Bug#1032464: ca-certificates-java post-install script requires bash

[Brian de Alwis]

Package: ca-certificates-java
Version: 20190909

ca-certificates-java has an undeclared dependency on bash which leads to installation failure on systems without bash.

`openjdk-17-jre-headless` fails to install on minimal debian base, such as gcr.io/gke-release/debian-base:bullseye-v1.4.2-gke.3, due to a failure in `ca-certificates-java`'s post-install script:

```

# apt-get install --no-install-recommends -y openjdk-17-jre-headless

...

Setting up ca-certificates-java (20190909) ...
dpkg (subprocess): unable to execute installed ca-certificates-java package post-installation script (/var/lib/dpkg/info/ca-certificates-java.postinst): No such file or directory
dpkg: error processing package ca-certificates-java (--configure):
 installed ca-certificates-java package post-installation script subprocess returned error exit status 2
dpkg: dependency problems prevent configuration of openjdk-17-jre-headless:amd64:
 openjdk-17-jre-headless:amd64 depends on ca-certificates-java (>= 20190405~); however:
  Package ca-certificates-java is not configured yet.

...

```

The root cause is that /var/lib/dpkg/info/ca-certificates-java.postinst's shebang specifies `#!/bin/bash`, but bash is not a declared dependency of the ca-certificates-java package.

Either the ca-certificates-java package should have a dependency on bash, or the scripts should be rewritten to not require bash.

Workaround: `apt-get install --no-install-recommends -y bash openjdk-17-jre-headless`

[Brian de Alwis]

I see that the debian/ca-certificates-java.postinst script has already been fixed to be based on /bin/sh.

https://salsa.debian.org/java-team/ca-certificates-java/-/commit/62313abf3dfc0e760fe0af6edf44b8b958e9a89f

On Tue, Mar 7, 2023 at 9:48 AM Debian Bug Tracking System <ow...@bugs.debian.org> wrote:

Thank you for filing a new Bug report with Debian.

You can follow progress on this Bug here: 1032464: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032464.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 Debian Java Maintainers <pkg-java-m...@lists.alioth.debian.org>

If you wish to submit further information on this problem, please
send it to 103...@bugs.debian.org.

Please do not send mail to ow...@bugs.debian.org unless you wish
to report a problem with the Bug-tracking system.

--
1032464: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032464
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

[Matthias Klose]

Version: 20230613