1 of 47

Contents

  • Our Mission
  • Program Goals
  • Strategies and Tactics
  • Project Priorities

1

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

2 of 47

Our Mission

2

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

3 of 47

Working Group Mission Statement

Advance, promote and support projects structured around the Adoptium top-level project for the creation and dissemination of runtime and associated technologies including producing high quality runtimes for use across the Java ecosystem.

3

3

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

4 of 47

2024 Technical Projects – Areas of Endeavor

  • Runtimes and Development Kits: deliver high quality, consumable, open source Java SE binaries across various API versions, on a wide variety of processor architectures and operating systems, made available through platform native installers, Docker container images, a website, API, and artifact repositories.�
  • Quality Assurance: operate a robust, secure supply chain, framework, and associated tests for trusted quality determination of key functional, performance, security, and durability criteria. Provide infrastructure and tools to simplify running Java SE TCKs to ensure compliance to the specification.�
  • Secure Development: deliver secure, reproducible binaries. Including all of the associated information required to validate and verify the security of our deliverables.
  • Innovation and differentiation: enable participants to explore technical opportunities in areas of endeavor and build upon the commons to provide commercial differentiation.

4

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

5 of 47

Program Goals

5

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

6 of 47

2024 Program Goals

  1. Ensure Adoptium’s projects thrive by providing excellent community health, technical resource, and marketing support for their success.
  2. Maintain Adoptium as the industry's top vendor-neutral source of secure, high-quality open source Java runtimes.
  3. Identify new technical collaboration opportunities across Eclipse projects and beyond.
  4. Deliver secure, reproducible binaries. Including all of the associated information required to validate and verify the security of our deliverables.

1. Vibrant Healthy Projects

3. Innovation that Matters

4. Secure Development

2. Maintain Product Usage

6

6

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

7 of 47

2025 Program Goals

  • Ensure Adoptium’s projects thrive by providing excellent community health, technical, contributors, financial and /or in-kind resources, and marketing support for their success.
  • Maintain Adoptium as the industry's top vendor-neutral source of secure, high-quality, on time open source Java runtimes.
  • Identify where to improve Adoptium’s projects, that could be done by new collaboration opportunities across Eclipse projects and beyond.
  • Deliver secure, reproducible binaries. Including all of the associated information required to validate and verify the security of our deliverables.

1. Vibrant Healthy Projects

3. Innovation that Matters

4. Secure Development

2. Maintain Adoptium market position

7

7

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

8 of 47

Strategies and Tactics

8

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

9 of 47

1. Vibrant Healthy Projects: Program Strategies -2024

Program Goal

Corresponding Strategies

Ensure Adoptium’s projects thrive by providing excellent community health, technical resource, and marketing support for their success.

  • Clearly communicate the goals of the projects and working group to the community, and involve the entire community in owning and achieving them through appropriate channels.
  • Recognize the developer community has autonomy in decision making, defining processes, and technical direction within the scope of the working group charter.
  • Provide the appropriate tools, computing resources to make developers successful in the long term. Always act in the best interests of the project.
  • Promote the work of the community through marketing, amplification, and representation. Forge links with other communities as appropriate.
  • Invite and encourage innovation and experimentation in runtime technology through technical knowledge sharing, upstream collaboration and creation of Adoptium projects.

9

9

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION, INC. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)

�1

10 of 47

1. Vibrant Healthy Projects: Achievements and Objectives 2024

2023 Achievements

2024 Objectives

  • Adoptium project communities are a healthy technical and social environment for collaboration. New users are welcomed and encouraged including open calls and localized website.
  • Projects are working with delegated responsibility for decision making and progressing work items. Teams are working in the open for the benefit of the broader community.
  • PMC are providing coordination and overall awareness across area, achieved with a light touch and consensus decision making. PMC membership has grown.
  • Provided required resources across project areas including infrastructure, documentation, and input as requested and within budget.
  • New projects welcomed as innovation hubs for collaboration.
  • Continue to support Adoptium community and growth through student programmes, public availability of tasks for onboarding new members and areas of responsibility to grow experienced members.
  • Ensure information dissemination throughout the Adoptium community by consistently sharing plans and operations data to ensure a common goal.
  • Update the long term marketing plan for the Adoptium brands, focused on an enterprise user audience.
  • Build associations across Eclipse Foundation and beyond to deliver Java runtime technology needs and support Java runtime development.

10

10

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION, INC. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)

�1

11 of 47

1. …: Program Strategies

Program Goal

Corresponding Strategies

….

11

11

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION, INC. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)

�1

12 of 47

1. Vibrant Healthy Projects: Program Tactics

Initiative

Member Contributions

Eclipse Foundation

  • ….

12

12

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION, INC. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)

�1

13 of 47

1. Vibrant Healthy Projects: 2024 Key Metrics

Metric

October 2023

October 2024

Target 2025

Adoptium’s active projects

7

Commit Authors (Committers and Contributors) accum

84

Committers (unique value)

55

New Commits

1.611

Avg. New commits / author

19

COPYRIGHT (C) 2022, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

13

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

14 of 47

2. Maintain Product Usage: Program Strategies 2024

Program Goal

Corresponding Strategies

Maintain Adoptium as the industry's top vendor-neutral source of secure, high-quality open source Java runtimes.

  • Embed Adoptium’s reputation in the industry for high quality, on-time deliveries of Java SE binaries.
  • Provide a compelling website to reflect the maturity and position of the product and brand in the market. Build secure and scalable distribution channels for Adoptium.
  • Build upon the industry leading secure engineering practices of Eclipse Temurin runtimes.
  • Promote the enhanced assurance program for AQAvit tested binaries to be accredited and distributed by Adoptium.
  • Convert product usage into support from enterprise users.

14

14

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION, INC. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)

�1

15 of 47

2. Maintain Product Usage: Achievements and Objectives 2024

2023 Achievements

2024 Objectives

  • Delivered each quarterly update and new feature release at the high-quality level set by the project and expected by the community.
  • Achieved all the deliverables using infrastructure, documentation, and assets as requested by the projects and within budget.
  • Significantly improved delivery times of Eclipse Temurin artifacts compared to 2022.
  • Comparison build pipeline established at Adoptium to ensure builds are reproducible.
  • Progressed redesign of the Adoptium website to improve delivery of Temurin to customers.
  • Further promotion and education of the Temurin distribution channels including GitHub actions, containers, API, marketplace, and distribution managers.
  • Targeted alliances around the usage of Temurin in middleware and popular framework stacks.
  • Develop and distribute marketing materials to clearly communicate the AQAvit value statement to enterprise users, architects, and technical execs.
  • Complete the redesign of the Adoptium website and make progress on its implementation.
  • Further improve the delivery process of Temurin for all artifacts, including installers and container images, to improve time to market

15

15

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION, INC. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)

�1

16 of 47

2. Maintain Product Usage: Program Strategies

Program Goal

Corresponding Strategies

16

16

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION, INC. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)

�1

17 of 47

2. Maintain Product Usage: Program Tactics

Initiative

Member Contributions

Eclipse Foundation

  • ….

17

17

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION, INC. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)

�1

18 of 47

2. Maintain Product Usage: Key Metrics

Metric

October 2023

October 2024

Target 2025

254M

777M

210.9 2023

xxxM accum.

xxxM 2024

Xxx M accum.

xxxM 2025

Percentage of Tarballs Released Within Target

Release Scorecard

78.98%

Average Days for Primaries (Target 2 day)

2.15

Average Days for Secondaries (Target 7 days)

4.91

COPYRIGHT (C) 2022, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

18

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

19 of 47

3. Innovation that Matters: Program Strategies 2024

Program Goal

Corresponding Strategies

Identify new technical collaboration opportunities across Eclipse projects and beyond.

  • Reach out to existing Eclipse projects that depend upon Java runtimes and understand their requirement for availability and delivery.
  • Develop stack-optimized runtimes containing Eclipse technology for target markets, including IoT, development, middleware servers, and Cloud deployment.
  • Encourage experimentation and innovation in the Adoptium Incubator with a view to productive collaboration in broader communities such as OpenJDK development, vendor groups, etc.
  • Provide new services such as bug prediction analytics, decentralized testing, etc. including relevant communities wherever possible.

19

19

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION, INC. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)

�1

20 of 47

3. Innovation that Matters: Achievements and Objectives 2024

2023 Achievements

2024 Objectives

  • Collaborations with other vendors to promote security vulnerability and secure engineering opportunities.
  • Welcomed further work in the Adoptium incubator for fast startup, and migration toolkit for Java to the project.
  • Engaged with interested parties including Bloomberg, Canonical, and Fujitsu to provide Adoptium technology customised for corporate interests.
  • Worked with external academic and placement partners including Outreachy to advance students and innovate in Adoptium projects.
  • Promoted secure development innovations of Adoptium at EclipseCon 2023.

  • Grow AQAvit definition to reflect working group areas of interest, business demands, and technical dependencies.
  • Utilize historical results for testing trend analysis and prediction. Enhancing the testing summary service capabilities to optimise triage tasks.
  • Provide resources to facilitate optimal Java development experiences and devops integration under Project Tressle. Actively seek out new opportunities.
  • Engage with Foundation projects and beyond to define reference architectures for runtime technology stacks and verticals aligned with working group areas of interest (emerging processors, edge, IoT, automotive, etc.).

20

20

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION, INC. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)

�1

21 of 47

3. Innovation that Matters: Program Strategies

Program Goal

Corresponding Strategies

...

21

21

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION, INC. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)

�1

22 of 47

3. Innovation that Matters: Program Tactics

Initiative

Member Contributions

Eclipse Foundation

  • ….

22

22

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION, INC. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)

�1

23 of 47

3. Innovation that Matters: Key Metrics 2024

Metric

October 2023

October 2024

Target 2025

7

Initial Average Pass Rate*

97.65

Technical collaboration opportunities

Trestle Initiative (OpenJDK Upstream Dev)

Definition

COPYRIGHT (C) 2022, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

23

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

24 of 47

4. Secure Development: Program Strategies 2024

Program Goal

Corresponding Strategies

Deliver secure, reproducible binaries. Including all of the associated information required to validate and verify the security of our deliverables.

  • Ensure we have a trusted supply chain for our dependencies and follow industry best practices for secure software development.
  • Select the accepted criteria for industry certification and provide relevant attestation for all users.
  • Utilize security expertise beyond the project including but not limited to an external security audit.
  • Provide open and consumable information relating to vulnerabilities in our products.

24

24

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION, INC. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)

�1

25 of 47

4. Secure Development: Achievements and Objectives 2024

2023 Achievements

2024 Objectives

  • Achieved SLSA v0.1 Build Level 3, provided attestation via Eclipse Foundation project page.
  • Provided reproducible builds for major platforms with contributions to OpenJDK and the development of a reproducible build pipeline at Adoptium
  • Published SBOMs with all binaries that have enough detail for users to produce binary identical builds using the Temurin SBOM data.
  • Started work on vulnerability disclosure report for Temurin, registered Temurin on the NIST CPE directory, and migrated GitHub org/repo management to Eclipse Ottterdog
  • Infrastructure secured via deployment of “Wazuh” security platform to proactively monitor all machines at Adoptium.
  • Achieve SLSA v1.0 Level 3 (for primary platforms).
  • Provide a mechanism for the external, public verification of Eclipse Temurin builds via the reproducible build capability.
  • Complete an external security audit and apply critical fixes identified.
  • Enhance security of Temurin build pipelines through evaluation and adoption of best in class CI/CD systems following OpenSSF best practices.
  • Define a Temurin standard security repository policy in Otterdog to unify source code access and management.
  • Provide annual attestations for security policies applied at Adoptium.

25

25

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION, INC. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)

�1

26 of 47

4. Secure Development: Program Strategies

Program Goal

Corresponding Strategies

….

26

26

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION, INC. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)

�1

27 of 47

4. Secure Development: Program Tactics

Initiative

Member Contributions

Eclipse Foundation

  • ….

27

27

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION, INC. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)

�1

28 of 47

4. Secure Development: Key Metrics

Metric

October 2023

October 2024

Target 2025

OpenSSF scorecard average for GitHub org

-

7.8

Adoptium.net

-

7.2

Adoptium Installers

-

7

Containers

-

9.1

Secure Development Criteria for AQAvit

-

Define current level (Q4)

COPYRIGHT (C) 2022, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

28

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

29 of 47

Membership and Sponsorship Growth: Key Metrics

Metric

October 2023

October 2024

Target 2025

Weekly active Slack members (within last 30 days)

143

153

7

7

3

4

2

2

12

13

Sponsors active - Target 25% Growthh

3 agreements

7 Github

3 agreements

6 Github

Linkedin Followers (B2B) - New

83

213

New Named Adopters

30

30

COPYRIGHT (C) 2022, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

29

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

30 of 47

Increase Adoptium Awareness: Key Metrics

Metrics

2023

October 2024

Target 2025

12

4

Mailing List Campaign

0

2

Case Studies

1

0

Testimonials Business Users

0

0

PR / announcements

1

0

Dedicated Newsletter (3 Spotlight)

1

1

Virtual Events (Lightning Talks + Webinars)

11

3

Events F2F

1

0

Website Redesign

0

0

Conference Talks (F2F/Online)

5

7

Linkedin posting (annual)

82

133

X posting (annual)

120

134

COPYRIGHT (C) 2022, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

30

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

31 of 47

Member Participation

31

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

32 of 47

Working Group Member Asks

  • Follow and engage with @ on X and LinkedIn
    • Please use #adoptium hashtags whenever relevant in your posts
    • Ask your company’s social media manager to follow and RT from official handles including @adoptium
    • Please share news and updates with your own personal networks
  • Share your project-related news and announcements with news@eclipse.org
    • Let us know 4-6 weeks in advance of a newsworthy project milestone, so we can draft an announcement, pitch to media, and/or schedule briefings with Mike Milinkovich and the Project Lead
  • Author blog posts that mention Adoptium or related projects
    • Write a post about your experience as a member of the Adoptium community
    • We welcome posts that talk about your commercial enhancements and value from the Adoptium work
  • Share your use cases and success stories with news@eclipse.org
    • Let us know how you are using Temurin
  • Volunteer to give a webinar / host a virtual meetup
  • Submit talks to CFPs for Adoptium awareness in conference and meet-ups

32

32

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION, INC. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)

�1

33 of 47

Working Group Member Goals

Program

All Members

Blogs Postings on Adoptium Topics

1/quarter

Project-related Social Media Posts from Official Channels

1/month

AQAvit Case Studies/Use Cases Shared

1/year

Adoptium Webinar/Conference

1/year

Adoptium Chat/Video/Interview

2/year

As a Working Group Member you are expected to understand and help with promoting the work of the Adoptium group and projects.��The following is a recommended schedule of such engagement.

33

33

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION, INC. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)

�1

34 of 47

Project Priorities

34

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

35 of 47

Technical Projects – Areas of Endeavor

  • Runtimes and Development Kits: deliver high quality, consumable, open source Java SE binaries across various API versions, on a wide variety of processor architectures and operating systems, made available through platform native installers, Docker container images, a website, API, and artifact repositories.�
  • Quality Assurance: operate a robust, secure supply chain, framework, and associated tests for trusted quality determination of key functional, performance, security, and durability criteria. Provide infrastructure and tools to simplify running Java SE TCKs to ensure compliance to the specification.�
  • Secure Development: deliver secure, reproducible binaries. Including all of the associated information required to validate and verify the security of our deliverables.
  • Innovation and differentiation: enable participants to explore technical opportunities in areas of endeavor and build upon the commons to provide commercial differentiation.

35

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

36 of 47

Working Group Resources Primary Focus

  • Deliver secure, high-quality, and timely Temurin binaries on core platforms
    • Core platforms are defined by the Adoptium PMC (see later slide).
    • Temurin’s supported binaries are derived from OpenJDK long term supported source streams and the latest dev stream release. Presently that is 8u, 11u, 17u, 21u.
    • The duration of community supported binaries is defined by the Adoptium PMC and shown on the Adoptium website.
  • Budget and resources first call is on the primary focus area
    • Maintain sufficient infrastructure and community focus to allow the Adoptium TLP to deliver the primary focus area.
      • Includes build, test, TCK compliance, installers, Docker images, download site, API support, marketing, IP processes, etc.
  • Maintain and promote the AQAvit verified Java SE binaries in the marketplace
    • Operate and promote the marketplace containing a wide range of binaries that pass the Java SE TCK and the AQAvit Quality Verification Suite criteria.

COPYRIGHT (C) 2022, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

36

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

37 of 47

Secure Supply Chain and Software Engineering

  • Secure software development and supply chain management
    • Meet demands of the NIST SSDF framework across four themes:
      • Ensure our community, processes, and technology are designed for secure software development.
      • Protect all components of the process and software from tampering and unauthorized access.
      • Produce well-secured software with minimal security vulnerabilities throughout.
      • Respond appropriately to vulnerabilities and prevent similar vulnerabilities from occurring in the future.
    • Achieve SLSA v1.0 Level 3 accreditation of Adoptium’s supply chain level for primary platform software artifacts.
  • Binary identical build verification with complete Software Bill of Materials
    • Maintain Temurin build process to facilitate external build verification and audit through byte-level reproducible build processes.
    • Publish a comprehensive SBOM describing the deliverables, and the build environment used to create them.
  • Enhancements to compliance testing
    • Explore options such as automation of the manual tasks and broader community engagement to reduce the time to complete compliance testing, improving our time to market, and reducing developer workload.

COPYRIGHT (C) 2022, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

37

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

38 of 47

Enable Additional Areas of Community Interest

As resources allow, we will also:

  • Additional platforms
    • Support development and delivery activities on secondary and “in-development” platforms, as defined by the Adoptium PMC.

  • Additional code streams
    • Support the build and test (but not JCK certify or release) other code streams beyond the core and secondary platforms.
      • Other code streams include, for example, Bisheng, Corretto, Dragonwell, OpenJ9, and SAPMachine plus early access code stream of OpenJDK projects.
    • Provide consumable build and test environments across a wide variety of platforms to support WG members’ developers in OpenJDK (Project Trestle).
      • Build around the AQAvit test suite, and support platforms not well served by existing OpenJDK automated testing.

COPYRIGHT (C) 2022, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

38

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

39 of 47

Strategic Marketing Activities and Events

  • Maintain a long-term marketing plan for Adoptium
    • Build upon Adoptium’s success and reputation in the industry to further embed the Adoptium brand using our principles and objectives.
    • Target enterprise organizations, architects, and technical execs with a value statement for a free, open, and durable Java solution. Aim to grow adoption and membership and participation in the working group.

  • Build relationships with leading projects dependent upon Java runtimes
    • Engage with influential brands and projects to provide fit for purpose runtime solutions, including package content, delivery formats, and channels.
  • Promote AQAvit
    • Celebrate the vendors providing AQAvit-verified runtimes in the marketplace and ensure the ecosystem understands the value of that verification achievement.
    • Build the reputation of AQAvit as an open, trusted quality test suite and framework that vendors should look to verify their runtimes, and that end users and businesses should demand when selecting their Java runtime.

COPYRIGHT (C) 2022, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

39

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

40 of 47

Strategic Marketing Activities and Events

  • Events
    • Drive awareness, promote adoption, and build community through sponsorship/participation at relevant conferences/events.

  • Convert product usage into support from enterprise users
    • Build a marketing story to convert Enterprise users into project supporters.
  • Adoptium Swag Store
    • Promote the brand and nurture community engagement by implementing and maintaining a SWAG store

COPYRIGHT (C) 2022, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

40

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

41 of 47

Accelerate Innovation

  • Raise awareness of Adoptium Incubator
    • Promote further participation in incubator projects to enable exploration and evaluation of new technical areas.

  • Participate in programs for educating and advancing our community
    • Continue to sponsor and mentor student programs for new participants, students, and researchers.
    • Promote project opportunities to solve interesting and challenging problems in the scope of the project, including test analysis, secure software development and distribution, enhanced performance and modern workload optimisation.

  • Focus on faster delivery
    • Innovate in infrastructure, processes, and techniques for faster delivery of Temurin runtimes.
    • Continue to monitor and record key points in all Adoptium processes to determine opportunities.

COPYRIGHT (C) 2022, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

41

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

42 of 47

Consider Stopping

  • Builds for platforms with minimal download count or customer interest
    • Adoptium builds 16+ platforms and collects direct download statistics for each. Platforms need to be individually evaluated for their effort-to-benefit ratio and considered for elimination.
    • The greatest cost to the project is the release work required. Releasing an individual platform across all four major Java versions represents about 4 days of engineering time every release. With 4-6 releases a year that is about 16-24 days that could be saved and used to implement fixes and enhancements that have long term benefit to the project.
    • AIX and zSeries were moved into non-primary platform status. These platforms have low download counts, and the technical projects struggle to resource them in machine and triage/release engineers.
    • Platforms that are not being actively maintained and kept up to date at OpenJDK will be removed from Temurin distribution.

COPYRIGHT (C) 2022, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

42

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

43 of 47

Eclipse Temurin LTS Platform Focus

2024

Platforms (CPU/OS family)

Temurin v8

Temurin v11

Temurin v17

Temurin v21

Notes

x64 Linux

x64 Windows

x64 macOS

x32 Windows

🔶

🔶

🔶

aarch64 macOS

v11 onwards only

ppc64le Linux

ppc64 AIX

🔶

aarch64 Linux

includes Apple silicon

aarch64 Windows

tbd

in development

aarch64 Alpine Linux (musl)

🔶

V21 onwards only

arm32 Linux

🔶

🔶

🔶

tbd

s390x Linux

🔶

v11 onwards only

RISC-V 64 Linux

tbd

in development

SPARCv9 Solaris

🔶

v8 only

x64 Solaris

🔶

v8 only

x64 Alpine Linux (musl)

v8 requires upstreaming

Details of specific supported processors and OS versions are published on the Temurin website.

Core platforms are constantly reviewed by the PMC.

Binaries will be released in prioritised phases as decided by the PMC.

Core platforms receive precedential funding from the project.

Key

Core Funding Focus

🔶

Additional Funding

Unavailable

tbd

To be determined

COPYRIGHT (C) 2022, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

43

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

44 of 47

Eclipse Temurin LTS Platform Focus

2025

Platforms (CPU/OS family)

Temurin v8

Temurin v11

Temurin v17

Temurin v21

Notes

x64 Linux

x64 Windows

x64 macOS

x32 Windows

🔶

🔶

🔶

aarch64 macOS

v11 onwards only

ppc64le Linux

ppc64 AIX

🔶

aarch64 Linux

includes Apple silicon

aarch64 Windows

tbd

in development

aarch64 Alpine Linux (musl)

🔶

V21 onwards only

arm32 Linux

🔶

🔶

🔶

tbd

s390x Linux

🔶

v11 onwards only

RISC-V 64 Linux

tbd

in development

SPARCv9 Solaris

🔶

v8 only

x64 Solaris

🔶

v8 only

x64 Alpine Linux (musl)

v8 requires upstreaming

Details of specific supported processors and OS versions are published on the Temurin website.

Core platforms are constantly reviewed by the PMC.

Binaries will be released in prioritised phases as decided by the PMC.

Core platforms receive precedential funding from the project.

Key

Core Funding Focus

🔶

Additional Funding

Unavailable

tbd

To be determined

COPYRIGHT (C) 2022, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

44

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

45 of 47

Key Metrics

Metric

October 2021

October 2022

October 2023

Target 2024

4.5M

339M

75.9M

412M

254M

777M

500M

1B

Committers across all Adoptium Projects

Weekly active Slack members (within last 30 days)

210

125

143

10

12

12

15

2 agreements�(GitHub unavailable)

3 agreements�6 GitHub

3 agreements

7 GitHub

25% growth

OpenSSF scorecard average for GitHub org

n/a

n/a

X

7

6

11

16

25

COPYRIGHT (C) 2022, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

45

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

46 of 47

Key Performance Goals

  • Release the primary platforms within 2 days.
    • Deliver high quality Java runtimes in “cloud-time”.
    • Gather and monitor release process statistics, and respond to lessons learned in retrospectives.
  • Release the secondary platforms within 7 days.

Metric

2022 CPU Updates

2023 CPU Updates

Percentage of Tarballs Released Within Target

34.94%

78.98%

Average Days for Primaries

7.36

2.15

Average Days for Secondaries

9.96

4.91

† Measured as elapsed time from the relevant OpenJDK source code being made publicly available

COPYRIGHT (C) 2022, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

46

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

47 of 47

COPYRIGHT (C) 2022, ECLIPSE FOUNDATION | MADE AVAILABLE UNDER THE ECLIPSE PUBLIC LICENSE 2.0 (EPL-2.0)

47

Thank you!

47

COPYRIGHT (C) 2023, ECLIPSE FOUNDATION, INC. | THIS WORK IS LICENSED UNDER A CREATIVE COMMONS ATTRIBUTION 4.0 INTERNATIONAL LICENSE (CC BY 4.0)

�1