sscaling / docker-jmx-prometheus-exporter Goto Github PK

Following are the details of the critical CVE that has been flagged by our scanner

Image , ID
sscaling/jmx-prometheus-exporter:latest , 0b3f298035c96bdd

CVE , Package , Version ,Severity,Status ,CVSS
CVE-2019-14697 , musl , 1.1.19-r10 , critical , fixed in 1.1.19-r11 , 9.8
CVE-2019-2699 , java , 1.8.0_202 , critical , , 9
CVE-2019-2697 , java , 1.8.0_202 , high , , 8.1
CVE-2019-2698 , java , 1.8.0_202 , high , , 8.1
CVE-2019-2602 , java , 1.8.0_202 , high , , 7.5
CVE-2019-15847 , gcc , 6.4.0-r9 , high , , 7.5
CVE-2018-12886 , gcc , 6.4.0-r9 , high , fixed in 8.3.0-r0 , 8.1
CVE-2018-20679 , busybox , 1.28.4-r3 , high , fixed in 1.30.1-r2 , 7.5
CVE-2019-5747 , busybox , 1.28.4-r3 , high , fixed in 1.30.1-r2 , 7.5
CVE-2019-5482 , curl , 7.61.1-r2 , high , fixed in 7.61.1-r3 , 7.5
CVE-2019-5481 , curl , 7.61.1-r2 high , fixed in 7.61.1-r3 , 7.5

Hi,
I would like to notice you that your documentation on dockerhub : https://hub.docker.com/r/sscaling/jmx-prometheus-exporter/ is not up to date with the github documentation ( still refering the image as sscaling/jmx-exporter instead of sscaling/jmx-prometheus-exporter )
Regards.

Oracle JDK requires commercial license, so we should switch to openjdk as per the guidance from the current anapsix/alpine-java base image

https://hub.docker.com/r/anapsix/alpine-java/

JMX is connecting, but the metrics are not spitting any output. Switching back to 0.3.1 resolves this issue. There's no log output to stdout, so I can't give much more info here.

Hi there!

First thanks a lot for the exporter. I have a question. Is there somewhere a piece of documentation which maps the /metrics to the provided units?

E.g. does java_lang_MemoryPool_Usage_used deliver bytes or kilobytes?

Or can you update the Readme.md to point to a sample grafana dashboard, where everything is set right to start over with it?

THX in advance
Stefan

Hello,

FYI, I have created a dockerized version of jmx-exporter starting from your original skeleton.
https://github.com/eedugon/jmx-exporter-dockerized

I have added some features like dynamic configuration from environment variables provided when creating the docker.

Regards!
Eduardo