Sonarqube scan action (Github) v4.0.0 - Failed to extract archive

SonarQube Server / Community Build
1

Failure when testing the version 4.0.0 of sonarqube-scan-action on GitHub self-hosted runners

Using SonarQube Enterprise Edition v10.6

NoSuchFileException: /home/runner/.sonar/cache/bcb1b7b8ad68c93093f09b591b7cb17161d39891f7d29d33a586f5a328603707/jre6284578682694846135/jdk-17.0.11+9-jre/lib/server/classes.jsa

16:59:06.658 INFO  SonarScanner CLI 6.2.1.4610
16:59:06.663 INFO  Java 17.0.12 Eclipse Adoptium (64-bit)
16:59:06.664 INFO  Linux 5.15.0-1068-azure amd64
16:59:06.792 INFO  User cache: /home/runner/.sonar/cache
16:59:08.887 INFO  JRE provisioning: os[linux], arch[x86_64]
16:59:12.623 INFO  EXECUTION FAILURE
16:59:12.631 INFO  Total time: 6.042s
16:59:12.631 ERROR Error during SonarScanner CLI execution
java.lang.IllegalStateException: Failed to extract archive
	at org.sonarsource.scanner.lib.internal.JavaRunnerFactory.extractArchive(JavaRunnerFactory.java:200)
	at org.sonarsource.scanner.lib.internal.JavaRunnerFactory.getJreFromServer(JavaRunnerFactory.java:145)
	at org.sonarsource.scanner.lib.internal.JavaRunnerFactory.createRunner(JavaRunnerFactory.java:85)
	at org.sonarsource.scanner.lib.internal.ScannerEngineLauncherFactory.createLauncher(ScannerEngineLauncherFactory.java:53)
	at org.sonarsource.scanner.lib.ScannerEngineBootstrapper.bootstrap(ScannerEngineBootstrapper.java:123)
	at org.sonarsource.scanner.cli.Main.analyze(Main.java:75)
	at org.sonarsource.scanner.cli.Main.main(Main.java:63)
Caused by: java.nio.file.NoSuchFileException: /home/runner/.sonar/cache/bcb1b7b8ad68c93093f09b591b7cb17161d39891f7d29d33a586f5a328603707/jre6284578682694846135/jdk-17.0.11+9-jre/lib/server/classes.jsa
	at java.base/sun.nio.fs.UnixException.translateToIOException(Unknown Source)
	at java.base/sun.nio.fs.UnixException.rethrowAsIOException(Unknown Source)
	at java.base/sun.nio.fs.UnixException.rethrowAsIOException(Unknown Source)
	at java.base/sun.nio.fs.UnixFileSystemProvider.newByteChannel(Unknown Source)
	at java.base/java.nio.file.spi.FileSystemProvider.newOutputStream(Unknown Source)
	at java.base/java.nio.file.Files.newOutputStream(Unknown Source)
	at java.base/java.nio.file.Files.copy(Unknown Source)
	at org.sonarsource.scanner.lib.internal.util.CompressionUtils.extractTarGz(CompressionUtils.java:146)
	at org.sonarsource.scanner.lib.internal.JavaRunnerFactory.extract(JavaRunnerFactory.java:234)
	at org.sonarsource.scanner.lib.internal.JavaRunnerFactory.extractArchive(JavaRunnerFactory.java:193)
	... 6 common frames omitted
4

Hi, this looks to be the same issue as reported here and here

The problem is we are not able to reproduce and understand the issue.

@philithethrill99 Is there anything special with your self-hosted runner? Do you have an anti-virus or any anti-malware software that would wrongly detect jdk-17.0.11+9-jre/lib/server/classes.jsa and quarantine it? From experience, most issues happening when unzipping archives are caused by third-party security tools.

5

I created a ticket to track the investigation’s progress, but any information or reproducer is welcome since I have no idea of the root cause for now.

6

@philithethrill99 any chance you could connect to your self-hosted runner, and verify the checksum of the downloaded JRE:

$ sha256sum /home/runner/.sonar/cache/bcb1b7b8ad68c93093f09b591b7cb17161d39891f7d29d33a586f5a328603707/OpenJDK17U-jre_x64_linux_hotspot_17.0.11_9.tar.gz
bcb1b7b8ad68c93093f09b591b7cb17161d39891f7d29d33a586f5a328603707  /home/julien.henry/.sonar/cache/bcb1b7b8ad68c93093f09b591b7cb17161d39891f7d29d33a586f5a328603707/OpenJDK17U-jre_x64_linux_hotspot_17.0.11_9.tar.gz
7

We are using Dynatrace OneAgent on our self-hosted runners, I’m suspecting this causing the issue.

8 
$ ls -l
total 34096
-rw-r--r-- 1 runner runner        0 Nov 27 14:35 classes.jsa
-r--r--r-- 1 runner runner 10899456 Nov 27 14:35 classes_nocoops.jsa
-rw-r--r-- 1 runner runner    16560 Nov 27 14:35 libjsig.so
-rw-r--r-- 1 runner runner 23992808 Nov 27 14:35 libjvm.so
$ cat classes.jsa
$ pwd
/home/runner/.sonar/cache/bcb1b7b8ad68c93093f09b591b7cb17161d39891f7d29d33a586f5a328603707/jre11373730550266553454/jdk-17.0.11+9-jre/lib/server
$ cd /home/runner/.sonar/cache/bcb1b7b8ad68c93093f09b591b7cb17161d39891f7d29d33a586f5a328603707
$ ls -l
total 45304
-rw-r--r-- 1 runner runner 46382823 Nov 27 14:35 OpenJDK17U-jre_x64_linux_hotspot_17.0.11_9.tar.gz
drwx------ 3 runner runner     4096 Nov 27 14:35 jre11373730550266553454
$ sha256sum OpenJDK17U-jre_x64_linux_hotspot_17.0.11_9.tar.gz
bcb1b7b8ad68c93093f09b591b7cb17161d39891f7d29d33a586f5a328603707  OpenJDK17U-jre_x64_linux_hotspot_17.0.11_9.tar.gz
9

