Native image build fails when having signed jar dependency

[baldimir]

Hi,

I am trying to build a native image from a project that contains a dependency, which is signed. I am getting the exception mentioned at the end of this post. I think it may be related to this thread. Is there a way how to exclude signatures from a dependency jar, when building a native image please? I tried uber-jar, but that doesn't build later into a native image. I also tried -H:ExcludeResources from this link, it also didn't work, however I might configured it incorrectly. Does someone know please how to build a native image with a signed dependency library?

Thanks,
Tibor

Caused by: java.lang.RuntimeException: Failed to start quarkus
        at io.quarkus.runner.ApplicationImpl.<clinit>(Unknown Source)
        ... 82 more
Caused by: java.lang.SecurityException: class "com.ibm.bamoe.ilmt.quarkus.pamoe.PAMOESwidTagGen"'s signer information does not match signer information of other classes in the same package
        at java.base/java.lang.ClassLoader.checkCerts(ClassLoader.java:1158)
        at java.base/java.lang.ClassLoader.preDefineClass(ClassLoader.java:902)
        at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1010)
        at java.base/java.security.SecureClassLoader.defineClass(SecureClassLoader.java:150)
        at java.base/java.net.URLClassLoader.defineClass(URLClassLoader.java:524)
        at java.base/java.net.URLClassLoader$1.run(URLClassLoader.java:427)
        at java.base/java.net.URLClassLoader$1.run(URLClassLoader.java:421)
        at java.base/java.security.AccessController.doPrivileged(AccessController.java:712)
        at java.base/java.net.URLClassLoader.findClass(URLClassLoader.java:420)
        at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:587)
        at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:520)
        at java.base/jdk.internal.loader.Loader.loadClass(Loader.java:564)
        at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:520)
        at java.base/java.lang.Class.forName0(Native Method)
        at java.base/java.lang.Class.forName(Class.java:467)
        at com.ibm.bamoe.ilmt.quarkus.pamoe.PAMOESwidTagGen_Bean.<init>(Unknown Source)
        at io.quarkus.arc.setup.Default_ComponentsProvider.addBeans2(Unknown Source)
        at io.quarkus.arc.setup.Default_ComponentsProvider.getComponents(Unknown Source)
        at io.quarkus.arc.impl.ArcContainerImpl.<init>(ArcContainerImpl.java:117)
        at io.quarkus.arc.Arc.initialize(Arc.java:31)
        at io.quarkus.arc.runtime.ArcRecorder.initContainer(ArcRecorder.java:43)
        at io.quarkus.deployment.steps.ArcProcessor$generateResources844392269.deploy_0(Unknown Source)
        at io.quarkus.deployment.steps.ArcProcessor$generateResources844392269.deploy(Unknown Source)
        ... 83 more

[baldimir]

Zulip topic opened: https://quarkusio.zulipchat.com/#narrow/stream/187030-users/topic/Native.20build.20with.20signed.20jar/near/382626817

[maxandersen]

we already should be excluding signatures from the jars.

got example project for what fails for you ?

[baldimir]

Reproducer is here: https://github.com/baldimir/dmn-quarkus-example-bamoe/tree/main. It should fail when running mvn clean install -Pnative -DskipTests. Thank you for taking a look.

[baldimir]

Hi, did you have a chance to look at the reproducer please?

[baldimir]

Hi, could anyone please have a look at the reproducer?

[baldimir]

Did anyone has a chance to take a look at the reproducer please?

[galderz]

@baldimir This is a bug in Quarkus, see here for a detailed explanation and potential solutions.

[baldimir]

Thank you, I will take a look.

[galderz]

@baldimir This should not be a problem anymore since Quarkus 3.8.5, see #40001. You should upgrade your application and see if it works now. I tried to upgrade it myself but had some issues with some stale dependencies. Seems the app needs to move from quarkus-resteasy-* to quarkus-rest-*, but I already did that and was not enough. Maybe @geoand @gsmet or @gastaldi can help further with upgrading.

[baldimir]

Hi, thank you for the update. I will try to check during this week.