/* * The MIT License * * Copyright (c) 2004-2010, Sun Microsystems, Inc., InfraDNA, Inc., CloudBees, Inc. * * Permission is hereby granted, free of charge, to any person obtaining a copy * of this software and associated documentation files (the "Software"), to deal * in the Software without restriction, including without limitation the rights * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell * copies of the Software, and to permit persons to whom the Software is * furnished to do so, subject to the following conditions: * * The above copyright notice and this permission notice shall be included in * all copies or substantial portions of the Software. * * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN * THE SOFTWARE. */ package hudson; import com.google.common.collect.ImmutableList; import com.google.common.collect.Iterables; import com.google.common.collect.Lists; import com.google.common.collect.Maps; import com.google.inject.AbstractModule; import com.google.inject.Binding; import com.google.inject.Guice; import com.google.inject.Injector; import com.google.inject.Key; import com.google.inject.Module; import com.google.inject.Provider; import com.google.inject.Scope; import com.google.inject.Scopes; import com.google.inject.matcher.Matchers; import com.google.inject.name.Names; import com.google.inject.spi.ProvisionListener; import hudson.init.InitMilestone; import hudson.model.Descriptor; import hudson.model.Hudson; import jenkins.ExtensionComponentSet; import jenkins.ExtensionFilter; import jenkins.ExtensionRefreshException; import jenkins.ProxyInjector; import jenkins.model.Jenkins; import net.java.sezpoz.Index; import net.java.sezpoz.IndexItem; import org.kohsuke.accmod.Restricted; import org.kohsuke.accmod.restrictions.NoExternalUse; import org.springframework.util.ClassUtils; import javax.annotation.PostConstruct; import java.lang.annotation.Annotation; import java.lang.reflect.AnnotatedElement; import java.lang.reflect.Field; import java.lang.reflect.Method; import java.util.ArrayList; import java.util.Arrays; import java.util.Collection; import java.util.Collections; import java.util.HashMap; import java.util.HashSet; import java.util.LinkedList; import java.util.List; import java.util.Map; import java.util.Map.Entry; import java.util.Set; import java.util.logging.Level; import java.util.logging.Logger; /** * Discovers the implementations of an extension point. * *

* This extension point allows you to write your implementations of {@link ExtensionPoint}s * in arbitrary DI containers, and have Hudson discover them. * *

* {@link ExtensionFinder} itself is an extension point, but to avoid infinite recursion, * Jenkins discovers {@link ExtensionFinder}s through {@link Sezpoz} and that alone. * * @author Kohsuke Kawaguchi * @since 1.286 * @see ExtensionFilter */ public abstract class ExtensionFinder implements ExtensionPoint { /** * @deprecated as of 1.356 * Use and implement {@link #find(Class,Hudson)} that allows us to put some metadata. */ @Restricted(NoExternalUse.class) @Deprecated public Collection findExtensions(Class type, Hudson hudson) { return Collections.emptyList(); } /** * Returns true if this extension finder supports the {@link #refresh()} operation. */ public boolean isRefreshable() { try { return getClass().getMethod("refresh").getDeclaringClass()!=ExtensionFinder.class; } catch (NoSuchMethodException e) { return false; } } /** * Rebuilds the internal index, if any, so that future {@link #find(Class, Hudson)} calls * will discover components newly added to {@link PluginManager#uberClassLoader}. * *

* The point of the refresh operation is not to disrupt instances of already loaded {@link ExtensionComponent}s, * and only instantiate those that are new. Otherwise this will break the singleton semantics of various * objects, such as {@link Descriptor}s. * *

* The behaviour is undefined if {@link #isRefreshable()} is returning false. * * @since 1.442 * @see #isRefreshable() * @return never null */ public abstract ExtensionComponentSet refresh() throws ExtensionRefreshException; /** * Discover extensions of the given type. * *

* This method is called only once per the given type after all the plugins are loaded, * so implementations need not worry about caching. * *

* This method should return all the known components at the time of the call, including * those that are discovered later via {@link #refresh()}, even though those components * are separately returned in {@link ExtensionComponentSet}. * * @param * The type of the extension points. This is not bound to {@link ExtensionPoint} because * of {@link Descriptor}, which by itself doesn't implement {@link ExtensionPoint} for * a historical reason. * @param jenkins * Jenkins whose behalf this extension finder is performing lookup. * @return * Can be empty but never null. * @since 1.356 * Older implementations provide {@link #findExtensions(Class,Hudson)} */ public abstract Collection> find(Class type, Hudson jenkins); @Deprecated public Collection> _find(Class type, Hudson hudson) { return find(type, hudson); } /** * Performs class initializations without creating instances. * * If two threads try to initialize classes in the opposite order, a dead lock will ensue, * and we can get into a similar situation with {@link ExtensionFinder}s. * *

* That is, one thread can try to list extensions, which results in {@link ExtensionFinder} * loading and initializing classes. This happens inside a context of a lock, so that * another thread that tries to list the same extensions don't end up creating different * extension instances. So this activity locks extension list first, then class initialization next. * *

* In the mean time, another thread can load and initialize a class, and that initialization * can eventually results in listing up extensions, for example through static initializer. * Such activity locks class initialization first, then locks extension list. * *

* This inconsistent locking order results in a dead lock, you see. * *

* So to reduce the likelihood, this method is called in prior to {@link #find(Class,Hudson)} invocation, * but from outside the lock. The implementation is expected to perform all the class initialization activities * from here. * *

* See https://bugs.openjdk.java.net/browse/JDK-4993813 for how to force a class initialization. * Also see http://kohsuke.org/2010/09/01/deadlock-that-you-cant-avoid/ for how class initialization * can results in a dead lock. */ public void scout(Class extensionType, Hudson hudson) { } @Extension public static final class DefaultGuiceExtensionAnnotation extends GuiceExtensionAnnotation { public DefaultGuiceExtensionAnnotation() { super(Extension.class); } @Override protected boolean isOptional(Extension annotation) { return annotation.optional(); } @Override protected double getOrdinal(Extension annotation) { return annotation.ordinal(); } @Override protected boolean isActive(AnnotatedElement e) { return true; } } /** * Captures information about the annotation that we use to mark Guice-instantiated components. */ public static abstract class GuiceExtensionAnnotation { public final Class annotationType; protected GuiceExtensionAnnotation(Class annotationType) { this.annotationType = annotationType; } protected abstract double getOrdinal(T annotation); /** * Hook to enable subtypes to control which ones to pick up and which ones to ignore. */ protected abstract boolean isActive(AnnotatedElement e); protected abstract boolean isOptional(T annotation); } /** * Discovers components via sezpoz but instantiates them by using Guice. */ @Extension public static class GuiceFinder extends ExtensionFinder { /** * Injector that we find components from. *

* To support refresh when Guice doesn't let us alter the bindings, we'll create * a child container to house newly discovered components. This field points to the * youngest such container. */ private volatile Injector container; /** * Sezpoz index we are currently using in {@link #container} (and its ancestors.) * Needed to compute delta. */ private List> sezpozIndex; private final Map annotations = new HashMap<>(); private final Sezpoz moduleFinder = new Sezpoz(); /** * Map from {@link GuiceExtensionAnnotation#annotationType} to {@link GuiceExtensionAnnotation} */ private Map,GuiceExtensionAnnotation> extensionAnnotations = Maps.newHashMap(); public GuiceFinder() { refreshExtensionAnnotations(); SezpozModule extensions = new SezpozModule(loadSezpozIndices(Jenkins.get().getPluginManager().uberClassLoader)); List modules = new ArrayList<>(); modules.add(new AbstractModule() { @Override protected void configure() { Jenkins j = Jenkins.get(); bind(Jenkins.class).toInstance(j); bind(PluginManager.class).toInstance(j.getPluginManager()); } }); modules.add(extensions); for (ExtensionComponent ec : moduleFinder.find(Module.class, Hudson.getInstance())) { modules.add(ec.getInstance()); } try { container = Guice.createInjector(modules); sezpozIndex = extensions.getLoadedIndex(); } catch (Throwable e) { LOGGER.log(Level.SEVERE, "Failed to create Guice container from all the plugins",e); // failing to load all bindings are disastrous, so recover by creating minimum that works // by just including the core container = Guice.createInjector(new SezpozModule(loadSezpozIndices(Jenkins.class.getClassLoader()))); } // expose Injector via lookup mechanism for interop with non-Guice clients Jenkins.get().lookup.set(Injector.class,new ProxyInjector() { protected Injector resolve() { return getContainer(); } }); } private void refreshExtensionAnnotations() { for (ExtensionComponent ec : moduleFinder.find(GuiceExtensionAnnotation.class, Hudson.getInstance())) { GuiceExtensionAnnotation gea = ec.getInstance(); extensionAnnotations.put(gea.annotationType,gea); } } private ImmutableList> loadSezpozIndices(ClassLoader classLoader) { List> indices = Lists.newArrayList(); for (GuiceExtensionAnnotation gea : extensionAnnotations.values()) { Iterables.addAll(indices, Index.load(gea.annotationType, Object.class, classLoader)); } return ImmutableList.copyOf(indices); } public Injector getContainer() { return container; } /** * The basic idea is: * *

*/ @Override public synchronized ExtensionComponentSet refresh() throws ExtensionRefreshException { refreshExtensionAnnotations(); // figure out newly discovered sezpoz components List> delta = Lists.newArrayList(); for (Class annotationType : extensionAnnotations.keySet()) { delta.addAll(Sezpoz.listDelta(annotationType,sezpozIndex)); } SezpozModule deltaExtensions = new SezpozModule(delta); List modules = new ArrayList<>(); modules.add(deltaExtensions); for (ExtensionComponent ec : moduleFinder.refresh().find(Module.class)) { modules.add(ec.getInstance()); } try { final Injector child = container.createChildInjector(modules); container = child; List> l = Lists.newArrayList(sezpozIndex); l.addAll(deltaExtensions.getLoadedIndex()); sezpozIndex = l; return new ExtensionComponentSet() { @Override public Collection> find(Class type) { List> result = new ArrayList<>(); _find(type, result, child); return result; } }; } catch (Throwable e) { LOGGER.log(Level.SEVERE, "Failed to create Guice container from newly added plugins",e); throw new ExtensionRefreshException(e); } } private Object instantiate(IndexItem item) { try { return item.instance(); } catch (LinkageError | Exception e) { // sometimes the instantiation fails in an indirect classloading failure, // which results in a LinkageError LOGGER.log(isOptional(item.annotation()) ? Level.FINE : Level.WARNING, "Failed to load "+item.className(), e); } return null; } private boolean isOptional(Annotation annotation) { GuiceExtensionAnnotation gea = extensionAnnotations.get(annotation.annotationType()); return gea.isOptional(annotation); } private boolean isActive(Annotation annotation, AnnotatedElement e) { GuiceExtensionAnnotation gea = extensionAnnotations.get(annotation.annotationType()); return gea.isActive(e); } public Collection> find(Class type, Hudson jenkins) { // the find method contract requires us to traverse all known components List> result = new ArrayList<>(); for (Injector i=container; i!=null; i=i.getParent()) { _find(type, result, i); } return result; } private void _find(Class type, List> result, Injector container) { for (Entry, Binding> e : container.getBindings().entrySet()) { if (type.isAssignableFrom(e.getKey().getTypeLiteral().getRawType())) { Annotation a = annotations.get(e.getKey()); Object o = e.getValue().getProvider().get(); if (o!=null) { GuiceExtensionAnnotation gea = a!=null ? extensionAnnotations.get(a.annotationType()) : null; result.add(new ExtensionComponent<>(type.cast(o), gea != null ? gea.getOrdinal(a) : 0)); } } } } /** * TODO: need to learn more about concurrent access to {@link Injector} and how it interacts * with classloading. */ @Override public void scout(Class extensionType, Hudson hudson) { } /** * {@link Scope} that allows a failure to create a component, * and change the value to null. * *

* This is necessary as a failure to load one plugin shouldn't fail the startup of the entire Jenkins. * Instead, we should just drop the failing plugins. */ public static final Scope FAULT_TOLERANT_SCOPE = new FaultTolerantScope(true); private static final Scope QUIET_FAULT_TOLERANT_SCOPE = new FaultTolerantScope(false); private static final class FaultTolerantScope implements Scope { private final boolean verbose; FaultTolerantScope(boolean verbose) { this.verbose = verbose; } public Provider scope(final Key key, final Provider unscoped) { final Provider base = Scopes.SINGLETON.scope(key,unscoped); return new Provider() { public T get() { try { return base.get(); } catch (Exception | LinkageError e) { error(key, e); return null; } } void error(Key key, Throwable x) { if (verbose) { LOGGER.log(Level.WARNING, "Failed to instantiate " + key + "; skipping this component", x); } else { LOGGER.log(Level.INFO, "Failed to instantiate optional component {0}; skipping", key.getTypeLiteral()); LOGGER.log(Level.FINE, key.toString(), x); } } }; } } private static final Logger LOGGER = Logger.getLogger(GuiceFinder.class.getName()); /** * {@link Module} that finds components via sezpoz index. * Instead of using SezPoz to instantiate, we'll instantiate them by using Guice, * so that we can take advantage of dependency injection. */ private class SezpozModule extends AbstractModule implements ProvisionListener { private final List> index; private final List> loadedIndex; public SezpozModule(List> index) { this.index = index; this.loadedIndex = new ArrayList<>(); } /** * Guice performs various reflection operations on the class to figure out the dependency graph, * and that process can cause additional classloading problems, which will fail the injector creation, * which in turn has disastrous effect on the startup. * *

* Ultimately I'd like to isolate problems to plugins and selectively disable them, allowing * Jenkins to start with plugins that work, but I haven't figured out how. * * So this is an attempt to detect subset of problems eagerly, by invoking various reflection * operations and try to find non-existent classes early. */ private void resolve(Class c) { resolve(c, new HashSet<>()); } private void resolve(Class c, Set> encountered) { if (!encountered.add(c)) { return; } try { ClassLoader ecl = c.getClassLoader(); if (ecl != null) { // Not bootstrap classloader Method m = ClassLoader.class.getDeclaredMethod("resolveClass", Class.class); m.setAccessible(true); m.invoke(ecl, c); } for (Class cc = c; cc != Object.class; cc = cc.getSuperclass()) { /** * See {@link com.google.inject.spi.InjectionPoint#getInjectionPoints(TypeLiteral, boolean, Errors)} */ cc.getGenericSuperclass(); cc.getGenericInterfaces(); cc.getDeclaredConstructors(); cc.getDeclaredMethods(); for (Field f : cc.getDeclaredFields()) { if (f.getAnnotation(javax.inject.Inject.class) != null || f.getAnnotation(com.google.inject.Inject.class) != null) { resolve(f.getType(), encountered); } } } LOGGER.log(Level.FINER, "{0} looks OK", c); } catch (Exception x) { throw (LinkageError)new LinkageError("Failed to resolve "+c).initCause(x); } } @SuppressWarnings({"unchecked", "ChainOfInstanceofChecks"}) @Override protected void configure() { bindListener(Matchers.any(), this); for (final IndexItem item : index) { boolean optional = isOptional(item.annotation()); try { AnnotatedElement e = item.element(); Annotation a = item.annotation(); if (!isActive(a,e)) continue; Scope scope = optional ? QUIET_FAULT_TOLERANT_SCOPE : FAULT_TOLERANT_SCOPE; if (e instanceof Class) { Key key = Key.get((Class)e); resolve((Class)e); annotations.put(key,a); bind(key).in(scope); } else { Class extType; if (e instanceof Field) { extType = ((Field)e).getType(); } else if (e instanceof Method) { extType = ((Method)e).getReturnType(); } else { throw new AssertionError(); } resolve(extType); // make unique key, because Guice wants that. Key key = Key.get(extType, Names.named(item.className() + "." + item.memberName())); annotations.put(key,a); bind(key).toProvider(new Provider() { public Object get() { return instantiate(item); } }).in(scope); } loadedIndex.add(item); } catch (Exception|LinkageError e) { // sometimes the instantiation fails in an indirect classloading failure, // which results in a LinkageError LOGGER.log(optional ? Level.FINE : Level.WARNING, "Failed to load "+item.className(), e); } } } public List> getLoadedIndex() { return Collections.unmodifiableList(loadedIndex); } @Override public void onProvision(ProvisionInvocation provision) { final T instance = provision.provision(); if (instance == null) return; List methods = new LinkedList<>(); Class c = instance.getClass(); // find PostConstruct methods in class hierarchy, the one from parent class being first in list // so that we invoke them before derived class one. This isn't specified in JSR-250 but implemented // this way in Spring and what most developers would expect to happen. final Set interfaces = ClassUtils.getAllInterfacesAsSet(instance); while (c != Object.class) { Arrays.stream(c.getDeclaredMethods()) .map(m -> getMethodAndInterfaceDeclarations(m, interfaces)) .flatMap(Collection::stream) .filter(m -> m.getAnnotation(PostConstruct.class) != null) .findFirst() .ifPresent(method -> methods.add(0, method)); c = c.getSuperclass(); } for (Method postConstruct : methods) { try { postConstruct.setAccessible(true); postConstruct.invoke(instance); } catch (final Exception e) { throw new RuntimeException(String.format("@PostConstruct %s", postConstruct), e); } } } } } /** * Returns initial {@link Method} as well as all matching ones found in interfaces. * This allows to introspect metadata for a method which is both declared in parent class and in implemented * interface(s). {@code interfaces} typically is obtained by {@link ClassUtils#getAllInterfacesAsSet} */ Collection getMethodAndInterfaceDeclarations(Method method, Collection interfaces) { final List methods = new ArrayList<>(); methods.add(method); // we search for matching method by iteration and comparison vs getMethod to avoid repeated NoSuchMethodException // being thrown, while interface typically only define a few set of methods to check. interfaces.stream() .map(Class::getMethods) .flatMap(Arrays::stream) .filter(m -> m.getName().equals(method.getName()) && Arrays.equals(m.getParameterTypes(), method.getParameterTypes())) .findFirst() .ifPresent(methods::add); return methods; } /** * The bootstrap implementation that looks for the {@link Extension} marker. * *

* Uses Sezpoz as the underlying mechanism. */ public static final class Sezpoz extends ExtensionFinder { private volatile List> indices; /** * Loads indices (ideally once but as few times as possible), then reuse them later. * {@link ExtensionList#ensureLoaded()} guarantees that this method won't be called until * {@link InitMilestone#PLUGINS_PREPARED} is attained, so this method is guaranteed to * see all the classes and indices. */ private List> getIndices() { // this method cannot be synchronized because of a dead lock possibility in the following order of events: // 1. thread X can start listing indices, locking this object 'SZ' // 2. thread Y starts loading a class, locking a classloader 'CL' // 3. thread X needs to load a class, now blocked on CL // 4. thread Y decides to load extensions, now blocked on SZ. // 5. dead lock if (indices==null) { ClassLoader cl = Jenkins.get().getPluginManager().uberClassLoader; indices = ImmutableList.copyOf(Index.load(Extension.class, Object.class, cl)); } return indices; } /** * {@inheritDoc} * *

* SezPoz implements value-equality of {@link IndexItem}, so */ @Override public synchronized ExtensionComponentSet refresh() { final List> old = indices; if (old==null) return ExtensionComponentSet.EMPTY; // we haven't loaded anything final List> delta = listDelta(Extension.class,old); List> r = Lists.newArrayList(old); r.addAll(delta); indices = ImmutableList.copyOf(r); return new ExtensionComponentSet() { @Override public Collection> find(Class type) { return _find(type,delta); } }; } static List> listDelta(Class annotationType, List> old) { // list up newly discovered components final List> delta = Lists.newArrayList(); ClassLoader cl = Jenkins.get().getPluginManager().uberClassLoader; for (IndexItem ii : Index.load(annotationType, Object.class, cl)) { if (!old.contains(ii)) { delta.add(ii); } } return delta; } public Collection> find(Class type, Hudson jenkins) { return _find(type,getIndices()); } /** * Finds all the matching {@link IndexItem}s that match the given type and instantiate them. */ private Collection> _find(Class type, List> indices) { List> result = new ArrayList<>(); for (IndexItem item : indices) { try { Class extType = getClassFromIndex(item); if(type.isAssignableFrom(extType)) { Object instance = item.instance(); if(instance!=null) result.add(new ExtensionComponent<>(type.cast(instance),item.annotation())); } } catch (LinkageError|Exception e) { // sometimes the instantiation fails in an indirect classloading failure, // which results in a LinkageError LOGGER.log(logLevel(item), "Failed to load "+item.className(), e); } } return result; } @Override public void scout(Class extensionType, Hudson hudson) { for (IndexItem item : getIndices()) { try { // we might end up having multiple threads concurrently calling into element(), // but we can't synchronize this --- if we do, the one thread that's supposed to load a class // can block while other threads wait for the entry into the element call(). // looking at the sezpoz code, it should be safe to do so Class extType = getClassFromIndex(item); // according to JDK-4993813 this is the only way to force class initialization Class.forName(extType.getName(),true,extType.getClassLoader()); } catch (Exception | LinkageError e) { LOGGER.log(logLevel(item), "Failed to scout "+item.className(), e); } } } private Level logLevel(IndexItem item) { return item.annotation().optional() ? Level.FINE : Level.WARNING; } } private static Class getClassFromIndex(IndexItem item) throws InstantiationException { AnnotatedElement e = item.element(); Class extType; if (e instanceof Class) { extType = (Class) e; } else if (e instanceof Field) { extType = ((Field) e).getType(); } else if (e instanceof Method) { extType = ((Method) e).getReturnType(); } else { throw new AssertionError(); } return extType; } private static final Logger LOGGER = Logger.getLogger(ExtensionFinder.class.getName()); }