-
Notifications
You must be signed in to change notification settings - Fork 75
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update Dockerfile to use Temurin Java #170
Conversation
OpenJDK has been deprecated: https://hub.docker.com/_/openjdk DEPRECATION NOTICE This image is officially deprecated and all users are recommended to find and use suitable replacements ASAP. Some examples of other Official Image alternatives (listed in alphabetical order with no intentional or implied preference): amazoncorretto eclipse-temurin ibm-semeru-runtimes ibmjava sapmachine See docker-library/openjdk#505 for more information. The only tags which will continue to receive updates beyond July 2022 will be Early Access builds (which are sourced from jdk.java.net), as those are not published/supported by any of the above projects.
I tested this build locally and it built successfully, though the size goes from 373MB to 395MB. |
@r2liquibase Wasn't there a specific reason we chose the |
@mcred we chose OpenJDK because we were trying to get into the Docker verified program. Since we're pushing on that, there is no reason to use it. Use whatever the team thinks is best. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
looks good. Go Temurin!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This could be updated to 17 now or in a separate PR
using 17 passed locally. Re-requesting review. |
this has the problem of introducing curl which is littered with CVEs |
@tooptoop4 Will you link to a specific CVE that was introduced with this PR? |
@tooptoop4 which CVE from that list was introduced with this PR? |
OpenJDK has been deprecated:
https://hub.docker.com/_/openjdk
DEPRECATION NOTICE
This image is officially deprecated and all users are recommended to find and use suitable replacements ASAP. Some examples of other Official Image alternatives (listed in alphabetical order with no intentional or implied preference):
amazoncorretto
eclipse-temurin
ibm-semeru-runtimes
ibmjava
sapmachine
See docker-library/openjdk#505 for more information.
The only tags which will continue to receive updates beyond July 2022 will be Early Access builds (which are sourced from jdk.java.net), as those are not published/supported by any of the above projects.