Information
ID: 696
PHID: PHID-TASK-3ay6bl6yto3ps6iiffj3
Author: HulaHoop
Status at Migration Time: wontfix
Priority at Migration Time: Normal
Description
According to a user report 64-bit OpenJDK requires the clflush instruction to work. clflush is removed to make rowhammer and sidechannel attacks more difficult. Whonix 14 will be 64-bit and so a workaround like running 32bit OpenJDK is needed as a workaround to preserve this protection.
TO-DO: Test instructions forinstalling 32-bit OpenJDK on a 64-bit Debian when an RC image is available.
[0] 64 bit OpenJDK fails to run - #9 by HulaHoop
If the following succeeds, change all OpenJDK installation documentation on the wiki to reflect it:
sudo dpkg --add-architecture i386
sudo apt-get update
sudo apt-get install openjdk-8-jre-headless:i386
sudo /usr/sbin/update-java-alternatives -s java-1.8.0-openjdk-i386
Comments
HulaHoop
2018-02-12 07:08:28 UTC
Patrick
2018-02-12 09:10:03 UTC
HulaHoop
2018-02-12 16:09:15 UTC
Patrick
2018-02-17 12:56:42 UTC
HulaHoop
2018-05-16 12:01:09 UTC