# openjdk OpenJDK is an open-source implementation of the Java Platform, Standard Edition, developed through projects and groups that maintain JDK code, releases, and related technologies. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Java 27 Reaches GA With The G1 Garbage Collector By Default Everywhere DevFeed: [Java 27 Reaches GA With The G1 Garbage Collector By Default Everywhere]() Original publisher: [Read original article]() Author: Michael Larabel Published: 2026-09-15T13:39:00Z Content type: news Language: en Sources: [Phoronix]() Topics: [Java](), [openjdk](), [releases](), [Concurrency](), [Post-Quantum](), [TLS (Transport Layer Security)]() Tags: [availability](), [concurrency](), [desktop-linux](), [java](), [linux-benchmarking](), [linux-hardware-benchmarks](), [linux-hardware-reviews](), [linux-how-to](), [linux-performance](), [linux-server-benchmarks](), [open-source-graphics](), [openjdk](), [phoronix](), [phoronix-test-suite](), [post-quantum](), [release](), [structured-concurrency](), [tls](), [ubuntu-benchmarks](), [ubuntu-hardware]() ### AI overview OpenJDK 27 has reached general availability. Its G1 garbage collector is now enabled by default across environments, replacing Serial as the default in constrained environments after improvements in throughput, latency, and memory usage. The release also includes post-quantum hybrid key exchange for TLS 1.3, preview features for lazy constants and structured concurrency, compact object headers by default, and an incubating Vector API. ### Source excerpt Oracle christened Java 27 today with the OpenJDK 27 release reaching general availability (GA) status... ## Episode 69 "Declassifying Java 27" \[IJN\] DevFeed: [Episode 69 "Declassifying Java 27" \[IJN\]]() Original publisher: [Read original article]() Author: Billy Korando Published: 2026-09-10T00:00:00Z Content type: news Language: en Sources: [Inside Java]() Topics: [Java](), [openjdk](), [Programming]() Tags: [java](), [jdk](), [jdk-27](), [news](), [openjdk](), [podcast](), [release]() ### AI overview This episode discusses Java 27, scheduled for release on September 15, and reviews developer-impacting changes, including new features and changes to existing behavior. ### Source excerpt Java 27 is set to be released on September 15th, let's review what's coming! ## Episode 68 "Operator Overloading with Type Classes" \[AtA\] DevFeed: [Episode 68 "Operator Overloading with Type Classes" \[AtA\]]() Original publisher: [Read original article]() Author: Nicolai Parlog Published: 2026-08-27T00:00:00Z Content type: article Language: en Sources: [Inside Java]() Topics: [Java](), [openjdk](), [Programming]() Tags: [classes](), [java](), [java-language](), [openjdk](), [project-valhalla](), [valhalla]() ### AI overview An Ask the Architects episode discusses how OpenJDK's Project Valhalla is improving Java's support for custom numerical types, including possible limited operator overloading for custom value types. ### Source excerpt How OpenJDK's Project Valhalla is improving Java's support for custom numerical types. ## Java's String.indexOf can be slow (quadratic) DevFeed: [Java's String.indexOf can be slow (quadratic)]() Original publisher: [Read original article]() Author: Daniel Lemire Published: 2026-08-22T14:56:16Z Content type: article Language: en Sources: [Daniel Lemire]() Topics: [Java](), [openjdk](), [Programming]() Tags: [algorithm](), [complexity](), [cpu](), [java](), [openjdk](), [programming-language]() ### AI overview Java's String.indexOf can exhibit O(n-m) behavior on adversarial inputs with long substrings. The article compares it with the Two-Way algorithm and explains why Java's implementation remains suitable for typical workloads. ### Source excerpt In Java, you find the location of a substring using indexOf. String haystack = "The quick brown fox jumps over the lazy dog"; String needle = "fox"; int index = haystack.indexOf(needle); Naively, you might implement indexOf by a loop inside a loop, like so. int naiveIndexOf(String haystack, String needle) { for (int i = 0; ... Continue reading Java's String.indexOf can be slow (quadratic) ## Quality Outreach Heads-up - JDK 28: Named Group Information Captured in the TLSHandshake JFR Event DevFeed: [Quality Outreach Heads-up - JDK 28: Named Group Information Captured in the TLSHandshake JFR Event]() Original publisher: [Read original article]() Author: Ana-Maria Mihalceanu Published: 2026-08-21T00:00:00Z Content type: release Language: en Sources: [Inside Java]() Topics: [JDK 28](), [Flight](), [TLS (Transport Layer Security)](), [Security](), [openjdk]() Tags: [jdk-28](), [jdk-flight-recorder](), [openjdk](), [release](), [security](), [tls](), [tls-handshake](), [update]() ### AI overview The OpenJDK Quality Group announces that, starting with JDK 28, the jdk.TLSHandshake JFR event records the named group negotiated between the client and server during key exchange. The event is disabled by default and requires explicit enablement. ### Source excerpt This Heads-Up is part of the regular communication sent to the projects involved; it covers that the named group information is included in the jdk.TLSHandshake JFR event. ## Security Baked Into the JVM: why fork Apache River and OpenJDK? DevFeed: [Security Baked Into the JVM: why fork Apache River and OpenJDK?]() Original publisher: [Read original article]() Author: Peter Firmstone Published: 2026-06-28T00:00:00Z Content type: opinion Language: en Sources: [Nicolas Fränkel]() Topics: [Security](), [Java](), [openjdk](), [Architecture & Design](), [Remote Procedure Call (RPC)](), [Networks]() Tags: [authorization](), [dirtychai](), [discovery](), [distributed](), [ipv6](), [java](), [jgdms](), [jini](), [jvm](), [lock-free](), [microservices](), [openjdk](), [rpc](), [security](), [self-healing](), [technical]() ### AI overview This article introduces DirtyChai, a community fork of OpenJDK that restores Java authorization infrastructure, and JGDMS, a security-hardened fork of Apache River for dynamically discoverable microservices over IPv6. It argues that distributed systems require security beyond network firewalls and outlines the projects' complementary roles, including authorization, service discovery, hardened deserialization, transport security, proxy trust verification, and codebase safety checks. ### Source excerpt The more distributed a system, the harder it is to secure. Code crosses JVM boundaries. Objects are serialized across trust boundaries. Third-party proxies run inside your process. The usual answer is a network firewall. It helps, but it operates at the wrong level. Java 17 deprecated the SecurityManager, Java 24 put the final nail in its coffin. Most developers didn't notice. ## Using Java's Foreign Function & Memory API to simplify Pi4J native interactions DevFeed: [Using Java's Foreign Function & Memory API to simplify Pi4J native interactions]() Original publisher: [Read original article]() Author: Frank Delporte Published: 2025-12-16T03:03:39Z Content type: article Language: en Sources: [Java Advent Calendar]() Topics: [Raspberry Pi](), [openjdk](), [Java](), [Library](), [Memory Safety]() Tags: [2025](), [code](), [java](), [library](), [memory-safety](), [openjdk](), [raspberry-pi]() ### AI overview The article explains how Java's Foreign Function & Memory API, finalized in Java 22, can simplify Pi4J's interaction with native libraries and memory on Raspberry Pi. It contrasts the API with Pi4J's earlier JNI and Java Native Access approach, focusing on memory safety, easier native-library access, and maintainability. ### Source excerpt The Pi4J project is a Java library that allows you to control the GPIO pins and electronic components connected to a Raspberry Pi with pure Java code. It removes the complexity of using native libraries and the Java Native Interface (JNI), allowing you to focus on your application logic. In the Java Advent of 2020, I published "Light up [...] The post The FFM API: How OpenJDK Changed the Game for Native Interactions (And Made Pi4J Better!) appeared first on JVM Advent. ## A Glance at GPU Goodness in Java: LLM Inference with TornadoVM DevFeed: [A Glance at GPU Goodness in Java: LLM Inference with TornadoVM]() Original publisher: [Read