Package: libnginx-mod-http-modsecurity
Version: 1.0.3-2+b2
Severity: important
Tags: trixie

Upgrading bookworm -> trixie, libnginx-mod-http-modsecurity triggers
a circular dependency-like issue and the upgrade is unable to complete:

dpkg: error processing package nginx (--configure):
 installed nginx package post-installation script subprocess returned error 
exit status 1
dpkg: dependency problems prevent configuration of libnginx-mod-http-ndk:
 libnginx-mod-http-ndk depends on nginx-abi-1.26.3-1; however:
  Package nginx-abi-1.26.3-1 is not installed.
  Package nginx which provides nginx-abi-1.26.3-1 is not configured yet.

dpkg: error processing package libnginx-mod-http-ndk (--configure):
 dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of 
libnginx-mod-http-modsecurity:
 libnginx-mod-http-modsecurity depends on libnginx-mod-http-ndk; however:
  Package libnginx-mod-http-ndk is not configured yet.
 libnginx-mod-http-modsecurity depends on nginx-abi-1.26.3-1; however:
  Package nginx-abi-1.26.3-1 is not installed.
  Package nginx which provides nginx-abi-1.26.3-1 is not configured yet.

dpkg: error processing package libnginx-mod-http-modsecurity (--configure):
 dependency problems - leaving unconfigured
Errors were encountered while processing:
 nginx
 libnginx-mod-http-ndk
 libnginx-mod-http-modsecurity
Error: Sub-process /usr/bin/dpkg returned an error code (1)

It appears libnginx-mod-http-modsecurity depends on the next version of nginx,
which cannot start until libnginx-mod-http-modsecurity is fully installed.

A workaround appears to be:

1. Remove packages libnginx-mod-http-modsecurity & libnginx-mod-http-ndk
2. Edit nginx.conf to temporarily disable modsecurity which is now missing.
3. Re-run upgrade to allow it to complete, and nginx to start successfully.
4. Reinstall libnginx-mod-http-modsecurity & modsecurity-crs (if installed)
5. Make any necessary changes (I had some breakage in 
/usr/share/modsecurity-crs/owasp-crs.load)
6. Re-enable modsecurity in nginx.conf
7. Restart necessary services.

Reply via email to