Debian jitsi updates forcing nginx intall?

I have a debian 10 with jitsi installed. (amongst other things like virturlamin and mattermost etc)

I use apache for the reverse proxy and everything has been working fine. This last update, I did not notice that when updates for jitsi were needed, you saw in the dependencies that it will attempt to install nginx.

Luckily, this is a VM, and I’ve done backups because when I did this update last time, it installed nginx and completely messed up apache2. It had put apache2 in mask mode and activated nginx automatically, which I found very strange. After I stopped nginx and unmasked apache2, I ran into all sorts of problems of apache2 no longer working and troubleshooting this did not succeed. I had to go back to a backup.

Has anyone encountered this problem that is using apache rather than nginx? Is there a away to continue with updates omitting nginx?

Package	Current version	New version	Description
nginx	None	1.14.2-2+deb10u4	small, powerful, scalable web/proxy server
jitsi-videobridge2	2.1-634-gff8609ad-1	2.1-665-g3a90ccdc-1	WebRTC compatible Selective Forwarding Unit (SFU)
jitsi-meet	2.0.7001-1	2.0.7210-1	WebRTC JavaScript video conferences
jicofo	1.0-862-1	1.0-874-1	JItsi Meet COnference FOcus
jitsi-meet-web	1.0.5913-1	1.0.6091-1	WebRTC JavaScript video conferences
nginx-common	None	1.14.2-2+deb10u4	small, powerful, scalable web/proxy server - common files
libnginx-mod-http-auth-pam	None	1.14.2-2+deb10u4	PAM authentication module for Nginx
libnginx-mod-http-dav-ext	None	1.14.2-2+deb10u4	WebDAV missing commands support for Nginx
libnginx-mod-http-echo	None	1.14.2-2+deb10u4	Bring echo and more shell style goodies to Nginx
libnginx-mod-http-geoip	None	1.14.2-2+deb10u4	GeoIP HTTP module for Nginx
libnginx-mod-http-image-filter	None	1.14.2-2+deb10u4	HTTP image filter module for Nginx
libnginx-mod-http-subs-filter	None	1.14.2-2+deb10u4	Substitution filter module for Nginx
libnginx-mod-http-upstream-fair	None	1.14.2-2+deb10u4	Nginx Upstream Fair Proxy Load Balancer
libnginx-mod-http-xslt-filter	None	1.14.2-2+deb10u4	XSLT Transformation module for Nginx
libnginx-mod-mail	None	1.14.2-2+deb10u4	Mail module for Nginx
libnginx-mod-stream	None	1.14.2-2+deb10u4	Stream module for Nginx
nginx-full	None	1.14.2-2+deb10u4	nginx web/proxy server (standard version)
jitsi-meet-web-config	1.0.5913-1	1.0.6091-1	Configuration for web serving of Jitsi Meet
jitsi-meet-prosody	1.0.5913-1	1.0.6091-1	Prosody configuration for Jitsi Meet
libevent-core-2.1-6	None	2.1.8-stable-4	Asynchronous event notification library (core)
libevent-extra-2.1-6	None	2.1.8-stable-4	Asynchronous event notification library (extra)
libevent-openssl-2.1-6	None	2.1.8-stable-4	Asynchronous event notification library (openssl)
libevent-pthreads-2.1-6	None	2.1.8-stable-4	Asynchronous event notification library (pthreads)
libpq5	None	11.14-0+deb10u1	PostgreSQL C client library
coturn	None	4.5.1.1-1.1+deb10u2	TURN and STUN server for VoIP
jitsi-meet-turnserver	None	1.0.6091-1	Configures coturn to be used with Jitsi Meet

The only change we did is Drop installing apache if we cannot install coturn · jitsi/jitsi-meet-debian-meta@58dd8da · GitHub
and this is for Recommends, we still have the apache2 here:
jitsi-meet/control at 2ac21389827f318ee7f6c91ca93468a9e02c76dd · jitsi/jitsi-meet · GitHub

So not sure why is that …

@damencho
Thanks for the reply. I will read these up to see if I can find out anything.

If there is anything I can share from this machine that would help understand something, please let me know.

Nope, I will try to spend some time playing with it, if we can fix it for the next stable release …
We get second report for that.

@damencho
ok so I checked and coturn was not installed. So I installed it, then did apt update and apt upgrade and it still looks like it want to install nginx. Below is the CLI, removed some useless syntax for you to review…

root@web:~# systemctl status coturn
Unit coturn.service could not be found.
root@web:~# apt install coturn
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following additional packages will be installed:
  libevent-core-2.1-6 libevent-extra-2.1-6 libevent-openssl-2.1-6 libevent-pthreads-2.1-6 libpq5
Suggested packages:
  sip-router
The following NEW packages will be installed:
  coturn libevent-core-2.1-6 libevent-extra-2.1-6 libevent-openssl-2.1-6 libevent-pthreads-2.1-6 libpq5
0 upgraded, 6 newly installed, 0 to remove and 6 not upgraded.
Need to get 860 kB of archives.
After this operation, 2,888 kB of additional disk space will be used.
Do you want to continue? [Y/n] y
...
Fetched 860 kB in 0s (4,455 kB/s)
Selecting previously unselected package libevent-core-2.1-6:amd64.
(Reading database ... 177118 files and directories currently installed.)
Preparing to unpack .../0-libevent-core-2.1-6_2.1.8-stable-4_amd64.deb ...
Unpacking libevent-core-2.1-6:amd64 (2.1.8-stable-4) ...
Selecting previously unselected package libevent-extra-2.1-6:amd64.
Preparing to unpack .../1-libevent-extra-2.1-6_2.1.8-stable-4_amd64.deb ...
Unpacking libevent-extra-2.1-6:amd64 (2.1.8-stable-4) ...
Selecting previously unselected package libevent-openssl-2.1-6:amd64.
Preparing to unpack .../2-libevent-openssl-2.1-6_2.1.8-stable-4_amd64.deb ...
Unpacking libevent-openssl-2.1-6:amd64 (2.1.8-stable-4) ...
Selecting previously unselected package libevent-pthreads-2.1-6:amd64.
Preparing to unpack .../3-libevent-pthreads-2.1-6_2.1.8-stable-4_amd64.deb ...
Unpacking libevent-pthreads-2.1-6:amd64 (2.1.8-stable-4) ...
Selecting previously unselected package libpq5:amd64.
Preparing to unpack .../4-libpq5_11.14-0+deb10u1_amd64.deb ...
Unpacking libpq5:amd64 (11.14-0+deb10u1) ...
Selecting previously unselected package coturn.
Preparing to unpack .../5-coturn_4.5.1.1-1.1+deb10u2_amd64.deb ...
Unpacking coturn (4.5.1.1-1.1+deb10u2) ...
Setting up libpq5:amd64 (11.14-0+deb10u1) ...
Setting up libevent-core-2.1-6:amd64 (2.1.8-stable-4) ...
Setting up libevent-extra-2.1-6:amd64 (2.1.8-stable-4) ...
Setting up libevent-pthreads-2.1-6:amd64 (2.1.8-stable-4) ...
Setting up libevent-openssl-2.1-6:amd64 (2.1.8-stable-4) ...
Setting up coturn (4.5.1.1-1.1+deb10u2) ...
Adding group `turnserver' (GID 132) ...
Done.
Adding system user `turnserver' (UID 125) ...
Adding new user `turnserver' (UID 125) with group `turnserver' ...
Not creating home directory `/'.
I: Creating /var/lib/turn/turndb from /usr/share/doc/coturn/schema.sql
Created symlink /etc/systemd/system/multi-user.target.wants/coturn.service → /lib/systemd/system/coturn.service.
Processing triggers for systemd (241-7~deb10u8) ...
Processing triggers for man-db (2.8.5-2) ...
Processing triggers for libc-bin (2.28-10+deb10u1) ...
root@web:~# apt update
...
Fetched 51.9 kB in 2s (22.4 kB/s)
Reading package lists... Done
Building dependency tree       
Reading state information... Done
6 packages can be upgraded. Run 'apt list --upgradable' to see them.
root@web:~# apt upgrade
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Calculating upgrade... Done
The following NEW packages will be installed:
  libnginx-mod-http-auth-pam libnginx-mod-http-dav-ext libnginx-mod-http-echo libnginx-mod-http-geoip libnginx-mod-http-image-filter libnginx-mod-http-subs-filter
  libnginx-mod-http-upstream-fair libnginx-mod-http-xslt-filter libnginx-mod-mail libnginx-mod-stream nginx nginx-common nginx-full
The following packages have been kept back:
  jicofo jitsi-meet jitsi-meet-prosody jitsi-meet-web jitsi-meet-web-config jitsi-videobridge2
0 upgraded, 13 newly installed, 0 to remove and 6 not upgraded.
Need to get 0 B/1,760 kB of archives.
After this operation, 3,295 kB of additional disk space will be used.
Do you want to continue? [Y/n] n

aham, now I understand …

In the case where you had the problem was coturn installed?

