[Pkg-shadow-devel] Bug#837079: shadow: src:shadow FTBFS due to conflicting hardening-wrapper

[Johannes Schauer]

Source: shadow
Version: 1:4.2-3.1
Severity: serious
Justification: fails to build from source (but built successfully in the past)

Hi,

here part of my build log:

Installing build dependencies
Reading package lists...
Building dependency tree...
Reading state information...
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 sbuild-build-depends-shadow-dummy : Depends: hardening-wrapper but it is not going to be installed
E: Unable to correct problems, you have held broken packages.
apt-get failed.
E: Package installation failed


Dose3 gives a better explanation:

  package: shadow
  version: 1:4.2-3.1
  architecture: any
  type: src
  status: broken
  reasons:
   -
    conflict:
     pkg1:
      package: binutils
      version: 2.27-8
      architecture: amd64
      unsat-conflict: hardening-wrapper:amd64 (< 2.8+nmu3)
     pkg2:
      package: hardening-wrapper
      version: 2.8+nmu2
      architecture: amd64
     depchain1:
      -
       depchain:
        -
         package: shadow
         version: 1:4.2-3.1
         architecture: any
         type: src
         depends: hardening-wrapper:amd64
        -
         package: hardening-wrapper
         version: 2.8+nmu2
         architecture: amd64
         depends: binutils:amd64 (>= 2.25.90)
     depchain2:
      -
       depchain:
        -
         package: shadow
         version: 1:4.2-3.1
         architecture: any
         type: src
         depends: hardening-wrapper:amd64

So the problem is that binutils conflicts with hardening-wrapper and indeed:

Package: binutils
Version: 2.27-8
Breaks: [...], hardening-wrapper (<< 2.8+nmu3)

I don't know what the proper solution for this is but #836653 indicates
that you might want to drop the build-dependency on hardening-wrapper
completely.

Thanks!

cheers, josch