From owner-freebsd-java@freebsd.org Sun Aug 11 08:39:17 2019 Return-Path: Delivered-To: freebsd-java@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 30D7BB3D3F for ; Sun, 11 Aug 2019 08:39:17 +0000 (UTC) (envelope-from 1983-01-06@gmx.net) Received: from mailman.nyi.freebsd.org (unknown [127.0.1.3]) by mx1.freebsd.org (Postfix) with ESMTP id 465spX4cPcz3Dqw for ; Sun, 11 Aug 2019 08:39:16 +0000 (UTC) (envelope-from 1983-01-06@gmx.net) Received: by mailman.nyi.freebsd.org (Postfix) id 9BDB3B3D3D; Sun, 11 Aug 2019 08:39:16 +0000 (UTC) Delivered-To: java@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 9A66FB3D3B for ; Sun, 11 Aug 2019 08:39:16 +0000 (UTC) (envelope-from 1983-01-06@gmx.net) Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "mout.gmx.net", Issuer "TeleSec ServerPass Class 2 CA" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 465spW2WTvz3Dqv for ; Sun, 11 Aug 2019 08:39:14 +0000 (UTC) (envelope-from 1983-01-06@gmx.net) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net; s=badeba3b8450; t=1565512746; bh=njAx5lBFhi5UEEzd6thGv744TkTi1dLiHHdKF1Of//4=; h=X-UI-Sender-Class:Subject:To:Cc:References:From:Date:In-Reply-To; b=dNQ5oOd1/Ge7J/cwCpHStyPNIckqY54V+OBc6AuP1JchHHFPIMG1QcEUnjoddWu8/ +72rdb1CKxKwRaVkyBvHYxIqATUzigZ6HlFO22hpFj9Z2VKeN+v64s81imYsw9jA54 mlOgxCab49bv5RxifNrEXkuTUJChtla3nOiQQVEc= X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c Received: from [192.168.1.13] ([84.143.158.162]) by mail.gmx.com (mrgmx004 [212.227.17.190]) with ESMTPSA (Nemesis) id 1MMobO-1hdxrr0fJ6-00Ikit; Sun, 11 Aug 2019 10:25:47 +0200 Subject: Re: RFC: Future of java/openjdk6 and java/openjdk7 To: Greg Lewis Cc: java@freebsd.org References: <20190802014149.GA59118@misty.eyesbeyond.com> <935ee70b-0f6e-1813-25c3-ced836143e32@gmx.net> <20190810183901.GA76800@misty.eyesbeyond.com> <22887160-4c94-9907-84f3-23fff562c239@gmx.net> <20190810193529.GA38493@misty.eyesbeyond.com> <20190810205358.GA38888@misty.eyesbeyond.com> From: Michael Osipov <1983-01-06@gmx.net> Message-ID: Date: Sun, 11 Aug 2019 10:25:42 +0200 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0 MIME-Version: 1.0 In-Reply-To: <20190810205358.GA38888@misty.eyesbeyond.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: quoted-printable X-Provags-ID: V03:K1:61cBUQe56imgpKuxpxaQ1RETQjwo+VpeiB7FRXq6acgAsw2WHP8 Jd2c+e5jTKjSdY12a8IUzfaMP6yL5jNHBPvKSvTqYJ6g0FMwL7iUS2FhOFSHIyXYDCOiEud EVYVigId+c/6XcXrldKWa+5xChGpZ7tPQ75Jf5C7FHiDAzdpF0o6FRjI+d1Sjim8Q/G3Z7Y 1FUz+chIFWJyeTpAYh7TQ== X-Spam-Flag: NO X-UI-Out-Filterresults: notjunk:1;V03:K0:wiu29taf1i0=:3N6ItmfEnEOzxOkT/s6WZh 9fUYN8Axp14G/OiqvRw4003HS+ujnVcB1jMx2trz3YbVTuiEV8U+pdT1jJvX4WoKOu29Mw8Wf 3Ce1nsD1nNFIWPyqWHDQKGjtaeFlWNM+KDqi/VfXqgLLszGhzG3C2hwWZo/ifDCp/EwkFs6Ro Gem4E20GvF2h05XGQQpZr62n+DMF25YQbtwQN3PMHQxBYu5rZz9+Yt6gzeqRYE0nmsJ/qYaOT MkucWbWG4U64BlS5qi06v2h4E5B/0Gt1vG178sSD2A8XzgSh2KMXC2wO6NNa40YNsSan1Ez77 6k9TsPBrQ34sbo+RVq0l+E0UtWGCMh3rijmFa4VmF8BNSi9Pi6B44hxIXYv7cou0iaRgwkcKq J7wKJxsmGQOQ12HZJsfMt4qyIySN9pwgXIMtjB9PN9TBNMT+39a9MGNHitO0jsBLf/6HIRgYk LAMd6bsRvgIVxAmYnOWvK1xS0a/Zp9Bsc6PWI+M2+7db1eAZ0kHhJVcZK2GxjXuThJqC/3abC Vz6Q7S2JnrPkIFW9w/VOV7Og+3epnzVnsZ29rPeqmuqoMIw0W4CUCgiTEZT5Hgy+CUZmy4Xe4 IMGK1eSHOXlZ2ivp6pqJJI/pgHQDGHDkKhOQZB7YL1Qv1WjpBgfUl8J2iUL3b63tkun1+qeDy 2LLS6SBmdm046OjGWrHT2ZCKp6yWyYaNwUSfa8mc9qfhrXtYr+BJhb4DbSi5PpING/WBN74E6 Z0k/T+Q/hH1JH1EzQmeJf9zaWb9HEQp5tXZtoocJKKLu3uPIe0qBkc/9clsOVJhIXQk5c9z5I SGmLze6K9NYEDEm6JpoH74d6WZzFXFwrrO/6NMrPxzHP7fIuGF04o56uzhOCe7kk0ILk6KqfD 3GageG6NUD4ZxdJcjv8wk2AUsrs1HFyhC3uWTUy2bERR2VSqdyEON77nmoZa0oXZs78/abXxq Tp8qZMLSwgPVXYUeynWyCfQzDI6GseKACMAIzX83+cmI1jy840uVyE+xqrxfKfDlkRh/fGbNh i40l18kp8N1tQKiwu/hl5gXwYTUYkPzqCIWvD6IC5POybymXWUo5abCHPPKyuwVo8IPVmnfM2 r7vIWfQ/GxjT4skvzSB5z6CrJINHizuG4uOjtin9FcPEIBQf2Ca0CxmlD/I+c92+k2kG05nPB 77IN0= X-Rspamd-Queue-Id: 465spW2WTvz3Dqv X-Spamd-Bar: --- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmx.net header.s=badeba3b8450 header.b=dNQ5oOd1; dmarc=none; spf=pass (mx1.freebsd.org: domain of 1983-01-06@gmx.net designates 212.227.15.18 as permitted sender) smtp.mailfrom=1983-01-06@gmx.net X-Spamd-Result: default: False [-3.47 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+ip4:212.227.15.0/25]; FREEMAIL_FROM(0.00)[gmx.net]; DKIM_TRACE(0.00)[gmx.net:+]; RCPT_COUNT_TWO(0.00)[2]; NEURAL_HAM_SHORT(-0.98)[-0.975,0]; RECEIVED_SPAMHAUS_PBL(0.00)[162.158.143.84.khpj7ygk5idzvmvt5x4ziurxhy.zen.dq.spamhaus.net : 127.0.0.10]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[gmx.net]; ASN(0.00)[asn:8560, ipnet:212.227.0.0/16, country:DE]; MID_RHS_MATCH_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmx.net.dwl.dnswl.org : 127.0.3.0]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gmx.net:s=badeba3b8450]; FROM_HAS_DN(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[gmx.net]; IP_SCORE_FREEMAIL(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[18.15.227.212.list.dnswl.org : 127.0.3.0]; IP_SCORE(0.00)[ip: (-7.14), ipnet: 212.227.0.0/16(-1.39), asn: 8560(2.26), country: DE(-0.01)]; RCVD_COUNT_TWO(0.00)[2]; RCVD_TLS_ALL(0.00)[] X-BeenThere: freebsd-java@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Porting Java to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 11 Aug 2019 08:39:17 -0000 Am 2019-08-10 um 22:53 schrieb Greg Lewis: > On Sat, Aug 10, 2019 at 09:42:35PM +0200, Michael Osipov wrote: >> Am 2019-08-10 um 21:35 schrieb Greg Lewis: >>> On Sat, Aug 10, 2019 at 08:52:26PM +0200, Michael Osipov wrote: >>>> Am 2019-08-10 um 20:39 schrieb Greg Lewis: >>>>> On Fri, Aug 02, 2019 at 08:07:39AM +0200, Michael Osipov wrote: >>>>>> Am 2019-08-02 um 03:41 schrieb Greg Lewis: >>>>>>> Oracle ended official releases of JDK 7 in April of 2015, and JDK = 6 even >>>>>>> earlier. In the FreeBSD ports collection both java/openjdk6 and >>>>>>> java/openjdk7 have fallen out of maintenance and are considerably = behind >>>>>>> in terms of updates (which likely include fixes for security >>>>>>> vulnerabilities). In addition, openjdk6 will soon become unbuilda= ble in >>>>>>> FreeBSD 12-STABLE based on >>>>>>> >>>>>>> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D234792 >>>>>>> >>>>>>> With OpenJDK 8 having been the default JDK for a number of years n= ow, >>>>>>> OpenJDK 11 and 12 both being available (and soon 13) I would sugge= st >>>>>>> that both openjdk6 and openjdk7 be removed, along with any ports >>>>>>> depending explicitly on them(*) which are unable to be updated to = use a >>>>>>> newer version. >>>>>> >>>>>> Being an Apache Maven PMC member and a happy FreeBSD user, we guara= ntee >>>>>> that the entire Maven stack runs on top of Java 7+, so I run all >>>>>> integration tests for all components I change on a regular basis on >>>>>> several BSD boxes (home, work) to test compat outside of the monoto= nic >>>>>> Windows/Linux world. >>>>>> >>>>>> Just because Oracle does not provide any binary packages for Java 7= it >>>>>> does not meean that it is not supported. There are a lot of vendors >>>>>> still providing Java 7 packages, e.g, Azul Systems, RHEL, HPE for H= P-UX >>>>>> (Java SE 7 is supported till July 2022 and Java SE 8 is supported t= ill >>>>>> March 2025) and likely others. >>>>> >>>>> Given this is the only response so far, I assume all are comfortable= with >>>>> removing openjdk6 and I'm going to go ahead with that once the ports= that >>>>> need upgrading have done so. >>>>> >>>>> With openjdk7, removing the port will not force you to remove the pa= ckage >>>>> from your system. I still have some older JDK ports on my desktop e= ven >>>>> though they've been removed from the ports tree. The problem with l= eaving >>>>> it in the tree is that it has security vulnerabilities with the curr= ent >>>>> version and no one has volunteered to update it to the latest versio= n. >>>>> >>>>> My question then is whether that would work. You leave the port on = your >>>>> machine and/or build a local package of it prior to removal. That s= hould >>>>> be sufficient to use it for the lifecycle of the current FreeBSD rel= ease >>>>> and further without leaving a vulnerable port in the ports tree. >>>> >>>> Well, I am not a huge fan of this because I cannot reproduce the buil= d >>>> at any time -- making an OSS component virtually useless. I don't wan= t >>>> to be dependent on others to produce it. I have gone through this wit= h >>>> the "HP-UX Porting and Archive Centre" and abandoned all packages fro= m >>>> them because they never brought there changes upstream and I was not >>>> really able to reproduce their builds. >>>> >>>> To make a long story short, if you want to cut OpenJDK 7, perform a >>>> final update, announce the port as deprecated and remove it at some >>>> point. That would be fair deal. OpenJDK 6 is obsolete. >>> >>> To reiterate, I am not planning on spending any time on openjdk7 since= it >>> has been EoL for so long. >> >> Where is this EOL? I see regular changes here: >> http://hg.openjdk.java.net/jdk7u/jdk7u/ > > The last public release of Java 7 was April 2015 (GA was July 2011). Fr= om > the main Oracle Java SE page: > > "Updates for Java SE 7 released after April 2015 are only available to O= racle Customers through My Oracle Support (requires support login)." > > Given that there are multiple types of support, I should have clarified > that I was referring to the end of public updates. There are Oracle > customers that are continuing to purchase this support, so that is why > there continue to be updates to the repository. > > However, even if there are updates to the repository, there is a > maintenance burden to supporting openjdk7 within the ports tree. Given > that no one is funding work to update openjdk7, I have to then make > a decision about whether I would like to spend volunteer