Package: ca-certificates-java Version: 20190909 ca-certificates-java has an undeclared dependency on bash which leads to installation failure on systems without bash.
`openjdk-17-jre-headless` fails to install on minimal debian base, such as gcr.io/gke-release/debian-base:bullseye-v1.4.2-gke.3, due to a failure in `ca-certificates-java`'s post-install script: ``` # apt-get install --no-install-recommends -y openjdk-17-jre-headless ... Setting up ca-certificates-java (20190909) ... dpkg (subprocess): unable to execute installed ca-certificates-java package post-installation script (/var/lib/dpkg/info/ca-certificates-java.postinst): No such file or directory dpkg: error processing package ca-certificates-java (--configure): installed ca-certificates-java package post-installation script subprocess returned error exit status 2 dpkg: dependency problems prevent configuration of openjdk-17-jre-headless:amd64: openjdk-17-jre-headless:amd64 depends on ca-certificates-java (>= 20190405~); however: Package ca-certificates-java is not configured yet. ... ``` The root cause is that /var/lib/dpkg/info/ca-certificates-java.postinst's shebang specifies `#!/bin/bash`, but bash is not a declared dependency of the ca-certificates-java package. Either the ca-certificates-java package should have a dependency on bash, or the scripts should be rewritten to not require bash. Workaround: `apt-get install --no-install-recommends -y bash openjdk-17-jre-headless`