Bug#798255: erlang-cl: installs non-free packages

[Stepan Golosunov]

Package: erlang-cl
Version: 1.2.1-2
Severity: important

Installation of erlang-cl pulls in non-free fglrx and nvidia packages:

% apt -s install erlang-cl
NOTE: This is only a simulation!
  apt-get needs root privileges for real execution.
  Keep also in mind that locking is deactivated,
  so don't depend on the relevance to the real current situation!
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following extra packages will be installed:
  amd-libopencl1 erlang-base erlang-crypto erlang-syntax-tools
glx-alternative-mesa glx-alternative-nvidia glx-diversions
  libnvidia-compiler libsctp1 lksctp-tools nvidia-alternative
nvidia-installer-cleanup nvidia-modprobe nvidia-opencl-common
  nvidia-opencl-icd
Suggested packages:
  erlang-tools erlang erlang-manpages erlang-doc libgl1-mesa-glx libgl1
nvidia-driver libcuda1
Recommended packages:
  amd-opencl-icd opencl-icd
The following NEW packages will be installed:
  amd-libopencl1 erlang-base erlang-cl erlang-crypto erlang-syntax-tools
glx-alternative-mesa glx-alternative-nvidia
  glx-diversions libnvidia-compiler libsctp1 lksctp-tools
nvidia-alternative nvidia-installer-cleanup nvidia-modprobe
  nvidia-opencl-common nvidia-opencl-icd
0 upgraded, 16 newly installed, 0 to remove and 0 not upgraded.


Even with --no-install-recommends it pulls amd-opencl-icd:

% apt -s --no-install-recommends install erlang-cl
NOTE: This is only a simulation!
  apt-get needs root privileges for real execution.
  Keep also in mind that locking is deactivated,
  so don't depend on the relevance to the real current situation!
Reading package lists... Done
Building dependency tree   
Reading state information... Done
The following extra packages will be installed:
  amd-libopencl1 erlang-base
Suggested packages:
  erlang-tools erlang erlang-manpages erlang-doc
Recommended packages:
  amd-opencl-icd opencl-icd libsctp1 erlang-crypto erlang-syntax-tools
The following NEW packages will be installed:
  amd-libopencl1 erlang-base erlang-cl
0 upgraded, 3 newly installed, 0 to remove and 0 not upgraded.
Inst amd-libopencl1 (1:14.9+ga14.201-2 Debian:8.2/stable [i386])
Inst erlang-base (1:17.3-dfsg-4 Debian:8.2/stable [i386])
Inst erlang-cl (1.2.1-2 Debian:8.2/stable [i386])
Conf amd-libopencl1 (1:14.9+ga14.201-2 Debian:8.2/stable [i386])
Conf erlang-base (1:17.3-dfsg-4 Debian:8.2/stable [i386])
Conf erlang-cl (1.2.1-2 Debian:8.2/stable [i386])


Manual installation of ocl-icd-libopencl1 allows to avoid the issue:

% apt -s install erlang-cl ocl-icd-libopencl1 
NOTE: This is only a simulation!
  apt-get needs root privileges for real execution.
  Keep also in mind that locking is deactivated,
  so don't depend on the relevance to the real current situation!
Reading package lists... Done
Building dependency tree   
Reading state information... Done
The following extra packages will be installed:
  erlang-base erlang-crypto erlang-syntax-tools libsctp1 lksctp-tools
Suggested packages:
  erlang-tools erlang erlang-manpages erlang-doc opencl-icd
The following NEW packages will be installed:
  erlang-base erlang-cl erlang-crypto erlang-syntax-tools libsctp1
lksctp-tools ocl-icd-libopencl1
0 upgraded, 7 newly installed, 0 to remove and 0 not upgraded.



Probably ocl-icd-libopencl1 should be listed as a first alternative
either in all libopencl* dependencies or in the first one. Currently
it is listed only in the last one:

% apt-cache show erlang-cl|grep ^Depends: 
Depends: erlang-base (>= 1:17.0-dfsg) | erlang-base-hipe (>=
1:17.0-dfsg), libc6 (>= 2.4), libopencl-1.1-1, libopencl-1.2-1,
ocl-icd-libopencl1 (>= 1.0) | libopencl1



-- System Information:
Debian Release: 8.2
  APT prefers stable-updates
  APT policy: (900, 'stable-updates'), (900, 'stable')
Architecture: i386 (i686)

Kernel: Linux 3.16.0-4-686-pae (SMP w/1 CPU core)
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Bug#798255: [Pkg-erlang-devel] Bug#798255: erlang-cl: installs non-free packages

[Sergei Golovan]

tags 798255 + moreinfo
thanks

Hi Stepan!

On Mon, Sep 7, 2015 at 2:25 PM, Stepan Golosunov  wrote:
>
> Installation of erlang-cl pulls in non-free fglrx and nvidia packages:

Well, if you'll look into the erlang-cl dependencies in the source
file, you'll find the following:

Depends: ${erlang:Depends}, ${misc:Depends}, ${shlibs:Depends}

This means that if this behavior is indeed a bug then it's likely not
a bug in erlang-cl. It just
takes the dependencies from shlibs.

On the other hand, you have the non-free repository enables, so why do
you expect APT
not to install packages available from there? If you don't want them
then switch off the repository.

Anyway, I don't think that it's a bug in erlang-cl.

Cheers!
-- 
Sergei Golovan

Bug#798255: [Pkg-erlang-devel] Bug#798255: erlang-cl: installs non-free packages

[Stepan Golosunov]

Control: tags -1 - moreinfo

On Mon, Sep 07, 2015 at 03:19:27PM +0300, Sergei Golovan wrote:
> tags 798255 + moreinfo
> thanks
> 
> Hi Stepan!
> 
> On Mon, Sep 7, 2015 at 2:25 PM, Stepan Golosunov  
> wrote:
> >
> > Installation of erlang-cl pulls in non-free fglrx and nvidia packages:
> 
> Well, if you'll look into the erlang-cl dependencies in the source
> file, you'll find the following:
> 
> Depends: ${erlang:Depends}, ${misc:Depends}, ${shlibs:Depends}
> 
> This means that if this behavior is indeed a bug then it's likely not
> a bug in erlang-cl. It just
> takes the dependencies from shlibs.

Looks like this is caused by
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739409
which is supposed to be fixed in ocl-icd-libopencl1 2.1.3-5
while erlang-cl 1.2.1-2 was build with 2.1.3-4.

> On the other hand, you have the non-free repository enables, so why do
> you expect APT
> not to install packages available from there? If you don't want them
> then switch off the repository.

Debian Social Contract says
"We will never make the system require the use of a non-free component."
And I asked apt to install a package from Debian, not non-free.

> Anyway, I don't think that it's a bug in erlang-cl.

erlang-cl still needs to be rebuilt (probably with bin-nmu in stable)
in order for this bug to be fixed.

Bug#798255: [Pkg-erlang-devel] Bug#798255: erlang-cl: installs non-free packages

[Sergei Golovan]

severity 798255 normal
thanks

Hi Stepan,

On Mon, Sep 7, 2015 at 6:12 PM, Stepan Golosunov  wrote:
>
> Looks like this is caused by
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739409
> which is supposed to be fixed in ocl-icd-libopencl1 2.1.3-5
> while erlang-cl 1.2.1-2 was build with 2.1.3-4.

I see. I'll fix this bug on the next upload, but I don't think that
it's worth updating it in stable. Thus the severity downgrade to
normal.

>
>> On the other hand, you have the non-free repository enables, so why do
>> you expect APT
>> not to install packages available from there? If you don't want them
>> then switch off the repository.
>
> Debian Social Contract says
> "We will never make the system require the use of a non-free component."
> And I asked apt to install a package from Debian, not non-free.

After you've added the non-free repository to your sources.list you
can't say that, sorry. Non-free repository is not a part of Debian,
but APT by default happily installs non-free packages. You can pin
different priorities to different components (main, contrib, non-free)
but I never tried that and can't say if it works.

>
>> Anyway, I don't think that it's a bug in erlang-cl.
>
> erlang-cl still needs to be rebuilt (probably with bin-nmu in stable)
> in order for this bug to be fixed.

You're correct. It'd be better to rebuild the package, but not in stable.

Cheers!
-- 
Sergei Golovan

Bug#798255: [Pkg-erlang-devel] Bug#798255: erlang-cl: installs non-free packages

[Stepan Golosunov]

07.09.2015 в 20:10:31 +0300 Sergei Golovan написал:
> On Mon, Sep 7, 2015 at 6:12 PM, Stepan Golosunov  
> wrote:
> >> On the other hand, you have the non-free repository enables, so why do
> >> you expect APT
> >> not to install packages available from there? If you don't want them
> >> then switch off the repository.
> >
> > Debian Social Contract says
> > "We will never make the system require the use of a non-free component."
> > And I asked apt to install a package from Debian, not non-free.
> 
> After you've added the non-free repository to your sources.list you
> can't say that, sorry. Non-free repository is not a part of Debian,
> but APT by default happily installs non-free packages. You can pin
> different priorities to different components (main, contrib, non-free)
> but I never tried that and can't say if it works.

Presence of non-free component in sources.list does not void social
contract. And any case when installation of a package from main
results in installation of a package from non-free (or contrib)
is definitly a bug. (And in many of these cases a release-critical
bug.)

Bug#798255: [Pkg-erlang-devel] Bug#798255: Bug#798255: erlang-cl: installs non-free packages

[Sergei Golovan]

Hi Stepan,

On Tue, Sep 8, 2015 at 6:41 AM, Stepan Golosunov  wrote:
>
> Presence of non-free component in sources.list does not void social
> contract. And any case when installation of a package from main
> results in installation of a package from non-free (or contrib)
> is definitly a bug. (And in many of these cases a release-critical
> bug.)

Nobody forces you to install non-free packages when you're installing
erlang-cl. It's just unfortunate coincidence that amd-libopencl1 pulls
first among the packages which provide libopencl-1.1-1. Just install
ocl-icd-libopencl1 first, and after that erlang-cl will happily
install without any attempt to fetch non-free package. I believe that
our social contract is safe.

Cheers!
-- 
Sergei Golovan