain”.
857
858
859
p. For example, a propery file, 
860
861
862
<pre><code class="bash">svncr.uri\:plain=http://myserver/svn/myrepo</code></pre>
863
864
865
p. is equivalent to 
866
867
868
<pre><code class="bash">svncr.uri=http://myserver/svn/myrepo</code></pre>
869
870
871
p. (note that the colon “:” character needs to be escaped with a leading backslash “\” in property file syntax so that it is not taken for a separator of name and value).
872
873
874
p. However, 
875
876
877
<pre><code class="bash">svncr.uri\:JEXL3=env.SVN_REPO+”/myrepo”</code></pre>
878
879
880
p. will evaluate the environment variable *SVN_REPO* and append a string “/myrepo” (see also [[#Using Dynamic Property Expressions with JEXL3|#jexl3support]] ).
881
882
883
884
p. Due to a number of reasons, the use of dynamic property evaluation is subject to various constraints:
885
886
* As a principle, when using the IComponentDescriptor API, getProperties() returns processed properties while the method getRawProperties() returns the unprocessed component properties in its original verbatim form.
887
* Processing of properties happens after retrieving properties from the original or intermediate storage, and in particular evaluation results will not be kept between component loading. That is, at latest after a restart and also after an invalidation due to a synchronization, component expressions will be evaluated again. However, after loading and as long as held onto during runtime nor repeated evaluation will be performed.
888
* The IComponentsManager findComponents(...) API is using raw component properties to find components based on search conditions. That is, a dynamic expression cannot be used to alter search results for extension points or component type implementations.
889
* When making use of dynamic properties early in the z2 loading life cycle, in particular in conjunction with component repository definitions and custom component descriptor processor implementations, particular care needs to be paid  to the availability of the processor at time of evaluation of component repository declaration.
890
891
h4. Using Dynamic Property Expressions with JEXL3
892
893
894
p. A component descriptor processor with processing type “JEXL3” comes built-in with z2 starting version 2.5. This processor is based on the Apache Commons JEXL library version 3.0 (see "https://commons.apache.org/proper/commons-jexl":https://commons.apache.org/proper/commons-jexl ). All values of properties tagged as of JEXL3 processing style in the original component descriptor source will be considered JEXL expressions.
895
896
897
p.  If evaluating to a non-null value, the expression evaluation result will be set as resulting property value of the same property name. If the expression evaluates to *null*, the corresponding property will not be set in the overall evaluation result.
898
899
900
p. The following implicit variables are made available by this processor:
901
902
903
| Variable name| Definition| Example |
904
| system| System.getProperties()| `user dir is ${system["user.dir"]}` |
905
| env| System.getenv()| "JAVA_HOME is ${env.JAVA_HOME}" |
906
| this| The actual property set in its evaluated form. This may be used to resolve properties that are again computed by some processor. Note that a max evaluation depth of 50 is enforced when resolving properties defined in the property set| this[“com.zfabrik.component.type”] |
907
| components| IComponentsManager.INSTANCE| components.getComponent("mymodule/mycomponent").getProperty("myProp") |
908
909
910
911
p. Using the *this* variable, re-use of definitions within a single descriptor is possible. For example, assuming even the involvement of some other processor _ext_, a property set
912
913
914
<pre><code class="bash">hostName\:JEXl3=env.hostName
915
database\:ext=_THE_DB_
916
ds.prop.url\:JEXl3=`jdbc:derby://${this.hostName}/${this.database}`</code></pre>
917
918
919
p. would be evaluated resolving across processors and with correct substitution in the JEXL expression.
920
921
922
p. Note that a JEXL expression does not necessarily evaluate to a string object. Neither is the input property value to be processed considered a JEXL string. For example, the expression
923
924
925
<pre><code class="bash"> `Hallo this is ${system["user.name"]}`</code></pre>
926
927
928
p. does indeed evaluate to a string. As does
929
930
931
<pre><code class="bash"> "Hallo this is ${system[\"user.name\"]}"</code></pre>
932
933
934
p. (without processing the ${} expression) and more advanced
935
936
937
<pre><code class="bash">system["os.name"].startsWith("Linux")? "We are running on a Linux OS" : "We are running on something else"</code></pre>
938
939
940
p. but not
941
942
943
<pre><code class="bash">500+10</code></pre>
944
945
946
p.  which is indeed an integer.
947
948
949
p. See also "https://commons.apache.org/proper/commons-jexl/reference/syntax.html":https://commons.apache.org/proper/commons-jexl/reference/syntax.html  for more syntax information.
950
951
952
h4. Java Naming and Directory Interface (JNDI) support
953
954
955
p. Components in the z2-Environment may be looked up via JNDI. The functionality is essentially equivalent to lookups via the *IComponentsLookup* interface.
956
957
958
p. When looking up a component, it is typically required to specify the expected return type. When using JNDI URLs this can be accomplished via a *type* query parameter. For example, when looking up a JDBC data source (see [[#Data Source components (z2-base)|Data Source Components]] ) that is declared in a component repository as the component *mymodule/dataSource*, the call
959
960
961
<pre><code class="java">IComponentsLookup.INSTANCE.lookup("mymodule/dataSource",javax.sql.DataSource.class); </code></pre>
962
963
964
p. is equivalent to 
965
966
967
<pre><code class="bash">new InitialContext().lookup("components:mymodule/dataSource?type=javax.sql.DataSource");</code></pre>
968
969
970
p. and both calls return a (shared) data source instance.
971
972
973
h4. Link Components and Component Linking
974
975
976
p. At times it can be useful to make an existing component definition available under another module and component name. This can be achieved using link components.
977
978
979
p. An important example is the construction environments from base environments as implemented by the sample applications. By convention the environment module contains actual runtime configuration for the web server, database datasources, user realms and in particular system states and worker process configurations. If we want to use different subsets of these configurations, e.g. because we define different systems based on the same basic distribution, we could copy and adapt the environment. That may however require to keep copies of complex configuration sets that would need to be updated once the underlying, shared, implementation changes. To mitigate that components may be linked similarly to symbolic links in Linux file systems.
980
981
982
p. In the case of the sample systems, components from the z2-base.base *environment_base* module are combined into a custom *environment* module by linking those required and overwriting those modified. This saves duplication of the web server and worker configurations for example, while we keep the home layout configuration.
983
984
985
p. In order to declare a link component, define a component of type *com.zfabrik.link* and supply a target component using the *link.targetComponent* property. For example, re-using a web server configuration from the environment_base module would look like this:
986
987
988
<pre><code class="bash">#
989
# link to environment.base for defaulting
990
#
991
com.zfabrik.component.type=com.zfabrik.link
992
link.targetComponent=environment.base/webServer</code></pre>
993
994
995
996
p. Link components are built-in with z2’s component handling and operations are delegated to declared target components:
997
998
* Lookup as implementation of an interface or class via e.g. IResourceHandle.as(…) or IComponentsLookup.lookup(…) in general (see the exception below).
999
* Component resource access via e.g. IComponentsManager.retrieve(…).
1000
1001
p. Some operations are not delegated however:
1002
1003
* Lookup as IResourceHandle or IResourceObserver
1004
* Component Descriptor retrieval via IComponentsManager.get()
1005
* Search of components via IComponentsManager.findComponents(…).
1006
1007
1008
p. This leads to subtle but meaningful and important differences in behavior when working with linked components vs. working with ordinary components. For example, in the case of a linked component, a lookup for *IComponentDescriptor* would result in the descriptor of the target component, while a call to I*ComponentsManager.get() *for the same component would return the descriptor of the link component.
1009
1010
1011
p. A target component may itself be a link component. Where link resolution is implemented, it is done indefinitely until reaching an ordinary component. 
1012
1013
1014
h3. Unit of Work and transaction management
1015
1016
1017
p. The z2-Environment does not mandate any specific way of implementing transaction management. 
1018
1019
1020
p. It does however have a concept of a _unit of work_ that is used by parts of its implementation and that is the underpinning of the simple, but rather useful, built-in Java Transaction API (JTA) implementation.
1021
1022
1023
p. A unit of work is a well-defined part of the control flow on one thread of execution that resources such as database connections can bind to and learn about whether all work should be committed or rolled back at the end of it. The "WorkUnit API":http://www.z2-environment.net/javadoc/com.zfabrik.core.api!2Fjava/api/com/zfabrik/work/WorkUnit.html  that is part of the Z2 core APIs implements this abstraction. 
1024
1025
1026
p. All threads managed by the z2-Environment wrap their work using this API and when extending the  z2-Environment with custom threading implementations, it is suggested that you wrap the actual work using the WorkUnit API, so that at least the z2 infrastructure can integrate cleanly and optimize resource usage.
1027
1028
1029
p. The JTA implementation provided in the module *com.zfabrik.jta* provides a standard UserTransaction implementation that integrates with the WorkUnit API and thereby provides a robust transaction management abstraction that greatly simplifies integration with persistence tools like Hibernate JPA.
1030
1031
1032
p. It can be looked up using the global JNDI name 
1033
1034
1035
<pre><code class="bash">components:com.zfabrik.jta/userTransaction</code></pre>
1036
1037
1038
p. Note that *com.zfabrik.jta* is not a full-blown transaction manager that supports distributed transactions and corresponding protocols. It is fine for typical non-distributed transaction situations however.
1039
1040
1041
p. In conjunction with the z2 provided database connection pooling (see [[#ZFabrikPoolingDataSource|ZFabrikPoolingDataSource]] ) it is important to note that, if you choose work unit enlisting, then the WorkUnit abstraction defines transaction boundaries, so that automatically all database connections are enlisted with the current unit of work and committed or rolled back under control of the WorkUnit implementation.
1042
1043
1044
p. In terms of the JTA implementation, this behaves as if there is already a transaction open on the thread. 
1045
1046
1047
p. The WorkUnit API supports nesting and suspending of units of work. With the JTA implementation this corresponds to nested and isolated transactions.
1048
1049
1050
p. Please visit the Wiki page on transaction handling in Z2 to learn more about alternatives and how to integrate with a full-fletched transaction manager.
1051
1052
1053
h2. Constructing a Z2 system
1054
1055
1056
p. This section describes how Z2 systems are assembled from repositories and how to construct your own system from what is provided on z2-Environment.net and your own repositories.
