Page MenuHomePhabricator
Create Task
Maniphest T392465

Switch Gerrit from Java 17 to Java 21
Open, Needs TriagePublic
Actions

Description

Bookworm → Java 21 → Gerrit 3.11 → Gerrit 3.12 → Gerrit 3.13 → Gerrit 3.14

Gerrit 3.12 will drop support for Java 17 and require Java 21: https://www.gerritcodereview.com/3.12.html#java-21

As of April 23 2025, our servers run Bullseye with Java 17. They must be ugpraded to Bookworm first T392464 which would let us switch to Java 21 using component/jdk21.

Gerrit 3.11 supports Java 21 and even recommend it https://www.gerritcodereview.com/3.11.html.

The task to upgrade to Java 17 was T364342

Related Objects
Search...

StatusSubtypeAssignedTask
Restricted Task
 ResolvedDzahnT411895 gerrit behind CDN
 ResolvedNoneT393239 ProbeDown
 ResolvedABran-WMFT420523 ProbeDown - Service gerrit2003:443 has failed probes (http_gerrit_tls_ip6)
Restricted Task
Restricted Task
 OpenNoneT392448 Upgrade to Gerrit 3.12
 OpenNoneT407557 OpenSSH 10.1+ warns that Wikimedia SSH does not use post-quantum key exchange algorithm
 StalledNoneT407844 Gerrit ssh daemon does not offer post-quantum kex leading to a warning with OpenSSH 10
Restricted Task
 OpenNoneT379714 Upgrade to Gerrit 3.11
 OpenNoneT392465 Switch Gerrit from Java 17 to Java 21
 ResolvedABran-WMFT392464 Upgrade Gerrit hosts from Bullseye to Bookworm
 ResolvedABran-WMFT387833 Gerrit switchover process
 OpenNoneT388507 Investigate missing commit from old changes
 ResolvedABran-WMFT260666 Create a cookbook to automate gerrit's switchover
 ResolvedABran-WMFT393050 ProbeDown
 ResolvedMatthewVernonT392186 Grant Gerrit admin to arnaudb
 ResolvedLSobanskiT393034 Investigate out of date refs following gerrit switchover
 ResolvedABran-WMFT395440 Gerrit read-only plugin test
 ResolvedABran-WMFT406334 Gerrit switchover between secondary instances
 ResolvedLSobanskiT406482 SystemdUnitFailed (jenkins.service on contint1002)
 ResolvedhasharT406762 gerrit2003 is trying to backup incrementally 3.5 million files every hour, clogging backus and filling in available disk space
 ResolvedhasharT411583 Gerrit backups are growing
 ResolvedhasharT430774 Compact Gerrit H2 databases to reclaim disk
 OpenNoneT430775 Validate Gerrit backup recoverability after the fileset exclusions
 OpenNoneT433926 Backup Gerrit with LVM snapshots and Bacula pre/post job hooks
 ResolvedhasharT406856 Reduce size of analytics/superset/deploy.git Gerrit repo
 ResolvedABran-WMFT407200 Gerrit is down
 ResolvedABran-WMFT412779 Gerrit failover process
 ResolvedABran-WMFT417246 Reimage gerrit1003
 ResolveddancyT417767 scap error on Gerrit first setup
 ResolvedABran-WMFT417777 SystemdUnitFailed - apache2.service on gerrit1003:9100
 DuplicateNoneT417968 ProbeDown
 DuplicateABran-WMFT417966 GerritHAProxyBackendUnavailable
 ResolvedABran-WMFT417247 Reimage gerrit2002
 ResolvedABran-WMFT418242 SystemdUnitFailed - rsync-lfs_replica_sync.service on gerrit2002:9100
 ResolvedABran-WMFT418264 Fix gerrit-restart cookbook
 ResolvedABran-WMFT418266 GerritHAProxyServiceUnavailable
 ResolvedABran-WMFT418240 GerritReplicationUnavailable
 ResolvedABran-WMFT417279 Harmonize DNS on all gerrit instances
 ResolvedABran-WMFT417565 GerritHAProxyBackendUnavailable
 ResolvedABran-WMFT417566 GerritHAProxyServiceUnavailable
 ResolvedDzahnT372804 setup gerrit2003 with gerrit service (gerrit on bookworm)
 ResolvedABran-WMFT338470 Rename gerrit2 unix user to gerrit and assign a fixed uid
 ResolvedDzahnT379213 PuppetFailure - gerrit2003
 OpenNoneT417642 Rename gerrit2 Gerrit user to gerrit in the administrator group
 ResolvedJeltoT333143 Move Gerrit data out of root partition
 ResolvedJeltoT424924 GerritHAProxyBackendUnavailable
 ResolvedMarosteguiT388785 SSH on gerrit2003 is CRITICAL: CRITICAL
 ResolvedDzahnT374899 PuppetFailure - gerrit2003
Restricted Task
 ResolvedDzahnT402847 ProbeDown - gerrit1003
 ResolvedABran-WMFT403347 ProbeDown
 ResolvedABran-WMFT403963 ProbeDown - http_gerrit_tls_ip4 gerrit2003
 ResolvedABran-WMFT404070 ProbeDown - http_gerrit_tls_ip4 gerrit2003.

