RFR: 8349546: Linux support for Kerberos "nativeccache" functionality [v13]

Erik Joelsson erikj at openjdk.org
Mon Dec 1 14:57:09 UTC 2025


On Fri, 28 Nov 2025 19:38:20 GMT, Nick Hall <duke at openjdk.org> wrote:

> Thanks. I had a go at this today, but am struggling to build a devkit (even without any changes). Can you recommend a suitable host OS for building one, and which OS targets I should use to build the devkits to test?
> 
> (I've tried building a devkit for Fedora 41 using both RHEL8 and Fedora 41 as host OSes, but am getting a variety of issues in the build)

I haven't used this myself in a while, but I believe our internal kits use Oracle Linux 7 as host (in a container) and Oracle Linux 6 as target. RHEL should be equivalent to Oracle Linux, at least in this context. These are quite old, but the motivation for us to use devkits is to guarantee compatibility with old Linux versions. The host OS dictates the oldest where the kit itself can be used and the target dictates the oldest where the subsequently built JDK can be used. 

That said, getting a devkit to compile can be finicky for all sorts of reasons. The important part in this case is the sysroot, which is what you are going to change here, by adding extra packages. At least in theory, you could generate just a sysroot and supply that to the JDK build to verify this. I don't think there is a readily available make target for that though.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/28075#issuecomment-3596996889


More information about the security-dev mailing list