Bug 32597 - texlive-doc install pushed through an automatic update
Summary: texlive-doc install pushed through an automatic update
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 9
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact:
URL:
Whiteboard: MGA9-64-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2023-12-06 13:37 CET by Guy Bormann
Modified: 2023-12-24 23:03 CET (History)
5 users (show)

See Also:
Source RPM: lyx-2.3.7-1.mga9.src.rpm
CVE:
Status comment:


Attachments
Changes from the spec on cauldron (1.37 KB, patch)
2023-12-06 21:31 CET, katnatek
Details | Diff
README.install.urpmi (161 bytes, text/plain)
2023-12-06 21:33 CET, katnatek
Details

Description Guy Bormann 2023-12-06 13:37:20 CET
An update received on 20231205 through the Mageia Online system tray app is pushing the installation of the 3GB+ texlive-doc package. While I have texlive packages installed I don't want the gigantic texlive-doc package as I can look up documentation online.

Deselecting the package from the updates list (which has also biber, lyx, texlive-fontsextra updates and seemingly unrelated updates to Perl packages and samba a.o. updates) does nothing as it still appears in the pre-install summary list.

Deselecting the LaTex-related updates (biber, lyx), or specificly, the texlive-fontsextra update does also not automatically deselect the texlive-doc 'update.'

In fact, these are my currently installed texlive packages:
texlive-20220321-7.mga9
texlive-collection-basic-20220321-12.mga9
texlive-texmf-20220321-12.mga9
texlive-dist-20220321-12.mga9

So, even the texlive-fontsextra 'update' is a forced-install (but less serious so since it's 'only' 200MB+).
 
This seems to be spurious updates pushed with the update batch, then.

This also means that I cannot do more important, potentially security-critical, future updates without the gigantic texlive-doc monster. So, hence the 'Major' severity.
Comment 1 katnatek 2023-12-06 20:21:31 CET
biber and texlive-doc are recommends, you can uninstall if you wish

Or you can add to /etc/urpmi/skip.list and that's all you don't get that packages in the update

Severity: major => normal

katnatek 2023-12-06 20:24:13 CET

CC: (none) => j.alberto.vc

katnatek 2023-12-06 20:27:46 CET

Source RPM: (none) => lyx-2.3.7-1.mga9.src.rpm

katnatek 2023-12-06 20:48:14 CET

CC: (none) => mageia

Comment 2 katnatek 2023-12-06 20:54:17 CET
Martin Whitaker, I can confirm that if you have previous lyx package and update with the applet or Update your system in MCC even if you untick texlive-doc you get the package, I don't know if it is normal or not I just can suggest add to/etc/urpmi/skip.list or send updated spec that not include textlive-doc in Recommends
Comment 3 katnatek 2023-12-06 21:31:59 CET
Created attachment 14200 [details]
Changes from the spec on cauldron
Comment 4 katnatek 2023-12-06 21:33:10 CET
Created attachment 14201 [details]
README.install.urpmi

Recommend manual installation of texlive-doc or use online documentation
katnatek 2023-12-06 21:33:59 CET

CC: (none) => geiger.david68210

Comment 5 katnatek 2023-12-06 21:34:43 CET
David you send the current lyx version, can please give a hand with this?
Comment 6 Martin Whitaker 2023-12-06 23:55:18 CET
Not sure why you are CC'ing me, but AFAIK this is normal behaviour for rpmdrake. Deselecting packages when updating only works for primary (leaf) packages - you can't stop dependencies being installed. And rpmdrake doesn't have a "no recommends" option - you have to use urpmi on the command line to get that.
katnatek 2023-12-07 00:51:51 CET

CC: mageia => (none)

Comment 7 katnatek 2023-12-07 00:52:16 CET
(In reply to Martin Whitaker from comment #6)
> Not sure why you are CC'ing me, but AFAIK this is normal behaviour for
> rpmdrake. Deselecting packages when updating only works for primary (leaf)
> packages - you can't stop dependencies being installed. And rpmdrake doesn't
> have a "no recommends" option - you have to use urpmi on the command line to
> get that.

Thank you
Comment 8 Guy Bormann 2023-12-07 12:48:58 CET
If a package is not an absolute necessity for an application in another package to work, it should not be treated as an absolute dependency. Period.

The fact that I can uninstall an unwanted AND UNWARRANTED update after the fact is nice but insufficient advice in case the undesired 'update' is 3GB+. I'd rather use that bandwidth for streaming Netflix!

Yes, I can go to the CLI or edit a file in /etc but hey, this is 2023. The age of computing self-flagelation is over, even for an old fart like me.

But let's take a step back and _THINK_: why is texlive-doc a forced dependency for LyX if it's a mere recommendation??? I don't want it unless I need it and LyX never needed it.

All suggestions for help are nice but they ignore what is essentially a recent LyX packaging mistake. All the rest is plainly missing the point or unnecessary sophistry!

I'll add it to my skiplist as a workaround for now but it is plain wrong if it remains to be treated as an absolute LyX dependency (despite it being a mere recommendation), regardless of rpmdrake historical behaviour.

This is wrong, whether anyone agrees or not.

Sidenote: I understand the root cause is of course that texlive-doc is unfortunately the worst packaged part of the upstream TexLive distribution as it contains documentation for every possible optional layout template, article template, font feature, ... that comes with the TexLive distro while hardly no-one ever writes reports or articles in all possible formats or for all possible journals or business settings.
Comment 9 katnatek 2023-12-07 20:32:15 CET
(In reply to Guy Bormann from comment #8)
> If a package is not an absolute necessity for an application in another
> package to work, it should not be treated as an absolute dependency. Period.
> 
> The fact that I can uninstall an unwanted AND UNWARRANTED update after the
> fact is nice but insufficient advice in case the undesired 'update' is 3GB+.
> I'd rather use that bandwidth for streaming Netflix!
> 
> Yes, I can go to the CLI or edit a file in /etc but hey, this is 2023. The
> age of computing self-flagelation is over, even for an old fart like me.
> 
> But let's take a step back and _THINK_: why is texlive-doc a forced
> dependency for LyX if it's a mere recommendation??? I don't want it unless I
> need it and LyX never needed it.
> 
Yes I not consider the size of texlive-doc but I mark as optional dependency so it can be omitted, 2023 and still we use Linux where touch text files and run commands in terminal are still part of many solutions.

Can't do more right now, I depend on others to commit suggested changes.
Comment 10 katnatek 2023-12-08 02:03:01 CET
David I assign this to you because you send the last update to this package

CC: geiger.david68210 => (none)
Whiteboard: (none) => MGA9TOO
Version: 9 => Cauldron
Assignee: bugsquad => geiger.david68210

katnatek 2023-12-08 02:03:42 CET

CC: (none) => ngompa13

Comment 11 David GEIGER 2023-12-16 08:14:07 CET
Fixed on Cauldron!


Assigning to QA,

Packages in 9/Core/Updates_testing:
======================
lyx-2.3.7-1.1.mga9

From SRPMS:
lyx-2.3.7-1.1.mga9.src.rpm

Assignee: geiger.david68210 => qa-bugs
Version: Cauldron => 9

Comment 12 Marja Van Waes 2023-12-16 14:30:52 CET
Advisory with SRPM from comment 11 and 

description: |
  This update makes lyx stop recommending texlive-doc (not really needed
  and too big)

added to SVN. Please remove the "advisory" keyword if it needs to be changed. It also helps when obsolete advisories are tagged as "obsolete"

CC: (none) => marja11
Keywords: (none) => advisory

Comment 13 katnatek 2023-12-16 19:41:48 CET
Tested in Real Hardware Mageia 8 x86_64

Use QA repo to get the package
C_ALL=C urpmi lyx
To satisfy dependencies, the following packages are going to be installed:
  Package                        Version      Release       Arch    
(medium "Core Release (Installer) (DVD1)")
  perl-Mail-Sender               0.903.0      4.mga9        noarch  (recommended)
  perl-Mail-Sendmail             0.800.0      5.mga9        noarch  (recommended)
(medium "QA Testing (64-bit)")
  lyx                            2.3.7        1.1.mga9      x86_64  
(medium "Core Release")
  biber                          2.18         1.mga9        noarch  (recommended)
  cmsuper                        0.3.3        19.mga9       noarch  
  fonts-ttf-latex                0.1          17.mga9       noarch  
  perl-Algorithm-Diff            1.201.0      2.mga9        noarch  
  perl-Business-ISBN             3.7.0        2.mga9        noarch  (recommended)
  perl-Business-ISBN-Data        20210112.6.0 2.mga9        noarch  (recommended)
  perl-Business-ISMN             1.202        1.mga9        noarch  (recommended)
  perl-Business-ISSN             1.005        1.mga9        noarch  (recommended)
  perl-Class-Accessor            0.510.0      4.mga9        noarch  (recommended)
  perl-Class-Factory-Util        1.700.0      10.mga9       noarch  (recommended)
  perl-Data-Compare              1.270.0      3.mga9        noarch  (recommended)
  perl-Data-Uniqid               0.120.0      6.mga9        noarch  (recommended)
  perl-DateTime-Calendar-Julian  0.107        2.mga9        noarch  (recommended)
  perl-DateTime-Format-Builder   0.830.0      2.mga9        noarch  (recommended)
  perl-DateTime-Format-Strptime  1.790.0      2.mga9        noarch  (recommended)
  perl-Email-Date-Format         1.8.0        1.mga9        noarch  (recommended)
  perl-File-Find-Rule            0.340.0      5.mga9        noarch  (recommended)
  perl-File-Slurper              0.14.0       1.mga9        noarch  (recommended)
  perl-IO-String                 1.80.0       10.mga9       noarch  (recommended)
  perl-Lingua-Translit           0.290.0      1.mga9        noarch  (recommended)
  perl-Log-Dispatch              2.700.0      2.mga9        noarch  (recommended)
  perl-Log-Log4perl              1.570.0      1.mga9        noarch  (recommended)
  perl-MIME-Lite                 3.33.0       2.mga9        noarch  (recommended)
  perl-MIME-Types                2.240.0      1.mga9        noarch  (recommended)
  perl-Number-Compare            0.30.0       10.mga9       noarch  (recommended)
  perl-Regexp-Common             2017060201.> 5.mga9        noarch  (recommended)
  perl-Sort-Key                  1.330.0      20.mga9       x86_64  (recommended)
  perl-Text-BibTeX               0.890.0      1.mga9        x86_64  (recommended)                                             
  perl-Text-CSV                  2.20.0       1.mga9        noarch  (recommended)                                             
  perl-Text-Glob                 0.110.0      4.mga9        noarch  (recommended)                                             
  perl-Text-Roman                3.500.0      9.mga9        noarch  (recommended)                                             
  perl-Tie-Cycle                 1.227.0      2.mga9        noarch  (recommended)                                             
  perl-XML-DOM                   1.460.0      4.mga9        noarch  (recommended)                                             
  perl-XML-LibXML-Simple         1.10.0       3.mga9        noarch  (recommended)                                             
  perl-XML-LibXSLT               2.2.1        1.mga9        x86_64  (recommended)                                             
  perl-XML-RegExp                0.40.0       10.mga9       noarch  (recommended)
  perl-XML-Writer                0.900.0      2.mga9        noarch  (recommended)
  perl-autovivification          0.180.0      9.mga9        x86_64  (recommended)
  perl-libxml-perl               0.80.0       11.mga9       noarch  (recommended)
  texlive-dist                   20220321     12.mga9       noarch  
  texlive-fontsextra             20220321     12.mga9       noarch  (recommended)
  texlive-texmf                  20220321     12.mga9       noarch  
2.1GB of additional disk space will be used.
854MB of packages will be retrieved.
Proceed with the installation of the 45 packages? (Y/n)

textlive-doc is not in the list of package to install

Thank you David!

Whiteboard: MGA9TOO => MGA9-64-OK

Comment 14 Thomas Andrews 2023-12-16 21:22:07 CET
Validating.

CC: (none) => andrewsfarm, sysadmin-bugs
Keywords: (none) => validated_update

Comment 15 Mageia Robot 2023-12-16 23:15:46 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGAA-2023-0150.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED

Comment 16 Guy Bormann 2023-12-21 14:14:48 CET
Thank you!
Comment 17 Guy Bormann 2023-12-23 13:39:11 CET
(In reply to katnatek from comment #9)
> (In reply to Guy Bormann from comment #8)
> > If a package is not an absolute necessity for an application in another
> > package to work, it should not be treated as an absolute dependency. Period.
> > 
> > The fact that I can uninstall an unwanted AND UNWARRANTED update after the
> > fact is nice but insufficient advice in case the undesired 'update' is 3GB+.
> > I'd rather use that bandwidth for streaming Netflix!
> > 
> > Yes, I can go to the CLI or edit a file in /etc but hey, this is 2023. The
> > age of computing self-flagelation is over, even for an old fart like me.
> > 
> > But let's take a step back and _THINK_: why is texlive-doc a forced
> > dependency for LyX if it's a mere recommendation??? I don't want it unless I
> > need it and LyX never needed it.
> > 
> Yes I not consider the size of texlive-doc but I mark as optional dependency
> so it can be omitted, 2023 and still we use Linux where touch text files and
> run commands in terminal are still part of many solutions.
> 
> Can't do more right now, I depend on others to commit suggested changes.

[I intended to post this on the same day as my Thank You! comment but seems I forgot to push the save button]

I do an aweful lot in the CLI :-) I'm a Linux user since the roll-your-own-kernel days and on the Mandrake-lineage distro since the early 2000s but even Boomers enjoy progress :-)

However, one cannot expect users to know all kinds of obscure exception mechanisms hidden in /etc config files to circumvent workflow mistakes exposed through GUIs.

In any case, I'm grateful for the resolution and have seen it pass through the updates.
Comment 18 katnatek 2023-12-24 23:03:37 CET
(In reply to Guy Bormann from comment #17)
> [I intended to post this on the same day as my Thank You! comment but seems
> I forgot to push the save button]
> 
> I do an aweful lot in the CLI :-) I'm a Linux user since the
> roll-your-own-kernel days and on the Mandrake-lineage distro since the early
> 2000s but even Boomers enjoy progress :-)
> 
> However, one cannot expect users to know all kinds of obscure exception
> mechanisms hidden in /etc config files to circumvent workflow mistakes
> exposed through GUIs.
> 
> In any case, I'm grateful for the resolution and have seen it pass through
> the updates.

I understand you, I use mageia because I'm lazy and once I test Mandrake time ago I'M not test any other distro and migrate to mageia after the Mandriva's fall down.

I Know this "obscure method" time ago, and you can find recommendations in the wiki about it, but perhaps need to be added in https://wiki.mageia.org/en/URPMI#System_update

Note You need to log in before you can comment on or make changes to this bug.