I think this should fix it.

@damencho
I had just installed coturn when I saw it was not installed. I then tried to apt upgrade after and it still tried to install nginx. I rebooted in case and now I have this to deal with

Apr 27 15:05:05 web..ca turnserver[1138]: 0: 
                                                     CONFIG ERROR: Empty cli-password, and so telnet cli interface is disabled! Please set a non empty cli-password!
Apr 27 15:05:05 web..ca turnserver[1138]: 0: main: Cannot configure any meaningful IP listener address
Apr 27 15:05:05 web..ca systemd[1]: Failed to start coTURN STUN/TURN Server.

Actually, once I saw this error in journalctl. I still tried systemctl status coturn and it looks to be fine?

root@web:~# systemctl restart coturn
root@web:~# systemctl status coturn
● coturn.service - coTURN STUN/TURN Server
   Loaded: loaded (/lib/systemd/system/coturn.service; enabled; vendor preset: enabled)
   Active: active (running) since Wed 2022-04-27 15:14:22 EDT; 3s ago
     Docs: man:coturn(1)
           man:turnadmin(1)
           man:turnserver(1)
  Process: 3460 ExecStart=/usr/bin/turnserver --daemon -c /etc/turnserver.conf --pidfile /run/turnserver/turnserver.pid (code=exited, status=0/SUCCESS)
  Process: 3462 ExecStartPost=/bin/sleep 2 (code=exited, status=0/SUCCESS)
 Main PID: 3461 (turnserver)
    Tasks: 12 (limit: 65000)
   Memory: 8.0M
   CGroup: /system.slice/coturn.service
           └─3461 /usr/bin/turnserver --daemon -c /etc/turnserver.conf --pidfile /run/turnserver/turnserver.pid

Apr 27 15:14:20 web..ca turnserver[3461]: 0: turn server id=5 created
Apr 27 15:14:20 web..ca turnserver[3461]: 0: IO method (general relay thread): epoll (with changelist)
Apr 27 15:14:20 web..ca turnserver[3461]: 0: turn server id=4 created
Apr 27 15:14:20 web..ca turnserver[3461]: 0: Total General servers: 6
Apr 27 15:14:20 web..ca turnserver[3461]: 0: IO method (auth thread): epoll (with changelist)
Apr 27 15:14:20 web..ca turnserver[3461]: 0: IO method (auth thread): epoll (with changelist)
Apr 27 15:14:20 web..ca turnserver[3461]: 0: IO method (admin thread): epoll (with changelist)
Apr 27 15:14:20 web..ca turnserver[3461]: 0: IO method (auth thread): epoll (with changelist)
Apr 27 15:14:20 web..ca turnserver[3461]: 0: SQLite DB connection success: /var/lib/turn/turndb
Apr 27 15:14:22 web..ca systemd[1]: Started coTURN STUN/TURN Server.

I’m not very familiar with this service… but it does not seem to start on boot.

For your last comment, that looks like you’re about to commit. Are those new changes that will come out on an update? because I can’t update without it wanting to install nginx.

Yes, my changes will come with an update, but it will take time till it lands in stable
coturn is a turnserver and normally configured when installing the jitsi-meet-turnserver package, I guess you are trying to run it without any configuraiton.

