On Fri, Jun 4, 2021 at 5:08 PM Coty Sutherland <csutherl@xxxxxxxxxxxxxxxxx> wrote: > > On Fri, Jun 4, 2021 at 10:56 AM Fabio Valentini <decathorpe@xxxxxxxxx> wrote: >> >> On Fri, Jun 4, 2021 at 1:47 PM Coty Sutherland >> <csutherl@xxxxxxxxxxxxxxxxx> wrote: >> > >> > Hi all, >> > >> > Sorry to be a bit late to the party, but in response to some indirect dependencies being orphaned I've taken the opportunity to clean up the Tomcat package a little. I have removed the following "features" from tomcat: >> > >> > 1) I dropped the "examples" webapp from Tomcat, which is recommended by the Security Considerations page of the upstream project anyway. This removed our dependency on the tomcat-taglibs-standard package. >> > 2) Due to changes in the javapackages-local package (%add_maven_depmap was finally removed), I dropped the maven pom files from the tomcat packages as I feel that their usefulness is limited anyway. If you need to use the poms, Maven Central should work. >> > 3) I've removed the tomcat-jsvc subpackage from the distribution as it isn't very useful either. This removes our dependency on the apache-commons-daemon package. This also removed the logrotate config that was offered since it was used within the tomcat-jsvc package. >> > 4) Dropped geronimo-saaj (aka jakarta-saaj) as it's no longer required by Tomcat 9+. >> > 5) Dropped geronimo-jaxrpc (aka jakarta-xml-rpc), which provided the webservices naming factory resources that are generally unused. This was only a build time dependency, so it wasn't used at runtime (unless users were explicitly installing it for their webapp). >> > >> > If anyone has issues with these changes, please let me know ASAP. >> >> It looks like 2) is causing problems with resteasy, and in turn >> pki-core and dogtag-pki (FreeIPA components): >> nothing provides mvn(org.apache.tomcat:tomcat-servlet-api) needed by >> pki-resteasy-core >> >> resteasy is built with maven and depends on tomcat, so the pom files >> are actually needed ... > > > That is the worst news I've gotten in a while :/ How many maven artifacts are being used? Could I get away with only providing poms/artifacts for the servlet/jsp/el implementations or do they need all 30+ artifacts? It wouldn't have been news if you checked if anything depends on those "mvn(foo:bar)" virtual Provides before dropping them ;) According to koschei, resteasy only depends on one maven pom though: No package found for: mvn(org.apache.tomcat:tomcat-servlet-api) See: https://koschei.fedoraproject.org/package/resteasy Not sure if just adding that one back will make it work again, though. Fabio _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
