Bug#1005821: please stop depending on bind9-host

2022-07-25 Thread Sam Hartman
control: retitle -1 Make krb5-config recommends
control: reassign -1 krb5-user

> "Michael" == Michael Tokarev  writes:

Michael> Um. I misfiled this bugreport actually. I started writing
Michael> it against krb5-user and realized the bind9-host dependency
Michael> comes from krb5-config not krb5-user.

Michael> And I think it is better to make krb5-CONFIG optional, not
Michael> krb5-USER.  Ie, for krb5-user, denote krb5-config from
Michael> Depends to Recommends.  Since actually, the only reason
Michael> krb5-config package is needed for krb5-user (and other krb5
Michael> stuff actually) is to *create* the initial configuration,
Michael> it does not need krb5-config package for runtime
Michael> operations, ie. krb5-config can be removed after
Michael> installation.

I agree with this analysis and will implement the change in a future
krb5 upload.
I wish I had looked at this bug in general  before the krb5 upload I
made Friday.


signature.asc
Description: PGP signature


Bug#1005821: please stop depending on bind9-host

2022-02-15 Thread Michael Tokarev

15.02.2022 19:32, Michael Tokarev wrote:

Package: krb5-config
Version: 1.18.3-6+deb11u1
Severity: normal

Package krb5-user depends on bind9-host, and depends this ONLY to create
the initial template/configuration if it does not exist already.  This
package is not needed for regular operations, only for postinst script,
and even there, as it seems (I'm not 100% sure), it is optional.


Um. I misfiled this bugreport actually. I started writing it against krb5-user
and realized the bind9-host dependency comes from krb5-config not krb5-user.

And I think it is better to make krb5-CONFIG optional, not krb5-USER.
Ie, for krb5-user, denote krb5-config from Depends to Recommends.
Since actually, the only reason krb5-config package is needed for krb5-user
(and other krb5 stuff actually) is to *create* the initial configuration,
it does not need krb5-config package for runtime operations, ie. krb5-config
can be removed after installation.

Thanks,

/mjt



Bug#1005821: please stop depending on bind9-host

2022-02-15 Thread Michael Tokarev
Package: krb5-config
Version: 1.18.3-6+deb11u1
Severity: normal

Package krb5-user depends on bind9-host, and depends this ONLY to create
the initial template/configuration if it does not exist already.  This
package is not needed for regular operations, only for postinst script,
and even there, as it seems (I'm not 100% sure), it is optional.

Please denote bind9-host from Depends to Recommends. This will continue
to install bind9-host for regular setups, and will allow avoiding this
dependency at runtime when this is definitely not necessary.  And while
at it, verify that the postinst script works without host utility.

Bind9-host pulls in a bunch of other libraries with frequent security
updates, and making it a requiriment just for initial configuration is
definitely an overkill. Especially since many times the configuration
is made manually anyway.

We had to create bind9-host-dummy package just to stop this annoyance.

See also #855593 which is open since 2017..

Thanks,

/mjt