Autor: Andrew Bower Datum: To: Mark Hindley CC: 895 Betreff: [devuan-dev] bug#895: bug#895: devuan-keyring: recommends gnupg;
can we have a minimal devuan-archive-keyring?
Thanks for the quick reply, Mark!
On Mon, Jun 23, 2025 at 08:02:26PM +0100, Mark Hindley wrote: > On Mon, Jun 23, 2025 at 07:37:41PM +0100, Andrew Bower wrote:
> > but it would be nice if there were a devuan-archive-keyring package along the
> > lines of debian-archive-keyring that did not have this recommends.
> >
> > Any reason this isn't already the case? I see that the package only
> > includes archive keyrings anyway.
>
> I think a few individual keys are in /usr/share/keyrings/devuan-keyring.gpg as
> well.
>
> I suspect the answer is that, there are so few individual keys that it has never
> seemed worth separating them. The packaging metainfo would probably be larger
> than the content!
>
> Since gnupg is only Recommends, is it worth it?
Indeed it is probably not worth a separate package, contra my bug title!
It might be worth reviewing if even the Recommends is warranted though -
slapping gnupg on everyone's system by default seems like a significant
difference from Debian.
I get the impression there are debates about OpenPGP implementations in
Debian. I don't have a horse in that race but it might give the edge to
dropping the relationship.