[JIRA] (JENKINS-56679) SecurityException when trying to run a maven job with OpenJ9 JVM

2 views
Skip to first unread message

kaser@iconparc.de (JIRA)

unread,
Mar 22, 2019, 8:22:02 AM3/22/19
to jenkinsc...@googlegroups.com
Christoph Kaser created an issue
 
Jenkins / Bug JENKINS-56679
SecurityException when trying to run a maven job with OpenJ9 JVM
Issue Type: Bug Bug
Assignee: Unassigned
Components: core, maven-plugin
Created: 2019-03-22 12:21
Environment: jenkins 2.164.1
maven-plugin 3.2

java version running jenkins:
java.runtime.name OpenJDK Runtime Environment
java.runtime.version 1.8.0_181-8u181-b13-2~deb9u1-b13
java.version 1.8.0_181
java.vm.info mixed mode
java.vm.name OpenJDK 64-Bit Server VM
java.vm.specification.name Java Virtual Machine Specification
java.vm.specification.vendor Oracle Corporation
java.vm.specification.version 1.8
java.vm.vendor Oracle Corporation
java.vm.version 25.181-b13


Priority: Major Major
Reporter: Christoph Kaser

When I try to build a job with OpenJ9 for Java 12, I get a SecurityExceptionin the remote executor before the maven execution actually starts:

[IPACT_Java12] $ /var/local/jenkins/tools/hudson.model.JDK/JDK12_OpenJ9/jdk-12+33/bin/java -Duser.home=/var/local/jenkins -cp /var/local/jenkins/plugins/maven-plugin/WEB-INF/lib/maven33-agent-1.12.jar:/var/local/jenkins/tools/hudson.tasks.Maven_MavenInstallation/Maven3/boot/plexus-classworlds-2.5.2.jar:/var/local/jenkins/tools/hudson.tasks.Maven_MavenInstallation/Maven3/conf/logging jenkins.maven3.agent.Maven33Main /var/local/jenkins/tools/hudson.tasks.Maven_MavenInstallation/Maven3 /var/lib/tomcat8/webapps/jenkins/WEB-INF/lib/remoting-3.29.jar /var/local/jenkins/plugins/maven-plugin/WEB-INF/lib/maven33-interceptor-1.12.jar /var/local/jenkins/plugins/maven-plugin/WEB-INF/lib/maven3-interceptor-commons-1.12.jar 34243
<===[JENKINS REMOTING CAPACITY]===>Exception in thread "main" java.lang.reflect.InvocationTargetException
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:567)
at jenkins.maven3.agent.Maven33Main.main(Maven33Main.java:135)
at jenkins.maven3.agent.Maven33Main.main(Maven33Main.java:64)
Caused by: java.lang.SecurityException: Signers of 'hudson.remoting.$Proxy1' do not match signers of other classes in package
at java.base/java.lang.ClassLoader.checkPackageSigners(ClassLoader.java:556)
at java.base/java.lang.ClassLoader.defineClassInternal(ClassLoader.java:470)
at java.base/java.lang.Access.defineClass(Access.java:240)
at java.base/java.lang.reflect.Proxy$ProxyBuilder.defineProxyClass(Proxy.java:537)
at java.base/java.lang.reflect.Proxy$ProxyBuilder.build(Proxy.java:646)
at java.base/java.lang.reflect.Proxy.lambda$getProxyConstructor$1(Proxy.java:425)
at java.lang.reflect.Proxy$$Lambda$23.00000000404E6040.apply(Unknown Source)
at java.base/jdk.internal.loader.AbstractClassLoaderValue$Memoizer.get(AbstractClassLoaderValue.java:329)
at java.base/jdk.internal.loader.AbstractClassLoaderValue.computeIfAbsent(AbstractClassLoaderValue.java:205)
at java.base/java.lang.reflect.Proxy.getProxyConstructor(Proxy.java:423)
at java.base/java.lang.reflect.Proxy.newProxyInstance(Proxy.java:1004)
at hudson.remoting.RemoteInvocationHandler.wrap(RemoteInvocationHandler.java:167)
at hudson.remoting.Channel.<init>(Channel.java:541)
at hudson.remoting.ChannelBuilder.build(ChannelBuilder.java:360)
at hudson.remoting.Launcher.main(Launcher.java:743)
at hudson.remoting.Launcher.main(Launcher.java:724)
at hudson.remoting.Launcher.main(Launcher.java:715)
at hudson.remoting.Launcher.main(Launcher.java:711)
... 6 more
Set build name.
New build name is '#5 (11.9.6)'
ERROR: Processing failed due to a bug in the code. Please report this to the issue tracker (https://jenkins.io/redirect/report-an-issue).

 

I use this version of OpenJ9 from adoptopenjdk.net:

https://github.com/AdoptOpenJDK/openjdk12-binaries/releases/download/jdk-12%2B33_openj9-0.13.0/OpenJDK12U-jdk_x64_linux_openj9_12_33_openj9-0.13.0.tar.gz

When I use a nightly build of the Hotspot JVM for Java 12, everything works fine.

Add Comment Add Comment
 
This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d)

kaser@iconparc.de (JIRA)

unread,
Mar 22, 2019, 8:23:02 AM3/22/19
to jenkinsc...@googlegroups.com
Christoph Kaser updated an issue
Change By: Christoph Kaser
When I try to build a job with OpenJ9 for Java 12, I get a SecurityExceptionin SecurityException in the remote executor before the maven execution actually starts:
{quote}[IPACT_Java12] $ /var/local/jenkins/tools/hudson.model.JDK/JDK12_OpenJ9/jdk-12+33/bin/java -Duser.home=/var/local/jenkins -cp /var/local/jenkins/plugins/maven-plugin/WEB-INF/lib/maven33-agent-1.12.jar:/var/local/jenkins/tools/hudson.tasks.Maven_MavenInstallation/Maven3/boot/plexus-classworlds-2.5.2.jar:/var/local/jenkins/tools/hudson.tasks.Maven_MavenInstallation/Maven3/conf/logging jenkins.maven3.agent.Maven33Main /var/local/jenkins/tools/hudson.tasks.Maven_MavenInstallation/Maven3 /var/lib/tomcat8/webapps/jenkins/WEB-INF/lib/remoting-3.29.jar /var/local/jenkins/plugins/maven-plugin/WEB-INF/lib/maven33-interceptor-1.12.jar /var/local/jenkins/plugins/maven-plugin/WEB-INF/lib/maven3-interceptor-commons-1.12.jar 34243

<===[JENKINS REMOTING CAPACITY]===>Exception in thread "main" java.lang.reflect.InvocationTargetException
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:567)
at jenkins.maven3.agent.Maven33Main.main(Maven33Main.java:135)
at jenkins.maven3.agent.Maven33Main.main(Maven33Main.java:64)
*Caused by: java.lang.SecurityException: Signers of 'hudson.remoting.$Proxy1' do not match signers of other classes in package*

at java.base/java.lang.ClassLoader.checkPackageSigners(ClassLoader.java:556)
at java.base/java.lang.ClassLoader.defineClassInternal(ClassLoader.java:470)
at java.base/java.lang.Access.defineClass(Access.java:240)
at java.base/java.lang.reflect.Proxy$ProxyBuilder.defineProxyClass(Proxy.java:537)
at java.base/java.lang.reflect.Proxy$ProxyBuilder.build(Proxy.java:646)
at java.base/java.lang.reflect.Proxy.lambda$getProxyConstructor$1(Proxy.java:425)
at java.lang.reflect.Proxy$$Lambda$23.00000000404E6040.apply(Unknown Source)
at java.base/jdk.internal.loader.AbstractClassLoaderValue$Memoizer.get(AbstractClassLoaderValue.java:329)
at java.base/jdk.internal.loader.AbstractClassLoaderValue.computeIfAbsent(AbstractClassLoaderValue.java:205)
at java.base/java.lang.reflect.Proxy.getProxyConstructor(Proxy.java:423)
at java.base/java.lang.reflect.Proxy.newProxyInstance(Proxy.java:1004)
at hudson.remoting.RemoteInvocationHandler.wrap(RemoteInvocationHandler.java:167)
at hudson.remoting.Channel.<init>(Channel.java:541)
at hudson.remoting.ChannelBuilder.build(ChannelBuilder.java:360)
at hudson.remoting.Launcher.main(Launcher.java:743)
at hudson.remoting.Launcher.main(Launcher.java:724)
at hudson.remoting.Launcher.main(Launcher.java:715)
at hudson.remoting.Launcher.main(Launcher.java:711)
... 6 more
Set build name.
New build name is '#5 (11.9.6)'
ERROR: Processing failed due to a bug in the code. Please report this to the issue tracker ( [ https://jenkins.io/redirect/report-an-issue ] ).
{quote}

 

I use this version of OpenJ9 from adoptopenjdk.net:

[https://github.com/AdoptOpenJDK/openjdk12-binaries/releases/download/jdk-12%2B33_openj9-0.13.0/OpenJDK12U-jdk_x64_linux_openj9_12_33_openj9-0.13.0.tar.gz]

When I use a nightly build of the Hotspot JVM for Java 12, everything works fine.

mark.earl.waite@gmail.com (JIRA)

unread,
Apr 1, 2020, 11:09:02 PM4/1/20
to jenkinsc...@googlegroups.com
Mark Waite closed an issue as Won't Do
 

Jenkins will never support Java 12. Current support includes Java 8 and Java 11. The next Java release to be supported will be coordinated by the Platform Special Interest Group and will likely not happen until the next Java LTS release.

Upcoming plans for Java support are likely to be discussed in one of the April 2020 Platform SIG meetings.

OpenJ9 is already being used to run a Jenkins agent on s390x running Ubuntu Linux. It is also used to compile and test the Jenkins platform labeler plugin, the git client plugin, and the git plugin. Work is in progress through INFRA-2519 to add s390x infrastructure to ci.jenkins.io. When that is added, then OpenJ9 on JDK 8 and JDK 11 will be available for core PR's and plugin PR's.

Change By: Mark Waite
Status: Open Closed
Resolution: Won't Do
This message was sent by Atlassian Jira (v7.13.12#713012-sha1:6e07c38)
Atlassian logo
Reply all
Reply to author
Forward
0 new messages