Bug#814027: [pkg-gnupg-maint] Bug#814027: "ts209" d-i image failed to build due to size

[Martin Michlmayr]

* Werner Koch  [2016-02-16 08:33]:
> What about using a smaller version of libgcrypt for d-i?  My current 1.7
> version using standard options has a stripped size of 1.1 MiB.  By using
> these options:
> 
>   ./configure --enable-maintainer-mode \
>   --enable-ciphers=cast5,des,aes \
>   --enable-digests=sha1,sha256,sha512 \
>   --enable-kfds=s2k,pkdf2 \
>   --disable-padlock-support --disable-aesni-support \
>   --disable-drng-support \
>   --disable-avx-support --disable-avx2-support \
>   --disable-pclmul-support 
> 
> I get down to a stripped size of the SO of 551 KiB on amd64.
> 
> We would need to tweak GnuPG a bit to work with that version.  Right now
> it complains about missing MD5 at runtime.  But that should be fixed
> anyway.
> 
> Would that be a way forward?

I'm not sure if it will help in my particular case (I can try,
though), but I think this should be done anyway.  Do you (or Daniel)
want to file a bug on libgcrypt once GnuPG has been tweaked?

-- 
Martin Michlmayr
http://www.cyrius.com/

Bug#814027: [pkg-gnupg-maint] Bug#814027: "ts209" d-i image failed to build due to size

[Daniel Kahn Gillmor]

On Mon 2016-02-15 22:47:11 -0500, Martin Michlmayr wrote:

> I had an idea on how to solve this problem: in addition to building
> gpgv-udeb from gnupg2, you could build a gpgv1.4-udeb on armel.  I
> could then use that gpgv1.4-udeb on the armel subarch with the size
> issues.
>
> Would that work for you?  I've attached a proposed patch.

I've uploaded this patch for now so that the stretch installers can be
rebuilt for the tighter armel platforms.  But i'd really like to pursue
Werner's suggestion about minimizing the libgcrypt udeb where possible,
so we can drop gpgv1.4-udeb entirely.

   --dkg

Bug#814027: [pkg-gnupg-maint] Bug#814027: "ts209" d-i image failed to build due to size

[Werner Koch]

Hi!

What about using a smaller version of libgcrypt for d-i?  My current 1.7
version using standard options has a stripped size of 1.1 MiB.  By using
these options:

  ./configure --enable-maintainer-mode \
  --enable-ciphers=cast5,des,aes \
  --enable-digests=sha1,sha256,sha512 \
  --enable-kfds=s2k,pkdf2 \
  --disable-padlock-support --disable-aesni-support \
  --disable-drng-support \
  --disable-avx-support --disable-avx2-support \
  --disable-pclmul-support 

I get down to a stripped size of the SO of 551 KiB on amd64.

We would need to tweak GnuPG a bit to work with that version.  Right now
it complains about missing MD5 at runtime.  But that should be fixed
anyway.

Would that be a way forward?


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.