[jira] [Commented] (HBASE-22109) Update hbase shaded content checker after guava update in hadoop branch-3.0 to 27.0-jre
[
https://issues.apache.org/jira/browse/HBASE-22109?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16834178#comment-16834178
]
Hudson commented on HBASE-22109:
Results for branch branch-2
[build #1870 on
builds.a.o|https://builds.apache.org/job/HBase%20Nightly/job/branch-2/1870/]:
(x) *{color:red}-1 overall{color}*
details (if available):
(x) {color:red}-1 general checks{color}
-- For more information [see general
report|https://builds.apache.org/job/HBase%20Nightly/job/branch-2/1870//General_Nightly_Build_Report/]
(x) {color:red}-1 jdk8 hadoop2 checks{color}
-- For more information [see jdk8 (hadoop2)
report|https://builds.apache.org/job/HBase%20Nightly/job/branch-2/1870//JDK8_Nightly_Build_Report_(Hadoop2)/]
(x) {color:red}-1 jdk8 hadoop3 checks{color}
-- For more information [see jdk8 (hadoop3)
report|https://builds.apache.org/job/HBase%20Nightly/job/branch-2/1870//JDK8_Nightly_Build_Report_(Hadoop3)/]
(/) {color:green}+1 source release artifact{color}
-- See build output for details.
(/) {color:green}+1 client integration test{color}
> Update hbase shaded content checker after guava update in hadoop branch-3.0
> to 27.0-jre
> ---
>
> Key: HBASE-22109
> URL: https://issues.apache.org/jira/browse/HBASE-22109
> Project: HBase
> Issue Type: Improvement
>Affects Versions: 3.0.0
>Reporter: Gabor Bota
>Assignee: Gabor Bota
>Priority: Minor
> Fix For: 3.0.0, 2.3.0, 2.1.5, 2.2.1
>
> Attachments: HBASE-22109.001.patch
>
>
> I'm updating guava version from 11.0.2 to 27.0-jre in HADOOP-15960 because of
> a CVE. I will create a patch for branch-3.0, 3.1, 3.2 and trunk (3.3).
> I wanted to be sure that HBase works with the updated guava, I compiled and
> run the HBase tests with my hadoop snapshot containing the updated version,
> but there were some issues that I had to fix:
> * New shaded dependency: org.checkerframework
> * New license needs to be added to LICENSE.vm: Apache 2.0
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
[jira] [Commented] (HBASE-22109) Update hbase shaded content checker after guava update in hadoop branch-3.0 to 27.0-jre
[
https://issues.apache.org/jira/browse/HBASE-22109?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16834096#comment-16834096
]
Hudson commented on HBASE-22109:
Results for branch branch-2.1
[build #1115 on
builds.a.o|https://builds.apache.org/job/HBase%20Nightly/job/branch-2.1/1115/]:
(x) *{color:red}-1 overall{color}*
details (if available):
(/) {color:green}+1 general checks{color}
-- For more information [see general
report|https://builds.apache.org/job/HBase%20Nightly/job/branch-2.1/1115//General_Nightly_Build_Report/]
(/) {color:green}+1 jdk8 hadoop2 checks{color}
-- For more information [see jdk8 (hadoop2)
report|https://builds.apache.org/job/HBase%20Nightly/job/branch-2.1/1115//JDK8_Nightly_Build_Report_(Hadoop2)/]
(x) {color:red}-1 jdk8 hadoop3 checks{color}
-- For more information [see jdk8 (hadoop3)
report|https://builds.apache.org/job/HBase%20Nightly/job/branch-2.1/1115//JDK8_Nightly_Build_Report_(Hadoop3)/]
(/) {color:green}+1 source release artifact{color}
-- See build output for details.
(/) {color:green}+1 client integration test{color}
> Update hbase shaded content checker after guava update in hadoop branch-3.0
> to 27.0-jre
> ---
>
> Key: HBASE-22109
> URL: https://issues.apache.org/jira/browse/HBASE-22109
> Project: HBase
> Issue Type: Improvement
>Affects Versions: 3.0.0
>Reporter: Gabor Bota
>Assignee: Gabor Bota
>Priority: Minor
> Fix For: 3.0.0, 2.3.0, 2.1.5, 2.2.1
>
> Attachments: HBASE-22109.001.patch
>
>
> I'm updating guava version from 11.0.2 to 27.0-jre in HADOOP-15960 because of
> a CVE. I will create a patch for branch-3.0, 3.1, 3.2 and trunk (3.3).
> I wanted to be sure that HBase works with the updated guava, I compiled and
> run the HBase tests with my hadoop snapshot containing the updated version,
> but there were some issues that I had to fix:
> * New shaded dependency: org.checkerframework
> * New license needs to be added to LICENSE.vm: Apache 2.0
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
[jira] [Commented] (HBASE-22109) Update hbase shaded content checker after guava update in hadoop branch-3.0 to 27.0-jre
[
https://issues.apache.org/jira/browse/HBASE-22109?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16834069#comment-16834069
]
Hudson commented on HBASE-22109:
Results for branch branch-2.2
[build #238 on
builds.a.o|https://builds.apache.org/job/HBase%20Nightly/job/branch-2.2/238/]:
(x) *{color:red}-1 overall{color}*
details (if available):
(/) {color:green}+1 general checks{color}
-- For more information [see general
report|https://builds.apache.org/job/HBase%20Nightly/job/branch-2.2/238//General_Nightly_Build_Report/]
(x) {color:red}-1 jdk8 hadoop2 checks{color}
-- For more information [see jdk8 (hadoop2)
report|https://builds.apache.org/job/HBase%20Nightly/job/branch-2.2/238//JDK8_Nightly_Build_Report_(Hadoop2)/]
(x) {color:red}-1 jdk8 hadoop3 checks{color}
-- For more information [see jdk8 (hadoop3)
report|https://builds.apache.org/job/HBase%20Nightly/job/branch-2.2/238//JDK8_Nightly_Build_Report_(Hadoop3)/]
(/) {color:green}+1 source release artifact{color}
-- See build output for details.
(/) {color:green}+1 client integration test{color}
> Update hbase shaded content checker after guava update in hadoop branch-3.0
> to 27.0-jre
> ---
>
> Key: HBASE-22109
> URL: https://issues.apache.org/jira/browse/HBASE-22109
> Project: HBase
> Issue Type: Improvement
>Affects Versions: 3.0.0
>Reporter: Gabor Bota
>Assignee: Gabor Bota
>Priority: Minor
> Fix For: 3.0.0, 2.3.0, 2.1.5, 2.2.1
>
> Attachments: HBASE-22109.001.patch
>
>
> I'm updating guava version from 11.0.2 to 27.0-jre in HADOOP-15960 because of
> a CVE. I will create a patch for branch-3.0, 3.1, 3.2 and trunk (3.3).
> I wanted to be sure that HBase works with the updated guava, I compiled and
> run the HBase tests with my hadoop snapshot containing the updated version,
> but there were some issues that I had to fix:
> * New shaded dependency: org.checkerframework
> * New license needs to be added to LICENSE.vm: Apache 2.0
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
[jira] [Commented] (HBASE-22109) Update hbase shaded content checker after guava update in hadoop branch-3.0 to 27.0-jre
[
https://issues.apache.org/jira/browse/HBASE-22109?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16827475#comment-16827475
]
Hudson commented on HBASE-22109:
Results for branch master
[build #965 on
builds.a.o|https://builds.apache.org/job/HBase%20Nightly/job/master/965/]: (x)
*{color:red}-1 overall{color}*
details (if available):
(x) {color:red}-1 general checks{color}
-- For more information [see general
report|https://builds.apache.org/job/HBase%20Nightly/job/master/965//General_Nightly_Build_Report/]
(x) {color:red}-1 jdk8 hadoop2 checks{color}
-- For more information [see jdk8 (hadoop2)
report|https://builds.apache.org/job/HBase%20Nightly/job/master/965//JDK8_Nightly_Build_Report_(Hadoop2)/]
(x) {color:red}-1 jdk8 hadoop3 checks{color}
-- For more information [see jdk8 (hadoop3)
report|https://builds.apache.org/job/HBase%20Nightly/job/master/965//JDK8_Nightly_Build_Report_(Hadoop3)/]
(/) {color:green}+1 source release artifact{color}
-- See build output for details.
(/) {color:green}+1 client integration test{color}
> Update hbase shaded content checker after guava update in hadoop branch-3.0
> to 27.0-jre
> ---
>
> Key: HBASE-22109
> URL: https://issues.apache.org/jira/browse/HBASE-22109
> Project: HBase
> Issue Type: Improvement
>Affects Versions: 3.0.0
>Reporter: Gabor Bota
>Assignee: Gabor Bota
>Priority: Minor
> Attachments: HBASE-22109.001.patch
>
>
> I'm updating guava version from 11.0.2 to 27.0-jre in HADOOP-15960 because of
> a CVE. I will create a patch for branch-3.0, 3.1, 3.2 and trunk (3.3).
> I wanted to be sure that HBase works with the updated guava, I compiled and
> run the HBase tests with my hadoop snapshot containing the updated version,
> but there were some issues that I had to fix:
> * New shaded dependency: org.checkerframework
> * New license needs to be added to LICENSE.vm: Apache 2.0
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
[jira] [Commented] (HBASE-22109) Update hbase shaded content checker after guava update in hadoop branch-3.0 to 27.0-jre
[ https://issues.apache.org/jira/browse/HBASE-22109?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16827277#comment-16827277 ] Sean Busbey commented on HBASE-22109: - signed off by Stack and William Shen in PR 192 https://github.com/apache/hbase/pull/192 > Update hbase shaded content checker after guava update in hadoop branch-3.0 > to 27.0-jre > --- > > Key: HBASE-22109 > URL: https://issues.apache.org/jira/browse/HBASE-22109 > Project: HBase > Issue Type: Improvement >Affects Versions: 3.0.0 >Reporter: Gabor Bota >Assignee: Gabor Bota >Priority: Minor > Attachments: HBASE-22109.001.patch > > > I'm updating guava version from 11.0.2 to 27.0-jre in HADOOP-15960 because of > a CVE. I will create a patch for branch-3.0, 3.1, 3.2 and trunk (3.3). > I wanted to be sure that HBase works with the updated guava, I compiled and > run the HBase tests with my hadoop snapshot containing the updated version, > but there were some issues that I had to fix: > * New shaded dependency: org.checkerframework > * New license needs to be added to LICENSE.vm: Apache 2.0 -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (HBASE-22109) Update hbase shaded content checker after guava update in hadoop branch-3.0 to 27.0-jre
[ https://issues.apache.org/jira/browse/HBASE-22109?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16826358#comment-16826358 ] Sean Busbey commented on HBASE-22109: - Okay I've modified the provided patch to sit on a branch with HBASE-22312, HBASE-22314, and HBASE-22087: [https://github.com/apache/hbase/pull/192] With all of these in place I get a clean build against Hadoop 3 trunk (as of 3f787cd5065560f1bbb9f56a617cd4815803ca8a) that I think also have correct artifacts. > Update hbase shaded content checker after guava update in hadoop branch-3.0 > to 27.0-jre > --- > > Key: HBASE-22109 > URL: https://issues.apache.org/jira/browse/HBASE-22109 > Project: HBase > Issue Type: Improvement >Affects Versions: 3.0.0 >Reporter: Gabor Bota >Assignee: Gabor Bota >Priority: Minor > Attachments: HBASE-22109.001.patch > > > I'm updating guava version from 11.0.2 to 27.0-jre in HADOOP-15960 because of > a CVE. I will create a patch for branch-3.0, 3.1, 3.2 and trunk (3.3). > I wanted to be sure that HBase works with the updated guava, I compiled and > run the HBase tests with my hadoop snapshot containing the updated version, > but there were some issues that I had to fix: > * New shaded dependency: org.checkerframework > * New license needs to be added to LICENSE.vm: Apache 2.0 -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (HBASE-22109) Update hbase shaded content checker after guava update in hadoop branch-3.0 to 27.0-jre
[ https://issues.apache.org/jira/browse/HBASE-22109?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16825151#comment-16825151 ] Gabor Bota commented on HBASE-22109: No, I'm not working on this right now - I need to do the update on hadoop first. Feel free to work on this. > Update hbase shaded content checker after guava update in hadoop branch-3.0 > to 27.0-jre > --- > > Key: HBASE-22109 > URL: https://issues.apache.org/jira/browse/HBASE-22109 > Project: HBase > Issue Type: Improvement >Affects Versions: 3.0.0 >Reporter: Gabor Bota >Assignee: Sean Busbey >Priority: Minor > Attachments: HBASE-22109.001.patch > > > I'm updating guava version from 11.0.2 to 27.0-jre in HADOOP-15960 because of > a CVE. I will create a patch for branch-3.0, 3.1, 3.2 and trunk (3.3). > I wanted to be sure that HBase works with the updated guava, I compiled and > run the HBase tests with my hadoop snapshot containing the updated version, > but there were some issues that I had to fix: > * New shaded dependency: org.checkerframework > * New license needs to be added to LICENSE.vm: Apache 2.0 -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (HBASE-22109) Update hbase shaded content checker after guava update in hadoop branch-3.0 to 27.0-jre
