java_role

Java Ansible role

This Ansible Role installs JDKs from different vendors (OpenJDK, AdoptOpenJDK and Corretto) in a Debian/Ubuntu or CentOS environment.

Getting Started
- Prerequisities
- Installing
Usage
Testing
Built With
Versioning
Authors
License
Contributing

Getting Started

These instructions will get you a copy of the role for your Ansible playbook.

Once launched, it will install Java using Debian or RHEL packages.

Prerequisities

To use this role as dependency in your playbook, prerequisites below:

Ansible >=2.9.0 version installed. Inventory destination should be a Debian/Ubuntu or CentOS environment.

For testing purposes you will need Python 3.7+, Pipenv.

Installing

Create or add to your roles dependency file (e.g requirements.yml):

- src: http://github.com/idealista/java_role.git
  scm: git
  version: 7.0.0
  name: java

or using Ansible Galaxy as origin if you prefer:

- src: idealista.java_role
  version: 7.0.0
  name: java

Alternatively you could find tagged Docker images for Debian Stretch and Buster, Ubuntu Xenial, Bionic and Focal, and CentOS 7 and 8 in Docker Hub.

Install the role with ansible-galaxy command:

$ ansible-galaxy install -p roles -r requirements.yml -f

Use in a playbook:

---
- hosts: someserver
  roles:
    - java

Usage

Docker Hub

We publish every role version as a Docker image in Docker Hub: https://hub.docker.com/r/idealista/jdk.

You can pull our images by executing:

docker pull idealista/jdk:${JDK_VERSION}-${DOCKER_IMAGE_BASE}-${JDK_VENDOR}headless)

JDK_VERSION: Preferred JDK version. DOCKER_IMAGE: Currently supporting: stretch/buster/bullseye to select between Debian versions, xenial/bionic/focal to select between Ubuntu versions, and 7/8 to select a CentOS version. JDK_VENDOR: Currently supporting openjdk/ adoptopenjdk/corretto

For instance:

docker pull idealista/jdk:8u191-xenial-openjdk-headless

List of versions (tags) can be checked on Docker Hub

Ansible

defaults/main.yml

OpenJDK

A specific OpenJDK version should be selected overriding java_open_jdk_version_major variable using group vars/host vars:

Operative System	OpenJDK major release
Debian Stretch	`8` (default)
Debian Stretch	`11`
Debian Buster	`11` (default)
Debian Bullseye	`17`
Debian Bullseye	`11` (default)
Debian Bookworm	`17`
Debian Bookworm	`17` (default)
Ubuntu Xenial	`8`
Ubuntu Xenial	`9` (default)
Ubuntu Bionic	`8`
Ubuntu Bionic	`11` (default)
Ubuntu Focal	`8`
Ubuntu Focal	`11`
Ubuntu Focal	`17` (default)
Ubuntu Jammy	`11`
Ubuntu Jammy	`17` (default)
CentOS 7	`1.6.0`
CentOS 7	`1.7.0`
CentOS 7	`1.8.0`
CentOS 7	`11` (default)
CentOS 8	`1.8.0`
CentOS 8	`11` (default)

Other OpenJDK implementations out of GNU/Linux distributions streams are not officially supported, but it's easy use this role too adding extra repositories (see vars/ in AdoptOpenJDK/Temurin and Corretto directories).

Adding certificates into Java's truststore

This role supports adding certificates into Java's truststore. Truststore location may change depending on Java version:

Truststore location for Java 9 onwards: $JAVA_HOME/lib/security/cacerts
Truststore location for Java prior to 9: $JAVA_HOME/jre/lib/security/cacerts

A specific truststore location should be selected overriding java_keystore_dir variable using group vars/host vars. In addition, you must to set which certificates you want to add setting java_certs variable and the truststore password setting java_cert_keystore_pass

Testing

$ pipenv sync
$ DOCKER_IMAGE_BASE=(debian:stretch-slim|debian:buster-slim|debian_bullseye-slim|amd64/ubuntu:xenial|amd64/ubuntu:bionic|amd64/ubuntu:focal|centos:7|centos:8) JDK_VENDOR=(`java_jdk_version` openjdk|adoptopenjdk|corretto) JDK_MAJOR=(`java_open_jdk_version_major` see [.travis.yml](.travis.yml) file to check supported versions) JDK_VERSION=(`java_open_jdk_version` see [.travis.yml](.travis.yml) file to check supported versions) pipenv run molecule test

Note: JDK_VENDOR is an optional parameter, if not defined this role will use openjdk. Note: JDK_VERSION is an optional parameter, if not defined this role will install the latest available package for the selected Java major release. Note: debian9 (Debian Stretch) will be used as default linux distro if none is provided.

See molecule directory to check possible testing platforms.