Bug 2283020

Summary:	115 package dependencies
Product:	[Fedora] Fedora EPEL	Reporter:	f1outsourcing <info>
Component:	mimedefang	Assignee:	Robert Scheck <redhat-bugzilla>
Status:	ASSIGNED ---	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	low	Docs Contact:
Priority:	unspecified
Version:	epel9	CC:	redhat-bugzilla
Target Milestone:	---
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2283026
Bug Blocks:

Description f1outsourcing 2024-05-23 16:14:26 UTC

Description of problem:

I wanted to try attachment filtering, so someone recommended me mimedefang. 115 package dependencies, 263MB? wtf gcc, redhat-rpm-config, rust-srpm-macros, perl-devel, cpp, fonts-srpm-macros, kernel-headers 

Is this really all necessary? Why is gcc there? Is there really some compiling being done? Why are these binaries not precompiled in the package? I don't think it is standard having devel packages installed.

Comment 1 Robert Scheck 2024-05-23 16:29:11 UTC

Since RHEL 9.4 a dependency of mimedefang seems to leak this in stuff ;-( Not sure whether I can take influence on this in the mimedefang package, the cause might be in RHEL 9.4, I'll have a look into this.

Comment 2 Robert Scheck 2024-05-23 16:55:43 UTC

Actually spamassassin-3.4.6-5.el9 causes all these dependencies (see 'dnf install spamassassin'). This is because spamassassin requires perl(ExtUtils::MakeMaker) on run-time (why?). Interestingly, spamassassin-3.4.6-5.el9 wasn't updated for RHEL 9.4, so some other change is leaking in, I guess.

Comment 3 Robert Scheck 2024-05-23 17:13:24 UTC

Thanks to the SpamAssassin package maintainer (see bug #2283026 comment #1) I learnt that perl(ExtUtils::MakeMaker) is a run-time requirement for sa-compile(1). While this dependency is kind on purpose, it isn't great from my point of view.