Your message dated Fri, 11 Nov 2022 15:33:37 +0000
with message-id <e1otw2d-00bnou...@fasolo.debian.org>
and subject line Bug#1023758: fixed in pipewire 0.3.60-1
has caused the Debian Bug report #1023758,
regarding pipewire: calls addgroup without an adduser dependency
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
1023758: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1023758
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: pipewire
Version: 0.3.59-1
Severity: serious
Justification: Policy §3.5

pipewire calls addgroup without a dependency on the adduser package,
which can fail if no other package happens to have pulled in adduser.
Until recently, apt hid this bug by depending on adduser, but now the
base-passwd package creates the _apt user and it is entirely feasible to
remove or not install adduser in container environments.

Various packages that are in pipewire's transitive Recommends or otherwise
normally installed on desktop-class systems (like dbus-system-bus-common
and polkitd) will normally also pull in adduser, again hiding this
bug, but polkit now depends on "adduser | systemd-sysusers", and I'm
considering doing the same in dbus-system-bus-common.

To reproduce:

$ podman run --pull=always --rm -it debian:sid-slim
# apt update
# apt upgrade
# apt purge adduser
# apt install --no-install-recommends pipewire

(Or use your favourite minimal container or chroot technology, if not
podman.)

Expected result: successful installation. (It's OK if pipewire is only
partially functional without its Recommends.)

Actual result:

> Setting up pipewire:amd64 (0.3.59-1+b1) ...
> /var/lib/dpkg/info/pipewire:amd64.postinst: 7: addgroup: not found

Options for resolving this include:

1. depend on adduser

2. depend on passwd instead, and use groupadd, like samba does:
   
https://salsa.debian.org/samba-team/samba/-/commit/1eb07efc2fb4d9ed1218e4af367539bcae255b9e
   (note that passwd is Priority: required but not Essential: yes, so it
   gets installed by debootstrap but technically still needs a dependency)

3. install /usr/lib/sysusers.d/pipewire.conf containing something like:

       g pipewire - -

   then use dh_installsysusers (debhelper compat level 14 or
   dh --with=installsysusers), but be prepared to get bug reports similar
   to #1014805, #1016006 from sysvinit users who are upset that debhelper
   has generated a dependency on "systemd | ..."

4. install /usr/lib/sysusers.d/pipewire.conf as above, but do not use
   dh_installsysusers, and instead set up the user from handwritten
   postinst code using systemd-sysusers, adduser and/or groupadd
   (with an appropriate dependency)

I don't think there is yet project consensus on which one of those is best,
unfortunately.

    smcv

--- End Message ---
--- Begin Message ---
Source: pipewire
Source-Version: 0.3.60-1
Done: Dylan Aïssi <dai...@debian.org>

We believe that the bug you reported is fixed in the latest version of
pipewire, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1023...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Dylan Aïssi <dai...@debian.org> (supplier of updated pipewire package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 11 Nov 2022 14:55:34 +0100
Source: pipewire
Architecture: source
Version: 0.3.60-1
Distribution: unstable
Urgency: medium
Maintainer: Utopia Maintenance Team 
<pkg-utopia-maintain...@alioth-lists.debian.net>
Changed-By: Dylan Aïssi <dai...@debian.org>
Closes: 1013276 1021179 1023504 1023758
Changes:
 pipewire (0.3.60-1) unstable; urgency=medium
 .
   * New upstream release
       - Improve support of RealTek ALC4080 (Closes: #1021179)
   * Cherry-pick upstream recommended patch:
       - b720da77: pulse-server: also advance read pointer in underrun
   * Add libopus-dev in Build-Deps
   * Add liblc3-dev in Build-Deps
   * Be sure the build option for bluez5 aptx codec is enabled
   * pipewire-pulse: add pulseaudio-utils in Recommends instead
       of Suggests (LP: #1993358)
   * pipewire-alsa: install conf files in the right location
       (Closes: #1023504, LP: #1975823)
   * pipewire-alsa: conflict with pulseaudio. (Closes: #1013276)
       As long as the pulseaudio package is installed, ALSA clients will output
       via PulseAudio instead of PipeWire. This is due to the order of their
       respective configs files in /etc/alsa/conf.d/.
   * pipewire: depend on adduser (Closes: #1023758)
Checksums-Sha1:
 41765c4192184253c90a36cb768b34ed30be20e0 4051 pipewire_0.3.60-1.dsc
 588cb4cfdf92eec8d9c12ba59394d4e035eafe60 1478952 pipewire_0.3.60.orig.tar.bz2
 085a24c5ae7b759284a3780577b9bd87146398e7 23020 pipewire_0.3.60-1.debian.tar.xz
 d85c9934b9e4def4f9368694ba6988031ebec51e 23537 
pipewire_0.3.60-1_amd64.buildinfo
Checksums-Sha256:
 3fd584d43b98c0797041164965420a4d77fdd1138d9d598751010a73d5566f20 4051 
pipewire_0.3.60-1.dsc
 8164eb53c9eafedfa22fe1adc4b8e38f3173c6f33695c735a17ed1a3d43c664e 1478952 
pipewire_0.3.60.orig.tar.bz2
 b6492db538b1646c4eaeec4fa6e7799dc22055edff5de31cf528dcc5ab1fc174 23020 
pipewire_0.3.60-1.debian.tar.xz
 a762b6bf6285db34f3473f57e22beb7d121d503906cba9973cd7a02463488955 23537 
pipewire_0.3.60-1_amd64.buildinfo
Files:
 bd2b3565c88f9b29cf703d5f32d2f953 4051 libs optional pipewire_0.3.60-1.dsc
 3b77c023fef647f848fb4189349bde80 1478952 libs optional 
pipewire_0.3.60.orig.tar.bz2
 038d21844fbd5bdbb7abc9978450d73c 23020 libs optional 
pipewire_0.3.60-1.debian.tar.xz
 4df28dfe05376b2becc8027d1a755f92 23537 libs optional 
pipewire_0.3.60-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=ic/B
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to