mirror of
https://github.com/kaboomserver/buildpack.git
synced 2024-06-28 14:00:36 +00:00
Update to Java 15
This commit is contained in:
parent
e946acaf30
commit
df62442f1c
|
@ -29,9 +29,19 @@ while true; do
|
|||
|
||||
java \
|
||||
-Xmx384M \
|
||||
-Xshare:on \
|
||||
-Xss8M \
|
||||
-Xtune:virtualized \
|
||||
-Xaggressive \
|
||||
-Xcompressedrefs \
|
||||
-Xdump:heap+java+snap:none \
|
||||
-Xdump:tool:events=throw+systhrow,filter=java/lang/OutOfMemoryError,exec="kill -9 %pid" \
|
||||
-Xgc:concurrentScavenge \
|
||||
-Xgc:dnssExpectedTimeRatioMaximum=3 \
|
||||
-Xgc:scvNoAdaptiveTenure \
|
||||
-Xdisableexplicitgc \
|
||||
-Xshareclasses \
|
||||
-Xshareclasses:noPersistentDiskSpaceCheck \
|
||||
-XX:MaxDirectMemorySize=64M \
|
||||
-XX:+ClassRelationshipVerifier \
|
||||
-XX:+UseContainerSupport \
|
||||
-DPaper.IgnoreJavaVersion=true \
|
||||
-Dpaper.playerconnection.keepalive=360 \
|
||||
|
|
2
vendor/generate_jre.sh
vendored
2
vendor/generate_jre.sh
vendored
|
@ -3,7 +3,7 @@
|
|||
# This script is used as a reference to generate a stripped-down JRE for the server
|
||||
|
||||
rm -rf java/
|
||||
wget https://github.com/AdoptOpenJDK/openjdk14-binaries/releases/download/jdk-14.0.2%2B12/OpenJDK14U-jdk_x64_linux_hotspot_14.0.2_12.tar.gz
|
||||
wget https://github.com/AdoptOpenJDK/openjdk15-binaries/releases/download/jdk-15%2B36_openj9-0.22.0/OpenJDK15U-jdk_x64_linux_openj9_15_36_openj9-0.22.0.tar.gz
|
||||
tar -zxvf OpenJDK*
|
||||
rm OpenJDK*
|
||||
mv jdk* jdk/
|
||||
|
|
BIN
vendor/java/bin/java
vendored
BIN
vendor/java/bin/java
vendored
Binary file not shown.
BIN
vendor/java/bin/jitserver
vendored
Executable file
BIN
vendor/java/bin/jitserver
vendored
Executable file
Binary file not shown.
56
vendor/java/conf/security/java.security
vendored
56
vendor/java/conf/security/java.security
vendored
|
@ -115,7 +115,7 @@ security.provider.12=SunPKCS11
|
|||
# and "DRBG" SecureRandom implementations in the "Sun" provider.
|
||||
# (Other SecureRandom implementations might also use this property.)
|
||||
#
|
||||
# On Unix-like systems (for example, Solaris/Linux/MacOS), the
|
||||
# On Unix-like systems (for example, Linux/MacOS), the
|
||||
# "NativePRNG", "SHA1PRNG" and "DRBG" implementations obtains seed data from
|
||||
# special device files such as file:/dev/random.
|
||||
#
|
||||
|
@ -251,15 +251,18 @@ policy.provider=sun.security.provider.PolicyFile
|
|||
policy.url.1=file:${java.home}/conf/security/java.policy
|
||||
policy.url.2=file:${user.home}/.java.policy
|
||||
|
||||
# whether or not we expand properties in the policy file
|
||||
# if this is set to false, properties (${...}) will not be expanded in policy
|
||||
# files.
|
||||
# Controls whether or not properties are expanded in policy and login
|
||||
# configuration files. If set to false, properties (${...}) will not
|
||||
# be expanded in policy and login configuration files. If commented out or
|
||||
# set to an empty string, the default value is "false" for policy files and
|
||||
# "true" for login configuration files.
|
||||
#
|
||||
policy.expandProperties=true
|
||||
|
||||
# whether or not we allow an extra policy to be passed on the command line
|
||||
# with -Djava.security.policy=somefile. Comment out this line to disable
|
||||
# this feature.
|
||||
# Controls whether or not an extra policy or login configuration file is
|
||||
# allowed to be passed on the command line with -Djava.security.policy=somefile
|
||||
# or -Djava.security.auth.login.config=somefile. If commented out or set to
|
||||
# an empty string, the default value is "false".
|
||||
#
|
||||
policy.allowSystemProperty=true
|
||||
|
||||
|
@ -631,6 +634,26 @@ jdk.certpath.disabledAlgorithms=MD2, MD5, SHA1 jdkCA & usage TLSServer, \
|
|||
RSA keySize < 1024, DSA keySize < 1024, EC keySize < 224, \
|
||||
include jdk.disabled.namedCurves
|
||||
|
||||
#
|
||||
# Legacy algorithms for certification path (CertPath) processing and
|
||||
# signed JAR files.
|
||||
#
|
||||
# In some environments, a certain algorithm or key length may be undesirable
|
||||
# but is not yet disabled.
|
||||
#
|
||||
# Tools such as keytool and jarsigner may emit warnings when these legacy
|
||||
# algorithms are used. See the man pages for those tools for more information.
|
||||
#
|
||||
# The syntax is the same as the "jdk.certpath.disabledAlgorithms" and
|
||||
# "jdk.jar.disabledAlgorithms" security properties.
|
||||
#
|
||||
# Note: This property is currently used by the JDK Reference
|
||||
# implementation. It is not guaranteed to be examined and used by other
|
||||
# implementations.
|
||||
|
||||
jdk.security.legacyAlgorithms=SHA1, \
|
||||
RSA keySize < 2048, DSA keySize < 2048
|
||||
|
||||
#
|
||||
# Algorithm restrictions for signed JAR files
|
||||
#
|
||||
|
@ -768,11 +791,7 @@ jdk.tls.disabledAlgorithms=SSLv3, RC4, DES, MD5withRSA, DH keySize < 1024, \
|
|||
# Example:
|
||||
# jdk.tls.legacyAlgorithms=DH_anon, DES_CBC, SSL_RSA_WITH_RC4_128_MD5
|
||||
#
|
||||
jdk.tls.legacyAlgorithms= \
|
||||
K_NULL, C_NULL, M_NULL, \
|
||||
DH_anon, ECDH_anon, \
|
||||
RC4_128, RC4_40, DES_CBC, DES40_CBC, \
|
||||
3DES_EDE_CBC
|
||||
jdk.tls.legacyAlgorithms=NULL, anon, RC4, DES, 3DES_EDE_CBC
|
||||
|
||||
#
|
||||
# The pre-defined default finite field Diffie-Hellman ephemeral (DHE)
|
||||
|
@ -1277,3 +1296,16 @@ jdk.io.permissionsUseCanonicalPath=false
|
|||
# security property value defined here.
|
||||
#
|
||||
#jdk.security.krb5.default.initiate.credential=always-impersonate
|
||||
|
||||
#
|
||||
# Trust Anchor Certificates - CA Basic Constraint check
|
||||
#
|
||||
# X.509 v3 certificates used as Trust Anchors (to validate signed code or TLS
|
||||
# connections) must have the cA Basic Constraint field set to 'true'. Also, if
|
||||
# they include a Key Usage extension, the keyCertSign bit must be set. These
|
||||
# checks, enabled by default, can be disabled for backward-compatibility
|
||||
# purposes with the jdk.security.allowNonCaAnchor System and Security
|
||||
# properties. In the case that both properties are simultaneously set, the
|
||||
# System value prevails. The default value of the property is "false".
|
||||
#
|
||||
#jdk.security.allowNonCaAnchor=true
|
||||
|
|
1167
vendor/java/lib/classlist
vendored
1167
vendor/java/lib/classlist
vendored
File diff suppressed because it is too large
Load diff
BIN
vendor/java/lib/compressedrefs/j9ddr.dat
vendored
Normal file
BIN
vendor/java/lib/compressedrefs/j9ddr.dat
vendored
Normal file
Binary file not shown.
