freeipa team mailing list archive

[Andreas Hasenack <1978849@xxxxxxxxxxxxxxxxxx>]

Summary:

# focal

focal's src:bind-dyndb-ldap situation is more complicated, a simple
rebuild won't fix it. In focal we have two bind9 sources:
src:bind9-libs, and src:bind9, at very different versions. Focal's bind-
dyndb-ldap does not work with the version of src:bind9 shipped there,
hence src:bind9-libs being available at a lower version. This allows
src:bind-dyndb-ldap to build, but it doesn't load correctly into bind9's
server at runtime. I don't even know if it can be made to work. TBD


# jammy and later

A simple rebuild fixes it. I checked if we can relax the bind9-libs
dependency, but even if we could, it won't help: src:bind9 in jammy and
later produces very specific libraries, with the full ubuntu version in
their soname:

$ objdump -x /lib/x86_64-linux-gnu/libisc-9.18.12-0ubuntu0.22.04.2-Ubuntu.so | grep SONAME
  SONAME               libisc-9.18.12-0ubuntu0.22.04.2-Ubuntu.so

So even a simple no-change rebuild of src:bind9 in these releases will
change the soname, and will require a src:bind-dyndb-ldap rebuild to
link with the new one.

The plan for jammy and later, therefore, is to add a dep8 test to these
packages (src:bind-dyndb-ldap and src:bind9) which will load the ldap.so
module into bind. This will block a src:bind9 update without an
accompaining src:bind-dyndb-ldap update, because the test will fail
without a rebuild.


This is a bit awkward: a package in universe can now block the release of a critical package like bind9 (if the test fails). If we ever get into a situation where a bind9-dyndb-ldap bug (where just a rebuild is not enough to get the test to pass) blocks a critical bind9 update, we will have to override the test.

-- 
You received this bug notification because you are a member of FreeIPA,
which is subscribed to bind-dyndb-ldap in Ubuntu.
https://bugs.launchpad.net/bugs/1978849

Title:
  bind9-dyndb-ldap has unmet dependencies

Status in bind-dyndb-ldap package in Ubuntu:
  In Progress
Status in bind9 package in Ubuntu:
  In Progress
Status in bind-dyndb-ldap source package in Mantic:
  In Progress
Status in bind9 source package in Mantic:
  In Progress

Bug description:
  bind9-dyndb-ldap cannot be installed on Ubuntu 22.04. It appears the
  bind0 package has been updated, but not bind9-dyndb-ldap:

      ~# apt install bind9 bind9-dyndb-ldap
      Reading package lists... Done
      Building dependency tree... Done
      Reading state information... Done
      Some packages could not be installed. This may mean that you have
      requested an impossible situation or if you are using the unstable
      distribution that some required packages have not yet been created
      or been moved out of Incoming.
      The following information may help to resolve the situation:

      The following packages have unmet dependencies:
       bind9-dyndb-ldap : Depends: bind9-libs (= 1:9.18.1-1ubuntu1) but 1:9.18.1-1ubuntu1.1 is to be installed
      E: Unable to correct problems, you have held broken packages.

      ~# apt-cache policy bind9
      bind9:
      Installed: (none)
      Candidate: 1:9.18.1-1ubuntu1.1
      Version table:
          1:9.18.1-1ubuntu1.1 500
              500 http://archive.ubuntu.com/ubuntu jammy-updates/main amd64 Packages
              500 http://security.ubuntu.com/ubuntu jammy-security/main amd64 Packages
          1:9.18.1-1ubuntu1 500
              500 http://archive.ubuntu.com/ubuntu jammy/main amd64 Packages

      ~# apt-cache policy bind9-dyndb-ldap 
      bind9-dyndb-ldap:
      Installed: (none)
      Candidate: 11.9-5build2
      Version table:
          11.9-5build2 500
              500 http://archive.ubuntu.com/ubuntu jammy/universe amd64 Packages

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bind-dyndb-ldap/+bug/1978849/+subscriptions