Fedora 38 Update Warning: java-17-openjdk-headless

Greetings Fedora Community,

Just ran an update via dnf upgrade and saw the following warning pop up. Not familiar enough with Java to know if this is one of those warnings you can safely ignore or if any user interaction is required. Please feel free to advise on if there is anything needed to be done, thank you.

  Upgrading        : java-17-openjdk-headless-1:17.0.8.0.7-1.fc38.x86_64     17/41 
warning: /etc/java/java-17-openjdk/java-17-openjdk-17.0.8.0.7-1.fc38.x86_64/conf/security/java.security created as /etc/java/java-17-openjdk/java-17-openjdk-17.0.8.0.7-1.fc38.x86_64/conf/security/java.security.rpmnew
warning: /etc/java/java-17-openjdk/java-17-openjdk-17.0.8.0.7-1.fc38.x86_64/conf/security/nss.fips.cfg created as /etc/java/java-17-openjdk/java-17-openjdk-17.0.8.0.7-1.fc38.x86_64/conf/security/nss.fips.cfg.rpmnew

  Running scriptlet: java-17-openjdk-headless-1:17.0.8.0.7-1.fc38.x86_64     17/41

This showed up as a warning during the upgrading path as well as during the cleanup path too:

  Cleanup          : java-17-openjdk-headless-1:17.0.7.0.7-5.fc38.x86_64     40/41 
warning: /etc/java/java-17-openjdk/java-17-openjdk-17.0.7.0.7-5.fc38.x86_64/conf/security/nss.fips.cfg saved as /etc/java/java-17-openjdk/java-17-openjdk-17.0.7.0.7-5.fc38.x86_64/conf/security/nss.fips.cfg.rpmsave
warning: /etc/java/java-17-openjdk/java-17-openjdk-17.0.7.0.7-5.fc38.x86_64/conf/security/java.security saved as /etc/java/java-17-openjdk/java-17-openjdk-17.0.7.0.7-5.fc38.x86_64/conf/security/java.security.rpmsave

  Running scriptlet: java-17-openjdk-headless-1:17.0.7.0.7-5.fc38.x86_64     40/41

For my full terminal update log you may see this link, but everything above is what I thought most useful: Fedora 38 Update Warning - Pastebin.com

Post-upgrade tasks: Update system configuration files

2 Likes

Can you please explain if I’m supposed to use delete, skip, merge, or keep the files the same? There’s a lot of options there.

Configuration file '/etc/java/java-17-openjdk/java-17-openjdk-17.0.8.0.7-1.fc38.x86_64/conf/security/java.security'
-rw-r--r--. 1 root root 59021 Jan 25  2023 /etc/java/java-17-openjdk/java-17-openjdk-17.0.8.0.7-1.fc38.x86_64/conf/security/java.security
-rw-r--r--. 1 root root 59251 Aug  7 08:33 /etc/java/java-17-openjdk/java-17-openjdk-17.0.8.0.7-1.fc38.x86_64/conf/security/java.security.rpmnew

 ==> Package distributor has shipped an updated version.
   What would you like to do about it ?  Your options are:
    Y or I  : install the package maintainer's version
    N or O  : keep your currently-installed version (and delete .rpmsave)
      D     : show the differences between the versions
      M     : merge configuration files
      Z     : background this process to examine the situation
      S     : skip this file
 The default action is to keep your current version.
*** aliases (Y/I/N/O/D/M/Z/S) [default=N] ? 
Your choice: 

Edit: Also, the fact that this rpmconf package is not installed by default is a little confusing/concerning since I need it to do system maintenance now on Fedora. Update, since this wasn’t installed by default, I have a few other pacsave/pacnew files as well. For now I’ve just opted to skip each one to show what all I have below:

[scott@fedora ~]$ sudo rpmconf -a
[sudo] password for scott: 
Configuration file '/etc/cups/cupsd.conf'
-rw-r-----. 1 root lp 6595 Apr 13 17:47 /etc/cups/cupsd.conf
-rw-r-----. 1 root lp 6787 Jun  6 20:00 /etc/cups/cupsd.conf.rpmnew

 ==> Package distributor has shipped an updated version.
   What would you like to do about it ?  Your options are:
    Y or I  : install the package maintainer's version
    N or O  : keep your currently-installed version (and delete .rpmsave)
      D     : show the differences between the versions
      M     : merge configuration files
      Z     : background this process to examine the situation
      S     : skip this file
 The default action is to keep your current version.
*** aliases (Y/I/N/O/D/M/Z/S) [default=N] ? 
Your choice: S           
Configuration file '/etc/cups/cupsd.conf'
-rw-r-----. 1 root lp 6553 Mar 22 20:00 /etc/cups/cupsd.conf.rpmsave
-rw-r-----. 1 root lp 6595 Apr 13 17:47 /etc/cups/cupsd.conf

 ==> Package distributor has shipped an updated version.
 ==> Maintainer forced upgrade. Your old version has been backed up.
   What would you like to do about it?  Your options are:
    Y or I  : install (keep) the package maintainer's version
    N or O  : return back to your original file
      D     : show the differences between the versions
      M     : merge configuration files
      Z     : background this process to examine the situation
      S     : skip this file
 The default action is to keep package maintainer's version.
*** aliases (Y/I/N/O/M/D/Z/S) [default=Y] ? 
Your choice: S
Configuration file '/etc/java/java-17-openjdk/java-17-openjdk-17.0.8.0.7-1.fc38.x86_64/conf/security/java.security'
-rw-r--r--. 1 root root 59021 Jan 25  2023 /etc/java/java-17-openjdk/java-17-openjdk-17.0.8.0.7-1.fc38.x86_64/conf/security/java.security
-rw-r--r--. 1 root root 59251 Aug  7 08:33 /etc/java/java-17-openjdk/java-17-openjdk-17.0.8.0.7-1.fc38.x86_64/conf/security/java.security.rpmnew

 ==> Package distributor has shipped an updated version.
   What would you like to do about it ?  Your options are:
    Y or I  : install the package maintainer's version
    N or O  : keep your currently-installed version (and delete .rpmsave)
      D     : show the differences between the versions
      M     : merge configuration files
      Z     : background this process to examine the situation
      S     : skip this file
 The default action is to keep your current version.
*** aliases (Y/I/N/O/D/M/Z/S) [default=N] ? 
Your choice: S
Configuration file '/etc/java/java-17-openjdk/java-17-openjdk-17.0.8.0.7-1.fc38.x86_64/conf/security/nss.fips.cfg'
-rw-r--r--. 1 root root 196 Jan 25  2023 /etc/java/java-17-openjdk/java-17-openjdk-17.0.8.0.7-1.fc38.x86_64/conf/security/nss.fips.cfg
-rw-r--r--. 1 root root 195 Aug  3 14:21 /etc/java/java-17-openjdk/java-17-openjdk-17.0.8.0.7-1.fc38.x86_64/conf/security/nss.fips.cfg.rpmnew

 ==> Package distributor has shipped an updated version.
   What would you like to do about it ?  Your options are:
    Y or I  : install the package maintainer's version
    N or O  : keep your currently-installed version (and delete .rpmsave)
      D     : show the differences between the versions
      M     : merge configuration files
      Z     : background this process to examine the situation
      S     : skip this file
 The default action is to keep your current version.
*** aliases (Y/I/N/O/D/M/Z/S) [default=N] ? 
Your choice: S
[scott@fedora ~]$ 

I know you have to deal with pacnew/pacsave files on Arch, but I had no clue I had to do this type of maintenance on Fedora too. Not sure how I feel about that really.

It is really very simple.
The system is telling the user that instead of replacing the file that may contain user specific configs it has instead created a .rpmnew version of that file. It is now up to the user to see what changes may have been made in the newer version and to choose how to proceed.

The choice for the user is to keep the older file as-is, install the newer file in its place as-is, or to merge any customizing changes into the newer file before replacing the older file.

In the other case it is telling the user that it has already replaced the file, but has retained the older one as a .rpmsave file.

The choices for the user are almost the same.

If there are no user managed configs in the file then the .rpmsave file may be deleted. If there are user changes then they should be merged into the newer file as appropriate.

You should normally select this option to keep the configs up to date:

Other options can be used to deal with customized configs.

1 Like