Stewart X Addison

There are still some issues relating to the clean workspace options in the windows/docker case but otherwise this PR is doing what it needs to and we should be able...

> @sxa Ah of course, the July release still had the --user-openjdk-build-root-directory C:/workspace/openjdk-build/workspace/build/openjdkbuild This will cause a difference, as the upstream fix for that was only in jdk-21.0.5. Can you...

> So you are saying that mdir and tee need to be run as sudo? Yeah the `tee` is the bit that writes to files in `/etc` so needs to...

> @sxa What sort of machine is Adoptium using to run their test Jenkins instance? It's bare metal, 32GB RAM, 8 core and a pile of disk space :-) (Not...

Replying via email - many of them appear to be because we're using an Ubuntu-supported nginx and upguard may be objecting because it's not a later version.

`server_tokens off;` added to nginx configuration on jenkins and TRSS in order to remove the version number from HTTP responses. EDIT 25/July: Same change applied to AWX server.

Struggling to find a suitable option in the CloudFlare UI that will allow the port 80 remediation (Upguard seems unwilling to accept anything that isn't a straight HTTP redirect)

Spoiler: It wasn't on `mac` despite what the label bot thinks :-P

> @andrew-m-leonard @sxa I see this got moved to in progress but without an assignee; is there someone leading this that we should assign this issue to? That's a good...

This sounds in conflict with https://github.com/adoptium/ci-jenkins-pipelines/issues/1256 which was about ensuring we keep running all of the -ea builds, including for GA-equivalent levels, during the release cycle