Merge branch 'main' into feat/user-handling-pt3

# Conflicts:
#	CHANGELOG.md
#	hive/Dockerfile
#	kafka/Dockerfile
#	nifi/Dockerfile
#	omid/Dockerfile
#	opa/Dockerfile
#	spark-k8s/Dockerfile

Author: lfrancke

.gitattributes

@@ -0,0 +1 @@
+nix/** linguist-generated

.github/ISSUE_TEMPLATE/add-product.md

@@ -23,6 +23,7 @@ assignees: ''
 - [ ] Add a new `dev_<PRODUCT>.yml` GitHub Action workflow in the
       `.github/workflows` folder. Use existing local action whenever possible
       or consider creating a new one when there is no fitting action available.
+- [ ] Run `.scripts/update_readme_badges.sh` to generate the new status badge.
 ```
 
 _Please consider updating this template if these instructions are wrong, or

CHANGELOG.md

@@ -16,7 +16,7 @@ All notable changes to this project will be documented in this file.
 - trino: Add version `455` ([#822]).
 - trino-cli: Add version `455` ([#822]).
 - spark: Add version `3.5.2` ([#848]).
-- statsd-exporter: Bump version to 0.27.1 ([#866], [#879]).
+- statsd-exporter: Bump version to `0.27.1` ([#866], [#879]).
 - hadoop: Add patch "HADOOP-18516: Support Fixed SAS Token for ABFS Authentication" ([#852]).
 - hbase: Add hadoop-azure.jar to the lib directory to support the Azure Blob Filesystem and
   the Azure Data Lake Storage ([#853]).
@@ -27,9 +27,11 @@ All notable changes to this project will be documented in this file.
 
 - ci: Rename local actions, adjust action inputs and outputs, add definition
   README file ([#819]).
-- Update cargo-cyclonedx to 0.5.5 and build CycloneDX 1.5 files ([#783])
-- Enable [Docker build checks](https://docs.docker.com/build/checks/) ([#872])
-- Make username, user id, group id configurable, use numeric ids everywhere, change group of all files to 0 ([#849], [#890])
+- Update cargo-cyclonedx to 0.5.5 and build CycloneDX 1.5 files ([#783]).
+- Enable [Docker build checks](https://docs.docker.com/build/checks/) ([#872]).
+- java: migrate to temurin jdk/jre ([#894]).
+- tools: bump kubectl to `1.31.1` and jq to `1.7.1` ([#896]).
+- Make username, user id, group id configurable, use numeric ids everywhere, change group of all files to 0 ([#849], [#890]).
 
 ### Removed
 
@@ -39,13 +41,14 @@ All notable changes to this project will be documented in this file.
 - kafka: Remove versions `3.4.1`, `3.6.1`, `3.6.2` ([#813]).
 - trino: Remove versions `414`, `442` ([#822]).
 - trino-cli: Remove version `451` ([#822]).
-- hbase: Remove 2.4.17 ([#846]).
-- omid: Remove 1.1.0 and 1.1.1 ([#846]).
-- spark: Remove 3.4.2 and 3.4.3 ([#848]).
-- statsd-exporter: Remove 0.26.1 ([#866]).
-- superset: Remove 2.1.3, 3.1.0 and 3.1.3 ([#866]).
-- zookeeper: Remove 3.8.4 ([#851]).
-- nifi: Remove 1.21.0 and 1.25.0 ([#868]).
+- hbase: Remove `2.4.17` ([#846]).
+- omid: Remove `1.1.0` and `1.1.1` ([#846]).
+- spark: Remove `3.4.2` and `3.4.3` ([#848]).
+- statsd-exporter: Remove `0.26.1` ([#866]).
+- superset: Remove `2.1.3`, `3.1.0` and `3.1.3` ([#866]).
+- zookeeper: Remove `3.8.4` ([#851]).
+- nifi: Remove `1.21.0` and `1.25.0` ([#868]).
+- druid: Remove `28.0.1` ([#880]).
 
 ### Fixed
 
@@ -76,9 +79,12 @@ All notable changes to this project will be documented in this file.
 [#877]: https://github.com/stackabletech/docker-images/pull/877
 [#878]: https://github.com/stackabletech/docker-images/pull/878
 [#879]: https://github.com/stackabletech/docker-images/pull/879
+[#880]: https://github.com/stackabletech/docker-images/pull/880
 [#881]: https://github.com/stackabletech/docker-images/pull/881
 [#882]: https://github.com/stackabletech/docker-images/pull/882
 [#890]: https://github.com/stackabletech/docker-images/pull/890
+[#894]: https://github.com/stackabletech/docker-images/pull/894
+[#896]: https://github.com/stackabletech/docker-images/pull/896
 
 ## [24.7.0] - 2024-07-24
 

druid/Dockerfile

@@ -120,8 +120,8 @@ ln -s /stackable/apache-druid-${PRODUCT} /stackable/druid
 # Force to overwrite the existing 'run-druid'
 ln -sf /stackable/bin/run-druid /stackable/druid/bin/run-druid
 
-# All files and folders owned by root to support running as arbitrary users
-# This is best practice as all container users will belong to the root group (0)
+# All files and folders owned by root group to support running as arbitrary users.
+# This is best practice as all container users will belong to the root group (0).
 chown -R ${STACKABLE_USER_UID}:0 /stackable
 chmod -R g=u /stackable
 EOF

druid/versions.py

@@ -5,16 +5,6 @@
         "java-devel": "11",
         "authorizer": "0.5.0",
     },
-    {
-        "product": "28.0.1",
-        # Java 17 should be fully supported as of 27.0.0 https://github.com/apache/druid/releases#27.0.0-highlights-java-17-support
-        # Did not work in a quick test due to reflection error:
-        # Caused by: java.lang.reflect.InaccessibleObjectException: Unable to make protected final java.lang.Class
-        # java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int,java.security.ProtectionDomain) throws java.lang.ClassFormatError
-        "java-base": "11",
-        "java-devel": "11",
-        "authorizer": "0.5.0",
-    },
     {
         "product": "30.0.0",
         # https://druid.apache.org/docs/30.0.0/operations/java/

hadoop/Dockerfile

@@ -169,8 +169,8 @@ find . -name 'hadoop-*tests.jar' -type f -delete
 # It is so non-root users (as we are) can mount a FUSE device and let other users access it
 echo "user_allow_other" > /etc/fuse.conf
 
-# All files and folders owned by root to support running as arbitrary users
-# This is best practice as all container users will belong to the root group (0)
+# All files and folders owned by root group to support running as arbitrary users.
+# This is best practice as all container users will belong to the root group (0).
 chown -R ${STACKABLE_USER_UID}:0 /stackable
 chmod -R g=u /stackable
 EOF

hbase/Dockerfile

@@ -354,8 +354,8 @@ ln --symbolic --logical --verbose "/stackable/hbase-${PRODUCT}" /stackable/hbase
 ln --symbolic --logical --verbose "/stackable/hbase-operator-tools-${HBASE_OPERATOR_TOOLS}" /stackable/hbase-operator-tools
 ln --symbolic --logical --verbose "/stackable/phoenix/phoenix-server-hbase-${HBASE_PROFILE}.jar" "/stackable/hbase/lib/phoenix-server-hbase-${HBASE_PROFILE}.jar"
 
-# All files and folders owned by root to support running as arbitrary users
-# This is best practice as all container users will belong to the root group (0)
+# All files and folders owned by root group to support running as arbitrary users.
+# This is best practice as all container users will belong to the root group (0).
 chown -R ${STACKABLE_USER_UID}:0 /stackable
 chmod -R g=u /stackable
 EOF

hello-world/Dockerfile

@@ -22,8 +22,8 @@ rm -rf /var/cache/yum
 
 curl "https://repo.stackable.tech/repository/packages/hello-world/hello-world-${PRODUCT}.jar" -o /stackable/hello-world.jar
 
-# All files and folders owned by root to support running as arbitrary users
-# This is best practice as all container users will belong to the root group (0)
+# All files and folders owned by root group to support running as arbitrary users.
+# This is best practice as all container users will belong to the root group (0).
 chown -R ${STACKABLE_USER_UID}:0 /stackable
 chmod -R g=u /stackable
 EOF

hive/Dockerfile

@@ -133,8 +133,8 @@ cp /stackable/hadoop/share/hadoop/tools/lib/hadoop-azure-${HADOOP}.jar /stackabl
 cp /stackable/hadoop/share/hadoop/tools/lib/azure-storage-${AZURE_STORAGE}.jar /stackable/hive-metastore/lib/
 cp /stackable/hadoop/share/hadoop/tools/lib/azure-keyvault-core-${AZURE_KEYVAULT_CORE}.jar /stackable/hive-metastore/lib/
 
-# All files and folders owned by root to support running as arbitrary users
-# This is best practice as all container users will belong to the root group (0)
+# All files and folders owned by root group to support running as arbitrary users.
+# This is best practice as all container users will belong to the root group (0).
 chown -R ${STACKABLE_USER_UID}:0 /stackable
 chmod -R g=u /stackable
 EOF

hive/versions.py

@@ -4,7 +4,7 @@
         "jmx_exporter": "1.0.1",
         # Hive 4 must be built with Java 8 (according to GitHub README) but seems to run on Java 11
         "java-base": "11",
-        "java-devel": "1.8.0",
+        "java-devel": "8",
         "hadoop": "3.3.6",
         # Keep consistent with the dependency from Hadoop: https://mvnrepository.com/artifact/org.apache.hadoop/hadoop-aws/3.3.6
         "aws_java_sdk_bundle": "1.12.367",
@@ -16,7 +16,7 @@
         "jmx_exporter": "1.0.1",
         # Hive 3 must be built with Java 8 but will run on Java 11
         "java-base": "11",
-        "java-devel": "1.8.0",
+        "java-devel": "8",
         "hadoop": "3.3.6",
         # Keep consistent with the dependency from Hadoop: https://mvnrepository.com/artifact/org.apache.hadoop/hadoop-aws/3.3.6
         "aws_java_sdk_bundle": "1.12.367",