Arch Linux User Repository

Note to all package users: I’ve decided to stop maintaining GraalVM packages on the AUR. If anyone else wants to pick them up, feel free to contact me if you have questions, but don’t expect a ton of enthusiasm from me, nor especially fast responses. I’ll leave some potentially useful information below.

With the packaging changes since the 23.1.0 release(s) of GraalVM (corresponding to OpenJDK 21.0.0), I think it no longer makes sense to have the jdk version in the package name. There should be one jdk-graalvm-bin package, with a pkgver matching the OpenJDK version (currently 21.0.0); and there should be one package for each other component (TruffleRuby, GraalPy, etc.), with the pkgver taken from the year-based GraalVM version (currently 23.1.0), but with “jdk-less” names like truffleruby-bin or graalpy-bin.

The jdk-graalvm-bin packaging should now be based substantially on the OpenJDK one. I’ve uploaded a provisional PKGBUILD and related files here: https://gist.github.com/lucaswerkmeister/c4a8f5f1f5bcd46852d1c028c01ae2f2

The other packages will have to change substantially from their older versions, as the distributed artifacts have changed. Previously, upstream distributed the other components as JAR files, which included META-INF/symlink and META-INF/permissions files that contained information that can’t always be represented in the JAR format; a big part of the PKGBUILD of each package then reconstructed the information from those files. This is now obsolete, as the components are distributed as gzipped tarballs. However, there is a new big problem. Previously, the components had dependencies on each other (e.g. GraalJS depended on separate components for ICU4J and Regex components), which I modeled as separate AUR packages. Now, each tarball seems to be complete and self-contained, which is achieved by just duplicating the dependencies; for instance, a modules/polyglot.jar file is found in the tarballs for Graal-NodeJS, GraalJS, TruffleRuby, and probably many others, and there are no separate downloads for components like ICU4J and Regex at all anymore as far as I can tell. If the PKGBUILD just copies all the source files into the pkgdir, then the packages will all conflict with one another. I don’t know a great solution to this; I think the Arch/AUR packager might just have to extract shared base packages with the duplicated files manually (trying to figure out which files make sense in which package). I started a PKGBUILD for graal-nodejs-bin here, but it doesn’t solve the duplicated files problem: https://gist.github.com/lucaswerkmeister/1fc04809144403ae46478c61ac40a4ea

Finally, I have to caution you that working with Oracle is just not fun. Years ago I was foolish enough to actually send them a pull request for a simple bug, which required going through a laborious CLA process; they then proceeded to steal my patch and commit it without any attribution, as permitted by the CLA. Do not sign their CLA (the “OCA”, Oracle Contributors Agreement). After that, I of course mostly limited myself to filing issues, but they’re generally very slow to respond to either issues or pull requests. (You definitely don’t want to wait for them to fix an issue before you publish a package update; just work around it in whatever way you can, and hope that you can eventually remove the workaround.) They also don’t learn from their mistakes at all, having managed to not include license files in their releases no fewer than five times.

jdk17-graalvm-bin already ships the Native Image component, including /usr/lib/jvm/java-17-graalvm/bin/native-image, and already has:

replaces=('native-image-jdk17-bin')

However, it currently doesn't declare a corresponding conflicts/provides relationship.

I ran into this while installing a package that depended on native-image-jdk17-bin: paru tried to install both packages, and pacman then aborted with a large number of file conflicts because the Native Image files are already owned by jdk17-graalvm-bin.

Could you add something along the lines of:

provides=('native-image-jdk17-bin')
conflicts=('native-image-jdk17-bin')

That should both prevent the conflicting installation and allow existing packages depending on the old split package to be satisfied by jdk17-graalvm-bin.

Note to all package users: I’ve decided to stop maintaining GraalVM packages on the AUR. If anyone else wants to pick them up, feel free to contact me if you have questions, but don’t expect a ton of enthusiasm from me, nor especially fast responses. I’ll leave some potentially useful information below.

With the packaging changes since the 23.1.0 release(s) of GraalVM (corresponding to OpenJDK 21.0.0), I think it no longer makes sense to have the jdk version in the package name. There should be one jdk-graalvm-bin package, with a pkgver matching the OpenJDK version (currently 21.0.0); and there should be one package for each other component (TruffleRuby, GraalPy, etc.), with the pkgver taken from the year-based GraalVM version (currently 23.1.0), but with “jdk-less” names like truffleruby-bin or graalpy-bin.

The jdk-graalvm-bin packaging should now be based substantially on the OpenJDK one. I’ve uploaded a provisional PKGBUILD and related files here: https://gist.github.com/lucaswerkmeister/c4a8f5f1f5bcd46852d1c028c01ae2f2

The other packages will have to change substantially from their older versions, as the distributed artifacts have changed. Previously, upstream distributed the other components as JAR files, which included META-INF/symlink and META-INF/permissions files that contained information that can’t always be represented in the JAR format; a big part of the PKGBUILD of each package then reconstructed the information from those files. This is now obsolete, as the components are distributed as gzipped tarballs. However, there is a new big problem. Previously, the components had dependencies on each other (e.g. GraalJS depended on separate components for ICU4J and Regex components), which I modeled as separate AUR packages. Now, each tarball seems to be complete and self-contained, which is achieved by just duplicating the dependencies; for instance, a modules/polyglot.jar file is found in the tarballs for Graal-NodeJS, GraalJS, TruffleRuby, and probably many others, and there are no separate downloads for components like ICU4J and Regex at all anymore as far as I can tell. If the PKGBUILD just copies all the source files into the pkgdir, then the packages will all conflict with one another. I don’t know a great solution to this; I think the Arch/AUR packager might just have to extract shared base packages with the duplicated files manually (trying to figure out which files make sense in which package). I started a PKGBUILD for graal-nodejs-bin here, but it doesn’t solve the duplicated files problem: https://gist.github.com/lucaswerkmeister/1fc04809144403ae46478c61ac40a4ea

Finally, I have to caution you that working with Oracle is just not fun. Years ago I was foolish enough to actually send them a pull request for a simple bug, which required going through a laborious CLA process; they then proceeded to steal my patch and commit it without any attribution, as permitted by the CLA. Do not sign their CLA (the “OCA”, Oracle Contributors Agreement). After that, I of course mostly limited myself to filing issues, but they’re generally very slow to respond to either issues or pull requests. (You definitely don’t want to wait for them to fix an issue before you publish a package update; just work around it in whatever way you can, and hope that you can eventually remove the workaround.) They also don’t learn from their mistakes at all, having managed to not include license files in their releases no fewer than five times.

Note: JavaScript, the LLVM runtime and VisualVM used to be included in this package, but were extracted to separate packages starting with 22.2.0. You may need to install them now, especially JS and LLVM. (See optdepends for the package names.)

To upgrade this package to the latest 21.3.0 release

diff --git a/PKGBUILD b/PKGBUILD
index ae2741e..22bd9bd 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -2,8 +2,7 @@

 java_=17
 pkgname="jdk${java_}-graalvm-bin"
-pkgver=21.3.0.20210827.1945
-VER=21.3.0-dev-20210827_1945
+pkgver=21.3.0
 pkgrel=1
 pkgdesc="Universal virtual machine for running applications written in a variety of languages (JVM-based, LLVM-based, or other), Java ${java_} version"
 arch=('x86_64'
@@ -20,13 +19,13 @@ options=('staticlibs')
 install="$pkgname.install"
 source=('graalvm-rebuild-libpolyglot.hook')
 sha256sums=('SKIP')
-source_x86_64=("https://github.com/graalvm/graalvm-ce-dev-builds/releases/download/${VER}/graalvm-ce-java${java_}-linux-amd64-dev.tar.gz")
-source_aarch64=("https://github.com/graalvm/graalvm-ce-dev-builds/releases/download/${VER}/graalvm-ce-java${java_}-linux-aarch64-dev.tar.gz")
-sha256sums_x86_64=('SKIP')
-sha256sums_aarch64=('SKIP')
+source_x86_64=("https://github.com/graalvm/graalvm-ce-builds/releases/download/vm-${pkgver}/graalvm-ce-java${java_}-linux-amd64-${pkgver}.tar.gz")
+source_aarch64=("https://github.com/graalvm/graalvm-ce-builds/releases/download/vm-${pkgver}/graalvm-ce-java${java_}-linux-aarch64-${pkgver}.tar.gz")
+sha256sums_x86_64=('11d8039e0a7a31b799a6f20a0e806e4128730e9a2595a7ffdec1443539d4c3f6')
+sha256sums_aarch64=('96f94265dbd0ff6971a60be256ee6c4c27ee0156e9fbbc59bdb7b85301a21f26')

 package() {
-    cd "graalvm-ce-java${java_}-"*-dev
+    cd "graalvm-ce-java${java_}-${pkgver}"
     mkdir -p "$pkgdir/usr/lib/jvm/java-${java_}-graalvm/"
     cp -a -t "$pkgdir/usr/lib/jvm/java-${java_}-graalvm/" *
     install -DTm644 LICENSE.txt "$pkgdir/usr/share/licenses/$pkgname/LICENSE"