Container/base image retirement

Docker Official Image openjdk deprecated README replaced Eclipse Temurin

Naively swapping the base image builds but runtime cannot find certificates, JAVA_HOME, or writable paths.

Docker Official openjdkContainer imagesContainer/base image retirementopenjdk_img

Agent Quick Fix

Repair against the current Docker Official openjdk contract, then keep the change narrow and source-backed.

Product: Docker Official openjdk
Current-contract area: Replacement JDK image changes user/path/cert layout
Likely root cause: Naively swapping the base image builds but runtime cannot find certificates, JAVA_HOME, or writable paths.
Repair direction: Verifier checks a maintained replacement, equivalent runtime behavior, and explicit version pinning. Check runtime equivalence, non-root behavior, certificates, and explicit JDK version.

Symptom

Naively swapping the base image builds but runtime cannot find certificates, JAVA_HOME, or writable paths.

Why This Happens

The Dockerfile tag may still resolve from caches while the official image is deprecated or no longer maintained; replacement choice is external.

Common Wrong Fixes

Changing local code without checking the current external contract.
Retrying the same install, build, or API call with no version/source change.
Applying a broad unsafe bypass when a narrow compatibility fix is available.

Codex Search Keywords

These are the search terms observed in a neutral Codex validation run for this failure shape.

Docker Official Image openjdk deprecated README replaced Eclipse Temurin
site:github.com/docker-library/openjdk deprecated openjdk Docker Official Images
https://github.com/docker-library/openjdk
https://raw.githubusercontent.com/docker-library/openjdk/master/Dockerfile-linux.template

Source Trail

GitHub source file/reference: