If I compare a pure installation via apt-get install ca-certificates- java in Xenial (no upgrade involve) I see a behaviour change between the package currently in the archive and the one I have fix in a PPA.
-------------------------------- # Current ca-certificates-java (from archive) # It is installaing "openjdk-9-jre-headless" sudo apt-get install ca-certificates-java Reading package lists... Done Building dependency tree Reading state information... Done The following additional packages will be installed: java-common libavahi-client3 libavahi-common-data libavahi-common3 libcups2 libjpeg-turbo8 libjpeg8 liblcms2-2 libnspr4 libnss3 libnss3-nssdb libpcsclite1 libxi6 libxrender1 libxtst6 openjdk-9-jre-headless x11-common # ca-certificates-java fix to depend on openjdk-8 It is now installing "openjdk-8-jre-headless" sudo apt-get install ca-certificates-java Reading package lists... Done Building dependency tree Reading state information... Done The following additional packages will be installed: fontconfig-config fonts-dejavu-core java-common libavahi-client3 libavahi-common-data libavahi-common3 libcups2 libfontconfig1 libjpeg-turbo8 libjpeg8 liblcms2-2 libnspr4 libnss3 libnss3-nssdb libpcsclite1 libxi6 libxrender1 libxtst6 openjdk-8-jre-headless x11-common # rmadison openjdk-9-jre-headless --suite=xenial openjdk-9-jre-headless | 9~b114-0ubuntu1 | xenial/universe | amd64, i386 # rmadison openjdk-8-jre-headless --suite=xenial openjdk-8-jre-headless | 8u77-b03-3ubuntu3 | xenial | amd64, arm64, armhf, i386, powerpc, ppc64el, s390x -------------------------------- This might have an impact on user already having ca-certificates-java with openjdk-9 at next package upgrade. I consider that using the package found in main (openjdk-8) is IMHO a better approach than using the universe (openjdk-9), but while this may affect current ca-certificates-java user. I wonder if we should put the xenial package to depen on openjdk-9. I'll look with foundation team. - Eric -- You received this bug notification because you are a member of OpenJDK, which is subscribed to ca-certificates-java in Ubuntu. https://bugs.launchpad.net/bugs/1723198 Title: [SRU] upgrade from 14.04 to 16.04 fails with: ca-certificates 20170717~16.04.1 failed to install/upgrade: triggers looping, abandoned Status in ca-certificates-java package in Ubuntu: Fix Released Status in ca-certificates-java source package in Xenial: In Progress Status in ca-certificates-java source package in Zesty: In Progress Bug description: [Impact] ca-certificates-java currently depend on openjdk-7 which no longer exist after Trusty. It triggers failures while doing release upgrade, due to triggers loop. [Test Case] # Install Ubuntu server 14.04.5 + all the updates. (I used "uvt-kvm create trustylp1723198 release=trusty") sudo apt-get update sudo apt-get dist-upgrade # Install ca-certificates-java and man-db. sudo apt-get install ca-certificates-java man-db # Upgrade to 16.04 LTS. sudo do-release-upgrade # Error: .......................... Removing ca-certificates-java (20130815ubuntu1) ... Removing openjdk-7-jre-headless:amd64 (7u151-2.6.11-2ubuntu0.14.04.1) ... dpkg: cycle found while processing triggers: chain of packages whose triggers are or may be responsible: man-db -> ca-certificates packages' pending triggers which are or may be unresolvable: ca-certificates: update-ca-certificates man-db: /usr/share/man dpkg: error processing package ca-certificates (--remove): triggers looping, abandoned [Regression Potential] * Regression is low risk. Xenial and late doesn't have openjdk-7 available in the archive. It has openjdk-8. This will have the effect to make the release upgrade to work correctly when ca-certificates- java is installed. This patch has been already proven to work in Artful, Bionic and Debian upstream. * See Comment #16 [Other Info] * Debian bug : https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863803 * Debian commit: https://anonscm.debian.org/cgit/pkg-java/ca-certificates-java.git/commit/?id=0ddf3c9 [Original Description] Test Case: 1. Install Ubuntu server 14.04.5 + all the updates 2. Install ca-certificates-java and man-db 3. Reboot 4. Upgrade to 16.04 LTS with do-release-upgrade and proceed with the upgrade Actual Result Upgrade fails with Removing ca-certificates-java (20130815ubuntu1) ... Removing openjdk-7-jre-headless:amd64 (7u151-2.6.11-2ubuntu0.14.04.1) ... dpkg: cycle found while processing triggers: chain of packages whose triggers are or may be responsible: man-db -> ca-certificates packages' pending triggers which are or may be unresolvable: ca-certificates: update-ca-certificates man-db: /usr/share/man dpkg: error processing package ca-certificates (--remove): triggers looping, abandoned I have no further information to give at this time except to say that there were several errors during the upgrade process from 14.04. ProblemType: Package DistroRelease: Ubuntu 16.04 Package: ca-certificates 20170717~16.04.1 ProcVersionSignature: Ubuntu 4.4.0-97.120-generic 4.4.87 Uname: Linux 4.4.0-97-generic x86_64 NonfreeKernelModules: nvidia_modeset nvidia ApportVersion: 2.20.1-0ubuntu2.10 Architecture: amd64 Date: Thu Oct 12 17:52:19 2017 ErrorMessage: triggers looping, abandoned InstallationDate: Installed on 2013-11-16 (1425 days ago) InstallationMedia: Xubuntu 13.10 "Saucy Salamander" - Release amd64 (20131016) PackageArchitecture: all RelatedPackageVersions: dpkg 1.18.4ubuntu1.2 apt 1.2.24 SourcePackage: ca-certificates Title: package ca-certificates 20170717~16.04.1 failed to install/upgrade: triggers looping, abandoned UpgradeStatus: Upgraded to xenial on 2017-10-12 (0 days ago) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/1723198/+subscriptions _______________________________________________ Mailing list: https://launchpad.net/~openjdk Post to : openjdk@lists.launchpad.net Unsubscribe : https://launchpad.net/~openjdk More help : https://help.launchpad.net/ListHelp
