--- old/make/common/Modules.gmk	2017-03-30 14:59:44.594559362 +0200
+++ new/make/common/Modules.gmk	2017-03-30 14:59:44.486561074 +0200
@@ -40,6 +40,7 @@
 JRE_TOOL_MODULES :=
 UPGRADEABLE_MODULES :=
 AGGREGATOR_MODULES :=
+DOCS_MODULES :=
 
 # Hook to include the corresponding custom file, if present.
 $(eval $(call IncludeCustomExtension, , common/Modules.gmk))
@@ -58,12 +59,12 @@
     java.security.sasl \
     java.xml \
     jdk.httpserver \
+    jdk.internal.vm.ci \
     jdk.management \
     jdk.management.agent \
     jdk.net \
     jdk.sctp \
     jdk.unsupported \
-    jdk.internal.vm.ci \
     #
 
 # to be deprivileged
@@ -96,7 +97,6 @@
 
 PLATFORM_MODULES += \
     java.compiler \
-    jdk.incubator.httpclient \
     java.scripting \
     java.security.jgss \
     java.smartcardio \
@@ -105,33 +105,76 @@
     java.xml.crypto \
     jdk.accessibility \
     jdk.charsets \
-    jdk.crypto.ec \
     jdk.crypto.cryptoki \
+    jdk.crypto.ec \
     jdk.dynalink \
+    jdk.incubator.httpclient \
+    jdk.internal.vm.compiler \
     jdk.jsobject \
     jdk.localedata \
     jdk.naming.dns \
     jdk.scripting.nashorn \
     jdk.security.auth \
     jdk.security.jgss \
-    jdk.internal.vm.compiler \
     jdk.xml.dom \
     jdk.zipfs \
     #
 
-JRE_TOOL_MODULES += \
-    jdk.jdwp.agent \
-    jdk.pack \
-    jdk.scripting.nashorn.shell \
-    #
-
 ifeq ($(OPENJDK_TARGET_OS), windows)
   PLATFORM_MODULES += jdk.crypto.mscapi
+  DOCS_MODULES += jdk.crypto.mscapi
 endif
+
 ifeq ($(OPENJDK_TARGET_OS), solaris)
   PLATFORM_MODULES += jdk.crypto.ucrypto
+  DOCS_MODULES += jdk.crypto.ucrypto
 endif
 
+JRE_TOOL_MODULES += \
+    jdk.jdwp.agent \
+    jdk.pack \
+    jdk.scripting.nashorn.shell \
+    #
+
+################################################################################
+
+#
+# Workaround --expand-requires transitive that does not include java.base
+#
+DOCS_MODULES += \
+    java.base \
+    java.se.ee \
+    java.smartcardio \
+    jdk.accessibility \
+    jdk.attach \
+    jdk.charsets \
+    jdk.compiler \
+    jdk.crypto.cryptoki \
+    jdk.crypto.ec \
+    jdk.dynalink \
+    jdk.editpad \
+    jdk.httpserver \
+    jdk.incubator.httpclient \
+    jdk.jartool \
+    jdk.javadoc \
+    jdk.jconsole \
+    jdk.jdeps \
+    jdk.jdi \
+    jdk.jlink \
+    jdk.jshell \
+    jdk.localedata \
+    jdk.management \
+    jdk.naming.dns \
+    jdk.naming.rmi \
+    jdk.net \
+    jdk.scripting.nashorn \
+    jdk.sctp \
+    jdk.security.auth \
+    jdk.security.jgss \
+    jdk.xml.dom \
+    jdk.zipfs \
+    #
+
 # These modules are included in the interim image which is used to run profiling
 # before building the real images.
 INTERIM_IMAGE_MODULES := java.base java.logging
@@ -329,6 +372,7 @@
       else ifeq ($$(classloader), ext)
         PLATFORM_MODULES += $1
       endif
+      DOCS_MODULES += $1
     else
       # Default to include in all
       JRE_MODULES += $1