Page MenuHomePureOS Tracker

apparmor-utils dependencies broken by update to python
Closed, ResolvedPublic

Description

Librem 13v3 on PureOS with updates through 12/27. Firmware also updated.

I have sporadically returned to modifying the Firefox apparmor profile, which allows universal ‘read.’ I decided to run: aa-complain, but apparently apparmor-utils was uninstalled. When I tried to run sudo apt install apparmor-utils yesterday to see why, I got the following (truncated output):

Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
apparmor-utils : Depends: python3-apparmor (= 2.12-4pureos1) but it is not going to be installed
E: Unable to correct problems, you have held broken packages.

Going down the dependency thread using commands yields:

python3-apparmor : Depends: python3-libapparmor (>= 2.12) but it is not going to be installed
python3-libapparmor : Depends: python3 (< 3.7) but 3.7.1-3 is to be installed

Using the show option for apt, on python3-libapparmor yields:

Package: python3-libapparmor
Version: 2.12-4pureos1
Priority: extra
Section: python
Source: apparmor
Maintainer: PureOS Maintainers <pureos-project@lists.puri.sm>
Original-Maintainer: Debian AppArmor Team <pkg-apparmor-team@lists.alioth.debian.org>
Installed-Size: 206 kB
Depends: python3 (<< 3.7), python3 (>= 3.6~), python3:any (>= 3.3.2-2~), libapparmor1 (>= 2.10.95), libc6 (>= 2.14)
Homepage: http://apparmor.net/
Download-Size: 83.1 kB
APT-Sources: https://repo.puri.sm/pureos green/main amd64 Packages
Description: AppArmor library Python3 bindings
  python3-libapparmor provides the Python3 module that contains the language
  bindings for the AppArmor library, libapparmor, which were autogenerated
  via SWIG.

Note the "Depends" list. That update on 12/20, which uninstalled apparmor-utils, upgraded python3 to 3.7. I believe this dependency ultimately breaks apparmor-utils.

Isn't "dependencies" #1 on the list of promotion to green? Should that not work both ways? I must have been really unthinking and careless that morning to do this one.

I do not think it is relevant, but I am attaching the dpkg.log for 12/20.

I only have one other repository for the OpenCPN package, but there have been no updates to it in a long while. I do untar Firefox and Thunderbird to /opt. The latter has been in buster but not in green. I do not think these are contributing to the problem.

If one looks at python3-libapparmor in buster, one will see that the python dependency is <<3.8. Unfortunately, this package is modified in PureOS and belongs to Purism.

Event Timeline

Wayne created this task.Dec 28 2018, 05:23
Wayne updated the task description. (Show Details)Dec 28 2018, 06:30
Wayne added a comment.Jan 10 2019, 06:06

Please note the following append for LibreOffice Calc not starting (sigh).

On my system the Apparmor service simply doesn't start anymore and cannot be reloaded.

sudo systemctl start apparmor

Job for apparmor.service failed because the control process exited with error code.
See "systemctl status apparmor.service" and "journalctl -xe" for details.

● apparmor.service - AppArmor initialization

 Loaded: loaded (/lib/systemd/system/apparmor.service; enabled; vendor preset: >enabled)
 Active: failed (Result: exit-code) since Thu 2019-01-10 13:34:58 EST; 16s ago
   Docs: man:apparmor(7)
         http://wiki.apparmor.net/
Process: 44102 ExecStart=/etc/init.d/apparmor start (code=exited, status=123)

Main PID: 44102 (code=exited, status=123)

sudo apt install apparmor-utils gives

Reading package lists... Done
Building dependency tree
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:
The following packages have unmet dependencies:
apparmor-utils : Depends: python3-apparmor (= 2.12-4pureos1) but it is not going to be installed
E: Unable to correct problems, you have held broken packages.

gnome-logs has multiple Failed to start AppArmor initialization errors dating back to almost a month.

Wayne added a comment.Jan 13 2019, 05:10

This problem appears to be fixed with the update I made on 1/13/19. python3-libapparmor now has python3 << 3.8 and I am able to install this package. Above, I provided a link for a LibreOffice issue where this package was needed for debugging. That LibreOffice issue seems to also be fixed with this update.

I am satisfied with the resolution (Thanks.), but until @user22492 chimes in, I will leave this open for now. He sees to have more issues with apparmor than I.

This issue seems possibly related to an issue in LibreOffice resolved today in debian (and thus not yet in PureOS) by tightening its dependency on apparmor: https://bugs.debian.org/918499

jeremiah.foster changed the task status from Open to Incomplete.Jan 16 2019, 13:31
jeremiah.foster triaged this task as Low priority.

I think we can close this, but I'd like more input from the original poster.

Wayne added a comment.Jan 17 2019, 04:46

Please read my post prior to Jonas's. If @user22492 does not comment by Friday, I'll close this. I was giving him a little time.

Fixed on my side as well. Thank you.

Thank you everyone. Please re-open if you see any issue related to this at all. I appreciate all the work done on this issue and the high quality communication from everyone! It is quite satisfying to close this bug and I hope we can continue to resolve issues. Okay, enough of my blather.

jeremiah.foster closed this task as Resolved.Jan 17 2019, 06:40