• Bug#1101532: systemd: unable to migrate to Testing because of removed p

    From =?UTF-8?Q?Jeremy_B=C3=ADcha?=@21:1/5 to All on Fri Mar 28 23:40:02 2025
    Source: systemd
    Version: 257.4-5
    Severity: serious
    X-Debbugs-CC: debian-release@lists.debian.org

    systemd is unable to migrate to Testing because it abruptly dropped
    these packages:
    - libnss-resolve
    - systemd-resolved

    which are dependencies of debian-cloud-images and openvpn-systemd-resolved.
    See https://qa.debian.org/excuses.php?package=systemd

    It is also used by netplan.io's autopkgests. The systemd upload
    triggered the failure of that autopkgtest which is also blocking
    migration to Testing.

    Please try to find a less disruptive way to handle the resolved situation.

    Thank you,
    Jeremy Bícha

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Luca Boccassi@21:1/5 to Noah Meyerhans on Tue Apr 1 23:10:02 2025
    On Tue, 1 Apr 2025 at 19:50, Noah Meyerhans <noahm@debian.org> wrote:

    On Tue, Apr 01, 2025 at 07:06:38PM +0100, Luca Boccassi wrote:
    Do the cloud images use avahi at all? Assuming I'm looking at the right manifest:

    https://cdimage.debian.org/images/cloud/trixie/daily/20250324-2061/debian-13-generic-amd64-daily-20250324-2061.json

    No, in fact most cloud environments don't support multicast networking
    at all, so disabling it is entirely safe.

    it seems not, so how about this: I'll take a personal risk and we can
    try once more with the pkg conflict. I'll reinstate the package, with
    an added "Conflicts: avahi-daemon" so that users have to choose one or
    the other, and avahi is the default so it always wins unless someone
    has very specific and customized use cases like yours.

    That works for me.

    If everything goes fine, then all good. If instead the TC escalates
    again to DAM, then I'll remove the package again, and work to find an alternative that you can use with networkd in the cloud images, and try
    and find time to implement it.

    How does this sound?

    Well, we obviously would prefer to find a solution that doesn't involve removing networkd altogether, should it come to that, but I'd hope we
    don't get to that point.

    LOL, he already escalated, not even had time to rinse the changes
    through the CI and he already got them to send a warning. Guess he had
    the complaint ready to send to DAM in the draft folder.

    That answers the question of whether it's safe to add back resolved
    then - you mentioned you don't need the stub resolver, but just
    something to manage dhcp -> networkd -> resolve.conf, right? I think I
    can cook something up, I'll get on that next, who needs sleep anyway

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Luca Boccassi@21:1/5 to Noah Meyerhans on Tue Apr 1 23:20:01 2025
    On Tue, 1 Apr 2025 at 22:07, Noah Meyerhans <noahm@debian.org> wrote:

    On Tue, Apr 01, 2025 at 08:59:44PM +0000, Luca Boccassi wrote:
    Do the cloud images use avahi at all? Assuming I'm looking at the right manifest:

    https://cdimage.debian.org/images/cloud/trixie/daily/20250324-2061/debian-13-generic-amd64-daily-20250324-2061.json

    No, in fact most cloud environments don't support multicast networking
    at all, so disabling it is entirely safe.

    it seems not, so how about this: I'll take a personal risk and we can try once more with the pkg conflict. I'll reinstate the package, with an added "Conflicts: avahi-daemon" so that users have to choose one or the other, and avahi is the default so it always wins unless someone has very specific and customized use cases like yours.

    That works for me.

    If everything goes fine, then all good. If instead the TC escalates again to DAM, then I'll remove the package again, and work to find an alternative that you can use with networkd in the cloud images, and try and find time to implement it.

    How does this sound?

    Well, we obviously would prefer to find a solution that doesn't involve removing networkd altogether, should it come to that, but I'd hope we don't get to that point.

