<div dir="ltr">Thanks for forwarding Scott,& the clear explanation Jonathan. That's a super answer -- in fact it re-enforces why we wanted to move to a supported image :-) My only question would be just how to know when the update happens? Presumably it will be announced here? Thanks<div>Nigel</div></div> <div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, 15 Sep 2020 at 09:19, Jonathan Dowland <<a href="mailto:jdowland@redhat.com">jdowland@redhat.com</a>> wrote: </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi Scott, thanks for passing this on. The good news is these are two known issues that we are going to resolve in a release in the very near future. • <a href="https://issues.redhat.com/browse/OPENJDK-45" rel="noreferrer" target="_blank">https://issues.redhat.com/browse/OPENJDK-45</a> (Jolokia illegal reflective access) - being resolved by dropping Jolokia • <a href="https://issues.redhat.com/browse/CLOUD-3387" rel="noreferrer" target="_blank">https://issues.redhat.com/browse/CLOUD-3387</a> (s2i/run attempts to source missing scl-enable-maven) The next OpenJDK cumulative patch update is due in late October. We will release a new container image with fixes for the above two issues (and more) approx. a week later — this is so that folks who want a bit more time with the bundled Jolokia get the updated OpenJDK in a micro-version update before we remove it, and they have a little more breathing room to plan a migration without worrying about unpatched CVEs at the same time. Nigel if you have any further questions please just ask! On Mon, Sep 14, 2020 at 05:43:02PM -0400, Scott McCarty wrote: > Pulling Johnathan and Ezekial in who might better know... > > On Mon, Sep 14, 2020 at 11:37 AM Nigel Jones <<a href="mailto:nigel@cherrybyte.me.uk" target="_blank">nigel@cherrybyte.me.uk</a>> wrote: > > > I should add that our app (which has been put by maven into the > > target/assembly directory) is already built/packaged at this point - we are > > not using S2I > > > > On Mon, 14 Sep 2020 at 16:34, Nigel Jones <<a href="mailto:nigel@cherrybyte.me.uk" target="_blank">nigel@cherrybyte.me.uk</a>> wrote: > > > >> I've just started trying to use the open jdk 11 UBI-8 image, and have my > >> java app launching ok > >> > >> However when launched I see: > >> > >> jonesn:egeria/ (issue3580) $ docker run egeria > >> > >> > >> > >> [16:07:29] > >> /usr/local/s2i/run: line 15: > >> /opt/jboss/container/maven/default//scl-enable-maven: No such file or > >> directory > >> Starting the Java application using > >> /opt/jboss/container/java/run/run-java.sh ... > >> INFO exec java > >> -javaagent:/usr/share/java/jolokia-jvm-agent/jolokia-jvm.jar=config=/opt/jboss/container/jolokia/etc/jolokia.properties > >> -XX:+UseParallelOldGC -XX:MinHeapFreeRatio=10 -XX:MaxHeapFreeRatio=20 > >> -XX:GCTimeRatio=4 -XX:AdaptiveSizePolicyWeight=90 -XX:MaxMetaspaceSize=100m > >> -XX:+ExitOnOutOfMemoryError -cp "." -jar > >> /deployments/server/server-chassis-spring-2.3-SNAPSHOT.jar > >> WARNING: An illegal reflective access operation has occurred > >> WARNING: Illegal reflective access by org.jolokia.util.ClassUtil > >> (file:/usr/share/java/jolokia-jvm-agent/jolokia-jvm.jar) to constructor > >> sun.security.x509.X500Name(java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String,java.lang.String) > >> WARNING: Please consider reporting this to the maintainers of > >> org.jolokia.util.ClassUtil > >> WARNING: Use --illegal-access=warn to enable warnings of further illegal > >> reflective access operations > >> WARNING: All illegal access operations will be denied in a future release > >> I> No access restrictor found, access to any MBean is allowed > >> Jolokia: Agent started with URL <a href="https://172.17.0.2:8778/jolokia/" rel="noreferrer" target="_blank">https://172.17.0.2:8778/jolokia/</a> > >> ODPi Egeria > >> > >> ^^ last line is our app. > >> > >> The key parts of the dockerfile are: > >> > >> FROM <a href="http://registry.access.redhat.com/ubi8/openjdk-11" rel="noreferrer" target="_blank">registry.access.redhat.com/ubi8/openjdk-11</a> > >> > >> ARG version=2.3-SNAPSHOT > >> > >> COPY target/assembly /deployments > >> > >> ENV JAVA_APP_JAR=server/server-chassis-spring-${version}.jar > >> ENV JAVA_LIBDIR=${JAVA_APP_DIR}/server/lib > >> > >> > >> I'm going to research more about Jolokia (new to me) and S2I.. these > >> warnings aren't preventing the app from working, but may concern anyone > >> running them so I'd like to keep > >> things clean if at all possible. > >> > >> Any pointers welcomed! > >> > >> Thanks > >> Nigel Jones (planetf1) > >> ODPi Egeria maintainer > >> -- > >> ---- > >> Nigel Jones > >> > > > > > > -- > > ---- > > Nigel Jones > > _______________________________________________ > > Ubi mailing list > > <a href="mailto:Ubi@redhat.com" target="_blank">Ubi@redhat.com</a> > > <a href="https://www.redhat.com/mailman/listinfo/ubi" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/ubi</a> > > > > > -- > > -- > > A First Look at The Podman 2.0 API: > <a href="http://crunchtools.com/a-first-look-at-the-podman-2-0-api/" rel="noreferrer" target="_blank">http://crunchtools.com/a-first-look-at-the-podman-2-0-api/</a> > <<a href="http://crunchtools.com/comparison-linux-container-images/" rel="noreferrer" target="_blank">http://crunchtools.com/comparison-linux-container-images/</a>>-- > -- > > Scott McCarty > Product Management - Containers, Red Hat Enterprise Linux & OpenShift > Email: <a href="mailto:smccarty@redhat.com" target="_blank">smccarty@redhat.com</a> > Phone: 312-660-3535 > Cell: 330-807-1043 > Web: <a href="http://crunchtools.com" rel="noreferrer" target="_blank">http://crunchtools.com</a> -- 👱🏻 Jonathan Dowland <<a href="mailto:jdowland@redhat.com" target="_blank">jdowland@redhat.com</a>> Senior Software Engineer, OpenJDK, Red Hat </blockquote></div> <div> </div>-- <div dir="ltr" class="gmail_signature">---- Nigel Jones</div>