Error installing vaultwarden - held broken packages

Troubleshooting
#1

Trying to install vaultwarden - gets so far then throws error while installing pkg-config libssl-dev:

apt-get -qq --allow-change-held-packages install pkg-config libssl-dev
E: Unable to correct problems, you have held broken packages.

Tried:

apt --reinstall install pkg-config libssl-dev

Result:

Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 libssl-dev : Depends: libssl1.1 (= 1.1.1d-0+deb10u7+rpt1) but 1.1.1i-1+0~20201212.21+debian10~1.gbpc1ad96 is to be installed
E: Unable to correct problems, you have held broken packages.

These are the repositories lister in apt:

deb http://raspbian.raspberrypi.org/raspbian/ buster main contrib non-free
deb https://archive.raspberrypi.org/debian/ buster main
deb https://downloads.plex.tv/repo/deb/ public main
deb https://packages.sury.org/php/ buster main

Details:

  • Date | Sat Mar 12 15:41:42 GMT 2022
  • DietPi version | v8.2.2 (MichaIng/master)
  • Image creator | DietPi Core Team
  • Pre-image | Raspberry Pi OS (32-bit) Lite
  • Hardware | RPi 4 Model B (armv7l) (ID=4)
  • Kernel version | Linux DietPi 5.10.103-v7l+ #1529 SMP Tue Mar 8 12:24:00 GMT 2022 armv7l GNU/Linux
  • Distro | buster (ID=5,RASPBIAN=1)
  • Command | apt-get -qq --allow-change-held-packages install pkg-config libssl-dev
  • Exit code | 100
  • Software title | DietPi-Software


    Any help would be appreciated.
#2

Hmm its a dependency issue. Can you share following

apt show libssl1.1
#3

apt -a show libssl1.1:

Package: libssl1.1
Version: 1.1.1i-1+0~20201212.21+debian10~1.gbpc1ad96
Status: install ok installed
Priority: optional
Section: libs
Source: openssl
Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>
Installed-Size: 2567 kB
Depends: libc6 (>= 2.28), debconf (>= 0.5) | debconf-2.0
Breaks: isync (<< 1.3.0-2), lighttpd (<< 1.4.49-2), python-boto (<< 2.44.0-1.1), python-httplib2 (<< 0.11.3-1), python-imaplib2 (<< 2.57-5), python3-boto (<< 2.44.0-1.1), python3-imaplib2 (<< 2.57-5)
Homepage: https://www.openssl.org/
Download-Size: unknown
APT-Manual-Installed: yes
APT-Sources: /var/lib/dpkg/status
Description: Secure Sockets Layer toolkit - shared libraries
 This package is part of the OpenSSL project's implementation of the SSL
 and TLS cryptographic protocols for secure communication over the
 Internet.
 .
 It provides the libssl and libcrypto shared libraries.

Package: libssl1.1
Version: 1.1.1d-0+deb10u7+rpt1
Priority: optional
Section: libs
Source: openssl
Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>
Installed-Size: 3090 kB
Depends: libc6 (>= 2.28), debconf (>= 0.5) | debconf-2.0
Breaks: isync (<< 1.3.0-2), lighttpd (<< 1.4.49-2), python-boto (<< 2.44.0-1.1), python-httplib2 (<< 0.11.3-1), python-imaplib2 (<< 2.57-5), python3-boto (<< 2.44.0-1.1), python3-imaplib2 (<< 2.57-5)
Homepage: https://www.openssl.org/
Download-Size: 1277 kB
APT-Sources: https://archive.raspberrypi.org/debian buster/main armhf Packages
Description: Secure Sockets Layer toolkit - shared libraries
 This package is part of the OpenSSL project's implementation of the SSL
 and TLS cryptographic protocols for secure communication over the
 Internet.
 .
 It provides the libssl and libcrypto shared libraries.

Package: libssl1.1
Version: 1.1.1d-0+deb10u7
Priority: optional
Section: libs
Source: openssl
Maintainer: Debian OpenSSL Team <pkg-openssl-devel@lists.alioth.debian.org>
Installed-Size: 3054 kB
Depends: libc6 (>= 2.28), debconf (>= 0.5) | debconf-2.0
Breaks: isync (<< 1.3.0-2), lighttpd (<< 1.4.49-2), python-boto (<< 2.44.0-1.1), python-httplib2 (<< 0.11.3-1), python-imaplib2 (<< 2.57-5), python3-boto (<< 2.44.0-1.1), python3-imaplib2 (<< 2.57-5)
Homepage: https://www.openssl.org/
Download-Size: 1263 kB
APT-Sources: http://raspbian.raspberrypi.org/raspbian buster/main armhf Packages
Description: Secure Sockets Layer toolkit - shared libraries
 This package is part of the OpenSSL project's implementation of the SSL
 and TLS cryptographic protocols for secure communication over the
 Internet.
 .
 It provides the libssl and libcrypto shared libraries.
#4

The package seems to be already installed manually, in a different version than expected by apt package manager.

Package: libssl1.1
Version: 1.1.1i-1+0~20201212.21+debian10~1.gbpc1ad96
Status: install ok installed
APT-Manual-Installed: yes
APT-Sources: /var/lib/dpkg/status

And this is the version available via raspbian repository

Package: libssl1.1
Version: 1.1.1d-0+deb10u7+rpt1
APT-Sources: https://archive.raspberrypi.org/debian buster/main armhf Packages

Did you recall if you installed something related to OpenSSL manually?

#5

Possibly something to do with my pivpn installation.

#6

Hmm you could try to reinstall the package

apt install --reinstall libssl1.1
#7

apt install --reinstall libssl1.1:

Reading package lists... Done
Building dependency tree
Reading state information... Done
Reinstallation of libssl1.1 is not possible, it cannot be downloaded.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
#8

MichaIng
Could you have a look pls, how libssl1.1 could be switched from local installed, to the one from Raspberry apt repository.

#9

This system was upgraded from Stretch to Buster, right? Please check our guide about removing the obsolete PHP repository: https://dietpi.com/docs/usage/#how-to-upgrade-to-buster

rm -f /etc/apt/sources.list.d/dietpi-php.list
rm -f /etc/apt/trusted.gpg.d/dietpi-php.gpg
rm -f /etc/apt/preferences.d/dietpi-{php,openssl,xrdp}
rm -f /etc/mysql/mariadb.conf.d/97-dietpi.cnf
apt update

Then try to downgrade libssl1.1 to the intended version:

apt install --reinstall --allow-change-held-packages --allow-downgrades 'libssl1.1=1.1.1d-0+deb10u7+rpt1'
#10

Yep, it was upgraded from stretch to buster.

I removed the old PHP repository and was able to downgrade libssl1.1. Vaultwarden appears to have installed correctly now.

Thanks for the help.