Commit Graph

621 Commits

Author SHA1 Message Date
Andrew Hughes
48e5e99c26 Update to shenandoah-jdk8u352-b08 (GA)
Update release notes for shenandoah-8u352-b08.
Switch to GA mode for final release.
2022-10-19 01:59:45 +01:00
Andrew Hughes
7264639a9b Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
Add test to ensure timezones can be translated
2022-10-16 03:10:01 +01:00
Andrew Hughes
b057a1dd37 Update to shenandoah-jdk8u352-b07 (EA)
Update release notes for shenandoah-8u352-b07.
Switch to EA mode for 8u352 pre-release builds.
Rebase FIPS patch against 8u352-b07
2022-10-12 02:07:03 +01:00
Andrew Hughes
4892a89d43 Switch to static builds, reducing system dependencies and making build more portable 2022-09-02 04:52:11 +01:00
Andrew Hughes
7d3ba67ed8 Update to shenandoah-jdk8u345-b01 (GA)
Update release notes for 8u345-b01.
2022-08-03 16:50:26 +01:00
Andrew Hughes
c48f90a969 Update to shenandoah-jdk8u342-b07 (GA)
Update release notes for 8u342-b07.
Switch to GA mode for final release.
Exclude x86 where java_arches is undefined, in order to unbreak build
2022-07-24 22:12:28 +01:00
Jiri
27bb7416e6 moved to build only on %%{java_arches}
-- https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs
- reverted :
-- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild (always mess up release)
-- Try to build on x86 again by creating a husk of a JDK which does not depend on itself
-- Exclude x86 from builds as the bootstrap JDK is now completely broken and unusable
-- Reinstate demo package on x86
-- Temporarily disable noarch status of javadoc and javadoc-zip so x86 can differ
-- Replaced binaries and .so files with bash-stubs on i686
- added ExclusiveArch:  %%{java_arches}
-- this now excludes i686
-- this is safely backport-able to older fedoras, as the macro was  backported proeprly (with i686 included)
- https://bugzilla.redhat.com/show_bug.cgi?id=2104129
2022-07-22 14:56:46 +02:00
Fedora Release Engineering
4c5d1a87de Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-07-21 15:05:19 +00:00
Andrew Hughes
475808beae Reinstate demo package on x86 2022-07-19 10:53:48 +01:00
Andrew Hughes
fbc7fb3c17 Temporarily disable noarch status of javadoc and javadoc-zip so x86 can differ 2022-07-19 01:00:39 +01:00
Andrew Hughes
eb7f165236 Try to build on x86 again by creating a husk of a JDK which does not depend on itself 2022-07-18 18:37:10 +01:00
Andrew Hughes
1a5e8e1c00 Update to shenandoah-jdk8u342-b06 (EA)
Update release notes for shenandoah-8u342-b06.
Switch to EA mode for 8u342 pre-release builds.
Print release file during build, which should now include a correct SOURCE value from .src-rev
Update tarball script with IcedTea GitHub URL and .src-rev generation
Use "git apply" with patches in the tarball script to allow binary diffs
Remove redundant "REPOS" variable from tarball script
Include script to generate bug list for release notes
Update tzdata requirement to 2022a to match JDK-8283350
2022-07-17 20:12:25 +01:00
Andrew Hughes
ccc5eab535 Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
* RH2051605: Detect NSS at Runtime for FIPS detection
* RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
* RH2090378: Revert to disabling system security properties and FIPS mode support together

Turn off build-time NSS linking and go back to an explicit Requires on NSS
Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
Perform configuration changes (e.g. nss.cfg, nss.fips.cfg, tzdb.dat) in installjdk
Enable system security properties in the RPM (now disabled by default in the FIPS repo)
Improve security properties test to check both enabled and disabled behaviour
Run security properties test with property debugging on
Exclude x86 from builds as the bootstrap JDK is now completely broken and unusable
2022-07-17 02:51:46 +01:00
Jiri
a24d0a097b Explicitly require crypto-policies during build and runtime for system security properties 2022-07-15 16:27:38 +02:00
Jiri
7d96b25018 Replaced binaries and .so files with bash-stubs on i686
in preparation of the removal on that architecture
https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs
2022-07-15 15:22:08 +02:00
FeRD (Frank Dana)
53085a2a7f Add additional javadoc & javadoczip alternatives
Create additional alternatives linked from the javadocdir, named:
  * java-%{origin} / java-%{origin}.zip
  * java-%{javaver} / java-%{javaver}.zip
  * java-%{javaver}-%{origin} / java-%{javaver}-%{origin}.zip
2022-07-15 15:07:35 +02:00
Stephan Bergmann
4bb380bddf Disable copy-jdk-configs and bootstrapping for Flatpak builds
There does not appear to be any value in having copy-jdk-config in Flatpak
builds (where a given Flatpak bundles one specific JDK, so no need for a
"Utility script to transfer JDKs configuration files between updates or for
archiving.")

