On Sat, Jan 15, 2022 at 4:20 AM Michel Alexandre Salim
<salimma(a)fedoraproject.org> wrote:
On Fri, Dec 17, 2021 at 12:35:59PM -0800, Adam Williamson wrote:
> On Fri, 2021-12-17 at 10:35 -0800, Michel Alexandre Salim wrote:
> > On Thu, Dec 16, 2021 at 10:11:53AM -0800, Michel Alexandre Salim wrote:
> > > Hi all,
> > >
> > > `trousers` got silently orphaned around the time an EPEL9 branch for it
> > > was requested:
https://bugzilla.redhat.com/show_bug.cgi?id=2032258
> > >
> > > Looks like we're slowly uncoupling ourselves from it, e.g.
> > >
> > > - for ARM, uboot-tools no longer pulls in vboot-utils which pulls in
> > > trousers:
https://lists.fedoraproject.org/archives/list/scm-commits@lists.fedorapro...
> > >
> > > - Neal disabled TPM/TSS 1.2 support in strongswan, dropping the trousers
> > > dependency, in
https://src.fedoraproject.org/rpms/strongswan/pull-request/13
> > >
> > > but there are several dependencies still around (strongswan still shows
> > > up here as the PR just got merged a few hours ago)
> > >
> > I've taken this package for now.
> >
> > It's probably OK for most of the trousers dependent to drop their
> > dependencies on it though, the use case I have in mind is rather
> > specialized.
>
> It does seem to be used by robosignatory (the thing that signs Fedora
> packages, I think):
Sorry for the late reply! Meant to ask you about this, as I tried and
find what requires trousers before my first post and didn't see
robosignatory at all.
I asked Patrick about this last week, it's an old dependency that was
never cleaned up. On a previous generation of HW they used to use a
TPM1 to store bits used by robosignatory but it was never a direct
dependency. That's no longer the case so it can be cleaned up.