time on it. > My answer to that has to fit in with the answers to questions like: > > "Would most FreeBSD users prefer that time is spent to make sure they ge= t access to the newest versions when they are released or would they prefe= r that time is spent on openjdk7?" > > This is particularly relevant given the six month release cadence that J= ava has > adopted. There are no longer years between releases and keeping up to d= ate > with the release schedule is now something that requires significant and > continuous time investment. > > "Would most FreeBSD users prefer that time is spent on fixing bugs in ne= wer versions of Java or would they prefer that time is spent on openjdk7?" > > There are crash reports against openjdk8 and openjdk11 in the bugs > database that require in depth analysis and work. Given that I believe = far > more people are running production applications on these two versions, t= he > precedence there is higher for me. > > "Would most FreeBSD users and developers prefer time is spent on improvi= ng other aspects of Java support in FreeBSD (e.g. adding ports for more co= mmon Java applications or development libraries, making it fit into the cu= rrent USES scheme, rethinking javavmwrapper, etc.) or would they prefer th= at time is spent on openjdk7?" > > Again, to me openjdk7 loses out here in regards to other enhancements fo= r > making Java a better supported language on FreeBSD. The question has > already been asked about removing USE_JAVA and getting it working with a > standard USES clause. Most other languages already support that. Suppo= rt > for powerpc64 and aarch64 still needs to be finalised as well. > > "How many versions does it make sense to have in the FreeBSD ports tree = for Java, since each of them requires support and maintenance?" > > Currently we have versions of 6, 7, 8, 9, 10, 11, and 12. 13 will be he= re > next month. If I look at the ports tree in general, most languages supp= ort > 3-4 versions. There are a few exceptions, but the median appears to be > 3 or 4. So if we want to trim the number of Java versions down to > something more manageable, some of them have to go. 6, 7, 9, and 10 are > all candidates for being trimmed. Removing all of them gets us down to > 8, 11, 12. With 13 to land in a month that will put us at 4 supported > versions. > > For me, the answer to all those questions leads me to the conclusion tha= t > I won't be spending volunteer time on openjdk7 other than to remove it. = If > someone else wants to keep it going, I'll support them by reviewing and > commiting updates. Greg, I really appreciate your effort and do not have counter arguments because anything you write is true. If I look at this list [1] it must be stripped down. Additionally, two points require attention: * The entire limited-resources-issue must be brought up to the foundation to act accordingly * All of the changes in battleblow/openjdk*u must brought upstream I might chime in some points you mentioned above because I care about some things. Regards, Michael [1] https://www.freshports.org/search.php?query=3Djdk&search=3Dgo&num=3D10&sty= pe=3Dname&method=3Dmatch&deleted=3Dexcludedeleted&start=3D1&casesensitivit= y=3Dcaseinsensitive&page=3D2