jlink fails due to unexpected hash of java.* modules

[Sebastian Stenzel]

Ubuntu Focal Fossa (development branch)
Linux 4.4.0-176-generic
openjdk-14-jdk-headless 14~36-2

It appears that jlink fails to create runtime images. I expected the command mentioned below to succeed (exit code 0).

Instead it fails (exit code 1) with the following error message:

> Error: Hash of java.rmi (91a6fed418dc8e3f6af3874310ba35fbc6dc8cd437fc44ed87f8ac453c98d192) differs to expected hash (818ed0065f7ac05ec64de9c2619651dd3eac05cbf40ec3d8958ebb64f5aa3e83) recorded in java.base

When I remove java.rmi from my list of modules, it fails for a different module instead. I suspect that the hashes for all modules might be wrong.

To reproduce this, run (optionally try some other modules):

/usr/lib/jvm/java-14-openjdk-amd64/bin/jlink \
 --output myRuntimeImage \
 --no-header-files \
 --no-man-pages \
 --strip-debug \
 --compress=2 \
 --verbose \
 --add-modules java.base,java.logging,java.xml,java.sql,java.management,java.security.sasl,java.naming,java.datatransfer,java.security.jgss,java.rmi,java.scripting,java.prefs,java.desktop,jdk.security.auth,jdk.unsupported,java.net.http,jdk.crypto.ec

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Kirill Plyashkevich (ru-spirit)]

the similar hash problem I have with 19.10
openjdk version "11.0.6" 2020-01-14
OpenJDK Runtime Environment (build 11.0.6+10-post-Ubuntu-1ubuntu119.10.1)
OpenJDK 64-Bit Server VM (build 11.0.6+10-post-Ubuntu-1ubuntu119.10.1, mixed mode, sharing)

And I for my use cases get:
Hash of java.xml (c043b4c28b897656e2a4d36c92ba2f5d52134bce79643236dd36295e14178be7) differs to expected hash (4e7db7fc941d9f316c4aafe02717b5809ee722be8433d283050365e7fd49331f) recorded in java.base

looks like a general problem in the java package build

[Francivan Bezerra (fba-rio)]

Confirmed to happen on both OpenJDK 14 and OpenJDK 11.

[Sebastian Stenzel (sebastian-stenzel)]

I asked about this in the jigsaw mailing list and got a response that suggests that the Ubuntu build "is doing stripping or other modifications to the packaged modules".

If this is the case, the hashes stored in the java.base package need to be patched, too.

[Kirill Plyashkevich (ru-spirit)]

perhaps, related Debian bug:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=944738

[Sebastian Stenzel (sebastian-stenzel)]

Works fine using docker openjdk:14-jdk-buster. No idea this is built, but they build it differently at the openjdk team.

[Austin Lehman (lehman-austin)]

I had this issue with openjdk-14-jdk. I then installed the AdoptOpenJDK repository instance (adoptopenjdk-14-hotspot) and have the same error.

[Sebastian Stenzel (sebastian-stenzel)]

@lehman-austin In fact jlink itself should work fine from both, openjdk and adoptopenjdk. The problem lies in the broken *.jmod files in openjdk. Thus your jlink from adoptopenjdk will also fail, if you point to the jmods in the JAVA_HOME dir of openjdk.

[Kirill Plyashkevich (ru-spirit)]

the issue is stated to be fixed in Debian in version 11.0.8+10-1.1 of openjdk-11 in September (Apply patch to strip nondeterminism before computing jmod hash).

when can we expect the changes arrive to Ubuntu?