Content Comparison

Univ. of Hawaii - ITS Technical Architecture - Brick    

...

• JDK implementations in containers may not need to fall within the guidelines of this brick.
• More vendors are transitioning to an OpenJDK implementation.
• OpenJDK implementation matrix [2] and overview of JDK vendors [3]
  
• Difference between OracleJDK and OpenJDK [4]
• Opinions from okta [5]

...

• Warning, OpenJDK 17 introduces potentially breaking changes.
  • <https://docs.oracle.com/en/java/javase/17/migrate/migrating-jdk-8-later-jdk-releases.html#GUID-7744EF96-5899-4FB2-B34E-86D49B2E89B6>
  • Good to also be aware that Tomcat 10 does too such that Spring Boot 3.x is the first version to support Tomcat 10 with OpenJDK 17
    • <https://docs.oracle.com/en/java/javase/17/migrate/migrating-jdk-8-later-jdk-releases.html#GUID-7744EF96-5899-4FB2-B34E-86D49B2E89B6>
    • <https://stackoverflow.com/questions/68776180/existing-spring-boot-application-to-tomcat-10>
• 2022 Java Developer Productivity Report
• ITS already pays for Red Hat OpenJDK support since it is bundled into our RHEL licensing.
• Red Hat OpenJDK distributions are included in the OS repository, which is updated monthly.  The repository is updated monthly, but most JDK patches likely are updated quarterly since that's Oracle's patch cadence.  This cadence should be kept in mind given that updates to test and prod environments might be harder to control than previously.
• Banner 9 requires Oracle or OpenJDK 8 for RHEL and Corretto for Windows.  This is a fairly recent development.  Other schools, Oakland for example, utilize OpenJDK.
• Ellucian support documentation states that Banner 9 on RHEL 7 with OpenJDK 1.8 is supported with most services except the following, for obvious reasons:
  • Oracle Database
  • Oracle Fusion Middleware
• Red Hat OpenJDK runs on RHEL, Windows, and Mac OS, which is needed for developers.
• OpenJDK has different builds
  • AdoptOpenJDK for public usage
  • Amazon Corretto for public and customer usage
  • Oracle Java SE for Oracle paying customers
  • Oracle OpenJDK for Oracle nonpaying customers
  • Red Hat OpenJDK
• AdoptOpenJDK is readily available through docker, has a large community to support it (no need to get commercial support), and runs under the Hotspot JVM, which is Oracle's JVM, so we know the performance will be comparable if not identical.
  • It can also run under OpenJ9, which is the Eclipse Foundations version of the JVM.
  • It is supposed to have a low memory footprint and run more efficiently compared to Hotspot but EA has not explored that option yet.
• The InCommon Trusted Access Platform (TAP) is containerizing its components using Amazon's Corretto JDK.
  • The IAM team is deploying TAP components, starting with Grouper.
• For the Oracle JDk. Critical Patch Updates are collections of security fixes for Oracle products, including the Oracle JDK. These updates are available to customers with valid support contracts. They are released on the Tuesday closest to the 17th day of January, April, July and October.  We are assuming that the Open JDK projects have a matching schedule.

...