This is an automated email from the ASF dual-hosted git repository.
stoty pushed a commit to branch branch-3
in repository https://gitbox.apache.org/repos/asf/hbase.git
The following commit(s) were added to refs/heads/branch-3 by this push:
new 69024bcc327 HBASE-29602 Add -Djava.security.manager=allow to JDK18+
surefire JVM flags (#7315)
69024bcc327 is described below
commit 69024bcc3276ee999fade9bc4ccc2305fdbba98a
Author: Istvan Toth <[email protected]>
AuthorDate: Thu Sep 18 08:40:10 2025 +0200
HBASE-29602 Add -Djava.security.manager=allow to JDK18+ surefire JVM flags
(#7315)
Signed-off-by: Duo Zhang <[email protected]>
Signed-off-by: Balazs Meszaros <[email protected]>
(cherry picked from commit e1c17e5e8c7d11df12b9abf3cf6e224c5c4da8f8)
---
pom.xml | 19 +++++++++++++++++++
1 file changed, 19 insertions(+)
diff --git a/pom.xml b/pom.xml
index 1873735ac9d..804146d17e8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -996,6 +996,13 @@
--add-opens java.base/sun.security.x509=ALL-UNNAMED
--add-opens java.base/sun.security.util=ALL-UNNAMED
--add-opens java.base/java.net=ALL-UNNAMED</hbase-surefire.jdk17.flags>
+ <!-- Java 18+ disables the Security Manager by default. Hadoop 3.4.2 and
earlier doesn't work
+ without Security Manager.
+ When Hadoop 3.5.0 is released and HBase adds support for it, this can be
removed, or moved
+ to a Hadoop version dependent profile.
+ This is NOT added to the startup scripts, as this is a major change, and
the user better be
+ aware of this requirement and add this in hbase-env.sh and/or in their
application -->
+
<hbase-surefire.jdk18.flags>-Djava.security.manager=allow</hbase-surefire.jdk18.flags>
<!-- Surefire argLine defaults to Linux, cygwin argLine is used in the
os.windows profile -->
<argLine>${hbase-surefire.argLine} @{jacocoArgLine}</argLine>
<extra.enforcer.version>1.5.1</extra.enforcer.version>
@@ -3255,6 +3262,18 @@
</pluginManagement>
</build>
</profile>
+ <profile>
+ <id>build-with-jdk18</id>
+ <activation>
+ <jdk>[18,)</jdk>
+ </activation>
+ <properties>
+ <argLine>${hbase-surefire.jdk17.flags}
+ ${hbase-surefire.jdk18.flags}
+ ${hbase-surefire.argLine}
+ @{jacocoArgLine}</argLine>
+ </properties>
+ </profile>
<!-- profile activated by the Jenkins patch testing job -->
<profile>
<id>jenkins.patch</id>
