Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(22.04/libnss3): libs should contain all libraries #382

Open
wants to merge 3 commits into
base: ubuntu-22.04
Choose a base branch
from

Conversation

rebornplusplus
Copy link
Member

This PR restructures the libnss3 slices. It renames the former libs slice to nss, to only include nss3-specific libraries. It also adds a new slice smime to include S/MIME libraries.

Finally, the libs slice is added back, which includes all of the slices that provide libraries. The rationale is that "libs" slices should contain all libraries coming from the package.

Note that the ca-certificates-java slice has also been updated to reflect this change.

Resolves #381

This commit restructures the libnss3 slices. It renames the former
"libs" slice to "nss", to only include nss3-specific libraries. It also
adds a new slice "smime" to include S/MIME libraries.

Finally, the "libs" slice is added back, which includes all of the
slices that provide libraries. The rationale is that "libs" slices
should contain all libraries coming from the package.

Note that the ca-certificates-java slice has also been updated to
reflect this change.

Resolves canonical#381
Copy link

github-actions bot commented Oct 24, 2024

Diff of dependencies:

slices/ca-certificates-java.yaml
@@ -1,4 +1,2 @@
 ca-certificates
-default-jre-headless
-java8-runtime-headless
 libnss3

slices/libnss3.yaml Outdated Show resolved Hide resolved
@rebornplusplus
Copy link
Member Author

@vpa1977, will you please take a look at this PR? I could not add you to the reviewers list up there on the top-right.

@vpa1977
Copy link

vpa1977 commented Oct 24, 2024

@vpa1977, will you please take a look at this PR? I could not add you to the reviewers list up there on the top-right.

I also can not add myself to reviewers.
sqlite3 comes as a dependency of /usr/lib/x86_64-linux-gnu/libsoftokn3.so and libnssutils are also required for it.

This is used in pkcs11 implementation of openjdk https://github.com/openjdk/jdk/blob/f0b130e54f33d3190640ce33c991e35f27e9f812/test/jdk/sun/security/tools/keytool/KeyToolTest.java#L38

I would suggest supplying the slice and adding a note in openjdk security slices.

@@ -23,6 +23,7 @@ slices:
essential:
- libc6_libs
- libnspr4_libs
- libsqlite3-0_libs
contents:
/usr/lib/*-linux-*/libnss3.so:
/usr/lib/*-linux-*/libnssutil3.so:
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We might want to add libsoftokn.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants