Producing community binaries for OpenJDK

[dalibor topic]

On 23.03.2017 15:30, Martijn Verburg wrote:
> * A place to try out build infra ideas that might one day be promoted
> to OpenJDK proper

As long as we're talking about flow of ideas, that might make sense.

If the expectation is that patches and build infra code would get promoted
into OpenJDK, I think that's very unlikely, as OpenJDK requires an OCA 
for contributions, while GitHub does not. So over time, the cost of 
untangling who did what in some random GitHub repo in order to arrive at 
something that can be contributed tends to overshadow any benefit from 
such accumulations of code.

In short, if you are expecting to see actual source code, rather than 
just ideas, eventually flow into OpenJDK, you should look at creating an 
OpenJDK Project.

> A key idea is that the entirety of the build infrastructure (servers,
> build scripts etc) will be open and auditable so that end users can
> know exactly how a binary was built.

That's typically already the case for distribution provided binaries.

Consider for example 
https://buildd.debian.org/status/fetch.php?pkg=openjdk-8&arch=ppc64&ver=8u121-b13-4&stamp=1488593057&raw=0 
that provides information about used libraries, tools, compiler flags, etc.

A more interesting challenge would be to look at changes necessary for 
producing reproducible builds.

See 
https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/openjdk-8.html 
for a list of potential issues, https://reproducible-builds.org/ for an 
overview of the concept, and 
https://blog.holisticon.de/2016/10/reproducible-builds-in-java/ for 
general issues with making Java builds reproducible.

cheers,
dalibor topic
-- 
<http://www.oracle.com> Dalibor Topic | Principal Product Manager
Phone: +494089091214 <tel:+494089091214> | Mobile: +491737185961
<tel:+491737185961>

ORACLE Deutschland B.V. & Co. KG | Kühnehöfe 5 | 22761 Hamburg

ORACLE Deutschland B.V. & Co. KG
Hauptverwaltung: Riesstr. 25, D-80992 München
Registergericht: Amtsgericht München, HRA 95603

Komplementärin: ORACLE Deutschland Verwaltung B.V.
Hertogswetering 163/167, 3543 AS Utrecht, Niederlande
Handelsregister der Handelskammer Midden-Niederlande, Nr. 30143697
Geschäftsführer: Alexander van der Ven, Jan Schultheiss, Val Maher

<http://www.oracle.com/commitment> Oracle is committed to developing
practices and products that help protect the environment