BIN
vendor/java/lib/compressedrefs/libj9dmp29.so
vendored
Normal file
BIN
vendor/java/lib/compressedrefs/libj9dmp29.so
vendored
Normal file
Binary file not shown.
BIN
vendor/java/lib/compressedrefs/libj9gc29.so
vendored
Normal file
BIN
vendor/java/lib/compressedrefs/libj9gc29.so
vendored
Normal file
Binary file not shown.
BIN
vendor/java/lib/compressedrefs/libj9gcchk29.so
vendored
Normal file
BIN
vendor/java/lib/compressedrefs/libj9gcchk29.so
vendored
Normal file
Binary file not shown.
BIN
vendor/java/lib/compressedrefs/libj9hookable29.so
vendored
Normal file
BIN
vendor/java/lib/compressedrefs/libj9hookable29.so
vendored
Normal file
Binary file not shown.
BIN
vendor/java/lib/compressedrefs/libj9jit29.so
vendored
Normal file
BIN
vendor/java/lib/compressedrefs/libj9jit29.so
vendored
Normal file
Binary file not shown.
BIN
vendor/java/lib/compressedrefs/libj9jnichk29.so
vendored
Normal file
BIN
vendor/java/lib/compressedrefs/libj9jnichk29.so
vendored
Normal file
Binary file not shown.
BIN
vendor/java/lib/compressedrefs/libj9jvmti29.so
vendored
Normal file
BIN
vendor/java/lib/compressedrefs/libj9jvmti29.so
vendored
Normal file
Binary file not shown.
BIN
vendor/java/lib/compressedrefs/libj9prt29.so
vendored
Normal file
BIN
vendor/java/lib/compressedrefs/libj9prt29.so
vendored
Normal file
Binary file not shown.
BIN
vendor/java/lib/compressedrefs/libj9thr29.so
vendored
Normal file
BIN
vendor/java/lib/compressedrefs/libj9thr29.so
vendored
Normal file
Binary file not shown.
BIN
vendor/java/lib/compressedrefs/libj9trc29.so
vendored
Normal file
BIN
vendor/java/lib/compressedrefs/libj9trc29.so
vendored
Normal file
Binary file not shown.
BIN
vendor/java/lib/compressedrefs/libj9vm29.so
vendored
Normal file
BIN
vendor/java/lib/compressedrefs/libj9vm29.so
vendored
Normal file
Binary file not shown.
BIN
vendor/java/lib/compressedrefs/libj9vmchk29.so
vendored
Normal file
BIN
vendor/java/lib/compressedrefs/libj9vmchk29.so
vendored
Normal file
Binary file not shown.
BIN
vendor/java/lib/compressedrefs/libj9vrb29.so
vendored
Normal file
BIN
vendor/java/lib/compressedrefs/libj9vrb29.so
vendored
Normal file
Binary file not shown.
BIN
vendor/java/lib/compressedrefs/libj9zlib29.so
vendored
Normal file
BIN
vendor/java/lib/compressedrefs/libj9zlib29.so
vendored
Normal file
Binary file not shown.
BIN
vendor/java/lib/compressedrefs/libjclse29.so
vendored
Normal file
BIN
vendor/java/lib/compressedrefs/libjclse29.so
vendored
Normal file
Binary file not shown.
BIN
vendor/java/lib/compressedrefs/libjvm.so
vendored
Normal file
BIN
vendor/java/lib/compressedrefs/libjvm.so
vendored
Normal file
Binary file not shown.
BIN
vendor/java/lib/compressedrefs/libomrsig.so
vendored
Normal file
BIN
vendor/java/lib/compressedrefs/libomrsig.so
vendored
Normal file
Binary file not shown.
BIN
vendor/java/lib/j9vm/libjsig.so
vendored
Normal file
BIN
vendor/java/lib/j9vm/libjsig.so
vendored
Normal file
Binary file not shown.
BIN
vendor/java/lib/j9vm/libjvm.so
vendored
Normal file
BIN
vendor/java/lib/j9vm/libjvm.so
vendored
Normal file
Binary file not shown.
1933
vendor/java/lib/java.properties
vendored
Normal file
1933
vendor/java/lib/java.properties
vendored
Normal file
File diff suppressed because it is too large
Load diff
BIN
vendor/java/lib/jexec
vendored
BIN
vendor/java/lib/jexec
vendored
Binary file not shown.
BIN
vendor/java/lib/jrt-fs.jar
vendored
BIN
vendor/java/lib/jrt-fs.jar
vendored
Binary file not shown.
BIN
vendor/java/lib/jspawnhelper
vendored
BIN
vendor/java/lib/jspawnhelper
vendored
Binary file not shown.
BIN
vendor/java/lib/libawt.so
vendored
BIN
vendor/java/lib/libawt.so
vendored
Binary file not shown.
BIN
vendor/java/lib/libawt_headless.so
vendored
BIN
vendor/java/lib/libawt_headless.so
vendored
Binary file not shown.
BIN
vendor/java/lib/libawt_xawt.so
vendored
BIN
vendor/java/lib/libawt_xawt.so
vendored
Binary file not shown.
BIN
vendor/java/lib/libfontmanager.so
vendored
BIN
vendor/java/lib/libfontmanager.so
vendored
Binary file not shown.
BIN
vendor/java/lib/libfreetype.so
vendored
BIN
vendor/java/lib/libfreetype.so
vendored
Binary file not shown.
BIN
vendor/java/lib/libjava.so
vendored
BIN
vendor/java/lib/libjava.so
vendored
Binary file not shown.
BIN
vendor/java/lib/libjavajpeg.so
vendored
BIN
vendor/java/lib/libjavajpeg.so
vendored
Binary file not shown.
BIN
vendor/java/lib/libjawt.so
vendored
BIN
vendor/java/lib/libjawt.so
vendored
Binary file not shown.
BIN
vendor/java/lib/libjimage.so
vendored
BIN
vendor/java/lib/libjimage.so
vendored
Binary file not shown.
BIN
vendor/java/lib/libjli.so
vendored
BIN
vendor/java/lib/libjli.so
vendored
Binary file not shown.
BIN
vendor/java/lib/libjncrypto.so
vendored
Normal file
BIN
vendor/java/lib/libjncrypto.so
vendored
Normal file
Binary file not shown.
BIN
vendor/java/lib/libjsig.so
vendored
BIN
vendor/java/lib/libjsig.so
vendored
Binary file not shown.
BIN
vendor/java/lib/libjsound.so
vendored
BIN
vendor/java/lib/libjsound.so
vendored
Binary file not shown.
BIN
vendor/java/lib/liblcms.so
vendored
BIN
vendor/java/lib/liblcms.so
vendored
Binary file not shown.
BIN
vendor/java/lib/libmanagement.so
vendored
BIN
vendor/java/lib/libmanagement.so
vendored
Binary file not shown.
BIN
vendor/java/lib/libmlib_image.so
vendored
BIN
vendor/java/lib/libmlib_image.so
vendored
Binary file not shown.
BIN
vendor/java/lib/libnet.so
vendored
BIN
vendor/java/lib/libnet.so
vendored
Binary file not shown.
BIN
vendor/java/lib/libnio.so
vendored
BIN
vendor/java/lib/libnio.so
vendored
Binary file not shown.
BIN
vendor/java/lib/libprefs.so
vendored
BIN
vendor/java/lib/libprefs.so
vendored
Binary file not shown.
BIN
vendor/java/lib/libsplashscreen.so
vendored
BIN
vendor/java/lib/libsplashscreen.so
vendored
Binary file not shown.
BIN
vendor/java/lib/libsunec.so
vendored
BIN
vendor/java/lib/libsunec.so
vendored
Binary file not shown.
BIN
vendor/java/lib/libverify.so
vendored
BIN
vendor/java/lib/libverify.so
vendored
Binary file not shown.
BIN
vendor/java/lib/libzip.so
vendored
BIN
vendor/java/lib/libzip.so
vendored
Binary file not shown.
BIN
vendor/java/lib/modules
vendored
BIN
vendor/java/lib/modules
vendored
Binary file not shown.
1
vendor/java/lib/options.default
vendored
Normal file
1
vendor/java/lib/options.default
vendored
Normal file
|
@ -0,0 +1 @@
|
|||
"-Xlockword:mode=default,noLockword=java/lang/String,noLockword=java/util/MapEntry,noLockword=java/util/HashMap$Entry,noLockword=org/apache/harmony/luni/util/ModifiedMap$Entry,noLockword=java/util/Hashtable$Entry,noLockword=java/lang/invoke/MethodType,noLockword=java/lang/invoke/MethodHandle,noLockword=java/lang/invoke/CollectHandle,noLockword=java/lang/invoke/ConstructorHandle,noLockword=java/lang/invoke/ConvertHandle,noLockword=java/lang/invoke/ArgumentConversionHandle,noLockword=java/lang/invoke/AsTypeHandle,noLockword=java/lang/invoke/ExplicitCastHandle,noLockword=java/lang/invoke/FilterReturnHandle,noLockword=java/lang/invoke/DirectHandle,noLockword=java/lang/invoke/ReceiverBoundHandle,noLockword=java/lang/invoke/DynamicInvokerHandle,noLockword=java/lang/invoke/FieldHandle,noLockword=java/lang/invoke/FieldGetterHandle,noLockword=java/lang/invoke/FieldSetterHandle,noLockword=java/lang/invoke/StaticFieldGetterHandle,noLockword=java/lang/invoke/StaticFieldSetterHandle,noLockword=java/lang/invoke/IndirectHandle,noLockword=java/lang/invoke/InterfaceHandle,noLockword=java/lang/invoke/VirtualHandle,noLockword=java/lang/invoke/PrimitiveHandle,noLockword=java/lang/invoke/InvokeExactHandle,noLockword=java/lang/invoke/InvokeGenericHandle,noLockword=java/lang/invoke/VarargsCollectorHandle,noLockword=java/lang/invoke/ThunkTuple"
|
35
vendor/java/lib/security/default.policy
vendored
35
vendor/java/lib/security/default.policy
vendored
|
@ -78,6 +78,8 @@ grant codeBase "jrt:/java.sql.rowset" {
|
|||
|
||||
|
||||
grant codeBase "jrt:/java.xml.crypto" {
|
||||
permission java.lang.RuntimePermission
|
||||
"getStackWalkerWithClassReference";
|
||||
permission java.lang.RuntimePermission
|
||||
"accessClassInPackage.sun.security.util";
|
||||
permission java.util.PropertyPermission "*", "read";
|
||||
|
@ -103,6 +105,19 @@ grant codeBase "jrt:/jdk.accessibility" {
|
|||
permission java.lang.RuntimePermission "accessClassInPackage.sun.awt";
|
||||
};
|
||||
|
||||
grant codeBase "jrt:/jdk.attach" {
|
||||
permission java.lang.RuntimePermission "accessClassInPackage.com.ibm.oti.util";
|
||||
permission java.lang.RuntimePermission "accessClassInPackage.openj9.internal.tools.attach.target";
|
||||
permission java.lang.RuntimePermission "accessClassInPackage.openj9.internal.tools.attach.diagnostics.base";
|
||||
permission java.util.PropertyPermission "com.ibm.tools.attach.*", "read";
|
||||
