Cloud Platform
This is an IBM Automation portal for Cloud Platform products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).
Shape the future of IBM!
We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:
Search existing ideas
Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,
Post your ideas
Post an idea.
Get feedback from the IBM team and other customers to refine your idea.
Follow the idea through the IBM Ideas process.
Specific links you will want to bookmark for future use
Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.
IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.
ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.
Hi Matthew, can you confirm if our understanding of your request is correct and that installing/using the JRE packages fulfils your request? Thanks.
Hi Matthew,
I think what you are asking for is a way to install IBM Semeru Runtimes so that the deployed system cannot run Java code from source code, but only run already compiled byte codes. If that is what you're asking for, then we already produce a "JRE" package as well as a "JDK" package. The JRE package does not contain any developer tools (like the Java source code compiler) whereas the JDK is the full development kit. For example the latest Java 21 binaries for the Linux X86 platform have both JDK and JRE flavours, e.g.:
JDK: https://github.com/ibmruntimes/semeru21-binaries/releases/download/jdk-21.0.7%2B6_openj9-0.51.0/ibm-semeru-open-jdk_x64_linux_21.0.7_6_openj9-0.51.0.tar.gz
JRE: https://github.com/ibmruntimes/semeru21-binaries/releases/download/jdk-21.0.7%2B6_openj9-0.51.0/ibm-semeru-open-jre_x64_linux_21.0.7_6_openj9-0.51.0.tar.gz
If you can confirm that I've correctly understood your request, then I think we already produce what you're looking for and you should just install the "JRE" packages.
This is not requesting that JAVA stop being an executable source code scripting language. This is about providing a byte code only alternative while still retaining the existing ability to execute from source code for those who want the least privilege additional security in production contexts. The UNIX shell and PYTHON have this same issue. For the UNIX shell a potential remedy is to restrict authorization regarding who can execute it and to avoid shell scrips for in-house production applications. For PYTHON, the best solution is the same as for JAVA, which is to provide an ability to optionally install the interpreter without the source code execution functionality or to provide an alternative byte code only interpreter in addition to the source code capable interpreter and to allow one of the two interpreters to be selected during the install.
Hi, JVM has always made use of the JIT Compiler for excecution. There was no change with respect to that in Java 11 so if you're running into an issue as of Java 11 its not necessarily going to be related to the JIT.
You can verify this for yourself with the option -Xint which disables the JIT and runs exclusively in Intepreter mode only, with the corresponding significant performance impact (> 10X).
Perhaps if you can explain the specific behaviour you are seeing in more detail we can ferret out what might be at root of the issue and if it can be addressed.