Inspiring

Answered

CF2025 Installation Failure

Forum|Forum|8 months ago
August 1, 2025
2 replies
1056 views

I have had a nightmare trying for two weeks to get CF2025 installed on a brand new linux server. I spent 2.5 hours on a call with CFSupport and they could not help me, and in fact made it worse.

This has been the worst experience, and I do not think I could ever recommend ColdFusion to anyone despite having used it for nearly 30 years.

I don't know where to turn since Adobe themseslves were not able to get it successfully intalled and working as it should be.

I guess I am posting out of sheer frustration and shock at how hard this has been. Also, the documentation for linux installation is absolutely terrible and still has references to older versions and inaccuracies and ommitted steps.

I don't know why the ColdFusion team does not care about making installation something that acheivable without knowing lots of obscure and arcane settings. There are too many moving parts without any clear documenation or trouble shooting guides that are helpful.

If my entrie codebase was not in ColdFusion, I woud have given up days ago. I am stuck and don't know where to turn. Has anyone else been having the same problems?

Correct answer TwoEdge

Yes, it has been a nightmare with no documentation. The thing is I wped the server and installed Ubuntu on it. I followed everything and it still won't work. The CF Admin panel won't let me in - it keeps saying it's running the wizard and then shows me the login screen over and over. It's not a password error becuase when I purposely try to use an incorrect password, it gives me an error. In this case, no error in the browser, it

Quote from above where i said I switched to Ubuntu and what the problem is that I am currentlly trying to solve. It must have gotten lost in the mix. In any case, I still can't update coldfusion from the CFAdmin Panel. I just can't figure out what is not working. It seems like it's the "check.cfm" page is returing a "success" but nothing else to the browser. And it's not stopping ColdFusion to do the update.

It's just been one issue after the other.

I did a manual install of the updated detailed here: https://helpx.adobe.com/coldfusion/kb/coldfusion-2025-update-1.html

The manual install worked, and then hotfix 2 was able to be initiated from the CFAdmin panel.

So now I have to test, but I think I am finally fully installed.

BKBK

Community Expert

Hi @TwoEdge , Sorry to hear about the difficulties you're facing during installation of ColdFusion 2025 on Linux. Let's hope that this discussion will help you solve the problems.

My suggestion focuses on your choice of Operating System. To be fair, you cannot lay too much blame on CF Support. As their ColdFusion 2025 Support Matrix documentation clearly says, the supported Linux versions are:

RHEL 9.5 and later
Ubuntu 24 LTS
SUSE 15.5 and later

Firstly, do you have the correct Ubuntu version? Ensure you do before installing ColdFusion 2025.

Secondly, you say you use SELinux and Ubuntu. As Dave has said, correctly, "That's your problem right there."

SELinux is mostly meant for Red Hat. SELinux and Ubuntu are not a good fit. As far as I know, Ubuntu does not ship with SELinux policies for its packages like Red Hat does. So applications on Ubuntu won’t have SELinux contexts defined. This can lead to denials, breakages, or degraded functionality. Granted, SELinux is a powerful option for Ubuntu if you need extremely high, mission-critical security. But you will then have to invest the time to learn how to configure and debug it, as that can be hard to do.

In short, leaving ColdFusion aside, it is quite complex to integrate SELinux with Ubuntu. Debugging SELinux issues can be very complex. Hence, instead of SELinux, you should use AppArmor, which is simpler and fully supported.

TwoEdgeAuthor

Inspiring

You did not read correctly. I appreciate any help, but please read the whole thread. I *switiched* to Ubuntu. Ubuntu does NOT have SELinux. I'm not sure where you got that I was trying to integrate SELinux with Ubuntu. I am running far away from it.

I got it intalled and running for virtual hosts, but now I can't update it (run a hotfix) from the CF Admin panel. It will not stop the coldfusion instance.

Also many of the install scripts did not configure to use the sysinit script which is needed for permissons and a few other things. They instead were using a "coldfusion". Notably, the installation instructions are horrendous. Also, I spent 2.5 hours on the phone with CFSupport. The *first* thing I asked CFSupport was should I switch to Ubuntu or stick with what I had. They opted to work with what I had. After that session, I decided on the switch.

Rocky Linux runs the exact same binaries as REHL. REHL has SELinux. So if they support REHL then there should be at least a mention of SELinux on the install page for Linux. There is not.

I have been using ColdFusion for 25 years, but for all the advancments made in so many aspects of it, the installation process has always been a nightmare, and it has not improved. If this was still 2005, I would understand. By comparison, on the exact same machine, I installed Node, and had test single page app with routes and database connectivity up and serving in literally less than ten minutes. I probably typed less than 10 commands into the terminal to do so.

I love developing with ColdFusion but the experince of actually installing and maintaining the server is so confusing that you need often need arcane knowledge. For me at least, it leads to a lot of wasted time and emotional energy.

BKBK

Community Expert

Please reread your text yourself. You will see that you suggested that you had errors with SELinux. Then, without specifying any other Operating System, you mentioned Ubuntu. It's only now you mention Rocky Linux / RHEL. Can you see how this could confuse a reader?

w49369461

Participating Frequently

Can you provide some details about the actual issue? What doesnt work, errors, whats been tried etc etc

TwoEdgeAuthor

Inspiring

Mod_jk.so throws a segmenation fault. I can not get it to work with Apache and Virtual Hosts. JKMount does not seems to forward the the proper path info to the server, so it won't look for files in the virtual hosts only in cfusion/wwwroot. In general, there were tons of permssions errors dealing with SELinux context issues. It's unclear how to run it as the runtime user, or what user has to own what files. I spent 2.5 hours on a call with CFSupport and he gave up. It was very frustrating.

Charlie Arehart

Community Expert

Yes, it has been a nightmare with no documentation. The thing is I wped the server and installed Ubuntu on it. I followed everything and it still won't work. The CF Admin panel won't let me in - it keeps saying it's running the wizard and then shows me the login screen over and over. It's not a password error becuase when I purposely try to use an incorrect password, it gives me an error. In this case, no error in the browser, it just won't work. I am getting these errors now:

more coldfusion-error.log
Aug 02, 2025 2:33:15 AM sun.util.locale.provider.LocaleProviderAdapter <clinit>
WARNING: COMPAT locale provider will be removed in a future release
Aug 02, 2025 2:33:15 AM org.apache.catalina.core.AprLifecycleListener lifecycleEvent
INFO: The Apache Tomcat Native library which allows using OpenSSL was not found on the java.library.path: [/opt/ColdFusion/cfusion/bin/../lib:/opt/ColdFusion/cfusion/bin/../lib/_linux6
4:/opt/ColdFusion/cfusion/bin/../lib::/usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib]
Aug 02, 2025 2:33:16 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["http-nio-8500"]
Aug 02, 2025 2:33:16 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["ajp-nio-127.0.0.1-8124"]
Aug 02, 2025 2:33:16 AM org.apache.catalina.core.StandardService startInternal
INFO: Starting service [Catalina]
Aug 02, 2025 2:33:16 AM org.apache.catalina.core.StandardEngine startInternal
INFO: Starting Servlet engine: [Apache Tomcat/10.1.34]
Aug 02, 2025 2:33:16 AM org.apache.jasper.servlet.TldScanner scanJars
INFO: At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Sk
ipping unneeded JARs during scanning can improve startup time and JSP compilation time.
Aug 02, 2025 2:33:21 AM org.apache.catalina.util.SessionIdGeneratorBase createSecureRandom
WARNING: Creation of SecureRandom instance for session ID generation using [SHA1PRNG] took [5,009] milliseconds.
Aug 02, 2025 2:33:21 AM org.apache.catalina.core.ApplicationContext log
INFO: ColdFusionStartUpServlet: ColdFusion: Starting application services
Aug 02, 2025 2:33:21 AM org.apache.catalina.core.ApplicationContext log
INFO: ColdFusionStartUpServlet: ColdFusion: VM version = 21.0.6+8-LTS-188
Aug 02, 2025 2:33:30 AM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["http-nio-8500"]
Aug 02, 2025 2:33:30 AM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["ajp-nio-127.0.0.1-8124"]
Aug 02, 2025 2:33:30 AM com.adobe.coldfusion.launcher.Launcher run
INFO: Server startup in 15385 ms
Aug 02, 2025 2:41:25 AM org.apache.catalina.core.StandardServer await
WARNING: Invalid shutdown command [] received
Aug 02, 2025 2:41:25 AM org.apache.catalina.core.StandardServer await
INFO: A valid shutdown command was received via the shutdown port. Stopping the Server instance.
Aug 02, 2025 2:41:25 AM org.apache.coyote.AbstractProtocol pause
INFO: Pausing ProtocolHandler ["http-nio-8500"]
Aug 02, 2025 2:41:25 AM org.apache.coyote.AbstractProtocol pause
INFO: Pausing ProtocolHandler ["ajp-nio-127.0.0.1-8124"]
Aug 02, 2025 2:41:25 AM org.apache.catalina.core.StandardService stopInternal
INFO: Stopping service [Catalina]
Aug 02, 2025 2:41:25 AM org.apache.coyote.AbstractProtocol stop
INFO: Stopping ProtocolHandler ["http-nio-8500"]
Aug 02, 2025 2:41:25 AM org.apache.coyote.AbstractProtocol stop
INFO: Stopping ProtocolHandler ["ajp-nio-127.0.0.1-8124"]
Aug 02, 2025 2:41:36 AM sun.util.locale.provider.LocaleProviderAdapter <clinit>
WARNING: COMPAT locale provider will be removed in a future release
Aug 02, 2025 2:41:36 AM org.apache.catalina.core.AprLifecycleListener lifecycleEvent
INFO: The Apache Tomcat Native library which allows using OpenSSL was not found on the java.library.path: [/opt/ColdFusion/cfusion/bin/../lib:/opt/ColdFusion/cfusion/bin/../lib/_linux6
4:/opt/ColdFusion/cfusion/bin/../lib::/usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib]
Aug 02, 2025 2:41:36 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["http-nio-8500"]
Aug 02, 2025 2:41:36 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["ajp-nio-127.0.0.1-8124"]
Aug 02, 2025 2:41:36 AM org.apache.catalina.core.StandardService startInternal
INFO: Starting service [Catalina]
Aug 02, 2025 2:41:36 AM org.apache.catalina.core.StandardEngine startInternal
INFO: Starting Servlet engine: [Apache Tomcat/10.1.34]
Aug 02, 2025 2:41:37 AM org.apache.jasper.servlet.TldScanner scanJars
INFO: At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Sk
ipping unneeded JARs during scanning can improve startup time and JSP compilation time.
Aug 02, 2025 2:41:42 AM org.apache.catalina.util.SessionIdGeneratorBase createSecureRandom
WARNING: Creation of SecureRandom instance for session ID generation using [SHA1PRNG] took [5,009] milliseconds.
Aug 02, 2025 2:41:42 AM org.apache.catalina.core.ApplicationContext log
INFO: ColdFusionStartUpServlet: ColdFusion: Starting application services
Aug 02, 2025 2:41:42 AM org.apache.catalina.core.ApplicationContext log
INFO: ColdFusionStartUpServlet: ColdFusion: VM version = 21.0.6+8-LTS-188
Aug 02, 2025 2:41:50 AM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["http-nio-8500"]
Aug 02, 2025 2:41:50 AM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["ajp-nio-127.0.0.1-8124"]
Aug 02, 2025 2:41:50 AM com.adobe.coldfusion.launcher.Launcher run
INFO: Server startup in 14479 ms
Aug 02, 2025 2:45:23 AM org.apache.catalina.core.StandardServer await
WARNING: Invalid shutdown command [] received
Aug 02, 2025 2:45:23 AM org.apache.catalina.core.StandardServer await
INFO: A valid shutdown command was received via the shutdown port. Stopping the Server instance.
Aug 02, 2025 2:45:23 AM org.apache.coyote.AbstractProtocol pause
INFO: Pausing ProtocolHandler ["http-nio-8500"]
Aug 02, 2025 2:45:23 AM org.apache.coyote.AbstractProtocol pause
INFO: Pausing ProtocolHandler ["ajp-nio-127.0.0.1-8124"]
Aug 02, 2025 2:45:23 AM org.apache.catalina.core.StandardService stopInternal
INFO: Stopping service [Catalina]
Aug 02, 2025 2:45:23 AM org.apache.catalina.loader.WebappClassLoaderBase checkThreadLocalMapForLeaks
SEVERE: The web application [ROOT] created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@7454aff4]) and a value of type [org.apache.xerces.jaxp.S
