On Fri, Apr 18, 2025 at 7:47 PM Björn Persson <Bjorn@rombobjörn.se> wrote:
>
> Fabio Valentini wrote:
> > Do you have any opinion on which new optional subpackages should or
> > should not get pulled in by default on new installs?
>
> I'm not familiar with all the components either. One thing I notice is
> that treating keyboxd as optional seems questionable. The manual says
> it will be used by default for new users. Have you checked what the
> various components will do if it's missing?

As far as I know, it is new in gnupg 2.4 and still optional.
It also seems to be a bit of a controversial "feature", but I don't
claim to understand the reasons for that.
As far as I can tell, it is treated as optional on debian too.

> I see that gnupg2 requires gnupg2-verify. That will keep package builds
> working, so that's good. If that dependency would be dropped or turned
> into "Recommends", then we would need to coordinate this change with
> the "Fix limitations in gpgverify" change to make changes in the right
> order.

Yes, that was an intentional decision on my part to not conflict with
that in-flight Change Proposal.

Though it would probably make sense to change the OpenPGP signature
verification macros to only depend on gnupg2-verify (or maybe even sqv
or sqopv) when that is the only component that is needed.

Fabio
-- 
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to