Re: STOP INCLUDING EXTERNAL JARS IN YOUR JAVA PACKAGES!
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Jeff Turner <jeff@socialchange.net.au> writes:
<snip>
> > To solve it...
>
> .. as in, fish around in a project's lib/ directory, and ensure that *every
> jar* in there is it's own .deb? Ouch.. that's a pretty large overhead. There's
> no general way to determine the version of a jar, so packaging them all would
> first require a long, painful identification process. For instance, some
> projects use CVS snapshots of jars. It would be *really* difficult to
> pinpoint a jar version when all you've got to go on is a CVS log like "updated
> to latest jar from foo to fix bug X".
Again.. I think this is a problem with Java systems assuming the world revolves
around *them* !
> In addition, changing the default jar location would break init scripts,
> security policy files and custom classloaders. Tomcat illustrates all of these
> issues (and the issue of non-redistributable jars). You might get away by
> symlinking the jars to their expected locations, *if* you can be sure that
> none of the jars have a "Class-Path:" entry in their manifest (which would
> then be incorrect).
Eventually we will have to document all these issues.
I would say that Class-Path in the manifest is a BIG no-no.
> [..]
> > Due to the WORA nature of Java applications, a lot of projects assume they are
> > the only package management system in existence.
>
> And they're right, if you take into account that a cross-platform app needs a
> cross-platform package management system. There is nothing like that now, and
> Java projects will rightly continue to bundle jars until there is.
What about the Java Web Launch system. Has anyone looked at that ??? I haven't
because it is proprietary and I don't want to encourage SUN! :)
<snip>
- --
Kevin A. Burton ( burton@apache.org, burton@openprivacy.org, burtonator@acm.org )
Location - San Francisco, CA, Cell - 415.595.9965
Jabber - burtonator@jabber.org, Web - http://relativity.yi.org/
Boycott Amazon.com http://www.gnu.org/philosophy/amazon.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Get my public key at: http://relativity.yi.org/pgpkey.txt
iD8DBQE77DFGAwM6xb2dfE0RAnONAJ9+2ZF+sc1ccrRLb03RxqfrQ9aRIACghz+W
PdWI0Bg6hCyAiUNtlE9NnrE=
=BC0H
-----END PGP SIGNATURE-----
Reply to: