Debian Bug report logs - #850268
Please stop using deprecated GNOME libraries (libgnome-2-0, libgnomevfs2-0, libgconf2-4)

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Michael Biebl <biebl@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: Please stop using deprecated GNOME libraries (libgnome-2-0, libgnomevfs2-0, libgconf2-4)

Date: Thu, 05 Jan 2017 15:04:29 +0100

Source: openjdk-8
Version: 8u111-b14-3
Severity: normal
User: pkg-gnome-maintainers@lists.alioth.debian.org
Usertags: oldlibs

Hi,

libgnome, gnomevfs and gconf have long been deprecated and replaced
upstream by GTK+, GIO/GVFS and dconf.

On a typical stretch desktop/GNOME installation, openjdk-8-jre (*) seems to
be the only remaining package which pulls in those old libraries via
  Recommends: libgnome-2-0, libgnomevfs2-0, libgconf2-4

We don't want those old libraries installed by default though.

Which functionality of openjdk is still relying on those libraries?

Please consider demoting this to Suggests or dropping it completely.

Regards,
Michael

(*) openjdk-8-jre is pulled via libreoffice
-- System Information:
Debian Release: stretch/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (200, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.8.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Message #14 received at 850268@bugs.debian.org (full text, mbox, reply):

From: Simon McVittie <smcv@debian.org>

To: 850268@bugs.debian.org

Cc: Michael Biebl <biebl@debian.org>

Subject: Re: Bug#850268: Please stop using deprecated GNOME libraries (libgnome-2-0, libgnomevfs2-0, libgconf2-4)

Date: Thu, 2 Mar 2017 00:00:32 +0000

[Message part 1 (text/plain, inline)]

Control: tags 850268 + patch

On Thu, 05 Jan 2017 at 15:04:29 +0100, Michael Biebl wrote:
> On a typical stretch desktop/GNOME installation, openjdk-8-jre (*) seems to
> be the only remaining package which pulls in those old libraries via
>   Recommends: libgnome-2-0, libgnomevfs2-0, libgconf2-4

I had a look into this today after some discussion in #debian-gnome about it
being feasible to get rid of those packages from a default desktop
installation (according to mbiebl's latest check, to drop libgconf2-4 we
just need to fix synaptic and openjdk-8, and drop aisleriot).

I attach a possible patch. Please consider applying it for stretch. See below
if you need justification for why it is not a functional regression.

Thanks,
    S

---- justification for why this is OK ----

After unpacking the tar-in-tar sources, the mentions of GNOME-related
libraries outside debian/ seem to be:

jdk-jdk8u121-b13/src/solaris/native/sun/awt/gtk2_interface.c
    uses libgtk2.0-0, which is old but still supported

jdk-jdk8u121-b13/src/solaris/native/sun/net/spi/DefaultProxySelector.c
    has branch for modern GIO (libglib2.0-0)
    has branch for libgconf2-4 (old)

jdk-jdk8u121-b13/src/solaris/native/sun/nio/fs/GnomeFileTypeDetector.c
    has branch for modern GIO (libglib2.0-0)
    has branch for libgnomevfs-2-0 (old)

jdk-jdk8u121-b13/src/solaris/native/sun/xawt/gnome_interface.c
    uses libgnomevfs-2 and libgnome-2 (old)

Pulling on those threads a bit:

The default proxy selector native code is used by
jdk-jdk8u121-b13/src/share/classes/sun/net/spi/DefaultProxySelector.java.
DefaultProxySelector.c has internal code to select a proxy, and will only use
gconf if libglib2.0-0 doesn't have the necessary functions - but it has had
the necessary functions since at least 2.24. The oldest supported Debian and
Ubuntu releases, wheezy and precise, both have 2.32. So we can ignore
libgconf2-4 in favour of libglib2.0-0 (>= 2.24).

The file type detection code is used by
jdk-jdk8u121-b13/src/solaris/classes/sun/nio/fs/GnomeFileTypeDetector.java
which does the failover between GIO and gnomevfs in Java instead of C.
Again, if we have a vaguely modern GIO, gnomevfs isn't even tried.
Again, libglib2.0-0 has had the necessary functions since at least 2.24.

gnome_interface.c is used to open URIs in the system default browser.
It is used by jdk-jdk8u121-b13/src/solaris/native/sun/xawt/awt_Desktop.c
which prefers to use gtk_show_uri() from GTK+ >= 2.14. The oldest
supported Debian and Ubuntu releases both have libgtk2.0-0 2.24, so we
can ignore the libgnomevfs-2, libgnome-2 code path.

The non-headless JRE already Depends on libgtk2.0-0, and the Recommends
on obsolete GNOME libraries are only in the non-headless JRE anyway.

I have included explicit versions (>= 2.14), (>= 2.24) in the proposed
patch because the OpenJDK packaging seems to be designed to backport
easily to EOL distributions like squeeze. If you are only targeting
semi-modern distributions like wheezy and precise, let alone actually
recent distributions, then those versioned dependencies are unnecessary.

---- end justification ----

[openjdk-obsolete-gnome-libs.diff (text/x-diff, attachment)]

Message #21 received at 850268-close@bugs.debian.org (full text, mbox, reply):

From: Matthias Klose <doko@ubuntu.com>

To: 850268-close@bugs.debian.org

Subject: Bug#850268: fixed in openjdk-8 8u121-b13-4

Date: Fri, 03 Mar 2017 18:18:55 +0000

Source: openjdk-8
Source-Version: 8u121-b13-4

We believe that the bug you reported is fixed in the latest version of
openjdk-8, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 850268@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Matthias Klose <doko@ubuntu.com> (supplier of updated openjdk-8 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 03 Mar 2017 18:46:54 +0100
Source: openjdk-8
Binary: openjdk-8-jdk-headless openjdk-8-jre-headless openjdk-8-jdk openjdk-8-jre openjdk-8-demo openjdk-8-source openjdk-8-doc openjdk-8-dbg openjdk-8-jre-zero
Architecture: source
Version: 8u121-b13-4
Distribution: unstable
Urgency: medium
Maintainer: OpenJDK Team <openjdk@lists.launchpad.net>
Changed-By: Matthias Klose <doko@ubuntu.com>
Description:
 openjdk-8-dbg - Java runtime based on OpenJDK (debugging symbols)
 openjdk-8-demo - Java runtime based on OpenJDK (demos and examples)
 openjdk-8-doc - OpenJDK Development Kit (JDK) documentation
 openjdk-8-jdk - OpenJDK Development Kit (JDK)
 openjdk-8-jdk-headless - OpenJDK Development Kit (JDK) (headless)
 openjdk-8-jre - OpenJDK Java runtime, using ${vm:Name}
 openjdk-8-jre-headless - OpenJDK Java runtime, using ${vm:Name} (headless)
 openjdk-8-jre-zero - Alternative JVM for OpenJDK, using Zero/Shark
 openjdk-8-source - OpenJDK Development Kit (JDK) source files
Closes: 850268
Changes:
 openjdk-8 (8u121-b13-4) unstable; urgency=medium
 .
   * Drop Recommends on obsolete GNOME libraries so they are not in a
     default GNOME desktop installation (Simon McVittie). Closes: #850268.
     - sun.net.spi.DefaultProxySelector prefers libglib2.0-0 (>= 2.24)
       over obsolete libgconf2-4.
     - sun.nio.fs.GnomeFileTypeDetector prefers libglib2.0-0 (>= 2.24)
       over libgnomevfs-2-0.
     - sun.xawt.awt_Desktop prefers libgtk2.0-0 (>= 2.14) over
       libgnomevfs2-0.
   * See the bug report for an analysis why this can be done for releases
     back to Debian wheezy (7.0) and Ubuntu precise (12.04 LTS).
Checksums-Sha1:
 cd9bec7350d0436114779cfd2c977f91a25d4e27 4483 openjdk-8_8u121-b13-4.dsc
 04a78b9756e0eb6c2eddac337659aec0754682e8 244872 openjdk-8_8u121-b13-4.debian.tar.xz
 60cc97323cf4128ae764d175ccaffdc643058497 15482 openjdk-8_8u121-b13-4_source.buildinfo
Checksums-Sha256:
 0f5f98a33bbcf53bcb00fa6a73ace5b8f813a94ffa78a052ef17c3b296a6fbcd 4483 openjdk-8_8u121-b13-4.dsc
 3fd9c2eeafdf32a8a9de3f8936c35f47d073ea975237c57e479c7ef7f697fe97 244872 openjdk-8_8u121-b13-4.debian.tar.xz
 94b6a01787231dffd5a5ab4282f1275ad5850cc868f43d6d1ce3c80c7901f9a0 15482 openjdk-8_8u121-b13-4_source.buildinfo
Files:
 47f2f5a0f565bd40114c849616b28d74 4483 java optional openjdk-8_8u121-b13-4.dsc
 5bbfdf7308814e1bd7efdb53124dfc4b 244872 java optional openjdk-8_8u121-b13-4.debian.tar.xz
 3b269ea705f800d4ea484487d00ee075 15482 java optional openjdk-8_8u121-b13-4_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQJEBAEBCAAuFiEE1WVxuIqLuvFAv2PWvX6qYHePpvUFAli5rY8QHGRva29AdWJ1
bnR1LmNvbQAKCRC9fqpgd4+m9VJWEADTtfzTt/Y+9N8xP53Lhz/VThAgj6evZnVG
PL44wTjmdsfx1p9/y1uUDEqtjPUQFFtoFqiKEKhzo69IWJrNJoRl3eqcLDOZgwBA
uN+Bd7OV0/4g9rkFmYZUk/vylscf0JDfUxc4VvMa2PqDKI948g6JFGNDFd2Ze1UG
CssIyEjld7XlXx2+reLkMJD8ZBm/kvGkjWtFhqIIBwh77Dxizv99ZyInqXXAuZy8
UrrsUR6jkcYb9oNy2MK0wfB5fOlqmvWVgbnZbOqm91/fEzJoMJgCx0A6Fid4cvRl
f8JlUGwAeDlnJr4l1PYzi5Vlx87XM/xlrx0S+mJz0n+VrMUL4K0WhJQewbB/yZ6Y
6UANQHfNrcu6EqJ2TF9RALiqs3ONkJssoaLhKdSfsIUWNPsbQjyaRNfDys1qh7tC
2GCUemJKLXJ6Z2xK20aE9nspGnSx67C9rPm+6teEo7KkaypW7J0SguV+hAHnp0S3
yaXz+/BBOQEJwkP6IhIhWzydNi9pSGqe4X8Z3k3ehwe53Fs3yLm08w//W0BZuS8P
JZa2zPT+IHzbrCXG/2pZrtkiBNXJ/y4S1CvSQCeJQh5y9dDMRU1DwtD8svJ0U1hF
E6qBVmFuMBdtcEKwvyizYIv9EiwsKNQ8KhYUu9wjMHg6Pl06CYiGCxvD+ubwFvIY
Uq0SO6EqYg==
=p7QP
-----END PGP SIGNATURE-----

Message #26 received at 850268@bugs.debian.org (full text, mbox, reply):

From: Simon McVittie <smcv@debian.org>

To: 850268@bugs.debian.org

Subject: Re: Bug#850268: Please stop using deprecated GNOME libraries (libgnome-2-0, libgnomevfs2-0, libgconf2-4)

Date: Sat, 4 Mar 2017 21:13:41 +0000

Thanks for uploading openjdk-8 without these obsolete dependencies. Please
do the same in the next openjdk-9 upload - I've checked the relevant code
and it seems to be essentially the same, so my justification from
openjdk-8 should be equally valid.

This is low priority right now since openjdk-9 won't be in stretch anyway.

Regards,
    S

Send a report that this bug log contains spam.