Spring Native Reference
Spring Native Reference
Version 0.9.0 - Andy Clement, Sébastien Deleuze, Filip Hanik, Dave Syer, Esteban
Ginez, Jay Bryant, Brian Clozel, Stéphane Nicoll
Table of Contents
1. Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
1.1. Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
2. Getting Started . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Maven Repository . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Maven Repository . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
3. Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
3.1. GraalVM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
3.6. Others . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
3.7. Limitations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
4. Spring AOT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
4.1. Maven . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
4.2. Gradle . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
5. Native hints . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
6. Samples. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
8. Tracing agent. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
9. Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
10.5.1. run-dev-container.sh . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
10.6. Scripts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Compared to the Java Virtual Machine, native images can enable cheaper and more sustainable
hosting for many types of workload. These include microservices, function workloads, well suited
to containers, and Kubernetes
Using native image have key advantages, such as instant startup, instant peak performance, and
reduced memory consumption.
There are also some drawbacks and trade-offs that the GraalVM native project expect to improve on
over time. Building a native image is a heavy process that is slower than a regular application. A
native image has fewer runtime optimizations after warmup. Finally, it is less mature than the JVM
with some different behaviors.
The key differences between a regular JVM and this native image platform are:
• A static analysis of your application from the main entry point is performed at build time.
• No class lazy loading: everything shipped in the executables will be loaded in memory on
startup.
• There are some limitations around some aspects of Java applications that are not fully
supported.
The goal of this project is to incubate the support for Spring Native, an alternative to Spring JVM,
and provide a native deployment option designed to be packaged in lightweight containers. In
practice, the target is to support your Spring applications, almost unmodified, on this new platform.
This is work in progress, see the list of supported features for more details.
1.1. Modules
Spring Native is composed of the following modules:
• spring-native-tools: tools used for reviewing image building configuration and output.
1
• spring-aot: AOT transformation infrastructure common to Maven and Gradle plugins.
• samples: contains various samples that demonstrate features usage and are used as integration
tests.
2
Chapter 2. Getting Started
There are two main ways to build a Spring Boot native application:
• Using Spring Boot Buildpacks support to generate a lightweight container containing a native
executable.
• Using the GraalVM native image Maven plugin support to generate a native executable.
To use Spring Native from your IDE, additional steps are required. Check the
dedicated section for more details.
Docker should be installed, see Get Docker for more details. Before proceeding further, make sure
you can use docker from the shell.
The completed "RESTful Web Service" guide can be retrieved using the following commands:
Maven
<parent>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-parent</artifactId>
<version>2.4.3</version>
<relativePath/>
</parent>
3
Gradle Groovy
plugins {
// ...
id 'org.springframework.boot' version '2.4.3'
}
Gradle Kotlin
plugins {
// ...
id("org.springframework.boot") version "2.4.3"
}
Maven
<dependencies>
<!-- ... -->
<dependency>
<groupId>org.springframework.experimental</groupId>
<artifactId>spring-native</artifactId>
<version>0.9.0</version>
</dependency>
</dependencies>
Gradle Groovy
dependencies {
// ...
implementation 'org.springframework.experimental:spring-native:0.9.0'
}
Gradle Kotlin
dependencies {
// ...
implementation("org.springframework.experimental:spring-native:0.9.0")
}
The Spring AOT plugin performs ahead-of-time transformations required to improve native image
4
compatibility and footprint.
The transformations also apply to the JVM so this can be applied regardless.
Maven
<build>
<plugins>
<!-- ... -->
<plugin>
<groupId>org.springframework.experimental</groupId>
<artifactId>spring-aot-maven-plugin</artifactId>
<version>0.9.0</version>
<executions>
<execution>
<id>test-generate</id>
<goals>
<goal>test-generate</goal>
</goals>
</execution>
<execution>
<id>generate</id>
<goals>
<goal>generate</goal>
</goals>
</execution>
</executions>
</plugin>
</plugins>
</build>
Gradle Groovy
plugins {
// ...
id 'org.springframework.experimental.aot' version '0.9.0'
}
Gradle Kotlin
plugins {
// ...
id("org.springframework.experimental.aot") version "0.9.0"
}
The plugin provides a number of options to customize the transformations, see Configuring Spring
AOT for more details.
5
Enable native image support
Spring Boot’s Cloud Native Buildpacks support lets you build a container for your Spring Boot
application. The native image buildpack can be enabled using the BP_NATIVE_IMAGE environment
variable as follows:
Maven
<plugin>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-maven-plugin</artifactId>
<configuration>
<image>
<builder>paketobuildpacks/builder:tiny</builder>
<env>
<BP_NATIVE_IMAGE>true</BP_NATIVE_IMAGE>
</env>
</image>
</configuration>
</plugin>
Gradle Groovy
bootBuildImage {
builder = "paketobuildpacks/builder:tiny"
environment = [
"BP_NATIVE_IMAGE" : "true"
]
}
Gradle Kotlin
tasks.getByName<BootBuildImage>("bootBuildImage") {
builder = "paketobuildpacks/builder:tiny"
environment = mapOf(
"BP_NATIVE_IMAGE" to "true"
)
}
Maven Repository
Configure your build to include the required repository for the spring-native dependency, as
6
follows:
Maven
<repositories>
<!-- ... -->
<repository>
<id>spring-release</id>
<name>Spring release</name>
<url>https://repo.spring.io/release</url>
</repository>
</repositories>
Gradle Groovy
repositories {
// ...
maven { url 'https://repo.spring.io/release' }
}
Gradle Kotlin
repositories {
// ...
maven { url = uri("https://repo.spring.io/release") }
}
The Spring AOT plugin also requires a dedicated plugin repository in the pom.xml file for Maven and
in the in the settings.gradle(.kts) for Gradle.
Maven
<pluginRepositories>
<!-- ... -->
<pluginRepository>
<id>spring-release</id>
<name>Spring release</name>
<url>https://repo.spring.io/release</url>
</pluginRepository>
</pluginRepositories>
7
Gradle Groovy
pluginManagement {
repositories {
// ...
maven { url 'https://repo.spring.io/release' }
}
}
Gradle Kotlin
pluginManagement {
repositories {
// ...
maven { url = uri("https://repo.spring.io/release") }
}
}
Maven
$ mvn spring-boot:build-image
Gradle Groovy
$ gradle bootBuildImage
Gradle Kotlin
$ gradle bootBuildImage
This creates a Linux container to build the native application using the GraalVM native image
compiler. By default, the container image is installed locally.
To run the application, you can use docker the usual way as shown in the following example:
If you prefer docker-compose, you can write a docker-compose.yml at the root of the project with the
following content:
8
version: '3.1'
services:
rest-service:
image: rest-service:0.0.1-SNAPSHOT
ports:
- "8080:8080"
$ docker-compose up
The startup time should be less than 100ms, compared to the roughly 1500ms when starting the
application on the JVM.
Now that the service is up, visit localhost:8080/greeting, where you should see:
{"id":1,"content":"Hello, World!"}
A number of prerequisites are required before installing the GraalVM native-image compiler. You
then need a local installation of the native image compiler.
To install the native image compiler on MacOS or Linux, we recommend using SDKMAN:
• Install SDKMAN.
• Install GraalVM with sdk install java 21.0.0.r8-grl for Java 8 or sdk install java 21.0.0.r11-
grl for Java 11.
• Make sure to use the newly installed JDK with sdk use java 21.0.0.r8-grl or sdk use java
21.0.0.r11-grl.
Alternatively or if you are on Microsoft Windows, you can manually install GraalVM builds as
follows:
9
2.2.2. Sample Project Setup
The completed "RESTful Web Service" guide can be retrieved using the following commands:
<parent>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-parent</artifactId>
<version>2.4.3</version>
<relativePath/>
</parent>
<dependencies>
<!-- ... -->
<dependency>
<groupId>org.springframework.experimental</groupId>
<artifactId>spring-native</artifactId>
<version>0.9.0</version>
</dependency>
</dependencies>
The Spring AOT plugin performs ahead-of-time transformations required to improve native image
compatibility and footprint.
The transformations also apply to the JVM so this can be applied regardless.
10
<build>
<plugins>
<!-- ... -->
<plugin>
<groupId>org.springframework.experimental</groupId>
<artifactId>spring-aot-maven-plugin</artifactId>
<version>0.9.0</version>
<executions>
<execution>
<id>test-generate</id>
<goals>
<goal>test-generate</goal>
</goals>
</execution>
<execution>
<id>generate</id>
<goals>
<goal>generate</goal>
</goals>
</execution>
</executions>
</plugin>
</plugins>
</build>
The plugin provides a number of options to customize the transformations, see Configuring Spring
AOT for more details.
GraalVM provides a Maven Plugin to invoke the native image compiler from your Maven build. The
following example adds a native-image profile that triggers the plugin during the package phase:
11
<profiles>
<profile>
<id>native-image</id>
<build>
<plugins>
<plugin>
<groupId>org.graalvm.nativeimage</groupId>
<artifactId>native-image-maven-plugin</artifactId>
<version>21.0.0</version>
<configuration>
<!-- The native image build needs to know the entry point to your
application -->
<mainClass>com.example.restservice.RestServiceApplication</mainClass>
</configuration>
<executions>
<execution>
<goals>
<goal>native-image</goal>
</goals>
<phase>package</phase>
</execution>
</executions>
</plugin>
</plugins>
</build>
</profile>
</profiles>
In a default Spring Boot setup, the spring-boot-maven-plugin also runs during the package phase and
replaces the regular jar by the repackaged, executable jar. To avoid a clash between the two
plugins, make sure to specify a classifier like exec below for the executable jar, as shown in the
following example:
<plugins>
<!-- ... -->
<plugin>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-maven-plugin</artifactId>
<configuration>
<classifier>exec</classifier>
</configuration>
</plugin>
</plugins>
Maven Repository
Configure your build to include the required repository for the spring-native dependency, as
follows:
12
<repositories>
<!-- ... -->
<repository>
<id>spring-release</id>
<name>Spring release</name>
<url>https://repo.spring.io/release</url>
</repository>
</repositories>
<pluginRepositories>
<!-- ... -->
<pluginRepository>
<id>spring-release</id>
<name>Spring release</name>
<url>https://repo.spring.io/release</url>
</pluginRepository>
</pluginRepositories>
This command creates a native executable containing your Spring Boot application in the
`target`directory.
$ target/com.example.restservice.restserviceapplication
The startup time should be less than 100ms, compared to the roughly 1500ms when starting the
application on the JVM.
Now that the service is up, visit localhost:8080/greeting, where you should see:
{"id":1,"content":"Hello, World!"}
13
Chapter 3. Support
This section defines the GraalVM version, languages and dependencies that have been validated
against Spring Native 0.9.0, which provides beta support on the scope defined in this section. You
can try it on your projects if they are using those supported dependencies, and raise bugs or
contribute pull requests if something goes wrong.
Beta support also means that breaking changes will happen, but a migration path will be provided
and documented.
3.1. GraalVM
GraalVM version 21.0.0 is supported, see the related release notes. GraalVM issues impacting the
Spring ecosystem are identified on their issue tracker using the spring label.
3.2. Language
Java 8, Java 11, and Kotlin 1.3+ are supported.
Java 11 native images are currently impacted by a transient footprint issue that
may lead (or not) to bigger images due to oracle/graal#3163.
Kotlin Coroutines are supported but require additional reflection entries due to how Coroutines
generates bytecode with an Object return type, see this related issue for a potential future fix.
The following starters are supported, the group ID is org.springframework.boot unless specified
otherwise.
• spring-boot-starter-data-elasticsearch
• spring-boot-starter-data-jdbc
14
• spring-boot-starter-data-jpa
◦ You need to configure Hibernate build-time bytecode enhancement
• spring-boot-starter-data-mongodb
• spring-boot-starter-data-neo4j
• spring-boot-starter-data-r2dbc
• spring-boot-starter-data-redis
• spring-boot-starter-jdbc
• spring-boot-starter-logging
• spring-boot-starter-mail
• spring-boot-starter-thymeleaf
• spring-boot-starter-rsocket
• spring-boot-starter-validation
• spring-boot-starter-security: WebMvc and WebFlux form login, HTTP basic authentication and
OAuth 2.0 are supported. RSocket security is also supported.
• spring-boot-starter-web:
• spring-boot-starter-websocket
• com.wavefront:wavefront-spring-boot-starter
Devtools is not supported yet, you can follow spring-native#532 to be aware when
it will.
Group ID is org.springframework.cloud.
• spring-cloud-starter-bootstrap
15
• spring-cloud-starter-config
• spring-cloud-config-client
• spring-cloud-config-server
• spring-cloud-starter-netflix-eureka-client (Java 11 only)
• spring-cloud-function-web
◦ --enable-https flag is required for HTTPS support.
• spring-cloud-function-adapter-aws
• spring-cloud-starter-function-webflux
◦ --enable-https flag is required for HTTPS support.
3.6. Others
• Spring Kafka
• GRPC
• H2 database
3.7. Limitations
CGLIB proxies are not supported, only JDK dynamic proxies on interfaces are supported for now. As
a consequence spring.aop.proxy-target-class is set to false when using Spring Native.
16
Chapter 4. Spring AOT
Spring AOT build plugins are designed to generate and compile sources by taking advantage of the
context of your application (classpath, configuration) in order to improve native image
compatibility and footprint. It is invoked before running your application and tests, and may
potentially require additional IDE configuration.
4.1. Maven
The plugin should be declared as following:
Maven
<build>
<plugins>
<!-- ... -->
<plugin>
<groupId>org.springframework.experimental</groupId>
<artifactId>spring-aot-maven-plugin</artifactId>
<version>0.9.0</version>
<executions>
<execution>
<id>test-generate</id>
<goals>
<goal>test-generate</goal>
</goals>
</execution>
<execution>
<id>generate</id>
<goals>
<goal>generate</goal>
</goals>
</execution>
</executions>
</plugin>
</plugins>
</build>
Configuration can be performed if needed within the <configuration> element, for example to
remove SpEL support at build-time if your application does not use it in order to optimize the
footprint:
17
<configuration>
<removeSpelSupport>true</removeSpelSupport>
</configuration>
See Configuring Spring AOT for a list of the configuration options available.
If build/run actions are not delegated to Maven (default), you may want to configure triggers for
Maven goals as following.
• Add the JUnit configuration (or just try to run a firs time your tests) and then right click on
spring-aot:test-generate then click on "Execute Run/Debug …" then select your JUnit test
configurations.
Eclipse with m2e (Maven) or Buildship (Gradle) should configure out of the box the main generated
sources, so the application should run out of the box with the sources generated by the Spring AOT
plugin.
But Eclipse does not support having the same classes in main and test generated sources, so test
sources generation is disabled by default and tests should run without the sources generated by the
Spring AOT plugin in the IDE.
VSCode uses the same build tooling as Eclipse, so it should work the same.
4.2. Gradle
You can configure the Gradle Spring AOT plugin by declaring first the plugin repositories in your
settings.gradle(.kts) file:
Gradle Groovy
pluginManagement {
repositories {
// ...
maven { url 'https://repo.spring.io/release' }
}
}
18
Gradle Kotlin
pluginManagement {
repositories {
// ...
maven { url = uri("https://repo.spring.io/release") }
}
}
Gradle Groovy
plugins {
// ...
id 'org.springframework.experimental.aot' version '0.9.0'
}
Gradle Kotlin
plugins {
// ...
id("org.springframework.experimental.aot") version "0.9.0"
}
The plugin creates two SourceSets for testing and running the application: "aot" and "aotTest". The
resulting classes and resources are automatically added to the runtime classpath of the application
when running the test, bootRun and bootJar tasks.
Configuration can be performed if needed using the springAot DSL extension, for example to
remove SpEL support at build-time if your application does not use it in order to optimize the
footprint:
Gradle Groovy
springAot {
removeSpelSupport = true
}
Gradle Kotlin
springAot {
removeSpelSupport.set(true)
}
Here is a complete code sample showing all the default values and how to set them:
19
Gradle Groovy
import org.springframework.aot.gradle.dsl.AotMode
// ...
springAot {
mode = AotMode.NATIVE
debugVerify = false
removeXmlSupport = true
removeSpelSupport = false
removeYamlSupport = false
removeJmxSupport = true
verify = true
removeUnusedConfig = true
failOnMissingSelectorHint = true
buildTimePropertiesMatchIfMissing = true
buildTimePropertiesChecks = ["default-include-all","!spring.dont.include.these.",
"!or.these"]
}
Gradle Kotlin
import org.springframework.aot.gradle.dsl.AotMode
// ...
springAot {
mode.set(AotMode.NATIVE)
debugVerify.set(false)
removeXmlSupport.set(true)
removeSpelSupport.set(false)
removeYamlSupport.set(false)
removeJmxSupport.set(true)
verify.set(true)
removeUnusedConfig.set(true)
failOnMissingSelectorHint.set(true)
buildTimePropertiesMatchIfMissing.set(true)
buildTimePropertiesChecks.set(arrayOf("default-include-
all","!spring.dont.include.these.","!or.these"))
}
See Configuring Spring AOT for more details on the configuration options.
20
4.3. Configuring Spring AOT
• mode switches how much configuration the feature actually provides to the native image
compiler:
◦ native (default) provides resource, initialization, proxy and reflection (using auto-
configuration hints) configuration for native images as well as substitutions.
◦ native-agent is using the configuration generated by the tracing agent as a basis and also
provides additional hints for components like controllers, etc.
• debugVerify is set to false by default and enables verification debug when set to true.
• removeXmlSupport is set to true by default to optimize the footprint, setting it to false restores
Spring XML support (XML converters, codecs and XML application context support).
• removeSpelSupport is set to false by default, setting it to true removes Spring SpEL support to
optimize the footprint (should be used only on applications not requiring SpEL).
• removeYamlSupport is set to false by default, setting it to true removes Spring Boot Yaml support
to optimize the footprint.
• removeJmxSupport is set to true by default to optimize the footprint, setting it to false restores
Spring Boot JMX support.
• verify is set to true by default and perform some automated verification to ensure your
application is native compliant, setting it to false switches off the verifications.
• removeUnusedConfig is set to true by default, setting it to false disables the removal of unused
configurations.
• failOnMissingSelectorHint is set to true by default and throw an error if no hint is provided for
an active selector, setting it to false switches the plugin from a hard error to a warning. See the
Troubleshooting section for more details on this.
21
Chapter 5. Native hints
GraalVM native image supports configuration via static files that are automatically discovered
when located in the META-INF/native-image folder in your application classpath. Those files can be
native-image.properties, reflect-config.json, proxy-config.json or resource-config.json for example.
Spring Native is automatically generating configuration files like these (that would sit alongside any
user provided ones) via the Spring AOT build plugin. However, there are situations where
specifying additional native configuration is required:
• When reflection-based serialization is used in a programmatic API like WebClient with Jackson
• When you try to use a feature or library not yet supported by Spring Native
• When you are want to specify native configuration related to your own application.
For those, you can annotate classes already annotated with @Configuration or
@SpringBootApplication with @NativeHint, or in the case of quite simple configuration a @TypeHint
directly (a @NativeHint is a container for many kinds of configuration including @TypeHint s).
For example, an application using WebClient to deserialize a Data class with a SuperHero nested class
should be configured as below (see the Javadoc for more details):
In fact, Spring Native itself is configuring most of your application with such annotations provided
out of the box, you can browse them in order to see some concrete example of hints.
Those hints will be taken in account during the compilation and transformed to generated native
configuration by the Spring AOT plugin. It is of course also possible to provide directly GraalVM
native configuration files if you prefer to do so, but annotation based configuration is usually easier
to write and to maintain thanks to autocompletion and compilation type checks.
• proxies which list proxies for which types are needed and should be built into the image.
• types which lists any reflective needs. It should use class references but string names for classes
are allowed if visibility (private classes) prevents a class reference.
• resources which lists patterns that match resources (including .class files) that should be
included in the image.
• initialization which lists classes/packages that should be explicitly initialized at either build-
time or run-time. There should not really be a trigger specified on hints included
initialization.
• imports can be useful if two hints share a number of @TypeHint/@ProxyHint/etc in common. For
22
example reactive-web and webmvc may expose a lot of common infrastructure. Rather than
duplicate those in two places, those info annotations (TypeHint/ProxyHint/etc) can all be placed
on a separate type and then imports can reference that type to pull them into a particular
@NativeHint.
You can check the Javadoc for more details, see also more dynamic ways to provide native
configuration in the How to Contribute section.
23
Chapter 6. Samples
There are numerous samples in the samples subfolder of the root project. These show the feature in
use with different technologies.
Most of them use Spring Boot Buildpacks support (Maven for most of the sample except the webmvc-
kotlin one which is using Gradle). There are also build.sh and other related Bash scripts used for
development and CI.
Beware that native image compilation can takes a long time and uses a lot of RAM.
The samples show the wide variety of tech that is working fine: Spring MVC with Tomcat, Spring
WebFlux with Netty, Thymeleaf, JPA, and others. The Petclinic samples brings multiple technologies
together in one application.
If you are starting to build your first Spring Boot application, we recommend you follow one of the
getting started guides.
24
Chapter 7. Native image options
GraalVM native-image options are documented here. Spring Native is enabling automatically some
of those, and some others especially useful are documented here as well.
• --allow-incomplete-classpath allows image building with an incomplete class path and reports
type resolution errors at run time when they are accessed the first time, instead of during image
building.
• --no-fallback enforces native image only runtime and disable fallback on regular JVM.
• --no-server means do not use the image-build server which can be sometimes unreliable, see
graal#1952 for more details.
Notice that XML and JMX support is disable by default, see options bellow to enable them if needed.
• -H:+PrintAnalysisCallTree helps to find what classes, methods, and fields are used and why. You
can find more details in GraalVM reports documentation.
25
• --enable-http enables HTTP support.
26
Chapter 8. Tracing agent
When using the agent to compute configuration for native-image, there are a couple of approaches:
The first option is certainly quick but rather manual/tedious. The second option sounds much more
appealing for a robust/repeatable setup but by default the generated configuration will include
anything required by the test infrastructure, which is unnecessary when the application runs for
real. To address this problem the agent supports an access-filter file that will cause certain data to
be excluded from the generated output.
{ "rules": [
{"excludeClasses": "org.apache.maven.surefire.**"},
{"excludeClasses": "net.bytebuddy.**"},
{"excludeClasses": "org.apiguardian.**"},
{"excludeClasses": "org.junit.**"},
{"excludeClasses": "org.mockito.**"},
{"excludeClasses": "org.springframework.test.**"},
{"excludeClasses": "org.springframework.boot.test.**"},
{"excludeClasses": "com.example.demo.test.**"}
]
}
Most of these lines would apply to any Spring application, except for the last one which is
application specific and will need tweaking to match the package of a specific applications tests.
The access-filter.json file is specified with the access-filter-file option as part of the agentlib
string:
-agentlib:native-image-agent=access-filter-file=access-filter.json,config-output
-dir=target/classes/META-INF/native-image
Let’s look at how to pull the ideas here together and apply them to a project.
Since Spring takes an eager approach when building the application context, a very basic test that
starts the application context will exercise a lot of the Spring infrastructure that needs to produce
27
native-image configuration. This test would suffice for that and could be placed in src/test/java:
package com.example.demo.test;
import org.junit.jupiter.api.Test;
import org.springframework.boot.test.context.SpringBootTest;
import org.springframework.boot.test.context.SpringBootTest.WebEnvironment;
@SpringBootTest(webEnvironment = WebEnvironment.RANDOM_PORT)
public class AppContextStartupTest {
@Test
public void contextLoads() {
}
}
Now take the access-filter.json file from above and place it in src/test/resources folder.
28
<plugins>
<!-- ... -->
<plugin>
<artifactId>maven-antrun-plugin</artifactId>
<executions>
<execution>
<id>create-native-image-config-folder</id>
<phase>test-compile</phase>
<configuration>
<target>
<mkdir dir="target/classes/META-INF/native-image"/>
</target>
</configuration>
<goals>
<goal>run</goal>
</goals>
</execution>
</executions>
</plugin>
<plugin>
<groupId>org.apache.maven.plugins</groupId>
<artifactId>maven-surefire-plugin</artifactId>
<configuration>
<argLine>-agentlib:native-image-agent=access-filter
-file=src/test/resources/access-filter.json,config-merge-dir=target/classes/META
-INF/native-image</argLine>
</configuration>
</plugin>
</plugins>
Notice the maven-antrun-plugin declaration to create the native image config directory before
Surefire execution.
Also update the spring-aot build plugin to enable the agent mode:
<plugin>
<groupId>org.springframework.experimental</groupId>
<artifactId>spring-aot-maven-plugin</artifactId>
<configuration>
<mode>native-agent</mode>
</configuration>
</plugin>
That’s it, build your native image, it should generate the native configuration during the tests and
run with the native-agent mode design to just add the missing bits. If that’s not enough, you can add
additional native configuration using @NativeHint annotations.
29
Chapter 9. Troubleshooting
While trying to build native images, various things can go wrong, either at image-build time or at
runtime when you try to launch the built image. Usually, the problem is a lack of native
configuration, so be sure to check Native hints first thing. Reading Native image reference
documentation could also probably help.
This section explores some of the errors that can be encountered and possible fixes or
workarounds.
Make sure to check GraalVM native image known issues related to Spring as well as Spring Native
open issues before creating a new one.
Error: Classes that should be initialized at run time got initialized during image
building:
org.springframework.util.unit.DataSize was unintentionally initialized at build time.
To see why org.springframework.util.unit.DataSize got initialized use
-H:+TraceClassInitialization
You have probably tried to compile a Spring Boot application to native without the spring-native
dependency and Spring AOT plugin. See related Getting started with native image Maven plugin
and Getting started with Buildpacks documentation.
native-image consumes a lot of RAM, we recommend a machine with at least 16G of RAM.
If you are using containers, on Mac, it is recommended to increase the memory allocated to Docker
to at least 8G (and potentially to add more CPUs as well) since native-image compiler is a heavy
process. See this Stackoverflow answer for more details.
On Windows, make sure to enable the Docker WSL 2 backend for better performances.
30
9.2.1. Missing resource bundles
In some cases, when there is a problem, the error message tries to tell you exactly what to do, as
follows:
The Spring AOT plugin will do the best it can to catch everything but it doesn’t understand every bit
of code out there. In these situations you can write native configuration yourself, see Native hints
and How to Contribute.
Now simply run the application, with the following addition to the Java command to collect
configuration in that folder:
-agentlib:native-image-agent=config-output-dir=src/main/resources/META-INF/native-image
When the next native-image run happens it should automatically additionally include this collected
configuration.
Spring Native chases down configuration references to other configurations (@Import usages).
However if you use an import selector, that means code is deciding what the next imported
configuration should be, which is harder to follow. Spring Native does not do that level of analysis
(it could get very complicated). This means that, although the feature can tell it has encountered a
selector, it does not know what types that selector needs reflective access to or what further
configurations it references. Now, Spring Native could simply continue and maybe it would work,
maybe it would crash at runtime. Typically, the error produced when things go wrong due to this
missing information is very cryptic. If the selector is doing a “if this type is around, return this
configuration to include”, it may be not finding some type (when it is really there but is not exposed
in the image) and not including some critical configuration. For this reason, Spring Native analysis
fails early and fast, indicating that it does not know what a particular selector is doing. To fix it,
take a look in the selector in question and craft a quick hint for it. See this commit that was fixing
this kind of problem for a Spring Security (issue).
you can temporarily turn this hard error into a warning since it is possible that, in your case, you
do not need what the selector is doing. To do so, specify the failOnMissingSelectorHint option to
false to cause log messages about the problem but not a hard fail. Note that using warnings rather
than errors can cause serious problems for your application.
31
9.3. Working with snapshots
Snapshots are regularly published and obviously ahead of releases and milestones. If you wish to
use the snapshot versions you should use the following repository:
<repositories>
<!-- ... -->
<repository>
<id>spring-snapshots</id>
<name>Spring Snapshots</name>
<url>https://repo.spring.io/snapshot</url>
</repository>
</repositories>
32
Chapter 10. How to Contribute
This section describes how to extend Spring Native. You can then submit pull requests in order to
add support for a specific part of the Spring ecosystem.
Spring applications are dynamic, which means they typically use Java language features like
reflection in various places. Spring Native and its Spring AOT build plugins performs AOT
transformations, in the context of a specific application classpath and configuration in order to
generate the optimal native configuration. They also generate programmatic versions of
spring.factories or auto-configurations to reduce the amount of reflection required at runtime.
Each reflection entry (per constructor/method/field) leads to the creation of a proxy class by native-
image, so from a footprint point of view, these AOT transformations allow a smaller and more
optimal configuration to be generated.
The documentation below describes best practices to keep in mind when trying to make Spring
code more compatible with native-images.
It is fine for applications to just use @Configuration without setting proxyBeanMethods=false and use
method parameters to inject bean dependencies, this is handled by Spring Native to not require a
CGLIB proxy.
33
However, where possible we recommend writing code that will work in both contexts rather
always falling back on the NativeDetector, common code will be easier to reason about and
test/debug.
It is possible to configure code in your application/dependencies to run at image build time. This
will speed up the runtime performance of your image and reduce the footprint.
If the behaviour of some code is conditional on some class being present on the classpath, that
presence check can be performed when the image is built because the classpath cannot be changed
after that.
A presence check is normally done via an attempt to reflectively load a class. It is optimal if that
check can be performed as the native image is built, then no reflective configuration is necessary
for that presence check at runtime. To achieve this optimization:
• Configure that type containing the check to be initialized at build-time using @NativeHint
Care must be taken to not pull too many classes into build-time initialization as it does transitively
pull in any dependencies statically touched and that can lead to situations where native-image
building will fail (not all Java operations are safe to run at build time), hence the default of runtime
initialization.
For code executing at runtime, try to favor functional approaches like lambdas and method
references instead of reflection when possible, since these constructs are automatically understood
by the native-image static analysis.
It is perfectly fine to use reflection in a native world but it is most optimal to do it in code executed
at build-time:
A hint may indicate that a specific resource must be include or that reflection on a particular type is
34
required.
When adding support for a new area of Spring or new version of a library, the typical approach to
work out the missing hints is as follows:
1. Notice an error if your application when you try to build it or run it — a classnotfound,
methodnotfound, or similar error. If you are using a piece of Spring we don’t have a sample for,
this is likely to happen.
2. Try to determine which configuration classes give rise to the need for that reflective access to
occur. Usually, we do a few searches for references to the type that is missing, and those
searches guide us to the configuration.
See Native hints for basic hint documentation. These @NativeHint can be hosted in one of two
places:
• In the spring-native-configuration module, you can see that they are hosted on types that
implement the org.springframework.nativex.extension.NativeConfiguration interface.
Implementations of this interface should be listed in a src/main/resources/META-
INF/services/org.springframework.nativex.type.NativeConfiguration file, which the feature
loads through regular Java service loading.
• On Spring configuration classes. That’s useful for project-specific hints or while crafting hints on
a sample before moving it to the spring-native-configuration module (shorter feedback loop).
• If the hint is on a NativeConfiguration class, and no trigger is specified then it is assumed this
configuration should always apply. This is useful for common configuration necessary for all
applications.
• If the hint is on something other than a NativeConfiguration class (e.g. on a Spring auto-
configuration class) then that type is considered to be the trigger, and if the Spring AOT plugin
determines that is 'active', the hint applies.
The trigger attribute might be a piece of Spring infrastructure (autoconfiguration, import selector)
or just a regular class. If the Spring AOT plugin determines that Spring infrastructure may be active
when the application runs, or (for a regular class trigger) that the named class is on the classpath, it
will activate the associated hints, informing the native-image build process what is needed.
It is best practice to use the hints in a sample (existing or new one) in order to have automated
testing of it. Once you are happy with the hints you crafted, you can submit a pull request.
Using the Tracing agent can also be useful an approximation of the required native configuration
35
without having to run too many native builds.
Sometimes the necessary configuration is hard to statically declare and needs a more dynamic
approach. For example, the interfaces involved in a proxy hint might need something to be checked
beyond the simple presence of a class. In this case the method computeHints can be implemented
which allows computation of hints in a more dynamic way, which are then combined with those
statically declared via annotations.
The NativeConfiguration interface contains a couple of default methods that can be implemented
for more control. For example whether the hints on a NativeConfiguration should activate may be a
more subtle condition that simply whether a configuration is active. It is possible to implement the
isValid method in a NativeConfiguration implementation and perform a more detailed test,
returning false from this method will deactivate the associated hints.
Within a Spring application there are going to be a number of active components (the main
application, configurations, controllers, etc). There may be much more sophisticated domain
specific analysis to be done for these components in order to compute the necessary configuration
for the native-image invocation. It is possible to implement a couple of interfaces to participate in
the process the feature is going through:
• ComponentProcessor implementations are given the chance to process components and possibly
register new configuration. For example this is used by spring-data (via
SpringDataComponentProcessor) to do deeper analysis of repositories and the types used in
generic signatures to compute reflection/proxy/resource hints.
• SpringFactoriesProcessor implementations are given a chance to process the keys and values
loaded from spring.factories files. Currently they are allowed to do filtering but this is likely to
be expanded in the future. By filtering it means they may programmatically compute that for
some spring.factories key one of the values makes no sense (by analysing classpath contents, for
example), and decide to discard meaning no further processing will be performed on it.
These need to be implemented in spring-aot. For debugging them using the Maven plugin, you can
use mvnDebug instead of mvn and connect with a JVM remote debugger from your IDE.
• graalvm-ce: base image with Ubuntu bionic + GraalVM native, built daily by the CI and available
from Docker hub or locally via docker/build-graalvm-ce-images.sh.
• spring-native: base image with graalvm-ce + utilities required to build the project, available
36
from Docker hub or locally via docker/build-spring-native-images.sh.
• spring-native-dev: local image built via docker/build-dev-images.sh designed to share the same
user between the host and the container.
To use it:
• Install Docker.
• On Mac, ensure in the Docker preferences resources tab that you give it enough memory, ideally
10G or more, otherwise you may see out of memory issues when building images.
• Run run-dev-container.sh to run the Docker container with an interactive shell suitable to run
spring-native build scripts (see below for more documentation).
• The first time, it will download remotely hosted images built by the CI.
• The current and the Maven home directories are shared between the host (where is typically
the IDE) and the container (where you can run builds).
10.5.1. run-dev-container.sh
run-dev-container.sh runs Spring Native for GraalVM dev container with an interactive shell.
run-dev-container.sh [options]
options:
-h, --help show brief help
-j, --java=VERSION specify Java version to use, can be 8 or 11, 8 by default
-g, --graalvm=VERSION specify GraalVM version to use, can be 20.1-dev or master,
20.1-dev by default
-w, --workdir specify the working directory, should be an absolute path,
current one by default
-p, --pull force pulling of remote container images
-r, --rebuild force container image rebuild
• Eventually import the sample you are working on as a distinct project in your IDE.
• Run the root project build.sh (from the host or the container) if you have made modification to
the feature, substitutions or configuration modules.
• Run build.sh of the sample you are working on from the container.
To test the various samples You can also run the root build.sh then build-key-samples.sh (test only
key samples) or build-samples.sh (test all samples) from the container.
37
10.6. Scripts
The native-image command supports a number of flags for producing information about what is in
an image. However, what can sometimes be really useful is comparing two images. What is in one
that isn’t in the other? Sometimes sifting through the mass of output is tricky. The scripts folder
provides some tools to help with this.
Thousands and thousands of lines typically. Typically we turn on that option for native-image in the
pom.xml. The output is produced to stdout which our samples capture in target/native-
image/output.txt. With two builds done, we can use a script from this folder to produce a tree diff:
compilationDiff.sh java8build/target/native-image/output.txt
java11build/target/native-image/output.txt 8-11.html
The inputs are the two collected PrintAOTCompilation outputs to compare and the name for an
HTML file that should be generated (this will contain the navigable tree). Then simply open the
HTML file.
38
One of the key entries to look at in the diff is under the path com/oracle/svm/reflect as that shows
the entries included due to reflection.
39
Chapter 11. Contact us
We would love to hear about your successes and failures (with minimal repro projects) through the
project issue tracker. Before raising an issue, please check the troubleshooting guide, which is full
of information on pitfalls, common problems, and how to deal with them (through fixes and
workarounds).
If you want to make a contribution here, see the how to contribute guide. Please be aware this
project is still incubating and, as such, some of these options and extension APIs are still evolving
and may change before it is finally considered done.
40