Producing community binaries for OpenJDK

[Martijn Verburg]

Hi Dalibor,

On 28 March 2017 at 14:10, dalibor topic <dalibor.topic at oracle.com> wrote:

>
>
> On 23.03.2017 15:30, Martijn Verburg wrote:
>
>> * A place to try out build infra ideas that might one day be promoted
>> to OpenJDK proper
>>
>
> As long as we're talking about flow of ideas, that might make sense.
>
> If the expectation is that patches and build infra code would get promoted
> into OpenJDK, I think that's very unlikely, as OpenJDK requires an OCA for
> contributions, while GitHub does not. So over time, the cost of untangling
> who did what in some random GitHub repo in order to arrive at something
> that can be contributed tends to overshadow any benefit from such
> accumulations of code.
>

Sure, that's actually a cycle I want to introduce (some sort of CLA) but
appreciate the IP flow here.


> In short, if you are expecting to see actual source code, rather than just
> ideas, eventually flow into OpenJDK, you should look at creating an OpenJDK
> Project.


Which we might do if this thing has legs, but it has a long way to go to
see if it's useful or desirable yet.


> A key idea is that the entirety of the build infrastructure (servers,
>> build scripts etc) will be open and auditable so that end users can
>> know exactly how a binary was built.
>>
>
> That's typically already the case for distribution provided binaries.
>
> Consider for example https://buildd.debian.org/stat
> us/fetch.php?pkg=openjdk-8&arch=ppc64&ver=8u121-b13-4&sta
> mp=1488593057&raw=0 that provides information about used libraries,
> tools, compiler flags, etc.
>
> A more interesting challenge would be to look at changes necessary for
> producing reproducible builds.
>
> See https://tests.reproducible-builds.org/debian/rb-pkg/unstable
> /amd64/openjdk-8.html for a list of potential issues,
> https://reproducible-builds.org/ for an overview of the concept, and
> https://blog.holisticon.de/2016/10/reproducible-builds-in-java/ for
> general issues with making Java builds reproducible.


Yep that's the sort of info we should be gathering in for this effort.

Cheers,
Martijn


>
>
> cheers,
> dalibor topic
> --
> <http://www.oracle.com> Dalibor Topic | Principal Product Manager
> Phone: +494089091214 <tel:+494089091214> | Mobile: +491737185961
> <tel:+491737185961>
>
> ORACLE Deutschland B.V. & Co. KG | Kühnehöfe 5 | 22761 Hamburg
>
> ORACLE Deutschland B.V. & Co. KG
> Hauptverwaltung: Riesstr. 25, D-80992 München
> Registergericht: Amtsgericht München, HRA 95603
>
> Komplementärin: ORACLE Deutschland Verwaltung B.V.
> Hertogswetering 163/167, 3543 AS Utrecht, Niederlande
> Handelsregister der Handelskammer Midden-Niederlande, Nr. 30143697
> Geschäftsführer: Alexander van der Ven, Jan Schultheiss, Val Maher
>
> <http://www.oracle.com/commitment> Oracle is committed to developing
> practices and products that help protect the environment
>