Java Bof Notes

[I'm not sure if we'll actually use this, but I thought I'd put it together anyway]

Proposed topics for discussion (I suggest adding thoughts, comments, solutions etc. under the relevant category below):

* Maven / dependency hell / build system

* Java 8 transition

* Tomcat

* Getting more contributors

* Old/crufty packages


20140828 - ad-hoc BoF to the right of Hack Lab 238

[things to try and do for jessie]

* openjdk version for jessie
 - freeBSD want OpenJDK7
 - (TLS) security in 7 may be problematic in the long haul
 - proposal is to get 8 into backports after the release
 - takes ~1 week per security release (4x per year)
   + not just x86/amd64
   + kfreebsd patches may not be in upstream
   + security updates often include *new* HotSpot version
   + new security patches are against trunk, so need backporting

we _could_ upload openjdk-8 to jessie (not as the default),
  but need feedback from the release and security team

for openJDK8, can we use it directly rather than IcedTea? -> it currently is directly used

proposal: we should decide what architectures will be "Java" arches in Debian
	Q: do we carry lots of patches for the ports?
	
	drop openjdk support for all arches that doesn't suppot Hotspot?
	use a model like Mono or Haskell?
		take a look at these pkg teams

* feedback/comments about team maint
 - be relaxed about fixing bugs in "other people's" packages
 
* maven3
	plugins may be different
	m2 configuration should work in m3
	step 1: try m2 plugins with m3

* tomcat6/7 removal
	Q: libservlet-2.5 rdeps - can they all use libservlet-3.0?
	- look at filing bug reports for all - use a usertag
	jessie to have libservlet3 and a libservlet2 package that just links to libservlet3's copy [so people can use libservlet 2.5 jar]