freeipa team mailing list archive
-
freeipa team
-
Mailing list archive
-
Message #01311
[Bug 2055830] Re: please remove dogtag-pki from noble
Removing packages from noble:
dogtag-pki 11.2.1-2 in noble
dogtag-pki 11.2.1-2 in noble amd64
dogtag-pki 11.2.1-2 in noble arm64
dogtag-pki 11.2.1-2 in noble armhf
dogtag-pki 11.2.1-2 in noble i386
dogtag-pki 11.2.1-2 in noble ppc64el
dogtag-pki 11.2.1-2 in noble riscv64
dogtag-pki 11.2.1-2 in noble s390x
dogtag-pki-console-theme 11.2.1-2 in noble amd64
dogtag-pki-console-theme 11.2.1-2 in noble arm64
dogtag-pki-console-theme 11.2.1-2 in noble armhf
dogtag-pki-console-theme 11.2.1-2 in noble i386
dogtag-pki-console-theme 11.2.1-2 in noble ppc64el
dogtag-pki-console-theme 11.2.1-2 in noble riscv64
dogtag-pki-console-theme 11.2.1-2 in noble s390x
dogtag-pki-server-theme 11.2.1-2 in noble amd64
dogtag-pki-server-theme 11.2.1-2 in noble arm64
dogtag-pki-server-theme 11.2.1-2 in noble armhf
dogtag-pki-server-theme 11.2.1-2 in noble i386
dogtag-pki-server-theme 11.2.1-2 in noble ppc64el
dogtag-pki-server-theme 11.2.1-2 in noble riscv64
dogtag-pki-server-theme 11.2.1-2 in noble s390x
pki-base 11.2.1-2 in noble amd64
pki-base 11.2.1-2 in noble arm64
pki-base 11.2.1-2 in noble armhf
pki-base 11.2.1-2 in noble i386
pki-base 11.2.1-2 in noble ppc64el
pki-base 11.2.1-2 in noble riscv64
pki-base 11.2.1-2 in noble s390x
pki-base-java 11.2.1-2 in noble amd64
pki-base-java 11.2.1-2 in noble arm64
pki-base-java 11.2.1-2 in noble armhf
pki-base-java 11.2.1-2 in noble i386
pki-base-java 11.2.1-2 in noble ppc64el
pki-base-java 11.2.1-2 in noble riscv64
pki-base-java 11.2.1-2 in noble s390x
pki-ca 11.2.1-2 in noble amd64
pki-ca 11.2.1-2 in noble arm64
pki-ca 11.2.1-2 in noble armhf
pki-ca 11.2.1-2 in noble i386
pki-ca 11.2.1-2 in noble ppc64el
pki-ca 11.2.1-2 in noble riscv64
pki-ca 11.2.1-2 in noble s390x
pki-console 11.2.1-2 in noble amd64
pki-console 11.2.1-2 in noble arm64
pki-console 11.2.1-2 in noble armhf
pki-console 11.2.1-2 in noble i386
pki-console 11.2.1-2 in noble ppc64el
pki-console 11.2.1-2 in noble riscv64
pki-console 11.2.1-2 in noble s390x
pki-javadoc 11.2.1-2 in noble amd64
pki-javadoc 11.2.1-2 in noble arm64
pki-javadoc 11.2.1-2 in noble armhf
pki-javadoc 11.2.1-2 in noble i386
pki-javadoc 11.2.1-2 in noble ppc64el
pki-javadoc 11.2.1-2 in noble riscv64
pki-javadoc 11.2.1-2 in noble s390x
pki-kra 11.2.1-2 in noble amd64
pki-kra 11.2.1-2 in noble arm64
pki-kra 11.2.1-2 in noble armhf
pki-kra 11.2.1-2 in noble i386
pki-kra 11.2.1-2 in noble ppc64el
pki-kra 11.2.1-2 in noble riscv64
pki-kra 11.2.1-2 in noble s390x
pki-ocsp 11.2.1-2 in noble amd64
pki-ocsp 11.2.1-2 in noble arm64
pki-ocsp 11.2.1-2 in noble armhf
pki-ocsp 11.2.1-2 in noble i386
pki-ocsp 11.2.1-2 in noble ppc64el
pki-ocsp 11.2.1-2 in noble riscv64
pki-ocsp 11.2.1-2 in noble s390x
pki-server 11.2.1-2 in noble amd64
pki-server 11.2.1-2 in noble arm64
pki-server 11.2.1-2 in noble armhf
pki-server 11.2.1-2 in noble ppc64el
pki-server 11.2.1-2 in noble riscv64
pki-server 11.2.1-2 in noble s390x
pki-tks 11.2.1-2 in noble amd64
pki-tks 11.2.1-2 in noble arm64
pki-tks 11.2.1-2 in noble armhf
pki-tks 11.2.1-2 in noble i386
pki-tks 11.2.1-2 in noble ppc64el
pki-tks 11.2.1-2 in noble riscv64
pki-tks 11.2.1-2 in noble s390x
pki-tools 11.2.1-2 in noble amd64
pki-tools 11.2.1-2 in noble arm64
pki-tools 11.2.1-2 in noble armhf
pki-tools 11.2.1-2 in noble ppc64el
pki-tools 11.2.1-2 in noble riscv64
pki-tools 11.2.1-2 in noble s390x
pki-tps 11.2.1-2 in noble amd64
pki-tps 11.2.1-2 in noble arm64
pki-tps 11.2.1-2 in noble armhf
pki-tps 11.2.1-2 in noble i386
pki-tps 11.2.1-2 in noble ppc64el
pki-tps 11.2.1-2 in noble riscv64
pki-tps 11.2.1-2 in noble s390x
python3-pki-base 11.2.1-2 in noble amd64
python3-pki-base 11.2.1-2 in noble arm64
python3-pki-base 11.2.1-2 in noble armhf
python3-pki-base 11.2.1-2 in noble i386
python3-pki-base 11.2.1-2 in noble ppc64el
python3-pki-base 11.2.1-2 in noble riscv64
python3-pki-base 11.2.1-2 in noble s390x
Comment: FTBFS and blocks new tomcat9; LP: #2055830
1 package successfully removed.
** Changed in: dogtag-pki (Ubuntu)
Status: New => Fix Released
** Changed in: tomcat9 (Ubuntu)
Status: New => Fix Released
--
You received this bug notification because you are a member of FreeIPA,
which is subscribed to dogtag-pki in Ubuntu.
https://bugs.launchpad.net/bugs/2055830
Title:
please remove dogtag-pki from noble
Status in dogtag-pki package in Ubuntu:
Fix Released
Status in tomcat9 package in Ubuntu:
Fix Released
Bug description:
dogtag-pki fails to build due to the missing and obsolete dependency (python3-six, distutils).
After fixing the missing dependencies, the package fails to unpack with the following error message:
-----
Unpacking pki-server (11.2.1-2ubuntu1) ...
dpkg: error processing archive /tmp/apt-dpkg-install-V2J5IB/123-pki-server_11.2.1-2ubuntu1_amd64.deb (--unpack):
unable to open '/usr/lib/systemd/system/pki-tomcatd@xxxxxxxxxxxxx-new': No such file or directory
No apport report written because the error message indicates an issue on the local system
----
The package also attempts to install service file to /lib[3].
After working around those issues I was able to create a pki server
which started an empty tomcat instance.
tomcat9 migration to 9.0.70-2 is blocked by dogtag-pki.
dogtag-pki can not be trivially upgraded to tomcat10 because dogtag-pki upstream implementation depends on tomcat9 [1][2].
tomcat9 removal bug[4] states that `dogtag-pki` was removed from
bookworm[5]
reverse dependencies - no reverse dependenices found
$ reverse-depends -b src:dogtag-pki
No reverse dependencies found
$ reverse-depends src:dogtag-pki
$
The package contains a number of issues - it can not be built,
installed and used properly. More importantly it blocks tomcat9
migration which leaves users with tomcat 9.0.70 has a number of known
security issues[6]
Would it be possible to consider removing source and binaries of the
package from noble?
[1] https://github.com/dogtagpki/pki/blob/master/base/tomcat/pom.xml
[2] https://github.com/dogtagpki/pki/blob/master/base/tomcat-9.0/pom.xml
[3] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054480
[4] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034824
[5] https://tracker.debian.org/pkg/dogtag-pki
[6] https://tomcat.apache.org/security-9.html
Original description:
-----------
a -W /<<PKGBUILDDIR>>/base/common/python /<<PKGBUILDDIR>>/build/core/base/common/python/html
Running Sphinx v7.2.6
making output directory... done
building [mo]: all of 0 po files
writing output...
building [html]: all source files
updating environment: [new config] 2 added, 0 changed, 0 removed
[2Kreading sources... [ 50%] index
[2Kreading sources... [100%] pki
Warning, treated as error:
autodoc: failed to import module 'pki'; the following exception was raised:
No module named 'six'
make[4]: *** [base/common/python/CMakeFiles/dogtag_python_client_docs.dir/build.make:71: base/common/python/CMakeFiles/dogtag_python_client_docs] Error 2
make[4]: Leaving directory '/<<PKGBUILDDIR>>/build/core'
make[3]: *** [CMakeFiles/Makefile2:1361: base/common/python/CMakeFiles/dogtag_python_client_docs.dir/all] Error 2
make[3]: Leaving directory '/<<PKGBUILDDIR>>/build/core'
make[2]: *** [Makefile:156: all] Error 2
make[2]: Leaving directory '/<<PKGBUILDDIR>>/build/core'
make[1]: *** [debian/rules:66: debian/stamp/x86_64-linux-gnu-build-core] Error 2
----------
See[1]
https://launchpad.net/~vpa1977/+archive/ubuntu/october-21/+build/27797951/+files/buildlog_ubuntu-
noble-amd64.dogtag-pki_11.2.1-2_BUILDING.txt.gz
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/dogtag-pki/+bug/2055830/+subscriptions
References
