Path: csiph.com!1.us.feeder.erje.net!3.eu.feeder.erje.net!feeder.erje.net!weretis.net!feeder8.news.weretis.net!news.imp.ch!fu-berlin.de!news.servidellagleba.it!bofh.it!news.nic.it!robomod From: Vladimir Petko Newsgroups: linux.debian.maint.java Subject: Re: ca-certificate-java/openjdk installation issues Date: Mon, 27 Feb 2023 08:20:02 +0100 Message-ID: References: X-Mailbox-Line: From debian-java-request@lists.debian.org Mon Feb 27 07:17:16 2023 Old-Return-Path: X-Amavis-Spam-Status: No, score=-9.401 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FOURLA=0.1, LDO_WHITELIST=-5, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no X-Policyd-Weight: using cached result; rate: -5.5 X-Gm-Message-State: AO0yUKUMv2qp54pSV3wPfN4WJ2Va/SA/7w9Za79lkUieUsVDAw9hzBxu x6reYUcAf76v+/K+xn9g3YrpEkd1OkxvJgkc816ylp+ZwO8fs2El+hiSzYM/edi9a5DHnTkF0ur RCEnBKYfacKzQKJSAIBKizJaxcWMrwkhpDRfyJiuItZTpjQNveD5P+Q5L6MziRyS1gQ== X-Received: by 2002:a17:902:e891:b0:199:482e:6f93 with SMTP id w17-20020a170902e89100b00199482e6f93mr4133653plg.2.1677482212910; Sun, 26 Feb 2023 23:16:52 -0800 (PST) X-Google-SMTP-Source: AK7set+CMF1mfDy4sV/ePNTg9fjLUpldgdvbW6Ti9MGgXac3YDiQwgWfOPhgE6muqwMgnpPxZm/6NuetrG+5jHwZZ4g= X-Received: by 2002:a17:902:e891:b0:199:482e:6f93 with SMTP id w17-20020a170902e89100b00199482e6f93mr4133643plg.2.1677482212529; Sun, 26 Feb 2023 23:16:52 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailing-List: archive/latest/23251 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/CALFf3kdo82AasdS61yKOqNmypzyrUYzhWP7QqGO=B7Hg5WPtnA@mail.gmail.com Approved: robomod@news.nic.it Lines: 72 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Cc: doko@ubuntu.com, debian-java@lists.debian.org X-Original-Date: Mon, 27 Feb 2023 20:16:41 +1300 X-Original-Message-ID: X-Original-References: <665f66a6-347d-18ce-457a-548d7fcd2c@tarent.de> <283b139-4276-227e-d17-f640b09f95d@tarent.de> <9c268964-afbc-55f-5415-3aba7b169394@tarent.de> <4b78a8e6-bcab-9eb-59d5-f3b8c651379@tarent.de> Xref: csiph.com linux.debian.maint.java:12595 Hi, >Is this REALLY necessary? AIUI triggers it shouldn=E2=80=99t, with >the correct invocations. Please do talk to people who know >about triggers well. Regarding the trigger activation we have the following options: - CI triggers (coming from the .triggers file). They are being called from `deferred_configure` (configure.c 635) - trig_activate_packageprocessing(). This happens before postinst script is ran at configure.c:677 and is too early for this use-case. - File triggers. Those will be called after unpacking a file. This would be brittle as we have an implicit dependency on the file creation and too early for this use case. - Explicit triggers through dpkg-trigger. This option allows to call the trigger from the postinstall script. If we set the await flag when triggering, the openjre will not get installed until trigger finishes. Please correct if I have missed some option here. I have just realised that keystore conversion produces .dpkg_new file, which with this approach will have to be copied back manually. Best Regards, Vladimir. On Fri, Feb 24, 2023 at 6:21=E2=80=AFPM Thorsten Glaser wrote: > > On Fri, 24 Feb 2023, Vladimir Petko wrote: > > >The issue is the migration procedure - those packages have to be > >published together to avoid any nasty surprises. > > Yeah, we=E2=80=99ll have to pick a time to do that, which is after > the bookworm release anyway (it=E2=80=99s not okay to upload things > to unstable right now that are not targetting the release, > and only small targetted fixes, not big changes). > > >- call update-certificates-java trigger after update-alternatives in > >every jre-headless postinstall script > > Is this REALLY necessary? AIUI triggers it shouldn=E2=80=99t, with > the correct invocations. Please do talk to people who know > about triggers well. > > >Potential problem: > >- update-certificates-java trigger logs appearing multiple times when > >different openjdk versions are installed at the same time > > dpkg should merge them, but even if not, triggers must be > omnipotent anyway, so that=E2=80=99s not a problem. > > bye, > //mirabilos > -- > Infrastrukturexperte =E2=80=A2 tarent solutions GmbH > Am Dickobskreuz 10, D-53121 Bonn =E2=80=A2 http://www.tarent.de/ > Telephon +49 228 54881-393 =E2=80=A2 Fax: +49 228 54881-235 > HRB AG Bonn 5168 =E2=80=A2 USt-ID (VAT): DE122264941 > Gesch=C3=A4ftsf=C3=BChrer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, A= lexander Steeg > > *************************************************= *** > /=E2=81=80\ The UTF-8 Ribbon > =E2=95=B2 =E2=95=B1 Campaign against Mit dem tarent-Newsletter nicht= s mehr verpassen: > =E2=95=B3 HTML eMail! Also, https://www.tarent.de/newsletter > =E2=95=B1 =E2=95=B2 header encryption! > *************************************************= ***