Please drop php-laravel-framework (and movim and other associated components)

[Bryce Harrington]

Please drop the Laravel eco-system from impish. This includes the following binary packages:

      php-illuminate-auth
      php-illuminate-broadcasting
      php-illuminate-bus
      php-illuminate-cache
      php-illuminate-config
      php-illuminate-console
      php-illuminate-container
      php-illuminate-contracts
      php-illuminate-cookie
      php-illuminate-database
      php-illuminate-encryption
      php-illuminate-events
      php-illuminate-filesystem
      php-illuminate-hashing
      php-illuminate-http
      php-illuminate-log
      php-illuminate-mail
      php-illuminate-notifications
      php-illuminate-pagination
      php-illuminate-pipeline
      php-illuminate-queue
      php-illuminate-redis
      php-illuminate-routing
      php-illuminate-session
      php-illuminate-support
      php-illuminate-translation
      php-illuminate-validation
      php-illuminate-view
      php-laravel-framework
      php-laravel-lumen-framework
      movim

Currently, tests fail with PHP 8.0, Symfony 5, and newer PSR; this blocks our transition for symfony, and thus PHP 8.0. No updates to this ecosystem are currently available from Debian.

Update -- These should also be dropped:
      php-robmorgan-phinx
      php-cboden-ratchet

Only movim depended on these.

[Discussion]
Movim is a distributed social network built on XMPP and Illuminate.

Illuminate is the namespace used by the Laravel project for its components.

Laravel is a PHP-based, commercially-supported web framework that builds atop the Symfony web framework, providing a number of "1st-party" plugins for billing, auth, browser testing, etc.

Laravel 6.20 was introduced in Debian ubuntu in Dec 2020, and auto-sync'd into Ubuntu hirsute at that time. (Current upstream is releasing Laravel 8.45, however 6.x is their LTS series, with security support through Sep. 2022.)

For Ubuntu impish we are introducing PHP 8.0, and updating a number of PHP ecosystem pieces to their PHP 8 versions. Technically, Laravel 6.20 indicates support for PHP 8.0 itself (https://github.com/laravel/framework/commit/897a47136c2da2fdc7e19cee89c2f3a514192dee), however Laravel 6.20 appears to not be compatible with some of the other ecosystem pieces being introduced, and looks like significant work will be needed to get it transitioned.

Upstream recommends to their new users to install Laravel via their Docker container [https://laravel.com/docs/8.x/installation]. Experienced users are directed to use PHP's package manager, 'composer', to install Laravel's PHP components from the web. 3rd party install guides found via google also walk users through using composer to install laravel, rather than install via apt. In general it appears users are relying on an Ubuntu LTS for the webserver and the PHP runtime, but prefer latest Laravel in order to get up-to-date security fixes and features.

Debian's PopCon gives the php-laravel-framework and related components a 0.00% rating, with only 7 people having installed it (of which only 2 people used it recently). We do not have any data suggesting Ubuntu's install base is significantly different from Debian's.

Given the above, it seems most helpful for end users to focus efforts on stabilizing the base PHP 8.0 components, and drop Laravel from the archive for Impish. Since Laravel was only just introduced in hirsute, and since the popcon numbers suggest few are using it yet, it's unlikely this change will have a notable impact to users.

[Utkarsh Gupta (utkarsh)]

+1 to this request.

This has been blocking a bunch of stuff, esp. src:symfony.

[Steve Langasek (vorlon)]

Removing packages from impish:
 php-laravel-lumen-framework 6.3.5-2 in impish
  php-laravel-lumen-framework 6.3.5-2 in impish amd64
  php-laravel-lumen-framework 6.3.5-2 in impish arm64
  php-laravel-lumen-framework 6.3.5-2 in impish armhf
  php-laravel-lumen-framework 6.3.5-2 in impish i386
  php-laravel-lumen-framework 6.3.5-2 in impish ppc64el
  php-laravel-lumen-framework 6.3.5-2 in impish riscv64
  php-laravel-lumen-framework 6.3.5-2 in impish s390x
Comment: blocks php transition; LP: #1931315
1 package successfully removed.

[Steve Langasek (vorlon)]

Removing packages from impish:
 movim 0.17.1-1.1 in impish
  movim 0.17.1-1.1 in impish amd64
  movim 0.17.1-1.1 in impish arm64
  movim 0.17.1-1.1 in impish armhf
  movim 0.17.1-1.1 in impish i386
  movim 0.17.1-1.1 in impish ppc64el
  movim 0.17.1-1.1 in impish riscv64
  movim 0.17.1-1.1 in impish s390x
Comment: blocks php transition; LP: #1931315
1 package successfully removed.

[Steve Langasek (vorlon)]

Removing packages from impish:
 php-laravel-framework 6.20.14+dfsg-2build1 in impish
  php-illuminate-auth 6.20.14+dfsg-2build1 in impish amd64
  php-illuminate-auth 6.20.14+dfsg-2build1 in impish arm64
  php-illuminate-auth 6.20.14+dfsg-2build1 in impish armhf
  php-illuminate-auth 6.20.14+dfsg-2build1 in impish i386
  php-illuminate-auth 6.20.14+dfsg-2build1 in impish ppc64el
  php-illuminate-auth 6.20.14+dfsg-2build1 in impish riscv64
  php-illuminate-auth 6.20.14+dfsg-2build1 in impish s390x
  php-illuminate-broadcasting 6.20.14+dfsg-2build1 in impish amd64
  php-illuminate-broadcasting 6.20.14+dfsg-2build1 in impish arm64
  php-illuminate-broadcasting 6.20.14+dfsg-2build1 in impish armhf
  php-illuminate-broadcasting 6.20.14+dfsg-2build1 in impish i386
  php-illuminate-broadcasting 6.20.14+dfsg-2build1 in impish ppc64el
  php-illuminate-broadcasting 6.20.14+dfsg-2build1 in impish riscv64
  php-illuminate-broadcasting 6.20.14+dfsg-2build1 in impish s390x
  php-illuminate-bus 6.20.14+dfsg-2build1 in impish amd64
  php-illuminate-bus 6.20.14+dfsg-2build1 in impish arm64
  php-illuminate-bus 6.20.14+dfsg-2build1 in impish armhf
  php-illuminate-bus 6.20.14+dfsg-2build1 in impish i386
  php-illuminate-bus 6.20.14+dfsg-2build1 in impish ppc64el
  php-illuminate-bus 6.20.14+dfsg-2build1 in impish riscv64
  php-illuminate-bus 6.20.14+dfsg-2build1 in impish s390x
  php-illuminate-cache 6.20.14+dfsg-2build1 in impish amd64
  php-illuminate-cache 6.20.14+dfsg-2build1 in impish arm64
  php-illuminate-cache 6.20.14+dfsg-2build1 in impish armhf
  php-illuminate-cache 6.20.14+dfsg-2build1 in impish i386
  php-illuminate-cache 6.20.14+dfsg-2build1 in impish ppc64el
  php-illuminate-cache 6.20.14+dfsg-2build1 in impish riscv64
  php-illuminate-cache 6.20.14+dfsg-2build1 in impish s390x
  php-illuminate-config 6.20.14+dfsg-2build1 in impish amd64
  php-illuminate-config 6.20.14+dfsg-2build1 in impish arm64
  php-illuminate-config 6.20.14+dfsg-2build1 in impish armhf
  php-illuminate-config 6.20.14+dfsg-2build1 in impish i386
  php-illuminate-config 6.20.14+dfsg-2build1 in impish ppc64el
  php-illuminate-config 6.20.14+dfsg-2build1 in impish riscv64
  php-illuminate-config 6.20.14+dfsg-2build1 in impish s390x
  php-illuminate-console 6.20.14+dfsg-2build1 in impish amd64
  php-illuminate-console 6.20.14+dfsg-2build1 in impish arm64
  php-illuminate-console 6.20.14+dfsg-2build1 in impish armhf
  php-illuminate-console 6.20.14+dfsg-2build1 in impish i386
  php-illuminate-console 6.20.14+dfsg-2build1 in impish ppc64el
  php-illuminate-console 6.20.14+dfsg-2build1 in impish riscv64
  php-illuminate-console 6.20.14+dfsg-2build1 in impish s390x
  php-illuminate-container 6.20.14+dfsg-2build1 in impish amd64
  php-illuminate-container 6.20.14+dfsg-2build1 in impish arm64
  php-illuminate-container 6.20.14+dfsg-2build1 in impish armhf
  php-illuminate-container 6.20.14+dfsg-2build1 in impish i386
  php-illuminate-container 6.20.14+dfsg-2build1 in impish ppc64el
  php-illuminate-container 6.20.14+dfsg-2build1 in impish riscv64
  php-illuminate-container 6.20.14+dfsg-2build1 in impish s390x
  php-illuminate-contracts...

[Bryce Harrington (bryce)]

Thanks vorlon!

There are two more I missed in my original list, that should also be removed from the archive, for now:

    php-robmorgan-phinx/0.9.2-3build1
    php-cboden-ratchet/0.4.2-1build1

These are movim dependencies that nothing else appears to require, that become uninstallable with the new symfony.

stirling:~/pkg/Php8.0-transition/symfony/symfony-utkarsh$ apt-cache rdepends --recurse php-robmorgan-phinx
php-robmorgan-phinx
Reverse Depends:
  movim
  movim
movim
Reverse Depends:
stirling:~/pkg/Php8.0-transition/symfony/symfony-utkarsh$ apt-cache rdepends --recurse php-cboden-ratchet
php-cboden-ratchet
Reverse Depends:
  movim
  movim
movim
Reverse Depends:

[Steve Langasek (vorlon)]

Removing packages from impish:
 php-robmorgan-phinx 0.9.2-3build1 in impish
  php-robmorgan-phinx 0.9.2-3build1 in impish amd64
  php-robmorgan-phinx 0.9.2-3build1 in impish arm64
  php-robmorgan-phinx 0.9.2-3build1 in impish armhf
  php-robmorgan-phinx 0.9.2-3build1 in impish i386
  php-robmorgan-phinx 0.9.2-3build1 in impish ppc64el
  php-robmorgan-phinx 0.9.2-3build1 in impish riscv64
  php-robmorgan-phinx 0.9.2-3build1 in impish s390x
Comment: blocks php transition; LP: #1931315
1 package successfully removed.

[Steve Langasek (vorlon)]

Removing packages from impish:
 ratchetphp 0.4.2-1build1 in impish
  php-cboden-ratchet 0.4.2-1build1 in impish amd64
  php-cboden-ratchet 0.4.2-1build1 in impish arm64
  php-cboden-ratchet 0.4.2-1build1 in impish armhf
  php-cboden-ratchet 0.4.2-1build1 in impish i386
  php-cboden-ratchet 0.4.2-1build1 in impish ppc64el
  php-cboden-ratchet 0.4.2-1build1 in impish riscv64
  php-cboden-ratchet 0.4.2-1build1 in impish s390x
Comment: blocks php transition; LP: #1931315
1 package successfully removed.

[Bryce Harrington (bryce)]

Please also remove movim 0.17.1-1.1build1 binaries from impish.

[Steve Langasek (vorlon)]

Removing packages from impish-proposed:
 movim 0.17.1-1.1build1 in impish
Comment: FTBFS; LP: #1931315
1 package successfully removed.

[Bryce Harrington (bryce)]

php-laravel-framework has made an appearance in jammy (and again run afoul of autopkgtest):

$ rmad php-laravel-framework
 php-laravel-framework | 6.20.14+dfsg-3 | jammy-proposed/universe

php-laravel-framework | 6.20.14+dfsg-2 | stable
php-laravel-framework | 6.20.14+dfsg-3 | unstable

For the same rationale as impish, this package should be dropped from jammy (and perhaps also blocked from syncing back in later).

[Bryce Harrington (bryce)]

php-nesbot-carbon should also be removed from jammy and blocked from syncing back in.
It's part of the laravel/illuminate micro-ecosystem with nothing outside it depending on it.

$ apt-cache rdepends php-nesbot-carbon
php-nesbot-carbon
Reverse Depends:
  php-illuminate-support
  php-laravel-framework
  php-laravel-framework
  php-illuminate-support

php-nesbot-carbon has no previous version in ubuntu, and the newly sync'd in version is failing its autopkgtests.

[Steve Langasek (vorlon)]

Removing packages from jammy-proposed:
 php-nesbot-carbon 2.55.2-1 in jammy
  php-nesbot-carbon 2.55.2-1 in jammy amd64
  php-nesbot-carbon 2.55.2-1 in jammy arm64
  php-nesbot-carbon 2.55.2-1 in jammy armhf
  php-nesbot-carbon 2.55.2-1 in jammy i386
  php-nesbot-carbon 2.55.2-1 in jammy ppc64el
  php-nesbot-carbon 2.55.2-1 in jammy riscv64
  php-nesbot-carbon 2.55.2-1 in jammy s390x
Comment: Unused framework that doesn't keep up with PHP; LP: #1931315
1 package successfully removed.

