Commit Graph

80 Commits

Author SHA1 Message Date
Jayashree Huttanagoudar
9d450e0c4c Update to shenandoah-jdk8u382-b01 (EA)
Update release notes for shenandoah-8u382-b01.
Switch to EA mode.
Remove JDK-8271199 patch which is now upstream.
Add version of bundled zlib (bumped from 1.2.11 to 1.2.13 with this update)
Introduce 'prelease' for the portable release versioning, to handle EA builds
Sync the copy of the portable specfile with the latest update

Related: rhbz#2217711
2023-07-06 02:21:18 +01:00
Andrew Hughes
345ac01c22 Update to shenandoah-jdk8u372-b07 (GA)
Update release notes for shenandoah-8u372-b07.
Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07
Update generate_tarball.sh to add support for passing a boot JDK to the configure run
Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
Drop JDK-8275535/RH2053256 patch which is now upstream
Include JDK-8271199 backport early ahead of 8u382 (RH2175317)
Drop hack for difference in local and portable build version
Replace local copies of JDK portable binaries with build dependencies
Include the java-1.8.0-openjdk-portable.spec file with instructions on how to rebuild.
Remove duplicate use of README.md inside the *-src package (it is no longer about sources)
Use portable build on x86_32 now one is available

** This tarball is embargoed until 2023-04-18 @ 1pm PT. **

Resolves: rhbz#2185182
Resolves: rhbz#2189329
Resolves: rhbz#2188023
2023-04-28 02:06:17 +01:00
Andrew Hughes
ffd213c8a0 Drop use of portable build on s390x due to libffi compatibility issue (needs libffi.so.6)
Related: rhbz#2150202
2023-02-28 10:45:44 +00:00
Andrew Hughes
130be7d121 Add explicit libffi dependency for s390x build
Related: rhbz#2150202
2023-02-28 10:17:47 +00:00
Andrew Hughes
18cec3e209 On portable architectures, replace build section with extraction of existing builds from portables
Rewrite ELF files so the source file path is correct and debugsources can be assembled

Resolves: rhbz#2150202
2023-02-28 09:15:04 +00:00
Andrew Hughes
f7c0e1142a Update cacerts patch to fix OPENJDK-1433 SecurityManager issue
Update to shenandoah-jdk8u352-b09 (GA)
Update release notes for shenandoah-8u352-b09.

Resolves: rhbz#2162714
2023-01-24 02:33:33 +00:00
Andrew Hughes
062daf9bb4 Update to shenandoah-jdk8u352-b08 (GA)
Update release notes for shenandoah-8u352-b08.
Fix broken links and missing release notes in older releases.
Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
 - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
 - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
 - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys

Resolves: rhbz#2160111
2023-01-22 14:36:10 +00:00
Andrew Hughes
9a313d328d Update to shenandoah-jdk8u362-b07 (EA)
Update release notes for shenandoah-8u362-b07.
Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
Update TestTranslations.java to test the new America/Ciudad_Juarez zone

Resolves: rhbz#2150196
2023-01-11 03:31:28 +00:00
Andrew Hughes
d1d3afa07f Update to shenandoah-jdk8u362-b01 (EA)
Update release notes for shenandoah-8u362-b01.
Switch to EA mode for 8u362 pre-release builds.
Drop JDK-8195607/PR3776/RH1760437 now this is upstream

Related: rhbz#2150196
2023-01-10 03:14:55 +00:00
Andrew Hughes
11b43b8213 Update to shenandoah-jdk8u352-b08 (GA)
Update release notes for shenandoah-8u352-b08.
Switch to GA mode for final release.
Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
Add test to ensure timezones can be translated

Resolves: rhbz#2133695
2022-11-08 18:57:55 +00:00
Andrew Hughes
20b95ff808 Update to shenandoah-jdk8u352-b07 (EA)
Update release notes for shenandoah-8u352-b07.
Switch to EA mode for 8u352 pre-release builds.
Rebase FIPS patch against 8u352-b07

Resolves: rhbz#2130623
2022-10-13 01:41:47 +01:00
Andrew Hughes
64ee130bde Allow the default keystore to be configured using security.systemCACerts
Use of the property can now be disabled using -Dsecurity.systemCACerts=
Move cacerts replacement to install section and retain original of this and tzdb.dat

Resolves: rhbz#2077006
2022-08-30 04:59:12 +01:00
Andrew Hughes
b53bb40201 Switch to static builds, reducing system dependencies and making build more portable
Resolves: rhbz#2121273
2022-08-30 04:02:04 +01:00
Andrew Hughes
d9d44a0f3a Disable copy-jdk-configs and bootstrapping for Flatpak builds
There does not appear to be any value in having copy-jdk-config in
Flatpak builds (where a given Flatpak bundles one specific JDK, so no
need for a "Utility script to transfer JDKs configuration files
between updates or for archiving.")

And at least when trying to do a LibreOffice Flatpak build from Fedora
34 RPM specs (which includes java-11-openjdk among its components),
the #!/usr/bin/lua shebang in copy_jdk_configs.lua would have caused a
requirement on /usr/bin/lua, but which a lua RPM bundled in the
Flatpak would not provide (as it would provide /app/bin/lua instead).
And the easiest way to work around that issue is to just disable the
unnecessary copy-jdk-configs.

...after "Temporarily move x86 to use Zero in order to get a working build":

When building the

>       if ${run_bootstrap} ; then

branch for suffix='' and loop='-main', the second

>           buildjdk ${builddir} $(pwd)/${bootinstalldir}/images/%{jdkimage} "${maketargets}" ${debugbuild} ${link_opt}

uses the JDK (`$(pwd)/${bootinstalldir}/images/%{jdkimage}`) from the installjdk
on the previous line.  But installjdk does

>       rm ${imagepath}/lib/tzdb.dat
>       ln -s %{_datadir}/javazi-1.8/tzdb.dat ${imagepath}/lib/tzdb.dat

which made that JDK's tzdb.dat link to /app/share/javazi-1.8/tzdb.dat
in a flatpak build (rather than the usual
/usr/share/javazi-1.8/tzdb.dat in a non-flatpak build) which is not
present at build-time (but will be present at runtime in at least the
LibreOffice flatpak, which bundles tzdata-java built for the flatpak
/app prefix).  So using that JDK's compiler during the build kept
failing due to java.io.FileNotFoundException for its lib/tzdb.dat.

(This was not an issue prior to the recent change, as installjdk's
modification of lib/tzdb.dat used to be done only for the "Final setup
on the main image" at the very end of the build, not during the build
for JDKs that are themselves used later during the build.)

The easiest workaround for this issue appears to be to just not
bootstrap_build in the flatpak case, avoiding the situation that a JDK
whose lib/tzdb.dat has been modified through installjdk is used during
the build.

Resolves: rhbz#2102727
2022-08-29 01:49:41 +01:00
Andrew Hughes
c2b26f5173 Update to shenandoah-jdk8u345-b01 (GA)
Update release notes for 8u345-b01.

Resolves: rhbz#2112405
2022-08-03 17:09:22 +01:00
Andrew Hughes
e6b27081c4 Update to shenandoah-jdk8u342-b07 (GA)
Update release notes for 8u342-b07.
Switch to GA mode for final release.

Resolves: rhbz#2106509
2022-07-24 04:28:42 +01:00
Andrew Hughes
ececafd95c Update to shenandoah-jdk8u342-b06 (EA)
Update release notes for shenandoah-8u342-b06.
Switch to EA mode for 8u342 pre-release builds.
Print release file during build, which should now include a correct SOURCE value from .src-rev
Update tarball script with IcedTea GitHub URL and .src-rev generation
Use "git apply" with patches in the tarball script to allow binary diffs
Remove redundant "REPOS" variable from tarball script
Include script to generate bug list for release notes
Update tzdata requirement to 2022a to match JDK-8283350

Resolves: rhbz#2083322
2022-07-18 01:33:05 +01:00
Andrew Hughes
6602a7ecb8 Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
* RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
* RH2090378: Revert to disabling system security properties and FIPS mode support together

Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
Perform configuration changes (e.g. nss.cfg, nss.fips.cfg, tzdb.dat) in installjdk
Enable system security properties in the RPM (now disabled by default in the FIPS repo)
Improve security properties test to check both enabled and disabled behaviour
Run security properties test with property debugging on
Explicitly require crypto-policies during build and runtime for system security properties

