Debian Bug report logs - #916107

mongodb: MongoDB should not be part of a stable release

Reported by: Apollon Oikonomopoulos <apoikos@debian.org> Date: Mon, 10 Dec 2018 09:03:01 UTC Severity: serious Found in version mongodb/1:3.4.15-1 Fixed in version 1:3.4.18-2+rm Done: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Bug is archived. No further changes may be made.

Toggle useless messages

Report forwarded to debian-bugs-dist@lists.debian.org, Debian MongoDB Maintainers <team+mongodb@tracker.debian.org> :

Bug#916107 ; Package src:mongodb . (Mon, 10 Dec 2018 09:03:03 GMT) (full text, mbox, link).

Acknowledgement sent to Apollon Oikonomopoulos <apoikos@debian.org> :

New Bug report received and forwarded. Copy sent to Debian MongoDB Maintainers <team+mongodb@tracker.debian.org> . (Mon, 10 Dec 2018 09:03:03 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Apollon Oikonomopoulos <apoikos@debian.org> To: Debian Bug Tracking System <submit@bugs.debian.org> Subject: mongodb: MongoDB should not be part of a stable release Date: Mon, 10 Dec 2018 11:01:11 +0200

Source: mongodb Version: 1:3.4.15-1 Severity: serious Justification: Cannot be properly supported MongoDB should not be part of (at least) Buster for the following reasons: - MongoDB 3.4 will be EOL by June 2019[1], which is way too soon for it to be included in Buster. - MongoDB 3.6 and 4.0 will be supported longer, but upstream's switch to SSPLv1 complicates matters. As discussed in #915537, we will not be distributing any SSPL-licensed software, and keeping the last AGPL-licensed version (3.6.8 or 4.0.3) without the ability to cherry-pick upstream fixes is not a viable option. (I am currently not considering distributing mongodb in non-free.) I will not request removal immediately, to allow other packages time to adjust their dependencies, but eventually auto-removal will kick in. That said, MongoDB 3.4 will probably remain in sid for as long as it is AGPL-licensed and supported upstream. Apollon [1] https://www.mongodb.com/support-policy

Information forwarded to debian-bugs-dist@lists.debian.org, Debian MongoDB Maintainers <team+mongodb@tracker.debian.org> :

Bug#916107 ; Package src:mongodb . (Thu, 20 Dec 2018 08:33:08 GMT) (full text, mbox, link).

Acknowledgement sent to Ivo De Decker <ivodd@debian.org> :

Extra info received and forwarded to list. Copy sent to Debian MongoDB Maintainers <team+mongodb@tracker.debian.org> . (Thu, 20 Dec 2018 08:33:08 GMT) (full text, mbox, link).

Message #10 received at 916107@bugs.debian.org (full text, mbox, reply):

From: Ivo De Decker <ivodd@debian.org> To: Apollon Oikonomopoulos <apoikos@debian.org> Cc: 916107@bugs.debian.org Subject: Re: mongodb: MongoDB should not be part of a stable release Date: Thu, 20 Dec 2018 09:31:19 +0100

Hi, On Mon, Dec 10, 2018 at 11:01:11AM +0200, Apollon Oikonomopoulos wrote: > MongoDB should not be part of (at least) Buster for the following > reasons: > > - MongoDB 3.4 will be EOL by June 2019[1], which is way too soon for it > to be included in Buster. > > - MongoDB 3.6 and 4.0 will be supported longer, but upstream's switch > to SSPLv1 complicates matters. As discussed in #915537, we will not > be distributing any SSPL-licensed software, and keeping the last > AGPL-licensed version (3.6.8 or 4.0.3) without the ability to > cherry-pick upstream fixes is not a viable option. (I am currently > not considering distributing mongodb in non-free.) > > I will not request removal immediately, to allow other packages time to > adjust their dependencies, but eventually auto-removal will kick in. The auto-removals (from testing) will not kick in, because mongodb is a key package. You'll need to file RC bugs against the rdeps. It's probably best to make those bugs block this bug, to allow easy tracking. For reference, the current output for dak rm -Rn -s testing mongodb is Checking reverse dependencies... # Broken Depends: golang-github-juju-testing: golang-github-juju-testing-dev loofah: python-loofah nextepc: nextepc-hss [amd64 arm64 ppc64el s390x] nextepc-pcrf [amd64 arm64 ppc64el s390x] # Broken Build-Depends: aodh: mongodb ceilometer: mongodb golang-github-juju-testing: mongodb-server libmongodb-perl: mongodb-server mongo-java-driver: mongodb-server zaqar: mongodb Please note that some of these are also key packages with rdeps that might need to be updated. Thanks, Ivo

Information forwarded to debian-bugs-dist@lists.debian.org, Debian MongoDB Maintainers <team+mongodb@tracker.debian.org> :

Bug#916107 ; Package src:mongodb . (Sat, 12 Jan 2019 15:36:02 GMT) (full text, mbox, link).

