[Pkg-libvirt-maintainers] Bug#1081981: libvirt-daemon-driver-storage: introduces hard dependency on NFS and rpcbind

Ansgar ansgar at debian.org
Tue Sep 17 07:18:28 BST 2024


Package: libvirt-daemon-driver-storage
Version: 10.7.0-2
Severity: important

libvirt (via libvirt-daemon-driver-storage) gained a new hard
dependency on nfs-common and rpcbind.  Neither is required on systems
not using NFS.

In addition rpcbind provides a network service and thus potentially
remote security holes.  I think a hard dependency on such services
should be avoided.

I'm fairly confident one can use libvirt without NFS. My laptop
certainly doesn't use NFS :-)

Ansgar

-- System Information:
Debian Release: trixie/sid
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'testing'), (500, 'stable'), (300, 'buildd-unstable'), (300, 'unstable'), (1, 'buildd-experimental'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.10.6-amd64 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libvirt-daemon-driver-storage depends on:
ii  libblkid1        2.40.2-8
ii  libc6            2.40-2
ii  libgcc-s1        14.2.0-3
ii  libglib2.0-0t64  2.82.0-1
ii  libparted2t64    3.6-4
ii  libselinux1      3.7-3
ii  libvirt-common   10.7.0-2
ii  libvirt-daemon   10.7.0-2
ii  libvirt0         10.7.0-2
ii  libxml2          2.12.7+dfsg-3+b1
ii  mount            2.40.2-8
ii  nfs-common       1:2.7.1-1

libvirt-daemon-driver-storage recommends no packages.

libvirt-daemon-driver-storage suggests no packages.

-- debconf-show failed



More information about the Pkg-libvirt-maintainers mailing list