[tor-bugs] #24174 [Metrics/ExoneraTor]: Use an embedded Jetty in ExoneraTor

[Tor Bug Tracker & Wiki]

#24174: Use an embedded Jetty in ExoneraTor
--------------------------------+--------------------------------
 Reporter:  iwakeh              |          Owner:  iwakeh
     Type:  enhancement         |         Status:  needs_revision
 Priority:  Medium              |      Milestone:
Component:  Metrics/ExoneraTor  |        Version:
 Severity:  Normal              |     Resolution:
 Keywords:  metrics-2017        |  Actual Points:
Parent ID:                      |         Points:
 Reviewer:                      |        Sponsor:
--------------------------------+--------------------------------

Comment (by iwakeh):

 Replying to [comment:14 karsten]:
 > Looks good and works locally!

 Good, I assume all db access works fine now.

 > Some comments/questions:
 >  - Can we use `metrics` and `password` as defaults in
 `src/main/resources/jetty.xml`? That should be as simple as writing
 `<SystemProperty name="exonerator.db.user" default="metrics"/ >` and
 `<SystemProperty name="exonerator.db.pw" default="password"/ >`. Just in
 case somebody uses those defaults locally for testing, that is.

 That means, you want your private test environment configuration in
 development code ;-)

 I don't feel strongly about it.  Add them, if you like.  Just be aware
 that people looking at the code might think they discovered Tor's secret
 db credentials ;-)
 But, actually, this is part of a bigger discussion cf. my comment to
 #24041 about 'unifying deployment configuration'.  Let's rather continue
 the configuration discussion there.

 >
 >  - Is there a particular reason why you suggest bumping to 2.0.0 and not
 1.1.0? For the Java 8 update we also made a minor version bump. Nothing
 backward-incompatible going on here, right?

 Isn't it a major change to move away from external tomcat?  The deployment
 changes completely.


 >
 >  - Out of curiousity, what's the full command line that you're using to
 start the JAR and the WAR file? Mine is pretty long, and I'm curious
 whether that's just for me or for everyone. Maybe we can start thinking
 about configuration libraries (#24041) after this ticket?

 Deployment example:
 `java -Dexonerator.db.user=secretuser -Dexonerator.db.pw=secret -jar
 exonerator-1.0.0-dev.war`

 Test w/o db:
 `java -Dexonerator.url=http://127.0.0.1:8080 -jar exonerator-dummy-
 test.war`

 I did comment on #24041 and I'm not in favor of long command lines (they
 are better than hard-coded parameters), but that's a different ticket.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24174#comment:15>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online