    LOL, he already escalated, not even had time to rinse the changes
    through the CI and he already got them to send a warning. Guess he had
    the complaint ready to send to DAM in the draft folder.

    That answers the question of whether it's safe to add back resolved
    then - you mentioned you don't need the stub resolver, but just
    something to manage dhcp -> networkd -> resolve.conf, right? I think I
    can cook something up, I'll get on that next, who needs sleep anyway

    Please let's not get ahead of ourselves. I think Stefano was simply
    pointing out something that had happned in the past, not any new DAM involvement.

    Sorry I should have been clearer: when I said warning, I literally
    meant it, and I was not talking about Stefano. An hour after sending
    the previous message, and while I was already working to add the
    package back (proof: https://salsa.debian.org/bluca/systemd/-/commit/5067878f3a691fb7a1dd1df30ca9c78935c50479
    ), this loveliness popped up in my inbox:

    date: 1 Apr 2025, 21:46
    subject: DAM warning for continuing to ignore Technical Committee decisions

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Raphael Hertzog@21:1/5 to Luca Boccassi on Tue Apr 1 23:40:01 2025
    Hi,

    On Tue, 01 Apr 2025, Luca Boccassi wrote:
    We don't care. Nobody wants to see systemd-resolved removed from Debian.

    Excuse me, but could you please clarify who is "we" in this statement?
    Are you speaking for the Release Team here?

    No, I'm not part of the release team. But besides you, I have seen no
    other DD that was asking for the removal of systemd-resolved (including
    nobody in the tech-ctte).

    So while I can't officially speak for the vast majority of DD, and while
    that "we" was meant as "we the Debian project", I wanted you to realize
    that it were to come to a GR, the vast majority of DD would prefer to keep systemd-resolved (with or without the patch that you are objecting to)
    over removing it from the archive.

    Cheers,
    --
    ⢀⣴⠾⠻⢶⣦⠀ Raphaël Hertzog <hertzog@debian.org>
    ⣾⠁⢠⠒⠀⣿⡁
    ⢿⡄⠘⠷⠚⠋ The Debian Handbook: https://debian-handbook.info/get/
    ⠈⠳⣄⠀⠀⠀⠀ Debian Long Term Support: https://deb.li/LTS

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Stefano Rivera@21:1/5 to All on Wed Apr 2 01:50:01 2025
    Hi Luca (2025.04.01_22:32:45_+0000)

    I don't think getting into the timeline nitty gritty is the most
    productive thing we can do, but let me give you the context that you're missing. Skip over this part of my email, if you want to get onto
    productive bits.

    - Mar 4 11:58: TC is asked to open MRs, not do NMUs

    I think you mean March 14.

    I know that some TC members had some personal contact with you, but I
    don't have any email from you sent on that date. I have seen a message
    you sent Matthew (our chair) on March 14, that says that you will not
    accept NMUs.

    However, I don't think it's really OK for any project members to say
    that their packages are not NMUable. NMUs are always an option available
    to the project when package maintainers are MIA and something needs to
    be done. I imagine the rest of the project thinks similarly.

    As a committee member, I never want to have to rule to override a
    package maintainer. That's a heavy responsibility, and not a great
    option to have to take. If the package maintainer doesn't accept the
    ruling, then the project is having to lose the maintainer. But in this
    case, the options in front of the committee were ruling to override one
    or another set of package maintainers, that's where we found ourselves.

    When you think about the TC rulings in that context, a refusal to accept
    an NMU to implement the TC ruling reads as an unwillingness to allow the
    TC to overrule the maintainer.

    How else are we going to get a TC ruling implemented, when overriding a maintainer. We can't expect them to do the work themselves, and we can't
    expect them to approve of the changes in code review. That's going to
    blow up (like this did).

    I'm afraid our constitution doesn't allow leeway here. These are
    situations that get DAM involved.