original article]() Author: Edoardo Vacchi Published: 2025-12-11T03:03:21Z Content type: tutorial Language: en Sources: [Java Advent Calendar]() Topics: [TornadoVM](), [Large Language Model](), [GPU](), [Inference](), [Java](), [openjdk](), [Programming]() Tags: [2025](), [c-c-plus-plus](), [c-plus-plus](), [gpu](), [inference](), [java](), [jdk](), [linux](), [llama3](), [llm](), [openjdk](), [tornadovm]() ### AI overview This tutorial introduces TornadoVM, an OpenJDK plugin that compiles annotated Java code for heterogeneous hardware, and explains how it can run LLM inference on GPUs. It covers installation, a basic GPU kernel, and the GPULlama3 project, which demonstrates running a Llama 3 model in Java with GPU acceleration. ### Source excerpt It seems like it's become a tradition that I announce I have joined a new company for the Java Advent of Code. At least this time it's actually an old friend: I am excited to be back at Red Hat, in the llm-d team! Does that mean I forgot about Java? Of course not. If [...] The post A Glance at GPU Goodness in Java: LLM Inference with TornadoVM appeared first on JVM Advent. ## JEP 483: Ahead-of-Time Class Loading and Linking in Java 24 DevFeed: [JEP 483: Ahead-of-Time Class Loading and Linking in Java 24]() Original publisher: [Read original article]() Published: 2025-03-27T13:00:00Z Content type: article Language: en Sources: [Gunnar Morling]() Topics: [Java](), [openjdk](), [Kafka](), [apache-flink]() Tags: [building](), [java](), [jvm](), [openjdk](), [performance]() ### AI overview This article examines JEP 483, which loads and links Java classes ahead of time and caches the results to reduce application startup time. It explains the feature's role in Project Leyden, its relationship to AppCDS, the training-run and classpath requirements, and examples using Apache Kafka and Apache Flink. ### Source excerpt Table of Contents Building an AOT Cache for Apache Kafka AOT Caching With Apache Flink Summary In the "Let's Take a Look at...!" blog series I am exploring interesting projects, developments and technologies in the data and streaming space. This can be KIPs and FLIPs, open-source projects, services, relevant improvements to Java and the JVM, and more. The idea is to get some hands-on experience, learn about potential use cases and applications, and understand the trade-offs involved. If you think there's a specific subject I should take a look at, let me know in the comments below. Java 24 got released last week, and what a meaty release it is: more than twenty Java Enhancement Proposals (JEPs) have been shipped, including highlights such as compact object headers (JEP 450, I hope to spend some time diving into that one some time soon), a new class-file API (JEP 484), and more flexible constructor bodies (JEP 492, third preview). One other JEP which might fly a bit under the radar is JEP 483 ("Ahead-of-Time Class Loading & Linking"). It promises to reduce the start-up time of Java applications without requiring any modifications to the application itself, what's not to be liked about that? Let's take a closer look! ## New Chainguard Images December 2024: Adoptium, AWX, CouchDB DevFeed: [New Chainguard Images December 2024: Adoptium, AWX, CouchDB]() Original publisher: [Read original article]() Published: 2025-01-16T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [Adoptium](), [openjdk](), [Ansible](), [Java](), [NoSQL](), [Open Source](), [Erlang](), [.NET MAUI](), [Process]() Tags: [adoptium](), [ansible](), [apache](), [awx](), [chainguard](), [chainguard-images](), [container-images](), [couchdb](), [erlang](), [helm](), [java](), [jdk](), [linkerd](), [net-11](), [nosql](), [open-source](), [opentofu]() ### AI overview Chainguard describes its December 2024 batch of 39 new Chainguard Images, highlighting images for Adoptium, AWX, and Apache CouchDB. The article notes FIPS-enabled variants and summarizes the intended uses and image characteristics. ### Source excerpt Chainguard released several new images in December 2024, including images for Adoptium, AWX, CouchDB, and others. Check out the full list. ## Keycloak 26.1.0 released DevFeed: [Keycloak 26.1.0 released]() Original publisher: [Read original article]() Author: Keycloak Team Published: 2025-01-15T00:00:00Z Content type: release Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [Database](), [Cloud](), [OpenTelemetry](), [tracing](), [openjdk](), [version]() Tags: [cloud](), [database](), [deprecated](), [idm](), [jdbc](), [kerberos](), [keycloak](), [keycloak-release](), [kubernetes](), [ldap](), [openid-connect](), [openjdk](), [opentelemetry](), [release](), [saml](), [sso](), [tracing](), [version]() ### AI overview Keycloak 26.1.0 changes the default cluster transport stack to database-based discovery, simplifying cloud deployments by removing the need for multicast and dynamic TCP ports. The release also enables virtual threads on OpenJDK 21, makes OpenTelemetry tracing fully supported and enabled by default, and includes configuration and credential-issuance improvements. ### Source excerpt To download the release go to Keycloak downloads. Highlights Transport stack jdbc-ping as new default Keycloak now uses by default its database to discover other nodes of the same cluster, which removes the need of additional network related configurations especially for cloud providers. It is also a default that will work out-of-the-box in cloud environments. Previous versions of Keycloak used as a default UDP multicast to discover other nodes to form a cluster and to synchronize the replicated caches of Keycloak. This required multicast to be available and to be configured correctly, which is usually not the case in cloud environments. Starting with this version, the default changes to the jdbc-ping configuration which uses Keycloak's database to discover other nodes. As this removes the need for multicast network capabilities and UDP and no longer using dynamic ports for the TCP-based failure detection, this is a simplification and a drop-in replacement for environments which used the previous default. To enable the previous behavior, choose the transport stack udp which is now deprecated. The Keycloak Operator will continue to configure kubernetes as a transport stack. See the Configuring distributed caches guide for more information. Virtual Threads enabled for Infinispan and JGroups thread pools Starting from this release, Keycloak automatically enables the virtual thread pool support in both the embedded Infinispan and JGroups when running on OpenJDK 21. This removes the need to configure the JGroups thread pool, the need to align the JGroups thread pool with the HTTP worker thread pool, and reduces the overall memory footprint. OpenTelemetry Tracing supported In the previous release, the OpenTelemetry Tracing feature was preview and is fully supported now. It means the opentelemetry feature is enabled by default. There were made multiple improvements to the tracing capabilities in Keycloak such as: Configuration via Keycloak CR in Keycloak Operator Custom sp ## Building OpenJDK From Source On macOS DevFeed: [Building OpenJDK From Source On macOS]() Original publisher: [Read original article]() Published: 2024-11-16T14:25:00Z Content type: tutorial Language: en Sources: [Gunnar Morling]() Topics: [openjdk](), [macOS](), [Xcode](), [Compiler]() Tags: [compiler](), [installation](), [jdk](), [macos](), [openjdk](), [release](), [xcode]() ### AI overview A practical guide to building JDK 24 from OpenJDK source on macOS 14.7.1. It covers the required boot JDK, Xcode, Autoconf, source checkout, configuration, and build steps, and notes a clang issue in Xcode 16.1 with alternatives. ### Source excerpt Every now and then, it can come in very handy to build OpenJDK from source yourself, for instance if you want to explore a feature which is under development on a branch for which no builds are published. For some reason I always thought that building OpenJDK is a very complex processing, requiring the installation of arcane tool chains etc. But as it turns out, this actually not true: the project does a great job of documenting what's needed and only a few steps are necessary to build your very own JDK. ## Chainguard's OpenJDK Java images are now JCK conformant DevFeed: [Chainguard's OpenJDK Java images are now JCK conformant]() Original publisher: [Read original article]() Published: 2024-06-25T00:00:00Z Content type: release Language: en Sources: [Chainguard: Unchained]() Topics: [openjdk](), [chainguard images](), [Java](), [Security](), [interoperability]() Tags: [chainguard](), [chainguard-images](), [compatibility](), [deployment](), [interoperability](), [java](), [jck](), [openjdk](), [security](), [testing](), [validation]() ### AI overview Chainguard announces that its OpenJDK Java 21.0.3 and Java 22.0.1 JDK and JRE builds passed all tests in Oracle's Java Compatibility Kit. The conformance also applies to specified Chainguard Images containing openjdk-21 and openjdk-22 packages. ### Source excerpt Ensure Java compatibility & security with Chainguard's JCK-conformant OpenJDK images. Streamline development and deployment with trusted, verified Java runtimes. ## Ideal iOS KMP Setup - Kevin Galligan DevFeed: [Ideal iOS KMP Setup - Kevin Galligan]() Original publisher: [Read original article]() Published: 2024-05-18T00:00:00Z Content type: tutorial Language: en Sources: [Touchlab | Enterprise Mobile Innovation & Development]() Topics: [iOS development](), [Development](), [Xcode](), [Tooling](), [Developer experience](), [Kotlin](), [openjdk](), [SDK](), [configuration](), [Homebrew](), [debugging](), [Open Source]() Tags: [configuration](), [debugging](), [developer-tools](), [gradle](), [homebrew](), [installation](), [ios-development](), [java](), [kotlin](), [open-source](), [openjdk](), [security]() ### AI overview A practical guide to setting up an iOS development environment for Kotlin Multiplatform (KMP), covering JVM installation and management, Xcode version management, and Touchlab's Kotlin Xcode Plugin for Kotlin-aware debugging. ### Source excerpt To maximize your iOS developer experience with KMP, you'll want to install the best tools available and configure them appropriately. There are many options available, but this is Touchlab's preferred iOS development setup. ## How to install Java on macOS DevFeed: [How to install Java on macOS]() Original publisher: [Read original article]() Author: Liran Tal Published: 2024-04-17T05:00:00Z Content type: tutorial Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Java](), [macOS](), [openjdk](), [Programming](), [GNU General Public License]() Tags: [acquisition](), [ai](), [application-security](), [applications](), [awareness](), [blog](), [container-security](), [developer](), [development](), [devrel](), [guide](), [how-to](), [ibm](), [install](), [java](), [macos](), [open-source](), [open-source-security](), [openjdk](), [oracle](), [red-hat](), [snyk-container](), [snyk-open-source]() ### AI overview This tutorial explains Java and why it is useful on macOS, then introduces OpenJDK and contrasts it with Oracle's JDK, including differences in licensing and production use. ### Source excerpt In the following post, we will guide you through installing Java on macOS, ensuring you're ready to start developing applications in no time. ## How old are Official Docker images? 2024 Edition DevFeed: [How old are Official Docker images? 2024 Edition]() Original publisher: [Read original article]() Author: Tom Published: 2024-03-24T00:00:00Z Content type: article Language: en Sources: [Tomasz Gągor]() Topics: [Docker](), [docker images](), [Docker Hub](), [centos](), [Debian](), [Ubuntu](), [openjdk](), [Bash](), [Script](), [deprecated]() Tags: [bash](), [centos](), [centos-docker-image](), [debian](), [debian-docker-image](), [deprecated](), [docker](), [docker-hub](), [docker-image-age](), [docker-image-updates](), [docker-images](), [dockerfiles](), [eclipse](), [end-of-life](), [images](), [official-docker-images](), [openjdk](), [script](), [ubuntu](), [ubuntu-docker-image]() ### AI overview An analysis of the age and update status of official Docker images in 2024. It reports that modern OS images are generally reasonably current, while CentOS and OpenJDK images have reached important lifecycle or maintenance