Bug 33906 - /var/lib/rpm/installed-through-deps.list is written prior to even confirming the installation
Summary: /var/lib/rpm/installed-through-deps.list is written prior to even confirming ...
Status: NEW
Alias: None
Product: Mageia
Classification: Unclassified
Component: RPM Packages (show other bugs)
Version: 9
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: Mageia tools maintainers
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2025-01-10 15:06 CET by Christian Lohmaier
Modified: 2025-01-12 20:29 CET (History)
0 users

See Also:
Source RPM: urpmi-8.131-1.mga9.src.rpm
CVE:
Status comment:


Attachments

Description Christian Lohmaier 2025-01-10 15:06:48 CET
Description of problem:
urpmi rewrites the file even when the user doesn't approve the action/installation of the packages

Version-Release number of selected component (if applicable):
urpmi-8.131

How reproducible:
100%

Steps to Reproduce:
1. in my specific case I wanted to install a specific package from testing repo to check the fix for bug#33893
since installing curl didn't also update the corresponding lib-packages I used:

# LC_ALL=C urpmi --searchmedia testing libcurl4 lib64curl4
Marking libcurl4 as manually installed, it won't be auto-orphaned
writing /var/lib/rpm/installed-through-deps.list
To satisfy dependencies, the following packages are going to be installed:
  Package                        Version      Release       Arch    
(medium "Core Updates Testing")
  lib64curl-devel                7.88.1       4.6.mga9      x86_64  
  lib64curl4                     7.88.1       4.6.mga9      x86_64  
(medium "Core 32bit Updates Testing")
  libcurl4                       7.88.1       4.6.mga9      i586    
12B of additional disk space will be used.
1.3MB of packages will be retrieved.
Proceed with the installation of the 3 packages? (Y/n) n

the 32bit libcurl4 is autodep of steam installation, and despite not continuing the operation the package got removed from the dep-list file.

I consider this a bug.

It would be nice if there was an option to skip updating the auto-orphans file for those cases (alternative would be to use exclude lists so that auto-select only leaves the desired packages, but that'd be quite tedious)

so:
 
1) the file should be updated when the action is actually performed, not prior to the user approving it

2) ideally there should be a switch to disable the removal when updating existing packages or a prompt like "do you want to remove the following packages from the installed-through-deps.list file" (I find more often than not that this is not what I want to happen when updating)
Comment 1 Lewis Smith 2025-01-12 20:29:21 CET
Thank you for the report.

/var/lib/rpm/installed-through-deps.list
           Contains the name of the packages that were selected indirectly, ie
           not requested by user
> the 32bit libcurl4 is autodep of steam installation, and despite not
> continuing the operation the package got removed from the dep-list file.
> I consider this a bug.
Is it not correct that "the package got removed from the dep-list file" after
"not continuing the operation"? If the operation was done, presumably it should remain in the dep-list file.

BTAIM, assigning to MageiaTools for better wisdom.

Assignee: bugsquad => mageiatools


Note You need to log in before you can comment on or make changes to this bug.