[IANA devscripts maintainer, and I'm not opposed to the downgrade you
proposed. Just wanted to bring forward some ideas.]
* Martin-Éric Racine <martin-eric.rac...@iki.fi>, 2014-07-30, 11:24:
The Recommends on debian-keyring pulls a significantly huge tarball.
This fills precious disk space without any immediate benefit since
Debian's GPG does not include its content by default anyhow.
There *is* an immediate benefit: dscverify(1), who-uploads(1) and
who-permits-uploads(1) use the Debian keyrings by default.
Now, this is true that debian-keyring is huge. Moreover, the vast
majority of the space it takes are signatures, which aren't used by any
on the devscripts tools.
One obvious optimization would be to have a debian-keyring-minimal
package, identical to debian-keyring, but with the non-essential
signatures stripped (--export-options export-minimal). I estimate that
size of such a package would be about 5MB (instead of 47MB).
And who-uploads(1) and who-permits-uploads(1) don't even need a keyring.
They just need a mapping between key-ids and developers' names and
emails. A file with this information should take more than 200K
compressed, even if it included also data from removed-keys.gpg.
--
Jakub Wilk
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
