aports/testing/openjdk23/APKBUILD

# Contributor: Simon Frankenberger <simon-alpine@fraho.eu>
# Maintainer: Simon Frankenberger <simon-alpine@fraho.eu>
pkgname=openjdk23
pkgver=23.0.2_p7
_pkgver=${pkgver%_p*}-ga
pkgrel=1
pkgdesc="Oracle OpenJDK 23"
provider_priority=23
url="https://github.com/openjdk/jdk23u"
# oracle dropped support for 32 bit
arch="all !x86 !armhf !armv7"
license="GPL-2.0-with-classpath-exception"
makedepends="
	openjdk22-jdk
	autoconf
	bash
	gawk
	grep
	make
	zip
	alsa-lib-dev
	cups-dev
	elfutils-dev
	fontconfig-dev
	freetype-dev
	giflib-dev
	lcms2-dev
	libffi-dev
	libjpeg-turbo-dev
	libx11-dev
	libxext-dev
	libxrandr-dev
	libxrender-dev
	libxt-dev
	libxtst-dev
	linux-headers
	zlib-dev
	"
depends="$pkgname-jdk $pkgname-demos $pkgname-doc" # for the virtual openjdk18 package
subpackages="$pkgname-jmods:_jmods:noarch
	$pkgname-demos:_demos:noarch
	$pkgname-doc:_doc:noarch
	$pkgname-jre:_jre
	$pkgname-src:_src:noarch
	$pkgname-static-libs:_static_libs
	$pkgname-jre-headless:_jre_headless
	$pkgname-jdk:_jdk
	"
source="jdk-$_pkgver.tar.gz::https://github.com/openjdk/jdk23u/archive/jdk-$_pkgver.tar.gz
	gtest-1.14.0.tar.gz::https://github.com/google/googletest/archive/v1.14.0.tar.gz

	ppc64le.patch
	riscv64.patch
	JDK-8299245_disable-tests.patch
	JDK-8218814_Wformat-security.patch
"
builddir="$srcdir/jdk23u-jdk-${_pkgver/+/-}"

provides="$pkgname-bootstrap=$pkgver-r$pkgrel"

_java_home="/usr/lib/jvm/java-23-openjdk"

sonameprefix="$pkgname:"

# enable running the JTReg tests in check?
# see comment in that function for explanation
_run_jtreg=${_run_jtreg:-0}
if [ $_run_jtreg -ne 0 ]; then
	makedepends="$makedepends java-jtreg"
	checkdepends="$checkdepends ttf-freefont xvfb-run"
fi

_jvm_variants=server
case $CTARGET_ARCH in
loongarch64)	_jvm_variants=zero	;;
esac
ldpath="$_java_home/lib:$_java_home/lib/$_jvm_variants"

# secfixes:
#   23.0.2_p7-r0:
#     - CVE-2025-21502
#   23.0.1_p11-r0:
#     - CVE-2024-21235
#     - CVE-2024-21210
#     - CVE-2024-21211
#     - CVE-2024-21208
#     - CVE-2024-21217

build() {
	if [ $_run_jtreg -ne 0 ]; then
		_with_jtreg="--with-jtreg=/usr/share/java/jtreg"
	else
		_with_jtreg="--with-jtreg=no"
	fi

	if [ -n "$USE_CCACHE" ]; then
		# workaround ccache being disallowed
		export PATH="/usr/bin:/bin:/sbin:/usr/sbin"
		local ccache="--enable-ccache"
	fi

	# CFLAGS, CXXFLAGS and LDFLAGS are ignored as shown by a warning
	# in the output of ./configure unless used like such:
	#  --with-extra-cflags="$CFLAGS"
	#  --with-extra-cxxflags="$CXXFLAGS"
	#  --with-extra-ldflags="$LDFLAGS"
	# See also paragraph "Configure Control Variables" from "common/doc/building.md"
	# shellcheck disable=2097 disable=2098
	CFLAGS='' CXXFLAGS='' LDFLAGS='' \
		bash ./configure \
		--build=$CBUILD \
		--host=$CHOST \
		--target=$CTARGET \
		--prefix="$_java_home" \
		--sysconfdir=/etc \
		--mandir=/usr/share/man \
		--infodir=/usr/share/info \
		--localstatedir=/var \
		--with-extra-cflags="$CFLAGS -D_LARGEFILE64_SOURCE" \
		--with-extra-cxxflags="$CXXFLAGS -D_LARGEFILE64_SOURCE" \
		--with-extra-ldflags="$LDFLAGS" \
		--with-zlib=system \
		--with-libjpeg=system \
		--with-giflib=system \
		--with-libpng=system \
		--with-lcms=system \
		--with-jobs=${JOBS:-4} \
		--with-test-jobs=${JOBS:-4} \
		--with-native-debug-symbols=none \
		--with-gtest=../googletest-1.14.0 \
		$ccache \
		$_with_jtreg \
		--disable-warnings-as-errors \
		--disable-precompiled-headers \
		--enable-dtrace=no \
		--with-jvm-variants=$_jvm_variants \
		--with-debug-level=release \
		--with-version-pre= \
		--with-version-opt="alpine-r$pkgrel" \
		--with-version-build="${pkgver##*p}" \
		--with-vendor-name="Alpine" \
		--with-vendor-url="https://alpinelinux.org/" \
		--with-vendor-bug-url="https://gitlab.alpinelinux.org/alpine/aports/issues" \
		--with-vendor-vm-bug-url="https://gitlab.alpinelinux.org/alpine/aports/issues"
	MAKEFLAGS='' make jdk-image
	MAKEFLAGS='' make static-libs-image
}

check() {
	# run the gtest unittest suites
	# they don't take long, DO NOT DISABLE THEM!
	# override make variable, disable -Werror
	MAKEFLAGS='' make test-hotspot-gtest

	# The jtreg tests take very, very long to finish and show some failures (9 - 12 on my machine, varying between runs)
	# I think these are not critical and can be safely ignored.
	# As the tests take too long, they are disabled by default.
	# When updating this aport please let them run at least once on your machine to see if the failure count changes.
	if [ $_run_jtreg -ne 0 ]; then
		_logfile=$( mktemp -p "$builddir" )
		MAKEFLAGS='' xvfb-run make \
			run-test-tier1 \
			run-test-tier2 \
			run-test-tier3 \
			| tee "$_logfile"
		msg "---------------------------------------"
		msg "The build log can be found at $_logfile"
		# abort the build so you may take a look at the logfile
		false
		return 1
	fi
}

package() {
	local libstaticdir="lib/static/linux-${CARCH/x86_64/amd64}/musl"

	mkdir -p "$pkgdir/$_java_home/$libstaticdir"

	cd build/linux-*-$_jvm_variants-release/images/
	cp -r jdk/* "$pkgdir/$_java_home"
	cp -r static-libs/lib/* "$pkgdir/$_java_home/$libstaticdir"
}

_jmods() {
	pkgdesc="Oracle OpenJDK 23 (jmods)"
	depends=""
	_fromroot="$pkgdir/$_java_home"
	_toroot="$subpkgdir/$_java_home"

	mkdir -p "$_toroot"
	mv "$_fromroot/jmods" "$_toroot"
}

_demos() {
	pkgdesc="Oracle OpenJDK 23 (demos)"
	depends=""
	_fromroot="$pkgdir/$_java_home"
	_toroot="$subpkgdir/$_java_home"

	mkdir -p "$_toroot"
	mv "$_fromroot/demo" "$_toroot"
}

_doc() {
	pkgdesc="Oracle OpenJDK 23 (Documentation)"
	depends=""
	_fromroot="$pkgdir/$_java_home"
	_toroot="$subpkgdir/$_java_home"

	mkdir -p "$_toroot"
	mv "$_fromroot/man" "$_toroot"
}

_jre() {
	pkgdesc="Oracle OpenJDK 23 (JRE)"
	depends="$pkgname-jre-headless"
	provides=java-jre
	_fromroot="$pkgdir/$_java_home"
	_toroot="$subpkgdir/$_java_home"

	mkdir -p "$_toroot/lib"
	mv "$_fromroot/lib/libawt_xawt.so" \
		"$_fromroot/lib/libfontmanager.so" \
		"$_fromroot/lib/libjavajpeg.so" \
		"$_fromroot/lib/libjawt.so" \
		"$_fromroot/lib/libjsound.so" \
		"$_fromroot/lib/liblcms.so" \
		"$_fromroot/lib/libsplashscreen.so" \
		"$_toroot/lib"
}

_src() {
	pkgdesc="Oracle OpenJDK 23 (sources)"
	depends="$pkgname-jre-headless"
	mkdir -p "$subpkgdir/$_java_home"/lib
	mv "$pkgdir"/$_java_home/lib/src.zip \
		"$subpkgdir"/$_java_home/lib/
}

_static_libs() {
	pkgdesc="Oracle OpenJDK 23 libraries for static linking"
	provides="java-jdk-static-libs"
	depends="$pkgname=$pkgver-r$pkgrel"

	amove $_java_home/lib/static
}

_jre_headless() {
	pkgdesc="Oracle OpenJDK 23 (JRE headless)"
	depends="java-common java-cacerts"
	provides=java-jre-headless
	_fromroot="$pkgdir/$_java_home"
	_toroot="$subpkgdir/$_java_home"

	mkdir -p "$_toroot"
	mv "$_fromroot/lib" "$_toroot"

	# ct.sym should stay in -jdk
	mkdir "$_fromroot/lib"
	mv "$_toroot/lib/ct.sym" "$_fromroot/lib"

	mkdir -p "$_toroot/bin"
	for i in java \
		jfr \
		jrunscript \
		jwebserver \
		keytool \
		rmiregistry; do
		mv "$_fromroot/bin/$i" "$_toroot/bin/$i"
	done

	mv "$_fromroot/legal"              "$_toroot"
	mv "$_fromroot/conf"               "$_toroot"
	mv "$_fromroot/release"            "$_toroot"
	cp "$builddir/ASSEMBLY_EXCEPTION"  "$_toroot"
	cp "$builddir/LICENSE"             "$_toroot"
	cp "$builddir/README.md"           "$_toroot"

	# symlink to shared cacerts store
	rm "$_toroot/lib/security/cacerts"
	ln -sf /etc/ssl/certs/java/cacerts \
		"$_toroot/lib/security/cacerts"

	# symlink for java-common to work (expects jre in $_java_home/jre)
	ln -sf . "$_toroot/jre"
}

_jdk() {
	pkgdesc="Oracle OpenJDK 23 (JDK)"
	depends="$pkgname-jre $pkgname-jmods"
	provides=java-jdk
	_fromroot="$pkgdir/$_java_home"
	_toroot="$subpkgdir/$_java_home"

	mkdir -p "$_toroot"
	mv "$_fromroot/bin" "$_toroot"
	mv "$_fromroot/lib" "$_toroot"
	mv "$_fromroot/include" "$_toroot"
}

sha512sums="
fbd241fba70940f68ffea7d5d347723b6160262b227ef01d0a141160235f9e0f4b6bba0f2d58c1f271a145a467bcf98c5edf08f7be1309fd8669549cec826058  jdk-23.0.2-ga.tar.gz
765c326ccc1b87a01027385e69238266e356361cd4ee3e18e3c9d137a5d11fa5d657c164d02dd1be8fe693c8e10f2b580588dbfa57d27f070e2750f50d3e662c  gtest-1.14.0.tar.gz
8df458f439fc8b66e571cfee91ae6837d23fd25c386f2dbcddc8264e435eb3b15830fe779a9fca80c60dbf3a01ef63ca93efa614684ef9206286c6948a3232f2  ppc64le.patch
73c8aeb77e2b1f105c62d1739a19f973cb34a16380fbff142605ee7e93cbc388613fa693d96b779ce73e82cd5fc4e46ffb09c3e3a522a8d459088dd47388ac23  riscv64.patch
cc93616bf70e12775be9132fe58ff641e805af6851b159d7022347bcef86f2597c0dc33acc0ae7ea4e6ea56f2155f0aa73e6b541c8783490897fe7665c5cd9ab  JDK-8299245_disable-tests.patch
25dd3e79a9132b271b4d1d3c70b8719290c69e9143969e06cf8e22f0a3f2b76c583a8df9631c1e021146a4f42f27071c84f0415c9094bd8c895c2af86b6f547a  JDK-8218814_Wformat-security.patch
"