1057
1058
1059
p. From a Z2 Core perspective it all starts with the Local Repository that is part of the core. In there, we define at least the Base Repository. The Base Repository typically points to some remote Git or Subversion based repository. Once Z2 has registered that repository, other repository may have appeared that will be registered as well which may lead to the appearance of yet more repositories and so on. Hence, in effect, we have a chain or tree of repositories with the Local Repository on its root as far as repositories contain declarations of repositories. 
1060
1061
1062
p. On the other hand, repositories have a priority (more on that below) that determine what repository has the right to say what a module contains. 
1063
1064
1065
p. Based on that mechanism you can construct a system definitions that consist of as few as one repository (if we do not count the core) or many repositories of which some are even shared between systems.
1066
1067
1068
p. Before moving forward on that, let's have a look at the add-ons. 
1069
1070
1071
h3. Add-ons
1072
1073
1074
p. Add-ons add more functionality to Z2. Generally speaking, an add-on is a regular Git or Subversion  repository that holds one or more modules and is incorporated into a z2-Environment defined system via a component repository declaration (see [[#Components and Component Repositories|Components and Component Repositories]] ).
1075
1076
1077
p. In other words, technically there is nothing particular about add-ons. It is the way they are used that is noteworthy. The idea is that you can pick the add-ons you need and add them on top of z2-base. Previously Z2 was available in distributions. Now you take z2-base and add what you need on top. 
1078
1079
1080
p. Add-ons provided on z2-environment.net are versioned just like z2-base, so that there is no complicated version vector.  Also add-ons have some documentation in the z2-Environment Wiki and come with some samples.
1081
1082
1083
h2. Developing with the z2-Environment
1084
1085
1086
p. So far we have learned about the principles behind the z2-Environment and how to configure and run it. This section is devoted to the development using Z2.
1087
1088
1089
p. In principle you would not need any tool support. You could simply check out files from your favorite repository, use some text editor or your favorite integrated development environment to add projects and files or to modify files as you wish, commit your changes and synchronize the runtime that would do whatever else is needed.
1090
1091
1092
p. While that is good news already, there are some simple tools that make your life still easier and give you a development experience you have probably not experienced before in Java environments.
1093
1094
1095
p. The whole approach to local development using the z2-Environment is currently based on two tools:
1096
1097
* The Development Repository – a component repository implementation that allows you to selectively and quickly test modifications
1098
* The Eclipsoid Eclipse plug-in. A plug-in to the popular Eclipse development environment that resolves project dependencies from a running z2-Environment.
1099
1100
h3. A note on what JDK to use
1101
1102
1103
p. Different Z2 versions support or require different Java versions. 
1104
1105
1106
| Z2 Version| Supported Java Versions| Highest Supported Language Level |
1107
| < 2.4| 1.6, 1.7| 1.6 |
1108
| 2.4, 2.5| 1.8| 1.8 |
1109
| 2.6| 9-10| 9 |
1110
| 2.7| 9-11| 11 |
1111
| 2.8| 9-13| 13 |
1112
| 2.9| 11-16| 15 |
1113
1114
1115
1116
p. As Z2 compiles Java code, it has to make a decision on what language level to compile for. Typically however you do not need to worry about this, as by default, Z2 simply sticks to the version of the Java Development Kit (or Java Runtime Environment) it is currently executed with.
1117
1118
1119
p. In general z2 will use the language level of the current runtime environment as long as that is within range of the lowest supported Java version and the highest supported language level.
1120
1121
1122
p. When using a higher, future Java version, version 2.5 will fall back to assuming Java 8 language. Version 2.6 and later will assume the language level of whatever is the highest supported version possible
1123
1124
1125
p. You can however enforce a language level to compile with using the system property *com.zfabrik.java.level*. Valid values are “1.6”,”1.7”, “1.8”, “9”, “10”, “11”,”12”,”13”, and so on for the respective Java version.
1126
1127
1128
h3. Workspace development using the Dev Repository 
1129
1130
1131
p. The Development Repository (or short Dev Repo), works by checking a file system folder for project sub folders that contain a file called *LOCAL* and scans for components inside. 
1132
1133
1134
p. It expects to find a component repository structure as detailed in  [[#Components and Component Repositories|Components and Component Repositories]] . 
1135
1136
1137
p. The Dev Repo has a high priority within the chain of component repositories. That means that whatever it finds, it will typically win against definitions provided from other component repositories.
1138
1139
1140
p. By default, the Dev Repo is configured to look for changes in sub folders (three levels deep by default - but see below) of the folder that contains the core installation. That is the reason behind the folder structure described in the next section:
1141
1142
1143
p. When using subversion and checking out the Z2 core into your Eclipse workspace the Dev Repo will find your projects. When using Git and importing projects from a working tree of a repository that is next to the Z2 core, the Dev Repo will find your projects as well.
1144
1145
1146
p. This is how it all ties together: Given the Dev Repo is able to find your project (that means a module to z2 if accepted), you simply put file called *LOCAL* into the project's root folder and the project and all its components will be picked up with preference by the Dev Repo next time you trigger a synchronization.
1147
1148
1149
p. That sounded a little complex, but as you will see next, together with the Eclipsoid tool it all rounds up nicely.
1150
1151
1152
p. Before going there it is noteworthy that the Development Component Repository has use cases beyond development. Sometimes it handy to override centrally defined components, for example to modify web server ports or data source configurations, via the Dev Repo. 
1153
1154
1155
p. By modifying the system property *com.zfabrik.dev.local.workspace* you can influence where the Dev Repo scans for armed modules.
1156
1157
1158
p. Using the system property *com.zfabrik.dev.local.depth* you can influence how _deep_ the Dev Repo scans for LOCAL files. Depth is measured in path distance from the roots set via the system property  *com.zfabrik.dev.local.workspace*. This setting defaults to a value of 3, which means that 
1159
1160
1161
p. folder1/folder2/folder3/LOCAL
1162
1163
1164
p. would be found, which would then make up for module *folder3*.
1165
1166
1167
*Recommended folder structure *
1168
1169
1170
p. Using Git or Subversion makes no difference in the non-development folder layout of a Z2 installation. In development however there is a small but noticeable difference.
1171
1172
1173
p. In a Subversion setup, the folder that holds the Z2 core check out is also used as development workspace. That is, you will have a workspace folder, say *workspace* and in that workspace the Z2 core checkout as well as other projects, typically corresponding to Z2 modules as far as Z2 is concerned. E.g.:
1174
1175
1176
<pre><code class="bash">workspace/z2-base.core
1177
workspace/com.acme.some.project
1178
...</code></pre>
1179
1180
1181
p. In a Git setup, the development workspace folder is a folder next to the clone of the Z2 core repository. Assuming you installed into *install* and the workspace folder is called *workspace* your structure would look like this:
1182
1183
1184
p. install/z2-base.core
1185
install/some.other.repo.clone
1186
install/workspace
1187
...
1188
1189
1190
p. Note: In both cases, the search path for “armed” project is the same for the Development Repository  (see above).
1191
1192
1193
h3. The Eclipsoid Plug-in
1194
1195
1196
p. The Eclipsoid plug-in for the Eclipse development environment comes with the z2-base system and can be installed from the local update site at 
1197
1198
1199
*http://localhost:8080/eclipsoid/update/site.xml*
1200
1201
1202
p. Alternatively, you can install it from the z2 environment server at
1203
1204
1205
*http://www.z2-environment.net/eclipsoid/update/site.xml*
1206
1207
1208
p. This plug-in provides a number of useful utilities for working with Z2. The most important functions are:
1209
1210
# Trigger synchronization of the running z2-Environment from the IDE (Sync)
1211
# Download of dependencies as .jar files from a running z2-Environment (Resolve)
1212
1213
1214
p. The Eclipsoid fixes an important problem in development of larger software systems in IDEs like Eclipse:  Larger software systems consist of many different projects that have compilation dependencies between each other. That is, Java code in one project may not compile without having access to Java types defined in another project. 
1215
1216
1217
p. IDE's like Eclipse support local compilation of the code you are working on and show compilation problems early on. To do so however, the project's dependencies need to be resolvable. That is exactly what the Eclipsoid does: Upon _Resolve_, any Eclipse Java project that is recognized as a Z2 project will be introspected for Java components (see [[#Java components (core)|Java Components]] ), and if found, their references will be resolved from the server-side and required Java definitions will be downloaded and provided to the project.
1218
1219
1220
p. Technically, a Z2 project is any Java project that has the Z2 Class path Container (called "ZFabrik.Eclipsoid") in its class path (i.e.  the “.classpath” file). You do not need to fix that by yourself though. Either by creating a project as Z2 project or by “Transform into Z2-project” you can let the plug-in do that for you.
1221
1222
1223
p. That means: In order to work on a single project, from a possibly large solution, you check out that single project, invoke _Resolve_, and, from there on, modify and _Sync_ repeatedly to test your modifications. When you are done you commit your changes and disarm projects again to make sure the integrated content is effective.
1224
1225
1226
p. The last step is actually somewhat depending on your setup. If your Z2 is hooked up with remote Git repositories, you may need to push changes to remote before.
1227
1228
1229
!{height:10.795cm;width:15.201cm;}10000201000004AD00000352DFAA25D9150C0C7B.png!
1230
1231
p. _Sync_ and _Resolve_ can be invoked by pressing Alt+Y or Alt+R respectively or by clicking on the Z2 toolbar buttons. 
1232
1233
1234
p. Finally, the Eclipsoid can _arm_ and _disarm_ projects: Arming a project means to put an empty *LOCAL* file into it, and disarming means to remove that file again. 
1235
1236
1237
p. See the previous section for more details on the Dev Repo. Armed projects are shown with a green halo around the Z decoration in the project view.
1238
1239
1240
h3. Using the Offline Mode
1241
1242
1243
p. One principle feature of Z2 is to provide for early integration across a team of developers using a central repository containing the latest changes – except for those modules you are currently working on by virtue of the development repository.
1244
1245
1246
p. At times this can get in the way of productivity though. In particular when you find yourself in a situation of unreliable network connectivity.
1247
1248
1249
p. For those cases you can turn Z2 into an offline mode during which component repository implementations will not attempt to fetch updates from non-local sources.
1250
1251
1252
h4. How the offline mode is used. 
1253
1254
1255
p. The offline mode is enabled or disabled by setting the system property *com.zfabrik.offline* to *"true"* or *"false"* respectively. The default value of this property is "false". 
1256
1257
1258
p. This works regardlessly of how this system property is set in the home process. Worker processes receive an updated value upon synchronization. 
