I do not know that their plan is, nor do I know what to
recommend to anyone, at this point. I guess ask in Bug 463510,
if anyone does have questions.
David M Williams/Raleigh/IBM@IBMUS
Cross project issues
04/11/2015 02:02 PM
Notice of change to batch "signing
> ... we are using Tycho for our builds, but our
jobs provide the following option when calling Maven
> (which seems to be used by a couple of other hudson jobs as well;
> it was probably recommended in some instructions I donât remember):
> I assume we will have to adopt this to something like the following
This was probably recommended because you were using Java 7 or 8 to "run
your build" but it was determined to "minimize issues" to
use the lower version of pack200 (Especially when many users or pre-reqs
were using Java 6). So, a) yes, eventually you'll "minimize
issues" by using jdk 7 or 8 version, but b) that should be "automatic"
if you are using Java 7 or 8 to run your builds, so I'd try leaving it
out .. perhaps commented out, for when you need it again when you move
to Java 9 :)
As far as checking yourself, Ed has already described one basic procedure.
The b3 aggregator will also check, but only if you select the "build"
option, which can take a long time, if you are trying to build the whole
Sim. Release. It is possible, though, so set up your own b3 aggregator
job (just for testing) that uses only your contribution, plus the minimum
number of "prereq" contributions. It is not exactly easy to set
this up -- the first time -- but, once set up, is relatively easy to keep
up to date.
One more: There are some bash scripts in the sim release test project,
that are not very efficient, but are an easy way to check a whole directory
of jars and pack.gz jars. Those two scripts are verify.sh
(both need to be in your on your path, and you execute verifydir.sh (and
it calls verfiy.sh). You may need to make your own copy and adjust for
your system, and your needs.
Another almost-off-topic tidbit: Many are surprised they "have errors"
because they have tested "installing" or "updating"
using p2, and it works fine. The reason is that p2 tries it's best to "recover
from errors" so often if there are problems with *.jar.pack.gz, then
it will simply try the *.jar file directly, which would work. But, for
our Sim. Release repo (and should for all repos) we want the repo to be
"perfect" and not allow it to contain "badly packed"
jars. Doing so ends up causing "extra downloads", and wasting
users time when they do an update.
I realize it is not easy to get a "perfect repo", it takes extra
effort, but that's part of the whole purpose of having or joining the Sim.
Release, so everyone's extra effort is acknowledged, and appreciated.
Thanks for the questions!
project issues <cross-project-issues-dev@xxxxxxxxxxx>,
[cross-project-issues-dev] Notice of change to batch "signing
Sent by: cross-project-issues-dev-bounces@xxxxxxxxxxx
I admit I am not very acquainted with the internals of signing and pack200.
However, we are using Tycho for our builds, but our jobs provide the following
option when calling Maven (which seems to be used by a couple of other
hudson jobs as well; it was probably recommended in some instructions I
I wanted to let everyone know that "we" are changing the version
of Java's pack200 at the infrastructure service I call "batch signer".
It was using Java 6 level of pack200, and we have moved to the Java 8 level
This does not directly impact Tycho users or Buckminster users (which do
their own re-pack and pack, based on the VM the build is running, I assume)
but might effect PDE users, which traditionally have used this service
to "re-pack" (condition) and sign jars -- and, then at some short
later time are "packed". At that "some later time",
it is the release engineers responsibility to use the same version to 'pack'
as was used to 'repack'.
While no direct impact to Tycho or Buckminster builders, the principles
and consequences of moving from one level (Java 6) to another (Java 8)
apply with any builder, so the following points may be useful information
If you have "old byte codes", or, even new ones, compiled at
the Java 4, Java 5, or Java 6 level, you *might* find some of those bytes
codes no longer survive the "re-pack", sign, and "pack"
process (where as maybe the would survived, when using Java 6 to run your
build (and hence your repack/pack). That is, if user tries to download
the pack.gz file, and unpack into a normal jar, it may be reported to have
in "invalid signature" or in some other way "broken".
In my experience, with Orbit jars, the "error rate" is about
1.7%. Others, for some unknown reason, see higher rates (such as 20-30%?)
. Some of these cases *might* be bugs in the pack/unpack programs, but
it's just as likely that there are "bugs" (fringe cases) where
the byte codes for lower levels of Java are not quite "right".
All I know for sure: it has never been perfect.
But, luckily, easy to solve.
All three builders (PDE, Tycho, and Buckminster) allow you to specify an
'eclipse.inf' file in the META-INF directory, with a directive (line) that
Thus, that one problematic jar is not packed, but is still signed.
So important point 1: be sure you "pack200" with the same version
you used to do "repack" (if the builder doesn't do it for you
Important point 2: I wouldn't recommend studying the byte codes and trying
to find a pattern of code that is the cause (unless you just happen to
love byte codes), ... just slap in an eclipse.inf file and move on to more
Important point 3: You should not, ever never, "re-sign" and
certainly not re-pack or pack200 a jar that has already been signed or
processed by pack200. That pretty much guarantees the jar will be broken.
In more ways than one. (Bug
The reason for making this move, now, is that it is best to "keep
up" with what our users are using, and, with versions of Java that
are expected to stay in service for a while ... otherwise, we might have
to monkey around with this during a service release, which is less than
* Bonus, for reading this far in my wordy note: Why jump two levels, from
6 to 8, why not move to Java 7 first? Well it turns out, at the moment,
the versions of pack200 and unpack200 that ship with Java 7 and Java 8
the same. But, the advantage
is, in some service release, there might be a new version and we'd pick
it up automatically, as long as we use /shared/common/jdk1.8.0_x86-latest
consistently. Double bonus: remember that pack200 and unpack200 have
little to do with Java source code they are stand-alone executables, written
in C-code, that simply manipulate byte codes. Which is how p2 can let you
any version of pack200 you want,
no mater which version of Java you are using.
Naturally, feel free to comment in Bug
any questions or concrete problems known.