Acknowledgement sent to Ivo De Decker <ivodd@debian.org> :

Extra info received and forwarded to list. Copy sent to Debian MongoDB Maintainers <team+mongodb@tracker.debian.org> . (Sat, 12 Jan 2019 15:36:02 GMT) (full text, mbox, link).

Message #15 received at 916107@bugs.debian.org (full text, mbox, reply):

From: Ivo De Decker <ivodd@debian.org> To: 916107@bugs.debian.org Cc: Apollon Oikonomopoulos <apoikos@debian.org>, team+openstack@tracker.debian.org, pkg-perl-maintainers@lists.alioth.debian.org, python-modules-team@lists.alioth.debian.org, pkg-java-maintainers@lists.alioth.debian.org, Debian-mobcom-maintainers@lists.alioth.debian.org Subject: Please remove dependency on mongodb - it will not be in buster Date: Sat, 12 Jan 2019 16:32:09 +0100

clone 916107 -1 retitle -1 Please remove (build-)dependency on mongodb for buster clone -1 -2 -3 -4 -5 -6 -7 -8 -9 reassign -1 aodh 7.0.0-2 reassign -2 ceilometer 1:11.0.1-1 reassign -3 golang-github-juju-testing 0.0~git20170608.2fe0e88-3 reassign -4 libmongodb-perl 2.0.2-1 reassign -5 loofah 0.1-1 reassign -6 mongo-java-driver 3.6.3-1 reassing -7 nextepc 0.3.10+nods-2 reassign -8 zaqar 5.0.0-3 reassign -9 apache-log4j2 2.11.1-1 thanks Hi, On Thu, Dec 20, 2018 at 09:31:19AM +0100, Ivo De Decker wrote: > On Mon, Dec 10, 2018 at 11:01:11AM +0200, Apollon Oikonomopoulos wrote: > > MongoDB should not be part of (at least) Buster for the following > > reasons: > > > > - MongoDB 3.4 will be EOL by June 2019[1], which is way too soon for it > > to be included in Buster. > > > > - MongoDB 3.6 and 4.0 will be supported longer, but upstream's switch > > to SSPLv1 complicates matters. As discussed in #915537, we will not > > be distributing any SSPL-licensed software, and keeping the last > > AGPL-licensed version (3.6.8 or 4.0.3) without the ability to > > cherry-pick upstream fixes is not a viable option. (I am currently > > not considering distributing mongodb in non-free.) > > > > I will not request removal immediately, to allow other packages time to > > adjust their dependencies, but eventually auto-removal will kick in. > > The auto-removals (from testing) will not kick in, because mongodb is a key > package. You'll need to file RC bugs against the rdeps. It's probably best to > make those bugs block this bug, to allow easy tracking. > > For reference, the current output for dak rm -Rn -s testing mongodb is > > Checking reverse dependencies... > # Broken Depends: > golang-github-juju-testing: golang-github-juju-testing-dev > loofah: python-loofah > nextepc: nextepc-hss [amd64 arm64 ppc64el s390x] > nextepc-pcrf [amd64 arm64 ppc64el s390x] > > # Broken Build-Depends: > aodh: mongodb > ceilometer: mongodb > golang-github-juju-testing: mongodb-server > libmongodb-perl: mongodb-server > mongo-java-driver: mongodb-server > zaqar: mongodb > > > Please note that some of these are also key packages with rdeps that might > need to be updated. I cloned this bug and reassigned the clones to the rdeps. Obviously, some of these packages are mongodb-specific and the only way forward will be to remove them. For the others, please remove the mongodb (build-)dependency. Thanks, Ivo

Bug 916107 cloned as bug 919087 Request was from Ivo De Decker <ivodd@debian.org> to control@bugs.debian.org . (Sat, 12 Jan 2019 15:36:04 GMT) (full text, mbox, link).

Added blocking bug(s) of 916107: 919087 Request was from Ivo De Decker <ivodd@debian.org> to control@bugs.debian.org . (Sat, 12 Jan 2019 15:45:03 GMT) (full text, mbox, link).

Added blocking bug(s) of 916107: 919088 Request was from Ivo De Decker <ivodd@debian.org> to control@bugs.debian.org . (Sat, 12 Jan 2019 15:45:04 GMT) (full text, mbox, link).

Added blocking bug(s) of 916107: 919089 Request was from Ivo De Decker <ivodd@debian.org> to control@bugs.debian.org . (Sat, 12 Jan 2019 15:45:05 GMT) (full text, mbox, link).

Added blocking bug(s) of 916107: 919090 Request was from Ivo De Decker <ivodd@debian.org> to control@bugs.debian.org . (Sat, 12 Jan 2019 15:45:06 GMT) (full text, mbox, link).

Added blocking bug(s) of 916107: 919091 Request was from Ivo De Decker <ivodd@debian.org> to control@bugs.debian.org . (Sat, 12 Jan 2019 15:45:07 GMT) (full text, mbox, link).

Added blocking bug(s) of 916107: 919092 Request was from Ivo De Decker <ivodd@debian.org> to control@bugs.debian.org . (Sat, 12 Jan 2019 15:45:08 GMT) (full text, mbox, link).

Added blocking bug(s) of 916107: 919093 Request was from Ivo De Decker <ivodd@debian.org> to control@bugs.debian.org . (Sat, 12 Jan 2019 15:45:09 GMT) (full text, mbox, link).

Added blocking bug(s) of 916107: 919094 Request was from Ivo De Decker <ivodd@debian.org> to control@bugs.debian.org . (Sat, 12 Jan 2019 15:45:10 GMT) (full text, mbox, link).

Added blocking bug(s) of 916107: 919095 Request was from Ivo De Decker <ivodd@debian.org> to control@bugs.debian.org . (Sat, 12 Jan 2019 15:45:12 GMT) (full text, mbox, link).

Information forwarded to debian-bugs-dist@lists.debian.org, Debian MongoDB Maintainers <team+mongodb@tracker.debian.org> :

Bug#916107 ; Package src:mongodb . (Sun, 17 Nov 2019 01:51:03 GMT) (full text, mbox, link).

Acknowledgement sent to Sandro Tosi <morph@debian.org> :

Extra info received and forwarded to list. Copy sent to Debian MongoDB Maintainers <team+mongodb@tracker.debian.org> . (Sun, 17 Nov 2019 01:51:03 GMT) (full text, mbox, link).

Message #40 received at 916107@bugs.debian.org (full text, mbox, reply):

From: Sandro Tosi <morph@debian.org> To: 916107@bugs.debian.org, Apollon Oikonomopoulos <apoikos@debian.org> Subject: Re: mongodb: MongoDB should not be part of a stable release Date: Sat, 16 Nov 2019 20:47:13 -0500

On Mon, 10 Dec 2018 11:01:11 +0200 Apollon Oikonomopoulos <apoikos@debian.org> wrote: > Source: mongodb > Version: 1:3.4.15-1 > Severity: serious > Justification: Cannot be properly supported > > MongoDB should not be part of (at least) Buster for the following > reasons: > > - MongoDB 3.4 will be EOL by June 2019[1], which is way too soon for it > to be included in Buster. > > - MongoDB 3.6 and 4.0 will be supported longer, but upstream's switch > to SSPLv1 complicates matters. As discussed in #915537, we will not > be distributing any SSPL-licensed software, and keeping the last > AGPL-licensed version (3.6.8 or 4.0.3) without the ability to > cherry-pick upstream fixes is not a viable option. (I am currently > not considering distributing mongodb in non-free.) > > I will not request removal immediately, to allow other packages time to > adjust their dependencies, but eventually auto-removal will kick in. > > That said, MongoDB 3.4 will probably remain in sid for as long as it is > AGPL-licensed and supported upstream. is there a future for mongodb in Debian? i'm looking it from the python2 removal side of things, and mongodb is the last r-dep of python-mongodb. as this package is already RC buggy, i may just go ahead and remove that package, that will make mongodb unittest to fail. but on a broader spectrum, how long do you want to keep this package in debian, which is practically un-upgradable, with all the issue that means? Thanks, Sandro

Information forwarded to debian-bugs-dist@lists.debian.org, Debian MongoDB Maintainers <team+mongodb@tracker.debian.org> :

Bug#916107 ; Package src:mongodb . (Sun, 29 Dec 2019 12:15:05 GMT) (full text, mbox, link).

Acknowledgement sent to Moritz Mühlenhoff <jmm@inutil.org> :

Extra info received and forwarded to list. Copy sent to Debian MongoDB Maintainers <team+mongodb@tracker.debian.org> . (Sun, 29 Dec 2019 12:15:05 GMT) (full text, mbox, link).

Message #45 received at 916107@bugs.debian.org (full text, mbox, reply):

From: Moritz Mühlenhoff <jmm@inutil.org> To: Sandro Tosi <morph@debian.org> Cc: 916107@bugs.debian.org, Apollon Oikonomopoulos <apoikos@debian.org> Subject: Re: mongodb: MongoDB should not be part of a stable release Date: Sun, 29 Dec 2019 13:13:06 +0100

On Sat, Nov 16, 2019 at 08:47:13PM -0500, Sandro Tosi wrote: > On Mon, 10 Dec 2018 11:01:11 +0200 Apollon Oikonomopoulos > <apoikos@debian.org> wrote: > > Source: mongodb > > Version: 1:3.4.15-1 > > Severity: serious > > Justification: Cannot be properly supported > > > > MongoDB should not be part of (at least) Buster for the following > > reasons: > > > > - MongoDB 3.4 will be EOL by June 2019[1], which is way too soon for it > > to be included in Buster. > > > > - MongoDB 3.6 and 4.0 will be supported longer, but upstream's switch > > to SSPLv1 complicates matters. As discussed in #915537, we will not > > be distributing any SSPL-licensed software, and keeping the last > > AGPL-licensed version (3.6.8 or 4.0.3) without the ability to > > cherry-pick upstream fixes is not a viable option. (I am currently > > not considering distributing mongodb in non-free.) > > > > I will not request removal immediately, to allow other packages time to > > adjust their dependencies, but eventually auto-removal will kick in. > > > > That said, MongoDB 3.4 will probably remain in sid for as long as it is > > AGPL-licensed and supported upstream. > > is there a future for mongodb in Debian? I propose to now remove it from unstable, per https://www.mongodb.com/support-policy support for 3.4 ends in January 2020. Cheers, Moritz

Information forwarded to debian-bugs-dist@lists.debian.org, Debian MongoDB Maintainers <team+mongodb@tracker.debian.org> :

Bug#916107 ; Package src:mongodb . (Sun, 29 Dec 2019 21:45:03 GMT) (full text, mbox, link).

Acknowledgement sent to Sandro Tosi <morph@debian.org> :

Extra info received and forwarded to list. Copy sent to Debian MongoDB Maintainers <team+mongodb@tracker.debian.org> . (Sun, 29 Dec 2019 21:45:04 GMT) (full text, mbox, link).

Message #50 received at 916107@bugs.debian.org (full text, mbox, reply):

From: Sandro Tosi <morph@debian.org> To: Moritz Mühlenhoff <jmm@inutil.org> Cc: 916107@bugs.debian.org, Apollon Oikonomopoulos <apoikos@debian.org> Subject: Re: mongodb: MongoDB should not be part of a stable release Date: Sun, 29 Dec 2019 16:40:01 -0500

> I propose to now remove it from unstable, per https://www.mongodb.com/support-policy > support for 3.4 ends in January 2020. ive opened #947743 to ask for mongodb removal Regards, -- Sandro "morph" Tosi My website: http://sandrotosi.me/ Me at Debian: http://wiki.debian.org/SandroTosi Twitter: https://twitter.com/sandrotosi

Reply sent to Debian FTP Masters <ftpmaster@ftp-master.debian.org> :

You have taken responsibility. (Sun, 23 Feb 2020 22:27:14 GMT) (full text, mbox, link).

Notification sent to Apollon Oikonomopoulos <apoikos@debian.org> :

Bug acknowledged by developer. (Sun, 23 Feb 2020 22:27:14 GMT) (full text, mbox, link).

Message #55 received at 916107-done@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> To: 704778-done@bugs.debian.org,725825-done@bugs.debian.org,731768-done@bugs.debian.org,851220-done@bugs.debian.org,884462-done@bugs.debian.org,885538-done@bugs.debian.org,916107-done@bugs.debian.org,934783-done@bugs.debian.org,937065-done@bugs.debian.org, Cc: mongodb@packages.debian.org Subject: Bug#947743: Removed package(s) from unstable Date: Sun, 23 Feb 2020 22:22:57 +0000

Version: 1:3.4.18-2+rm Dear submitter, as the package mongodb has just been removed from the Debian archive unstable we hereby close the associated bug reports. We are sorry that we couldn't deal with your issue properly. For details on the removal, please see https://bugs.debian.org/947743 The version of this package that was in Debian prior to this removal can still be found using http://snapshot.debian.org/. Please note that the changes have been done on the master archive and will not propagate to any mirrors until the next dinstall run at the earliest. This message was generated automatically; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org. Debian distribution maintenance software pp. Scott Kitterman (the ftpmaster behind the curtain)

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org . (Mon, 23 Mar 2020 07:25:45 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.