FS#76031 - [perl-crypt-random-seed] drop perl-crypt-random-tesha2 dependency

Attached to Project: Arch Linux
Opened by Jelle van der Waa (jelly) - Tuesday, 27 September 2022, 11:48 GMT
Last edited by Buggy McBugFace (bugbot) - Saturday, 25 November 2023, 20:17 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Florian Pritz (bluewind)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

perl-crypt-random-seed currently depends on perl-crypt-random-tesha2, this package is not reproducible which I was investigating. The output looks like this:

https://reproducible.archlinux.org/api/v0/builds/343124/diffoscope

Which raises a question if it should even be packaged with a random builders entropy instead of the default "1.0" value. After a longer investigation I found, that this package is likely
useless on Arch Linux as it tries to act like `haveged` for which Linux has /dev/random and /dev/urandom. Looking at perl-crypt-random-seed it does not really seem to require perl-crypto-random-tesha2 as on Linux /dev/random or /dev/urandom should be picked first. [1]
It also seems that it can skip tesha2 safely if it's not installed. This leads me to think that this package should be dropped as dependency as we rather have users rely on a well known random source instead of tesha2.

[1] https://metacpan.org/dist/Crypt-Random-Seed/source/lib/Crypt/Random/Seed.pm#L60
[2] https://metacpan.org/dist/Crypt-Random-Seed/source/lib/Crypt/Random/Seed.pm#L144
This task depends upon

Closed by  Buggy McBugFace (bugbot)
Saturday, 25 November 2023, 20:17 GMT
Reason for closing:  Moved
Additional comments about closing:  https://gitlab.archlinux.org/archlinux/p ackaging/packages/perl-crypt-random-seed /issues/1

Loading...