[ re-sent because I forgot to cc the BTS ]

On Thursday 10 April 2014 13:22:45 you wrote:
> I consider this a problem because it's a lot of packages that simply are
> not going to be used on these systems.

Yes. A few MB of disks are wasted. Even on ARM system running on a SD card, 
this is no longer a problem.

> A number of drivers are split
> into the lcdproc-extra-drivers package to avoid all users having to
> install large parts of X11,

In this case, the large part of X11 are some X libraries which also weight a 
few MB (no more than 10). This package split made sense a few years ago on 
enbedded system where 32MB flash was a big deal. 

Thanks to your mail, I've realised it's not worth the effort. I'll remove this 
split the next time there's a problem around this hack.

> I think it would be kind to users to allow
> them not to install a large number of optional packages.

It's also kind to user not to offer them a choice when the 2 alternatives have  
no significant differences.

> >> Can this functionality please be made optional at the very least?
> > 
> > It is. You will be asked whether to allow automatic upgrade or not.
> 
> Could the config model packages be turned into a Recommends rather than
> a Depends, so that they don't have to be installed at all?

Technically, yes. But this dependency is injected by dh_cme_upgrade. This 
would mean adding yet another option to the configuration file of 
dh_cme_upgrade, adding documentation and explaining pro and cons of the 
choice. This would make automatic config upgrade more complex for no real 
added value. 

Then, some documentation would need to be written for the end user so he can 
make an informed decision, and recover from a wrong choice.

All this work for what ? saving a few MB not worth a cent on an SD card ?

> It's really helpful to those of us who would like to maintain as minimal
> a system as possible. For example, I'd like to use lcdproc on a firewall
> system, and keeping the attack surface as small as possible is a common
> goal for this type of system.

None of these package will leave a running process. I don't see the relation 
between the installed files and having a more vulnerable system.

All the best

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to