On Fri, Apr 18, 2025 at 7:47 PM Björn Persson <Bjorn@rombobjörn.se> wrote: > > Fabio Valentini wrote: > > Do you have any opinion on which new optional subpackages should or > > should not get pulled in by default on new installs? > > I'm not familiar with all the components either. One thing I notice is > that treating keyboxd as optional seems questionable. The manual says > it will be used by default for new users. Have you checked what the > various components will do if it's missing?
As far as I know, it is new in gnupg 2.4 and still optional. It also seems to be a bit of a controversial "feature", but I don't claim to understand the reasons for that. As far as I can tell, it is treated as optional on debian too. > I see that gnupg2 requires gnupg2-verify. That will keep package builds > working, so that's good. If that dependency would be dropped or turned > into "Recommends", then we would need to coordinate this change with > the "Fix limitations in gpgverify" change to make changes in the right > order. Yes, that was an intentional decision on my part to not conflict with that in-flight Change Proposal. Though it would probably make sense to change the OpenPGP signature verification macros to only depend on gnupg2-verify (or maybe even sqv or sqopv) when that is the only component that is needed. Fabio -- _______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue