--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: sort_deps does not track package versions
- From: Steve McIntyre <steve@einval.com>
- Date: Mon, 17 Sep 2012 13:17:22 +0100
- Message-id: <20120917121722.4808.64721.reportbug@tack.local>
Package: debian-cd
Version: 3.1.10
Severity: serious
It seems we've had a bug designed into debian-cd ever since it
started. The dependency sorting code in tools/sort_deps does not track
versions of packages when considering if dependencies are met. For a
long time, this has seemingly worked OK. However, in the recent wheezy
d-i beta 2 build we generated discs that failed testing because of
this. Specifically, the case that broke was libseed-gtk3-0:
$ apt-cache show libseed-gtk3-0 | less
Package: libseed-gtk3-0
Source: seed
Version: 3.2.0-1
Installed-Size: 834
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Architecture: amd64
Depends: libatk1.0-0 (>= 1.12.4), libc6 (>= 2.7), libcairo-gobject2 (>= 1.10.0), libcairo2 (>= 1.8.0), libdbus-1-3 (>= 1.0.2), libdbus-glib-1-2 (>= 0.78), libffi5 (>= 3.0.4), libfontconfig1 (>= 2.8.0), libfreetype6 (>= 2.2.1), libgdk-pixbuf2.0-0 (>= 2.22.0), libgirepository-1.0-1 (>= 0.9.2), libglib2.0-0 (>= 2.24.0), libgmp10, libgtk-3-0 (>= 3.0.0), libjavascriptcoregtk-3.0-0 (>= 1.5.1), libmpfr4 (>= 3.1.0), libpango1.0-0 (>= 1.14.0), libreadline6 (>= 6.0), libsqlite3-0 (>= 3.5.9), libxml2 (>= 2.7.4), gnome-js-common, gir1.2-glib-2.0, gir1.2-clutter-1.0, gir1.2-gstreamer-0.10 | libgstreamer0.10-0 (<< 0.10.25-3), gir1.2-gtk-3.0
The OR dependency
gir1.2-gstreamer-0.10 | libgstreamer0.10-0 (<< 0.10.25-3)
shows the problem: libgstreamer was already selected for inclusion,
but at version 0.10.36-1. sort_deps accepted this as fulfilling the
required dependencies for libseed-gtk3-0, leaving out
gir1.2-gstreamer-0.10.
Later on in testing, apt tried to install packages and could not
install libseed-gtk3-0 -> brokenness.
I already have most of the work done that is needed to fix this, but
it also depends on a patch being accepted in apt-cache (#218995).
-- System Information:
Debian Release: wheezy/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 3.2.0-3-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages debian-cd depends on:
ii apt 0.9.7.4
ii bc 1.06.95-2+b1
ii bzip2 1.0.6-4
ii cpp 4:4.7.1-1
ii curl 7.26.0-1
ii dctrl-tools [grep-dctrl] 2.22.2
ii dpkg-dev 1.16.8
ii genisoimage 9:1.1.11-2
pn libdigest-md5-perl <none>
ii libdigest-sha-perl 5.71-1
ii libio-compress-perl [libcompress-zlib-perl] 2.052-1
ii lynx-cur 2.8.8dev.12-2
ii make 3.81-8.2
ii perl [libdigest-sha-perl] 5.14.2-12
ii tofrodos 1.7.9.debian.1-1
ii xorriso 1.2.2-2
Versions of packages debian-cd recommends:
ii hfsutils 3.2.6-11
ii netpbm 2:10.0-15+b1
ii syslinux-common 2:4.05+dfsg-6
debian-cd suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: debian-cd
Source-Version: 3.1.11
We believe that the bug you reported is fixed in the latest version of
debian-cd, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 687949@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Steve McIntyre <93sam@debian.org> (supplier of updated debian-cd package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 26 Sep 2012 01:09:13 +0100
Source: debian-cd
Binary: debian-cd
Architecture: source all
Version: 3.1.11
Distribution: unstable
Urgency: low
Maintainer: Debian CD Group <debian-cd@lists.debian.org>
Changed-By: Steve McIntyre <93sam@debian.org>
Description:
debian-cd - Tools for building (Official) Debian CD set
Closes: 658352 687949 695244
Changes:
debian-cd (3.1.11) unstable; urgency=low
.
