Installing Azul Zulu SA DEB-Packages on Linux
Subscriber Availability (SA) builds are tested, certified, and commercially supported Azul Zulu Builds of OpenJDK. These builds are exclusively available for Azul customers and provide additional benefits like security updates beyond community releases, extended platform and configuration support, priority access to critical patches, etc.
SA builds are available in two update types:
-
CPU (Critical Patch Updates): Contain fixes to security vulnerabilities and critical bug fixes only. CPU releases are based on prior-cycle PSU releases with security fixes applied, providing a low-risk deployment option for urgent security updates.
-
PSU (Patch Set Updates): Include all CPU fixes plus additional non-security bug fixes. PSU releases align with OpenJDK quarterly releases, incorporating both security fixes and general improvements.
Check the Release Notes for the latest version numbers of each type.
Use the following instructions to install Azul Zulu SA on a DEB-based system (Debian, Ubuntu,…) with apt.
Zulu Restricted Repos
Because SA distributions are only available to customers, they can only be accessed with authentication.
Manage Access Tokens
Customers can manage their user token using the Azul token management app on access.azul.com. You need to login with the same credentials used for ftp.azul.com. These tokens can be used in combination with the ftp username to create the basic authentication header required to download from the restricted repositories.
|
Note
|
Tokens are not stored and will only be visible when created. Please save them immediately in a safe location. You can revoke a token if it gets compromised or lost. |
In the examples below, the following references are used:
-
<username>: Your FTP username. -
<token>: Access token you created generated in the Azul token management app.
Please contact the Azul Support team ([email protected]) if you need assistance with your tokens.
|
Note
|
You can create a maximum of 10 restricted repository access tokens, which expire after one year or earlier as selected when you create the token. |
Configure the Repositories
Use the following instructions to add the repositories to your Linux system or container.
apt update
apt install -y gnupg ca-certificates curl
curl -s https://repos.azul.com/azul-repo.key | gpg --dearmor -o /usr/share/keyrings/azul.gpg
# Add the SA repo and authentication configuration
echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/azul.gpg] https://sa.repos.azul.com/zulu/deb stable main" | tee /etc/apt/sources.list.d/zulu-openjdk.list
echo 'machine sa.repos.azul.com login <username> password <token>' > /etc/apt/auth.conf.d/zulu-openjdk.conf