And at least when trying to do a LibreOffice Flatpak build from Fedora 34 RPM
specs (which includes java-11-openjdk among its components), the #!/usr/bin/lua
shebang in copy_jdk_configs.lua would have caused a requirement on
/usr/bin/lua, but which a lua RPM bundled in the Flatpak would not provide (as
it would provide /app/bin/lua instead).  And the easiest way to work around that
issue is to just disable the unnecessary copy-jdk-configs.

...after "Temporarily move x86 to use Zero in order to get a working build":

When building the

>       if ${run_bootstrap} ; then

branch for suffix='' and loop='-main', the second

>           buildjdk ${builddir} $(pwd)/${bootinstalldir}/images/%{jdkimage} "${maketargets}" ${debugbuild} ${link_opt}

uses the JDK (`$(pwd)/${bootinstalldir}/images/%{jdkimage}`) from the installjdk
on the previous line.  But installjdk does

> 	rm ${imagepath}/lib/tzdb.dat
> 	ln -s %{_datadir}/javazi-1.8/tzdb.dat ${imagepath}/lib/tzdb.dat

which made that JDK's tzdb.dat link to /app/share/javazi-1.8/tzdb.dat in a
flatpak build (rather than the usual /usr/share/javazi-1.8/tzdb.dat in a non-
flatpak build) which is not present at build-time (but will be present at
runtime in at least the LibreOffice flatpak, which bundles tzdata-java built for
the flatpak /app prefix).  So using that JDK's compiler during the build kept
failing due to java.io.FileNotFoundException for its lib/tzdb.dat.

(This was not an issue prior to the recent change, as installjdk's
modification of lib/tzdb.dat used to be done only for the "Final setup
on the main image" at the very end of the build, not during the build
for JDKs that are themselves used later during the build.)

The easiest workaround for this issue appears to be to just not bootstrap_build
in the flatpak case, avoiding the situation that a JDK whose lib/tzdb.dat has
been modified through installjdk is used during the build.
2022-07-01 02:25:39 +01:00
Francisco Ferrari Bihurriet
2d53004059 RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
Use SunPKCS11 Attributes Configuration to set CKA_SIGN=true on SecretKey generate/import operations in FIPS mode, see:
https://docs.oracle.com/javase/8/docs/technotes/guides/security/p11guide.html#ATTRS
2022-06-30 15:17:23 -03:00
Andrew Hughes
100440c51e Update to shenandoah-jdk8u332-b09 (GA)
Update release notes for 8u332-b09.
Switch to GA mode for final release.
2022-04-20 20:38:54 +01:00
Andrew Hughes
019748fe88 Update to shenandoah-jdk8u332-b06 (EA)
Update release notes for shenandoah-8u332-b06.
2022-04-19 00:39:55 +01:00
Andrew Hughes
cb59f552f4 Update to shenandoah-jdk8u332-b01 (EA)
Update release notes for 8u332-b01.
Switch to EA mode.
2022-04-18 01:19:19 +01:00
Andrew Hughes
7e5331a512 Reinstate JIT builds on x86_32.
Add JDK-8282231 to fix missing CALL effects on x86_32.
2022-03-30 17:36:09 +01:00
Jiri
edb63206cd Storing and restoring alterntives during update manually
Fixing:
Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE

The move of alternatives creation to posttrans to fix:
Bug 1200302 - dnf reinstall breaks alternatives
Had caused the alternatives to be removed, and then created again,
instead of being added, and then removing the old, and thus persisting
the selection in family

Thus this fix, is storing the family of manually selected master, and if
stored, then it is restoring the family of the master
2022-02-27 12:11:03 +01:00
Jiri
0da973f5a7 family extracted to globals 2022-02-27 12:05:26 +01:00
Jiri
e88c69368c Providing proper provides for javadoc-zip subpk
Before this patch, the java-17-openjdk-javadoc-zip was not existing, and
instead of that, javadoc was provided by both
Factm, that both subpkgs should provide javadoc, should be kept
2022-02-27 12:02:51 +01:00
Andrew Hughes
f2e995182a Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent 2022-02-23 17:22:05 +00:00
Andrew Hughes
6d412ee58b Fix FIPS issues in native code and with initialisation of java.security.Security 2022-02-16 02:36:10 +00:00
Andrew Hughes
050fecd883 Update to aarch64-shenandoah-jdk8u322-b06 (EA)
Update release notes for 8u322-b06.
Switch to GA mode for final release.
2022-02-16 00:05:22 +00:00
Andrew Hughes
c867f608e3 Update to aarch64-shenandoah-jdk8u322-b05 (EA)
Update release notes for 8u322-b05.
Require tzdata 2021e as of JDK-8275766.
Update tarball generation script to use git following shenandoah-jdk8u's move to github
2022-02-15 16:45:42 +00:00
Andrew Hughes
d3b17054c2 Re-enable gdb backtrace check. 2022-02-08 15:48:38 +00:00
Andrew Hughes
2988ce90ff Temporarily move x86 to use Zero in order to get a working build
Introduce architecture restriction logic for the gdb test.
Disable on x86, x86_64, ppc64le & s390x while these are broken in rawhide.
Replace GCC 11 patch to remove use of the register keyword with correct fix to ADLC build (JDK-8281098)
Adjust JDK8199936/PR3533 -mstackrealign patch to instead pass -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4
Refactor build functions so we can build just HotSpot without any attempt at installation.
Explicitly list JIT architectures rather than relying on those with slowdebug builds
Disable the serviceability agent on Zero architectures even when the architecture itself is supported
Add backport of JDK-8257794 to fix bogus assert on slowdebug x86-32 Zero builds

