Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.maint.java > #9045 > unrolled thread

Call for tests: Making OpenJDK 7 the default in Wheezy LTS

Back to article view | Back to linux.debian.maint.java

Contents

  Call for tests: Making OpenJDK 7 the default in Wheezy LTS Markus Koschany <apo@debian.org> - 2016-04-20 18:30 +0200
    Re: Call for tests: Making OpenJDK 7 the default in Wheezy LTS Rene Engelhard <rene@debian.org> - 2016-04-25 11:50 +0200
      Re: Call for tests: Making OpenJDK 7 the default in Wheezy LTS Markus Koschany <apo@debian.org> - 2016-04-25 12:20 +0200
        Re: Call for tests: Making OpenJDK 7 the default in Wheezy LTS Rene Engelhard <rene@debian.org> - 2016-04-25 12:30 +0200
          Re: Call for tests: Making OpenJDK 7 the default in Wheezy LTS Rene Engelhard <rene@debian.org> - 2016-04-25 12:40 +0200
          Re: Call for tests: Making OpenJDK 7 the default in Wheezy LTS Markus Koschany <apo@debian.org> - 2016-04-25 12:40 +0200
            Re: Call for tests: Making OpenJDK 7 the default in Wheezy LTS Antoine Beaupré <anarcat@orangeseeds.org> - 2016-05-17 18:20 +0200
              Re: Call for tests: Making OpenJDK 7 the default in Wheezy LTS Markus Koschany <apo@debian.org> - 2016-05-17 18:40 +0200
                Re: Call for tests: Making OpenJDK 7 the default in Wheezy LTS Antoine Beaupré <anarcat@orangeseeds.org> - 2016-05-17 22:40 +0200

#9045 — Call for tests: Making OpenJDK 7 the default in Wheezy LTS

[Multipart message — attachments visible in raw view] — view raw

Hi all,

as you may already be aware, the intention is to make OpenJDK 7 the
default Java implementation in Wheezy LTS to ensure full security
support until 31 May 2018. The switch will happen on 26 June 2016.

I would like to ask everyone who uses Java in server or desktop
environments to test their applications with OpenJDK 7 and to prepare
for the switch. This can be achieved by installing either openjdk-7-jre
or openjdk-7-jre-headless. In case OpenJDK 6 is already installed on
your system, you can switch to OpenJDK 7 by using the
update-alternatives mechanism:

	sudo update-alternatives --config java

On 26 June default-jre, default-jre-headless and default-jdk will no
longer point to OpenJDK 6 but to OpenJDK 7 instead. This will be
achieved by updating the java-common package. I have prepared updated
packages of java-common for testing that can be downloaded from:

	https://people.debian.org/~apo/wheezy-lts/

Important note for users of Tomcat and Jetty: We strongly recommend to
change the JAVA_HOME variable in /etc/default/tomcat7 and
/etc/default/jetty to

	JAVA_HOME=/usr/lib/jvm/openjdk-7-jdk

and to replace OpenJDK 6 with OpenJDK 7 at your earliest convenience.

Regards,

Markus

	

[toc] | [next] | [standalone]

#9058

Hi,

On Wed, Apr 20, 2016 at 06:22:51PM +0200, Markus Koschany wrote:
> I would like to ask everyone who uses Java in server or desktop
> environments to test their applications with OpenJDK 7 and to prepare
> for the switch. This can be achieved by installing either openjdk-7-jre
> or openjdk-7-jre-headless. In case OpenJDK 6 is already installed on

Not everywhere. If your package expects a JDK path set and that is set to
6 in debian/rules (if you're not using the default) you need source changes.

As for - you guess it - LO in the old times back then. 6 is hardcoded in
rules (and for the build-dep in control).

Running a testbuild with 7 now, but LO would need a full upload :/

Regards,

Rene

[toc] | [prev] | [next] | [standalone]

#9059

[Multipart message — attachments visible in raw view] — view raw

Am 25.04.2016 um 11:41 schrieb Rene Engelhard:
> Hi,
> 
> On Wed, Apr 20, 2016 at 06:22:51PM +0200, Markus Koschany wrote:
>> I would like to ask everyone who uses Java in server or desktop
>> environments to test their applications with OpenJDK 7 and to prepare
>> for the switch. This can be achieved by installing either openjdk-7-jre
>> or openjdk-7-jre-headless. In case OpenJDK 6 is already installed on
> 
> Not everywhere. If your package expects a JDK path set and that is set to
> 6 in debian/rules (if you're not using the default) you need source changes.
> 
> As for - you guess it - LO in the old times back then. 6 is hardcoded in
> rules (and for the build-dep in control).
> 
> Running a testbuild with 7 now, but LO would need a full upload :/

Hi Rene,

we are mainly concerned about runtime issues with OpenJDK 7. Libreoffice
declares dependencies on default-jre | openjdk-7-jre, so I believe it
should be fine. I am aware of build failures with OpenJDK 7 and I think
that can't be avoided unless we want to redo the whole OpenJDK 7
transition. [1]

I think in those cases it is reasonable to recommend to manually change
build dependencies back to OpenJDK 6 because rebuilding a package does
not pose a security risk and should never happen on production systems
anyway. I will update https://wiki.debian.org/LTS/Wheezy and add an
example today.

Regards,

Markus

[1]
https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=openjdk-7-transition;users=ubuntu-devel@lists.ubuntu.com

[toc] | [prev] | [next] | [standalone]

#9060

Hi,

On Mon, Apr 25, 2016 at 12:17:52PM +0200, Markus Koschany wrote:
> we are mainly concerned about runtime issues with OpenJDK 7. Libreoffice
> declares dependencies on default-jre | openjdk-7-jre, so I believe it
> should be fine. I am aware of build failures with OpenJDK 7 and I think
> that can't be avoided unless we want to redo the whole OpenJDK 7
> transition. [1]
> 
> I think in those cases it is reasonable to recommend to manually change
> build dependencies back to OpenJDK 6 because rebuilding a package does

Only if it stays (unsupported) and it's not actually removed from the archive.. 

> not pose a security risk and should never happen on production systems
> anyway. I will update https://wiki.debian.org/LTS/Wheezy and add an
> example today.

You miss the case where you want (as it's LTS) provide security updates. So
it needs to be buildable. Or you declare all Java-using things unsupported
in wheezy-LTS.

Regards,

Rene

[toc] | [prev] | [next] | [standalone]

#9061

Hi,

On Mon, Apr 25, 2016 at 12:34:53PM +0200, Markus Koschany wrote:
> Am 25.04.2016 um 12:23 schrieb Rene Engelhard:
> > On Mon, Apr 25, 2016 at 12:17:52PM +0200, Markus Koschany wrote:
> >> we are mainly concerned about runtime issues with OpenJDK 7. Libreoffice
> >> declares dependencies on default-jre | openjdk-7-jre, so I believe it
> >> should be fine. I am aware of build failures with OpenJDK 7 and I think
> >> that can't be avoided unless we want to redo the whole OpenJDK 7
> >> transition. [1]
> >>
> >> I think in those cases it is reasonable to recommend to manually change
> >> build dependencies back to OpenJDK 6 because rebuilding a package does
> > 
> > Only if it stays (unsupported) and it's not actually removed from the archive.. 
> 
> We don't intend to remove OpenJDK 6 but it will receive no further
> security updates.

OK, then nevermind.

Regards,

Rene

[toc] | [prev] | [next] | [standalone]

#9062

[Multipart message — attachments visible in raw view] — view raw

Am 25.04.2016 um 12:23 schrieb Rene Engelhard:
> Hi,
> 
> On Mon, Apr 25, 2016 at 12:17:52PM +0200, Markus Koschany wrote:
>> we are mainly concerned about runtime issues with OpenJDK 7. Libreoffice
>> declares dependencies on default-jre | openjdk-7-jre, so I believe it
>> should be fine. I am aware of build failures with OpenJDK 7 and I think
>> that can't be avoided unless we want to redo the whole OpenJDK 7
>> transition. [1]
>>
>> I think in those cases it is reasonable to recommend to manually change
>> build dependencies back to OpenJDK 6 because rebuilding a package does
> 
> Only if it stays (unsupported) and it's not actually removed from the archive.. 

We don't intend to remove OpenJDK 6 but it will receive no further
security updates.


>> not pose a security risk and should never happen on production systems
>> anyway. I will update https://wiki.debian.org/LTS/Wheezy and add an
>> example today.
> 
> You miss the case where you want (as it's LTS) provide security updates. So
> it needs to be buildable. Or you declare all Java-using things unsupported
> in wheezy-LTS.

If a Java package needs a security update, we will ensure that it will
be fixed in a timely manner which includes fixing possible build
failures. All Java packages are supported.