Event Timeline

hashar created this task.Apr 23 2025, 9:18 AM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptApr 23 2025, 9:18 AM
hashar updated the task description. (Show Details)Apr 23 2025, 9:25 AM
hashar added a parent task: T392448: Upgrade to Gerrit 3.12.
hashar added a subtask: T379714: Upgrade to Gerrit 3.11.
hashar added a subtask: T392464: Upgrade Gerrit hosts from Bullseye to Bookworm.
hashar removed a subtask: T379714: Upgrade to Gerrit 3.11.Apr 28 2025, 12:53 PM
hashar added a parent task: T379714: Upgrade to Gerrit 3.11.
hashar updated the task description. (Show Details)Aug 11 2025, 7:13 AM
hashar added a subscriber: MoritzMuehlenhoff.Feb 12 2026, 9:38 AM

I have talked with @MoritzMuehlenhoff about Java 21 on Bookworm via component/jdk21. That was originally just for idp.wikimedia.org and was not kept updated once idp moved to Trixie. Moritz will update it again for Gerrit purpose.

This also implies we will have to eventually reimage Gerrit servers to Trixie to get rid of the component/jdk21. We picked up Bookworm because at planning time last spring Trixie had not been released and I'd rather avoid jumping an OS version.

Stashbot added a comment.Feb 13 2026, 1:59 PM

Mentioned in SAL (#wikimedia-traffic) [2026-02-13T13:59:33Z] <moritzm> upload a backport of OpenJDK 21.0.10 to component/jdk21 for the Gerrit migration to Bookworm T392465

hashar mentioned this in T379714: Upgrade to Gerrit 3.11.Feb 21 2026, 4:23 PM
Paladox subscribed.Feb 21 2026, 4:54 PM
ABran-WMF closed subtask T392464: Upgrade Gerrit hosts from Bullseye to Bookworm as Resolved.Mar 5 2026, 3:21 PM
ABran-WMF added a subtask: Restricted Task.Mar 23 2026, 1:24 PM
hashar removed a subtask: Restricted Task.Mon, Sep 14, 9:59 AM
hashar updated the task description. (Show Details)Sun, Oct 4, 9:14 AM
Stashbot added a comment.Wed, Oct 7, 7:30 AM

Mentioned in SAL (#wikimedia-operations) [2026-10-07T07:29:59Z] <moritzm> uploaded openjdk-21 21.0.12.1+1-1~deb12u1 to component/jdk21 for bookworm-wikimedia T392465

MoritzMuehlenhoff added a comment.Wed, Oct 7, 7:39 AM
In T392465#11610008, @hashar wrote:

I have talked with @MoritzMuehlenhoff about Java 21 on Bookworm via component/jdk21. That was originally just for idp.wikimedia.org and was not kept updated once idp moved to Trixie. Moritz will update it again for Gerrit purpose.

I have uploaded a backport of the latest Java 21 security release (openjdk-21 21.0.12.1+1-1~deb12u1) to the component/jdk21 repository component for bookworm-wikimedia, so you can upgrade to Java 21 now.

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits