Sriram Natarajan wrote:
>
>
> Petr Slechta wrote:
>>
>> The ant.jar file was mistake, it will not be part of the package.
>> Sorry for the confusion!
>>
>>
>>>> Do jar files need to be built from source code?
>>>>
>>> Yes, they must be built from source.
>>>
>> If this is true, then it makes porting of any Java application hard.
>> Most of open source projects do not do that -- they just take the
>> libraries and use them. It is Java, so it does not make any sense to
>> compile them for different platforms -- the result would be always
>> the same. Also we will not sustain/fix these libraries, so why to
>> compile them?
When you integrate something into SFW, you are agreeing to take
ownership of it. This ownership includes agreeing to support it in some
fashion. Even support that is largely based on community updates may
require you, the owner, to fix security or meltdown escalations before
the community gets around to it. If you are not going agree to sustain
and fix this software, perhaps the OSOL Contrib repository is a more
appropriate delivery vehicle. That means that you won't be able to
layer supported software on it, but I doubt that it matters in this case.
>>
>> There is also question about sharing these libraries. As I said in
>> previous mail, this was discussed on LSARC and I was hoping that this
>> question is solved and closed. If not, should be LSARC reopened?
>> Please look for LSARC discussion
>> http://sac.eng.sun.com/Archives/CaseLog/arc/LSARC/2008/642/mail
>> especially around paragraph
>>
>> " Is there case precedent that indicates that all libraries should be
>> versioned when installed? What happens for consumers of various
>> version of: dom4j.jar, jaxen.jar, jsr-305.jar, et al listed there -
>> presumably those won't be symlinks? Given the amount of java
>> applications and scaffolding that's in the project pipeline, are we
>> heading towards java jar hell? "
I couldn't agree more. We are rapidly heading toward Java jar hell. I
have seen a few projects seek to integrate with their own private copies
bits that they use. We are going end up with 50 copies of ant, junit,
... with most of them being identical simply because nobody wants to
deliver the canonical verison x.y.z and support it. If you need it and
others may (or do) as well, bite the bullet and commit to a shared
version x.y.z that others can rely on.
> Currently, tomcat - which is already in OpenSolaris - internally uses
> lot of jar files without actually compiling them from source
that is something that needs to be resolved.
-Norm