Regards,

Markus

[toc] | [prev] | [next] | [standalone]

#9112

On 2016-04-25 06:34:53, Markus Koschany wrote:
> Am 25.04.2016 um 12:23 schrieb Rene Engelhard:
>> Hi,
>> 
>> On Mon, Apr 25, 2016 at 12:17:52PM +0200, Markus Koschany wrote:
>>> we are mainly concerned about runtime issues with OpenJDK 7. Libreoffice
>>> declares dependencies on default-jre | openjdk-7-jre, so I believe it
>>> should be fine. I am aware of build failures with OpenJDK 7 and I think
>>> that can't be avoided unless we want to redo the whole OpenJDK 7
>>> transition. [1]
>>>
>>> I think in those cases it is reasonable to recommend to manually change
>>> build dependencies back to OpenJDK 6 because rebuilding a package does
>> 
>> Only if it stays (unsupported) and it's not actually removed from the archive.. 
>
> We don't intend to remove OpenJDK 6 but it will receive no further
> security updates.

.. starting from june?

Because there *are* issues on OpenJDK-6 *now*: should they be triaged
out of there, or will they actually be fixed in an gigantic upload at
the end of the day?

https://security-tracker.debian.org/tracker/source-package/openjdk-6

a, which his frontdesk hat.

-- 
We will create a civilization of the Mind in Cyberspace. May it be more
humane and fair than the world your governments have made before.
                        - John Perry Barlow, 1996
                        A Declaration of Independence of Cyberspace

[toc] | [prev] | [next] | [standalone]

#9113

[Multipart message — attachments visible in raw view] — view raw

[dropping Rene from CC because he is subscribed to debian-java]

Am 17.05.2016 um 17:56 schrieb Antoine Beaupré:
> On 2016-04-25 06:34:53, Markus Koschany wrote:
[...]
>> We don't intend to remove OpenJDK 6 but it will receive no further
>> security updates.
> 
> .. starting from june?

Starting from the start of the LTS cycle.

https://anonscm.debian.org/cgit/collab-maint/debian-security-support.git/tree/security-support-ended.deb7

> 
> Because there *are* issues on OpenJDK-6 *now*: should they be triaged
> out of there, or will they actually be fixed in an gigantic upload at
> the end of the day?
> 
> https://security-tracker.debian.org/tracker/source-package/openjdk-6
> 
> a, which his frontdesk hat.

No, the whole point of making OpenJDK 7 the default implementation is
that we can drop the support for OpenJDK 6. Even upstream (Red Hat)
recommends to use OpenJDK 7 for long term use now. I have done
everything possible to make users aware of the change. At the moment we
are in a grace period because we don't want to surprise admins who, for
instance, run Tomcat or Jetty. But by now they should know that OpenJDK
6 is unsupported and that we strongly recommend to switch to OpenJDK 7.
On 26 June we simply complete this process by making OpenJDK 7 the default.

Regards,

Markus

[toc] | [prev] | [next] | [standalone]

#9114

On 2016-05-17 12:31:27, Markus Koschany wrote:
> [dropping Rene from CC because he is subscribed to debian-java]
>
> Am 17.05.2016 um 17:56 schrieb Antoine Beaupré:
>> On 2016-04-25 06:34:53, Markus Koschany wrote:
> [...]
>>> We don't intend to remove OpenJDK 6 but it will receive no further
>>> security updates.
>> 
>> .. starting from june?
>
> Starting from the start of the LTS cycle.
>
> https://anonscm.debian.org/cgit/collab-maint/debian-security-support.git/tree/security-support-ended.deb7

Oh. I missed that completely somehow. Darn it, sorry for the noise.

>> Because there *are* issues on OpenJDK-6 *now*: should they be triaged
>> out of there, or will they actually be fixed in an gigantic upload at
>> the end of the day?
>> 
>> https://security-tracker.debian.org/tracker/source-package/openjdk-6
>> 
>> a, which his frontdesk hat.
>
> No, the whole point of making OpenJDK 7 the default implementation is
> that we can drop the support for OpenJDK 6. Even upstream (Red Hat)
> recommends to use OpenJDK 7 for long term use now. I have done
> everything possible to make users aware of the change. At the moment we
> are in a grace period because we don't want to surprise admins who, for
> instance, run Tomcat or Jetty. But by now they should know that OpenJDK
> 6 is unsupported and that we strongly recommend to switch to OpenJDK 7.
> On 26 June we simply complete this process by making OpenJDK 7 the default.

Of course, that makes sense. I'll just mark those issues as EOL then.

Thanks for the clarification!

A.

-- 
One has a moral responsibility to disobey unjust laws.
                        - Martin Luther King, Jr.

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.maint.java

csiph-web