[Bug 1979244] Re: libssl-dev : Depends: libssl3 (= 3.0.2-0ubuntu1.1) but 3.0.2-0ubuntu1.2 is to be installed

[Jeremy Chadwick]

Also, the recommended advice does not work/apply.  Adding this to
/etc/apt/apt.conf does not relieve the problem (I tried all these
permutations, since apt_preferences(5) is not clear what syntax is truly
wanted, and web searches turn up varying opinions depending on if you're
using Update Manager or not, alongside questioning why there is a Never
and an Always, re: tri-state switch):

Update-Manager::Always-Include-Phased-Updates "0";
Update-Manager::Always-Include-Phased-Updates "False";
Update-Manager::Always-Include-Phased-Updates False;
Update-Manager::Never-Include-Phased-Updates "1";
Update-Manager::Never-Include-Phased-Updates "True";
Update-Manager::Never-Include-Phased-Updates True;
APT::Get::Always-Include-Phased-Updates "0";
APT::Get::Always-Include-Phased-Updates "False";
APT::Get::Always-Include-Phased-Updates False;
APT::Get::Never-Include-Phased-Updates "1";
APT::Get::Never-Include-Phased-Updates "True";
APT::Get::Never-Include-Phased-Updates True;

I believe the answer is easily overlooked in the initial post from
juliank: "Note that this does not apply to fresh package installs".

Next, I tried the other workaround, by force-pinning a version.  Note
that the original recommendation was "apt install libssl-
dev=3.0.2-0ubuntu1.4", which will not work; "apt install
libssl3=3.0.2-0ubuntu1.4" did work (understandably) -- except not
really.

Forced pinning get us no further than before, because package libssl-dev
explicitly depends on a specific version of libssl3 (note equals, not
greater-than-equals or tilde):

# dpkg -l | grep libssl3
ii  libssl3:amd64                   3.0.2-0ubuntu1.4                        amd64        Secure Sockets Layer toolkit - shared libraries

# apt-get install libmysqlclient-dev
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 libssl-dev : Depends: libssl3 (= 3.0.2-0ubuntu1.1) but 3.0.2-0ubuntu1.4 is to be installed
E: Unable to correct problems, you have held broken packages.

# apt-cache show libssl-dev
...
Depends: libssl3 (= 3.0.2-0ubuntu1)
...

So either libssl-dev needs to be updated alongside this, and somehow
these two packages (libssl-dev and libssl3) need to be "tied together"
when it comes to phased updates (I don't even know if that's possible),
or there is further packaging work (version bumping) that needs to
happen.

Additionally, I suspect what all this implies is that phased updates
were enabled by default on the latest AWS AMI when it was made by
Canonical, and now there is (effectively) no way to "opt out" of them.
This is not a good system, folks.  Please CC whoever is responsible for
this model so they can witness real-world failure of it (and how getting
out of this situation doesn't seem possible).

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssl in Ubuntu.
https://bugs.launchpad.net/bugs/1979244

Title:
  libssl-dev : Depends: libssl3 (= 3.0.2-0ubuntu1.1) but
  3.0.2-0ubuntu1.2 is to be installed

Status in MySQL InnoDB Cluster Charm:
  New
Status in mysql-8.0 package in Ubuntu:
  Confirmed
Status in openssl package in Ubuntu:
  Confirmed
Status in mysql-8.0 source package in Jammy:
  Confirmed
Status in openssl source package in Jammy:
  Confirmed

Bug description:
  libmysqlclient-dev on Jammy cannot be installed due to unmet
  dependencies

  $ apt policy libmysqlclient-dev
  libmysqlclient-dev:
    Installed: (none)
    Candidate: 8.0.29-0ubuntu0.22.04.2
    Version table:
       8.0.29-0ubuntu0.22.04.2 500
          500 http://nova.clouds.archive.ubuntu.com/ubuntu jammy-updates/main amd64 Packages
          500 http://security.ubuntu.com/ubuntu jammy-security/main amd64 Packages
       8.0.28-0ubuntu4 500
          500 http://nova.clouds.archive.ubuntu.com/ubuntu jammy/main amd64 Packages
  $ sudo 'apt-get' '--option=Dpkg::Options::=--force-confold' '--assume-yes' 'install' 'libmysqlclient-dev'
  Reading package lists... Done
  Building dependency tree... Done
  Reading state information... Done
  Some packages could not be installed. This may mean that you have
  requested an impossible situation or if you are using the unstable
  distribution that some required packages have not yet been created
  or been moved out of Incoming.
  The following information may help to resolve the situation:

  The following packages have unmet dependencies:
   libssl-dev : Depends: libssl3 (= 3.0.2-0ubuntu1.1) but 3.0.2-0ubuntu1.2 is to be installed
  E: Unable to correct problems, you have held broken packages.

To manage notifications about this bug go to:
https://bugs.launchpad.net/charm-mysql-innodb-cluster/+bug/1979244/+subscriptions