fix: Exclude ca-certificates.crt when ca-certificates_data and deb ca-certificates
Metadata
Current evaluation
Merged. Resolves a build conflict for /etc/ssl/certs/ca-certificates.crt when both ca-certificates_data and deb ca-certificates are staged. The fix excludes the conflicting file in the deb package part, preventing failures in extensions like Fastapi and Expressjs.
Suggested action: —
No scores available.
Issue body
Describe your changes.
When there are two parts, one of thn with stage-packages and a transitive dependency to ca-certificates and another one with the chisel ca-certificates_data, there will be a conflict related to the file `/etc/ssl/certs/ca-certificates.crt`. See issue https://github.com/canonical/rockcraft/issues/1261
For Fastapi and Gunicorn based extensions, the problem occurs with non bare images, as they stage the package python3-venv. For expressjs, it happens in bare and non bare images (they always stage the package npm).
The fix for the problematic cases is to exclude `etc/ssl/certs/ca-certificates.crt` in the part that imports the deb package with the transitive dependency for ca-certificates.
---
- [x] I've followed the [contribution guidelines](https://github.com/canonical/rockcraft/blob/main/CONTRIBUTING.md).
- [x] I've signed the [CLA](http://www.ubuntu.com/legal/contributors/).
- [x] I've successfully run `make lint && make test`.
- [x] I've added or updated any relevant documentation.
- [x] In documents I changed, I [added a meta description](https://canonical-starflow.readthedocs-hosted.com/how-to/add-a-page-meta-description/) if one was missing.
- [x] I've updated the relevant release notes.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged. Resolves a build conflict for /etc/ssl/certs/ca-certificates.crt when both ca-certificates_data and deb ca-certificates are staged. The fix excludes the conflicting file in the deb package part, preventing failures in extensions like Fastapi and Expressjs. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged a fix excluding etc/ssl/certs/ca-certificates.crt to resolve staging conflicts between deb ca-certificates and ca-certificates_data. Initial test failures stemmed from an unrelated chisel digest bug; tests were re-run and the change was successfully integrated. |
Update history
No update history recorded yet.
Related issues
No related issues found above the similarity threshold.