1259
1260
1261
h4. Enabling Offline mode at start time 
1262
1263
1264
p. Using the file *<Z2 home>/bin/runtime.properties* the offline mode can be enabled at starting time already. Note however that typically some collected offline content needs to be retrieved before working with a z2 system makes sense during development.
1265
1266
1267
h4. Toggling Offline Mode during Development 
1268
1269
1270
p. Alternatively the offline mode may be switched on or off using a check box on the Z2 GUI.
1271
1272
1273
h3. In-container unit testing using Z2 Jupiter
1274
1275
1276
p. The Z2 Jupiter feature of z2-base.base allow to run _in-system_ tests on z2, from anywhere where you can run JUnit tests. To learn more about the JUnit testing framework, please visit "http://www.junit.org":http://www.junit.org/ .
1277
1278
1279
p. In-system tests are ordinary unit tests that run within the server environment. Running tests within the running environment is also called integration testing.
1280
1281
1282
p. Standard JUnit tests run in an environment that often has little to do with the tested code's "native" environment, other than seeing the same types. Anything else, database connectivity, domain test data, component and naming abstractions (e.g. JNDI) need to be firstly abstracted out from the tested code and secondly mocked, that is, simulated one way or the other, into the test assembly of things.
1283
1284
1285
p. While that has the advantage of a defined, clean-room test bed, for higher-level components this can become unreasonable and assuring the correctness of the mocked up environment becomes a testing issue on its own.
1286
1287
1288
p. The Z2 Jupiter feature is built on the JUnit 5 API that succeeded the JUnit 4 API that is the underlying foundation of the previously promoted z2Unit feature (see "How to z2Unit":https://redmine.z2-environment.net/projects/z2-environment/wiki/How_to_z2Unit ). It is recommended that you use the z2 Jupiter implementation starting with z2 Version 2.9.
1289
1290
1291
p. At the heart of Z2 Jupiter lies the Z2 Jupiter Test Engine implementation that delegate test discovery and test execution to a running z2 server runtime. That is, although JUnit believes to run a locally defined test class, the actual test execution is performed in another process, running the test methods and reporting results back to the client.
1292
1293
1294
p. Please visit the "How to unit test in Z2":https://redmine.z2-environment.net/projects/z2-environment/wiki/How_to_Unit_Test_in_Z2 " ":https://redmine.z2-environment.net/projects/z2-environment/wiki/How_to_Unit_Test_in_Z2 Wiki page on z2Unit to learn how to practically use Z2 Jupiter.
1295
1296
1297
p. If you want to automate tests and cannot rely on the Eclipsoid to have a suitable class path, you should use the **com.zfabrik.dev.util/jarRetriever** tool to retrieve all required dependencies. In that case, you can run Z2 Jupiter tests just as any unit tests also from an "ANT":https://ant.apache.org/ " ":https://ant.apache.org/ script for example. A typical application is to run Z2 Jupiter integration tests as part of your test automation effort.
1298
1299
1300
p. See in particular the following section on how to download dependency libraries from Z2 for use with ANT.
1301
1302
1303
h3. Retrieving jars from Z2
1304
1305
1306
p. In most everyday operations you do not need to think about binary build results when using the Z2 environment. Sometimes however, in particular when running or inspecting code outside of Z2 you it is required to have compiled binaries at hand.
1307
1308
1309
p. Using the *com.zfabrik.dev.util/jarRetriever* tool you can request binaries of a set of Java components including dependencies. This tool is an example of a Main program running using an embedded Z2 environment. That is, in order to run it you do not need a Z2 server running. You do however need a Z2 home installation.
1310
1311
1312
p. See "JarRetriever":http://www.z2-environment.net/javadoc/com.zfabrik.dev.util!2Fjava/impl/com/zfabrik/impl/dev/JarRetriever.html  for more info on the jarRetriever. Also see [[#The z2 Command Line, the Embedded Runtime and the Main Runner|The z2 Command Line, the Embedded Runtime and the Main Runner]]  for more info on the embedded mode and the MainRunner.
1313
1314
1315
p. One particular use case is to retrieve Jars from Z2 within an ANT script, for example to automate unit testing.
1316
1317
1318
p. The following snippet is an example on how to retrieve all jars, including dependencies for some components from Z2:
1319
1320
1321
<pre><code class="xml"><!-- fetch all libs -->
1322
<java classpath="${z2home}/bin/z.jar"	classname="com.zfabrik.launch.MainRunner" fork="true">
1323
	<!-- general config -->
1324
	<sysproperty key="java.util.logging.config.file" 
1325
		 value="logging.properties" />
1326
	<sysproperty key="com.zfabrik.home" value="${z2home}" />
1327
	<sysproperty key="com.zfabrik.mode" value="development" />
1328
	<sysproperty key="componentName" 
1329
		 value="com.zfabrik.dev.util/jarRetriever" />
1330
	<!-- output folder -->
1331
	<arg line="-coreapi true -out ${output}" />
1332
	<!-- project to retrieve binaries from -->
1333
	<arg line="${components}" />
1334
</java></code></pre>
1335
1336
1337
p. In this example the following properties are expected:
1338
1339
| ${output}| The folder to store the retrieved jar files |
1340
| ${components}| A blank-separated list of components to retrieve the jars from |
1341
| ${z2home}| The installation folder of the Z2 home that is being used to load the jar files from |
1342
1343
1344
1345
h2. Managing z2
1346
1347
1348
p. At times it is crucial to gain insight into a running system, in particular from remote, when accessing log files or learning about the state of a process requires going through remote logins (if that is is admissible).
1349
1350
1351
p. The z2-Environment offers some basic remote management possibilities, via a simple Web interface and via Java Management Extension (JMX) exposed data and operations. For the latter, z2 comes with a simple command line interface to invoke synchronization and to access system logs.
1352
1353
1354
h3. The Basic Admin Interface
1355
1356
1357
p. As started by default, the Basic Admin Interface can be reached at the context path /adm. That is, when running remotely, it should be accessible at http://localhost:8080/adm.
1358
1359
1360
p. The browser will ask for authentication – by default configuration the username “z*” with password “z” has permission to use the interface. Please see [[#Securing z2 for Production Use|Securing z2 for Production Use]]  on how to configure security aspects for z2.
1361
1362
1363
p. The main page provides an information overview on the Java Virtual Machine Process and allows to switch between worker processes and different data sets as well as triggering some basic operations:
1364
1365
!{height:14.376cm;width:17cm;}10000201000005160000044D7CDF561F3EB49EE6.png!
1366
1367
1368
p. In particular this provides access to log content as currently written and for some time (as far as buffered by the home process) of the past:
1369
1370
!{height:7.627cm;width:17cm;}100000000000070200000325431A2E65B6F81D6B.png!
1371
1372
p. Other functions include:
1373
1374
* Checking on status of worker processes and triggering state changes
1375
* Checking on Loggers and configuring log levels (transiently)
1376
* Inspecting System Properties of the current process
1377
* Checking on Web Apps currently running and basic data such as session count and processed requests
1378
1379
h3. The JMX Read-Only Web *Interface*
1380
1381
1382
p. The JMX Read-Only Web Interface provides simple JSON encoded access to JMX metrics on a running z2 Web Application. This is no complete substitute for JMX monitoring as it requires a running Web container. It does however allow very simple integration with monitoring tools that can natively process JSON data.
1383
1384
!{height:11.395cm;width:17cm;}10000000000005610000039BCC3365BAB7501F3E.png!
1385
1386
p. As started by default, the JMX Read-Only Interface can be reached at the context path /jmx. That is, when running remotely, it should be accessible at http://localhost:8080/jmx.
1387
1388
1389
p. The browser will ask for authentication – by default configuration the username “z*” with password “z” has permission to use the interface. Please see [[#Securing z2 for Production Use|Securing z2 for Production Use]]  on how to configure security aspects for z2.
1390
1391
1392
h3. The JMX Remoting Command Line Interface
1393
1394
1395
p. Several basic management operations of z2 are exposed via JMX MBeans and can be accessed by connecting via tools such as jconsole that is provided with the Java SDK.
1396
1397
1398
p. In order to simplify automation of management tasks, it is however simpler to use a dedicated command line tool – in particular when it comes to capabilities such as log streaming that requires some implementation logic beyond simpler attribute queries. 
1399
1400
1401
p. A few such functions are provided via the z2 command line, as built-in capabilities of the z2 launcher z.jar, that we have implicitly already see in [[#Starting and synchronizing|Starting and synchronizing]] . These functions are not implemented as embedded main programs and no repository access is required.
1402
1403
1404
p. Assuming you are in Z2_HOME/bin, running 
1405
1406
1407
<pre><code class="bash">java -cp z.jar com.zfabrik.launch.Manage -?</code></pre>
1408
1409
1410
p. will show you options of the Manage command. 
1411
1412
1413
<pre><code class="bash">SYNOPSIS 
1414
1415
java -cp z.jar Manage <command> <options> 
1416
1417
COMMANDS 
1418
    
1419
   sync        The sync performs a synchronization of a running (remote) z2 Home.   
1420
    
1421
   showlog     Continuously stream the z2 Home log of a running z2 Home to the current stderr.   
1422
1423
OPTIONS 
1424
1425
   -url <url> 
1426
       JMX URL identifying the target z2 Home. Defaults to service:jmx:rmi:///jndi/rmi://localhost:7777/jmxrmi 
1427
       The URL may be shortened to <host>:<port> (e.g. localhost:7777) 
1428
        
1429
1430
   -user <username>  
1431
    
1432
       Username used for JMX authentication. Optional. 
1433
        
1434
   -pass <password>  
1435
    
1436
       Password used for JMX authentication. Optional. Mandatory when a username has been set 
1437
        
1438
   -b <n> 
1439
    
1440
       Number of lines to read before current (if available) when running showlog.  
1441
        
1442
EXAMPLE 
1443
1444
   java -cp z.jar com.zfabrik.launch.Manage showlog -url host:7777 -user admin -pass admin </code></pre>
1445
1446
1447
p. Be aware however that connecting to JMX involves a Java Remote Method Invocation (RMI)  connection which in itself has some non-trivial aspects regarding its use of network infrastructure, as RMI may switch ports and redirects calls by using server side defined host names (which may or may not be resolvable from a client). All of these obstacles can be easily overcome – with some care. Tipps and tricks on this may be found on the Wiki at "How to Remote Manage":https://redmine.z2-environment.net/projects/z2-environment/wiki/How_to_Remote_Manage .
1448
1449
1450
h2. Enhanced Basis Features
1451
1452
1453
h3. The Binary Hub Component Repository
1454
1455
1456
p. In some cases, it is not desired to have the Z2 runtime access source code repositories directly, for example so that no source code is ever stored on production machines. Other reasons may be to remove the load of compilation from production nodes.
1457
1458
1459
p. The Hub Component repository addresses this problem by providing the following pieces:
1460
1461
* A providing side, that serves all modules and component available to the system in a pre-compiled form (as far as compilable code is involved)
1462
* A client side that connects to the providing side
1463
1464
p. So, instead of connecting to an original source of components, the Hub Component Repository enables an operational approach where some Z2 runtimes see all system content in pre-compiled form only. 
1465
1466
1467
p. Please read on at "How to use the Hub Component Repository":https://redmine.z2-environment.net/projects/z2-environment/wiki/How_to_use_the_hub_cr .
1468
1469
1470
h3. The Gateway for Zero-Downtime-Upgrades 
1471
1472
1473
p. The Gateway module implements a "zero-downtime-upgrade" feature in Z2. Specifically, it uses the worker process management of Z2 in conjunction with an intermediate reverse proxy style Web handler to implement the following feature:
1474
1475
1476
p. Upgrading a stateful Web application, i. e. a Web application that stores user data in its HTTP session typically implies downtime, and if the session state is not serializable and persisted during the upgrade, it does additionally imply that user state gets lost and typically that users need to log on again.
1477
1478
1479
p. Using the Gateway, running sessions may be preserved and worker resources may still be assigned on the current software revision for as long as there are running sessions during a node upgrade and until all sessions have been terminated. The typical application of this feature is to roll out functional and user interface corrections without interrupting users. Users can switch over to post-upgrade software by terminating their session (e. g. via a log out) and starting a new one (e. g. by logging in again).
1480
1481
1482
p. The approach behind the Gateway feature is simple:
1483
1484
* Allow separation of user sessions across worker processes
1485
* Provide an entry point to Web Applications that is capable of identifying what worker process is serving an associated session and of routing to that worker process.
1486
* Enhance worker process management with the capability of identifying stale worker processes that will not serve any user request in the future.
1487
1488
p. Please read on at "How to Gateway":https://redmine.z2-environment.net/projects/z2-environment/wiki/How_to_Gateway  to learn more about this feature.
1489
1490
1491
h2. Component type reference
1492
1493
1494
p. This section describes the component type available in a z2-base system. Add-ons may provided additional component types. For those, please visit the Z2 Wiki at 
1495
1496
1497
p. "http://redmine.z2-environment.net/projects/z2-environment/wiki":http://redmine.z2-environment.net/projects/z2-environment/wiki .
1498
1499
1500
h3. Core component properties
1501
1502
1503
p. Components in a Z2 component repository are declared using a set of properties, name-value pairs, that state the essential characteristics (beyond the name) of a component.
1504
1505
1506
p. Typically, the component type (also a property, see below) defines the set of properties that make sense declaring. Some components however look for declarations in other components. As an example visit the System State component type below.
1507
1508
1509
p. Very few properties are built-in with the z2 core and apply to any component:
1510
1511
|_. name|_. values |
1512
| com.zfabrik.component.type| The type of the component. The value of this property determines the Component Factory that implements the semantics of the component. |
1513
| com.zfabrik.component.dependencies| A comma-separated list of component names. Components listed should implement IdependencyComponent, which makes them so-called dependency components. That interface will be invoked before providing from the declaring component and the declaring component will depend on all listed components. |
1514
1515
1516
1517
p. Component dependencies allow to make sure that other components may be “prepared” before some particular component becomes used. This can be handy when some functionality of your solution depends on a side-effect established by another component. For example a web application may depend on a successful database migration check or another web application.
1518
1519
1520
p. In order to preprepared a component implementation needs to provide an implementation of I"DependencyComponent":http://www.z2-environment.net/javadoc/com.zfabrik.core.api!2Fjava/api/com/zfabrik/components/IDependencyComponent.html  to make it a dependency component, as for example Web Apps do.
1521
1522
1523
p. Note that other component types, such as [[#System States (core)|System States]]  may define properties that apply to yet other components.
1524
1525
1526
h3. “Any” components (core)
1527
1528
1529
p. Any components may represent, as the name tries to indicate any sort of interface or aspect. In short, implementations of any components simply extend the Resource Management resource base class Resource (JAVADOC) pointer.
1530
1531
1532
p. Typically, “any” components are only useful, if you need to satisfy some generic interfaces like *IDependencyComponent* but there is no more narrowly defined semantic provided in the form of a component factory. 
1533
1534
1535
p. That said, unless you have a problem that may demand an “any” component, you do not need to worry about them.
1536
1537
1538
h5. Properties of an “Any” Component:
1539
1540
|_. name|_. values |
1541
| com.zfabrik.component.type| com.zfabrik.any |
1542
| component.className| Name of the class that implements com.zfabrik.resources.provider.Resource |
1543
1544
1545
1546
h3. Component Factories (core)
1547
1548
1549
p. See [[#Components and Component Repositories|Components and Component Repositories]]  for details on the concept of component factories. 
1550
1551
1552
p. In general a component factory implementation is an implementation of the interface *com.zfabrik.components.provider.IComponentFactory*. When called, it is asked to return an extension of *com.zfabrik.resources.provider.Resource* that represents all runtime aspects of the component of the passed-on name.
1553
1554
1555
p. As a short cut, the class name given by the property *component.className *in the component's descriptor may name a class that extends *com.zfabrik.resources.provider.Resource* rather than implementing the factory interface above.
1556
1557
1558
p. In that case, the extension class must have a constructor that takes a single String parameter and it will be instantiated for a given component by its name when required (i. e. when otherwise the factory interface would have been called.
1559
1560
1561
p. Only one component factory per type name may be declared.
1562
1563
1564
h5. Properties of a Component Factory Component:
1565
1566
|_. name|_. values |
1567
| com.zfabrik.component.type| com.zfabrik.componentFactory |
1568
| component.className| Name of a class that implements  com.zfabrik.components.provider.IComponentFactory or name of a class that extends com.zfabrik.resources.provider.Resource. See also above. |
1569
| componentFactory.type| Name of the component type implemented by this factory. Components that declare to be of this type are managed by resources provided by this type. |
1570
1571
1572
1573
h3. Data Source components (z2-base)
1574
1575
1576
p. Data source components allow to manage JDBC data sources as z2 components. When present, the built-in support for JNDI lookups (see [[#Java Naming and Directory Interface (JNDI) support|Java Naming and Directory Interface (JNDI) support]]  of the z2-Environment can be used make these datasources accessible in a standard way for widely used Java frameworks such as Java persistence providers, or they may be used directly.
1577
1578
1579
p. The benefits of specifying JDBC data sources as z2 Components lies in the simple maintenance of their configuration. You are in no way limited to using this component type, when you need a datasource. At times it may be more suitable to leave your data source configuration for example in a Spring application context and expose it as a bean to make it re-usable across modules.
1580
1581
1582
p. Data source configuration is split into two parts: General configuration and Data Source implementation specific configuration.
1583
1584
1585
h5. General Properties of a Datasource Component:
1586
1587
|_. name|_. values |
1588
| com.zfabrik.component.type| javax.sql.DataSource |
1589
| ds.type| The type of data source used. Supported values are NativeDataSource or ZFabrikPoolingDataSource. See below. |
1590
| ds.enlist| The data source may be enlisted with the WorkUnit. Supported values are none, jta and workUnit. Default value is workUnit. See below. |
1591
| ds.dataSourceClass| If set, the specified data source class will be loaded as data source implementation using the private class loader of the Java module of the component holding the data source definition. When specifying this class in conjunction with the using ZFabrikPoolingDataSource as type, configuration properties will be applied to both and the pool will request new connections from the specified data source. Alternatively, the pool may be configuredto use a driver class. See below. |
1592
1593
1594
1595
p. The WorkUnit API provides a simple way to attach shared resources on the current thread of execution for the time of a unit of work (typically a web request, some batch job execution)  as implied by thread usage (see ApplicationThreadPool). 
1596
1597
1598
p. *If setting **ds.enlist=workUnit** the same connection will be returned for as long as the work unit is ongoing and open. Closing the work unit (which happens whenever the thread completes at latest), commits or rolls back the connection (if any) and closes it (which may mean to return it to a pool).*
1599
1600
1601
p. *When using **ds.enlist=jta**, the data source is also enlisted with the workunit, but the connection is closed at after commit or rollback - that is earlier - which is often desirable. *
1602
1603
1604
p. *It is now generally recommended to use the value **jta**.*
1605
1606
1607
p. See also "DataSourceResource":http://www.z2-environment.net/javadoc/com.zfabrik.db.data!2Fjava/impl/com/zfabrik/impl/db/data/DataSourceResource.html .
1608
1609
1610
h4. Data Source Specific Configuration
1611
1612
1613
p. When specifying a data sourc class but also when using the built-in pooling data source, properties of the data source implementation class can be specified as Java Beans properties using the syntax below:
1614
1615
|_. name|_. meaning |
1616
| ds.propType.<prop name>| Type of the property. Can be int, string, or boolean. Default value is string.  |
1617
| ds.prop.<prop name>| Value of the data source property to be set according to its type setting above.  |
1618
1619
1620
1621
h4. Data Source Types
1622
1623
1624
p. Currently the Data Source support allows to specify two different types of data sources: 
1625
1626
1627
h5. NativeDataSource
1628
1629
1630
p. When declaring a native data source, the ds.dataSourceClass must be specified to name a data source implementation class. 
1631
1632
1633
p. All further configuration of the data source is done generically using the property scheme below,
1634
1635
1636
h5. ZFabrikPoolingDataSource
1637
1638
1639
p. When declaring a ZFabrikPoolingDataSource a z2 provided data base connection pool implementation will be used that has the following configuration properties:
1640
1641
| Name | Type| Value |
1642
| driverClass| string| Name of the actual JDBC Driver implementation class. E.g. com.mysql.jdbc.Driver for MySQL. |
1643
| url| string| JDBC connection url |
1644
| user| string| User name for authentication at the data base. |
1645
| password| string| Password for authentication at the data base. |
1646
| maxInUseConnections| int| Maximal number of connections handed out by this pool. This number may be used to limit database concurrency for applications. Requesting threads are forced to wait for freed connections if this limit has been exhausted. Make sure threads are not synchronized on shared resources when requesting connections and when this limit is less than your theoretical application concurrency as this may lead to thread starvation. |
1647
| maxSpareConnections| int| Number of connection held although not currently used by the applications. |
1648
| connectionExpiration| int| Connections will be closed after this number of milliseconds has expired since creation and when returned to the pool. This setting can be used to make sure stale connections get evicted although not detected otherwise by the pool. |
1649
| connectionMaxUse| int| Connections will be closed after this number of times they have been handed out from the pool and when returned to the pool. This setting can be used to make sure connections only serve a limited number of requests. |
1650
1651
1652
1653
p. See also "PoolingDataSource":http://www.z2-environment.net/javadoc/com.zfabrik.db.data!2Fjava/impl/com/zfabrik/impl/db/data/PoolingDataSource.html .