I extracted the tar.gz file that was downloaded from the action and the classes.jsa file is NOT 0k

-rw-r--r-- 1 runner runner 46382823 Nov 27 18:38 OpenJDK17U-jre_x64_linux_hotspot_17.0.11_9.tar.gz
drwxr-xr-x 6 runner runner     4096 Apr 17  2024 jdk-17.0.11+9-jre
$ cd jdk-17.0.11+9-jre/lib/server
$ ls -l
total 45784
-r--r--r-- 1 runner runner 11968512 Apr 17  2024 classes.jsa
-r--r--r-- 1 runner runner 10899456 Apr 17  2024 classes_nocoops.jsa
-rw-r--r-- 1 runner runner    16560 Apr 17  2024 libjsig.so
-rw-r--r-- 1 runner runner 23992808 Apr 17  2024 libjvm.so
10

Indeed, it seems to be a common issue with Dynatrace (for example reported here). They mention the following workaround:

If the Dynatrace OneAgent is not required on the PAM client host, uninstall it.

If it is required, turning off ProcessAgent injection should resolve the problem:

766×215 52.9 KB

If you need the Dynatrace OneAgent and cannot turn off ProcessAgent injection, or turning it off does not resolve the problem for you, contact Dyntrace OneAgent Support to find a solution that works for you.

Would you be able to ask Dyntrace OneAgent Support? If there is anything we can change in our software to make things work out of the box, we would be happy to consider it, but for now, I assume this is a false positive created by this security tool.

12

I got here by googling. My company cleaned its its sonar database and we started clean.

I created a “global analysis token” which resulted in this:

10:03:56.611 ERROR Error during SonarScanner CLI execution
java.lang.IllegalStateException: Failed to extract archive
        at org.sonarsource.scanner.lib.internal.JavaRunnerFactory.extractArchive(JavaRunnerFactory.java:200)
        at org.sonarsource.scanner.lib.internal.JavaRunnerFactory.getJreFromServer(JavaRunnerFactory.java:145)
        at org.sonarsource.scanner.lib.internal.JavaRunnerFactory.createRunner(JavaRunnerFactory.java:85)
        at org.sonarsource.scanner.lib.internal.ScannerEngineLauncherFactory.createLauncher(ScannerEngineLauncherFactory.java:53)
        at org.sonarsource.scanner.lib.ScannerEngineBootstrapper.bootstrap(ScannerEngineBootstrapper.java:123)
        at org.sonarsource.scanner.cli.Main.analyze(Main.java:75)
        at org.sonarsource.scanner.cli.Main.main(Main.java:63)
Caused by: java.nio.file.AccessDeniedException: C:\Users\mobj\.sonar\cache\11a61a94d383e755b08b4e5890a13d148bc9f95b7149cbbeec62efb8c75a4a67\jre9576634627953445921 -> C:\Users\mobj\.sonar\cache\11a61a94d383e755b08b4e5890a13d148bc9f95b7149cbbeec62efb8c75a4a67\OpenJDK17U-jre_x64_windows_hotspot_17.0.13_11.zip_extracted

I replaced it with a user token and it all works fine again.

13

I just experienced the same issue with a fresh install of Sonarqube 6.0.1.5171 in a Docker container. Created a new local project and ran gradlew sonar with the parameters given on the admin page. In my case, creating and using a user token instead of a project analysis token did not resolve the issue.

Caused by: java.lang.IllegalStateException: Failed to extract archive
        at org.sonarsource.scanner.lib.internal.JavaRunnerFactory.extractArchive(JavaRunnerFactory.java:200)
        at org.sonarsource.scanner.lib.internal.JavaRunnerFactory.getJreFromServer(JavaRunnerFactory.java:145)
        at org.sonarsource.scanner.lib.internal.JavaRunnerFactory.createRunner(JavaRunnerFactory.java:85)
        at org.sonarsource.scanner.lib.internal.ScannerEngineLauncherFactory.createLauncher(ScannerEngineLauncherFactory.java:53)
        at org.sonarsource.scanner.lib.ScannerEngineBootstrapper.bootstrap(ScannerEngineBootstrapper.java:123)
        at org.sonarqube.gradle.SonarTask.run(SonarTask.java:131)
        ... 118 more
Caused by: java.nio.file.AccessDeniedException: C:\Users\USERNAME\.sonar\cache\11a61a94d383e755b08b4e5890a13d148bc9f95b7149cbbeec62efb8c75a4a67\jre5899555825780387383 -> C:\Users\USERNAME\.sonar\cache\11a61a94d383e755b08b4e5890a13d148bc9f95b7149cbbeec62efb8c75a4a67\OpenJDK17U-jre_x64_windows_hotspot_17.0.13_11.zip_extracted
        at org.sonarsource.scanner.lib.internal.JavaRunnerFactory.extractArchive(JavaRunnerFactory.java:194)

 Volume in drive C is Windows
 Volume Serial Number is D44F-398A

 Directory of C:\Users\USERNAME\.sonar\cache\11a61a94d383e755b08b4e5890a13d148bc9f95b7149cbbeec62efb8c75a4a67\jre5899555825780387383

02/03/2025  09:42 AM    <DIR>          .
02/03/2025  09:48 AM    <DIR>          ..
02/03/2025  09:42 AM    <DIR>          jdk-17.0.13+11-jre
               0 File(s)              0 bytes

It appears that it is trying to unzip a directory instead of a file, which is causing the AccessDeniedException: