Notes / Domino 

Building your own (Domino) containers? Don’t forget to prune Docker  

By Martijn de Jong | 5/29/26, 7:13 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

If you regularly build or pull images on a Docker host, disk usage can creep up quickly. Most people know that Docker (and Podman) keeps old images around unless you prune them. What’s less obvious is the build cache. When you build images, like the Domino container, Docker stores intermediate layers, so future builds can be faster. Even if you build with --no-cache (as the Domino build script does), Docker still writes layers to the build cache. They’re just not reused. Over time, that cache can grow significantly. In my case, it explained why my root disk was filling up: 25+ GB of build cache.

When a “Successful” Install… isn’t: A Domino on Linux Gotcha  

By Martijn de Jong | 4/27/26, 3:40 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

While preparing for my Linux Installfest session for Engage, I figured I’d better walk through the Domino installation steps myself, just to make sure everything worked as expected. That might sound routine, but here’s the catch: I almost never install Domino manually anymore. I usually rely on a script Daniel built, which saves a ton of time and effort. But for this session, the goal was to help participants understand what’s actually happening behind the scenes. So, back to basics it was, command line and all. That’s when things got interesting.

Standards are Standards until they are not  

By Stephan Wissel | 4/13/26, 8:10 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Standards are Standards until they are not - In my junior developer days, literally last century, a senior developer enlightened me: 'An open standard is only complete once its wording allows all participants to faithfully implement it to be absolutely incompatible to each other'. Ambiguity is king. Our modern software is build on a few standard, each of them have rock solid parts (nobody questions a <h1>) and parts of, let's call them disagreements. I'll pick on JWT as an example

Shortened Validity Periods for SSL/TLS Certificates  

By Manfred Dillmann | 3/22/26, 7:58 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

I would like to inform you about an important change that affects all web server operators and possibly your HCL Domino Servers: The maximum validity periods of SSL/TLS certificates will be drastically shortened in stages.

Domino IQ and external AI LLM – lesson learned   

By Rainer Brandl | 1/15/26, 8:44 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Yesterday I configured an existing Domino IQ environment to use an already existing Open AI environment from the customer running on Azure. During that I was a little bit surprised because I could not see any information in the Domino Console about the external AI LLM when running a "sh ta".

Log Filter v3 now available on OpenNTF  

By Patrick Kwinten | 11/18/25, 5:00 AM | Infrastructure - Notes / Domino | Added by Patrick Kwintensson

I have posted a new code-drop of Log Filter on OpenNTF. This code-drop contains all the code (and design design elements) that you need to copy into an instance of the log template provided by HCL. Besides general improvements and bug fixes I added support to use wild-cards in filter queries. You can setup categories,…

Quick LLM Access via 4 Lines of Code   

By Fredrik Norling | 11/13/25, 8:20 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

4 lines of code to call a LLM, with zero maintenance in the future with DominoIQ. Can you find any devtool that make it simpler to use LLM:s like OpenAI, Claude, Llama, Mistral code setup?

Domino server V14.x upgrade or update failed with error – unexpected operator on Ubuntu OS  

By Remco Angioni | 10/10/25, 5:11 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

When starting the upgrade or update, you notice the following errors: ./install grep: osystem: No such file or directory ./install: 199: [: !=: exexpected operator ./install: 44: [: /local/install/fp1/linux64/tools/-E: unexpected operator ./install: 51: [: /local/install/fp1/linux64/tools/-e: unexpected operator ./install: 57: [: /local/install/fp1/linux64/tools/-e: unexpected operator The Domino install script uses #!/bin/sh for the shell. Ubuntu uses bash.

Running HCL Notes/Admin/Designer seamless on Linux using WinBoat  

By Heiko Voigt | 10/6/25, 5:12 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

I have been searching for an easy-to-use solution to run HCL Notes/Admin/Designer on Linux for years. I am used to Parallels Desktop on the Mac and in search of something similar on Linux I seem to have found a solution using the OSS WinBoat

Problem after upgrading to HCL Domino V14.5 with ID Vault  

By Rainer Brandl | 9/8/25, 10:45 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

There´s a "bug" in the V14.5 with the option to authentication against the ID Vault because of the stronger default algorithm used by V14.5. The problem is described in an official KB article of HCL:https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0122915If you're in maintenance, you can create a case at HCL Support and will receive a fix for this issue.

HCL Nomad and TLS via CertMgr task  

By John Dalsgaard | 9/8/25, 10:36 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

So I had this idea to test out Nomad Web on a brand-new v.14.5 Domino server as an alternative to the normal Notes client - but it had to fit into the "normal" way I give access to our servers...

Connecting Domino IQ to External LLM Providers  

By Serdar Basegmez | 7/2/25, 4:37 PM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Step-by-step guide to connect Domino IQ with Ollama or OpenAI in Domino 14.5, including setup, config tips, and troubleshooting.

HCL Domino 14.5, Fix your iNotes Redirector for Verse  

By Keith Brooks | 7/2/25, 4:34 PM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

By now, if you have updated your Domino server and relied on iNotes, you have found that it no longer works. HCL was clear about this, and there is no workaround, so if you want iNotes and not Verse, better keep a server on 14.0 and point everyone there. For the rest of us that move forward with the times, we will have seen that logging into the iNotes URL gets you to a pop-up telling hat iNotes is no longer available, and you need to open HCL Verse. If you click on the link, it directs you straight to Verse. iNotes required the iNotes redirector. Well, there is no new redirector, but it did get renamed to Verse redirector(same template name), but it does include some options you probably hadn't considered, and this is how you resolve the problem. If you haven't changed any settings in a while, now is a great time to update them. The redirector has been updated periodically along the way. These are the ones to change or review:

Domino Container Environment Install Script  

By Daniel Nashed | 7/2/25, 4:31 PM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

It has been a round for a while. I am too lazy to do the same installations over and over again manually. In addition it helps me to get customer environments all setup in the same way. This script clones the Domino container project and Domino start script. It also installs Docker from the official repository along with the Domino download script and also the container control script. This is the fastest way to setup a container environment.

Engage 2025: Visualize Your Domino Data with Open Source Tools Session Slides and Databases  

By Richard Moy | 6/10/25, 1:53 PM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Thank you everyone for attending my Engage 2025 session, Visualizing your Domino Data using Open Source Tools. Though I was up against some formidable sessions, I was surprised to have close to 30 attendees in my session. As promised, here is the PowerPoint presentation and sample databases and code.

Engage session follow-up – Domino 14.5 AutoUpdate downloads  

By Daniel Nashed | 5/26/25, 8:48 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Thanks to everyone who attended my 8:00 AM session on Wednesday. One topic raised during the session deserves a closer look: how Domino AutoUpdate retrieves installation artifacts. To download product.jwt, software.jwt, and the Notes/Domino web kits, you need at least one server with outbound connectivity to My HCL Software portal (MHS) and the HCL Domino fixlist servers. Domino AutoUpdate a supports HTTP proxy configurations, including authenticated proxies, which should work in most enterprise network environments. All downloads are validated against the software.jwt, which includes signed metadata for all supported software packages. This model fits most connected environments. Completely air-gapped setups are uncommon, and to date, there haven’t been strong or clearly defined requirements for full offline AutoUpdate workflows. However, it’s still possible to override download URLs in AutoUpdate documents to manually provide software.jwt and web kits from internal sources.

Configure an addtional Notes port on a server  

By Daniel Nashed | 5/15/25, 6:48 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

The previous blog post was more dealing with the background about having a second Notes TCP/IP port. This post focuses to setup a new Notes port end to end using the DNUG Lab environment as an example. The server I am configuring has two separate IP addresses on two different network cards. But the same procedure would also work with IP addresses in the same network.

Benefits of running domino with multiple TCP/IP ports  

By Daniel Nashed | 5/15/25, 6:47 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Support for multiple TCP/IP ports has been part of HCL Domino since the early days. Back then, it was first essential to support multiple simultaneous modem connections. It also proved valuable for clustered servers using dedicated network cards. While today’s networks offer 1 Gbit/s or even 10 Gbit/s speeds—making multiple ports less necessary from a raw bandwidth perspective—there are still compelling reasons to use multiple Notes ports in modern environments.

Quick Tip: Domino container in your timezone  

By Oliver Busse | 4/17/25, 5:18 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Since I always forget about the timezone settings when spinning up Domino in a container, I just wanted to document it here for my own records. The key here is to provide an environment setting directly when issuing the run command. For me this would be the Central European timezone like so: docker run -d --name domdev -v /local/notesdata:/local/notesdata --hostname domdev.local --cap-add=SYS_PTRACE -e TZ=Europe/Berlin -p 1352:1352 -p 80:80 -p 443:443 domino-container:12.0.2FP6

Adding trusted roots to Domino containers  

By Daniel Nashed | 4/7/25, 4:03 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Linux and Domino comes with a good set of public trusted certs. But in corporate environment you often have to add your own trusted root for a corporate CA. This starts with Linux which needs certificates to validate repository servers and other resources. Domino trusted roots But also within Domino there are are trust stores which need might need central management. Domino Directory Trusted roots, certstore.nsf Trusted roots can be easily centrally updated. But the following two trust stores are more difficult to manage: /local/notesdata/cacert.pem used for HTTP Requests in Lotus Script and other backend code using curl Domino JVM trust store used by Java

What you should know about Domino "res" files on Linux and AIX  

By Daniel Nashed | 4/3/25, 4:56 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

res files actually come from Windows and are used to translate strings for UI and errors. Those res files are usually linked to the Windows binary. Linux and AIX also use "res" files in a res/ directory below the binary directory. The files are essential for a server. All the core code string resources are in strings.res. Most Domino native servertasks also use string resources.

Wolfi OS - Secure base layer for containers  

By Daniel Nashed | 4/3/25, 4:54 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

This project is pretty cool. It's a container only OS using the kernel from the host. But it has a couple of really interesting design goals. https://github.com/wolfi-dev/ They build container base images with the minimum number of packages and "CVE free" as much as possible. So their own containers for NGINX for example really only have NGINX and nothing around it -- not even a shell unless you install a :latest-dev container.

How to update Domino when running in a container?  

By Daniel Nashed | 4/3/25, 4:52 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Today I just updated my production environment to Domino 14.0 FP4. Let me show you how it works if you have everything setup.

Reducing the noise in the log   

By Patrick Kwinten | 2/20/25, 3:03 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Every Domino environment has got logs and probably it's not you who goes through the logs since it's a repetitive mind-numbing task. Here too, but sometimes the colleague who performs the task takes some days off and then it might be you who is responsible for doing it. So last week I was “screwed” and was searching for a quick solution to minimalize the mind-numbing without risking to overlook an important log-entry. Here is what I came up with:

How to add a trusted root to Linux  

By Daniel Nashed | 2/3/25, 2:57 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

I am still adding custom trusted root support to the Domino container project. You will be able to just specify a trusted root to add to the local Linux trust store. Like other low level functionality this works differently on different Linux flavors. Here is what I am adding for SUSE, for Debian/Ubuntu and basically all the other Redhat/RPM based systems (I rested Rocky, Alma & Co so far).

Data Access With XPages JEE  

By Jesse Gallagher | 1/17/25, 6:25 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Though one day I'd really like to sit down and work on expanding and categorizing the documentation for the XPages JEE project, in the mean time I can at least put together some scattered info in the form of blog posts, webinars, and example apps. Add this post to the pile! Some of it will be a rehash of previous posts, but it doesn't hurt to see it rephrased.

DBMT tool enhancements in Domino 14.5 EA2   

By Daniel Nashed | 1/7/25, 2:39 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

Sometimes small changes open many new possibilities. The following DBMT tool command line options are added to DBMT in Domino 14.5 EA2: -systemDbs (-sd for short) Allows compact to process system dbs, which are usually ignored), as well as databases listed in the dbmt_compact_filter.ind file. -regex (-re for short) Now a database name can be specified using regular expressions. If an .ind file is specified, the database names listed in the .ind file can be regular expressions. -validateDbs (-vd for short) Does not execute the updall or compacts, but outputs the list of databases that could be affected by the DBMT command (mainly to validate -regex inputs). Can be used in combination with -sd

Notes Timedate explained  

By Daniel Nashed | 1/7/25, 2:38 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

There have been a couple of partner blog posts speculating about the background of the recent Domino 13.12.2024 problem, which might be a bit misleading. For the background of what happened in detail and how HCL addressed the problem please wait for the official technote update. But what I can tell is that HCL fixed it on a lower level function addressing all functionality in Domino and business partner applications using the effected functionality. This means the only safe way is to apply the Interim fix provided by HCL for all supported releases including the extended support versions! What I also can state is that all Notes TIMEDATE functionality is working as intended and are designed to handle date times from 1.1.1 to the end of all times.

Domino Router bug - seems to also affect server availability index  

By Darren Duke | 1/7/25, 2:36 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

I was waiting for the other shoe to drop for this bug. Surely the errant code wasn't only in the router task. Well, it seems that it's NOT only the router. After working with a customer on fail-over issues in a cluster we came across this interesting availability index "issue". On a server patched for the router bug (or that is un-patched server that has not been rebooted) the "show ai" command behaves as expected, the XF, Hits and AI min and max are populated However, on a rebooted, un-patched server AI is completely and utterly blank

A little Domino container story  

By Martijn de Jong | 1/3/25, 7:05 AM | Infrastructure - Notes / Domino | Added by Roberto Boccadoro

If you’re active in the Domino world, it’s unlikely that you missed that we had a little problem 2½ weeks ago.... This blog post is not about this problem itself, but this problem caused many servers with outdated Domino versions to urgently need an update, and this is a little story about one of those servers.