The Net::OAuth2::AuthorzationServer library packaging is missing a dependency: Crypt::PRNG. This causes the OAuth2 protocol to fail for production sites.
Due to the multitude of operating systems we try to support, we run into a dependency problem here. Crypt::PRNG is available in libcryptx-perl. It is available in -Debian 9 (Stretch) backports -Debian 10 (Buster) and later -Ubuntu 18.04 (Bionic Beaver) It is not available in -Debian 8 (Jessie) -Ubuntu 16.04 (Xenial Xerus) So far we have libcryptx-perl in the Koha repository, but it only works for Jessie, not Xenial, and it breaks Stretch without backports and Bionic. I propose to remove libcryptx-perl from our repository. The result will be -Debian 10 and Ubuntu 18.04 work out of the box -Debian 9 needs backports enabled -New installations on Jessie will not have Rest API support as far as Net::OAuth2::AuthorzationServer is required (but existing installations will continue to work because the package is already installed) -Ubuntu 16.04 will not have Rest API support as far as Net::OAuth2::AuthorzationServer is required Debian 10 will be released July 9. I propose to deprecate support for Debian 8 (Jessie). It will be enough work to support two versions of Debian, we will run into a lot of similar problems in the future otherwise. We try to support "the latest Ubuntu LTS", but have dragged Ubuntu 16.04 along so far. I propose to deprecate support for Ubuntu 16.04 (Xenial Xerus).
Hi Mirko, to get this some more visibility and come to a decision I have added it to the next General's meeting agenda: https://wiki.koha-community.org/wiki/General_IRC_meeting_10_July_2019#Agenda
I had already added it to the dev meeting agenda. :) I think it makes more sense there. And it's happening earlier.
(In reply to Mirko Tietgen from comment #3) > I had already added it to the dev meeting agenda. :) > I think it makes more sense there. And it's happening earlier. I learned that 5 minutes after - sorry! I will remove, dev agenda is here: https://wiki.koha-community.org/wiki/Development_IRC_meeting_26_June_2019
Marking as PQA as we discussed this in the dev meeting and all agreed.
Wiki pages need to be updated: https://wiki.koha-community.org/wiki/Koha_on_Debian#Debian_Packages_on_Koha https://wiki.koha-community.org/wiki/Koha_on_ubuntu_-_packages#Introduction Also should not we inform the ML?
I was waiting on proper support for Debian 10 before announcing the deprecation of D8 (and U16). But, I think this has dragged on long enough.. I'll have a go at drafting something tomorrow.
Wiki pages updated, an announcement to follow once we have D10 support varified.
https://meetings.koha-community.org/2019/development_irc_meeting_26_june_2019.2019-06-26-19.00.html
What is needed here?
(In reply to Jonathan Druart from comment #10) > What is needed here? I imagine Mason probably just needs to remove libcryptx-perl from http://debian.koha-community.org/koha/pool/main/libc/libcryptx-perl/
(In reply to David Cook from comment #11) > (In reply to Jonathan Druart from comment #10) > > What is needed here? > > I imagine Mason probably just needs to remove libcryptx-perl from > http://debian.koha-community.org/koha/pool/main/libc/libcryptx-perl/ i've updated the libcryptx-perl package for 20.05, built for deb9 20.05|main|amd64: libcryptx-perl 0.063-1~bpo9+1 the libcryptx-perl package for 19.11 is still built for deb8 19.11|main|amd64: libcryptx-perl 0.059-1~koha2 i have not updated the 19.11 libcryptx-perl package yet, as i dont want to break 19.11/deb8 support for those who are still running this combination
(In reply to Mason James from comment #12) > (In reply to David Cook from comment #11) > > (In reply to Jonathan Druart from comment #10) > > > What is needed here? > > > > I imagine Mason probably just needs to remove libcryptx-perl from > > http://debian.koha-community.org/koha/pool/main/libc/libcryptx-perl/ > > i've updated the libcryptx-perl package for 20.05, built for deb9 > 20.05|main|amd64: libcryptx-perl 0.063-1~bpo9+1 > > the libcryptx-perl package for 19.11 is still built for deb8 > 19.11|main|amd64: libcryptx-perl 0.059-1~koha2 > > i have not updated the 19.11 libcryptx-perl package yet, as i dont want to > break 19.11/deb8 support for those who are still running this combination the libcryptx-perl package has now been updated for 20.05 and 19.11 releases
(In reply to Jonathan Druart from comment #6) > Wiki pages need to be updated: > > https://wiki.koha-community.org/wiki/Koha_on_Debian#Debian_Packages_on_Koha > > https://wiki.koha-community.org/wiki/Koha_on_ubuntu_-_packages#Introduction > > > Also should not we inform the ML? i've updated the following wiki page... https://wiki.koha-community.org/wiki/Koha_on_Debian and made a request to merge the following page... https://wiki.koha-community.org/wiki/Koha_on_ubuntu_-_packages i think this issue is now resolved :0)