Copy link to clipboard
Copied
I have had a nightmare trying for two weeks to get CF2025 installed on a brand new linux server. I spent 2.5 hours on a call with CFSupport and they could not help me, and in fact made it worse.
This has been the worst experience, and I do not think I could ever recommend ColdFusion to anyone despite having used it for nearly 30 years.
I don't know where to turn since Adobe themseslves were not able to get it successfully intalled and working as it should be.
I guess I am posting out of sheer frustration and shock at how hard this has been. Also, the documentation for linux installation is absolutely terrible and still has references to older versions and inaccuracies and ommitted steps.
I don't know why the ColdFusion team does not care about making installation something that acheivable without knowing lots of obscure and arcane settings. There are too many moving parts without any clear documenation or trouble shooting guides that are helpful.
If my entrie codebase was not in ColdFusion, I woud have given up days ago. I am stuck and don't know where to turn. Has anyone else been having the same problems?
I did a manual install of the updated detailed here: https://helpx.adobe.com/coldfusion/kb/coldfusion-2025-update-1.html
The manual install worked, and then hotfix 2 was able to be initiated from the CFAdmin panel.
So now I have to test, but I think I am finally fully installed.
Copy link to clipboard
Copied
Can you provide some details about the actual issue? What doesnt work, errors, whats been tried etc etc
Copy link to clipboard
Copied
Mod_jk.so throws a segmenation fault. I can not get it to work with Apache and Virtual Hosts. JKMount does not seems to forward the the proper path info to the server, so it won't look for files in the virtual hosts only in cfusion/wwwroot. In general, there were tons of permssions errors dealing with SELinux context issues. It's unclear how to run it as the runtime user, or what user has to own what files. I spent 2.5 hours on a call with CFSupport and he gave up. It was very frustrating.
Copy link to clipboard
Copied
SELinux
That's your problem right there.
More seriously, there just isn't much (any?) documentation about using CF 2025 with SELinux. I haven't had to do this since CF 9, I think. I doubt Adobe support will be especially helpful with this. Can you temporarily disable SELinux or at least set it to permissive mode?
Copy link to clipboard
Copied
Also, you might need to set some specific, undocumented Tomcat environment variables using JkEnvVar in mod_jk.conf. Unfortunately, I don't know what they'd be.
Copy link to clipboard
Copied
Yes, it has been a nightmare with no documentation. The thing is I wped the server and installed Ubuntu on it. I followed everything and it still won't work. The CF Admin panel won't let me in - it keeps saying it's running the wizard and then shows me the login screen over and over. It's not a password error becuase when I purposely try to use an incorrect password, it gives me an error. In this case, no error in the browser, it just won't work. I am getting these errors now:
more coldfusion-error.log
Aug 02, 2025 2:33:15 AM sun.util.locale.provider.LocaleProviderAdapter <clinit>
WARNING: COMPAT locale provider will be removed in a future release
Aug 02, 2025 2:33:15 AM org.apache.catalina.core.AprLifecycleListener lifecycleEvent
INFO: The Apache Tomcat Native library which allows using OpenSSL was not found on the java.library.path: [/opt/ColdFusion/cfusion/bin/../lib:/opt/ColdFusion/cfusion/bin/../lib/_linux6
4:/opt/ColdFusion/cfusion/bin/../lib::/usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib]
Aug 02, 2025 2:33:16 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["http-nio-8500"]
Aug 02, 2025 2:33:16 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["ajp-nio-127.0.0.1-8124"]
Aug 02, 2025 2:33:16 AM org.apache.catalina.core.StandardService startInternal
INFO: Starting service [Catalina]
Aug 02, 2025 2:33:16 AM org.apache.catalina.core.StandardEngine startInternal
INFO: Starting Servlet engine: [Apache Tomcat/10.1.34]
Aug 02, 2025 2:33:16 AM org.apache.jasper.servlet.TldScanner scanJars
INFO: At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Sk
ipping unneeded JARs during scanning can improve startup time and JSP compilation time.
Aug 02, 2025 2:33:21 AM org.apache.catalina.util.SessionIdGeneratorBase createSecureRandom
WARNING: Creation of SecureRandom instance for session ID generation using [SHA1PRNG] took [5,009] milliseconds.
Aug 02, 2025 2:33:21 AM org.apache.catalina.core.ApplicationContext log
INFO: ColdFusionStartUpServlet: ColdFusion: Starting application services
Aug 02, 2025 2:33:21 AM org.apache.catalina.core.ApplicationContext log
INFO: ColdFusionStartUpServlet: ColdFusion: VM version = 21.0.6+8-LTS-188
Aug 02, 2025 2:33:30 AM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["http-nio-8500"]
Aug 02, 2025 2:33:30 AM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["ajp-nio-127.0.0.1-8124"]
Aug 02, 2025 2:33:30 AM com.adobe.coldfusion.launcher.Launcher run
INFO: Server startup in 15385 ms
Aug 02, 2025 2:41:25 AM org.apache.catalina.core.StandardServer await
WARNING: Invalid shutdown command [] received
Aug 02, 2025 2:41:25 AM org.apache.catalina.core.StandardServer await
INFO: A valid shutdown command was received via the shutdown port. Stopping the Server instance.
Aug 02, 2025 2:41:25 AM org.apache.coyote.AbstractProtocol pause
INFO: Pausing ProtocolHandler ["http-nio-8500"]
Aug 02, 2025 2:41:25 AM org.apache.coyote.AbstractProtocol pause
INFO: Pausing ProtocolHandler ["ajp-nio-127.0.0.1-8124"]
Aug 02, 2025 2:41:25 AM org.apache.catalina.core.StandardService stopInternal
INFO: Stopping service [Catalina]
Aug 02, 2025 2:41:25 AM org.apache.coyote.AbstractProtocol stop
INFO: Stopping ProtocolHandler ["http-nio-8500"]
Aug 02, 2025 2:41:25 AM org.apache.coyote.AbstractProtocol stop
INFO: Stopping ProtocolHandler ["ajp-nio-127.0.0.1-8124"]
Aug 02, 2025 2:41:36 AM sun.util.locale.provider.LocaleProviderAdapter <clinit>
WARNING: COMPAT locale provider will be removed in a future release
Aug 02, 2025 2:41:36 AM org.apache.catalina.core.AprLifecycleListener lifecycleEvent
INFO: The Apache Tomcat Native library which allows using OpenSSL was not found on the java.library.path: [/opt/ColdFusion/cfusion/bin/../lib:/opt/ColdFusion/cfusion/bin/../lib/_linux6
4:/opt/ColdFusion/cfusion/bin/../lib::/usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib]
Aug 02, 2025 2:41:36 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["http-nio-8500"]
Aug 02, 2025 2:41:36 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["ajp-nio-127.0.0.1-8124"]
Aug 02, 2025 2:41:36 AM org.apache.catalina.core.StandardService startInternal
INFO: Starting service [Catalina]
Aug 02, 2025 2:41:36 AM org.apache.catalina.core.StandardEngine startInternal
INFO: Starting Servlet engine: [Apache Tomcat/10.1.34]
Aug 02, 2025 2:41:37 AM org.apache.jasper.servlet.TldScanner scanJars
INFO: At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Sk
ipping unneeded JARs during scanning can improve startup time and JSP compilation time.
Aug 02, 2025 2:41:42 AM org.apache.catalina.util.SessionIdGeneratorBase createSecureRandom
WARNING: Creation of SecureRandom instance for session ID generation using [SHA1PRNG] took [5,009] milliseconds.
Aug 02, 2025 2:41:42 AM org.apache.catalina.core.ApplicationContext log
INFO: ColdFusionStartUpServlet: ColdFusion: Starting application services
Aug 02, 2025 2:41:42 AM org.apache.catalina.core.ApplicationContext log
INFO: ColdFusionStartUpServlet: ColdFusion: VM version = 21.0.6+8-LTS-188
Aug 02, 2025 2:41:50 AM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["http-nio-8500"]
Aug 02, 2025 2:41:50 AM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["ajp-nio-127.0.0.1-8124"]
Aug 02, 2025 2:41:50 AM com.adobe.coldfusion.launcher.Launcher run
INFO: Server startup in 14479 ms
Aug 02, 2025 2:45:23 AM org.apache.catalina.core.StandardServer await
WARNING: Invalid shutdown command [] received
Aug 02, 2025 2:45:23 AM org.apache.catalina.core.StandardServer await
INFO: A valid shutdown command was received via the shutdown port. Stopping the Server instance.
Aug 02, 2025 2:45:23 AM org.apache.coyote.AbstractProtocol pause
INFO: Pausing ProtocolHandler ["http-nio-8500"]
Aug 02, 2025 2:45:23 AM org.apache.coyote.AbstractProtocol pause
INFO: Pausing ProtocolHandler ["ajp-nio-127.0.0.1-8124"]
Aug 02, 2025 2:45:23 AM org.apache.catalina.core.StandardService stopInternal
INFO: Stopping service [Catalina]
Aug 02, 2025 2:45:23 AM org.apache.catalina.loader.WebappClassLoaderBase checkThreadLocalMapForLeaks
SEVERE: The web application [ROOT] created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@7454aff4]) and a value of type [org.apache.xerces.jaxp.S
AXParserFactoryImpl] (value [org.apache.xerces.jaxp.SAXParserFactoryImpl@6258cb1d]) but failed to remove it when the web application was stopped. Threads are going to be renewed over t
ime to try and avoid a probable memory leak.
Aug 02, 2025 2:45:23 AM org.apache.catalina.loader.WebappClassLoaderBase checkThreadLocalMapForLeaks
SEVERE: The web application [ROOT] created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@5a3b066b]) and a value of type [org.apache.xerces.jaxp.S
AXParserImpl] (value [org.apache.xerces.jaxp.SAXParserImpl@20b6abf1]) but failed to remove it when the web application was stopped. Threads are going to be renewed over time to try and
avoid a probable memory leak.
Aug 02, 2025 2:45:23 AM org.apache.catalina.loader.WebappClassLoaderBase checkThreadLocalMapForLeaks
SEVERE: The web application [ROOT] created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@7454aff4]) and a value of type [org.apache.xerces.jaxp.S
AXParserFactoryImpl] (value [org.apache.xerces.jaxp.SAXParserFactoryImpl@71cc8b1c]) but failed to remove it when the web application was stopped. Threads are going to be renewed over t
ime to try and avoid a probable memory leak.
Aug 02, 2025 2:45:23 AM org.apache.catalina.loader.WebappClassLoaderBase checkThreadLocalMapForLeaks
SEVERE: The web application [ROOT] created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@5a3b066b]) and a value of type [org.apache.xerces.jaxp.S
AXParserImpl] (value [org.apache.xerces.jaxp.SAXParserImpl@5568a61b]) but failed to remove it when the web application was stopped. Threads are going to be renewed over time to try and
avoid a probable memory leak.
Aug 02, 2025 2:45:23 AM org.apache.catalina.loader.WebappClassLoaderBase checkThreadLocalMapForLeaks
SEVERE: The web application [ROOT] created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@7454aff4]) and a value of type [org.apache.xerces.jaxp.S
AXParserFactoryImpl] (value [org.apache.xerces.jaxp.SAXParserFactoryImpl@5762ea83]) but failed to remove it when the web application was stopped. Threads are going to be renewed over t
ime to try and avoid a probable memory leak.
Aug 02, 2025 2:45:23 AM org.apache.catalina.loader.WebappClassLoaderBase checkThreadLocalMapForLeaks
SEVERE: The web application [ROOT] created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@5a3b066b]) and a value of type [org.apache.xerces.jaxp.S
AXParserImpl] (value [org.apache.xerces.jaxp.SAXParserImpl@421e3abd]) but failed to remove it when the web application was stopped. Threads are going to be renewed over time to try and
avoid a probable memory leak.
Aug 02, 2025 2:45:23 AM org.apache.catalina.loader.WebappClassLoaderBase checkThreadLocalMapForLeaks
SEVERE: The web application [ROOT] created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@7454aff4]) and a value of type [org.apache.xerces.jaxp.S
AXParserFactoryImpl] (value [org.apache.xerces.jaxp.SAXParserFactoryImpl@4757e11f]) but failed to remove it when the web application was stopped. Threads are going to be renewed over t
ime to try and avoid a probable memory leak.
Aug 02, 2025 2:45:23 AM org.apache.catalina.loader.WebappClassLoaderBase checkThreadLocalMapForLeaks
SEVERE: The web application [ROOT] created a ThreadLocal with key of type [java.lang.ThreadLocal] (value [java.lang.ThreadLocal@5a3b066b]) and a value of type [org.apache.xerces.jaxp.S
AXParserImpl] (value [org.apache.xerces.jaxp.SAXParserImpl@7a13d84]) but failed to remove it when the web application was stopped. Threads are going to be renewed over time to try and
avoid a probable memory leak.
Aug 02, 2025 2:45:23 AM org.apache.coyote.AbstractProtocol stop
INFO: Stopping ProtocolHandler ["http-nio-8500"]
Aug 02, 2025 2:45:23 AM org.apache.coyote.AbstractProtocol stop
INFO: Stopping ProtocolHandler ["ajp-nio-127.0.0.1-8124"]
Aug 02, 2025 2:47:07 AM sun.util.locale.provider.LocaleProviderAdapter <clinit>
WARNING: COMPAT locale provider will be removed in a future release
Aug 02, 2025 2:47:07 AM org.apache.catalina.core.AprLifecycleListener lifecycleEvent
INFO: The Apache Tomcat Native library which allows using OpenSSL was not found on the java.library.path: [/opt/ColdFusion/cfusion/bin/../lib:/opt/ColdFusion/cfusion/bin/../lib/_linux6
4:/opt/ColdFusion/cfusion/bin/../lib::/usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib]
Aug 02, 2025 2:47:07 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["http-nio-8500"]
Aug 02, 2025 2:47:07 AM org.apache.coyote.AbstractProtocol init
INFO: Initializing ProtocolHandler ["ajp-nio-127.0.0.1-8124"]
Aug 02, 2025 2:47:08 AM org.apache.catalina.core.StandardService startInternal
INFO: Starting service [Catalina]
Aug 02, 2025 2:47:08 AM org.apache.catalina.core.StandardEngine startInternal
INFO: Starting Servlet engine: [Apache Tomcat/10.1.34]
Aug 02, 2025 2:47:08 AM org.apache.jasper.servlet.TldScanner scanJars
INFO: At least one JAR was scanned for TLDs yet contained no TLDs. Enable debug logging for this logger for a complete list of JARs that were scanned but no TLDs were found in them. Sk
ipping unneeded JARs during scanning can improve startup time and JSP compilation time.
Aug 02, 2025 2:47:13 AM org.apache.catalina.util.SessionIdGeneratorBase createSecureRandom
WARNING: Creation of SecureRandom instance for session ID generation using [SHA1PRNG] took [5,009] milliseconds.
Aug 02, 2025 2:47:13 AM org.apache.catalina.core.ApplicationContext log
INFO: ColdFusionStartUpServlet: ColdFusion: Starting application services
Aug 02, 2025 2:47:13 AM org.apache.catalina.core.ApplicationContext log
INFO: ColdFusionStartUpServlet: ColdFusion: VM version = 21.0.6+8-LTS-188
Aug 02, 2025 2:47:21 AM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["http-nio-8500"]
Aug 02, 2025 2:47:21 AM org.apache.coyote.AbstractProtocol start
INFO: Starting ProtocolHandler ["ajp-nio-127.0.0.1-8124"]
Aug 02, 2025 2:47:21 AM com.adobe.coldfusion.launcher.Launcher run
INFO: Server startup in 14557 ms
Copy link to clipboard
Copied
I think I may have your solution.
First, FWIW, that looks like a typical log of 3 startups and shutdowns. Nothing worrisome at all (not even the "memory leak" warnings, which are in fact commonly logged during most cf shutdowns and are generally nothing to be concerned about).
As for the first launch "not letting you in" to the cf admin, are you accessing it on port 8500 (which the log shows being listened on)? If instead you're trying to access the cf admin via an apache site, you can't. That capability was removed even in cf2023 and 2021 per updates a couple of years ago. Old hacks to force it to be permitted no longer work.
Another issue is that during install of cf you were asked what ip addresses should be allowed to access the cf admin. Did you leave it empty? That would limit it to 127.0.0.1 or ::1. If your linux is headless, you have a couple of rather simple choices:
You COULD even just reinstall cf (since you just did it) but this time change the answer to that question (about the admin ip address list), putting in * and changing it later to be YOUR ip on the admin security>ip addresses page.
(If you do that's, here's a tip: use the cf admin's debugging > debugging ip address page to let it detect your current ip, rather than guess that you know it--which would again lock you out.
Sadly that feature to detect your ip is not offered on that admin security ip address page. I've just added a feature request for that, here. Votes appreciated.)
Let us know if this gets you going. If not, check out other cf logs when it hangs up and share key lines. (If more than a dozen, consider attaching a file instead.)
Copy link to clipboard
Copied
Thanks for your help. I was able to figure out getting logged in eventually - part of it turned out to be cookies causing the issue. However, I am now running into the problem of not being able to install updates from the CFAdmin panel. I login and download ColdFusion (2025 release) Update 1. I can see the hotfix get saved, but when the Admin tries to stop ColdFusion, it just keeps refreshing until I get an error about it taking too long. I don't see any permissions issues or errors, so I'm not sure why it's not working. What script(s) does the CF Admin run when trying to install hotfixes?
Also, there is some bug in the linux installer - I can see it created a file in `/opt/ColdFusion/cfusion/bin` but tried to save it in a windows location in a Windows location so it has a windows path as a name (including the single quotes):
`'C:\Users\ADMINI~1\AppData\Local\Temp\Adobe\ColdFusion\logs\'`
. What is odd it that it's the exact same size as the `felix-cache`:
drwxrwxr-x 2 www-data www-data 4096 Aug 2 02:33 'C:\Users\ADMINI~1\AppData\Local\Temp\Adobe\ColdFusion\logs\'
drwxrwxr-x 6 www-data www-data 4096 Aug 2 02:33 felix-cache
Any thoughts on either of these issues?
Copy link to clipboard
Copied
It seems like it's asking the admin for a password to restart coldfusion. I have given the runtime user full sudo permissions to test, but still same issue.
I think I found part of my issues - ColdFusion is not using the sysinit script properly. The cfstart.sh and cfstop.sh are using a 'coldfusion' script and not 'sysinit' to stop and start. sysinit seems to handle the user switching. I am updated them to use sysinit but no luck. Still not stop the server from the CFAdmin panel for an update.
Copy link to clipboard
Copied
Hi @TwoEdge , Sorry to hear about the difficulties you're facing during installation of ColdFusion 2025 on Linux. Let's hope that this discussion will help you solve the problems.
My suggestion focuses on your choice of Operating System. To be fair, you cannot lay too much blame on CF Support. As their ColdFusion 2025 Support Matrix documentation clearly says, the supported Linux versions are:
Firstly, do you have the correct Ubuntu version? Ensure you do before installing ColdFusion 2025.
Secondly, you say you use SELinux and Ubuntu. As Dave has said, correctly, "That's your problem right there."
SELinux is mostly meant for Red Hat. SELinux and Ubuntu are not a good fit. As far as I know, Ubuntu does not ship with SELinux policies for its packages like Red Hat does. So applications on Ubuntu won’t have SELinux contexts defined. This can lead to denials, breakages, or degraded functionality. Granted, SELinux is a powerful option for Ubuntu if you need extremely high, mission-critical security. But you will then have to invest the time to learn how to configure and debug it, as that can be hard to do.
In short, leaving ColdFusion aside, it is quite complex to integrate SELinux with Ubuntu. Debugging SELinux issues can be very complex. Hence, instead of SELinux, you should use AppArmor, which is simpler and fully supported.
Copy link to clipboard
Copied
You did not read correctly. I appreciate any help, but please read the whole thread. I *switiched* to Ubuntu. Ubuntu does NOT have SELinux. I'm not sure where you got that I was trying to integrate SELinux with Ubuntu. I am running far away from it.
I got it intalled and running for virtual hosts, but now I can't update it (run a hotfix) from the CF Admin panel. It will not stop the coldfusion instance.
Also many of the install scripts did not configure to use the sysinit script which is needed for permissons and a few other things. They instead were using a "coldfusion". Notably, the installation instructions are horrendous. Also, I spent 2.5 hours on the phone with CFSupport. The *first* thing I asked CFSupport was should I switch to Ubuntu or stick with what I had. They opted to work with what I had. After that session, I decided on the switch.
Rocky Linux runs the exact same binaries as REHL. REHL has SELinux. So if they support REHL then there should be at least a mention of SELinux on the install page for Linux. There is not.
I have been using ColdFusion for 25 years, but for all the advancments made in so many aspects of it, the installation process has always been a nightmare, and it has not improved. If this was still 2005, I would understand. By comparison, on the exact same machine, I installed Node, and had test single page app with routes and database connectivity up and serving in literally less than ten minutes. I probably typed less than 10 commands into the terminal to do so.
I love developing with ColdFusion but the experince of actually installing and maintaining the server is so confusing that you need often need arcane knowledge. For me at least, it leads to a lot of wasted time and emotional energy.
Copy link to clipboard
Copied
Please reread your text yourself. You will see that you suggested that you had errors with SELinux. Then, without specifying any other Operating System, you mentioned Ubuntu. It's only now you mention Rocky Linux / RHEL. Can you see how this could confuse a reader?
Copy link to clipboard
Copied
Yes, it has been a nightmare with no documentation. The thing is I wped the server and installed Ubuntu on it. I followed everything and it still won't work. The CF Admin panel won't let me in - it keeps saying it's running the wizard and then shows me the login screen over and over. It's not a password error becuase when I purposely try to use an incorrect password, it gives me an error. In this case, no error in the browser, it
Quote from above where i said I switched to Ubuntu and what the problem is that I am currentlly trying to solve. It must have gotten lost in the mix. In any case, I still can't update coldfusion from the CFAdmin Panel. I just can't figure out what is not working. It seems like it's the "check.cfm" page is returing a "success" but nothing else to the browser. And it's not stopping ColdFusion to do the update.
It's just been one issue after the other.
Copy link to clipboard
Copied
I did a manual install of the updated detailed here: https://helpx.adobe.com/coldfusion/kb/coldfusion-2025-update-1.html
The manual install worked, and then hotfix 2 was able to be initiated from the CFAdmin panel.
So now I have to test, but I think I am finally fully installed.
Copy link to clipboard
Copied
Hi @TwoEdge , thanks for clarifying the question of your Operating System. Hats off to you for sticking it out and finally being able to install ColdFusion, despite all the setbacks. It speaks to your long experience.
Could you please share the details of your Operating System? That is:
Your experience will certainly benefit fellow developers who arrive here.
Find more inspiration, events, and resources on the new Adobe Community
Explore Now