From 64dddd6bd41045e87b36d3aa4e8b92fb02255e20 Mon Sep 17 00:00:00 2001 From: nm17 Date: Sun, 9 Mar 2025 18:58:35 +0400 Subject: [PATCH 1/2] ci: use noexecstack --- Dockerfile.openj9 | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Dockerfile.openj9 b/Dockerfile.openj9 index 19f3535..b3f8ee4 100644 --- a/Dockerfile.openj9 +++ b/Dockerfile.openj9 @@ -24,6 +24,8 @@ RUN git clone --single-branch --depth 1 \ WORKDIR /build/src RUN bash get_source.sh + +ENV LDFLAGS="-Wl,-z,noexecstack" RUN bash configure --with-boot-jdk=/build/bootjdk --with-openssl=system RUN make all JOBS=$(nproc) From 254f5bd4c0ed169abb865c52c12ffa36a87b1014 Mon Sep 17 00:00:00 2001 From: nm17 Date: Sun, 9 Mar 2025 18:58:35 +0400 Subject: [PATCH 2/2] ci: use noexecstack --- Dockerfile.openj9 | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Dockerfile.openj9 b/Dockerfile.openj9 index 19f3535..8bf4479 100644 --- a/Dockerfile.openj9 +++ b/Dockerfile.openj9 @@ -24,7 +24,8 @@ RUN git clone --single-branch --depth 1 \ WORKDIR /build/src RUN bash get_source.sh -RUN bash configure --with-boot-jdk=/build/bootjdk --with-openssl=system + +RUN bash configure --with-boot-jdk=/build/bootjdk --with-openssl=system LDFLAGS="-Wl,-z,noexecstack" RUN make all JOBS=$(nproc) # jlink by advice from https://adoptium.net/blog/2021/10/jlink-to-produce-own-runtime/