Skip to content

influxdb2-cli Debian package has multiple issues: control file path inconsistency and malformed changelog #27139

@fooxlj07

Description

@fooxlj07

Steps to reproduce:

  1. Download influxdb2-cli Debian packages for versions 2.3.0, 2.7.5-1, and 2.7.5-3
  2. Extract each package: ar x influxdb2-client-*.deb
  3. Inspect the control.tar.gz structure: tar -tzf control.tar.gz
  4. Attempt to extract changelog from the packages

Expected behaviour:

  1. The control.tar.gz archive should have consistent path prefixes across all versions
  2. The control file should be located at ./control (with ./ prefix) for compatibility
  3. The changelog should follow proper Debian format: influxdb2-cli (VERSION); urgency=medium (no space before
    semicolon)
  4. Each package version should have its correct version number in the changelog

Actual behaviour:

Issue 1: Inconsistent control.tar.gz structure

  • Version 2.3.0: Files have ./ prefix (./control, ./conffiles, ./md5sums)
  • Version 2.7.5-1: Files have ./ prefix (./control, ./md5sums)
  • Version 2.7.5-3: Files have NO prefix (control, md5sums)

This causes: KeyError: "filename './control' not found" when trying to extract changelog for influxdb2-cli package.

Issue 2: Malformed changelog format
Version 2.7.5-1 and 2.7.5-3 both have incorrect changelog format with extra space:
influxdb2-cli (2.7.5-1) ; urgency=medium

Should be:
influxdb2-cli (2.7.5-1); urgency=medium

Issue 3: Changelog version not updated
Version 2.7.5-3 package still shows version 2.7.5-1 in its changelog:

$ zcat 2.7.5-3/usr/share/doc/influxdb2-cli/changelog.gz
influxdb2-cli (2.7.5-1) ; urgency=medium
  * Package created with FPM.
 -- support@influxdb.com  Tue, 16 Apr 2024 14:35:53 +0000

Issue 4: Missing changelog
Version 2.3.0 has no changelog file at all.

Environment info:

- Package manager: dpkg/apt on Debian-based systems
- Affected packages:
  - influxdb2-client-2.3.0-amd64.deb
  - influxdb2-client-2.7.5-amd64.deb
  - influxdb2-client-2.7.5-3-amd64.deb
- Extraction tool: ar, tar, deb-inspect

Impact:

⚠️ The ping version MR in images/influxdb:2.7 may not work for manufacture update since the inconsistent control file
 paths are not handled.

Suggested fix:

1. Ensure all Debian packages use consistent ./ prefix in control.tar.gz archives
2. Fix changelog format to remove extra space before semicolon
3. Update changelog version to match actual package version
4. Add proper changelog entries to all versions
5. If using FPM to create packages, adjust FPM configuration to produce standard-compliant Debian packages

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions