Groups > linux.debian.maint.java > #12313

Packaging of openjdk-11-jre, ca-certificates-java (and possibly other)

Path	csiph.com!newsfeed.xs4all.nl!newsfeed9.news.xs4all.nl!bofh.it!news.nic.it!robomod
From	Nils Rennebarth <nils.rennebarth@secunet.com>
Newsgroups	linux.debian.maint.java
Subject	Packaging of openjdk-11-jre, ca-certificates-java (and possibly other)
Date	Mon, 25 Oct 2021 20:00:01 +0200
Message-ID	<Dccql-1vZ-1@gated-at.bofh.it> (permalink)
X-Mailbox-Line	From debian-java-request@lists.debian.org Mon Oct 25 17:50:44 2021
Old-Return-Path	<Nils.Rennebarth@secunet.com>
X-Amavis-Spam-Status	No, score=-7 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, PGPSIGNATURE=-5] autolearn=ham autolearn_force=no
X-Policyd-Weight	using cached result; rate: -4.6
X-Greylist	delayed 491 seconds by postgrey-1.36 at bendel; Mon, 25 Oct 2021 17:50:30 UTC
User-Agent	Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.13.0
MIME-Version	1.0
Content-Type	multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="N9wL4465OrdNBHv53GvVtOPm8MEn049Qk"
X-Clientproxiedby	cas-essen-01.secunet.de (10.53.40.201) To mbx-essen-01.secunet.de (10.53.40.197)
X-Exclaimer-Md-Config	2c86f778-e09b-4440-8b15-867914633a10
X-Mailing-List	<debian-java@lists.debian.org> archive/latest/22942
List-ID	<debian-java.lists.debian.org>
List-URL	<https://lists.debian.org/debian-java/>
List-Archive	https://lists.debian.org/msgid-search/ff5f546c-7281-4d4b-c849-6007cea9e4f5@secunet.com
Approved	robomod@news.nic.it
Lines	99
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Date	Mon, 25 Oct 2021 19:42:15 +0200
X-Original-Message-ID	<ff5f546c-7281-4d4b-c849-6007cea9e4f5@secunet.com>
Xref	csiph.com linux.debian.maint.java:12313

Show key headers only | View raw

[Multipart message — attachments visible in raw view] - view raw

Hello,

The packages openjdk-11-jre and ca-certificates-java (at least) state in their postinst, that java needs a mounted /proc to run and then fail.

That is not quite true though: If the lib/jli subdirectory of the jvm base directory (i.e. /usr/lib/jvm/java-11-openjdk-amd64) is added to LD_LIBRARY_PATH, java runs just fine without a mounted /proc.

Now the openjdk-11-jre just knows where the jvm base directory is, and could simply add a:

LD_LIBRARY_PATH=$basedir/lib/jli:$LD_LIBRARY_PATH
export LD_LIBRARY_PATH

to run the java binary. Similar for ca-certificates-java that needs to run java in its postinst.

Background is that I install the openjdk-11-jre in a chrooted environment where no /proc is available. This only produces the final system as a tarball though.

If you prefer to keep the check for the mounted /proc, to point people in the right direction, could the check be switched off by people like me who know what they are doing? E.g. by

running_in_chroot() {
type systemd-detect-virt >/dev/null 2>&1 && systemd-detect-virt --chroot
}

and then changing the test to

if ! running_in_chroot && ! mountpoint -q /proc; then...

Best regards, Nils Rennebarth

--
Dipl. Math Nils Rennebarth
Senior Berater Entwicklung
Division Network & Client security
secunet Security Networks AG

Tel.: +49 201 5454-3976
Fax: +49 711 900300-90
Mobil: +49 174 9750449
E-Mail: nils.rennebarth@secunet.com

Neue Brücke 3
70173 Stuttgart
www.secunet.com

______________________________________________________________________

Sitz: Kurfürstenstraße 58, 45138 Essen, Deutschland
Amtsgericht Essen HRB 13615
Vorstand: Axel Deininger (Vors.), Torsten Henn, Dr. Kai Martius, Thomas Pleines
Aufsichtsratsvorsitzender: Ralf Wintergerst
______________________________________________________________________

Back to linux.debian.maint.java | Previous | Next — Next in thread | Find similar

Thread

Packaging of openjdk-11-jre, ca-certificates-java (and possibly  other) Nils Rennebarth <nils.rennebarth@secunet.com> - 2021-10-25 20:00 +0200
  Re: Packaging of openjdk-11-jre, ca-certificates-java (and possibly  other) Thorsten Glaser <t.glaser@tarent.de> - 2021-10-25 23:20 +0200

csiph-web