← Back to issue list

fix: Exclude ca-certificates.crt when ca-certificates_data and deb ca-certificates

View original Github issue

Metadata

Project
rockcraft
Number
#1264
Type
pull request
State
merged
Author
javierdelapuente
Labels
Created
Updated
Closed

Current evaluation

Merged. Resolves a build conflict for /etc/ssl/certs/ca-certificates.crt when both ca-certificates_data and deb ca-certificates are staged. The fix excludes the conflicting file in the deb package part, preventing failures in extensions like Fastapi and Expressjs.

Suggested action:

No scores available.

Issue body

Describe your changes. When there are two parts, one of thn with stage-packages and a transitive dependency to ca-certificates and another one with the chisel ca-certificates_data, there will be a conflict related to the file `/etc/ssl/certs/ca-certificates.crt`. See issue https://github.com/canonical/rockcraft/issues/1261 For Fastapi and Gunicorn based extensions, the problem occurs with non bare images, as they stage the package python3-venv. For expressjs, it happens in bare and non bare images (they always stage the package npm). The fix for the problematic cases is to exclude `etc/ssl/certs/ca-certificates.crt` in the part that imports the deb package with the transitive dependency for ca-certificates. --- - [x] I've followed the [contribution guidelines](https://github.com/canonical/rockcraft/blob/main/CONTRIBUTING.md). - [x] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/). - [x] I've successfully run `make lint && make test`. - [x] I've added or updated any relevant documentation. - [x] In documents I changed, I [added a meta description](https://canonical-starflow.readthedocs-hosted.com/how-to/add-a-page-meta-description/) if one was missing. - [x] I've updated the relevant release notes.

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.6-35b-a3b Merged. Resolves a build conflict for /etc/ssl/certs/ca-certificates.crt when both ca-certificates_data and deb ca-certificates are staged. The fix excludes the conflicting file in the deb package part, preventing failures in extensions like Fastapi and Expressjs.
qwen3.6-35b-a3b-mtp-q6 Merged a fix excluding etc/ssl/certs/ca-certificates.crt to resolve staging conflicts between deb ca-certificates and ca-certificates_data. Initial test failures stemmed from an unrelated chisel digest bug; tests were re-run and the change was successfully integrated.

Update history

No update history recorded yet.

Related issues

No related issues found above the similarity threshold.