[Steve Langasek (vorlon)]

Removing packages from jammy-proposed:
 php-laravel-framework 6.20.14+dfsg-3 in jammy
  php-illuminate-auth 6.20.14+dfsg-3 in jammy amd64
  php-illuminate-auth 6.20.14+dfsg-3 in jammy arm64
  php-illuminate-auth 6.20.14+dfsg-3 in jammy armhf
  php-illuminate-auth 6.20.14+dfsg-3 in jammy i386
  php-illuminate-auth 6.20.14+dfsg-3 in jammy ppc64el
  php-illuminate-auth 6.20.14+dfsg-3 in jammy riscv64
  php-illuminate-auth 6.20.14+dfsg-3 in jammy s390x
  php-illuminate-broadcasting 6.20.14+dfsg-3 in jammy amd64
  php-illuminate-broadcasting 6.20.14+dfsg-3 in jammy arm64
  php-illuminate-broadcasting 6.20.14+dfsg-3 in jammy armhf
  php-illuminate-broadcasting 6.20.14+dfsg-3 in jammy i386
  php-illuminate-broadcasting 6.20.14+dfsg-3 in jammy ppc64el
  php-illuminate-broadcasting 6.20.14+dfsg-3 in jammy riscv64
  php-illuminate-broadcasting 6.20.14+dfsg-3 in jammy s390x
  php-illuminate-bus 6.20.14+dfsg-3 in jammy amd64
  php-illuminate-bus 6.20.14+dfsg-3 in jammy arm64
  php-illuminate-bus 6.20.14+dfsg-3 in jammy armhf
  php-illuminate-bus 6.20.14+dfsg-3 in jammy i386
  php-illuminate-bus 6.20.14+dfsg-3 in jammy ppc64el
  php-illuminate-bus 6.20.14+dfsg-3 in jammy riscv64
  php-illuminate-bus 6.20.14+dfsg-3 in jammy s390x
  php-illuminate-cache 6.20.14+dfsg-3 in jammy amd64
  php-illuminate-cache 6.20.14+dfsg-3 in jammy arm64
  php-illuminate-cache 6.20.14+dfsg-3 in jammy armhf
  php-illuminate-cache 6.20.14+dfsg-3 in jammy i386
  php-illuminate-cache 6.20.14+dfsg-3 in jammy ppc64el
  php-illuminate-cache 6.20.14+dfsg-3 in jammy riscv64
  php-illuminate-cache 6.20.14+dfsg-3 in jammy s390x
  php-illuminate-config 6.20.14+dfsg-3 in jammy amd64
  php-illuminate-config 6.20.14+dfsg-3 in jammy arm64
  php-illuminate-config 6.20.14+dfsg-3 in jammy armhf
  php-illuminate-config 6.20.14+dfsg-3 in jammy i386
  php-illuminate-config 6.20.14+dfsg-3 in jammy ppc64el
  php-illuminate-config 6.20.14+dfsg-3 in jammy riscv64
  php-illuminate-config 6.20.14+dfsg-3 in jammy s390x
  php-illuminate-console 6.20.14+dfsg-3 in jammy amd64
  php-illuminate-console 6.20.14+dfsg-3 in jammy arm64
  php-illuminate-console 6.20.14+dfsg-3 in jammy armhf
  php-illuminate-console 6.20.14+dfsg-3 in jammy i386
  php-illuminate-console 6.20.14+dfsg-3 in jammy ppc64el
  php-illuminate-console 6.20.14+dfsg-3 in jammy riscv64
  php-illuminate-console 6.20.14+dfsg-3 in jammy s390x
  php-illuminate-container 6.20.14+dfsg-3 in jammy amd64
  php-illuminate-container 6.20.14+dfsg-3 in jammy arm64
  php-illuminate-container 6.20.14+dfsg-3 in jammy armhf
  php-illuminate-container 6.20.14+dfsg-3 in jammy i386
  php-illuminate-container 6.20.14+dfsg-3 in jammy ppc64el
  php-illuminate-container 6.20.14+dfsg-3 in jammy riscv64
  php-illuminate-container 6.20.14+dfsg-3 in jammy s390x
  php-illuminate-contracts 6.20.14+dfsg-3 in jammy amd64
  php-illuminate-contracts 6.20.14+dfsg-3 in jammy arm64
  php-illuminate-contracts 6.20.14+dfsg-3 in jammy armhf
  php-illuminate-contracts 6.20.14+dfsg-3 in jammy i386
  php-illuminate-contracts 6.20.14+dfsg-3 in jammy ppc64el
  php-illuminate-contracts 6.20.14+dfsg-3 in jammy riscv64
  php-illuminate-...

[Athos Ribeiro (athos-ribeiro)]

A new (adldap2) package depending on the laravel-framework was recently introduced in Debian.

The upstream project depends on the deprecated tightenco/collect project. The Debian maintainer decided to drop the (deprecated, not-packaged) dependency in favor of the full laravel framework [1].

While this is currently not blocking any other package, it is uninstallable due to the laravel dependency. Please, remove it from kinetic-proposed and add it to the sync deny list with the other laravel related packages.

[1] https://github.com/sunflowerbofh/Adldap2/commit/75ed55759185975485ebbca75143d28e72b30107

[Christian Ehrhardt  (paelzer)]

Hi Athos - I saw the ping on #ubuntu-release
I think the case is right and the removal is correct and now done.

Removing packages from kinetic-proposed:
 adldap2 10.4.1-1.1 in kinetic
  php-adldap2 10.4.1-1.1 in kinetic amd64
  php-adldap2 10.4.1-1.1 in kinetic arm64
  php-adldap2 10.4.1-1.1 in kinetic armhf
  php-adldap2 10.4.1-1.1 in kinetic i386
  php-adldap2 10.4.1-1.1 in kinetic ppc64el
  php-adldap2 10.4.1-1.1 in kinetic riscv64
  php-adldap2 10.4.1-1.1 in kinetic s390x
Comment: unsatisfiable php-laravel-framework dependency (LP: #1931315)
Remove [y|N]? y
1 package successfully removed.

But for the sync avoidance I'm not entirely sure - I first wanted to extend the section in lp:~ubuntu-archive/+junk/sync-blacklist/sync-blacklist.txt that Steve created for this bug. But while my experience with extra-removals.txt is low I wonder if it would be more appropriate to change it like:
  https://bazaar.launchpad.net/~paelzer/+junk/sync-blacklist-adldap2-1931315/revision/906

Since it is a +junk repository I can't file a proper MR, but I neither want to mess it up by just pushing to the original repository. It will be a TIL event eventually either way.

@Steve - you seem to be the only one committing to that repository, which way would avoiding the sync work best?

[Christian Ehrhardt  (paelzer)]

I didn't reach Steve for a deeper explanation, but the repo is the right one and the change follows the ones that were added recently. Landed the proposed change to extra-removals due to a dependency (on laravel)

[Athos Ribeiro (athos-ribeiro)]

php-laravel-lumen-framework was re-introduced in lunar-proposed (sync'd).

It will not build due to the dependencies removed in the past for this bug. Moreover, due to the current PSR issue, it is better to keep the laravel stack removed until we are able to sync the PSR stack back with Debian (most likely when symfony 6 lands in Debian).

Please, remove php-laravel-lumen-framework from lunar-proposed and block it from sync'ing back in.

[Sergio Durigan Junior (sergiodj)]

Marking php-laravel-framework as Triaged on Lunar (as suggested by xnox). The removal request is still applicable.

[Sergio Durigan Junior (sergiodj)]

php-laravel-lumen-framework has been reintroduced to Lunar, and needs to be removed again.

[Christian Ehrhardt  (paelzer)]

php-laravel-framework was removed and correctly blocked via [1] since we want to hold back the whole stack this should (in addition to the removal) be extended to also cover php-laravel-lumen-framework. All the reasoning for its former removals [2] and the mention of others in [1] are applying here as well.

1. Removed:
Removing packages from lunar-proposed:
 php-laravel-lumen-framework 8.3.4-1 in lunar
Comment: blocks php transition (again); LP: #1931315
Remove [y|N]? y
1 package successfully removed.

2. added to the related sync blockers
$ bzr push bzr+ssh://bazaar.launchpad.net/~ubuntu-archive/+junk/sync-blacklist
Pushed up to revision 985.

[1]: https://bazaar.launchpad.net/~ubuntu-archive/+junk/sync-blacklist/view/head:/sync-blacklist.txt#L667
[2]: https://launchpad.net/ubuntu/+source/php-laravel-lumen-framework/+publishinghistory