[ https://issues.apache.org/jira/browse/HBASE-22109?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16812527#comment-16812527 ] Sean Busbey commented on HBASE-22109: - [~gabor.bota] you still working on this? > Update hbase shaded content checker after guava update in hadoop branch-3.0 > to 27.0-jre > --- > > Key: HBASE-22109 > URL: https://issues.apache.org/jira/browse/HBASE-22109 > Project: HBase > Issue Type: Improvement >Affects Versions: 3.0.0 >Reporter: Gabor Bota >Assignee: Gabor Bota >Priority: Minor > Attachments: HBASE-22109.001.patch > > > I'm updating guava version from 11.0.2 to 27.0-jre in HADOOP-15960 because of > a CVE. I will create a patch for branch-3.0, 3.1, 3.2 and trunk (3.3). > I wanted to be sure that HBase works with the updated guava, I compiled and > run the HBase tests with my hadoop snapshot containing the updated version, > but there were some issues that I had to fix: > * New shaded dependency: org.checkerframework > * New license needs to be added to LICENSE.vm: Apache 2.0 -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (HBASE-22109) Update hbase shaded content checker after guava update in hadoop branch-3.0 to 27.0-jre
[
https://issues.apache.org/jira/browse/HBASE-22109?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16802819#comment-16802819
]
Sean Busbey commented on HBASE-22109:
-
{quote}
And we already include the 27.0-jre guava if we enable the errorProne plugin,
as the error prone stuffs depend on it. And Andrew Purtell has reported that it
will fail the assembly build because of the LICENSE problem. So I think at
least we can fix the LICENSE problem first...
{quote}
fixing the name of the new license should fix things if they fail for the same
reason when the errorProne plugin is enabled. (though this sounds like crappy
behavior on its part)
{quote}
We shade guava in our hbase-thirdparty. So we need to publish a new release of
hbase-thirdparty and then make hbase depend on the new version of
hbase-thirdparty.
{quote}
Right. So probably a different JIRA to track that work. Anyone have a chance to
look at the CVE yet?
> Update hbase shaded content checker after guava update in hadoop branch-3.0
> to 27.0-jre
> ---
>
> Key: HBASE-22109
> URL: https://issues.apache.org/jira/browse/HBASE-22109
> Project: HBase
> Issue Type: Improvement
>Affects Versions: 3.0.0
>Reporter: Gabor Bota
>Assignee: Gabor Bota
>Priority: Minor
> Attachments: HBASE-22109.001.patch
>
>
> I'm updating guava version from 11.0.2 to 27.0-jre in HADOOP-15960 because of
> a CVE. I will create a patch for branch-3.0, 3.1, 3.2 and trunk (3.3).
> I wanted to be sure that HBase works with the updated guava, I compiled and
> run the HBase tests with my hadoop snapshot containing the updated version,
> but there were some issues that I had to fix:
> * New shaded dependency: org.checkerframework
> * New license needs to be added to LICENSE.vm: Apache 2.0
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
[jira] [Commented] (HBASE-22109) Update hbase shaded content checker after guava update in hadoop branch-3.0 to 27.0-jre
[ https://issues.apache.org/jira/browse/HBASE-22109?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16802573#comment-16802573 ] Duo Zhang commented on HBASE-22109: --- And we already include the 27.0-jre guava if we enable the errorProne plugin, as the error prone stuffs depend on it. And [~apurtell] has reported that it will fail the assembly build because of the LICENSE problem. So I think at least we can fix the LICENSE problem first... > Update hbase shaded content checker after guava update in hadoop branch-3.0 > to 27.0-jre > --- > > Key: HBASE-22109 > URL: https://issues.apache.org/jira/browse/HBASE-22109 > Project: HBase > Issue Type: Improvement >Affects Versions: 3.0.0 >Reporter: Gabor Bota >Assignee: Gabor Bota >Priority: Minor > Attachments: HBASE-22109.001.patch > > > I'm updating guava version from 11.0.2 to 27.0-jre in HADOOP-15960 because of > a CVE. I will create a patch for branch-3.0, 3.1, 3.2 and trunk (3.3). > I wanted to be sure that HBase works with the updated guava, I compiled and > run the HBase tests with my hadoop snapshot containing the updated version, > but there were some issues that I had to fix: > * New shaded dependency: org.checkerframework > * New license needs to be added to LICENSE.vm: Apache 2.0 -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (HBASE-22109) Update hbase shaded content checker after guava update in hadoop branch-3.0 to 27.0-jre
