[keycloak-user] Java 11 (Docker container base)

[Sebastian Laskawiec]

I believe using the commercial Hotspot JVM provided by Oracle will not be
an option. We will probably stick with OpenJDK.

BTW, all JDK LTS releases will receive much longer updates. Please see this
blog post for the reference:
https://developers.redhat.com/blog/2018/09/24/the-future-of-java-and-openjdk-updates-without-oracle-support/

On Thu, Oct 25, 2018 at 4:37 PM Pavel Micka <Pavel.Micka at zoomint.com> wrote:

> It was mainly a question about how the support/updates will be handled -
> if Keycloak will rely on „community only“ updates for Java 8 or if there
> will be switch to new Java (updated by Oracle in the half-year window).
>
> I am sure that our customers will ask in reviews, how we have the security
> updates are handled throughout our solution. And if all parts of our
> solution rely only on secure resources.
>
>
>
> So the question should more be: Will Java under Keycloak be periodically
> updated (without commercial support) after January 2019?
>
>
>
> Regards,
>
>
>
> Pavel
>
>
>
> *From:* Sebastian Laskawiec <slaskawi at redhat.com>
> *Sent:* Thursday, October 25, 2018 4:00 PM
> *To:* Pavel Micka <Pavel.Micka at zoomint.com>
> *Cc:* Meissa M'baye Sakho <msakho at redhat.com>; keycloak-user <
> keycloak-user at lists.jboss.org>
>
>
> *Subject:* Re: [keycloak-user] Java 11 (Docker container base)
>
>
>
> From the support perspective, Red Hat offers extended support till June
> 2023 [1].
>
>
>
> Our move towards JDK11 (LTS) relies heavily on Wildfly/EAP Team. I guess
> we still have plenty of time to do the switch, so I wouldn't rush things
> too much.
>
>
>
> BTW, why do you need JDK11, especially in the container?
>
>
>
> [1] https://access.redhat.com/articles/1299013
>
>
>
> On Tue, Oct 23, 2018 at 1:13 PM Pavel Micka <Pavel.Micka at zoomint.com>
> wrote:
>
> Sorry, end of january (my fault):
> https://www.oracle.com/technetwork/java/eol-135779.html. Then Oracle Java
> and OpenJDK will most probably start to diverge, as OpenJDK will not have
> access to Oracle repos (afaik). So the speed of security fixes will depend
> on willigness of community to fix the upcomming issues.
>
> Pavel
>
> From: Meissa M'baye Sakho <msakho at redhat.com>
> Sent: Tuesday, October 23, 2018 11:04 AM
> To: Pavel Micka <Pavel.Micka at zoomint.com>
> Cc: keycloak-user <keycloak-user at lists.jboss.org>
> Subject: Re: [keycloak-user] Java 11 (Docker container base)
>
> Hello,
> Pavel, where did you get the information that the official Java 8 support
> will cease at the end of december?
> https://access.redhat.com/articles/1299013
> https://www.oracle.com/technetwork/java/javase/eol-135779.html
> Meissa
>
> Le lun. 22 oct. 2018 à 16:33, Pavel Micka <Pavel.Micka at zoomint.com<mailto:
> Pavel.Micka at zoomint.com>> a écrit :
> Hello everyone,
>
> What is the plan for Java 11 support? The point is that current versions
> of Docker containers are based on OpenJDK 8, but the official Java 8
> support will cease at the end of December. Will Keycloak use Java 11 by
> that time or will it rely on updates provided by the community.
>
> This is important to us, as Keycloak is important part of our app security.
>
> Thanks,
>
> Pavel
>
> // I have found this ticket in Jira, but it does not provide too many
> details: https://issues.jboss.org/browse/KEYCLOAK-7811
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org<mailto:keycloak-user at lists.jboss.org>
> https://lists.jboss.org/mailman/listinfo/keycloak-user
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>
>