On Fri, Jun 4, 2021 at 5:08 PM Coty Sutherland <csuth...@fedoraproject.org> wrote: > > On Fri, Jun 4, 2021 at 10:56 AM Fabio Valentini <decatho...@gmail.com> wrote: >> >> On Fri, Jun 4, 2021 at 1:47 PM Coty Sutherland >> <csuth...@fedoraproject.org> wrote: >> > >> > Hi all, >> > >> > Sorry to be a bit late to the party, but in response to some indirect >> > dependencies being orphaned I've taken the opportunity to clean up the >> > Tomcat package a little. I have removed the following "features" from >> > tomcat: >> > >> > 1) I dropped the "examples" webapp from Tomcat, which is recommended by >> > the Security Considerations page of the upstream project anyway. This >> > removed our dependency on the tomcat-taglibs-standard package. >> > 2) Due to changes in the javapackages-local package (%add_maven_depmap was >> > finally removed), I dropped the maven pom files from the tomcat packages >> > as I feel that their usefulness is limited anyway. If you need to use the >> > poms, Maven Central should work. >> > 3) I've removed the tomcat-jsvc subpackage from the distribution as it >> > isn't very useful either. This removes our dependency on the >> > apache-commons-daemon package. This also removed the logrotate config that >> > was offered since it was used within the tomcat-jsvc package. >> > 4) Dropped geronimo-saaj (aka jakarta-saaj) as it's no longer required by >> > Tomcat 9+. >> > 5) Dropped geronimo-jaxrpc (aka jakarta-xml-rpc), which provided the >> > webservices naming factory resources that are generally unused. This was >> > only a build time dependency, so it wasn't used at runtime (unless users >> > were explicitly installing it for their webapp). >> > >> > If anyone has issues with these changes, please let me know ASAP. >> >> It looks like 2) is causing problems with resteasy, and in turn >> pki-core and dogtag-pki (FreeIPA components): >> nothing provides mvn(org.apache.tomcat:tomcat-servlet-api) needed by >> pki-resteasy-core >> >> resteasy is built with maven and depends on tomcat, so the pom files >> are actually needed ... > > > That is the worst news I've gotten in a while :/ How many maven artifacts are > being used? Could I get away with only providing poms/artifacts for the > servlet/jsp/el implementations or do they need all 30+ artifacts?
It wouldn't have been news if you checked if anything depends on those "mvn(foo:bar)" virtual Provides before dropping them ;) According to koschei, resteasy only depends on one maven pom though: No package found for: mvn(org.apache.tomcat:tomcat-servlet-api) See: https://koschei.fedoraproject.org/package/resteasy Not sure if just adding that one back will make it work again, though. Fabio _______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