milestones. ### Source excerpt Discover the current age and update status of various official Docker images, including CentOS, Ubuntu, and Debian, in the 2024 edition of this analysis. ## The One Billion Row Challenge DevFeed: [The One Billion Row Challenge]() Original publisher: [Read original article]() Published: 2023-12-31T23:00:00Z Content type: article Language: en Sources: [Gunnar Morling]() Topics: [Java](), [openjdk](), [C++](), [Go Language](), [Rust]() Tags: [c-plus-plus](), [github](), [go](), [java](), [measurement](), [openjdk](), [pull-request](), [rust]() ### AI overview The One Billion Row Challenge asks participants to write the fastest Java program that reads one billion temperature measurements and calculates the minimum, mean, and maximum for each weather station. The challenge runs from January 1 through January 31, with submissions evaluated under specified hardware and dependency rules. ### Source excerpt Update Jan 4: Wow, this thing really took off! 1BRC is discussed at a couple of places on the internet, including Hacker News, lobste.rs, and Reddit. For folks to show-case non-Java solutions, there is a "Show & Tell" now, check that one out for 1BRC implementations in Rust, Go, C++, and others. Some interesting related write-ups include 1BRC in SQL with DuckDB by Robin Moffatt and 1 billion rows challenge in PostgreSQL and ClickHouse by Francesco Tisiot. Thanks a lot for all the submissions, this is going way beyond what I'd have expected! I am behind a bit with evalutions due to the sheer amount of entries, I will work through them bit by bit. I have also made a few clarifications to the rules of the challenge; please make sure to read them before submitting any entries. Let's kick off 2024 true coder style--I'm excited to announce the One Billion Row Challenge (1BRC), running from Jan 1 until Jan 31. Your mission, should you decide to accept it, is deceptively simple: write a Java program for retrieving temperature measurement values from a text file and calculating the min, mean, and max temperature per weather station. There's just one caveat: the file has 1,000,000,000 rows! ## Introducing Chainguard Images for Node.js LTS 20, Python 3.12 and OpenJDK/JRE 21 DevFeed: [Introducing Chainguard Images for Node.js LTS 20, Python 3.12 and OpenJDK/JRE 21]() Original publisher: [Read original article]() Published: 2023-10-11T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [chainguard images](), [Node.js](), [openjdk](), [Python](), [Java](), [Security](), [Open Source]() Tags: [chainguard](), [chainguard-images](), [java](), [lts](), [node](), [node-js](), [openjdk](), [python](), [release](), [releases](), [sboms](), [security]() ### AI overview Chainguard introduces updated Chainguard Images for Node.js 20, Python 3.12, and OpenJDK/JRE 21. The images include minimal CVEs, SBOMs, signatures, and a hardened Wolfi-based architecture, with changes to version and LTS tags scheduled for October 2023. ### Source excerpt Get the latest versions for Java 21 (OpenJDK and JRE), Python 3.12, and Node.js 20 complete with minimal CVEs, SBOMs, signatures, and hardened architecture. ## Fully bootstrapping Java from source in Wolfi DevFeed: [Fully bootstrapping Java from source in Wolfi]() Original publisher: [Read original article]() Published: 2023-06-02T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Java](), [openjdk](), [supply-chain-security](), [chainguard](), [Compiler](), [Programming](), [gcc]() Tags: [bootstrapping](), [chainguard](), [chainguard-images](), [compiler](), [distribution](), [eclipse-compiler-for-java](), [gcc](), [gnu-linux](), [java](), [jdk](), [linux](), [openjdk](), [programming](), [programming-languages](), [provenance](), [security](), [software](), [software-supply-chain](), [software-supply-chain-security](), [supply-chain-security](), [wolfi]() ### AI overview Chainguard describes how it is fully bootstrapping Java from source in Wolfi. The process builds a chain of OpenJDK packages with provenance extending from source code to final binary packages, using GNU Classpath, GNU Compiler for Java, and the Eclipse Compiler for Java to overcome historical bootstrapping dependencies. ### Source excerpt Learn how Chainguard engineers created a chain of OpenJDK packages to provide full provenance from pure source code for the entire Java ecosystem in Wolfi. ## Deploying an Uberjar to Dokku DevFeed: [Deploying an Uberjar to Dokku]() Original publisher: [Read original article]() Published: 2023-02-23T19:37:36Z Content type: tutorial Language: en Sources: [Ariya Hidayat]() Topics: [Deployment](), [Platform as a Service (PaaS)](), [Self-hosted](), [Containers](), [Java](), [openjdk]() Tags: [adoptium](), [containers](), [deployment](), [java](), [linux](), [openjdk](), [paas-solutions](), [scala](), [self-hosted]() ### AI overview This tutorial explains how to deploy a Java Uberjar to Dokku by sending the packaged artifact directly instead of creating a container image. It covers the required application files, packaging, Dokku application setup, and an OpenJDK 17 base image example using Metabase. ### Source excerpt Dokku is a self-hosted Platform-as-a-Service (PaaS) that offers a compelling alternative to popular PaaS solutions like Heroku. With built-in support for Linux containers, deploying an application on Dokku is straightforward. However, there is a lesser-known deployment method that involves sending a build artifact, such as a JAR package for Java apps, directly to Dokku. ## FIPS 140-2 experimental support DevFeed: [FIPS 140-2 experimental support]() Original publisher: [Read original article]() Author: Marek Posolda Published: 2022-11-16T00:00:00Z Content type: release Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [Cryptography](), [Security](), [openjdk](), [rhel]() Tags: [cryptography](), [fips](), [idm](), [isaac](), [kerberos](), [keycloak](), [ldap](), [openid-connect](), [openjdk](), [release](), [rhel](), [saml](), [security](), [sso]() ### AI overview Keycloak 20 introduces experimental support for FIPS 140-2. The article explains its reliance on Java cryptography providers and BouncyCastle, describes running Keycloak on a FIPS-compliant RHEL and Java environment, and notes limitations affecting SAML, Kerberos/SPNEGO, X.509 authentication, and password length in stricter mode. ### Source excerpt We are glad to announce that latest Keycloak 20 release contains experimental support for FIPS 140-2! The FIPS 140-2 standard is a set of requirements for cryptography modules, which needs to be met for the software used by U.S. governments and related parties. The FIPS compliant software should use only secure cryptography algorithms allowed by the FIPS specification and must use them in a secured way. Keycloak does not directly implement any cryptography algorithms, however it internally needs to use lots of cryptography functionalities. For this purpose, Keycloak mostly relies on the Java cryptography SPI and 3rd party libraries for implementing cryptography related functionality - especially the BouncyCastle library. FIPS support is usually enabled at the OS level. For example, during installation of RHEL 8.6 , you can enable kernel flag during OS installation to make sure that your OS is FIPS compliant. When FIPS is enabled at the OS level, it means that various packages including OpenJDK are also set to be FIPS compliant and are pre-configured to rely on FIPS approved functions. For example java.security configuration file is pre-configured to contain only FIPS compliant security providers. The FIPS support in Keycloak means that the Keycloak server can run on the FIPS compliant OS with FIPS compliant Java. It also means that the Keycloak server is FIPS compliant and can be used by parties, which strictly require FIPS 140-2 support. Even if you do not use the FIPS enabled OS, you can still try the FIPS enabled Keycloak server by using custom java.security file with only BouncyCastle-FIPS security providers configured as described in the instructions below in the step 4. Thanks to David Anderson, who contributed parts of this feature. Also, thanks to Sudeep Das and Isaac Jensen for their initial prototype effort, which was used as an inspiration. Instructions Instructions