The officially official Devuan Forum!

alexkemp

Member

Registered: 2018-05-14

Posts: 357  

[SOLVED] Problem with ca-certificates-java

System upgrade for me just now, and mostly involved Chromium. However, a message that one is kept back:

The following packages have been kept back:
  ca-certificates-java
The following packages will be upgraded:
  chromium chromium-common chromium-l10n chromium-sandbox linux-compiler-gcc-12-x86 linux-kbuild-6.1 linux-libc-dev
7 upgraded, 0 newly installed, 0 to remove and 1 not upgraded.

I'm not fully certain what is happening here, but suspect the problem has arisen at Debian's end.

stopAI

Member

Registered: 2023-04-04

Posts: 186  

Re: [SOLVED] Problem with ca-certificates-java

Hello.

What Devuan version you are using?

alexkemp

Member

Registered: 2018-05-14

Posts: 357  

Re: [SOLVED] Problem with ca-certificates-java

$ inxi -b
System:
  Host: ng3 Kernel: 6.1.0-15-amd64 arch: x86_64 bits: 64 Desktop: Xfce
    v: 4.18.1 Distro: Devuan GNU/Linux 5 (daedalus)
Machine:
  Type: Desktop System: LENOVO product: 90BJ008CUK v: Lenovo H30-05
    serial: <superuser required>
  Mobo: LENOVO model: N/A v: SDK0J40700 WIN serial: <superuser required>
    UEFI: LENOVO v: O1WKT25AUS date: 10/29/2015
CPU:
  Info: quad core AMD A8-7410 APU with AMD Radeon R5 Graphics [MCP]
    speed (MHz): avg: 999 min/max: 1000/2200
Graphics:
  Device-1: AMD Mullins [Radeon R4/R5 Graphics] driver: radeon v: kernel
  Display: x11 server: X.Org v: 1.21.1.7 driver: X: loaded: radeon
    unloaded: fbdev,modesetting,vesa dri: radeonsi gpu: radeon
    resolution: 1366x768~60Hz
  API: OpenGL v: 4.5 Mesa 22.3.6 renderer: KABINI ( LLVM 15.0.6 DRM 2.50
    6.1.0-15-amd64)
Network:
  Device-1: Qualcomm Atheros QCA9565 / AR9565 Wireless Network Adapter
    driver: ath9k
  Device-2: Realtek RTL810xE PCI Express Fast Ethernet driver: r8169
Drives:
  Local Storage: total: 931.51 GiB used: 785.08 GiB (84.3%)
Info:
  Processes: 218 Uptime: 50m Memory: 7.18 GiB used: 2.5 GiB (34.8%)
  Shell: Bash inxi: 3.3.26

Seems maybe due to bad interaction between openjdk-8-jdk & the certificates. I have backports included, and that may be a causation. This is what happens if I try to update them:

$ sudo apt install ca-certificates-java
...
The following packages will be REMOVED:
  openjdk-8-jdk openjdk-8-jdk-headless openjdk-8-jre openjdk-8-jre-headless
The following packages will be upgraded:
  ca-certificates-java
1 upgraded, 0 newly installed, 4 to remove and 0 not upgraded.
Need to get 11.9 kB of archives.
After this operation, 142 MB disk space will be freed.
Do you want to continue? [Y/n] n
Abort.

Here a 9 Dec post for Bookworm saying is fixed. I'm not certain how to proceed!

delgado

Member

Registered: 2022-07-14

Posts: 213  

Re: [SOLVED] Problem with ca-certificates-java

# apt dist-upgrade

works too in such cases.

alexkemp

Member

Registered: 2018-05-14

Posts: 357  

Re: [SOLVED] Problem with ca-certificates-java

Thanks for the suggestion. The result is identical:

# apt dist-upgrade
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Calculating upgrade... Done
The following packages will be REMOVED:
  openjdk-8-jdk openjdk-8-jdk-headless openjdk-8-jre openjdk-8-jre-headless
The following packages will be upgraded:
  ca-certificates-java
1 upgraded, 0 newly installed, 4 to remove and 0 not upgraded.
Need to get 11.9 kB of archives.
After this operation, 142 MB disk space will be freed.
Do you want to continue? [Y/n] n
Abort.

Does anyone know the way to proceed in a case like this?

ralph.ronnquist

Administrator

From: Battery Point, Tasmania, AUS

Registered: 2016-11-30

Posts: 1,253  

Re: [SOLVED] Problem with ca-certificates-java

Possibly you can installl openjdk-8-jdk-headless from ceres first ?

alexkemp

Member

Registered: 2018-05-14

Posts: 357  

Re: [SOLVED] Problem with ca-certificates-java

I'm going to wait for the changes in Debian to feed-through to Devuan. That way I do not need to pollute my already-complex sources-list.

delgado

Member

Registered: 2022-07-14

Posts: 213  

Re: [SOLVED] Problem with ca-certificates-java

Do you have a specific need for openjdk-8?
Maybe a newer version is already installed.

apt list --installed | grep openjdk

alexkemp

Member

Registered: 2018-05-14

Posts: 357  

Re: [SOLVED] Problem with ca-certificates-java

Good point, delgado; there is also both -11 and -17. What on earth is -8 doing in there (or, indeed, -11)?

$ apt list --installed | grep openjdk

WARNING: apt does not have a stable CLI interface. Use with caution in scripts.

openjdk-11-jre-headless/now 11.0.20+8-1~deb11u1 amd64 [installed,local]
openjdk-11-jre/now 11.0.20+8-1~deb11u1 amd64 [installed,local]
openjdk-17-jre-headless/stable,stable-security,now 17.0.9+9-1~deb12u1 amd64 [installed,automatic]
openjdk-17-jre/stable,stable-security,now 17.0.9+9-1~deb12u1 amd64 [installed,automatic]
openjdk-8-doc/now 8u252-b09-1~deb9u1 all [installed,local]
openjdk-8-jdk-headless/now 8u252-b09-1~deb9u1 amd64 [installed,local]
openjdk-8-jdk/now 8u252-b09-1~deb9u1 amd64 [installed,local]
openjdk-8-jre-headless/now 8u252-b09-1~deb9u1 amd64 [installed,local]
openjdk-8-jre/now 8u252-b09-1~deb9u1 amd64 [installed,local]

(I'm trying to find how to find what reverse-depends on it)

Last edited by alexkemp (2023-12-14 04:05:06)

alexkemp

Member

Registered: 2018-05-14

Posts: 357  

Re: [SOLVED] Problem with ca-certificates-java

Looks like the single package is the certificates, so I should be safe (?) to remove all the -8:

$ apt-cache rdepends --installed  openjdk-8-*
openjdk-8-jre-headless
Reverse Depends:
  openjdk-8-jre
  openjdk-8-jdk-headless
  openjdk-8-jre
  openjdk-8-jdk-headless
  openjdk-8-jdk-headless
  ca-certificates-java
openjdk-8-jre
Reverse Depends:
  openjdk-8-jdk
openjdk-8-doc
Reverse Depends:
openjdk-8-jdk
Reverse Depends:
  openjdk-8-jdk-headless
  openjdk-8-doc
openjdk-8-jdk-headless
Reverse Depends:
  openjdk-8-jdk
<openjdk-8-demo>
<openjdk-8-source>

alexkemp

Member

Registered: 2018-05-14

Posts: 357  

Re: [SOLVED] Problem with ca-certificates-java

Well, it *seems* that removing them all will have zero side-effects. I wonder if that is actually accurate?

$ apt-get remove -s openjdk-8-*
NOTE: This is only a simulation!
      apt-get needs root privileges for real execution.
      Keep also in mind that locking is deactivated,
      so don't depend on the relevance to the real current situation!
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Note, selecting 'openjdk-8-doc' for glob 'openjdk-8-*'
Note, selecting 'openjdk-8-jdk' for glob 'openjdk-8-*'
Note, selecting 'openjdk-8-jre' for glob 'openjdk-8-*'
Note, selecting 'openjdk-8-demo' for glob 'openjdk-8-*'
Note, selecting 'openjdk-8-jre-headless' for glob 'openjdk-8-*'
Note, selecting 'openjdk-8-source' for glob 'openjdk-8-*'
Note, selecting 'openjdk-8-jdk-headless' for glob 'openjdk-8-*'
Package 'openjdk-8-demo' is not installed, so not removed
Package 'openjdk-8-source' is not installed, so not removed
The following packages will be REMOVED:
  openjdk-8-doc openjdk-8-jdk openjdk-8-jdk-headless openjdk-8-jre openjdk-8-jre-headless
0 upgraded, 0 newly installed, 5 to remove and 1 not upgraded.
Remv openjdk-8-doc [8u252-b09-1~deb9u1]
Remv openjdk-8-jdk [8u252-b09-1~deb9u1]
Remv openjdk-8-jdk-headless [8u252-b09-1~deb9u1]
Remv openjdk-8-jre [8u252-b09-1~deb9u1]
Remv openjdk-8-jre-headless [8u252-b09-1~deb9u1]

alexkemp

Member

Registered: 2018-05-14

Posts: 357  

Re: [SOLVED] Problem with ca-certificates-java

OK. I now believe it (should be) safe to remove all 1.8 java versions:

$ java -version
openjdk version "17.0.9" 2023-10-17
OpenJDK Runtime Environment (build 17.0.9+9-Debian-1deb12u1)
OpenJDK 64-Bit Server VM (build 17.0.9+9-Debian-1deb12u1, mixed mode, sharing)
$ update-java-alternatives -l
java-1.11.0-openjdk-amd64      1111       /usr/lib/jvm/java-1.11.0-openjdk-amd64
java-1.17.0-openjdk-amd64      1711       /usr/lib/jvm/java-1.17.0-openjdk-amd64
java-1.8.0-openjdk-amd64       1081       /usr/lib/jvm/java-1.8.0-openjdk-amd64

Will removing them allow the certificates to be upgraded? Hey ho.

alexkemp

Member

Registered: 2018-05-14

Posts: 357  

Re: [SOLVED] Problem with ca-certificates-java

OK, done it.

