Details
-
Type:
Bug
-
Status:
Resolved
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: JRuby 1.7.0.RC1, JRuby 1.7.0
-
Component/s: None
-
Labels:None
-
Number of attachments :
Description
Most Linux distributions have policies against library building, as security issue become much harder to deal with when you have to find which of many packages are bundling which version of which library.
Gentoo in particular has a very tight policy about JAR bundling, as our Java packaging framework has been designed to be flexible and to make it easy to have multiple versions of JARs available so that we have very little to no issue with compatibility.
But in the case of JRuby it's hard to know exactly what should be unbundled, and what can't (like snapshots or mocks that only exist as part of JRuby). What we would like is simply a list of the dependencies that are needed to run JRuby, both bundled and not, so that we can have a way to check what we miss.
Diego: For JRuby 1.7.0.RC1, we updated all maven dependencies to show what we actually use and ship. Is that sufficient?