Bug 1909299

Summary:	Consider splitting out sudo-python-plugin subpackage to avoid Python dependency
Product:	[Fedora] Fedora	Reporter:	Jonathan Lebon <jlebon>
Component:	sudo	Assignee:	Jonathan Lebon <jlebon>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	rawhide	CC:	alakatos, kzak, mattdm, rsroka, tosykora, zfridric
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	sudo-1.9.5p1-1.fc34 sudo-1.9.5p1-1.eln108 sudo-1.9.5p1-1.fc33 sudo-1.9.5p1-1.fc32	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-01-18 20:24:11 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Jonathan Lebon 2020-12-18 21:44:49 UTC

Description of problem:

It seems since the 1.9.3p1 rebase (https://src.fedoraproject.org/rpms/sudo/c/68203ed1a2fac7aff1b57189e8c217db89e5fe4a?branch=master), sudo now pulls in python3-libs via the `--enable-python` config option. In Fedora CoreOS, we're trying to avoid shipping Python entirely to encourage containerizing user workloads and to keep the OS minimal. In a rawhide build, this package was identified as pulling it back in.

IIUC, it seems like it's just /usr/libexec/sudo/python_plugin.so which requires libpython, right? Would it be possible to split that in a separate sudo-python-plugin subpackage? We can help with that if there's agreement.

Comment 1 Jonathan Lebon 2021-01-13 14:22:33 UTC

Any thoughts on this? This would also be useful in other environments like containers which value minimalism.

Comment 2 Radovan Sroka 2021-01-13 14:31:29 UTC

Hello,

I believe it's feasible. I'm ok with the split. Feel free to open PR for sudo rawhide and we can discuss technical details there.

I don't have a much time for this right know but I can provide a feedback.

Comment 3 Jonathan Lebon 2021-01-13 19:05:04 UTC

Thanks for the reply!
PR: https://src.fedoraproject.org/rpms/sudo/pull-request/21

Comment 4 Fedora Update System 2021-01-18 20:24:11 UTC

FEDORA-2021-a84b7821cd has been pushed to the Fedora 34 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 5 Fedora Update System 2021-01-18 20:39:11 UTC

FEDORA-2021-d6630e0c7d has been pushed to the Fedora ELN stable repository.
If problem still persists, please make note of it in this bug report.

Comment 6 Fedora Update System 2021-01-18 20:56:00 UTC

FEDORA-2021-324479472c has been submitted as an update to Fedora 33. https://bodhi.fedoraproject.org/updates/FEDORA-2021-324479472c

Comment 7 Fedora Update System 2021-01-18 22:23:36 UTC

FEDORA-2021-234d14bfcc has been submitted as an update to Fedora 32. https://bodhi.fedoraproject.org/updates/FEDORA-2021-234d14bfcc

Comment 8 Fedora Update System 2021-01-19 01:38:09 UTC

FEDORA-2021-234d14bfcc has been pushed to the Fedora 32 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-234d14bfcc`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-234d14bfcc

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 9 Fedora Update System 2021-01-19 01:52:19 UTC

FEDORA-2021-324479472c has been pushed to the Fedora 33 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-324479472c`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-324479472c

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 10 Fedora Update System 2021-01-20 01:32:14 UTC

FEDORA-2021-324479472c has been pushed to the Fedora 33 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 11 Fedora Update System 2021-01-21 01:18:57 UTC

FEDORA-2021-234d14bfcc has been pushed to the Fedora 32 stable repository.
If problem still persists, please make note of it in this bug report.