[ Steve McIntyre ]
* Merge x86 EFI support from the EFI_support branch (Closes: #658352)
+ Pull in grub-efi for amd64 and i386
+ Lots of extra code in boot-x86:
- pull grub EFI pieces out of the latest debian-cd_info.tar.gz
blobs in d-i, if they're there. If so, use them to make x86 images
bootable via EFI (both via CD and USB)
- parse the isolinux menus already provided in the d-i build and
generate equivalent grub menus, complete with themes for a
reasonable layout with graphics and titles.
- depending more and more on xorriso rather than genisoimage...
* Add version-tracking into dependency sorting. Closes: #687949)
+ Use/parse output from a newer version of apt so that "apt-cache
depends" will include version information on dependencies.
+ All tracking of packages now include versions, so we pass around
hashes of {package name, comparison op, version} everywhere instead
of simply passing package names as strings.
+ Add the APT::Cache::ShowVersion=1 option to apt-cache calls to
turn on version reporting. Needs a locally-patched version of apt
*for now*, but expecting that to be fixed for the Wheezy
release. The new code degrades gracefully if version info is not
available.
+ Add a dependency on libdpkg-perl for version comparison code.
* Improve architecture support in which_deb. Closes: #695244
+ Check all the architectures available in the archive if we're not
specifically told which to use (e.g. on source builds)
+ If we fail to find packages/sources for the specified package, say
so and bail out properly.
* Switch boot-x86 to depend on xorriso totally rather than genisoimage
now; working UEFI support needs it. We also need very recent (1.2.6)
xorriso for various bugfixes, ideally.
Checksums-Sha1:
6d262e160ac2e20605556c746c9c715aa6f011c7 1680 debian-cd_3.1.11.dsc
b990e7035f049d35c359b19828b8ce0ba860dddb 866093 debian-cd_3.1.11.tar.gz
36832875e2fa023573057775b92d824116628cc3 875454 debian-cd_3.1.11_all.deb
Checksums-Sha256:
042913fe5e354fccb3d652747a846dc377f1715d0f65dbdbf7e0f87077a4c11c 1680 debian-cd_3.1.11.dsc
eb77e3ec3265469f526dd0eb1544d03535d71621d339619577016c9c3cce4b37 866093 debian-cd_3.1.11.tar.gz
01d56002db87009bdb72b9afea6fdfaea7503629e3103330f005a93be137b291 875454 debian-cd_3.1.11_all.deb
Files:
39e7f522d7b89edd4e0ef6b8b85337ae 1680 admin extra debian-cd_3.1.11.dsc
8601e13099f9cdb509b98033059ba897 866093 admin extra debian-cd_3.1.11.tar.gz
5c6f5e9083be4227ac881fc875a54802 875454 admin extra debian-cd_3.1.11_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iQIcBAEBCAAGBQJQ+1HnAAoJEFh5eVc0QmhOWfkP/A5luV3jqdXPY/5IqSPqq07e
MqDQhK2maeu0wzKTVpcrD0Nq0XgY3LthC5YjbTrGYItbIiRiAee4jgl4GDMMLz5A
BPN69IN7ALOLTukNvnBBTy6KGSBntdtZkFkeHhJvkUl7dDzWQX3rC+GMKVQVpW3u
PvuBTUyufKdRcVpeD6ttRa0J5vdpRIvTVA761Pqs3PnVZL5PfTdO2RMyJI4z0yvQ
8ei20uwEIW50sTeWhII2e7+ATcPR7K2DG7clKIhBjvTjttpN3cvCCYqKY9A9ENEZ
7y29L7BIg+h0LNQEMBO7rH04LVjn8QmX0VMc/HKEOzYbq9qww4ZxzN56sw0Huf/R
AYykkfZUOv4DvbneFa+6RcUWptS7jAwOV7A57cGL8X45D4uYkhaCD7SZ3i8LZOwh
x2U0RD5NUqgE1c7AVKgJS4QpkIs04CMRROcuP7Qy5vCanv6BTlBk6DDIXwV5T+8d
0IYyS5q9f/OPdJWmwKDUbbVcn4ThI0Ib6DEhPb+EME/Ju87F7kw6IKXI6jBm7FqA
aVvtp1xD61xRt1HZY8qlmniIaWo7M8oJ+GUEY6QelYgLH9BDM7IxVkrZkq/toopX
sMvP/mGfdYIsmiZf8E83610z01qCUJ6NzSW3p2ZROjfFLPz7a8WV3Wl/o8b3H1LN
ZQCMtD0iwd6CQuaFAjZK
=hNcr
-----END PGP SIGNATURE-----
--- End Message ---