We are working to minimize the container image size. gnupg2 is an indirect dependency (via librepo->gpgme) of dnf for verifying package signatures. gnupg2 Requires: pinentry, which subsequently pulls in libsecret and hence GIO) but this is only needed for interactive usage, not scripted verification of signatures such as done by dnf. Please make this a weak dependency to support this use case.
Created attachment 1145248 [details] soften pinentry dependency (#1324595)