1654
1655
1656
1657
p. A typical ZFabrikPoolingDataSource configuration looks like this:
1658
1659
1660
<pre><code class="bash">#
1661
# MySQL driver configuration
1662
#
1663
ds.dataSourceClass=com.mysql.jdbc.jdbc2.optional.MysqlDataSource
1664
ds.prop.user=z2
1665
ds.prop.password=z2
1666
ds.prop.url=jdbc:mysql://localhost:3306/z2_samples?autoReconnect=true
1667
#
1668
# Generic pooling config
1669
#
1670
ds.prop.maxInUseConnections=10
1671
ds.propType.maxInUseConnections=int
1672
ds.prop.maxSpareConnections=5
1673
ds.propType.maxSpareConnections=int
1674
ds.prop.connectionExpiration=60000
1675
ds.propType.connectionExpiration=int</code></pre>
1676
1677
1678
h3. File system component repositories (core)
1679
1680
1681
p. File system based repositories are the most straightforward repositories. All that is required is a file system folder that holds components and component resources in a structure as described in [[#Components and Component Repositories|Components and Component Repositories]] . As always for component repositories, it is important to make sure they are started early on in the life-cylce of a z2 runtime.
1682
1683
1684
p. Note that unlike the development repository (see [[#Developing with the z2-Environment|Developing with the z2-Environment]] ), the file system repository is not robust under modifications: Resources in the folder structure of the file system repository will be accessed at any time the z2 runtime requires to – which may be significantly later than the latest synchronization that decided about invalidations due to changes. Resources should not be modified in the meantime to assure consistency.
1685
1686
1687
h5. Properties of a File System Component Repository Component:
1688
1689
|_. name|_. values |
1690
| com.zfabrik.component.type| com.zfabrik.fscr |
1691
| fscr.folder| Store folder, i.e. the file system folder that holds the actual resources of the repository. |
1692
| fscr.base| If the value of fscr.folder is not an absolute file system path but a relative path instead, this setting specifies what it is evaluated in relation to. Allowed values are “home” (default) and “here”.If set to “home”, the basis of evaluation is the z2 Home folder (see [[#Folder Structure of a Z2 Home|#FolderStructureOfHome]] ).If set to “here”, the basis of evaluation is the resource folder of the declaring component. This is useful, if you want to declare FS component repositories from FS component repositories in a relative fashion. |
1693
| fscr.checkDepth| Component folder traversal depth when determining the latest time stamp. Set to less than zero for infinite depth. Default is -1. |
1694
| fscr.priority| Component repository priority. See IComponentsRepository. Default is 250. |
1695
1696
1697
h3. GIT component repositories (core)
1698
1699
1700
p. When using a Git based component repository, the z2 runtime manages a local clone of another Git repository. This allows to declare Git component repositories that refer to a local Git repository, typically present in a development setup, or to remote Git repositories, used for production setups.
1701
1702
1703
p. In both cases, when synchronizing, the component repository will pull updates from the configured repository and check for modifications by inspecting the local workspace, i.e. the Git workspace maintained by the z2 environment runtime itself. 
1704
1705
1706
p. Note: When specifying a local repository in gitcr.uri the relevant branch is still the one configured in the component properties (see below), not the checked out branch of the local repository. 
1707
1708
1709
p. By default, the root of the repository is considered the root of the component repository as well. That is, modules would be identified as direct sub folder of the Git repository root path.
1710
1711
1712
p. A Git component repository may be configured to use other locations inside the repository instead using the *gitcr.roots* configuration property. Instead of checking for modules at the root of the Git repository, modules will be searched at the given relative paths in the repository. For example, given  *gitcr.**roots**=repo1,other/repo2* the relatives paths *repo1* and *other/repo2* will be searched.
1713
1714
1715
p. The order of paths in the comma-separated list determines the priority in overlaying in decreasing order. That is, using the example above, if a module *myModule* would be found at *repo1/myModule* as well as in *other/repo2/myModule*, the latter definition would be ignored.
1716
1717
1718
p. The Git component repository allows flexibility in describing the content version to be considered by allowing any reference that is meaningful in the source repository. The reference will be used in a fetch specification so that partial cloning is supported. The reference specified does not need to be a branch or tag but can be, in particular, HEAD, which can be particularly useful for feature branch development as that allows simple switching of branches without configuration changes in z2.
1719
1720
1721
p. See also [[#Git support|Git support]]  for more information on Git support.
1722
1723
1724
h5. Properties of a Git Component Repository Component:
1725
1726
|_. name|_. values |
1727
| com.zfabrik.component.type| com.zfabrik.gitcr |
1728
| gitcr.uri| The URI to the Git repository to clone from. This can be an absolute path, a local path relative to .../bin, or a remote URL. See the Git documentation for examples. |
1729
| gitcr.priority| The priority of the repository. Defaults to 500. |
1730
| gitcr.ref| A ref to check out as active content. This can be * a tag (refs/tags/<tag name>), 
1731
* a branch (refs/heads/<branch name>
1732
* HEAD for the default branch (i.e. where HEAD points to)
1733
In practice this can be anything used for the JGit check out command (omitting the branch creation part) which is very similar to what may be used in the git checkout command (omitting anything beyond checkout, such as branch creation).Use this option, if you need more control then given by gitcr.branch). Note that the latter will be used with preference and hence needs to be omitted, if you want to use gitcr.ref.Note: The Git Component Repository uses this reference to fetch from remote – that is, the reference must be anything that is meaningful at the source Git repository.  |
1734
| gitcr.branch| The branch to checkout. Setting this is equivalent to setting a gitcr.ref value  refs/remotes/origin/<branch name> and will be considered with preference over gitcr.ref. |
1735
| gitcr.roots| A comma-separated list of repository local paths that serve as roots of the actual component repository content. The order is in decreasing priority. See also above. Defaults to the empty path which identifies the root of the repository. |
1736
1737
1738
1739
h3. Java components (core)
1740
1741
1742
p. Java components are among the very few very essential component types already defined in the Z2 core. The knowledge about Java components is essential to the environment so it can bootstrap.
1743
1744
1745
p. The Java component implementation takes care of the following tasks:
1746
1747
* Resolving includes for assembly 
1748
* Resolving references of Java components for class path computation and class loader management 
1749
* Triggering (re-) compilation of source code in a Java component using the compiler API
1750
1751
p. The mechanisms around references and includes between Java components and the separation of Java components into public (api), private (impl), and test, are the underpinnings of the software modularization features of z2, which is why we discuss these in some depth here.
1752
1753
1754
h4. Classloaders
1755
1756
1757
p. The class loader concept of the Java platform provides a powerful name spacing mechanism on the type system. While in the beginning that seems to be of little concern, in more complex scenarios isolation within the type system in conjunction of sharing of types between modules of a solution becomes the catalyst of successful modularization.
1758
1759
1760
p. Isolation means that modules on the platform may use types without sharing them, that is without making them visible to other modules. That can be important for various reasons:
1761
1762
* Implementation types should be hidden from potential users so that modifications do not break using modules.(encapsulation).
1763
* In particular third party libraries used in the implementation of a module may conflict with other versions of similar libraries so that exposing them would lead to unnecessary risks on the consuming side (multiple versions)
1764
1765
p. Sharing of types on the other hand allows to refer to the very same types from different modules and, as they are shared, provides an efficient type safe way of communicating state between modules:
1766
1767
* By publishing an API, modules may expose services efficiently to other modules
1768
1769
1770
p. Based on these mechanisms, modularization for Java components on Z2 provides the ability to maintain a system of named modules that have defined contracts among each other while still maintaining local integrity and cohesion. 
1771
1772
1773
p. The class loading system in Z2 is based on a ancestry-first, multi-ancestor scheme. Effectively, a Java component will have two class loaders at runtime. One for the API, one for the Implementation and both ask their ancestors (other class loaders) first before searching local resources.
1774
1775
1776
p. The API class loader will have ancestors corresponding to all Java components identified by the public references. The implementation class loader will have the API class loader as ancestor and  ancestors corresponding to all Java components identified by the private references of the Java component (see below).
1777
1778
1779
h4. Includes
1780
1781
1782
p. Another important mechanism supported by the Z2 Environment is so called “Java includes”. The references feature described above allows sharing of types and class path resources without duplicating them at runtime. 
1783
1784
1785
p. There are cases however where duplication of types is necessary – although that is fortunately the exception:
1786
1787
* Frameworks like the Spring Framework supply pre-compiled libraries that contain “adapters” for various other frameworks that may not be present on the using application. The late linking qualities of the Java VM supports unresolvable type references as long as they are not needed. In this case, the library must be used in the class loading name space of the using application to make sure it gets appropriate type visibility.
1788
* Some libraries attach information about the using application to the class loading namespace itself, e.g. via class variables. In that case, sharing types can easily lead to unpredictable behavior as state from different class loading name spaces may override each other.
1789
1790
p. The use of includes, actually in most cases only “private includes” implements exactly that. The Java resources of the included component get copied into the using Java component and hence are used as if provided by the using Java component. 
1791
1792
1793
p. The picture below shows a simplified example overview over the reference and the include mechanisms:
1794
1795
1796
!{height:11.192cm;width:16.365cm;}1000020100000628000004361E3526C0E2036BF0.png!
1797
1798
1799
h5. Properties of a Java Component:
1800
1801
|_. name|_. values |
1802
| com.zfabrik.component.type| com.zfabrik.java |
1803
| java.publicReferences| Points to another java component whose public types will be shared with this one (and maybe others). Everything referenced as public reference will be visible to the public interface of the referencing component as well as to all referencing the referencing component. In other words: References are transitive. In particular, anything required to compile the public types of a Java component must be referenced via this reference property. Components may be specified as a comma-separated list. Component names that have no "/" will be defaulted by appending "/java". |
1804
| java.publicIncludes| Points to com.zfabrik.files or com.zfabrik.java components that must have a bin (or alternatively a bin.api, for Java components) folder that will be included into this java component's public java  resources. The component may also have a src (or alternatively src.api, for Java components) folder that will be copied before compilation into src.api. |
1805
| java.publicClassPathInclusion| Custom regular expression for classpath computation of the public classloader. Only library files matching the specified pattern will be included into the respective classpath computation. This has no effect on the inclusion of .class files. Defaults to “^.*(?<!-sources)\\.jar$” (i.e. including all jar files except those ending on “-sources” before the file extension). |
1806
| java.publicCompile.order| Like java.compile.order below, but only applying to the public resources and considered with preference. |
1807
| java.privateReferences| Points to another java component whose public types will be shared with this one (and maybe others) Nothing referenced as private reference will be automatically exposed to the public interface  of the referencing component nor to other components. Anything needed to compile the private types of a Java component, must be referenced as a public reference, be part of the public types of  that component, or be referenced via this reference property. In other words: The private types automatically see the public types and transitively anything referenced publicly as described above. In addition, to use more types in the "private implementation section" of a Java component, types that will not be exposed to referencing components, use this reference property. Components may be specified as a comma-separated list. Component names that have no "/" will be defaulted by appending "/java". |
1808
| java.privateIncludes| Points to com.zfabrik.files or com.zfabrik.java components that must have a bin (or alternatively a bin.api, for Java components) folder that will be included into this java component's private java resources. The component may also have a src (or alternatively src.api, for Java components) folder that will be copied before compilation into src.impl. |
1809
| java.privateClassPathInclusion| Custom regular expression for classpath computation of the private classloader. Only library files matching the specified pattern will be included into the respective classpath computation. This has no effect on the inclusion of .class files. Defaults to “^.*(?<!-sources)\\.jar$” (i.e. including all jar files except those ending on “-sources” before the file extension). |
1810
| java.privateCompile.order| Like java.compile.order below, but only applying to the private resources and considered with preference. |
1811
| java.testReferences| Points to another java component whose public types will be shared with this one (and maybe others) if the execution mode, as defined by the system property (see Foundation.MODE} is set  to development. Test references extend the private references. In conjunction with the tests source folder this allows to add test code and corresponding dependencies that will be ignored by the  runtime unless running in development mode. |
1812
| java.testIncludes| Points to com.zfabrik.files or com.zfabrik.java components that must have a bin (or alternatively a bin.api, for Java components) folder that will be included into this java component's test java  resources. The component may also have a src (or alternatively src.api, for Java components) folder that will be copied before compilation into src.test. |
1813
| java.testClassPathInclusion| Custom regular expression for classpath computation of the test classpath. Only library files matching the specified pattern will be included into the classpath computation. This has no effect on the inclusion of .class files. Defaults to “^.*(?<!-sources)\\.jar$” (i.e. including all jar files except those ending on “-sources” before the file extension). |
1814
| java.testCompile.order| Like java.compile.order below, but only applying to the test resources and considered with preference. |
1815
| java.compile.order| The compile order must be defined in java components that also contain non-java sources - e.g. scala. This property can be omitted for pure java components, otherwise one has to define all  compilers in the right order - e.g: scala, java |
1816
1817
1818
1819
h3. JUL configurations (z2-base)
1820
1821
1822
p. The standard logging implementation contained in the package java.util.logging (or JUL for short) of the Java SE distribution can be configured using components of type java.util.logging.
1823
1824
1825
p. The z2 Environment implementation uses JUL throughout (rather than log4j or other logging mechanisms). Defining java.util.logging components provides an easy way to distribute log configurations without the need to modify command lines and without need to restart the runtime,
1826
1827
1828
p. Components of type java.util.logging are expected to provide a file called *logging.properties* in their resources (see for example the component *environment/logging* in z2_base/base). That file will be applied using *LogManager.getLogManager().readConfiguration(...)* every time the component is prepared (as in *IDependencyComponent*, i.e. as part of a dependency resolution), e.g. when (re-) attaining a participated system state.
1829
1830
1831
h5. Properties of a JUL Configuration Component:
1832
1833
|_. name|_. values |
1834
| com.zfabrik.component.type| java.util.logging |
1835
1836
1837
1838
h3. Link Components
1839
1840
1841
p. Link components can be used to re-use existing component declarations and resources by another module and component name. Details are explained in [[#Link Components and Component Linking|Link Components and Component Linking]] .
1842
1843
1844
p. Link components are declard using the component type *com.zfabrik.link*.
1845
1846
1847
h5. Properties of a Link Component:
1848
1849
|_. name|_. values |
1850
| link.targetComponent| Name of the target component.  |
1851
1852
1853
1854
h3. Log4J configurations (z2-base)
1855
1856
1857
p. Components of type *org.apache.log4j.configuration* are handled exactly as components of type *java.util.logging* (see right above), except that a file called *log4j.properties* is expected and loaded using Log4J's *PropertyConfigurator* API (see the Log4J documentation for the specifics of Log4J  configuration).
1858
1859
1860
h5. Properties of a Log4J Configuration Component:
1861
1862
|_. name|_. values |
1863
| com.zfabrik.component.type| org.apache.log4j.configuration |
1864
1865
1866
1867
h3. Main Program Components (core)
1868
1869
1870
p. While the z2-environment has built-in support for long running worker processes it is perfectly usable to run command line programs via the Main Runner as described in section [[#The z2 Command Line, the Embedded Runtime and the Main Runner|#embedded]] .
1871
1872
1873
p. In order to implement a Main Program component to be called from the command line, the component implementation is required to either
1874
1875
* support lookup as java.lang.Class returning a class object that has a main method,
1876
* or make use of the component type com.zfabrik.mainProgram and declare an implementation class that has a main method.
1877
1878
p. Note: A main method, is a method of the signature
1879
1880
1881
<pre><code class="java">public static void main(String[] args)</code></pre>
1882
1883
1884
p. In the first case, the declared component type is irrelevant, as long as a lookup requirement is satisfied. For example an “any” component serving as a Main Program could be implemented like this:
1885
1886
1887
<pre><code class="java">public class MainResource extends Resource {
1888
1889
	@Override
1890
	public <T> T as(Class<T> clz) {
1891
		if (clz.equals(Class.class)) {
1892
			return clz.cast(MainResource.class);
1893
		}
1894
		return super.as(clz);
1895
	}
1896
1897
	public static void main(String[] args) {
1898
		System.err.println("hello");
1899
	}
1900
}</code></pre>
1901
1902
1903
p.  In the second case, it is not required to implement a typed lookup implementation via the as(..) method. Instead a class with a main method suffices.
1904
1905
1906
p. Example:
1907
1908
1909
p. Component declaration:
1910
1911
1912
<pre><code class="java">com.zfabrik.component.type=com.zfabrik.mainProgram
1913
component.className=test.Main</code></pre>
1914
1915
1916
p. Main class implementation:
1917
1918
1919
<pre><code class="java">public class Main {
1920
	public static void main(String[] args) {
1921
		System.err.println("Hello Main");
1922
	}
1923
}</code></pre>
1924
1925
1926
p. Assuming the component is declares as mymodule/main, the environment variable Z2_HOME is set, the command line
1927
1928
1929
<pre><code class="bash">java -DcomponentName=mymodule/main -cp z.jar com.zfabrik.launch.MainRunner</code></pre>
1930
1931
1932
p. will invoke the main program (note: for experimentation you might want to work with a locally defined development state using the dev repo. In that case set the system property  *com.zfabrik.dev.local.workspace* on the command line accordingly - e.g. to the folder above your development modules  - see also [[#Workspace development using the Dev Repository |#devRepo]] ).
1933
1934
1935
p. All shared component properties, such as those declaring dependencies, are supported. A main program runs in exactly the same context as any other component defined. This make Main Program components an extremely useful command line interface of a potentially application system.
1936
1937
1938
1939
h5. Properties of a Main Program Component:
1940
1941
|_. name|_. values |
1942
| com.zfabrik.component.type| com.zfabrik.mainProgram |
1943
| component.className| Name of class that has a main method. |
1944
1945
1946
1947
h3. Maven component repositories (z2-base)
1948
1949
1950
p. Maven component repositories allow to integrate artifacts from Maven artifact repositories without copying them into your system. See [[#Maven Repository Support|Maven Repository Support]]  for more details.
1951
1952
1953
h5. Properties of a Maven Component Repository Component:
1954
1955
|_. name|_. values |
1956
| com.zfabrik.component.type| com.zfabrik.mvncr |
1957
| mvncr.settings | Specifies the location of the settings XML file relative to the components resources. This is expected to be a standard Maven configuration file. Defaults to settings.xml |
1958
| mvncr.roots| A comman-separated list of root artifacts |
1959
| mvncr.managed| Fixed artifact versions, if encountered during recursive root resolution. This corresponds to a <dependencyManagement> section in a Maven POM file. |
1960
| mvncr.excluded | A comma separated list of artifacts that will be skipped during resolution of any root  |
1961
| mvncr.priority | Component repository priority. See IComponentsRepository. Default is 500. |
1962
| mvncr.repository| Symbolic name of the repository. Use this to define a component name independent identifier for the repository that fragments (see below) can reference.  |
1963
1964
1965
1966
1967
p. In order to deviate from the default resolution and mapping, maven repository roots may be specified with a query string syntax like this:
1968
1969
1970
1971
<pre><code class="bash">org.springframework.security:spring-security-aspects:3.2.2.RELEASE?versioned=true&scope=RUNTIME&excluded=commons-logging:commons-logging:1.1.2</code></pre>
1972
1973
1974
p. Admissable query parameters are
1975
1976
1977
|_. param|_. meaning |
1978
| com.zfabrik.component.type| com.zfabrik.mvncr |
1979
| versioned| If set to true, the version part will not be removed from the java component name mapping and instead a versioned name is used. That is, in the case above, a java component org.springframework.security:spring-security-aspects:3.2.2.RELEASE/java would be mapped. This is useful if "non-default" versions are required. |
1980
| scope| Any of RUNTIME, COMPILE, PROVIDED, SYSTEM, TEST. Corresponds to the corresponding Maven dependency scopes. If set, non-optional dependencies of the respective scope will be traversed to resolve dependencies. |
1981
| excluded | Exclusions on the dependency graph.  |
1982
1983
1984
h3. Maven component repository fragments (z2-base)
1985
1986
1987
p. A Maven component repository fragment allows to add dependency graph information to a Maven component repository (see above).
