Bug#836940: [buildd-tools-devel] Bug#836940: cowbuilder, sbuild: should behave identically in regard to default gnupg installation

[Johannes Schauer]

Hi,

Quoting Thorsten Glaser (2016-09-07 16:36:50)
> >In fact, to further minimize the number of packages installed into the build
> >chroot, I have plans to even get rid of apt and its dependencies during the
> >build and only leave build-essential, Essential:yes packages, the build
> >dependencies and their transitive dependencies.
> 
> And libcowdancer and libeatmydata, I presume… or we could inject them via
> /tmp.
> 
> Good idea! (Though please make this optional. For slower architectures,
> adding and removing apt all the time will suck; on m68k I even added
> debhelper into the base chroot as 99% of all packages need it anyway, as a
> speed hack.)

Optional: definitely.

Though removing everything that is not needed afterwards is only one way to
achieve this. All options I came up with are:

 - apt-mark auto '*'; apt-mark manual sbuild-foo-dummy; apt-get remove
   --auto-remove --allow-remove-essential apt;
 - compute the minimum set using apt-cudf and a fitting clasp or aspcud
   minimization criterion and use the solution to remove all the unneeded cruft
 - do not have apt installed inside the chroot at all but use apt from the host
   running sbuild to install packages into the chroot. This would allow sbuild
   to drop lots of cruft and workarounds which are not needed anymore with
   newer apt but are only still present to support older apt in chroots of
   older Debian releases. Though this method will fail for anything that is not
   a plain chroot but a schroot, qemu, ssh or lxc so it is not very flexible.

Obviously the first two options would only work in temporary chroot sessions
which are automatically restored into their previous state after the build (as
when schroot is used). For other chroot setups, sbuild has to make sure to
somehow re-install apt after the build. This could be tricky because we would
have to keep all the .debs needed to install apt and its dependencies around
for after the build is done...

Thanks!

cheers, josch
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: signature
URL: <http://lists.alioth.debian.org/pipermail/pbuilder-maint/attachments/20160907/c7d535a0/attachment.sig>