#807485 gnome-keyring: pinentry-gnome3 should also be recommended and (hard) dependency should fallback on pinentry-gtk2

Package:
gnome-keyring
Source:
gnome-keyring
Description:
GNOME keyring services (daemon and tools)
Submitter:
Jonas Smedegaard
Date:
2015-12-09 16:09:11 UTC
Severity:
wishlist
#807485#5
Date:
2015-12-09 13:08:31 UTC
From:
To:
Hi,

I understand from bug#787786 that GNOME should ensure that most
possible of its features is getting used.

As already pointed out in bug#787786#18, there are other sensible of
gnome-keyring other than in concert with the GNOME desktop.

I agree that favoring pinentry-gtk2 over pinentry-gnome is wrong, but
_only_ hard depending on pinentry-gnome makes it impossible¹ to use
gnome-keyring without also pulling in pinentry-gnome and its (for some
non-GNOME uses) too excessive dependencies.

Please consider the following, which I believe satisfies both the need
for ensuring best GNOME experience and supporting lighter alternatives:

  * Have dependency on pinentry-gnome fallback to pinentry-gtk2
  * Recommend pinentry-gnome

Thanks for considering,

 - Jonas

¹ Impossible while using pure Debian.  Custom tricks like creating a
fake package by same name is possible - resulting in a _derivative_ of
Debian.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=S+3s
-----END PGP SIGNATURE-----
#807485#10
Date:
2015-12-09 13:57:37 UTC
From:
To:
control: severity -1 wishlist
control: tags -1 moreinfo

Am 09.12.2015 um 14:08 schrieb Jonas Smedegaard:

Which excessive dependencies?
Which of those aren't already pulled in by gnome-keyring?
#807485#19
Date:
2015-12-09 14:44:03 UTC
From:
To:
Quoting Michael Biebl (2015-12-09 19:27:37)

Oh - please ignore the remark about excessive dependencies (I was
looking at an older suite).

Issue remains that gnome-keyring declares a strict dependency for a
situation where in unusual cases alternatives works - which is the
purpose of the "Recommends:" hint.

Currenly pinentry-gnome cannot be removed from a system which uses
gnome-keyring, even though gnome-keyring can work with other
implementations of the pinentry-x11 ABI than pinentry-gnome.

 - Jonas
#807485#24
Date:
2015-12-09 15:01:42 UTC
From:
To:
Am 09.12.2015 um 15:44 schrieb Jonas Smedegaard:

Ok. It seemed like you were exaggerating trying to make a point.

Given the size of pinentry-gnome3, I'm not really worried about that.
#807485#29
Date:
2015-12-09 16:01:14 UTC
From:
To:
Quoting Michael Biebl (2015-12-09 20:31:42)

My concern is not the size but functionality.

pinentry has multiple implementations, each with different features and
drawbacks (look'n'feel, security deisgn etc).  Current package hints of
gnome-keyring makes it needlessly difficult for non-GNOME users to favor
a different implementation of pinentry than the one GNOME favors.

Relaxing to recommend permits non-GNOME users to simply avoid installing
unwanted implementations of pinentry.


 - Jonas
#807485#34
Date:
2015-12-09 16:06:29 UTC
From:
To:
Am 09.12.2015 um 17:01 schrieb Jonas Smedegaard:

That's a separate issue.Something that needs to be fixed not via package
dependencies but rather a more flexible mechanism how to choose the
default pinentry program:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=791441