In order to make even smaller Fedora base images, it was proposed to switch
libcurl back to OpenSSL. The Fedora Crypto Consolidation project, which
motivated the switch of libcurl from OpenSSL to NSS ten years ago, is now
deprecated and libcurl is the only package that pulls NSS as its dependency
into the Fedora base image. Hence, by switching libcurl back to OpenSSL, we
could create Fedora base image that contains fewer crypto libraries inside.
Additional proposal that would help to reduce the size of base image is the
libcurl-minimal subpackage, which can be installed installed as a lightweight
replacement of the libcurl package, with smaller size and fewer dependencies.
The libcurl-minimal subpackage was already proposed on this mailing list one
year ago but at that time not many people knew that it would be useful today:
https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx/thread/MRSR5MB77LMUVX5HBMMD3AS4TTUEJ4XQ/
I am CCing the actual requestors so they can fight for these proposals.
A proof of concept is available in the private-kdudka-libcurl-minimal branch:
http://pkgs.fedoraproject.org/cgit/rpms/curl.git/log/?h=private-kdudka-libcurl-minimal
I have also prepared Copr repositories for f24+:
https://copr.fedorainfracloud.org/coprs/kdudka/curl-minimal/
Any feedback is welcome!
Kamil
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
