Stewart X Addison

aixPB: Stop overwriting /usr/bin/perl with freeware on AIX

11

Draft PR to document what I've done for my own purposes if nothing else in case I forget since I'm not working today :-) By default AIX has `/usr/bin/perl` pointing...

Features that impact the whole project (e.g. Adding a new OpenJDK distribution)are made over at the [adoptium](https://github.com/adoptium/adoptium/). Otherwise, please describe what enhancement you would like to see in the build...

https://ci.adoptopenjdk.net/computer/test-aws-ubuntu1804-armv8-1/ is a fairly large system so I want to decomission it to save costs which we are incurring. I've shut it down but am leaving the system provisioned for...

Make more use of "set build name" plugin to identify which builds are which

10

e.g. showing version numbers on build/test jobs https://wiki.jenkins.io/display/JENKINS/Build+Name+Setter+Plugin is the plugin and we currently have it on the JCK jenkins, but it's not being used on the main one.

SSDF PO.3.2 Documentation on maintainance and security of toolchains

3

Part of https://github.com/adoptium/adoptium/issues/122: ## PO.3.2 Follow recommended security practices to deploy, operate, and maintain tools and toolchains - Compose and maintain process documentation on each toolchain’s workflow and how the...

The Solaris/x64 machines we have are running quite a lot of processes when you look at the `svcs -a` output. We should look at which of these can be shut...

Windows pipelines taking up to three days to complete + can we reschedule JDK21+tip?

2

Ref: [openjdk21-pipeline](https://ci.adoptium.net/job/build-scripts/job/openjdk21-pipeline/) - most other pipelines are completing within a day (Linux/s390x being another outlier):  Windows JDk21 pipeline shows long run times which will be mostly queue time: ...

SHA256 checksum failure for jdk8u402/win32/msi

5

SHA256 checksum on OpenJDK8U-jre_x86-32_windows_hotspot_8u402b06.msi may not be correct. This was flagged in a download verification test. Other files in the releases seemed ok.

Improvement suggestions for the SBoM generation process

1

Having just completed the work for https://github.com/adoptium/temurin-build/pull/3538 I have some notes which I want to capture for discussion regarding potential improvements to the process: - I'm not a fan of...

These would be useful for identifying vulnerabilities in components as per https://cyclonedx.org/use-cases/#known-vulnerabilities