Resolves: rhbz#2045726
Related: rhbz#2051302
Related: rhbz#2041970
2022-02-07 00:49:08 +00:00
Fedora Release Engineering
92c5ccf84c - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
Signed-off-by: Fedora Release Engineering <releng@fedoraproject.org>
2022-01-20 13:39:33 +00:00
Andrew Hughes
e3e7a2f6b3 Update to aarch64-shenandoah-jdk8u322-b04 (EA)
Update release notes for 8u322-b04.
Require tzdata 2021c as of JDK-8274407.
2022-01-10 16:31:32 +00:00
Andrew Hughes
172b64584a Update to aarch64-shenandoah-jdk8u322-b03 (EA)
Update release notes for 8u322-b03.
2022-01-07 15:27:20 +00:00
Andrew Hughes
a0ac8516d6 Update to aarch64-shenandoah-jdk8u322-b02 (EA)
Update release notes for 8u322-b02.
2021-12-17 03:19:15 +00:00
Andrew Hughes
be50f32572 Update to aarch64-shenandoah-jdk8u322-b01 (EA)
Update release notes for 8u322-b01.
Switch to EA mode.
2021-12-14 02:24:08 +00:00
Andrew Hughes
0478a68d40 Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le. 2021-12-06 00:42:17 +00:00
Severin Gehwolf
b1a7d3ba42 Use 'sql:' prefix in nss.fips.cfg
Fedora 35 and better no longer ship the legacy
secmod.db file as part of the nss package. Explicitly
tell OpenJDK to use sqlite-based sec mode.

Resolves: RHBZ#2019555
2021-11-05 18:31:57 +01:00
Andrew Hughes
06afebf801 Update to aarch64-shenandoah-jdk8u312-b07 (GA)
Update release notes for 8u312-b07.
Switch to GA mode for final release.
2021-10-20 01:46:06 +01:00
Andrew Hughes
38ede77603 Add FIPS patch to allow plain key import.
Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false
2021-10-10 22:01:50 +01:00
Andrew Hughes
afeb38682d Update to aarch64-shenandoah-jdk8u312-b05 (EA)
Update release notes for 8u312-b05.
2021-10-09 23:21:05 +01:00
Andrew Hughes
92642a8a96 Reduce disk footprint by removing build artifacts by default. 2021-10-01 16:29:42 +01:00
Andrew Hughes
5e8cea34ec Update to aarch64-shenandoah-jdk8u312-b04 (EA)
Update release notes for 8u312-b04.
2021-09-26 20:13:52 +01:00
Andrew Hughes
aa2c8f31b9 Add patch to login to the NSS software token when in FIPS mode. 2021-09-14 02:59:18 +01:00
Andrew Hughes
0cb1fbdb0b Update to aarch64-shenandoah-jdk8u312-b03 (EA)
Update release notes for 8u312-b03.
2021-09-13 12:33:47 +01:00
Andrew Hughes
12c54a64a1 Update to aarch64-shenandoah-jdk8u312-b02 (EA)
Update release notes for 8u312-b02.
2021-09-10 05:33:38 +01:00
Andrew Hughes
d57e765053 Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library.
Port FIPS system detection support to OpenJDK 8u
Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
2021-09-04 02:14:31 +01:00
Andrew Hughes
37a363e30c Update to aarch64-shenandoah-jdk8u312-b01 (EA)
Update release notes for 8u312-b01.
Switch to EA mode.
Remove "-clean" suffix as no 8u312 builds are unclean.
2021-09-01 23:23:51 +01:00
Jiri Vanek
ae9982ef76 alternatives creation moved to posttrans
Thus fixing the old reisntall issue:
https://bugzilla.redhat.com/show_bug.cgi?id=1200302
https://bugzilla.redhat.com/show_bug.cgi?id=1976053
2021-09-01 16:48:03 +02:00
Andrew Hughes
1b05b0ca2a Remove non-Free test and demo files from source tarball. 2021-08-08 05:41:58 +01:00