On Sat, 11 Apr 2026 00:58:50 GMT, Francisco Ferrari Bihurriet <[email protected]> wrote:
> > Why don't you get the error in a jmod JDK? Just trying to understand the > > distinction. > > In a jmod JDK, the `lib/modules` image doesn't contain the checksums. Just to clarify. A build with `--enable-linkable-runtime` and `--enable-keep-packaged-modules` would include the checksum of the `conf/security/java.security` file in the `jdk.jlink` module (in `lib/modules`). As @franferrax pointed out, though, with a `jlink` run with packaged modules present, the integrity check isn't done and the source of the `conf/security/java.security` is the `java.base.jmod` file instead of the runtime image. A corollary of this is that any modifications of `conf/security/java.security` done **after** `jlink` ran, needs to be redone in the custom run-time when a JMOD-full link is being done. The JEP 493 enabled link would fail with an error (as the unmodified source file is not available). ------------- PR Review Comment: https://git.openjdk.org/jdk/pull/30635#discussion_r3072250871
