Bug#995928: acorn: doc directory shipped by both binaries

[Mattia Rizzolo]

Hi release team,

concerning this bug, I'd like to hear advice from you on how you'd best
like to see this fixed in stable.

The current bug causes trouble for reproducible builds operations
(basically, it throws away all build involving node-acorn in bullseye).

See the last paragraph on my thoughts about the potential solutions; I'm
happy to implement what you think would be best.


On Fri, Oct 08, 2021 at 12:07:36PM +0200, Mattia Rizzolo wrote:
> Source: acorn
> Version: 8.0.5+ds+~cs19.19.27-3
> Severity: serious
> Control: fixed -1 8.5.0+ds+~cs23.9.6-2
> 
> This happens in bullseye:
> 
> root at warren:/# apt install node-acorn
> ...
> The following NEW packages will be installed:
>   libbrotli1 libc-ares2 libicu67 libnghttp2-14 libnode72 libuv1 node-acorn node-debbundle-acorn node-xtend nodejs
> ...
> root at warren:/# apt install --reinstall node-debbundle-acorn
> ...
> (Reading database ... 12963 files and directories currently installed.)
> Preparing to unpack .../node-debbundle-acorn_8.0.5+ds+~cs19.19.27-3_all.deb ...
> Unpacking node-debbundle-acorn (8.0.5+ds+~cs19.19.27-3) over (8.0.5+ds+~cs19.19.27-3) ...
> (Noting disappearance of node-acorn, which has been completely replaced.)
> Setting up node-debbundle-acorn (8.0.5+ds+~cs19.19.27-3) ...
> The following package disappeared from your system as
> all files have been overwritten by other packages:
>   node-acorn
> Note: This is done automatically and on purpose by dpkg.
> 
> 
> This is due to node-acorn shipping /usr/share/doc/node-acorn (type:
> symlink) which is *also* shipping by node-debbundle-acorn (type:
> directory).
> dpkg seems to always overwrite the symlink anyway, but it doesn't detect
> that it's gone until later when reinstalling it.
> 
> 
> To be honest, I'm not sure what was the wanted situation, but I *think*
> the symlink is just wrong.  Looking at the content of the
> /usr/share/doc/node-acorn/ directory as present in node-debbundle-acorn,
> I think that is the appropriate content.  So, probably, the best fix is
> to just get rid of the symlink from node-acorn, however that would leave
> the package totally empty, which dpkg is not totally thrilled about.
> So more likely at least the 2 symlinks of copyright and
> changelog.Debian.gz in /usr/share/doc/node-acorn could be moved from
> node-debbundle-acorn to node-acorn, so effectively shipping the
> directory from both packages.
> 
> 
> 
> This is fixed in 8.5.0+ds+~cs23.9.6-2 by moving everything to node-acorn
> and turning node-debbundle-acorn into a pure transitional package.

-- 
regards,
                        Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540      .''`.
More about me:  https://mapreri.org                             : :'  :
Launchpad user: https://launchpad.net/~mapreri                  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-builds/attachments/20211012/5dff2246/attachment.sig>