[ https://issues.apache.org/jira/browse/HBASE-22109?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16802571#comment-16802571 ] Duo Zhang commented on HBASE-22109: --- [~busbey] We shade guava in our hbase-thirdparty. So we need to publish a new release of hbase-thirdparty and then make hbase depend on the new version of hbase-thirdparty. > Update hbase shaded content checker after guava update in hadoop branch-3.0 > to 27.0-jre > --- > > Key: HBASE-22109 > URL: https://issues.apache.org/jira/browse/HBASE-22109 > Project: HBase > Issue Type: Improvement >Affects Versions: 3.0.0 >Reporter: Gabor Bota >Assignee: Gabor Bota >Priority: Minor > Attachments: HBASE-22109.001.patch > > > I'm updating guava version from 11.0.2 to 27.0-jre in HADOOP-15960 because of > a CVE. I will create a patch for branch-3.0, 3.1, 3.2 and trunk (3.3). > I wanted to be sure that HBase works with the updated guava, I compiled and > run the HBase tests with my hadoop snapshot containing the updated version, > but there were some issues that I had to fix: > * New shaded dependency: org.checkerframework > * New license needs to be added to LICENSE.vm: Apache 2.0 -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (HBASE-22109) Update hbase shaded content checker after guava update in hadoop branch-3.0 to 27.0-jre
[ https://issues.apache.org/jira/browse/HBASE-22109?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16802077#comment-16802077 ] Sean Busbey commented on HBASE-22109: - Do we need to update our version of guava due to this CVE? Is there already a jira tracking that? > Update hbase shaded content checker after guava update in hadoop branch-3.0 > to 27.0-jre > --- > > Key: HBASE-22109 > URL: https://issues.apache.org/jira/browse/HBASE-22109 > Project: HBase > Issue Type: Improvement >Affects Versions: 3.0.0 >Reporter: Gabor Bota >Assignee: Gabor Bota >Priority: Minor > Attachments: HBASE-22109.001.patch > > > I'm updating guava version from 11.0.2 to 27.0-jre in HADOOP-15960 because of > a CVE. I will create a patch for branch-3.0, 3.1, 3.2 and trunk (3.3). > I wanted to be sure that HBase works with the updated guava, I compiled and > run the HBase tests with my hadoop snapshot containing the updated version, > but there were some issues that I had to fix: > * New shaded dependency: org.checkerframework > * New license needs to be added to LICENSE.vm: Apache 2.0 -- This message was sent by Atlassian JIRA (v7.6.3#76005)
[jira] [Commented] (HBASE-22109) Update hbase shaded content checker after guava update in hadoop branch-3.0 to 27.0-jre
[
https://issues.apache.org/jira/browse/HBASE-22109?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16802076#comment-16802076
]
Sean Busbey commented on HBASE-22109:
-
-1 on v1
Can we exclude the dependency instead? If not please fix the name of the
impacted license in the supplemental dependency information instead of
expanding our set of licenses
({{hbase-resource-bundle/src/main/resources/supplemental-models.xml}})
> Update hbase shaded content checker after guava update in hadoop branch-3.0
> to 27.0-jre
> ---
>
> Key: HBASE-22109
> URL: https://issues.apache.org/jira/browse/HBASE-22109
> Project: HBase
> Issue Type: Improvement
>Affects Versions: 3.0.0
>Reporter: Gabor Bota
>Assignee: Gabor Bota
>Priority: Minor
> Attachments: HBASE-22109.001.patch
>
>
> I'm updating guava version from 11.0.2 to 27.0-jre in HADOOP-15960 because of
> a CVE. I will create a patch for branch-3.0, 3.1, 3.2 and trunk (3.3).
> I wanted to be sure that HBase works with the updated guava, I compiled and
> run the HBase tests with my hadoop snapshot containing the updated version,
> but there were some issues that I had to fix:
> * New shaded dependency: org.checkerframework
> * New license needs to be added to LICENSE.vm: Apache 2.0
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
