Bug 2203412 - Base JDK CDS archive (classes.jsa) not unique per JDK build [rhel-9,openjdk-17]
Summary: Base JDK CDS archive (classes.jsa) not unique per JDK build [rhel-9,openjdk-17]
Keywords:
Status: MODIFIED
Alias: None
Product: Red Hat Enterprise Linux 9
Classification: Red Hat
Component: java-17-openjdk
Version: 9.2
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Andrew John Hughes
QA Contact: OpenJDK QA
URL:
Whiteboard:
Depends On:
Blocks: 2221654 2221653
TreeView+ depends on / blocked
 
Reported: 2023-05-12 15:04 UTC by Andrew John Hughes
Modified: 2023-07-15 18:50 UTC (History)
1 user (show)

Fixed In Version: java-17-openjdk-17.0.8.0.1-0.1.ea.el9
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 2221653 2221654 (view as bug list)
Environment:
Last Closed:
Type: Bug
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker RHELPLAN-157101 0 None None None 2023-05-12 15:04:38 UTC

Description Andrew John Hughes 2023-05-12 15:04:02 UTC
This bug was initially created as a copy of Bug #2196908

I am copying this bug because: 

Needs to be fixed in RHEL 9 too

Description of problem:
Installing java-17-openjdk-headless on two different systems or, for example, in two different containers results in distinct classes.jsa files getting generated. This is because the CDS archive is being generated by a post script action of the java-17-openjdk-headless package. Therefore, the CDS archive is unique per installation (even if it's the same NVRA being installed), not per JDK version. This breaks usages of Application Class Data Sharing which uses the dynamic dump feature. In such a scenario the base CDS archive (and its crc) is encoded in the dynamic archive and if that doesn't match at runtime AppCDS sharing fails with:

An error has occurred while processing the shared archive file.
Dynamic archive cannot be used: static archive header checksum verification failed.
Error occurred during initialization of VM
Unable to use shared archive.

Version-Release number of selected component (if applicable):
java-17-openjdk-headless-17.0.7.0.7-1.el8_7.x86_64

How reproducible:
Always.

Steps to Reproduce:
1. Install java-17-openjdk-headless of the same NVRA multiple times
2. Observe that the classes.jsa is unique per installation (e.g. by 'ls -l' or running 'sha512sum' on the file and compare timestamps/sums)

Actual results:
classes.jsa is unique per installation.

Expected results:
classes.jsa is the same across multiple installations of java-17-openjdk-headless of the *same* NVR (Name Version Release). classes.jsa is being generated during the OpenJDK build and should be unique per build.

Additional Info:
This breaks some AppCDS deployment scenarios on OpenShift when using ubi8/openjdk-17 images.


Note You need to log in before you can comment on or make changes to this bug.