Bug#1028796: libxml-security-java: FTBFS: [ERROR] Failed to execute goal on project xmlsec: Could not resolve dependencies for project org.apache.santuario:xmlsec:bundle:2.1.7: Cannot access central (https://repo.maven.apache.org/maven2) in offline mode and the artifact log4j:log4j:jar:1.2.x has not been downloaded from it before. -> [Help 1]

[Lucas Nussbaum]

Source: libxml-security-java
Version: 2.1.7-2
Severity: serious
Justification: FTBFS
Tags: bookworm sid ftbfs
User: lucas at debian.org
Usertags: ftbfs-20230113 ftbfs-bookworm

Hi,

During a rebuild of all packages in sid, your package failed to build
on amd64.


Relevant part (hopefully):
>  debian/rules build
> dh build --buildsystem=maven --with javahelper
>    dh_update_autotools_config -O--buildsystem=maven
>    dh_autoreconf -O--buildsystem=maven
>    dh_auto_configure -O--buildsystem=maven
> 	mh_patchpoms -plibxml-security-java --debian-build --keep-pom-version --maven-repo=/<<PKGBUILDDIR>>/debian/maven-repo
>    jh_linkjars -O--buildsystem=maven
>    dh_auto_build -O--buildsystem=maven
> 	/usr/lib/jvm/default-java/bin/java -noverify -cp /usr/share/maven/boot/plexus-classworlds-2.x.jar -Dmaven.home=/usr/share/maven -Dmaven.multiModuleProjectDirectory=/<<PKGBUILDDIR>> -Dclassworlds.conf=/etc/maven/m2-debian.conf -Dproperties.file.manual=/<<PKGBUILDDIR>>/debian/maven.properties org.codehaus.plexus.classworlds.launcher.Launcher -s/etc/maven/settings-debian.xml -Ddebian.dir=/<<PKGBUILDDIR>>/debian -Dmaven.repo.local=/<<PKGBUILDDIR>>/debian/maven-repo --batch-mode package javadoc:jar javadoc:aggregate -DskipTests -Dnotimestamp=true -Dlocale=en_US
> OpenJDK 64-Bit Server VM warning: Options -Xverify:none and -noverify were deprecated in JDK 13 and will likely be removed in a future release.
> [INFO] Scanning for projects...
> [INFO] 
> [INFO] --------------------< org.apache.santuario:xmlsec >---------------------
> [INFO] Building Apache XML Security for Java 2.1.7
> [INFO] -------------------------------[ bundle ]-------------------------------
> [WARNING] The POM for log4j:log4j:jar:1.2.x is missing, no dependency information available
> [WARNING] The artifact org.hamcrest:hamcrest-all:jar:debian has been relocated to org.hamcrest:hamcrest:jar:debian
> [INFO] 
> [INFO] ------------------------------------------------------------------------
> [INFO] Skipping Apache XML Security for Java
> [INFO] This project has been banned from the build due to previous failures.
> [INFO] ------------------------------------------------------------------------
> [INFO] ------------------------------------------------------------------------
> [INFO] BUILD FAILURE
> [INFO] ------------------------------------------------------------------------
> [INFO] Total time:  0.710 s
> [INFO] Finished at: 2023-01-13T20:18:54Z
> [INFO] ------------------------------------------------------------------------
> [ERROR] Failed to execute goal on project xmlsec: Could not resolve dependencies for project org.apache.santuario:xmlsec:bundle:2.1.7: Cannot access central (https://repo.maven.apache.org/maven2) in offline mode and the artifact log4j:log4j:jar:1.2.x has not been downloaded from it before. -> [Help 1]
> [ERROR] 
> [ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
> [ERROR] Re-run Maven using the -X switch to enable full debug logging.
> [ERROR] 
> [ERROR] For more information about the errors and possible solutions, please read the following articles:
> [ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/DependencyResolutionException
> dh_auto_build: error: /usr/lib/jvm/default-java/bin/java -noverify -cp /usr/share/maven/boot/plexus-classworlds-2.x.jar -Dmaven.home=/usr/share/maven -Dmaven.multiModuleProjectDirectory=/<<PKGBUILDDIR>> -Dclassworlds.conf=/etc/maven/m2-debian.conf -Dproperties.file.manual=/<<PKGBUILDDIR>>/debian/maven.properties org.codehaus.plexus.classworlds.launcher.Launcher -s/etc/maven/settings-debian.xml -Ddebian.dir=/<<PKGBUILDDIR>>/debian -Dmaven.repo.local=/<<PKGBUILDDIR>>/debian/maven-repo --batch-mode package javadoc:jar javadoc:aggregate -DskipTests -Dnotimestamp=true -Dlocale=en_US returned exit code 1
> make: *** [debian/rules:4: build] Error 25


The full build log is available from:
http://qa-logs.debian.net/2023/01/13/libxml-security-java_2.1.7-2_unstable.log

All bugs filed during this archive rebuild are listed at:
https://bugs.debian.org/cgi-bin/pkgreport.cgi?tag=ftbfs-20230113;users=lucas@debian.org
or:
https://udd.debian.org/bugs/?release=na&merged=ign&fnewerval=7&flastmodval=7&fusertag=only&fusertagtag=ftbfs-20230113&fusertaguser=lucas@debian.org&allbugs=1&cseverity=1&ctags=1&caffected=1#results

A list of current common problems and possible solutions is available at
http://wiki.debian.org/qa.debian.org/FTBFS . You're welcome to contribute!

If you reassign this bug to another package, please mark it as 'affects'-ing
this package. See https://www.debian.org/Bugs/server-control#affects

If you fail to reproduce this, please provide a build log and diff it with mine
so that we can identify if something relevant changed in the meantime.