openjdk team mailing list archive

[Eric Desrochers <eric.desrochers@xxxxxxxxxxxxx>]

If I compare a pure installation via apt-get install ca-certificates-
java in Xenial (no upgrade involve) I see a behaviour change between the
package currently in the archive and the one I have fix in a PPA.

--------------------------------
# Current ca-certificates-java (from archive) #
It is installaing "openjdk-9-jre-headless"

sudo apt-get install ca-certificates-java
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following additional packages will be installed:
  java-common libavahi-client3 libavahi-common-data libavahi-common3 libcups2 libjpeg-turbo8 libjpeg8 liblcms2-2 libnspr4 libnss3 libnss3-nssdb libpcsclite1 libxi6 libxrender1 libxtst6 openjdk-9-jre-headless
  x11-common


# ca-certificates-java fix to depend on openjdk-8
It is now installing "openjdk-8-jre-headless"

sudo apt-get install ca-certificates-java
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following additional packages will be installed:
  fontconfig-config fonts-dejavu-core java-common libavahi-client3 libavahi-common-data libavahi-common3 libcups2 libfontconfig1 libjpeg-turbo8 libjpeg8 liblcms2-2 libnspr4 libnss3 libnss3-nssdb libpcsclite1
  libxi6 libxrender1 libxtst6 openjdk-8-jre-headless x11-common


# rmadison openjdk-9-jre-headless --suite=xenial
 openjdk-9-jre-headless | 9~b114-0ubuntu1 | xenial/universe | amd64, i386

# rmadison openjdk-8-jre-headless --suite=xenial
 openjdk-8-jre-headless | 8u77-b03-3ubuntu3 | xenial | amd64, arm64, armhf, i386, powerpc, ppc64el, s390x
--------------------------------

This might have an impact on user already having ca-certificates-java
with openjdk-9 at next package upgrade.

I consider that using the package found in main (openjdk-8) is IMHO a
better approach than using the universe (openjdk-9), but while this may
affect current ca-certificates-java user. I wonder if we should put the
xenial package to depen on openjdk-9.

I'll look with foundation team.

- Eric

-- 
You received this bug notification because you are a member of OpenJDK,
which is subscribed to ca-certificates-java in Ubuntu.
https://bugs.launchpad.net/bugs/1723198

Title:
  [SRU] upgrade from 14.04 to 16.04 fails with: ca-certificates
  20170717~16.04.1 failed to install/upgrade: triggers looping,
  abandoned

Status in ca-certificates-java package in Ubuntu:
  Fix Released
Status in ca-certificates-java source package in Xenial:
  In Progress
Status in ca-certificates-java source package in Zesty:
  In Progress

Bug description:
  [Impact]

  ca-certificates-java currently depend on openjdk-7 which no longer
  exist after Trusty. It triggers failures while doing release upgrade,
  due to triggers loop.

  [Test Case]

  # Install Ubuntu server 14.04.5 + all the updates.
  (I used "uvt-kvm create trustylp1723198 release=trusty")

  sudo apt-get update
  sudo apt-get dist-upgrade

  # Install ca-certificates-java and man-db.
  sudo apt-get install ca-certificates-java man-db

  # Upgrade to 16.04 LTS.
  sudo do-release-upgrade

  # Error:
  ..........................
  Removing ca-certificates-java (20130815ubuntu1) ...
  Removing openjdk-7-jre-headless:amd64 (7u151-2.6.11-2ubuntu0.14.04.1) ...
  dpkg: cycle found while processing triggers:
  chain of packages whose triggers are or may be responsible:
  man-db -> ca-certificates
  packages' pending triggers which are or may be unresolvable:
  ca-certificates: update-ca-certificates
  man-db: /usr/share/man
  dpkg: error processing package ca-certificates (--remove):
  triggers looping, abandoned

  [Regression Potential]

   * Regression is low risk. Xenial and late doesn't have openjdk-7
  available in the archive. It has openjdk-8. This will have the effect
  to make the release upgrade to work correctly when ca-certificates-
  java is installed. This patch has been already proven to work in
  Artful, Bionic and Debian upstream.

  * See Comment #16

  [Other Info]

   * Debian bug :
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863803

   * Debian commit:
   https://anonscm.debian.org/cgit/pkg-java/ca-certificates-java.git/commit/?id=0ddf3c9

  [Original Description]
  Test Case:
  1. Install Ubuntu server 14.04.5 + all the updates
  2. Install ca-certificates-java and man-db
  3. Reboot
  4. Upgrade to 16.04 LTS with do-release-upgrade and proceed with the upgrade

  Actual Result
  Upgrade fails with
  Removing ca-certificates-java (20130815ubuntu1) ...
  Removing openjdk-7-jre-headless:amd64 (7u151-2.6.11-2ubuntu0.14.04.1) ...
  dpkg: cycle found while processing triggers:
   chain of packages whose triggers are or may be responsible:
    man-db -> ca-certificates
   packages' pending triggers which are or may be unresolvable:
    ca-certificates: update-ca-certificates
    man-db: /usr/share/man
  dpkg: error processing package ca-certificates (--remove):
   triggers looping, abandoned

  I have no further information to give at this time except to say that
  there were several errors during the upgrade process from 14.04.

  ProblemType: Package
  DistroRelease: Ubuntu 16.04
  Package: ca-certificates 20170717~16.04.1
  ProcVersionSignature: Ubuntu 4.4.0-97.120-generic 4.4.87
  Uname: Linux 4.4.0-97-generic x86_64
  NonfreeKernelModules: nvidia_modeset nvidia
  ApportVersion: 2.20.1-0ubuntu2.10
  Architecture: amd64
  Date: Thu Oct 12 17:52:19 2017
  ErrorMessage: triggers looping, abandoned
  InstallationDate: Installed on 2013-11-16 (1425 days ago)
  InstallationMedia: Xubuntu 13.10 "Saucy Salamander" - Release amd64 (20131016)
  PackageArchitecture: all
  RelatedPackageVersions:
   dpkg 1.18.4ubuntu1.2
   apt  1.2.24
  SourcePackage: ca-certificates
  Title: package ca-certificates 20170717~16.04.1 failed to install/upgrade: triggers looping, abandoned
  UpgradeStatus: Upgraded to xenial on 2017-10-12 (0 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/1723198/+subscriptions