Resolves: rhbz#2099801
Resolves: rhbz#2100678
2022-07-17 22:01:25 +01:00
Francisco Ferrari Bihurriet
5b6071b392 RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
Use SunPKCS11 Attributes Configuration to set CKA_SIGN=true on SecretKey generate/import operations in FIPS mode, see:
https://docs.oracle.com/javase/8/docs/technotes/guides/security/p11guide.html#ATTRS

Resolves: rhbz#2102435
2022-07-08 17:59:46 +01:00
Andrew Hughes
c88220bce4 Update to shenandoah-jdk8u332-b09 (GA)
Update release notes for 8u332-b09.
Switch to GA mode for final release.

Resolves: rhbz#2074650
2022-04-24 21:54:03 +01:00
Andrew Hughes
5a98735e11 Update to shenandoah-jdk8u332-b06 (EA)
Update release notes for shenandoah-8u332-b06.

Resolves: rhbz#2050457
2022-04-18 03:25:34 +01:00
Andrew Hughes
0d89ca8ecd Update to shenandoah-jdk8u332-b01 (EA)
Update release notes for 8u332-b01.
Switch to EA mode.

Related: rhbz#2050457
2022-04-17 23:54:22 +01:00
Jiri Vanek
a15ebafb7f Removed for ever missing idm-ci.brew-build.tier1.functional
Resolves: rhbz#2058487
2022-03-01 14:42:35 +01:00
Andrew Hughes
336d63d112 Remove 'java --version' test as this is not supported on java-1.8.0-openjdk
Resolves: rhbz#2058487
2022-02-28 07:57:42 +00:00
Andrew Hughes
52c15259b0 Add JDK-8275535 patch to fix LDAP authentication issue.
Resolves: rhbz#2053525
2022-02-28 06:35:30 +00:00
Andrew Hughes
3bd296bf8b Detect NSS at runtime for FIPS detection
Turn off build-time NSS linking and go back to an explicit Requires on NSS

Resolves: rhbz#2052833
2022-02-28 05:58:15 +00:00
Andrew Hughes
eb9a49f69c Storing and restoring alternatives during update manually
* Family extracted to globals
* Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE
 - The move of alternatives creation to posttrans to fix:
 - Bug 1200302 - dnf reinstall breaks alternatives
 - Had caused the alternatives to be removed, and then created again,
 - instead of being added, and then removing the old, and thus persisting
 - the selection in family
 - Thus this fix, is storing the family of manually selected master, and if
 - stored, then it is restoring the family of the master

* Resolves: rhbz#2008202
2022-02-28 02:01:21 +00:00
Andrew Hughes
3cc08b65a2 Introduce tests/tests.yml, based on the one in RHEL 8
Resolves: rhbz#2058487
2022-02-27 03:14:27 +00:00
Andrew Hughes
5368472a23 Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
Resolves: rhbz#2052821
2022-02-23 18:00:32 +00:00
Andrew Hughes
01b1de5ea3 Fix FIPS issues in native code and with initialisation of java.security.Security
Resolves: rhbz#2023387
2022-02-22 04:27:44 +00:00
Andrew Hughes
cd6346ac8e Refactor build functions so we can build just HotSpot without any attempt at installation.
Introduce architecture restriction logic for the gdb test. (RH2041970)
Replace GCC 11 patch to remove use of the register keyword with correct fix to ADLC build (JDK-8281098)
Adjust JDK8199936/PR3533 -mstackrealign patch to instead pass -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4
Explicitly list JIT architectures rather than relying on those with slowdebug builds
Disable the serviceability agent on Zero architectures even when the architecture itself is supported
Add backport of JDK-8257794 to fix bogus assert on slowdebug x86-32 Zero builds

Related: rhbz#2022823
2022-02-21 15:29:05 +00:00
Andrew Hughes
bdb7928b49 Update to aarch64-shenandoah-jdk8u322-b06 (GA)
Update release notes for 8u322-b06.
Switch to GA mode for final release.

Resolves: rhbz#2039398
2022-02-18 01:59:09 +00:00
Andrew Hughes
63981d93e9 Update to aarch64-shenandoah-jdk8u322-b05 (EA)
Update release notes for 8u322-b05.
Switch to EA mode.
Require tzdata 2021c as of JDK-8274407.
Require tzdata 2021e as of JDK-8275766.
Update tarball generation script to use git following shenandoah-jdk8u's move to github

Resolves: rhbz#2022823
2022-02-16 01:29:37 +00:00
Andrew Hughes
9fd7b086e5 Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
Related: rhbz#2022823
2022-02-11 11:37:38 +00:00
Andrew Hughes
f459bf7287 Use 'sql:' prefix in nss.fips.cfg
Fedora 35 and better no longer ship the legacy secmod.db file as part
of the nss package. Explicitly tell OpenJDK to use sqlite-based sec
mode.

Resolves: rhbz#2023533
2021-12-06 01:03:47 +00:00
Andrew Hughes
9df29c5890 Update to aarch64-shenandoah-jdk8u312-b07 (GA)
Update release notes for 8u312-b07.
Switch to GA mode for final release.

Resolves: rhbz#2013844
2021-11-10 18:20:43 +00:00
Jiri Vanek
ac6e9295df alternatives creation moved to posttrans
- Thus fixing the old reisntall issue:
- https://bugzilla.redhat.com/show_bug.cgi?id=1200302
- https://bugzilla.redhat.com/show_bug.cgi?id=1976053
2021-11-09 14:51:24 +01:00
Andrew Hughes
a3c023b715 Add FIPS patch to allow plain key import.
Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false

Resolves: rhbz#1994676
2021-10-10 22:37:12 +01:00
Andrew Hughes
e1f737745d Update to aarch64-shenandoah-jdk8u312-b05 (EA)
Update release notes for 8u312-b05.

Resolves: rhbz#1999939
2021-10-04 03:29:31 +01:00
Andrew Hughes
d3bca21948 Update to aarch64-shenandoah-jdk8u312-b04 (EA)
Update release notes for 8u312-b04.

Related: rhbz#1999939
2021-09-27 15:10:15 +01:00
Andrew Hughes
1acd5bbdff Update to aarch64-shenandoah-jdk8u312-b03 (EA)
Update release notes for 8u312-b03.

Related: rhbz#1999939
2021-09-24 17:34:10 +01:00
Andrew Hughes
21c598bfa9 Reduce disk footprint by removing build artifacts by default.
Related: rhbz#1999939
2021-09-21 22:56:29 +01:00
Andrew Hughes
30f2a04008 Update to aarch64-shenandoah-jdk8u312-b02 (EA)
Update release notes for 8u312-b02.

Related: rhbz#1999939
2021-09-19 13:10:41 +01:00
Andrew Hughes
d3fceb0152 Update to aarch64-shenandoah-jdk8u312-b01 (EA)
Update release notes for 8u312-b01.
Switch to EA mode.
Remove "-clean" suffix as no 8u312 builds are unclean.

Related: rhbz#1999939
2021-09-13 23:46:02 +01:00
Andrew Hughes
f830fdccdc Add patch to login to the NSS software token when in FIPS mode.
Resolves: rhbz#1997363
2021-08-27 23:42:57 +01:00
Andrew Hughes
3034306917 Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library.
Port FIPS system detection support to OpenJDK 8u
Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.

Resolves: rhbz#1971696
2021-08-27 18:23:26 +01:00
Florian Weimer
19e706d505 Rebuild for libffi transition (#1891914)
Related: #1891914
2021-08-25 09:41:32 +02:00
Mohan Boddu
198dc34251 Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-08-09 21:03:57 +00:00
Andrew Hughes
eb98e068b7 Update to aarch64-shenandoah-jdk8u302-b08 (GA)
Update release notes for 8u302-b08.
Switch to GA mode for final release.
Remove non-Free test and demo files from source tarball.

Resolves: rhbz#1967813
2021-08-08 07:22:07 +01:00
Andrew Hughes
6f55767b15 Update to aarch64-shenandoah-jdk8u302-b07 (EA)
Update release notes for 8u302-b07.
Switch to EA mode.
Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.

Resolves: rhbz#1967813
2021-07-20 05:37:28 +01:00