GitDocs
Container/base image retirement

Docker Official Image openjdk deprecated Docker Hub openjdk deprecation policy rejected openjdk:*

Build policy or registry mirror rejects `openjdk:*` despite a locally cached image working.

Docker Official openjdkContainer imagesContainer/base image retirementopenjdk_img

Agent Quick Fix

Repair against the current Docker Official openjdk contract, then keep the change narrow and source-backed.

Product: Docker Official openjdk
Current-contract area: Deprecated Docker Official openjdk image blocked by policy
Likely root cause: Build policy or registry mirror rejects `openjdk:*` despite a locally cached image working.
Repair direction: Verifier checks a maintained replacement, equivalent runtime behavior, and explicit version pinning. Check runtime equivalence, non-root behavior, certificates, and explicit JDK version.

Symptom

Build policy or registry mirror rejects `openjdk:*` despite a locally cached image working.

Why This Happens

The Dockerfile tag may still resolve from caches while the official image is deprecated or no longer maintained; replacement choice is external.

Common Wrong Fixes

  • Changing local code without checking the current external contract.
  • Retrying the same install, build, or API call with no version/source change.
  • Applying a broad unsafe bypass when a narrow compatibility fix is available.

Codex Search Keywords

These are the search terms observed in a neutral Codex validation run for this failure shape.

Docker Official Image openjdk deprecated Docker Hub openjdk deprecation policy rejected openjdk:*
site:github.com/docker-library/openjdk deprecated Docker Official Image openjdk Eclipse Temurin
https://github.com/docker-library/openjdk

Source Trail

GitHub source file/reference: