On Tue, Jun 28, 2022 at 03:35:35PM +0200, Kevin Kofler via devel wrote:
Zbigniew Jędrzejewski-Szmek wrote:
> I don't think it makes sense to restart the discussion here. I disagree
> that there was (any) consensus on the mailing list. If you feel that it's
> better to use a non-Fedora JRE, that's certainly possible, please just do
> that if you want to. Personally, I see a lot of value in having Java
> for Fedora, and use it for my stuff.
But the thing is, I am left with only the options of using an all-bundled
JRE from Fedora or using an all-bundled JRE from elsewhere. I hope you can
see how this is not a real choice.
That's part of what makes it hard to discuss things with you:
the proposal _explicitly_ says that only some libraries will be bundled.
(There's a separate section about this!)
So it's not "all-bundled" but "some of the low-level libs are
bundled".
I have been using the Fedora-packaged Java all this time, and I
indeed also
see a lot of value in it. But to me, this also implies that it is packaged
to Fedora standards and uses Fedora system libraries. Stopping to do so
destroys much of the value of having a Fedora package at all.
The package is still build by Fedora maitainers, from controlled sources,
on Fedora infra. The only difference is that some libraries are in a version
that the upstream project has blessed. The upstream project is big and has
an extensive test suite and cares about vulnerabilities as much as we do.
You describe it as if the bundling would radically change things, but
I think that in this case the impact for users will not be noticable.
Zbyszek