-
-
Notifications
You must be signed in to change notification settings - Fork 4.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
OpenJDK8 uses EOF version of Alpine Linux #957
Comments
As it was agreed with the Platform SIG team a few months ago, we will be moving the image to AdoptOpenJDK base image, as well as all other images in short term. Taking the recent public exposure of the old image, I will deliver an expedited fix for this issue specifically. |
Pending pull requests:
Once agent images are released, we will also need to respin the https://github.com/jenkinsci/jnlp-agents builds |
According to the feedback from @daniel-beck @aheritier @timja @MarkEWaite , we do not want to do packaging alignment between the old OpenJDK image and the new AdoptOpenJDK one. We do not see any package which would be a concern for the common Jenkins use-cases, and alpine images are supposed to be small. Also, a we jump over multiple Alpine Linux versions with its own breaking changes. Our intend is to release images with explicit notice about potentially breaking changes, I will re-confirm it at the Platform SIG meeting in 15 min and go ahead with merges if there is no negative feedback |
Status update for Aug 13, 2020:
|
Can we close this out? |
Yup |
The actual Dockerfile uses openjdk8 as base image and that uses an old version of Alpine Linux (3.6) that is not supported since 2019-05-01
LTS versions should use a stable version of every tool or library. When the tool no-longer receives no official support is prone to produce security issues and should be updated.
The PR #956 could solve this issue since it uses adoptopenjdk images that are more up to date
The text was updated successfully, but these errors were encountered: