Container/base image retirement
Docker Official Image openjdk deprecated Docker Hub openjdk deprecation policy rejected openjdk:*
Build policy or registry mirror rejects `openjdk:*` despite a locally cached image working.
Agent Quick Fix
The Dockerfile tag may still resolve from caches while the official image is deprecated or no longer maintained; replacement choice is external.
Product: Docker Official openjdk
Current-contract area: Deprecated Docker Official openjdk image blocked by policy
Likely root cause: Build policy or registry mirror rejects `openjdk:*` despite a locally cached image working.
Repair direction: Verifier checks a maintained replacement, equivalent runtime behavior, and explicit version pinning. Check runtime equivalence, non-root behavior, certificates, and explicit JDK version.
Validation Status
Codex searched organically in the validation run. No no-web counterfactual is attached to this page yet.
Symptom
Build policy or registry mirror rejects `openjdk:*` despite a locally cached image working.
Why This Happens
The Dockerfile tag may still resolve from caches while the official image is deprecated or no longer maintained; replacement choice is external.
Verification
Verifier checks a maintained replacement, equivalent runtime behavior, and explicit version pinning. Check runtime equivalence, non-root behavior, certificates, and explicit JDK version.
Common Wrong Fixes
- Changing local code without checking the current external contract.
- Retrying the same install, build, or API call with no version/source change.
- Applying a broad unsafe bypass when a narrow compatibility fix is available.
Codex Search Keywords
These are the search terms observed in a neutral Codex validation run for this failure shape.
Docker Official Image openjdk deprecated Docker Hub openjdk deprecation policy rejected openjdk:*
site:github.com/docker-library/openjdk deprecated Docker Official Image openjdk Eclipse Temurin
https://github.com/docker-library/openjdk
Source Trail
GitHub source file/reference: