On Tue, 18 Jan 2022 at 19:13:14 +0000, Steve McIntyre wrote:
At the moment, fwupd will only be installed by default on systems
installed to use a Gnome desktop (checked for Buster, Bullseye and
Sid).
As of Debian 13 'trixie', several desktop tasks install fwupd: GNOME
certainly does, via gnome-software, and KDE probably does too, via
plasma-discover-backend-fwupd.
During Debian 13.x install media testing we noted that XFCE,
specifically, does not do this.
I haven't confirmed whether the other desktop tasks do this or not.
We should probably pull it in and enable it by default for most
systems (i.e. all desktops and servers)
I agree, FWIW.
On Tue, 18 Jan 2022 at 22:43:16 +0100, Diederik de Haas wrote:
[fwupd's] direct dependency list is also rather large and I don't know how to
retrieve its transitive dependency list, but seeing the following items, I
expect a LOT of GLib and other Gnome software will be dragged in:
libgusb2, libjson-glib-1.0-0, libpolkit-gobject-1-0
Low-level non-GUI GLib-based libraries are generally not a size problem:
all the desktop environments pull in GLib anyway, and most of them also
pull in GTK (KDE and LXQt might not, but XFCE, LXDE, Cinnamon and MATE
are all GTK-based environments). So, many of these packages will be
installed anyway.
During Debian 13.7 media testing, I tried `apt install fwupd` on a
freshly installed XFCE live-media system (BIOS boot on a Lenovo X220, if
it matters), and here's what it wants to install, with Recommends
enabled:
bolt
fwupd
fwupd-amd64-signed
jq
libflashrom1
libftdi1-2
libfwupd3
libjaylink0
libjcat1
libjq1
libonig5
libprotobuf-c1
libtss2-esys-3.0.2-0t64
libtss2-mu-4.0.1-0t64
libtss2-sys1t64
libtss2-tcti-cmd0t64
libtss2-tcti-device0t64
libtss2-tcti-mssim0t64
libtss2-tcti-swtpm0t64
tpm-udev
Download size: 6,246 kB
Space needed: 17.3 MB
I don't think that's a big size impact.
Not a problem on Gnome DE systems as I assume they'll get them anyway, but
others may not want those.
Anyone who doesn't want to install the packages recommended by tasks is
free to not use the tasks. The tasks are primarily for users who don't
have special requirements and don't know what they want, and I think
those users deserve to get firmware security fixes, if published by
their hardware vendor.
smcv
