2022-11-04T16:00:00Z
Nov 4, 2022 - Java 19, Containers, Deprecation, Java support
Attending:
- Damien Duportal
- Kevin Martens
- Bruno Verachten
- Mark Waite
- Sable Nikita
Recording:
Agenda:
- Open action items:
- Git v2.38.1 (2 CVEs fixed) update campaign ((Linux VMs, Linux Containers and Windows VMs) Local clone optimization dereferences symbolic links by default · Advisory · git/git · GitHub and Local clone optimization dereferences symbolic links by default · Advisory · git/git · GitHub
More details on Git security vulnerabilities announced | The GitHub Blog- Git plugin was released to fix tests
- Git v2.38.1 (2 CVEs fixed) update campaign ((Linux VMs, Linux Containers and Windows VMs) Local clone optimization dereferences symbolic links by default · Advisory · git/git · GitHub and Local clone optimization dereferences symbolic links by default · Advisory · git/git · GitHub
- Docker agents:
- Proposal to merge the 3 agent repos into a single one (see below)
- Moving the Jenkins default WORKDIR into docker ssh agent repo
- More to be done to unify those repositories
- Some issues this week as well
- Java 19 exploration with Jenkins core
- ANTLR 2 to ANTLR 4 transition complete, Jenkins core compiles
- Thanks to Alex Earl and Basil Crow!
- Included in Jenkins 2.376 (this week)
- ANTLR 2 to ANTLR 4 transition complete, Jenkins core compiles
- Container image deprecation for the blueocean container (jenkinsci:blueocean)
- Need to announce the deprecation of the image
- Update the page on Dockerhub
- Add to a Jenkins LTS changelog or upgrade guide?
- Add a disclaimer to one or more pages on www.jenkins.io?
- Update the 2017 Blue Ocean blog post with deprecation notice?
- content/blog/2017/01/2017-01-13-blueocean-dev-log-jan.adoc
- Find a way to communicate the deprecation to users and admins
- Jenkins administrative monitor that checks for specific container content?
- Report it on it regularly in Platform SIG meetings
- Create an issue that proposes the deprecation and the needed steps
- Not likely to make progress until November
- Need to announce the deprecation of the image
- Container repository management for Jenkins agents
- Progress to report - Damien Duportal progressing towards unifying repositories
- Simplifying the release process
- Multiple repositories and multiple images from those repositories
- Releases are complicated unnecessarily
- Adding arm64 for docker images was too complicated
- Combining the repositories to simplify image management
- Need more detailed plan and design
- Cannot drop support for the existing containers
- Retain the container structure, but remain compatible
- Separate repository for Jenkins agents with tools installed
- Not actively maintained, many of the containers are still using Java 8, won’t work with most recent LTS, they need to be upgraded
- Download metrics are available from Dockerhub, could use those measure to prioritize the effort
- Not actively maintained, many of the containers are still using Java 8, won’t work with most recent LTS, they need to be upgraded
- Topic for discussion at Jenkins Contributor Summit or near the Summit
- No Contributor Summit with DevOps World
- Consider a separate series of online sessions of 2 hours each
- Mark Waite has a draft proposal to share
-
Require Java 11 or newer for Jenkins core
- Most recent statistics
- Now more Java 11 installations than Java 8 installations of Jenkins core
- Ongoing minor tasks
- Dropping Java 8 from the Docker agents - merged, and released
- Plugins beginning to require Java 11, ongoing process
- Many resources available to help users as they upgrade
- Maven job type is still advised against, but can be used …
- Most recent statistics
- Java 17 support in Jenkins
- Ongoing, a few recent reports, working well
- Jenkins infra planning to put one or more of the infra machines on JDK 17
- Timeline indicates end of Java 11 first level maintenance Sep 2023, security fixes for several more years after end of first level maintenance
- More than 11 000 Java 17 installs reporting worldwide with Jenkins in September
- ARM64 images had an issue last week
- Correction has been merged and released
- Originally issue associate with arm32 Docker container image
- The arm32 and arm64 images are both working
- Image size reductions pending for arm32
- Contributor Summit remix / rework
- Planned for an all day in-person event, not happening
- All-day event online event not effective
- Break it into 3 segments, two hours with specific topics
- Document has started to discuss topics and themes for the segments
- Mark to share the document, discussion
- Segment 1 - SIG reports and User experience
- Segment 2 - Security and supply chain
- Segment 3 - User presentations and other topics
- Bruno received the RISC-V board - not yet booted the board, can run Ubuntu 22.10 and OpenJDK is available from 11.0.16+8 to 20~17ea-2