feat(java-base): Add jvmkill

Author: sbernauer

CHANGELOG.md

@@ -27,6 +27,7 @@ All notable changes to this project will be documented in this file.
 - opensearch: Add `3.6.0` ([#1549]).
 - opensearch-dashboards: Add `3.6.0` ([#1551]).
 - spark: Add hbase-connector protobuf classes ([#1573]).
+- java-base: Add `jvmkill` ([#XXXX]).
 
 ### Changed
 
@@ -101,6 +102,7 @@ All notable changes to this project will be documented in this file.
 [#1559]: https://github.com/stackabletech/docker-images/pull/1559
 [#1561]: https://github.com/stackabletech/docker-images/pull/1561
 [#1564]: https://github.com/stackabletech/docker-images/pull/1564
+[#XXXX]: https://github.com/stackabletech/docker-images/pull/XXXX
 
 ## [26.3.0] - 2026-03-16
 

java-base/Dockerfile

@@ -4,9 +4,11 @@
 #
 # Provides the common Java Runtime for SDP products
 #
+FROM local-image/java-base/jvmkill AS jvmkill-builder
 FROM local-image/vector
 
 ARG PRODUCT_VERSION
+ARG STACKABLE_USER_UID
 ARG RELEASE_VERSION="1"
 
 LABEL name="Stackable image for OpenJDK" \
@@ -57,3 +59,7 @@ ENV JAVA_VERSION=$PRODUCT_VERSION
 # This variable is supported as of Log4j version 2.10 and
 # disables the vulnerable feature
 ENV LOG4J_FORMAT_MSG_NO_LOOKUPS=true
+
+# We are adding jvmkill, as it improves shutdown of the JVM in case it runs out of native threads.
+# See https://github.com/stackabletech/docker-images/issues/1578 for motivation/details.
+COPY --chown=${STACKABLE_USER_UID}:0 --from=jvmkill-builder /stackable/libjvmkill.so /stackable/libjvmkill.so

java-base/boil-config.toml

@@ -1,14 +1,19 @@
 [versions."11".local-images]
 vector = "0.55.0"
+"java-base/jvmkill" = "0e410d8-java-11"
 
 [versions."17".local-images]
 vector = "0.55.0"
+"java-base/jvmkill" = "0e410d8-java-17"
 
 [versions."21".local-images]
 vector = "0.55.0"
+"java-base/jvmkill" = "0e410d8-java-21"
 
 [versions."24".local-images]
 vector = "0.55.0"
+"java-base/jvmkill" = "0e410d8-java-24"
 
 [versions."25".local-images]
 vector = "0.55.0"
+"java-base/jvmkill" = "0e410d8-java-25"

java-base/jvmkill/Dockerfile

@@ -0,0 +1,20 @@
+FROM local-image/java-devel
+
+ARG JVMKILL_VERSION
+
+WORKDIR /stackable
+
+COPY --chown=0:0 java-base/jvmkill/stackable/patches/patchable.toml /stackable/src/java-base/jvmkill/stackable/patches/patchable.toml
+COPY --chown=0:0 java-base/jvmkill/stackable/patches/${JVMKILL_VERSION} /stackable/src/java-base/jvmkill/stackable/patches/${JVMKILL_VERSION}
+
+RUN <<EOF
+cd "$(/stackable/patchable --images-repo-root=src checkout java-base/jvmkill ${JVMKILL_VERSION})"
+
+make
+
+cp libjvmkill.so /stackable/libjvmkill.so
+
+# Clean up build artifacts and temporary files to reduce image size
+cd /stackable
+rm -rf ./src
+EOF

java-base/jvmkill/README.md

@@ -0,0 +1,8 @@
+# jvmkill
+
+Note: There are no upstream tags or releases, so we use the commit hash as release.
+
+We are using https://github.com/airlift/jvmkill over https://github.com/cloudfoundry/jvmkill.
+
+`cloudfoundry/jvmkill` is re-written in Rust, but hasn't seen a commit since 4 years.
+Also, the official Trino docker image uses `airlift/jvmkill` as well.

java-base/jvmkill/boil-config.toml

@@ -0,0 +1,24 @@
+[versions."0e410d8-java-11".local-images]
+java-devel = "11"
+[versions."0e410d8-java-11".build-arguments]
+jvmkill-version = "0e410d8"
+
+[versions."0e410d8-java-17".local-images]
+java-devel = "17"
+[versions."0e410d8-java-17".build-arguments]
+jvmkill-version = "0e410d8"
+
+[versions."0e410d8-java-21".local-images]
+java-devel = "21"
+[versions."0e410d8-java-21".build-arguments]
+jvmkill-version = "0e410d8"
+
+[versions."0e410d8-java-24".local-images]
+java-devel = "24"
+[versions."0e410d8-java-24".build-arguments]
+jvmkill-version = "0e410d8"
+
+[versions."0e410d8-java-25".local-images]
+java-devel = "25"
+[versions."0e410d8-java-25".build-arguments]
+jvmkill-version = "0e410d8"

java-base/jvmkill/stackable/patches/0e410d8/patchable.toml

@@ -0,0 +1,2 @@
+mirror = "https://github.com/stackabletech/jvmkill.git"
+base = "0e410d875e2f4b5d5dfc74d3c145f771bfd69cc2"

java-base/jvmkill/stackable/patches/patchable.toml

@@ -0,0 +1,2 @@
+upstream = "https://github.com/airlift/jvmkill.git"
+default-mirror = "https://github.com/stackabletech/jvmkill.git"