In T253553 profile::java was created, which streamlines the installation and configuration of Java (picking the correct packages/repos depending on the target release, opting in to the hardened java.security config, passing Java opts centrally and more).
Gerrit should also switch to it.
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| Switch gerrit to profile::java | operations/puppet | production | +12 -19 |
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | MoritzMuehlenhoff | T264174 Migrate remaining services using Java to profile::java | |||
| Resolved | MoritzMuehlenhoff | T264182 Migrate Gerrit to profile::java |
A few notes:
Gerrit runs with Java 8 for now. The reason, I believe, is that when we replaced the hardware (cobalt → gerrit1001) we have upgraded the Debian distribution to Buster and went to stick with java 8 to avoid introducing two changes at the same time.
We need the dbg package in order to have symbols resolved when taking stacktraces or heap informations T231872
Fot the dbg package there's a patch already: https://gerrit.wikimedia.org/r/c/operations/puppet/+/617079 I'll merge it next week.
This has been added to profile::java in https://gerrit.wikimedia.org/r/c/operations/puppet/+/617079/
Change 632224 had a related patch set uploaded (by Muehlenhoff; owner: Muehlenhoff):
[operations/puppet@production] Switch gerrit to profile::java
Change 632224 merged by Dzahn:
[operations/puppet@production] Switch gerrit to profile::java
The Gerrit servers have been switched to profile::java (which allowed for quite a few cleanups)