Removing all openjdk-8 packages allowed the certificates to auto-update & be auto-removed from being held back. Now to find what is hiding that needs those jdk-8 packages!

$ sudo apt-get remove openjdk-8-*
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Note, selecting 'openjdk-8-doc' for glob 'openjdk-8-*'
Note, selecting 'openjdk-8-jdk' for glob 'openjdk-8-*'
Note, selecting 'openjdk-8-jre' for glob 'openjdk-8-*'
Note, selecting 'openjdk-8-demo' for glob 'openjdk-8-*'
Note, selecting 'openjdk-8-jre-headless' for glob 'openjdk-8-*'
Note, selecting 'openjdk-8-source' for glob 'openjdk-8-*'
Note, selecting 'openjdk-8-jdk-headless' for glob 'openjdk-8-*'
Package 'openjdk-8-demo' is not installed, so not removed
Package 'openjdk-8-source' is not installed, so not removed
The following packages will be REMOVED:
  openjdk-8-doc openjdk-8-jdk openjdk-8-jdk-headless openjdk-8-jre openjdk-8-jre-headless
0 upgraded, 0 newly installed, 5 to remove and 1 not upgraded.
After this operation, 432 MB disk space will be freed.
Do you want to continue? [Y/n] Y
(Reading database ... 285417 files and directories currently installed.)
Removing openjdk-8-doc (8u252-b09-1~deb9u1) ...
Removing openjdk-8-jdk:amd64 (8u252-b09-1~deb9u1) ...
Removing openjdk-8-jdk-headless:amd64 (8u252-b09-1~deb9u1) ...
Removing openjdk-8-jre:amd64 (8u252-b09-1~deb9u1) ...
Removing openjdk-8-jre-headless:amd64 (8u252-b09-1~deb9u1) ...
Processing triggers for hicolor-icon-theme (0.17-2) ...
Processing triggers for doc-base (0.11.1) ...
Processing 1 removed doc-base file...
Processing triggers for libc-bin (2.36-9+deb12u3) ...
Processing triggers for ca-certificates-java (20230620~deb12u1) ...
done.
Processing triggers for mailcap (3.70+nmu1) ...
Processing triggers for desktop-file-utils (0.26-1) ...
$ ~/.local/sbin/update
Get:1 https://josm.openstreetmap.de/apt alldist InRelease [5,606 B]
Get:2 https://josm.openstreetmap.de/apt alldist/universe amd64 Packages [1,097 B]
Hit:3 http://deb.devuan.org/merged daedalus InRelease                    
Get:4 http://deb.devuan.org/merged daedalus-updates InRelease [32.5 kB]
Get:5 http://deb.devuan.org/merged daedalus-security InRelease [32.5 kB]
Get:6 http://deb.devuan.org/merged daedalus-proposed-updates InRelease [32.7 kB]
Get:7 http://deb.devuan.org/merged daedalus-backports InRelease [32.6 kB]
Fetched 137 kB in 3s (53.1 kB/s)   
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
2 packages can be upgraded. Run 'apt list --upgradable' to see them.
W: https://josm.openstreetmap.de/apt/dists/alldist/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
0 upgraded, 0 newly installed, 0 to remove and 2 not upgraded.
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Calculating upgrade... Done
The following packages will be upgraded:
  ca-certificates-java josm-latest
2 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 15.9 MB of archives.
After this operation, 0 B of additional disk space will be used.
Do you want to continue? [Y/n] Y
Get:1 http://deb.devuan.org/merged daedalus/main amd64 ca-certificates-java all 20230710~deb12u1 [11.9 kB]
Get:2 https://josm.openstreetmap.de/apt alldist/universe amd64 josm-latest all 1.5.svn18911 [15.9 MB]
Fetched 15.9 MB in 5s (3,520 kB/s)      
Reading changelogs... Done
(Reading database ... 272305 files and directories currently installed.)
Preparing to unpack .../ca-certificates-java_20230710~deb12u1_all.deb ...
Unpacking ca-certificates-java (20230710~deb12u1) over (20230620~deb12u1) ...
Preparing to unpack .../josm-latest_1.5.svn18911_all.deb ...
Unpacking josm-latest (1.5.svn18911) over (1.5.svn18907) ...
Setting up josm-latest (1.5.svn18911) ...
Setting up ca-certificates-java (20230710~deb12u1) ...
done.
Processing triggers for mailcap (3.70+nmu1) ...
Processing triggers for desktop-file-utils (0.26-1) ...
Processing triggers for hicolor-icon-theme (0.17-2) ...
Processing triggers for man-db (2.11.2-2) ...
Processing triggers for shared-mime-info (2.2-1) ...
Processing triggers for menu (2.1.49) ...