Page MenuHomePhabricator

pinentry-gtk2 pulls in a lot of unneeded Gnome/GTK libs
Closed, DeclinedPublic

Description

Right now all jessie systems have GTK installed (plus all the related underlying Gnome libraries, Harfbuzz, Cairo, Pango, Graphite etc).

The only reason is that gnupg-agent (which gets pulled in by mutt) depends on pinentry-gtk2 | pinentry-curses. Since the first dependency alternative gets tried first, pinentry-gtk is preferred over pinentry-curses.

Installing pinentry-curses in scripts/late-command would probably fix this.

Event Timeline

MoritzMuehlenhoff raised the priority of this task from to Needs Triage.
MoritzMuehlenhoff updated the task description. (Show Details)
MoritzMuehlenhoff added a project: SRE.
MoritzMuehlenhoff subscribed.

I think we shouldn't have mutt either, as bsd-mailx is already installed anyways and both come from exim4-base via

neodymium:~$ aptitude why mutt
i   exim4-base Suggests mail-reader
i   mutt       Provides mail-reader
neodymium:~$ aptitude why bsd-mailx
i   exim4-base Recommends mailx
i   bsd-mailx  Provides   mailx
neodymium:~$

I'm not sure even sure why mutt is installed, "mail-reader" is only a Suggests: of exim4-base after all?

indeed, it looks like it gets dragged in on the first install (even before puppet)

neodymium:~$ zgrep -e mutt -e mailx -e exim /var/log/dpkg.log.3.gz  | grep 'install '
2015-11-10 18:34:40 install exim4-config:all <none> 4.84-8
2015-11-10 18:34:40 install exim4-base:amd64 <none> 4.84-8
2015-11-10 18:34:40 install exim4-daemon-light:amd64 <none> 4.84-8
2015-11-10 18:34:41 install bsd-mailx:amd64 <none> 8.1.2-0.20141216cvs-2
2015-11-10 18:34:43 install exim4:all <none> 4.84-8
2015-11-10 18:34:47 install mutt:amd64 <none> 1.5.23-3

This still happens and we have GTK/Gnome base libs installed on > 1000 servers now, we should really sort this out for stretch...

Ugh! In d-i-test:

faidon@d-i-test:~$ dpkg -l |egrep 'gnupg|mutt|pinentry'
ii  gnupg                         2.1.18-6                       amd64        GNU privacy guard - a free PGP replacement
ii  gnupg-agent                   2.1.18-6                       amd64        GNU privacy guard - cryptographic agent
ii  pinentry-curses               1.0.0-2                        amd64        curses-based PIN or pass-phrase entry dialog for GnuPG

So that's promising. I'd really prefer to fix it for the existing jessie fleet too though…

Ack for jessie, I'll have a look at the rdepends of the various packages, we should be able to trim these via puppet

This only affected jessie, which is going away and won't specifically get fixed there.