pure packaging of libnss3

Bug #1908818 reported by Sergey Ivanov
62
This bug affects 8 people
Affects Status Importance Assigned to Milestone
nss (Ubuntu)
Fix Released
Undecided
Unassigned
Groovy
Fix Released
Undecided
Christian Ehrhardt 
Hirsute
Fix Released
Undecided
Unassigned

Bug Description

[Impact]

 * A packaging error in the current version has led library symlinks
   to be broken and in the wrong place.

 * Fix by applying the later change to Groovy as well

[Test Plan]

 * install libnss3
 * check (path depends on the architecture) the lib links
   $ dpkg -L libnss3 | grep MULTIARCH
   # ^^ should be empty
   $ ll /usr/lib/x86_64-linux-gnu/libfreebl3.so
   # vv should look like that:

lrwxrwxrwx 1 root root 17 Feb 16 15:18 /usr/lib/x86_64-linux-gnu/libfreebl3.so -> nss/libfreebl3.so
root@h:~# ll /usr/lib/x86_64-linux-gnu/libfreebl*
lrwxrwxrwx 1 root root 18 Feb 16 15:18 /usr/lib/x86_64-linux-gnu/libfreebl3.chk -> nss/libfreebl3.chk
lrwxrwxrwx 1 root root 17 Feb 16 15:18 /usr/lib/x86_64-linux-gnu/libfreebl3.so -> nss/libfreebl3.so
lrwxrwxrwx 1 root root 22 Feb 16 15:18 /usr/lib/x86_64-linux-gnu/libfreeblpriv3.chk -> nss/libfreeblpriv3.chk
lrwxrwxrwx 1 root root 21 Feb 16 15:18 /usr/lib/x86_64-linux-gnu/libfreeblpriv3.so -> nss/libfreeblpriv3.so

[Where problems could occur]

 * I first was afraid, that no matter how bad the paths would
   have been we'd need to retain them for anyone using them
   already. But the existing links go into nowhere since they
   are relative therefore the regression risk should be minimal

root@g:~# ll '/usr/lib/${DEB_HOST_MULTIARCH}/libfreebl3.so' '/usr/lib/${DEB_HOST_MULTIARCH}/libfreeblpriv3.so' '/usr/lib/${DEB_HOST_MULTIARCH}/libfreebl3.chk' '/usr/lib/${DEB_HOST_MULTIARCH}/libfreeblpriv3.chk'
lrwxrwxrwx 1 root root 18 Sep 29 2020 '/usr/lib/${DEB_HOST_MULTIARCH}/libfreebl3.chk' -> nss/libfreebl3.chk
lrwxrwxrwx 1 root root 17 Sep 29 2020 '/usr/lib/${DEB_HOST_MULTIARCH}/libfreebl3.so' -> nss/libfreebl3.so
lrwxrwxrwx 1 root root 22 Sep 29 2020 '/usr/lib/${DEB_HOST_MULTIARCH}/libfreeblpriv3.chk' -> nss/libfreeblpriv3.chk
lrwxrwxrwx 1 root root 21 Sep 29 2020 '/usr/lib/${DEB_HOST_MULTIARCH}/libfreeblpriv3.so' -> nss/libfreeblpriv3.so

 * never the less, to be clear - if problems occur they would be in
   loading these libraries. E.g. a user could have had this package
   and a self built nss on his system, after the change it might load the
   packaged one.

[Other Info]

 * n/a

---

dpkg -L libnss3
/.
/usr
/usr/lib
/usr/lib/${DEB_HOST_MULTIARCH}
/usr/lib/x86_64-linux-gnu
/usr/lib/x86_64-linux-gnu/libnss3.so
/usr/lib/x86_64-linux-gnu/libnssutil3.so
/usr/lib/x86_64-linux-gnu/libsmime3.so
/usr/lib/x86_64-linux-gnu/libssl3.so
/usr/lib/x86_64-linux-gnu/nss
/usr/lib/x86_64-linux-gnu/nss/libfreebl3.chk
/usr/lib/x86_64-linux-gnu/nss/libfreebl3.so
/usr/lib/x86_64-linux-gnu/nss/libfreeblpriv3.chk
/usr/lib/x86_64-linux-gnu/nss/libfreeblpriv3.so
/usr/lib/x86_64-linux-gnu/nss/libnssckbi.so
/usr/lib/x86_64-linux-gnu/nss/libnssdbm3.chk
/usr/lib/x86_64-linux-gnu/nss/libnssdbm3.so
/usr/lib/x86_64-linux-gnu/nss/libsoftokn3.chk
/usr/lib/x86_64-linux-gnu/nss/libsoftokn3.so
/usr/share
/usr/share/doc
/usr/share/doc/libnss3
/usr/share/doc/libnss3/changelog.Debian.gz
/usr/share/doc/libnss3/copyright
/usr/share/lintian
/usr/share/lintian/overrides
/usr/share/lintian/overrides/libnss3
/usr/lib/${DEB_HOST_MULTIARCH}/libfreebl3.chk
/usr/lib/${DEB_HOST_MULTIARCH}/libfreebl3.so
/usr/lib/${DEB_HOST_MULTIARCH}/libfreeblpriv3.chk

as we can see soft links to libraries do nor resolve ${DEB_HOST_MULTIARCH} to x86_64-linux-gnu

ProblemType: Bug
DistroRelease: Ubuntu 20.10
Package: libnss3 2:3.55-1ubuntu3
ProcVersionSignature: Ubuntu 5.8.0-33.36-generic 5.8.17
Uname: Linux 5.8.0-33-generic x86_64
NonfreeKernelModules: nvidia_modeset nvidia
ApportVersion: 2.20.11-0ubuntu50.3
Architecture: amd64
CasperMD5CheckResult: skip
Date: Sun Dec 20 14:36:10 2020
SourcePackage: nss
UpgradeStatus: No upgrade log present (probably fresh install)

Related branches

Revision history for this message
Sergey Ivanov (icegood1980) wrote :
Revision history for this message
Hans Joachim Desserud (hjd) wrote :

Confirmed based on https://packages.ubuntu.com/groovy/amd64/libnss3/filelist

(Seems to have been fixed on Hirsute, though I don't know exactly how...)

Changed in nss (Ubuntu):
status: New → Confirmed
Revision history for this message
Lucas Kanashiro (lucaskanashiro) wrote :

Thanks for taking the time to report this bug and try to make Ubuntu better.

I have checked and this is happening just in Groovy. I am subscribing ubuntu-server for further investigation.

Changed in nss (Ubuntu Groovy):
status: New → Triaged
Changed in nss (Ubuntu):
status: Confirmed → Fix Released
Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

That should be this fix:
https://git.launchpad.net/ubuntu/+source/nss/commit/?h=applied/2%253.55-1ubuntu4&id=c17f28c15519fb4834860c021c078c6ea0d8ab50

Since this is kind of a patch-on-a-plate I'm marking it server-next.

tags: added: server-next
Revision history for this message
Alex Murray (alexmurray) wrote :

@paelzer - we just got another duplicate of this filed for nss in groovy - is the server team working on a fix for this for groovy?

Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

Hi Alex,
this was still in the "needs an owner" queue :-/
I guess it is time to tackle this, thanks for the ping.

Changed in nss (Ubuntu Groovy):
assignee: nobody → Christian Ehrhardt  (paelzer)
Revision history for this message
Christian Ehrhardt  (paelzer) wrote :
description: updated
Changed in nss (Ubuntu Groovy):
status: Triaged → In Progress
Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

MP review complete and the build logs LGTM:

lrwxrwxrwx root/root 0 2021-04-06 10:10 ./usr/lib/s390x-linux-gnu/libfreebl3.so -> nss/libfreebl3.so
lrwxrwxrwx root/root 0 2021-04-06 10:10 ./usr/lib/i386-linux-gnu/libfreebl3.so -> nss/libfreebl3.so
lrwxrwxrwx root/root 0 2021-04-06 10:10 ./usr/lib/riscv64-linux-gnu/libfreebl3.so -> nss/libfreebl3.so

Uploading ...

Revision history for this message
Robie Basak (racb) wrote : Please test proposed package

Hello Sergey, or anyone else affected,

Accepted nss into groovy-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/nss/2:3.55-1ubuntu3.1 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, what testing has been performed on the package and change the tag from verification-needed-groovy to verification-done-groovy. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed-groovy. In either case, without details of your testing we will not be able to proceed.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance for helping!

N.B. The updated package will be released to -updates after the bug(s) fixed by this package have been verified and the package has been in -proposed for a minimum of 7 days.

Changed in nss (Ubuntu Groovy):
status: In Progress → Fix Committed
tags: added: verification-needed verification-needed-groovy
Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

From the build logs, now things are fine:
examples:

s390x
https://launchpadlibrarian.net/532307917/buildlog_ubuntu-groovy-s390x.nss_2%3A3.55-1ubuntu3.1_BUILDING.txt.gz
lrwxrwxrwx root/root 0 2021-04-06 10:10 ./usr/lib/s390x-linux-gnu/libfreebl3.chk -> nss/libfreebl3.chk
lrwxrwxrwx root/root 0 2021-04-06 10:10 ./usr/lib/s390x-linux-gnu/libfreebl3.so -> nss/libfreebl3.so
lrwxrwxrwx root/root 0 2021-04-06 10:10 ./usr/lib/s390x-linux-gnu/libfreeblpriv3.chk -> nss/libfreeblpriv3.chk
lrwxrwxrwx root/root 0 2021-04-06 10:10 ./usr/lib/s390x-linux-gnu/libfreeblpriv3.so -> nss/libfreeblpriv3.so

amd64
https://launchpadlibrarian.net/532311612/buildlog_ubuntu-groovy-amd64.nss_2%3A3.55-1ubuntu3.1_BUILDING.txt.gz
lrwxrwxrwx root/root 0 2021-04-06 10:10 ./usr/lib/x86_64-linux-gnu/libfreebl3.chk -> nss/libfreebl3.chk
lrwxrwxrwx root/root 0 2021-04-06 10:10 ./usr/lib/x86_64-linux-gnu/libfreebl3.so -> nss/libfreebl3.so
lrwxrwxrwx root/root 0 2021-04-06 10:10 ./usr/lib/x86_64-linux-gnu/libfreeblpriv3.chk -> nss/libfreeblpriv3.chk
lrwxrwxrwx root/root 0 2021-04-06 10:10 ./usr/lib/x86_64-linux-gnu/libfreeblpriv3.so -> nss/libfreeblpriv3.so

For that we can set verification-done

But there was a build issue (timeout) on riscv64 which didn't happen on the same build in a PPA the day before. For now I've re-started the build but if it persists I'll have to look into it more deeply.

tags: added: verification-done verification-done-groovy
removed: verification-needed verification-needed-groovy
Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

And finally after some fixups in the builders (thanks cjwatson!) https://launchpad.net/ubuntu/+source/nss/2:3.55-1ubuntu3.1 also has built riscv64.
All ready now

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package nss - 2:3.55-1ubuntu3.1

---------------
nss (2:3.55-1ubuntu3.1) groovy; urgency=medium

  * d/libnss3.links: Chmod +x d/libnss3.links, otherwise dh-exec can't do
    the right job in substituting DEB_HOST_MULTIARCH (LP: #1908818)

 -- Christian Ehrhardt <email address hidden> Tue, 06 Apr 2021 12:10:12 +0200

Changed in nss (Ubuntu Groovy):
status: Fix Committed → Fix Released
Revision history for this message
Łukasz Zemczak (sil2100) wrote : Update Released

The verification of the Stable Release Update for nss has completed successfully and the package is now being released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.