AXParserFactoryImpl] (value [org.apache.xerces.jaxp.SAXParserFactoryImpl@6258cb1d]) but failed to remove it when the web application was stopped. Threads are going to be renewed over t
ime to try and avoid a probable memory leak.
Aug 02, 2025 2:45:23 AM org.apache.catalina.loader.WebappClassLoaderBase checkThreadLocalMapForLeaks
SEVERE: The web application [ROOT] created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@5a3b066b]) and a value of type [org.apache.xerces.jaxp.S
AXParserImpl] (value [org.apache.xerces.jaxp.SAXParserImpl@20b6abf1]) but failed to remove it when the web application was stopped. Threads are going to be renewed over time to try and
avoid a probable memory leak.
Aug 02, 2025 2:45:23 AM org.apache.catalina.loader.WebappClassLoaderBase checkThreadLocalMapForLeaks
SEVERE: The web application [ROOT] created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@7454aff4]) and a value of type [org.apache.xerces.jaxp.S
AXParserFactoryImpl] (value [org.apache.xerces.jaxp.SAXParserFactoryImpl@71cc8b1c]) but failed to remove it when the web application was stopped. Threads are going to be renewed over t
ime to try and avoid a probable memory leak.
Aug 02, 2025 2:45:23 AM org.apache.catalina.loader.WebappClassLoaderBase checkThreadLocalMapForLeaks
SEVERE: The web application [ROOT] created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@5a3b066b]) and a value of type [org.apache.xerces.jaxp.S
AXParserImpl] (value [org.apache.xerces.jaxp.SAXParserImpl@5568a61b]) but failed to remove it when the web application was stopped. Threads are going to be renewed over time to try and
avoid a probable memory leak.
Aug 02, 2025 2:45:23 AM org.apache.catalina.loader.WebappClassLoaderBase checkThreadLocalMapForLeaks
SEVERE: The web application [ROOT] created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@7454aff4]) and a value of type [org.apache.xerces.jaxp.S
AXParserFactoryImpl] (value [org.apache.xerces.jaxp.SAXParserFactoryImpl@5762ea83]) but failed to remove it when the web application was stopped. Threads are going to be renewed over t
ime to try and avoid a probable memory leak.
Aug 02, 2025 2:45:23 AM org.apache.catalina.loader.WebappClassLoaderBase checkThreadLocalMapForLeaks
SEVERE: The web application [ROOT] created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@5a3b066b]) and a value of type [org.apache.xerces.jaxp.S
AXParserImpl] (value [org.apache.xerces.jaxp.SAXParserImpl@421e3abd]) but failed to remove it when the web application was stopped. Threads are going to be renewed over time to try and
avoid a probable memory leak.
Aug 02, 2025 2:45:23 AM org.apache.catalina.loader.WebappClassLoaderBase checkThreadLocalMapForLeaks
SEVERE: The web application [ROOT] created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@7454aff4]) and a value of type [org.apache.xerces.jaxp.S
AXParserFactoryImpl] (value [org.apache.xerces.jaxp.SAXParserFactoryImpl@4757e11f]) but failed to remove it when the web application was stopped. Threads are going to be renewed over t
ime to try and avoid a probable memory leak.
Aug 02, 2025 2:45:23 AM org.apache.catalina.loader.WebappClassLoaderBase checkThreadLocalMapForLeaks
SEVERE: The web application [ROOT] created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@5a3b066b]) and a value of type [org.apache.xerces.jaxp.S
AXParserImpl] (value [org.apache.xerces.jaxp.SAXParserImpl@7a13d84]) but failed to remove it when the web application was stopped. Threads are going to be renewed over time to try and
avoid a probable memory leak.
Aug 02, 2025 2:45:23 AM org.apache.coyote.AbstractProtocol stop
INFO: Stopping ProtocolHandler ["http-nio-8500"]
Aug 02, 2025 2:45:23 AM org.apache.coyote.AbstractProtocol stop
INFO: Stopping ProtocolHandler ["ajp-nio-127.0.0.1-8124"]
Aug 02, 2025 2:47:07 AM sun.util.locale.provider.LocaleProviderAdapter <clinit>
WARNING: COMPAT locale provider will be removed in a future release
Aug 02, 2025 2:47:07 AM org.apache.catalina.core.AprLifecycleListener lifecycleEvent
INFO: The Apache Tomcat Native library which allows using OpenSSL was not found on the java.library.path: [/opt/ColdFusion/cfusion/bin/../lib:/opt/ColdFusion/cfusion/bin/../lib/_linux6
4:/opt/ColdFusion/cfusion/bin/../lib::/usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib]
Aug 02, 2025 2:47:07 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["http-nio-8500"]
Aug 02, 2025 2:47:07 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["ajp-nio-127.0.0.1-8124"]
Aug 02, 2025 2:47:08 AM org.apache.catalina.core.StandardService startInternal
INFO: Starting service [Catalina]
Aug 02, 2025 2:47:08 AM org.apache.catalina.core.StandardEngine startInternal
INFO: Starting Servlet engine: [Apache Tomcat/10.1.34]
Aug 02, 2025 2:47:08 AM org.apache.jasper.servlet.TldScanner scanJars
INFO: At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Sk
ipping unneeded JARs during scanning can improve startup time and JSP compilation time.
Aug 02, 2025 2:47:13 AM org.apache.catalina.util.SessionIdGeneratorBase createSecureRandom
WARNING: Creation of SecureRandom instance for session ID generation using [SHA1PRNG] took [5,009] milliseconds.
Aug 02, 2025 2:47:13 AM org.apache.catalina.core.ApplicationContext log
INFO: ColdFusionStartUpServlet: ColdFusion: Starting application services
Aug 02, 2025 2:47:13 AM org.apache.catalina.core.ApplicationContext log
INFO: ColdFusionStartUpServlet: ColdFusion: VM version = 21.0.6+8-LTS-188
Aug 02, 2025 2:47:21 AM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["http-nio-8500"]
Aug 02, 2025 2:47:21 AM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["ajp-nio-127.0.0.1-8124"]
Aug 02, 2025 2:47:21 AM com.adobe.coldfusion.launcher.Launcher run
INFO: Server startup in 14557 ms

I think I may have your solution.

First, FWIW, that looks like a typical log of 3 startups and shutdowns. Nothing worrisome at all (not even the "memory leak" warnings, which are in fact commonly logged during most cf shutdowns and are generally nothing to be concerned about).

As for the first launch "not letting you in" to the cf admin, are you accessing it on port 8500 (which the log shows being listened on)? If instead you're trying to access the cf admin via an apache site, you can't. That capability was removed even in cf2023 and 2021 per updates a couple of years ago. Old hacks to force it to be permitted no longer work.

Another issue is that during install of cf you were asked what ip addresses should be allowed to access the cf admin. Did you leave it empty? That would limit it to 127.0.0.1 or ::1. If your linux is headless, you have a couple of rather simple choices:

Use ssh port forwarding/tunneling, if you're familiar. That could be configured to present "as if" you're coming in from 127.0.0.1
Or modify the xml entry in the neo*.xml file which holds that list of ips, and restart cf. (I'm writing from a phone so can't confirm the name or element.) If that list is empty, there's no ip limit (except your firewall, blocking such a non-standard port)

You COULD even just reinstall cf (since you just did it) but this time change the answer to that question (about the admin ip address list), putting in * and changing it later to be YOUR ip on the admin security>ip addresses page.

(If you do that's, here's a tip: use the cf admin's debugging > debugging ip address page to let it detect your current ip, rather than guess that you know it--which would again lock you out.

Sadly that feature to detect your ip is not offered on that admin security ip address page. I've just added a feature request for that, here. Votes appreciated.)

Let us know if this gets you going. If not, check out other cf logs when it hangs up and share key lines. (If more than a dozen, consider attaching a file instead.)

/Charlie (troubleshooter, carehart. org)

Sign up

To post, reply, or follow discussions, please sign in with your Adobe ID.

Sign in to Adobe Community

To post, reply, or follow discussions, please sign in with your Adobe ID.

Scanning file for viruses.

This file cannot be downloaded