Foivos Zakkak

> though not sure I follow the comment about resetting fields since we have at least one substitution reset for another field, may be it is a different situation. The...

> However, passing `--initialize-at-run-time=java.nio.file.TempFileHelper\\,sun.security.util.AnchorCertificates` to `quarkus.native.additional-build-args` doesn't help The `AnchorCertificates` build-time-initialization is forced by GraalVM in https://github.com/oracle/graal/blob/5bdb1041af56f06a00515cd0bf3e107c628701ea/substratevm/src/com.oracle.svm.hosted/src/com/oracle/svm/hosted/SecurityServicesFeature.java#L329 Removing it allows Quarkus to initialize it at runtime and also removes the...

@sberyozkin I was able to get the native image tests to pass with the following patch (places BCFIPS first and then BCJSSE without touching the rest of the providers): ```diff...

I also tried removing SUNJSSE but that didn't work as you predicted although according to https://downloads.bouncycastle.org/fips-java/BC-FJA-(D)TLSUserGuide-1.0.3.pdf the minimum config is: ``` security.provider.1=org.bouncycastle.jcajce.provider.BouncyCastleFipsProvider security.provider.2=org.bouncycastle.jsse.provider.BouncyCastleJsseProvider fips:BCFIPS security.provider.3=sun.security.provider.Sun ```

FTR: the same test builds fine with Mandrel but still has the increased reachable types. https://github.com/graalvm/mandrel/actions/runs/6885132117/job/18729383262#step:12:201 > Was there a change recently which could have caused this? https://github.com/quarkusio/quarkus/pull/36312 was merged...

I had a better look at https://github.com/quarkusio/quarkus/pull/36312 and although I don't have a solution I see the following things that are concerning and are all related to getting the CI...

This was more extensively discussed in https://github.com/quarkusio/quarkus/issues/38683 and is now fixed by https://github.com/quarkusio/quarkus/pull/38886 and https://github.com/fabric8io/kubernetes-client/pull/5759

Regarding point 2 note also that in the [Native Image Committer Community Meeting 2022-06-02](https://github.com/oracle/graal/discussions/4616) it was stated that: > # JNI / Resource / Proxy / Serialization registration > >...

> @zakkak has this now been implemented? No. We have indeed switched to using mostly public APIs, but we still: 1. rely on some internal ones (see https://github.com/oracle/graal/issues/5013) 2. rely...

> 2. rely on gizmo to generate a Feature where we could instead generate json files. This is now fixed by: * https://github.com/quarkusio/quarkus/pull/29886 * https://github.com/quarkusio/quarkus/pull/31179 * https://github.com/quarkusio/quarkus/pull/31185 * https://github.com/quarkusio/quarkus/pull/31180 So...