    - Mar 27 22:32: TC escalates to DAM

    That timestamp is when DAM contacted you, not when the matter was
    escalated to them. That had come a day and a half earlier, impressively
    quick action, if you ask me. The decision to make that escalation
    had come from discussion over the previous several days.

    The discussions we were having in the MR were in parallel to this
    escalation process. Obviously, if we'd been making progress in the MR,
    DAM may have stood back, or we may have paused the escalation process a
    little longer. But the wheels were in motion as soon as the NMU was
    cancelled (and comments were posted in the MR that made it clear that
    the changes in the NMU weren't acceptable to you).

    I reached out to you on IRC when I could see that this process was
    getting under way and I was looking for a way to de-escalate. It was a
    long shot, but sadly we didn't get there. I think it was interpreted as
    a threat, instead.

    - Apr 1 21:46: TC escalates to DAM

    There was no second escalation. I think that was just DAM cogs turning.
    They issued a warning today.


    Let's try to get back onto productive threads of discussion:

    Speaking for myself, but I imagine the rest of the committee thinks
    similarly, we did not want to see the removal of systemd-resolved or systemd-nspawn. These options were never even on the table to vote,
    as nobody requested them. They're radical and seem reactionary, I'm
    assuming we'll be able to find a better way.

    From my PoV the patches Helmut posted still seem like the most
    reasonable solution to the issues at hand, but if there are better
    options that weren't considered, we can consider them. The constitution
    doesn't (to my reading) block us from taking a second bite at a problem,
    *but* that's going to be an exceptional process. There'd have to be some significant change in the problem space to make that happen.

    I don't think it's OK for maintainers who have been overridden by the TC
    to blackmail the project into forcing TC decisions to be overturned (or
    DAM to remove the maintainer).

    Bad TC decisions can be overridden by GR (wit ha high cost in process).

    And you can work with the TC to help find a workable solution. Really,
    that should have happened before we voted, but better late than never.

    We're here, and we can discuss options forward.

    I think Helmut's proposed patches are worth considering seriously. I
    know you don't, but I don't know exactly why. Explaining your reasoning
    would *really* help us to understand your position.

    Stefano

    --
    Stefano Rivera
    http://tumbleweed.org.za/
    +1 415 683 3272

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Luca Boccassi@21:1/5 to All on Wed Apr 2 02:10:01 2025
    Control: tag -1 pending

    Hello,

    Bug #1101532 in systemd reported by you has been fixed in the
    Git repository and is awaiting an upload. You can see the commit
    message below and you can check the diff of the fix at:

    https://salsa.debian.org/systemd-team/systemd/-/commit/5067878f3a691fb7a1dd1df30ca9c78935c50479

    ------------------------------------------------------------------------ reintroduce systemd-resolved, with conflict on avahi-daemon

    It turns out the cloud images have a hard dependency on resolved.
    In order to avoid having to change them, reintroduce the package,
    with a hard conflict on avahi-daemon to avoid reintroducing #1098914

    Closes: #1101532 ------------------------------------------------------------------------

    (this message was generated automatically)
    --
    Greetings

    https://bugs.debian.org/1101532

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Debian Bug Tracking System@21:1/5 to All on Wed Apr 2 02:10:01 2025
    Processing control commands:

    tag -1 pending
    Bug #1101532 [src:systemd] systemd: unable to migrate to Testing because of removed packages
    Bug #1101762 [src:systemd] systemd - uncoordinated removal of systemd-resolved Bug #1101875 [src:systemd] systemd-resolved: Unable to satisfy dependencies, none of the choices are installable
    Added tag(s) pending.
    Added tag(s) pending.
    Added tag(s) pending.

    --
    1101532: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1101532
    1101762: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1101762
    1101875: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1101875
    Debian Bug Tracking System
    Contact owner@bugs.debian.org with problems

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Debian Bug Tracking System@21:1/5 to All on Wed Apr 2 02:30:02 2025
    This is a multi-part message in MIME format...

    Your message dated Wed, 02 Apr 2025 00:21:33 +0000
    with message-id <E1tzlrJ-007Nd1-94@fasolo.debian.org>
    and subject line Bug#1101532: fixed in systemd 257.4-8
    has caused the Debian Bug report #1101532,
    regarding systemd: unable to migrate to Testing because of removed packages
    to be marked as done.

    This means that you claim that the problem has been dealt with.
    If this is not the case it is now your responsibility to reopen the
    Bug report if necessary, and/or fix the problem forthwith.

    (NB: If you are a system administrator and have no idea what this
    message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org
    immediately.)


    --
    1101532: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1101532
    Debian Bug Tracking System
    Contact owner@bugs.debian.org with problems

    Received: (at submit) by bugs.debian.org; 28 Mar 2025 22:36:23 +0000 X-Spam-Checker-Version: SpamAssassin 3.4.6-bugs.debian.org_2005_01_02
    (2021-04-09) on buxtehude.debian.org
    X-Spam-Level:
    X-Spam-Status: No, score=-4.1 required=4.0 tests=BAYES_00,DKIMWL_WL_HIGH,
    DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_MED,
    SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no
    version=3.4.6-bugs.debian.org_2005_01_02
    X-Spam-Bayes: score:0.0000 Tokens: new, 15; hammy, 121; neutral, 30; spammy,
    0. spammytokens: hammytokens:0.000-+--autopkgtest,
    0.000-+--H*F:D*canonical.com, 0.000-+--H*rp:D*canonical.com,
    0.000-+--UD:excuses.php, 0.000-+--excuses.php
    Return-path: <jeremy.bicha@canonical.com>
    Received: from smtp-relay-internal-1.canonical.com ([185.125.188.123]:58398)
    by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_X25519__RSA_PSS_RSA
  • From Marc Haber@21:1/5 to Debian Bug Tracking System on Wed Apr 2 07:00:01 2025
    On Wed, Apr 02, 2025 at 12:24:02AM +0000, Debian Bug Tracking System wrote:
    * reintroduce systemd-resolved, with conflict on avahi-daemon. It turns
    out the cloud images have a hard dependency on resolved. In order to
    avoid having to change them, reintroduce the package, with a hard
    conflict on avahi-daemon to avoid reintroducing #1098914 (Closes:
    #1101532)

    How would I configure my system when I want resolved to handle unicast
    DNS resolving (its features are rather nice, for example it handles
    gracefully when the first of the full service resolvers is down), but
    need avahi-daemon for service announcements?

    I might be stupid, but in my understanding the hard conflict forces me
    to have a local full service resolver running since I can't have systemd-resolved sans mDNS AND avahi-daemon. If my assumption is
    correct, the current solution breaks existing systems in a worse way
    than the solution proposed by the TC breaks other systems.

    Greetings
    Marc

    -- ----------------------------------------------------------------------------- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany | lose things." Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nature | How to make an American Quilt | Fax: *49 6224 1600421

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Raphael Hertzog@21:1/5 to mh+debian-packages@zugschlus.de on Wed Apr 2 08:00:01 2025
    On Wed, 2 Apr 2025 06:52:07 +0200 Marc Haber <mh+debian-packages@zugschlus.de> wrote:
    On Tue, Apr 01, 2025 at 10:32:45PM +0000, Luca Boccassi wrote:
    - Mar 24 13:59: first of several suggestions for implementation
    details and improvements on MR

    Which MR are we talking about here? I'd like to read up on that.

    I assume this one: https://salsa.debian.org/systemd-team/systemd/-/merge_requests/289

    Cheers,
    --
    ⢀⣴⠾⠻⢶⣦⠀ Raphaël Hertzog <hertzog@debian.org>
    ⣾⠁⢠⠒⠀⣿⡁
    ⢿⡄⠘⠷⠚⠋ The Debian Handbook: https://debian-handbook.info/get/
    ⠈⠳⣄⠀⠀⠀⠀ Debian Long Term Support: https://deb.li/LTS

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Marc Haber@21:1/5 to Raphael Hertzog on Wed Apr 2 08:20:01 2025
    On Wed, Apr 02, 2025 at 07:47:03AM +0200, Raphael Hertzog wrote:
    On Wed, 2 Apr 2025 06:52:07 +0200 Marc Haber <mh+debian-packages@zugschlus.de> wrote:
    On Tue, Apr 01, 2025 at 10:32:45PM +0000, Luca Boccassi wrote:
    - Mar 24 13:59: first of several suggestions for implementation
    details and improvements on MR

    Which MR are we talking about here? I'd like to read up on that.

    I assume this one: >https://salsa.debian.org/systemd-team/systemd/-/merge_requests/289

    This leaves me speechless.

    Greetings
    Marc

    -- ----------------------------------------------------------------------------- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany | lose things." Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nature | How to make an American Quilt | Fax: *49 6224 1600421

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Raphael Hertzog@21:1/5 to bluca@debian.org on Wed Apr 2 11:40:02 2025
    Hi,

    On Wed, 02 Apr 2025 10:08:06 +0100 Luca Boccassi <bluca@debian.org> wrote:
    The problem is that, again, _something_ has to break. If it's not your
    use case, it's someone else's. Both are currently in use, in stable.
    One has to go.

    What am I supposed to do, exactly? I can't square a circle, I'm afraid

    I can answer that question: follow the decision of the technical committe
    which has already weighted the pros / cons of the various options.

    And then if you get blame from the persons experiencing the broken
    scenario, then you can say "sorry I just followed the decision of
    the tech-ctte" and not feel guilty.

    Cheers,
    --
    ⢀⣴⠾⠻⢶⣦⠀ Raphaël Hertzog <hertzog@debian.org>
    ⣾⠁⢠⠒⠀⣿⡁
    ⢿⡄⠘⠷⠚⠋ The Debian Handbook: https://debian-handbook.info/get/
    ⠈⠳⣄⠀⠀⠀⠀ Debian Long Term Support: https://deb.li/LTS

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Stefano Rivera@21:1/5 to All on Wed Apr 2 20:50:01 2025
    Hi Josh (2025.04.02_17:56:48_+0000)
    As you said, the TC or the project cannot *require* that a maintainer do
    work they've objected to. However, I think it's reasonable for a
    maintainer to say "OK, fine, this isn't the outcome I would prefer, but
    I'll implement it, and I'd prefer to implement it myself rather than
    have someone NMU it". (As long as that happens in a timely and
    cooperative fashion, which seems like what *was* happening here.)

    That may have been what was happening here, but it was *not*
    communicated to the TC as being what was happening.

    The impression I got was: "I can't even consider any proposals unless
    there's a merge request. Then we can discuss the details in there."

    In the merge request (mirroring the NMU), there was some technical
    nitpicking (which is OK, to a degree, but also obstructive). And a
    general refusal to implement the changes that were decided by the TC.
    Instead other options (some on the TC ballot, some not) were being
    offered. That was a conversation that should have happened *before* the
    TC vote, at this point it's just obstructive.

    While the TC was debating these issues, the Debian systemd package added
    a policy to not carry patches that were not upstream. That probably tied
    the maintainers hands quite a bit.

    If I were in the shoes of a maintainer that got overridden, and I wanted
    to handle the issue myself, I think it would be reasonable to do one of:

    1. Implement the changes myself before the NMU's deferral delay.
    2. Reply to the NMUer (and TC) saying: "I'll handle this by $date".
    Only then cancel the NMU. And, of course, follow through with the
    implementation.

    I don't see any signs that the maintainer's rejection of the NMU here
    was in bad faith or gave any indication of *refusing* to implement the
    TC ruling.

    Read the discussion in the MR. I don't see anything to the contrary in
    there.

    Stefano

    --
    Stefano Rivera
    http://tumbleweed.org.za/
    +1 415 683 3272

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)