Debian Bug report logs - #807485
gnome-keyring: pinentry-gnome3 should also be recommended and (hard) dependency should fallback on pinentry-gtk2

version graph

Package: gnome-keyring; Maintainer for gnome-keyring is Debian GNOME Maintainers <[email protected]>; Source for gnome-keyring is src:gnome-keyring (PTS, buildd, popcon).

Reported by: Jonas Smedegaard <[email protected]>

Date: Wed, 9 Dec 2015 13:12:02 UTC

Severity: wishlist

Tags: moreinfo

Found in version gnome-keyring/3.18.2-1

Reply or subscribe to this bug.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to [email protected], Josselin Mouette <[email protected]>:
Bug#807485; Package gnome-keyring. (Wed, 09 Dec 2015 13:12:05 GMT) (full text, mbox, link).


Acknowledgement sent to Jonas Smedegaard <[email protected]>:
New Bug report received and forwarded. Copy sent to Josselin Mouette <[email protected]>. (Wed, 09 Dec 2015 13:12:05 GMT) (full text, mbox, link).


Message #5 received at [email protected] (full text, mbox, reply):

From: Jonas Smedegaard <[email protected]>
To: Debian Bug Tracking System <[email protected]>
Subject: gnome-keyring: pinentry-gnome3 should also be recommended and (hard) dependency should fallback on pinentry-gtk2
Date: Wed, 09 Dec 2015 18:38:31 +0530
Package: gnome-keyring
Version: 3.18.2-1
Severity: normal

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

I understand from bug#787786 that GNOME should ensure that most
possible of its features is getting used.

As already pointed out in bug#787786#18, there are other sensible of
gnome-keyring other than in concert with the GNOME desktop.

I agree that favoring pinentry-gtk2 over pinentry-gnome is wrong, but
_only_ hard depending on pinentry-gnome makes it impossible¹ to use
gnome-keyring without also pulling in pinentry-gnome and its (for some
non-GNOME uses) too excessive dependencies.

Please consider the following, which I believe satisfies both the need
for ensuring best GNOME experience and supporting lighter alternatives:

  * Have dependency on pinentry-gnome fallback to pinentry-gtk2
  * Recommend pinentry-gnome

Thanks for considering,

 - Jonas

¹ Impossible while using pure Debian.  Custom tricks like creating a
fake package by same name is possible - resulting in a _derivative_ of
Debian.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=S+3s
-----END PGP SIGNATURE-----



Information forwarded to [email protected], Josselin Mouette <[email protected]>:
Bug#807485; Package gnome-keyring. (Wed, 09 Dec 2015 14:00:04 GMT) (full text, mbox, link).


Acknowledgement sent to Michael Biebl <[email protected]>:
Extra info received and forwarded to list. Copy sent to Josselin Mouette <[email protected]>. (Wed, 09 Dec 2015 14:00:04 GMT) (full text, mbox, link).


Message #10 received at [email protected] (full text, mbox, reply):

From: Michael Biebl <[email protected]>
To: Jonas Smedegaard <[email protected]>, [email protected]
Subject: Re: Bug#807485: gnome-keyring: pinentry-gnome3 should also be recommended and (hard) dependency should fallback on pinentry-gtk2
Date: Wed, 9 Dec 2015 14:57:37 +0100
[Message part 1 (text/plain, inline)]
control: severity -1 wishlist
control: tags -1 moreinfo

Am 09.12.2015 um 14:08 schrieb Jonas Smedegaard:
> Package: gnome-keyring
> Version: 3.18.2-1
> Severity: normal
> 
> Hi,
> 
> I understand from bug#787786 that GNOME should ensure that most
> possible of its features is getting used.
> 
> As already pointed out in bug#787786#18, there are other sensible of
> gnome-keyring other than in concert with the GNOME desktop.
> 
> I agree that favoring pinentry-gtk2 over pinentry-gnome is wrong, but
> _only_ hard depending on pinentry-gnome makes it impossible¹ to use
> gnome-keyring without also pulling in pinentry-gnome and its (for some
> non-GNOME uses) too excessive dependencies.

Which excessive dependencies?
Which of those aren't already pulled in by gnome-keyring?



-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

[signature.asc (application/pgp-signature, attachment)]

Severity set to 'wishlist' from 'normal' Request was from Michael Biebl <[email protected]> to [email protected]. (Wed, 09 Dec 2015 14:00:04 GMT) (full text, mbox, link).


Added tag(s) moreinfo. Request was from Michael Biebl <[email protected]> to [email protected]. (Wed, 09 Dec 2015 14:00:05 GMT) (full text, mbox, link).


Information forwarded to [email protected], Josselin Mouette <[email protected]>:
Bug#807485; Package gnome-keyring. (Wed, 09 Dec 2015 14:45:04 GMT) (full text, mbox, link).


Acknowledgement sent to Jonas Smedegaard <[email protected]>:
Extra info received and forwarded to list. Copy sent to Josselin Mouette <[email protected]>. (Wed, 09 Dec 2015 14:45:04 GMT) (full text, mbox, link).


Message #19 received at [email protected] (full text, mbox, reply):

From: Jonas Smedegaard <[email protected]>
To: Michael Biebl <[email protected]>, [email protected]
Subject: Re: Bug#807485: gnome-keyring: pinentry-gnome3 should also be recommended and (hard) dependency should fallback on pinentry-gtk2
Date: Wed, 09 Dec 2015 20:14:03 +0530
[Message part 1 (text/plain, inline)]
Quoting Michael Biebl (2015-12-09 19:27:37)
> Am 09.12.2015 um 14:08 schrieb Jonas Smedegaard:
>> I understand from bug#787786 that GNOME should ensure that most
>> possible of its features is getting used.
>> 
>> As already pointed out in bug#787786#18, there are other sensible of
>> gnome-keyring other than in concert with the GNOME desktop.
>> 
>> I agree that favoring pinentry-gtk2 over pinentry-gnome is wrong, but
>> _only_ hard depending on pinentry-gnome makes it impossible¹ to use
>> gnome-keyring without also pulling in pinentry-gnome and its (for some
>> non-GNOME uses) too excessive dependencies.
>
> Which excessive dependencies?
> Which of those aren't already pulled in by gnome-keyring?

Oh - please ignore the remark about excessive dependencies (I was 
looking at an older suite).

Issue remains that gnome-keyring declares a strict dependency for a 
situation where in unusual cases alternatives works - which is the 
purpose of the "Recommends:" hint.

Currenly pinentry-gnome cannot be removed from a system which uses 
gnome-keyring, even though gnome-keyring can work with other 
implementations of the pinentry-x11 ABI than pinentry-gnome.

 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
[signature.asc (application/pgp-signature, inline)]

Information forwarded to [email protected], Josselin Mouette <[email protected]>:
Bug#807485; Package gnome-keyring. (Wed, 09 Dec 2015 15:09:04 GMT) (full text, mbox, link).


Acknowledgement sent to Michael Biebl <[email protected]>:
Extra info received and forwarded to list. Copy sent to Josselin Mouette <[email protected]>. (Wed, 09 Dec 2015 15:09:04 GMT) (full text, mbox, link).


Message #24 received at [email protected] (full text, mbox, reply):

From: Michael Biebl <[email protected]>
To: Jonas Smedegaard <[email protected]>, [email protected]
Subject: Re: Bug#807485: gnome-keyring: pinentry-gnome3 should also be recommended and (hard) dependency should fallback on pinentry-gtk2
Date: Wed, 9 Dec 2015 16:01:42 +0100
[Message part 1 (text/plain, inline)]
Am 09.12.2015 um 15:44 schrieb Jonas Smedegaard:
> Quoting Michael Biebl (2015-12-09 19:27:37)
>> Am 09.12.2015 um 14:08 schrieb Jonas Smedegaard:
>> Which excessive dependencies?
>> Which of those aren't already pulled in by gnome-keyring?
> 
> Oh - please ignore the remark about excessive dependencies (I was 
> looking at an older suite).
> 

Ok. It seemed like you were exaggerating trying to make a point.


> Currenly pinentry-gnome cannot be removed from a system which uses 
> gnome-keyring

Given the size of pinentry-gnome3, I'm not really worried about that.

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

[signature.asc (application/pgp-signature, attachment)]

Information forwarded to [email protected], Josselin Mouette <[email protected]>:
Bug#807485; Package gnome-keyring. (Wed, 09 Dec 2015 16:03:04 GMT) (full text, mbox, link).


Acknowledgement sent to Jonas Smedegaard <[email protected]>:
Extra info received and forwarded to list. Copy sent to Josselin Mouette <[email protected]>. (Wed, 09 Dec 2015 16:03:04 GMT) (full text, mbox, link).


Message #29 received at [email protected] (full text, mbox, reply):

From: Jonas Smedegaard <[email protected]>
To: Michael Biebl <[email protected]>, [email protected]
Subject: Re: Bug#807485: gnome-keyring: pinentry-gnome3 should also be recommended and (hard) dependency should fallback on pinentry-gtk2
Date: Wed, 09 Dec 2015 21:31:14 +0530
[Message part 1 (text/plain, inline)]
Quoting Michael Biebl (2015-12-09 20:31:42)
> Am 09.12.2015 um 15:44 schrieb Jonas Smedegaard:
>> Currenly pinentry-gnome cannot be removed from a system which uses 
>> gnome-keyring
>
> Given the size of pinentry-gnome3, I'm not really worried about that.

My concern is not the size but functionality.

pinentry has multiple implementations, each with different features and 
drawbacks (look'n'feel, security deisgn etc).  Current package hints of 
gnome-keyring makes it needlessly difficult for non-GNOME users to favor 
a different implementation of pinentry than the one GNOME favors.

Relaxing to recommend permits non-GNOME users to simply avoid installing 
unwanted implementations of pinentry.


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
[signature.asc (application/pgp-signature, inline)]

Information forwarded to [email protected], Josselin Mouette <[email protected]>:
Bug#807485; Package gnome-keyring. (Wed, 09 Dec 2015 16:09:11 GMT) (full text, mbox, link).


Acknowledgement sent to Michael Biebl <[email protected]>:
Extra info received and forwarded to list. Copy sent to Josselin Mouette <[email protected]>. (Wed, 09 Dec 2015 16:09:11 GMT) (full text, mbox, link).


Message #34 received at [email protected] (full text, mbox, reply):

From: Michael Biebl <[email protected]>
To: Jonas Smedegaard <[email protected]>, [email protected]
Subject: Re: Bug#807485: gnome-keyring: pinentry-gnome3 should also be recommended and (hard) dependency should fallback on pinentry-gtk2
Date: Wed, 9 Dec 2015 17:06:29 +0100
[Message part 1 (text/plain, inline)]
Am 09.12.2015 um 17:01 schrieb Jonas Smedegaard:
> Quoting Michael Biebl (2015-12-09 20:31:42)
>> Am 09.12.2015 um 15:44 schrieb Jonas Smedegaard:
>>> Currenly pinentry-gnome cannot be removed from a system which uses 
>>> gnome-keyring
>>
>> Given the size of pinentry-gnome3, I'm not really worried about that.
> 
> My concern is not the size but functionality.
> 
> pinentry has multiple implementations, each with different features and 
> drawbacks (look'n'feel, security deisgn etc).  Current package hints of 
> gnome-keyring makes it needlessly difficult for non-GNOME users to favor 
> a different implementation of pinentry than the one GNOME favors.
> 

That's a separate issue.Something that needs to be fixed not via package
dependencies but rather a more flexible mechanism how to choose the
default pinentry program:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=791441
-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

[signature.asc (application/pgp-signature, attachment)]

Send a report that this bug log contains spam.


Debian bug tracking system administrator <[email protected]>. Last modified: Mon Nov 11 15:29:54 2024; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.