# Platform SIG April 09,2024

**URL:** <https://community.jenkins.io/t/platform-sig-april-09-2024/14083>\
**Category:** Community\
**Tags:** java, docker, platform, sig-platform\
**Created:** [April 9, 2024, 6:22pm UTC](https://community.jenkins.io/t/platform-sig-april-09-2024/14083 "2024-04-09T18:22:18Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![poddingue](https://dub1.discourse-cdn.com/flex013/user_avatar/community.jenkins.io/poddingue/32/985_2.png) [@poddingue](https://community.jenkins.io/u/poddingue)\
**Post date:** [April 9, 2024, 6:22pm UTC](https://community.jenkins.io/t/platform-sig-april-09-2024/14083/1 "2024-04-09T18:22:18Z")

</div>

[![](https://europe1.discourse-cdn.com/flex013/uploads/jenkins/original/2X/1/1faa35fcf4e585ae26e116eecbd42044f36403fc.jpeg "2024 04 09Jenkins Platform SIG") ](https://www.youtube.com/watch?v=bBdoxFDkHjc)

Attending:

- Mark Waite
- Bruno Verachten

Agenda:

- Agenda-related items
  - Could we schedule this meeting one hour earlier?
    - Mark will update the calendar

  - Bruno is not available on the 23rd, should we cancel or does anyone want to host this meeting?
    - Mark will host the meeting

- Java 21 support - 2+2+2 Java Support Plan
  - [Jenkins enhancement proposal](https://github.com/jenkinsci/jep/pull/400) by Mark Waite submitted and being reviewed
    - Needs more details before it is merged
    - Basil may propose another proposal that would compete/replace Mark’s proposal, and that’s ok. Mark and Basil will discuss it further.

  - The Spring project made an [announcement](https://spring.io/blog/2024/03/01/support-timeline-announcement-for-spring-framework-6-0-x-and-5-3-x) - [JENKINS-68698](https://issues.jenkins.io/browse/JENKINS-68698)
    - The last public build of Spring security framework 5.8.x is August 2024
      - Spring security 6.x requires Jetty 11 with Jakarta EE 9 (jakartaee.servlet), not Jetty 10 with Jakarta EE 8 (javax.servlet)
      - August 31, 2024 date seems likely to stick

    - The last public build of Spring framework 5.3.x is August 2024
      - Spring framework 6.1 and later require Java 17

    - Alternatives:
      - Accept that if there is a security vulnerability reported in Spring security 5.8.x between August 2024 and the end Oct 2024, we may need to fork Spring Security and fix it ourselves
      - Mark to start discussions in the mailing list to find alternatives

- [DockerHub Download Statistics (2024)](https://docs.google.com/spreadsheets/d/1VLWVSLUuo9cVJntnj0t9E_qbjsEiddAVrrMh51pGbDc/edit#gid=607329336)
- Would we have too many docker images?
  - [Windows agent does not work on AWS Fargate · Issue #572 · jenkinsci/docker-agent · GitHub](https://github.com/jenkinsci/docker-agent/issues/572)

- [DockerHub keeps sending HTTP/429 errors](https://github.com/jenkins-infra/helpdesk/issues/4029). It failed the deployment of the Windows images but Linux is ok.
  - [Action items](https://github.com/jenkins-infra/helpdesk/issues/4029#issuecomment-2045073813) are on us
  - Using Temurin binaries and not Temurin Docker images could help reduce the number of layers, thus putting less stress on our Docker Hub account.

- Released work on agent and controller images
  - Controller Weekly [2.452](https://github.com/jenkinsci/docker/releases/tag/2.452) and [2.453](https://github.com/jenkinsci/docker/releases/tag/2.453)
    - Update to Jenkins [2.452](https://www.jenkins.io/changelog/#v2.452) and [2.453](https://www.jenkins.io/changelog/#v2.453)
      - Bump Debian Bookworm Linux Version to 20240311
      - Remove ConvertFrom-Json issue by simplifying tags management

  - Docker-agent: one version bump leading to 1 new [release](https://github.com/jenkinsci/docker-agent/releases) ([3206.vb\_15dcf73f6a\_9-9](https://github.com/jenkinsci/docker-agent/releases/tag/3206.vb_15dcf73f6a_9-9))
    - Move bats to v1.11.0

  - Ssh-agent: lots of version bumps and refactoring, leading to five new releases: [5.27.0](https://github.com/jenkinsci/docker-ssh-agent/releases/tag/5.27.0), [5.28.0](https://github.com/jenkinsci/docker-ssh-agent/releases/tag/5.28.0), [5.29.0](https://github.com/jenkinsci/docker-ssh-agent/releases/tag/5.29.0), [5.30.0](https://github.com/jenkinsci/docker-ssh-agent/releases/tag/5.30.0), and [5.31.0](https://github.com/jenkinsci/docker-ssh-agent/releases/tag/5.31.0)
    - refactor docker-ssh-agent build process like docker-agent
    - Windows
      - Windows ltsc2019 images now use ltsc2019 base images instead of 1809 ones
      - Windows images are now multi-stages as they aren’t built on top of eclipse-temurin anymore (more control of what’s inside)
      - Bump bats version to v1.11.0
      - Windows: add JDK17 as default and JDK21
      - Add Windows LTSC 2022 support
      - Correct git-lfs installation and bump of its version to 3.5.1

    - JDK
      - Re-enable JDK updates
      - Bring back Debian JDK17 images
      - Bump JDK17 version to 17.0.10\_7
      - Bump JDK11 version to 11.0.22\_7, even for Windows
      - updatecli/jdk21: only update Docker Bake file but not Dockerfiles as JDK17 is still the default
      - Bump JDK21 version to 21.0.2\_13
      - Use official Temurin build for linux/s390x

    - Add OpenSSH updatecli manifest

- Work in progress on images:
  - Controller:
    - [Adapt updatecli jdk11 and jdk17 manifests for Windows](https://github.com/jenkinsci/docker/pull/1781)

  - Docker-agent: three PRs are work in progress:
    - Automatic PR by updatecli that showed us we still have work to do: [Bump preview (EA) JDK21 version to 21.0.3+7](https://github.com/jenkinsci/docker-agent/pull/772)
      - Lead to:
        - [Use official Temurin build for linux/s390x #776](https://github.com/jenkinsci/docker-agent/pull/776) (merged)
        - [Use Liberica official build for linux/arm/v7 #778](https://github.com/jenkinsci/docker-agent/pull/778) (draft)
        - [Use official Temurin build for linux/s390x jenkinsci/docker-ssh-agent](https://github.com/jenkinsci/docker-ssh-agent/pull/370)

    - [feat(jdk21) Use Liberica official build for linux/arm/v7](https://github.com/jenkinsci/docker-agent/pull/778)
      - Just a POC, and a base for discussion

    - [chore(updatecli) Tracks Ubuntu and Debian LTS releases](https://github.com/jenkinsci/docker-agent/pull/779)

  - Docker-ssh-agent:
    - Bump OpenSSH version to v9.5.0.0p1-Beta
      - Still fails for several images, we have to investigate

- Docker-based quickstart tutorials
  - The tutorials [ceased to work](https://github.com/jenkins-docs/quickstart-tutorials/issues/179) when docker compose reached version [2.4.27](https://github.com/compose-spec/compose-go/issues/583)
    - Fixed by [#181](https://github.com/jenkins-docs/quickstart-tutorials/pull/181), and the new commands are now available in the [tutorials](https://github.com/jenkins-infra/jenkins.io/pull/7228).

  - Back to working on the main Jenkins installation thanks to docker.

- The Ampere server ran its first job
  - Relocated, and still working correctly