Open Software Gateway initiative (OSGi) has been "hidden" for a long time and reserved to middleware such as IDE or application servers. However, OSGi can be applied in a lot of different contexts and applications. An OSGi application needs an environment to run. Apache Karaf is a lightweight, powerful, and enterprise-ready OSGi container where you can deploy your applications. On a production system, especially a mission-critical platform, it makes sense to be able to manage a set of Apache Karaf containers and to spread the deployment (or provisioning) of applications to these different instances.
In this chapter, we will cover the following topics:
What is OSGi and what are its key features?
The role of the OSGi framework
The OSGi base artifact—the OSGi bundle and the concept of dependencies between bundles
The Apache Karaf OSGi container and the provisioning of applications in the container
How to manage the provisioning on multiple Karaf instances?
Visibility: This feature specifies that a component should not use the implementation from another component directly. The implementation should be hidden, and the client module should use the interface provided by another component.
Agility: This feature specifies that the deployment of a new version of a component should not require you to restart the platform. Moreover, a configuration change should not require a restart. For instance, it's not acceptable to restart a production platform just to change a log level. A minor change such as a log level should be dynamic, and the platform should be agile enough to reload the components that should be reloaded.
Discovery: This feature states that a component should be able to discover other components. It's a kind of Plug and Play system: as soon as a component needs another component, it just looks for it and uses it.
The core concept is to force developers to use a very modular architecture in order to reduce complexity. As this paradigm is applicable for most modern systems, OSGi is now used for small embedded devices as well as for very large systems.
Different applications and systems use OSGi, for example, desktop applications, application servers, frameworks, embedded devices, and so on.
This framework manages the life cycle and the relationship between the different OSGi components and artifacts.
In OSGi, the components are packaged as OSGi bundles. An OSGi bundle is a simple Java JAR (Java ARchive) file that contains additional metadata used by the OSGi framework. These metadata are stored in the manifest file of the JAR file.
The following is the metadata:
Manifest-Version: 1.0 Bundle-ManifestVersion: 2 Bundle-Version: 2.1.6 Bundle-Name: My Logger Bundle-SymbolicName: my_logger Export-Package: org.my.osgi.logger;version=2.1 Import-Package: org.apache.log4j;version="[1.2,2)" Private-Package: org.my.osgi.logger.internal
As the OSGi headers are defined in the
META-INF/MANIFEST file contained in the JAR file, it means that an OSGi bundle is a regular JAR file that you can use outside of OSGi.
The life cycle layer of the OSGi framework is an API to install, start, stop, update, and uninstall OSGi bundles.
The first way is static code sharing. When we say that this bundle exports packages, it means a bundle can expose some code for other bundles. On the other hand, when we say that this bundle imports packages, it means a bundle can use code from other bundles.
For instance, we have the bundle
A (packaged as the
bundleA.jar file) with the following
Manifest-Version: 1.0 Bundle-ManifestVersion: 2 Bundle-Version: 1.0.0 Bundle-Name: Bundle A Bundle-SymbolicName: bundle_a Export-Package: com.bundle.a;version=1.0
We can see that the bundle
A exposes (exports) the
com.bundle.a package with Version 1.0. On the other hand, we have the bundle
B (packaged as the
bundleB.jar file) with the following
Manifest-Version: 1.0 Bundle-ManifestVersion: 2 Bundle-Version: 2.0.0 Bundle-Name: Bundle B Bundle-SymbolicName: bundle_b Import-Package: com.bundle.a;version="[1.0,2)"
We can see that the bundle
B imports (so, it will use) the
com.bundle.a package in any version between 1.0 and 2 (excluded). So, this means that the OSGi framework will wire the bundles, as the bundle
A provides the package used by the bundle
B (so, the constraint is resolved).
This mechanism is similar to regular Java applications, but instead of embedding the required JAR files in your application, you can just declare the expected code. The OSGi framework is responsible for the link between the different bundles; it's done by the modules layer of the OSGi framework. This approach is interesting when you want to use code which is not natively designed for OSGi. It's a step forward for the reuse of components. However, it provides a limited answer to the purposes seen earlier in the chapter, especially visibility and discovery.
The second way in which an OSGi bundle can use other bundles from the OSGi framework is more interesting. It uses Service-Oriented Architecture (SOA) for low-level components. Here, more than exposing the code, an OSGi bundle exposes a OSGi service. On the other hand, another bundle can use an OSGi service. The services layer of the OSGi framework provides a service registry and all the plumbing mechanisms to wire the services.
The OSGi services provide a very dynamic system, offering a Publish-Find-Bind model for the bundles.
It provides the abstraction of the OSGi framework. If you write an OSGi application, you have to package your application tightly coupled with the OSGi framework (such as the Apache Felix framework or Eclipse Equinox). Most of the time, you have to prepare the scripts, configuration files, and so on in order to provide a complete, ready-to-use application. Apache Karaf allows you to focus only on your application. Karaf, by default, provides the packaging (including scripts and so on), and it also abstracts the OSGi framework. Thanks to Karaf, it's very easy to switch from Apache Felix (the default framework in Karaf) to Eclipse Equinox.
Provides support for the OSGi Blueprint and Spring frameworks. Apache Karaf allows you to directly use Blueprint or Spring as the dependency framework in your bundles. In the new version of Karaf (starting from Karaf 3.0.1), it also supports new dependency frameworks (such as DS, CDI, and so on).
Apache Karaf provides a complete, Unix-like shell console where you have a lot of commands available to manage and monitor your running container. This shell console works on any system supporting Java and provides a complete Unix-like environment, including completion, contextual help, key bindings, and more. You can access the shell console using SSH. Apache Karaf also provides a complete management layer (using JMX) that is remotely accessible, which means you can perform the same actions as you do using the shell commands with several MBeans.
In addition to the default root Apache Karaf container, for convenience, Apache Karaf allows you to manage multiple container instances. Apache Karaf provides dedicated commands and MBeans to create the instances, control the instances, and so on.
Logging is a key layer for any kind of software container. Apache Karaf provides a powerful and very dynamic logging system powered by Pax Logging. In your OSGi application, you are not coupled to a specific logging framework; you can use the framework of your choice (slf4j, log4j, logback, commons-logging, and so on). Apache Karaf uses a central configuration file irrespective of the logging frameworks in use. All changes in this configuration file are made on the fly; no need to restart anything. Again, Apache Karaf provides commands and MBeans dedicated to log management (changing the log level, direct display of the log in the shell console, and so on).
Hot deployment is also an interesting feature provided by Apache Karaf. By default, the container monitors a deploy folder periodically. When a new file is dropped in the deploy folder, Apache Karaf checks the file type and delegates the deployment logic for this file to a deployer. Apache Karaf provides different deployers by default (spring, blueprint, features, war, and so on).
If Java Authentication and Authorization Service (JAAS) is the Java implementation of Pluggable Authentication Modules (PAM), it's not very OSGi compliant by default. Apache Karaf leverages JAAS, exposing realm and login modules as OSGi services. Again, Apache Karaf provides dedicated JAAS shell commands and MBeans. The security framework is very flexible, allowing you to define the chain of login modules that you want for authentication. By default, Apache Karaf uses a
etc/users.propertiesfile for storage. The security framework also provides support for password encryption (you just have to enable encryption in the
etc/org.apache.karaf.jaas.cfgconfiguration file). The new Apache Karaf version (3.0.0) also provides a complete Role Based Access Control (RBAC) system, allowing you to configure the users who can run commands, call MBeans, and so on.
Apache Karaf is an enterprise-ready container and provides features dedicated to enterprise. The following enterprise features are not installed by default (to minimize the size and footprint of the container by default), but a simple command allows you to extend the container with enterprise functionalities:
Java Naming and Directory Interface (JNDI) adds naming context support in Apache Karaf. You can bind an OSGi service to a JNDI name and look up these services using the name, thanks to Aries and Xbean naming.
Java Persistence API (JPA) allows you to add a persistence adapter (exposed as an OSGi service) in Apache Karaf, thanks to Aries JPA. Ready-to-use persistence engines can also be installed very easily (especially Apache OpenJPA and Hibernate).
Java Database Connectivity (JDBC) or Java Message Service (JMS) are convenient features, allowing you to easily create JDBC DataSources or JMS ConnectionFactories and use them directly in the shell console.
If you can completely administrate Apache Karaf using the shell commands and the JMX MBeans, you can also install Web Console. This Web Console uses the Felix Web Console and allows you to manage Karaf with a simple browser.
Thanks to these features, Apache Karaf is a complete, rich, and enterprise-ready container. We can consider Apache Karaf as an OSGi application server.
OSGi bundle management
Provisioning using Karaf Features
As we learned earlier, the default artifact in OSGi is the bundle. Again, it's a regular JAR file with additional OSGi metadata in the
MANIFEST file. The bundles are directly managed by the OSGi framework, but for convenience, Apache Karaf wraps the usage of bundles in specific commands and MBeans.
A bundle has a specific life cycle. Especially when you install a bundle, the OSGi framework tries to resolve all the dependencies required by your bundle to promote it in a resolved state. The following is the life cycle of a bundle:
The OSGi framework checks whether other bundles provide the packages imported by your bundle. The equivalent action for the OSGi services is performed when you start your bundle. It means that a bundle may require a lot of other bundles to start and so on for the transitive bundles.
Moreover, a bundle may require configuration to work. Apache Karaf proposes a very convenient way to manage the configurations. The
etc folder is periodically monitored to discover new configuration files and load the corresponding configurations. On the other hand, you have dedicated shell commands and MBeans to manage configurations (and configuration files). If a bundle requires a configuration to work, you first have to create a configuration file in the
etc folder (with the expected filename) or use the
config:* shell command or ConfigMBean to create the configuration.
The deployment of an OSGi application is called provisioning as it gathers the following:
The installation of a set of bundles, including transitive bundles
The installation of a set of configurations required by these bundles
OSGi Bundle Repository (OBR) can be the first option to be considered in order to solve this problem. Apache Karaf can connect to the OBR server. The OBR server stores all the metadata for all the bundles, which includes the capabilities, packages, and services provided by a bundle and the requirements, packages, and services needed by a bundle. When you install a bundle via OBR, the OBR server checks the requirement of the installed bundle and finds the bundles that provide the capabilities matching the requirements. The OBR server can automatically install the bundles required for the first one.
Karaf Features describes an application, declaring the following aspects:
The bundles in the application
Other Karaf features required by the application
Configurations required by the application
A Karaf Feature repository is a simple XML file describing a set of Karaf features. A Karaf Feature repository looks like the following:
<features name="my-features"> <feature name="core-feature" version="1.0"> <bundle>mvn:bundleA_groupId/bundleA_artifactId/bundleA_version</bundle> <bundle>file:/path/to/bundleB</bundle> <bundle>http://path/to/bundleC</bundle> </feature> <feature name="extend-feature" version="1.0"> <feature version="[1,2)">core-feature</feature> <bundle>mvn:bundleD_groupId/bundleD_artifactId/bundleD_version</bundle> <config name="my.configuration.pid"> key1=value1 key2=value2 </config> </feature> <feature name="other-feature" version="1.1"> <feature version="[1,2)">core-feature</feature> <bundle>mvn:bundleE_groupId/bundleE_artifactId/bundleE_version</bundle> <configfile finalname="/etc/my.configuration.cfg"> http://path/to/file/my.cfg </configfile> </feature> </features>
A file URL allows you to install a bundle or a configuration file located in the local filesystem.
An HTTP URL allows you to download and install a bundle or a configuration file located on an HTTP server.
An Mvn URL allows you to directly use Maven repositories. The URL uses the Maven information (
groupId/artifactId/version/classifier/type) and converts this URL to an HTTP URL relative to different repositories (described in
This gives us a very flexible way to get the artifacts required for the application. The artifacts can be local or remote, on a pure HTTP server or on a Maven repository manager (such as Apache Archiva, Nexus, or even Maven Central).
The core-feature feature installs bundle
B, and bundle
Cusing different protocols: local filesystem for bundle
A, downloading from an HTTP server for bundle
B, and using Maven for bundle
C(from a Maven repository).
The extend-feature feature requires core-feature. This means that if core-feature is not already installed, Apache Karaf will install it first. Once core-feature is installed, bundle
Dwill be installed (and started) from a Maven repository. This feature also creates a configuration with the
my.configuration.pidID and populates this configuration with the key-value pairs directly defined in the element.
The other-feature feature also requires core-feature (as for extend-feature, core-feature will be installed if it's not already the case). Bundle
Ewill be installed and started using Maven (from a Maven repository). The other-feature feature will also create a configuration, but this time using a base configuration file installed in the
etcfolder of Apache Karaf. The configuration file is downloaded using one URL supported by Apache Karaf (in this example, an HTTP URL is used).
Thanks to Karaf Features, provisioning is pretty easy and straightforward.
The first action consists of registering the Karaf Features repository in the container using the
features:addurl shell command (or the corresponding operation on FeaturesMBean). Once done, you can see the list of Karaf features available using the
To install an OSGi application, just install the corresponding Karaf feature with
Natively, Apache Karaf provides a high availability mechanism based on a locking system. It's a master-slaves configuration, following an active/passive pattern. Apache Karaf supports two kinds of locks, which are as follows:
Lock on the filesystem
Lock on a database (JDBC)
When the first Apache Karaf instance starts, if the lock is available, the instance acquires the lock and becomes the master.
If another instance starts, as the lock is not available (held by the master), the instance is in standby (slave) mode and periodically checks the lock.
When you use a lock on a filesystem, all instances have to share the same filesystem. The lock is a simple file. If the Apache Karaf instances are located on different machines, it means that the filesystem storing the lock has to be available for all machines (using NFS, CIFS, SAN, and so on).
In order to enable the filesystem locking system, you have to update the
etc/system.properties configuration file as follows:
karaf.lock=true karaf.lock.class=org.apache.karaf.main.SimpleFileLock karaf.lock.dir=/path/to/lockfile karaf.lock.delay=10
When a shared filesystem is not an option (for security or infrastructure reasons, for instance), you can use a database to store the lock. With database locking, Apache Karaf uses a lock on a table (the
KARAF_LOCK table by default). Any database that supports JDBC can be used.
The configuration is also defined in the
etc/system.properties configuration file as follows:
karaf.lock=true karaf.lock.class=org.apache.karaf.main.DefaultJDBCLock karaf.lock.level=50 karaf.lock.delay=10 karaf.lock.jdbc.url=jdbc:derby://dbserver:1527/sample karaf.lock.jdbc.driver=org.apache.derby.jdbc.ClientDriver karaf.lock.jdbc.user=user karaf.lock.jdbc.password=password karaf.lock.jdbc.table=KARAF_LOCK karaf.lock.jdbc.clustername=karaf karaf.lock.jdbc.timeout=30
You have to copy the JDBC driver JAR file into the
lib/ext folder. Apache Karaf provides the JDBC lock implementation dedicated to some specific databases (
DefaultJDBCLock is the generic one,
OracleJDBCLock for Oracle databases,
DerbyJDBCLock for Derby databases,
MySQLJDBCLock for MySQL databases,
PostgreSQLJDBCLock for PostgreSQL databases, and
SQLServerJDBCLock for Microsoft SQLServer databases).
In order to provide both high availability and performance scalability, having multiple active Apache Karaf instances is a great advantage.
Imagine you have a farm of Apache Karaf containers, each on a different machine. If you want to provision an OSGi application on the container instances, you have to connect on each container and install the features.
This means that you have to perform the following tasks:
Log on on each container in order to perform the same action again and again
Eventually, adapt the configuration depending on each local instance (port number, file path, and so on)
Add new instances, which will require the same action again
Basically, this means a lot of human actions with a potential risk of error. This is where a provisioning cluster helps.
The purpose of a provisioning cluster is to keep multiple container instances synchronized. For Apache Karaf, it means that a change in the status of a resource will be broadcasted to all the containers' members of the same cluster.
A resource can be a bundle, feature, configuration, or any kind of resource local to a node. This means that local actions will send an event to update the other members of the cluster.
On the other hand, it's also possible to create a cluster event that is sent to all the members to update them.
Creates event: This event can be created due to a local change or by hand
Broadcasts event: This event is sent to the members of the cluster
If provisioning is the first purpose of a provisioning cluster, it doesn't mean that it can't provide additional features useful in a cluster topology. For instance, centralized logs, load balancers, session replication, and so on are interesting features that can be provided on top of a provisioning cluster. In the next chapters, we will see Karaf Cellar as a provisioning cluster solution.
In this chapter, we reviewed the goals of OSGi and some core components (bundles, manifests, and so on). We also quickly introduced the Apache Karaf OSGi container, describing the different provided features. Finally, we dealt with the different ways to use multiple Apache Karaf instances altogether: an active/passive way (failover) or active/active way (provisioning cluster).
The next chapter will introduce the Apache Karaf Cellar provisioning cluster.