Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Dockerfile to use Temurin Java #170

Merged
merged 2 commits into from
Jul 19, 2022
Merged

Update Dockerfile to use Temurin Java #170

merged 2 commits into from
Jul 19, 2022

Conversation

jnewton03
Copy link
Contributor

OpenJDK has been deprecated:
https://hub.docker.com/_/openjdk

DEPRECATION NOTICE
This image is officially deprecated and all users are recommended to find and use suitable replacements ASAP. Some examples of other Official Image alternatives (listed in alphabetical order with no intentional or implied preference):

amazoncorretto
eclipse-temurin
ibm-semeru-runtimes
ibmjava
sapmachine
See docker-library/openjdk#505 for more information.

The only tags which will continue to receive updates beyond July 2022 will be Early Access builds (which are sourced from jdk.java.net), as those are not published/supported by any of the above projects.

OpenJDK has been deprecated:
https://hub.docker.com/_/openjdk

DEPRECATION NOTICE
This image is officially deprecated and all users are recommended to find and use suitable replacements ASAP. Some examples of other Official Image alternatives (listed in alphabetical order with no intentional or implied preference):

amazoncorretto
eclipse-temurin
ibm-semeru-runtimes
ibmjava
sapmachine
See docker-library/openjdk#505 for more information.

The only tags which will continue to receive updates beyond July 2022 will be Early Access builds (which are sourced from jdk.java.net), as those are not published/supported by any of the above projects.
@jnewton03
Copy link
Contributor Author

I tested this build locally and it built successfully, though the size goes from 373MB to 395MB.

@mcred mcred requested a review from r2-lf July 18, 2022 15:45
@mcred
Copy link
Contributor

mcred commented Jul 18, 2022

@r2liquibase Wasn't there a specific reason we chose the openjdk image to being with? I think there was a customer that needed this as the base image. Can you give us a little context here?

@r2-lf
Copy link
Contributor

r2-lf commented Jul 19, 2022

@mcred we chose OpenJDK because we were trying to get into the Docker verified program. Since we're pushing on that, there is no reason to use it. Use whatever the team thinks is best.

@jnewton03 jnewton03 self-assigned this Jul 19, 2022
Copy link
Contributor

@ap-liquibase ap-liquibase left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks good. Go Temurin!

Copy link
Contributor

@nvoxland nvoxland left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This could be updated to 17 now or in a separate PR

@jnewton03 jnewton03 requested review from nvoxland and mcred July 19, 2022 19:03
@jnewton03
Copy link
Contributor Author

using 17 passed locally. Re-requesting review.

@jnewton03 jnewton03 merged commit 992afe9 into main Jul 19, 2022
@jnewton03 jnewton03 deleted the feature/temurinJava branch July 19, 2022 20:56
@tooptoop4
Copy link

this has the problem of introducing curl which is littered with CVEs

@mcred
Copy link
Contributor

mcred commented Aug 17, 2022

@tooptoop4 Will you link to a specific CVE that was introduced with this PR?

@tooptoop4
Copy link

@mcred
Copy link
Contributor

mcred commented Aug 17, 2022

@tooptoop4 which CVE from that list was introduced with this PR?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants