[Pkg-gnupg-maint] Bug#561540: Bug#561540: use update-alternatives to provide /usr/bin/gpg

[Daniel Leidert]

Am Sonntag, den 28.02.2010, 23:20 -0500 schrieb Eric Dorland:
> * Daniel Leidert (daniel.leidert at wgdd.de) wrote:
> > Am Donnerstag, den 17.12.2009, 20:11 -0500 schrieb nobled:
> > 
> > > There hasn't been much activity on bug #483724 - doesn't it require
> > > gnupg 1.x to convert to update-alternatives first? Is that still on
> > > the todo list?
> > 
> > The suggestion to use update-alternatives hasn't been forgotten.
> > However, there are currently no plans to do this now. The implications
> > of this action should be examined first. This will probably happen in
> > the near furture, when we also examine how to handle the new gnupg 2.1
> > series.
> 
> Ok, lets discuss it. gnupg and gnupg2 should be largely compatible on
> the command-line, so I doubt there would be many problems with things
> that depend on the behavior of gpg, but there might be a few.

I don't like those guesses. Either we know it or not.

> Probably
> a bit late in this release cycle to try this out, but if we prefer
> gnupg and add a dire warning to gnupg2 that switching the link is
> completely untested, maybe it's ok :)

Well, whatever we do: We should test it carefully!

> The other option could be to drop gnupg and just use gnupg2.

Hm: popcon report for users of gnupg vs. gnupg2: 7:1. I don't consider
this an option.

gnupg is further of priority:standard. gnupg2 depends on libcurl, which
is of priority:optional (see our solution with gnupg). Ditto for several
other dependencies: libpth20, libksba8 and also Gtk+ and its
dependencies if you consider to leave the dependency on pinentry-gtk.
How are your plans here? Further: What about gpgv? Is it shipped with
gnupg2?

gnupg2 is IMO not a replacement option for gnupg in Debian atm.

> gnupg2
> has a slightly larger footprint, and has a few more small
> dependencies. We may be able to tighten things up a bit so that it
> takes up less space.

I would suggest you start with this.

> But I think making it an alternative is a better, more incremental
> step.

I would like to see this tested, because I have doubts, that one can
easily switch between them (especially because of a few user reports I
got - but to be honest: I don't know for sure, that the problems were
caused by gnupg vs gnupg2).
 
Regards, Daniel