1988
1989
1990
h5. Properties of a Maven Component Repository Fragment Component:
1991
1992
|_. name|_. values |
1993
| com.zfabrik.component.type| com.zfabrik.mvncr.fragment |
1994
| mvncr.component| The component name (or a comma-separated list of component names) of  Maven component repository or Maven component repository fragment declarations this fragment adds to. DEPRECATED, use mvncr.repository instead. |
1995
| mvncr.repository| The maven repository name (or a comma-separated list of repository names) of  Maven component repository or Maven component repository fragment declarations this fragment adds to. |
1996
| mvncr.roots| As above. Will be merged with the repo this fragment adds to. |
1997
| mvncr.managed| As above. Will be merged with the repo this fragment adds to. |
1998
| mvncr.excluded | As above. Will be merged with the repo this fragment adds to. |
1999
2000
2001
2002
h3. Subversion component repositories (core)
2003
2004
2005
p. Subversion component repositories provide an easy and robust way to run z2 in a highly controlled and versioned yet scalable way. 
2006
2007
2008
p. See [[#Components and Component Repositories|Components and Component Repositories]]  for details on Subversion support.
2009
2010
2011
h5. Properties of a Subversion Component Repository Component:
2012
2013
|_. name|_. values |
2014
| com.zfabrik.component.type| com.zfabrik.svncr |
2015
| svncr.url| URL of the subversion root folder of the repository. E.g. something like svn://z2-environment.net/z2_base/trunk/base |
2016
| svncr.user| User name for Subversion authentication (optional). |
2017
| svncr.password| Password for Subversion authentication (optional) |
2018
| svncr.priority| Component repository priority. See IComponentsRepository. Default is 500. |
2019
2020
2021
2022
p. By default, a Subversion component repository needs to be able to connect to the Subversion repository. In most cases this means that you need to be online when running a z2 environment, even when developing.
2023
2024
2025
p. In reality however, the repository has all required resources in its local caches and only checks for updates. In development situations it can be very handy to have the repository simply go by what is on the caches and continue developing in an Eclipse workspace gladly ignoring possible central modifications.
2026
2027
2028
p. To enable that you can set the system property 
2029
2030
2031
<pre><code class="bash">-Dcom.zfabrik.repo.mode=relaxed </code></pre>
2032
2033
2034
p. in *launch.properties** **(see also *[[#Important System Properties|*#systemProps*]] ). In that case, failing to connect to a remote repository will be noted by a warning but otherwise ignored and the repository will try to satisfy component lookups from cached data.
2035
2036
2037
p. To avoid problematic licenses, the z2 Environment does unfurtunately not come with complete built-in Subversion connectivity. Additional configuration steps are required once to complete subservion enabling on your side, as described in the "Subversion How-To":https://redmine.z2-environment.net/projects/z2-environment/wiki/How_to_Subversion .
2038
2039
2040
h3. System States (core)
2041
2042
2043
p. System states are abstract target configurations for z2 processes. Systems can easily develop into a non-trivial set of web applications, batch jobs, web service interfaces and more that interplay with each other to implement solution scenarios. Take for example an e-commerce web site: There is the actual shop front-end but also report generation, mass-emailing, shop content administration, etc.
2044
2045
2046
p. It is handy to group components that form parts of an overall scenario and that need to be initialized beforehand, such as web applications, or update scheduling for analytical data aggregation.
2047
2048
2049
p. System states support dependency declarations in two directions:
2050
2051
* Via the property com.zfabrik.systemStates.dependencies a comma-separated list of components that this state depends on and that must be prepared to have the state attained.
2052
* Via the property com.zfabrik.systemStates.participation a comma-separated list of other system state components may be specified that are to depend on this system state and that cannot be attained unless this system state has been prepared (which equals attained in this case). This property may be declared on components of any type.
2053
2054
p. State dependencies are evaluated in an eager way. That is, even if some dependency fails to prepare,  and eventually the system state will not be attain, all other dependencies will still try to be prepared.
2055
2056
2057
p. System state dependencies are similar to component dependencies (see [[#Core component properties|Core component properties]] ). There are subtle differences however in that component dependencies are evaluated much earlier in the life cycle of a component than state dependencies. In essence that means, that the system state implementation may never evaluate participations if its component dependencies fail. 
2058
2059
2060
p. Also, any preparation of a system state, for example during the verification step of a synchronization, will trigger a preparation of all dependent dependency components (unlike a component dependency, that will only be prepared again, if invalidated).
2061
2062
2063
p. Hence, on system states, it is preferable to not use component dependencies but rather the declarations above.
2064
2065
2066
p. In practice, system states serve as a convenient, named place holder for parts of an overall scenario.
2067
2068
2069
p. Attaining a system state means to “prepare” (see "IDependencyComponent":http://www.z2-environment.net/javadoc/com.zfabrik.core.api!2Fjava/api/com/zfabrik/components/IDependencyComponent.html ) all dependent component and do so again if one got invalidated and the system is to be attained again.
2070
2071
2072
p. The system state feature is used by z2 in several places:
2073
2074
* All z2 processes (in server mode) have the target state com.zfabrik.boot.main/process_up
2075
* The home process has a hard-coded target state com.zfabrik.boot.main/home_up
2076
* Worker processes always have the target state com.zfabrik.boot.main/worker_up
2077
* Component repositories should participate in com.zfabrik.boot.main/sysrepo_up
2078
* Worker processes express their target configuration by a list of system states to attain (and keep attained). See below for worker process component configuration.
2079
2080
p. As mentioned above, in order to assign components as part of a system state, you can either list them as dependency components in the system state definition like this:
2081
2082
2083
<pre><code class="bash">com.zfabrik.systemStates.dependencies=\
2084
	mymodule1/comp1,\
2085
	mymodule2/comp2</code></pre>
2086
2087
2088
p. Or, in the case of other system states, mark them as participants of the system state. For example to your component's properties you could add
2089
2090
2091
<pre><code class="bash">com.zfabrik.systemStates.participation=com.zfabrik.boot.main/worker_up</code></pre>
2092
2093
2094
p. By convention, the most essential system states used and participated in for application components are declared in the “environment” module. We suggest to use:
2095
2096
* environment/webWorkerUp for web interfaces
2097
* environment/jobWorkerUp for asynchronous data processing.
2098
2099
p. Larger scenarios may need more fine-grained scenario partitioning.
2100
2101
2102
p. Declaring a system state requires no more that declaring a component of the corresponing type.
2103
2104
2105
h5. Properties of a System State Component:
2106
2107
|_. name|_. values |
2108
| com.zfabrik.component.type| com.zfabrik.systemState |
2109
| com.zfabrik.systemStates.dependencies| A comma-separated list of components that this state depends on and that must be prepared to have the state attained. |
2110
2111
2112
2113
p. The following diagram shows typical system state relationships in a worker process:
2114
2115
!{height:12.485cm;width:13.831cm;}1000020100000441000003D7FD54F9BEE0DA91D7.png!
2116
2117
2118
h3. Web applications (z2-base)
2119
2120
2121
p. Web application configuration is split into three parts: 
2122
2123
# The Java EE standard Web application deployment descriptor found at WEB-INF/web.xml the Web application's Web resources.
2124
# Container-specific extended Web application configuration. In the case of Jetty (currently the default Web container in z2) please check out the documentation on Jetty's WEB-INF/jetty-web.xml configuration file.
2125
# The z2 component descriptor that covers the remaining parts (such as the Web app's context path) and life cycle control inherent to z2.
2126
2127
2128
p. Web applications have the following module structure in z2:
2129
2130
| WebContent| Folder holding the standard Java Web application structure, such as the WEB-INF folder. |
2131
| z.properties| Component descriptor of the Web application |
2132
2133
2134
2135
h5. Properties of a Web Application Component:
2136
2137
|_. name|_. values |
2138
| com.zfabrik.component.type| com.zfabrik.ee.webapp |
2139
| webapp.path| Context path of the web application. |
2140
| webapp.server| Component name of the web server to host this Web application. |
2141
| webapp.requiredPaths| A comma-separated list of context paths this Web application relies on. This is an alternative way of defining a component dependency by Web app context path rather than by component name. |
2142
| webapp.ContainerIncludeJarPattern| The jars that qualify for meta-data parsing can be limited in Jetty. In z2 the default is defined by the regular expression "(?!.+-sources\\.).*\\.jar$" (as Java string) which is all Jars except the source code jars (by convention).  See also "the Jetty Documentation":http://www.eclipse.org/jetty/documentation/9.1.1.v20140108/configuring-webapps.html#container-include-jar-pattern . |
2143
2144
2145
2146
h3. Web servers (z2-base)
2147
2148
2149
p. In order to run Web Applications, arguably the most prominent reason to run an application server, z2 integrates the Jetty Web Container. 
2150
2151
2152
p. There is no particular reason other than that Jetty is a well-embeddable, well performing, standard compliant web container. Based on z2's extensible component model, the way Jetty has been integrated, Tomcat could be integrated as well. Contact us, if that is important for you.
2153
2154
2155
p. The component type *com.zfabrik.ee.webcontainer.jetty* configures instances of Jetty web servers. While in most cases you will not operate more than one, the component still provides the place to hold Jetty configuration. As an example have a look at the *environment/webServer* component in z2_base/base.
2156
2157
2158
h5. Properties of a Web Server Component:
2159
2160
|_. name|_. values |
2161
| com.zfabrik.component.type| com.zfabrik.ee.webcontainer.jetty |
2162
| jetty.config| Names one or several Jetty configuration file (typically called jetty.xml) relative to the component's resource folder.All named configuration files will be applied as Jetty configuration (see Jetty documentation and the default settings). |
2163
| jetty.property.<name>| A property to be set when evaluating the configuration files listed with jetty.config. This is properties that can be evaluated using Jetty's <Property/> tag in the configuration files.Using this setting allows to supply configuration values via dynamic component properties and so, indirectly, e.g. from environment settings. |
2164
| jetty.override-web.xml| Names a override web.xml file, that can be used to override web application configurations for all web applications. The file name is considered relative to the component's resource folder |
2165
| jetty.default-web.xml| Names a default web.xml file, that defines web application defaults for all web applications. The file name is considered relative to the component's resource folder |
2166
2167
2168
2169
h3. Worker Processes (z2-base)
2170
2171
2172
p. Worker processes are managed by the home process when running in server mode. Worker processes improve robustness of the z2 runtime as applications running in some worker process do not impact applications running in another worker process nor and in particular, do crashing worker processes impact the home process. 
2173
2174
2175
p. See [[#Installing and Understanding a Z2 Home|Installing and Understanding a Z2 Home]]  for more information on how a z2 home works.
2176
2177
2178
h5. Properties of a Worker Processes Component:
2179
2180
| name| values |
2181
| com.zfabrik.component.type| com.zfabrik.worker |
2182
| worker.process.vmOptions| General virtual machine parameters for the worker process. See the JVM documentation for details. See below for consideration on command line syntax. |
2183
| worker.process.vmOptions.<os name>| Override of the general VM options above for a specific operating system. Use the OS name returned by the RuntimeMXBean to replace <os name> with. See below for consideration on command line syntax. |
2184
| worker.states| Comma-separated list of target state (components) of the worker process (see also ISystemState). The worker process, when starting, will try to attain these target states and will try so again during each verification and synchronization.  |
2185
| worker.concurrency| Size of application thread pool (see ApplicationThreadPool). In general this thread pool is used for application type work (e.g. for web requests or parallel execution within the application). This property helps achieving a simple but effective concurrent load control  |
2186
| worker.process.timeouts.start| Timeout in milliseconds. This time out determines when the worker process implementation will forcibly kill the worker process if it has not reported startup completion until then.  |
2187
| worker.process.timeouts.termination | Timeout in milliseconds. This time out determines when the worker process implementation will forcibly kill the worker process if it has not terminated after this timeout has passed since it was asked to terminate.  |
2188
| worker.process.timeouts.communication| Timeout in milliseconds. This time out is the default timeout that determines the time passed after which the worker process implementation will forcibly kill a worker process if a message request has not returned.  |
2189
| worker.debug| Debugging for the worker process will be configured if this property is set to true and the home process has debugging enabled. Otherwise the worker process will not be configured for debugging.  |
2190
| worker.debug.port | The debug port to use for this worker process, if it is configured for debugging. |
2191
| worker.inheritedSystemProperties| Some system properties set on the z2 home process via the command line (or launch.properties) are useful to be propagated to worker processes. This property can be used to specify a comma-separated list of such properties. See below for more details. |
2192
2193
2194
2195
h4. System Property Propagation from Home to Worker Process
2196
2197
2198
p. Some system properties set on the z2 home process via the command line (or launch.properties) are useful to be propagated to worker processes. The property *worker.inheritedSystemProperties *can be used on worker process declaration to specify a comma-separated list of such properties. See below for more details.
2199
2200
2201
p. Note that all properties set in runtime.properties (see [[#Using the Offline Mode|#offlineMode]] ) will be set on all z2 processes regardless. If however properties may be set depending on some starting command line, it can be useful to have them propagated as is.
2202
2203
2204
p. By default, the following system properties will be propagated via the command line from the home process to the worker process by default:
2205
2206
2207
| Property| Meaning |
2208
| com.sun.management.config.file| JMX config file. Preferrably preserve. |
2209
| com.zfabrik.config| Name of config file. Defaults to runtime.properties. See [[#Important System Properties|#systemProps]] . |
2210
| java.util.logging.config.file| Default Java logging configuration. |
2211
| com.zfabrik.dev.local.workspace| Setting of the development repository defining where to check for “armed” modules. See also [[#Important System Properties|#systemProps]]  and in particular [[#Workspace development using the Dev Repository |#devRepo]] . |
2212
| com.zfabrik.dev.local.repo| (outdated) |
2213
| com.zfabrik.repo.mode| General repository access mode. If set to “relaxed”, repositories will attempt to work on previously cached resources in case of technical repository access failures during synchronization. If set to “strict” (which is the default), technical failures will lead to a failure in synchronization, even if local resources are available. This feature is useful for offline or bad connectivity situations.  |
2214
| java.library.path| See Java documentation. |
2215
| com.zfabrik.mode| For development mode. See [[#Important System Properties|#systemProps]]  |
2216
| com.zfabrik.proxy.auth
2217
https.proxyPort
2218
https.proxyHost
2219
http.proxyPort
2220
http.proxyHost
2221
proxyPort
2222
proxyHost
2223
proxyUser
2224
proxyPassword| Proxy configuration. See "https://redmine.z2-environment.net/projects/z2-environment/wiki/How_to_prox":https://redmine.z2-environment.net/projects/z2-environment/wiki/How_to_proxy_settings "y_settings":https://redmine.z2-environment.net/projects/z2-environment/wiki/How_to_proxy_settings . |
2225
2226
2227
2228
p. That is, the default value of *worker.inheritedSystemProperties* is:
2229
2230
2231
<pre><code class="bash">worker.inheritedSystemProperties=com.sun.management.config.file,\
2232
  com.zfabrik.config,\
2233
  java.util.logging.config.file,\
2234
  com.zfabrik.dev.local.workspace,\
2235
  com.zfabrik.dev.local.repo,\
2236
  com.zfabrik.repo.mode,\
2237
  com.zfabrik.proxy.auth,\
2238
  java.library.path,\
2239
  com.zfabrik.mode,\
2240
  https.proxyPort,\
2241
  https.proxyHost,\
2242
  http.proxyPort,\
2243
  http.proxyHost,\
2244
  proxyPort,\
2245
  proxyHost,\
2246
  proxyUser,\
2247
  proxyPassword</code></pre>
2248
2249
2250
h4. Special considerations when specifying VM options using blanks and quotes
2251
2252
2253
p. Virtual machine options specified using the component property *worker.process.vmOptions* or its OS specific variant will be parsed by Z2 and conveyed as command line arguments to the child process. In general, the specified command line will be broken up at blank characters (multiple in a sequence counting as one). 
2254
2255
2256
p. Special considerations apply when there is a need to define virtual machine options containing blanks or double quotes: Any text enclosed in double quotes will be treated as one “token” when breaking up command line options. That is, in order to supply an option that contains blanks, put it in double quotes. 
2257
2258
2259
p. *For example*
2260
2261
2262
<pre><code class="bash">worker.process.vmOptions=-Dprop1=A -Dprop2=it works</code></pre>
2263
2264
2265
p. will lead to system properties prop1=”A” and prop2=”it” and some probably problematic option “works”. In order to achieve the desired prop2=”it works”, use 
2266
2267
2268
<pre><code class="bash">worker.process.vmOptions=-Dprop1=A “-Dprop2=it works”</code></pre>
2269
2270
2271
p. Finally, if you need to convey double quotes in VM options, use the backslash (“\”) escape to escape quotes. The latter  works in quoted text only.
2272
2273
2274
p. For example
2275
2276
2277
<pre><code class="bash">worker.process.vmOptions=-Dprop1=A “-Dprop2=it \”works\””</code></pre>
2278
2279
2280
p. will lead to prop2='it “works”' (using ' as string delimiter for clarity).  Or, more extremely
2281
2282
2283
<pre><code class="bash">worker.process.vmOptions=-Dprop1=A “-Dprop2=\””</code></pre>
2284
2285
2286
p. will result in prop2='”'.
2287
2288
2289
2290
h2. Securing z2 for Production Use
2291
2292
2293
h3. Securing Access to Ports
2294
2295
2296
p. By default the z2-base.base distribution is configured to load a number of Web Applications and has, depending on how it is started, accessible debug ports (5000, 5100+x, 5200+x) as well as JMX ports and by default, HTTP access is available on port 8080.
2297
2298
2299
p. However, the Java Virtual Machine may open additional ports and many other applications on the execution environment may do so as well.
2300
2301
2302
p. It is hence important to use a firewall configuration on the execution node, or on the entry gateway to a Virtual LAN setup to make sure that access from any non-controlled infrastructure is only possible to a limited number of ports.
2303
2304
2305
p. We recommend to only make HTTP access (by default port 8080) and SSH (by default port 22) available for remote access.
2306
2307
2308
p. We recommend to use SSH tunneling for all non-application management or debugging access.
2309
2310
2311
p. If you need to provide HTTPS access and want to terminate the SSL connection on the execution environment where you run the application on z2, we recommend to use a Web server like the Apache2 Web Server or NGINX as intermediate reverse proxy for your application. There is excellent documentation and examples available on the internet.
2312
2313
2314
h3. Non-Localhost-Whitelisting
2315
2316
2317
p. Apart from limiting access to ports, you should carefully configure what Web Applications are available for remote access. 
2318
2319
2320
p. While opening port 8080 for remote access would theoretically grant access to all Web applications running on z2 from any client that can reach the execution environment, starting with Version 2.9, the Jetty configuration used with z2-base will prohibit the actual processing of Web request from anywhere but localhost.
2321
2322
2323
p. To enforce that, the configuration of z2-base registers a "handler" with Jetty that filters access from remote clients by a list of regular expressions that must match the requested URL path in order to pass.
2324
2325
2326
p. In order change that, you can either disable the Non-Localhost-Whitelisting by commenting the inclusion of the configuration *z2-nonlocalhostwhitelist.xml** in **environment.base/webServer/z.properties** or **by **update the configuration to include paths for your Web applications.*
2327
2328
2329
p. For example, assuming you have Web applications using the context paths /abc and /def as well as an application on "/" that redirects to one of the others, your configuration might look like this:
2330
2331
2332
2333
<pre><code class="xml"><?xml version="1.0"?>
2334
<!DOCTYPE Configure PUBLIC "-//Jetty//Configure//EN" "https://www.eclipse.org/jetty/configure_10_0.dtd">
2335
<Configure id="Server" class="org.eclipse.jetty.server.Server">
2336
  <Call name="insertHandler">
2337
  <Arg>
2338
  <New id="NonLocalhostWhitelist" class="com.zfabrik.servletjsp.security.NonLocalhostWhitelist">
2339
  <Set name="patterns">
2340
  <Array type="String">
2341
  <Item>^/abc($|/.*)</Item>
2342
  <Item>^/def($|/.*)</Item>
2343
  <Item>^/$</Item>
2344
  </Array>
2345
  </Set>
2346
  </New>
2347
  </Arg>
2348
  </Call>
2349
</Configure></code></pre>
2350
2351
2352
2353
p. See also "How to secure a Z2 installation":https://redmine.z2-environment.net/projects/z2-environment/wiki/How_to_secure_a_Z2_installation .