Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Install Java. We recommend the OpenJDK Adoptium Temurin 8 or 11. This is the build of Open JDK that we test with across linux and windows.

...

Download and install Java

...

  • Go to the releases page on the Adoptium

...

...

  • /temurin/releases
  • Select the package you need, this is mostly like to be:
    • Operating System: Windows
    • Architecture: x64
    • Package Type: JDK
    • Version: 11

Image Added

  • Download the msi package
  • Complete the installation process as directed by the package, accepting all defaults.

Optionally Set the Environment Variable

You can set a system envrionment variable JAVA_HOME if you wish. This can be useful if you have other applications that use Java. However, for the operation of PhixFlow itself, this is not needed, and most operators choose not to add this. Even if you do not set JAVA_HOME, Java programs that need to operate PhixFlow will be added to your path. I.e. you can call them from the command line by using the program name alone.

If you decide to set JAVA_HOME as a system envrionment variable, specify the base installation directory of Java, for example:

  • C:\Program Files\Eclipse Adoptium\jdk-8.0.312.7-hotspot

Configure Security

Update the security settings to allow strong encryption and decryption of files.1.

Open the java.security file.

...

Find the installation directory for Java. Typically this will be something like C:\Program Files\Eclipse Adoptium\jdk-11.0.14.101-hotspot

The java.security file will be at:.

  • For Java 8, JAVA_INSTALLATION\jre\lib\security\java.security
  • For Java 11,

...

  • JAVA_

...

  • INSTALLATION\conf\security\java.security

...

Set the crypto.policy

Set the crypto.policy to unlimited for the JRE used by PhixFlowpolicy to unlimited, by deleting the # to uncomment the line:
    - from: #crypto #crypto.policy=unlimited
    - to:   crypto.policy=unlimited

...

Download and install Java

...

Note

Setting JAVA_HOME

These instructions assume you do not have a version of Java already installed on your server. The steps below will set JAVA_HOME as an environment variable for each user on the server.

If you have other programs running on your server, and you need to have two different versions of Java installed, you can take a different approach to setting JAVA_HOME for each user. Strictly, PhixFlow does not need JAVA_HOME to be set up as an environment variable to operate. The only places where PhixFlow needs to reference JAVA_HOME are:

  • In the invocation process for Tomcat (in the recommended installation below, this is in a SystemD service script).
  • Where Java programs are used in administrative steps for installing or upgrading PhixFlow. In PhixFlow's documentation, where we refer to JAVA_HOME, simply supply the home path of the installed Java that PhixFlow is using, whether through an environment variable, or by putting it in full on the command line.

...

Instructions for installing on linux are here: https://adoptium.net/installation/linux/

In particular, for installing on Debian based linux distributions, carry out the following steps:

  • Install pre-requisite packages:
Code Block
sudo mkdir /opt/jdk
sudo chmod 755 /opt/jdk

...

apt-get install -y wget apt-transport-https
  • Install the Eclipse Adoptium GPG key:
Code Block
wget -O - https://packages.adoptium.net/

...

The download link is included in the text of the installation steps:

Image Removed

You can either:

  • Download the installation package by clicking on the download link in a web browser, and transfer the downloaded installation package to the directory /tmp on the server
  • Download the installation package directly to the server. To do this, copy the address of the download link (e.g. using Right-clickCopy Link in a browser), and use this in a wget command as below:
Code Block
cd /tmp
wget https://github.com/adoptium/temurin8-binaries/releases/download/jdk8u312-b07/OpenJDK8U-jdk_x64_linux_hotspot_8u312b07.tar.gz
  • Validate the package download. The commands below are towards the bottom of the installation page.

If you have access to the web from your server, copy the command similar to the below from the installation page and run it on your server:

Image Removed

If you do not have web access from your server, copy the command similar to the below from the installation page and run it on your server.

Image Removed

Then compare the results against the value provided at the checksum link on the installation page.

  • Extract the installation package
Code Block
sudo tar xfvz /tmp/[DOWNLOADED PACKAGE] --directory /opt/jdk
rm /tmp/[DOWNLOADED PACKAGE]

For example:

Code Block
sudo tar xfvz /tmp/OpenJDK8U-jdk_x64_linux_hotspot_8u312b07.tar.gz --directory /opt/jdk
rm /tmp/OpenJDK8U-jdk_x64_linux_hotspot_8u312b07.tar.gz

Set JAVA_HOME

  • Set JAVA_HOME for all users
Code Block
echo "export JAVA_HOME=[Java home installation directory]" artifactory/api/gpg/key/public | sudo tee /usr/share/keyrings/adoptium.asc
  • Add the Eclipse Adoptium repository:
Code Block
echo "deb [signed-by=/usr/share/keyrings/adoptium.asc] https://packages.adoptium.net/artifactory/deb $(awk -F= '/^VERSION_CODENAME/{print$2}' /etc/os-release) main" | sudo tee /etc/profileapt/sources.list.d/jdkadoptium.sh

...

list
  • Install Java:
Code Block
echo "export JAVA_HOME=/opt/jdk/jdk-11.0.13+8" | sudo tee /etc/profile.d/jdk.sh
  • To test that you have correctly set the value, start a new session and run, as any user
Code Block
echo $JAVA_HOME
sudo apt-get update
sudo apt-get install temurin-11-jdk


Configure Security

Update the security settings to allow strong encryption and decryption of files.1.

Open the java.security file

...

...

Find the installation directory for Java with the command:

Code Block
update-alternatives --list java

This will give you the full path of the java program, for example: /usr/lib/jvm/temurin-11-jdk-amd64/bin/java. The installation directory in this case is /usr/lib/jvm/temurin-11-jdk-amd64.

The java.security file will be at:.

  • For Java 8, JAVA_INSTALLATION/jre/lib/security/java.security
  • For Java 11,

...

  • JAVA_

...

  • INSTALLATION/conf/security/java.security

...

Set the crypto.policy

In the java.security file, set the crypto.policy to unlimited for the JRE used by PhixFlow, by deleting the #" to uncomment the line:    -

from: #crypto #crypto.policy=unlimited
    - to:   crypto.policy=unlimited

...