On 04/05/2017 11:42 AM, Alexander Bokovoy wrote: > On ke, 05 huhti 2017, Kamil Dudka wrote: >> In order to make even smaller Fedora base images, it was proposed to switch >> libcurl back to OpenSSL. The Fedora Crypto Consolidation project, which >> motivated the switch of libcurl from OpenSSL to NSS ten years ago, is now >> deprecated and libcurl is the only package that pulls NSS as its dependency >> into the Fedora base image. Hence, by switching libcurl back to OpenSSL, we >> could create Fedora base image that contains fewer crypto libraries inside. >> >> Additional proposal that would help to reduce the size of base image is the >> libcurl-minimal subpackage, which can be installed installed as a lightweight >> replacement of the libcurl package, with smaller size and fewer dependencies. >> The libcurl-minimal subpackage was already proposed on this mailing list one >> year ago but at that time not many people knew that it would be useful today: >> >> >> https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx/thread/MRSR5MB77LMUVX5HBMMD3AS4TTUEJ4XQ/ >> >> >> I am CCing the actual requestors so they can fight for these proposals. >> >> A proof of concept is available in the private-kdudka-libcurl-minimal branch: >> >> >> http://pkgs.fedoraproject.org/cgit/rpms/curl.git/log/?h=private-kdudka-libcurl-minimal >> >> >> I have also prepared Copr repositories for f24+: >> >> https://copr.fedorainfracloud.org/coprs/kdudka/curl-minimal/ >> >> Any feedback is welcome! > It is unclear at which timeframe you want to implement this. I'm > concerned with FreeIPA because we use libcurl internally and we are not > yet migrated to OpenSSL fully (definitely not yet in F26). We also need > to look at what happens with certmonger. > The initial request here was to make this migration for the Fedora 27 timeframe. Definitely *not* in Fedora 26.
Attachment:
signature.asc
Description: OpenPGP digital signature
_______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