// required by com.ibm.tools.attach.attacher.OpenJ9AttachProvider.listVirtualMachinesImp():commonDir.exists(),
|
||||
// openj9.internal.tools.attach.target.Reply.writeReply():new RandomAccessFile(replyFile, "rw"),
|
||||
// and openj9.internal.tools.attach.target.Reply.deleteReply():replyFile.delete()
|
||||
permission java.io.FilePermission "<<ALL FILES>>", "read,write,delete";
|
||||
// required by com.ibm.tools.attach.attacher.OpenJ9VirtualMachine.tryAttachTarget():targetServer.accept()
|
||||
permission java.net.SocketPermission "localhost:1024-", "accept,resolve";
|
||||
};
|
||||
|
||||
grant codeBase "jrt:/jdk.charsets" {
|
||||
permission java.util.PropertyPermission "os.name", "read";
|
||||
permission java.lang.RuntimePermission "charsetProvider";
|
||||
|
@ -206,6 +221,26 @@ grant codeBase "jrt:/jdk.zipfs" {
|
|||
permission java.util.PropertyPermission "user.name", "read";
|
||||
};
|
||||
|
||||
grant codeBase "jrt:/openj9.cuda" {
|
||||
permission java.lang.RuntimePermission "accessClassInPackage.com.ibm.oti.vm";
|
||||
permission java.lang.RuntimePermission "loadLibrary.cuda4j29";
|
||||
permission java.lang.RuntimePermission "modifyThread";
|
||||
permission java.lang.RuntimePermission "modifyThreadGroup";
|
||||
permission java.util.PropertyPermission "com.ibm.oti.vm.library.version", "read";
|
||||
};
|
||||
|
||||
grant codeBase "jrt:/openj9.gpu" {
|
||||
permission com.ibm.gpu.GPUPermission "access";
|
||||
permission java.lang.RuntimePermission "accessClassInPackage.com.ibm.gpu.spi";
|
||||
permission java.lang.RuntimePermission "accessClassInPackage.com.ibm.oti.vm";
|
||||
permission java.lang.RuntimePermission "modifyThread";
|
||||
permission java.lang.RuntimePermission "modifyThreadGroup";
|
||||
permission java.util.PropertyPermission "com.ibm.gpu.verbose", "read";
|
||||
permission java.util.PropertyPermission "com.ibm.gpu.enforce", "read";
|
||||
permission java.util.PropertyPermission "com.ibm.gpu.enable", "read";
|
||||
permission java.util.PropertyPermission "com.ibm.gpu.disable", "read";
|
||||
};
|
||||
|
||||
// permissions needed by applications using java.desktop module
|
||||
grant {
|
||||
permission java.lang.RuntimePermission "accessClassInPackage.com.sun.beans";
|
||||
|
|
BIN
vendor/java/lib/security/public_suffix_list.dat
vendored
BIN
vendor/java/lib/security/public_suffix_list.dat
vendored
Binary file not shown.
BIN
vendor/java/lib/server/classes.jsa
vendored
BIN
vendor/java/lib/server/classes.jsa
vendored
Binary file not shown.
BIN
vendor/java/lib/server/libjsig.so
vendored
BIN
vendor/java/lib/server/libjsig.so
vendored
Binary file not shown.
BIN
vendor/java/lib/server/libjvm.so
vendored
BIN
vendor/java/lib/server/libjvm.so
vendored
Binary file not shown.
2
vendor/java/release
vendored
2
vendor/java/release
vendored
|
@ -1,2 +1,2 @@
|
|||
JAVA_VERSION="14.0.2"
|
||||
JAVA_VERSION="15"
|
||||
MODULES="java.base java.datatransfer java.xml java.prefs java.desktop java.logging java.management java.security.sasl java.naming java.net.http java.scripting java.transaction.xa java.sql jdk.crypto.ec jdk.unsupported jdk.zipfs"
|
||||
|
|
Loading…
Reference in a new issue