Please update to CouchDB 1.6.0

Bug #1345672 reported by Jason Gerard DeRose
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
couchdb (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

This is a bug to track progress on getting CouchDB 1.6.0 into Utopic:

http://www.apache.org/dist/couchdb/notes/1.6.0/apache-couchdb-1.6.0.html

Tags: patch

Related branches

Revision history for this message
Jason Gerard DeRose (jderose) wrote :

Initial progress with the CouchDB 1.6.0 package is good overall.

The only issue I've run into is that I can't seem to start CouchDB 1.6 with a CouchDB 1.5 (and earlier) style -hashed- password like:

    [admins]

    admin = -hashed-<HEXDIGEST>,<SALT>

It seems that CouchDB 1.6 will only honor a -pbkdf2- style hashed password present in the .ini file at startup, which might be a bit problematic for upgrades as it seems that neither CouchDB 1.5 nor 1.6 will convert a -hashed- style password present in the .ini file to a -pbkdf2- style password automatically prior to starting the CouchDB server.

In order to test all the public Novacut stuffs against CouchDB 1.6.0, and to test the internal System76 stuffs against CouchDB 1.6.0, I had to add a new `couch_pbkdf2()` function to UserCouch, used in place of the previous `couch_hashed()` function:

    http://bazaar.launchpad.net/~novacut/usercouch/trunk/view/head:/usercouch/__init__.py#L198

But with this change, all the unit tests in all my CouchDB consumers are passing. Also note that these days there are a large number of upstream unit tests, all of which I run during the build and all of which are passing.

So aside from the (potential) issue with migrating -hashed- passwords to -pbkdf2- passwords, CouchDB 1.6.0 seems like a rather low risk, easy to manage update. Or at least that's my assessment so far :D

Revision history for this message
Jason Gerard DeRose (jderose) wrote :

Correction to my previous comment:

As they are *hashed* passwords, of course there is no way for CouchDB to transparently convert a -hashed- password into a -pbkdf2- password prior to starting the server. At best, CouchDB could write a -pbkdf2- style hashed password upon the first successful authentication against an existing -hashed- style hashed password.

So the correct way to state the problem is that CouchDB 1.6 isn't honoring *existing* -hashed- style admin passwords in the .ini file that worked fine with CouchDB 1.5.

On the upside, -pbkdf2- style hashed password seem to work fine with both CouchDB 1.5 and 1.6.

Revision history for this message
Jason Gerard DeRose (jderose) wrote :

CouchDB 1.6.0 test packages are now available in ppa:novacut/daily for Trusty and Utopic:

https://launchpad.net/~novacut/+archive/ubuntu/daily/+packages

Revision history for this message
Jason Gerard DeRose (jderose) wrote :

Attaching couchdb_1.5.0-0ubuntu1_to_couchdb_1.6.0-0ubuntu1.debdiff.xz

After beating up on this package for the last week, I feel 1.6.0 is a solid and rather low risk release.

Revision history for this message
Ubuntu Foundations Team Bug Bot (crichton) wrote :

The attachment "couchdb_1.5.0-0ubuntu1_to_couchdb_1.6.0-0ubuntu1.debdiff.xz" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.]

tags: added: patch
Revision history for this message
Jason Gerard DeRose (jderose) wrote :

Update: oops, now this isn't ready for review...

Erlang 17.1 just landing in Utopic, so I need to do a rebuild test and then test all my CouchDB consumers against it.

Hopefully no big surprises, as CouchDB 1.6.0 does officially support Erlang 17.

Revision history for this message
Jason Gerard DeRose (jderose) wrote :

Okay, after testing over the weekend, CouchDB 1.6.0 seems just as solid with Erlang 17 as it does with Erlang 16.

Revision history for this message
Jason Gerard DeRose (jderose) wrote :

So unfortunately the upstream 1.6.0 source tarball annoyingly includes a number of pre-minified JavaScript files for which the actual source isn't included, discussed at some length here:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=752420

And which produce "source-is-missing" Lintian errors like this:

http://paste.ubuntu.com/7848545/

I will be discussing this with upstream (and also trying to nudge them away from using so many internally bundled libraries like libsnappy, etc).

I'm not sure where this leaves the Ubuntu/CouchDB situation for Utopic, but note that CouchDB 1.5.0 does not work with Erlang 17 (although I think this could be fixed with a relatively small patch). Also note that 1.5.0 likewise includes pre-minified JavaScript that I just didn't notice before. So CouchDB 1.6.0 isn't a step backward in this respect, although obviously this is something that must be addressed long term.

Changed in couchdb (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.