DRU with FIPS enabled causes updates to fail in some cases
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
ubuntu-release-upgrader (Ubuntu) |
Confirmed
|
Undecided
|
Unassigned |
Bug Description
In an earlier bug fix[0] a diversion is added to libgcrypt20 and libgcrypt20-hmac that isn't cleaned up after the upgrade.
With this diversion in place, apt can get confused as to what to do when changing package streams. For example if you enable FIPS on Bionic then upgrade to Focal and then switch to fips-updates, apt will fail to work.
The specific error is;
Preparing to unpack .../libgcrypt20
Unpacking libgcrypt20-
dpkg: error processing archive /var/cache/
trying to overwrite '/usr/lib/
update-initramfs: deferring update (trigger activated)
Errors were encountered while processing:
/var/cache/
E: Sub-process /usr/bin/dpkg returned an error code (1)
Let me know if you need any additional information,
--Roman K.
[0]https:/
Status changed to 'Confirmed' because the bug affects multiple users.