Seems it is still not fixed with the latest changes …
For some reason, it thinks jitsi-meet-web-config is broken … :man_shrugging:

# apt -o Debug::pkgProblemResolver=true install jitsi-meet
Reading package lists... Done
Building dependency tree
Reading state information... Done
Starting pkgProblemResolver with broken count: 1
Starting 2 pkgProblemResolver with broken count: 1
Investigating (0) jitsi-meet-web-config:amd64 < 1.0.5913-1 -> 1.0.6122-1 @ii umU Ib >
Broken jitsi-meet-web-config:amd64 Depends on nginx:amd64 < none | 1.18.0-0ubuntu1.3 @un uH >
  Considering nginx:amd64 1 as a solution to jitsi-meet-web-config:amd64 1
  Re-Instated nginx-common:amd64
  Re-Instated libjbig0:amd64
  Re-Instated libwebp6:amd64
  Re-Instated libtiff5:amd64
  Re-Instated libxpm4:amd64
  Re-Instated libgd3:amd64
  Re-Instated libnginx-mod-http-image-filter:amd64
  Re-Instated libnginx-mod-http-xslt-filter:amd64
  Re-Instated libnginx-mod-mail:amd64
  Re-Instated libnginx-mod-stream:amd64
  Re-Instated nginx-core:amd64
  Re-Instated nginx:amd64
  Re-Instated jitsi-meet-web-config:amd64
Done
The following packages were automatically installed and are no longer required:
  apache2-bin apache2-data apache2-utils libapr1 libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap libjansson4 liblua5.2-0
Use 'apt autoremove' to remove them.
The following additional packages will be installed:
  coturn jicofo jitsi-meet-prosody jitsi-meet-turnserver jitsi-meet-web jitsi-meet-web-config jitsi-videobridge2 libevent-core-2.1-7 libevent-extra-2.1-7 libevent-openssl-2.1-7
  libevent-pthreads-2.1-7 libgd3 libhiredis0.14 libjbig0 libmysqlclient21 libnginx-mod-http-image-filter libnginx-mod-http-xslt-filter libnginx-mod-mail libnginx-mod-stream
  libpq5 libtiff5 libwebp6 libxpm4 mysql-common nginx nginx-common nginx-core sqlite3
Suggested packages:
  sip-router libgd-tools fcgiwrap nginx-doc sqlite3-doc
The following packages will be REMOVED:
  apache2
The following NEW packages will be installed:
  coturn jitsi-meet-turnserver libevent-core-2.1-7 libevent-extra-2.1-7 libevent-openssl-2.1-7 libevent-pthreads-2.1-7 libgd3 libhiredis0.14 libjbig0 libmysqlclient21
  libnginx-mod-http-image-filter libnginx-mod-http-xslt-filter libnginx-mod-mail libnginx-mod-stream libpq5 libtiff5 libwebp6 libxpm4 mysql-common nginx nginx-common nginx-core
  sqlite3
The following packages will be upgraded:
  jicofo jitsi-meet jitsi-meet-prosody jitsi-meet-web jitsi-meet-web-config jitsi-videobridge2

And if I run

# apt -o Debug::pkgProblemResolver=true -f install
Reading package lists... Done
Building dependency tree
Reading state information... Done
Starting pkgProblemResolver with broken count: 0
Starting 2 pkgProblemResolver with broken count: 0
Done
0 upgraded, 0 newly installed, 0 to remove and 35 not upgraded.

It says nothing is broken …

Oh, I missed a spot in the control file, an update is coming to test it.
Sorry for the noise.

Now it works, and also installs and runs coturn next to apache.

@damencho
Thank you for the replies

So what should be my next step to get the updates without it forcing nginx? Currently I did apt update and apt upgrade and it still wants to force install nginx packages

root@web:~# apt update
... 
Fetched 51.9 kB in 2s (28.1 kB/s)
Reading package lists... Done
Building dependency tree       
Reading state information... Done
6 packages can be upgraded. Run 'apt list --upgradable' to see them.
**root@web:~# apt upgrade**
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Calculating upgrade... Done
The following NEW packages will be installed:
 libnginx-mod-http-auth-pam libnginx-mod-http-dav-ext libnginx-mod-http-echo libnginx-mod-http-geoip libnginx-mod-http-image-filter libnginx-mod-http-subs-filter libnginx-mod-http-upstream-fair
 libnginx-mod-http-xslt-filter libnginx-mod-mail libnginx-mod-stream nginx nginx-common nginx-full
The following packages have been kept back:
 jicofo jitsi-meet jitsi-meet-prosody jitsi-meet-web jitsi-meet-web-config jitsi-videobridge2
0 upgraded, 13 newly installed, 0 to remove and 6 not upgraded.
Need to get 0 B/1,760 kB of archives.
After this operation, 3,295 kB of additional disk space will be used.
Do you want to continue? [Y/n] n
Abort.

Did you switch to using unstable repo?

