You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@sling.apache.org by "Bertrand Delacretaz (JIRA)" <ji...@apache.org> on 2008/07/04 11:02:32 UTC
[jira] Created: (SLING-563) Allow non-bundle jars to be loaded as
bundles using external metadata
Allow non-bundle jars to be loaded as bundles using external metadata
---------------------------------------------------------------------
Key: SLING-563
URL: https://issues.apache.org/jira/browse/SLING-563
Project: Sling
Issue Type: Improvement
Components: OSGi
Reporter: Bertrand Delacretaz
Priority: Minor
Just read Dan Diephouse's post at [1] and I like the idea of "bundleizing" existing jar files using separate metadata files, to be able to load them unmodified.
There are certainly security issues in doing this, but in a secure environment it might make it much easier to use any jar as an OSGi bundle.
[1] http://netzooid.com/blog/2008/07/02/osgi-is-a-pita-bundles/
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (SLING-563) Allow non-bundle jars to be loaded as
bundles using external metadata
Posted by "Felix Meschberger (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-563?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12610503#action_12610503 ]
Felix Meschberger commented on SLING-563:
-----------------------------------------
Using separate metadata is probably worse than using automatically generated metadata. Such separate files tend to get out of sync rather quickly with unforeseen consequences. I would _not_ do that.
In addition, you might to take a look at PAX URL wrap [1] ?
In addition, let me just state, that the OSGi headers are part of the API of the packages to use. So ranting about not being willing to add manifest headers is probably the same as ranting about not willing to use a required interface. IMHO Dan completely misses the point of bundles and what is required for bundles.
[1] http://wiki.ops4j.org/confluence/display/ops4j/Pax+URL+-+wrap
> Allow non-bundle jars to be loaded as bundles using external metadata
> ---------------------------------------------------------------------
>
> Key: SLING-563
> URL: https://issues.apache.org/jira/browse/SLING-563
> Project: Sling
> Issue Type: Wish
> Components: OSGi
> Reporter: Bertrand Delacretaz
> Priority: Minor
>
> Just read Dan Diephouse's post at [1] and I like the idea of "bundleizing" existing jar files using separate metadata files, to be able to load them unmodified.
> There are certainly security issues in doing this, but in a secure environment it might make it much easier to use any jar as an OSGi bundle.
> [1] http://netzooid.com/blog/2008/07/02/osgi-is-a-pita-bundles/
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Updated: (SLING-563) Allow non-bundle jars to be loaded as
bundles using external metadata
Posted by "Bertrand Delacretaz (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-563?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Bertrand Delacretaz updated SLING-563:
--------------------------------------
Issue Type: Wish (was: Improvement)
> Allow non-bundle jars to be loaded as bundles using external metadata
> ---------------------------------------------------------------------
>
> Key: SLING-563
> URL: https://issues.apache.org/jira/browse/SLING-563
> Project: Sling
> Issue Type: Wish
> Components: OSGi
> Reporter: Bertrand Delacretaz
> Priority: Minor
>
> Just read Dan Diephouse's post at [1] and I like the idea of "bundleizing" existing jar files using separate metadata files, to be able to load them unmodified.
> There are certainly security issues in doing this, but in a secure environment it might make it much easier to use any jar as an OSGi bundle.
> [1] http://netzooid.com/blog/2008/07/02/osgi-is-a-pita-bundles/
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (SLING-563) Allow non-bundle jars to be loaded as
bundles using external metadata
Posted by "Bertrand Delacretaz (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-563?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12610499#action_12610499 ]
Bertrand Delacretaz commented on SLING-563:
-------------------------------------------
I knew this was going to be controversial ;-)
> Allow non-bundle jars to be loaded as bundles using external metadata
> ---------------------------------------------------------------------
>
> Key: SLING-563
> URL: https://issues.apache.org/jira/browse/SLING-563
> Project: Sling
> Issue Type: Wish
> Components: OSGi
> Reporter: Bertrand Delacretaz
> Priority: Minor
>
> Just read Dan Diephouse's post at [1] and I like the idea of "bundleizing" existing jar files using separate metadata files, to be able to load them unmodified.
> There are certainly security issues in doing this, but in a secure environment it might make it much easier to use any jar as an OSGi bundle.
> [1] http://netzooid.com/blog/2008/07/02/osgi-is-a-pita-bundles/
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Closed: (SLING-563) Allow non-bundle jars to be loaded as
bundles using external metadata
Posted by "Carsten Ziegeler (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-563?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Carsten Ziegeler closed SLING-563.
----------------------------------
Resolution: Won't Fix
I think we should close this bug. Above are enough reasons against this feature and there are efforts (like the spring osgi repo) which provide nearly all libs as OSGi bundles anywax.
> Allow non-bundle jars to be loaded as bundles using external metadata
> ---------------------------------------------------------------------
>
> Key: SLING-563
> URL: https://issues.apache.org/jira/browse/SLING-563
> Project: Sling
> Issue Type: Wish
> Components: OSGi
> Reporter: Bertrand Delacretaz
> Priority: Minor
>
> Just read Dan Diephouse's post at [1] and I like the idea of "bundleizing" existing jar files using separate metadata files, to be able to load them unmodified.
> There are certainly security issues in doing this, but in a secure environment it might make it much easier to use any jar as an OSGi bundle.
> [1] http://netzooid.com/blog/2008/07/02/osgi-is-a-pita-bundles/
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (SLING-563) Allow non-bundle jars to be loaded as
bundles using external metadata
Posted by "Bertrand Delacretaz (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-563?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12610494#action_12610494 ]
Bertrand Delacretaz commented on SLING-563:
-------------------------------------------
Agree that the implementation belongs in Felix, but as a feature it would be nice to have, so I suggest keeping this issue open as a feature wishlist item.
> Allow non-bundle jars to be loaded as bundles using external metadata
> ---------------------------------------------------------------------
>
> Key: SLING-563
> URL: https://issues.apache.org/jira/browse/SLING-563
> Project: Sling
> Issue Type: Improvement
> Components: OSGi
> Reporter: Bertrand Delacretaz
> Priority: Minor
>
> Just read Dan Diephouse's post at [1] and I like the idea of "bundleizing" existing jar files using separate metadata files, to be able to load them unmodified.
> There are certainly security issues in doing this, but in a secure environment it might make it much easier to use any jar as an OSGi bundle.
> [1] http://netzooid.com/blog/2008/07/02/osgi-is-a-pita-bundles/
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (SLING-563) Allow non-bundle jars to be loaded as
bundles using external metadata
Posted by "Carsten Ziegeler (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-563?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12610495#action_12610495 ]
Carsten Ziegeler commented on SLING-563:
----------------------------------------
just for the record - I don't think that this feature is a good idea/required, but if someone wants to spent some energy on it, why not. :)
> Allow non-bundle jars to be loaded as bundles using external metadata
> ---------------------------------------------------------------------
>
> Key: SLING-563
> URL: https://issues.apache.org/jira/browse/SLING-563
> Project: Sling
> Issue Type: Wish
> Components: OSGi
> Reporter: Bertrand Delacretaz
> Priority: Minor
>
> Just read Dan Diephouse's post at [1] and I like the idea of "bundleizing" existing jar files using separate metadata files, to be able to load them unmodified.
> There are certainly security issues in doing this, but in a secure environment it might make it much easier to use any jar as an OSGi bundle.
> [1] http://netzooid.com/blog/2008/07/02/osgi-is-a-pita-bundles/
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
[jira] Commented: (SLING-563) Allow non-bundle jars to be loaded as
bundles using external metadata
Posted by "Carsten Ziegeler (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/SLING-563?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12610493#action_12610493 ]
Carsten Ziegeler commented on SLING-563:
----------------------------------------
I don't think that this is a Sling issue - if - at all - this is an issue of the platform impl, so this might be a Felix issue.
> Allow non-bundle jars to be loaded as bundles using external metadata
> ---------------------------------------------------------------------
>
> Key: SLING-563
> URL: https://issues.apache.org/jira/browse/SLING-563
> Project: Sling
> Issue Type: Improvement
> Components: OSGi
> Reporter: Bertrand Delacretaz
> Priority: Minor
>
> Just read Dan Diephouse's post at [1] and I like the idea of "bundleizing" existing jar files using separate metadata files, to be able to load them unmodified.
> There are certainly security issues in doing this, but in a secure environment it might make it much easier to use any jar as an OSGi bundle.
> [1] http://netzooid.com/blog/2008/07/02/osgi-is-a-pita-bundles/
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.