Skip to content

Conversation

@cdrini
Copy link
Collaborator

@cdrini cdrini commented Aug 25, 2025

Closes #11168

Technical

  • In 9.8, they deprecated the <lib> option from solrconfig.xml for security in favour of explicitly recognized modules via eg SOLR_MODULES environment variable. See https://solr.apache.org/guide/solr/latest/upgrade-notes/major-changes-in-solr-9.html#solr-9-8
  • Also note now that solr is part of our normal deploy flow, it would be quite a problem to have the compose.yaml change go out onto our prod solr! That container isn't for it. So I took just the solr service out by tagging it with the profile ol-never.

Testing

Locally seems to work as per usual

Screenshot

Stakeholders

cdrini added 2 commits August 25, 2025 21:06
In 9.8, they deprecated the <lib> option from solrconfig.xml for security in favour of explicitly recognized modules via eg SOLR_MODULES environment variable.

See https://solr.apache.org/guide/solr/latest/upgrade-notes/major-changes-in-solr-9.html#solr-9-8
@Copilot Copilot AI review requested due to automatic review settings August 25, 2025 19:18
@github-actions github-actions bot added the Priority: 2 Important, as time permits. [managed] label Aug 25, 2025
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

Updates Apache Solr from version 9.5.0 to 9.9.0 to address security improvements introduced in Solr 9.8, which deprecated the <lib> configuration option in favor of explicit module declaration through environment variables.

  • Upgraded Solr image version across all compose files
  • Replaced deprecated <lib> directives with SOLR_MODULES environment variable
  • Temporarily disabled Solr service in production compose to prevent unintended deployment

Reviewed Changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File Description
scripts/solr_builder/compose.yaml Updated Solr image version and added SOLR_MODULES environment variable
conf/solr/conf/solrconfig.xml Commented out deprecated <lib> directives for analysis-extras module
compose.yaml Updated Solr image version and added SOLR_MODULES environment variable
compose.production.yaml Disabled Solr service with "ol-never" profile to prevent production deployment

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.


solr:
profiles: ["ol-solr0"]
# Disabled while we're updating our version of solr, otherwise it'll pull down the new image!
Copy link

Copilot AI Aug 25, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The comment suggests this is a temporary change, but there's no indication of when or how this will be reverted. Consider adding a TODO comment with specific conditions for re-enabling the service or create a follow-up issue to track this.

Suggested change
# Disabled while we're updating our version of solr, otherwise it'll pull down the new image!
# Disabled while we're updating our version of solr, otherwise it'll pull down the new image!
# TODO: Re-enable this service after the Solr version upgrade is complete and the new image is verified to work in production.

Copilot uses AI. Check for mistakes.

@mekarpeles mekarpeles merged commit 100f061 into internetarchive:master Aug 25, 2025
4 checks passed
@cdrini cdrini deleted the 11168/refactor/update-solr branch September 15, 2025 16:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Priority: 2 Important, as time permits. [managed]

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update to latest solr

2 participants