@damencho
I did not.
I found have now blocked the stable and put in unstable for now. It looks to have worked without nginx.
Thank you for your time good sir!
Any idea when stable will be updated? I guess I’ll have to check stable once in a while so I can switch back to it.

in case your curious

root@web:~# apt update
...
Fetched 41.0 kB in 2s (22.3 kB/s)    
Reading package lists... Done
Building dependency tree       
Reading state information... Done
6 packages can be upgraded. Run 'apt list --upgradable' to see them.
root@web:~# apt upgrade
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Calculating upgrade... Done
The following NEW packages will be installed:
  jitsi-meet-turnserver
The following packages will be upgraded:
  jicofo jitsi-meet jitsi-meet-prosody jitsi-meet-web jitsi-meet-web-config jitsi-videobridge2
6 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 74.3 MB of archives.
After this operation, 4,620 kB of additional disk space will be used.
Do you want to continue? [Y/n] y
...
Fetched 74.3 MB in 3s (27.2 MB/s)
Reading changelogs... Done
Preconfiguring packages ...
(Reading database ... 177284 files and directories currently installed.)
Preparing to unpack .../jitsi-videobridge2_2.1-677-gdf5909dd-1_all.deb ...
Unpacking jitsi-videobridge2 (2.1-677-gdf5909dd-1) over (2.1-634-gff8609ad-1) ...
Setting up jitsi-videobridge2 (2.1-677-gdf5909dd-1) ...
* Applying /etc/sysctl.d/20-jvb-udp-buffers.conf ...
net.core.rmem_max = 10485760
net.core.netdev_max_backlog = 100000
* Applying /usr/lib/sysctl.d/30-syncthing.conf ...
net.core.rmem_max = 2097152
* Applying /etc/sysctl.d/99-sysctl.conf ...
* Applying /etc/sysctl.d/protect-links.conf ...
fs.protected_hardlinks = 1
fs.protected_symlinks = 1
* Applying /etc/sysctl.conf ...
(Reading database ... 177285 files and directories currently installed.)
Preparing to unpack .../jitsi-meet_2.0.7259-1_all.deb ...
Unpacking jitsi-meet (2.0.7259-1) over (2.0.7001-1) ...
Preparing to unpack .../jicofo_1.0-877-1_all.deb ...
Unpacking jicofo (1.0-877-1) over (1.0-862-1) ...
Preparing to unpack .../jitsi-meet-web_1.0.6131-1_all.deb ...
Unpacking jitsi-meet-web (1.0.6131-1) over (1.0.5913-1) ...
Preparing to unpack .../jitsi-meet-web-config_1.0.6131-1_all.deb ...
Unpacking jitsi-meet-web-config (1.0.6131-1) over (1.0.5913-1) ...
Preparing to unpack .../jitsi-meet-prosody_1.0.6131-1_all.deb ...
Unpacking jitsi-meet-prosody (1.0.6131-1) over (1.0.5913-1) ...
Setting up jitsi-meet-web-config (1.0.6131-1) ...
----------------

You can now switch to a Let’s Encrypt certificate. To do so, execute:
/usr/share/jitsi-meet/scripts/install-letsencrypt-cert.sh

----------------
Selecting previously unselected package jitsi-meet-turnserver.
(Reading database ... 177292 files and directories currently installed.)
Preparing to unpack .../jitsi-meet-turnserver_1.0.6131-1_all.deb ...
Unpacking jitsi-meet-turnserver (1.0.6131-1) ...
Setting up jitsi-meet-prosody (1.0.6131-1) ...
general             warn	Lua 5.1 has several issues and support is being phased out, consider upgrading
Component "focus.web.smbservices.ca" "client_proxy"
general             warn	Lua 5.1 has several issues and support is being phased out, consider upgrading
Setting up jicofo (1.0-877-1) ...
Setting up jitsi-meet-turnserver (1.0.6131-1) ...
Setting up jitsi-meet-web (1.0.6131-1) ...
Setting up jitsi-meet (2.0.7259-1) ...
Processing triggers for systemd (241-7~deb10u8) ...

You can subscribe for notifications here to get notified: GitHub - jitsi/jitsi-meet-release-notes: Release notes for Jitsi Meet: the web frontend, mobile apps and mobile SDKs
I would guess by the end of next week, but not 100% sure.

1 Like