for how to try FIPS support in Keycloak are here. Conclusion We will be happy for you to t ## Loom and Thread Fairness DevFeed: [Loom and Thread Fairness]() Original publisher: [Read original article]() Published: 2022-05-27T08:20:00Z Content type: tutorial Language: en Sources: [Gunnar Morling]() Topics: [Java](), [openjdk](), [Concurrency](), [Concurrent Programming](), [Programming](), [reactive]() Tags: [http](), [io](), [java](), [openjdk](), [project-loom](), [reactive-programming](), [thread](), [threads]() ### AI overview This technical article examines thread scheduling fairness for CPU-bound workloads running on Project Loom's virtual threads. It introduces Loom's virtual-thread model and contrasts it with operating-system threads and reactive programming for handling highly concurrent applications. ### Source excerpt Table of Contents Project Loom Scheduling Discussion Project Loom (JEP 425) is probably amongst the most awaited feature additions to Java ever; its implementation of virtual threads (or "green threads") promises developers the ability to create highly concurrent applications, for instance with hundreds of thousands of open HTTP connections, sticking to the well-known thread-per-request programming model, without having to resort to less familiar and often more complex to use reactive approaches. Having been in the workings for several years, Loom got merged into the mainline of OpenJDK just recently and is available as a preview feature in the latest Java 19 early access builds. I.e. it's the perfect time to get your hands onto virtual threads and explore the new feature. In this post I'm going to share an interesting aspect I learned about thread scheduling fairness for CPU-bound workloads running on Loom. ## Running JDK Mission Control on Apple M1 DevFeed: [Running JDK Mission Control on Apple M1]() Original publisher: [Read original article]() Published: 2022-05-17T08:20:00Z Content type: tutorial Language: en Sources: [Gunnar Morling]() Topics: [Java](), [JDK Flight Recorder](), [macOS](), [Mac Mini](), [openjdk](), [Adoptium]() Tags: [adoptium](), [apple-m1](), [arm](), [jdk](), [jdk-flight-recorder](), [mac-mini](), [macos](), [openjdk](), [permission](), [plist]() ### AI overview A troubleshooting guide for running JDK Mission Control on an Apple M1 Mac. It explains that JMC is currently shipped as an x64 application, so configuring it to use an x64 Temurin JDK through Rosetta resolves the startup error, while other applications can continue using an AArch64 JDK. ### Source excerpt JDK Mission Control (JMC) is invaluable for analysing performance data recording using JDK Flight Recorder (JFR). The other day, I ran into a problem when trying to run JMC on my Mac Mini M1. Mostly for my own reference, here's what I did to overcome it. ## The JDK Flight Recorder File Format DevFeed: [The JDK Flight Recorder File Format]() Original publisher: [Read original article]() Published: 2022-02-20T20:15:00Z Content type: tutorial Language: en Sources: [Gunnar Morling]() Topics: [JDK Flight Recorder](), [Java](), [openjdk](), [Parser]() Tags: [format](), [java](), [jdk](), [jdk-flight-recorder](), [openjdk](), [parsing]() ### AI overview This article examines the JDK Flight Recorder file format. It explains that JFR records high-performance runtime events in recording files, notes that the format has no official specification and is an OpenJDK implementation detail, and describes investigating its structure through JDK and JDK Mission Control source code. ### Source excerpt The JDK Flight Recorder (JFR) is one of Java's secret weapons; deeply integrated into the Hotspot VM, it's a high-performance event collection framework, which lets you collect metrics on runtime aspects like object allocation and garbage collection, class loading, file and network I/O, and lock contention, do method profiling, and much more. JFR data is persisted in recording files (since Java 14, also "realtime" event streaming is supported), which can be loaded for analysis into tools like JDK Mission Control (JMC), or the jfr utility coming with OpenJDK itself. [Next page]()