[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#738326: apt sometimes auto installs suggests not just depends and depends



Control: reopen -1 =
Control: retitle -1 apt sometimes installs suggests not just depends and
recommends
Control: reassign -1 apt 0.9.7.9+deb7u1

As you can see from the bug history gnuplot is being installed by apt
even though no packages which Depends on or Recommends on gnuplot are
either directly or indirectly installed (based on binary package
dependencies). In as described previously, 'aptitude why gnuplot' on the
resulting system claims the reason that gnuplot was installed is that
amanda-client Suggests it. While amanda-client *is* delibarately
installed and does suggest gnuplot, there is no reason that a Suggests
should automatically cause a package to be installed (that is no reason
except, if it is possible to do so, explicitly enabling such behavior,
which is not done in this case).

Therefore either apt is automatically installing a Suggests (which it
should not do), aptitude why is confused AND the apt output as recorded
in build.log is missing package apt is installing (and live-build
maintainers claim apt output is reported verbatim) (since what is shown
does not include any of the reverse dependencies/recommends of gnuplot),
or apt is automatically installing packages based on source package or
build-time dependencies (neither of which should happen either).

In any even there is clearly a mystery here as live-build maintainers
claim to do nothing special that would cause apt to install gnuplot and
no package which has gnuplot as a binary Recommends or Depends is either
directly or, based on apt's own output, indirectly being installed.

[verbose:why discovered]
FYI the initial use-case that uncovered this was an attempt to build a
debian-live businesscard-cd sized rescue system without turning off the
automatic install of Recommends (because I was hoping to avoid the pain
of manually going through dependencies to identify which ones would
cause issues due to missing functionality or unexpectedly missing
package (since most packages in debian now assume that their Recommends
will be available for functionality most users consider important but
the package technically could live without). Basically I was trying to
minimize the amount of time I had to put into a nice-to-have vs
must-have. It has turned out to be much more effort that is really
justified by the reward, especially since I do not exactly have copious
 spare time and really should even now be probably doing something other
than worrying about someone else's bugs when it doesn't pay the bills.
Sadly my paid works demands excessive amount of time and is not open
source which would at least make me feel better about having little time
to work on either my own projects or projects to which I would like to
contribute time.
[/verbose]

Regards,

Daniel

Attachment: signature.asc
Description: OpenPGP digital signature


Reply to: