Bug#1149452: Reassigning to logback, which has missing classpath elements

[Pierre Gruet]

Hi Jérôme,

Thanks for looking into this issue, it is much appreciated! Also thanks 
for looking at libmina-sshd-java.

Le 15/10/2026 à 06:28, Jérôme Charaoui a écrit :
> 
> Hi Pierre,
> 
> I'm sorry to ping-pong this issue back to you, but this FTBFS problem is 
> not caused by a bug in the logback package.

I see it a bit differently. In my view, there is an issue with logback 
itself, as it was upgraded and this broke the build of rdeps.
Debian Java policy says "All jar files must have a well-documented 
CLASSPATH", which definitely makes sense as one expects the libs to come 
with their dependencies properly declared, as Debian policy 8.6 requires 
for C/C++ libs. In C/C++ shared objects the NEEDED attribute lists the 
other shared objects of which symbols are needed.
Moreover, requiring maintainers of (possibly multiple) rdeps of logback 
to work around an issue in logback itself doesn't seem ideal.

> 
> On Wed, 7 Oct 2026 17:21:04 +0200 Pierre Gruet <pgt at debian.org> wrote:
>> I am reassigning this bug to logback. Its jar files have no classpath 
>> entries, although they should (to import slf4j classes for instance).
> 
> I don't believe the proposed solution would solve the FTBFS.

It turns out that the proposed solution fixes the issue, and I plan to 
upload the package shortly.

> 
> What works is to add one line to debian/maven.rules in src:libmina-sshd- 
> java (see attached patch) to have Maven to load slf4j 2.x on its 
> classpath and allow the build to succeed. This is sufficient to fix the 
> FTBFS.
> 
> I also suggest modifications to debian/libmina-sshd-java.classpath to 
> ensure the correct version of slf4j is present on the classpath when the 
> program is launched using "java -jar".
> 
>> This is affecting the build of libmina-sshd-java, but also the 
>> autopktest of trapperkeeper-clojure/5.0.6-1, preventing migration of 
>> logback to testing.Although it builds with Leiningen rather than 
>> Maven, the issue with 
> trapperkeeper-clojure was similar and was also fixed in the latest 
> release with a patch fixing the build environment.
> 
> BTW I tried building src:libmina-sshd-java from Salsa sources with git- 
> buildpackage but it didn't work: gbp export-orig failed with errors from 
> pristine-tar when it attempted to generate the orig tarball.

You're right, something was messed up with the last orig import... I 
plan to upgrade libmina-sshd-java soon and that will solve this.

> 
> Thanks,
> 
> -- Jérôme

All the best,

-- 
Pierre
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20261017/ecedf4e1/attachment.sig>