search

openfaas / templates

OpenFaaS Classic templates
https://www.openfaas.com
MIT License
279 stars 227 forks source link

JDK in java8 template is very old #163

Closed tim-hellhake closed 5 years ago

tim-hellhake commented 5 years ago

Expected Behaviour

Java8 template uses the latest JDK8 version.

Current Behaviour

Java8 template uses JDK 8u131 which is more than two years old.

Possible Solution

Use the latest tag of the jdk8 image.

Steps to Reproduce (for bugs)

1. 2. 3. 4.

Context

The used jdk misses several security updates.

Your Environment

alexellis commented 5 years ago

Hi @tim-hellhake

Please fill out the whole issue template. I've already mentioned this on #166

Alex

alexellis commented 5 years ago

Related: https://github.com/docker-library/openjdk/issues/345

tim-hellhake commented 5 years ago

I did some research based on the linked issues.

The last release of openjdk8 in alpine was u212. https://pkgs.alpinelinux.org/package/edge/community/x86/openjdk8

As the openjdk8 alpine image is built from the openjdk8 package in the alpine repository the latest image version is also u212.

Azule puts a lot of effort into releasing tck tested openjdk builds for various os and architectures. They also provide the latest openjdk8 builds as alpine images.

Corretto also provides the latest jdk8 images however there are no alpine based variants. There is an open issue for alpine support though.

Updating the jdk8 version to u212 (April 2019) would improve the situation significantly however it's no a long term solution. Does something speak against using the azul image?