search

OpenLiberty / ci.docker

Eclipse Public License 1.0
43 stars 59 forks source link

<Blocked> Change Liberty images from UBI 8 to 9 #362

Open leochr opened 1 year ago

leochr commented 1 year ago

Existing UBI images for Liberty based on UBI 8. Update the images to use UBI 9. But consider any breaking change/implication with moving the UBI version up.

Semeru images based on UBI 9 are already available in icr.io. Check upon IBM Java image.

leochr commented 1 year ago

We discussed this today and decided to stick with UBI 8-based images for the time being for Liberty images and move up to UBI 9 after the final release of UBI 8 (which is 8.10 - expected to be released in May/June 2024). Replacing UBI 8 with 9 could potentially break existing apps (library changes) and also UBI 9 images can't be deployed on RHEL 7 hosts (still supported). Providing both UBI 8 and 9 images will double the list of images we need to produce and maintain and not feasible given the infrastructure challenges.

leochr commented 1 year ago

UBI 8 will be in support at least until 2029 (according to the information in https://access.redhat.com/support/policy/updates/errata#RHEL8_Life_Cycle). Some OS CVEs are only fixed for UBI 9 and not UBI 8 (it's marked as 'Will not fix' in Red Hat's CVE bulletin). Given these, the plan is to change Liberty images from UBI 8 to UBI 9. To minimize disruption, this change will be done in a non-quarterly driver 23.0.0.10. At that time, images for 23.0.0.6 and 23.0.0.9 would still be supported and would remain with UBI 8. This will provide customers that need to stay on a supported Liberty quarterly release images that's based on UBI 8 until the release of 24.0.0.6 (8 months).

malincoln commented 1 year ago

@leochr adding this from discussion with Alasdair and Tom: I've added 362 to the backlog, I would hope we get 483 with 362