Re: Binary package for spamassassin requires excessive dependencies?

[Mike Pumford <mpumford%mudcovered.org.uk@localhost>]

On 2020-03-07 23:30, Dave Ellis wrote:
> Hello,
>
> When attempting to install the binary package spamassassin-3.4.2nb2 
> using onto a clean NetBSD 9.0 (amd64) system, an excessive number of 
> dependent packages appear to be required.
>
> The binary package was sourced from 
> http://cdn.netbsd.org/pub/pkgsrc/packages/NetBSD/x86_64/8.1/All/ as 
> spamassassin doesn't appear to be available in the 9.0/All directory yet.
Seems odd as it builds just fine on 9.x and hasn't changed version for ages.

> To summarize, using 'pkgin install spamassassin' reports 4,678 
> dependencies required totalling 23GB, most of which appear to be X11 
> related.  X11 is not installed or required on this system, and shouldn't 
> be required for spamassassin.  This seems excessive?
I'd agree. Something appears to have gone a bit mad there. The runtime 
depends for spamassasin according to pkgin (from my locally built bin 
packages) says:
$ pkgin sd spamassassin
  p5-Try-Tiny-[0-9]*
  p5-IO-HTML-[0-9]*
  p5-Crypt-OpenSSL-Random-[0-9]*
  p5-Crypt-OpenSSL-Bignum-[0-9]*
  p5-TimeDate-[0-9]*
  libidn>=1.20nb1
  p11-kit>=0.23.1
  nettle>=3.5.1
  mozilla-rootcerts-[0-9]*
  lzo>=2.01
  libunistring>=0.9.4
  libtasn1>=4.9
  libcfg+>=0.6.2nb3
  gmp>=6.0
  readline>=6.0
  pinentry-[0-9]*
  npth>=1.2
  libusb1>=1.0.9
  libksba>=1.3.4
  libgpg-error>=1.28
  libgcrypt>=1.7
  libassuan>=2.5.1
  gnutls>=3.6.8nb1
  p5-Net-SSLeay>=1.59
  p5-Net-LibIDN-[0-9]*
  p5-Mozilla-CA-[0-9]*
  p5-YAML-LibYAML-[0-9]*
  p5-MailTools-[0-9]*
  p5-Mail-AuthenticationResults>=1.20180215
  p5-Crypt-OpenSSL-RSA>=0.27
  p5-Error-[0-9]*
  p5-Socket6-[0-9]*
  p5-Net-IP>=1.20
  p5-Digest-HMAC>=1.0
  p5-WWW-RobotRules>=6.01
  p5-URI>=1.10
  p5-Net-HTTP>=6.18
  p5-LWP-Protocol-https>=6.02
  p5-LWP-MediaTypes>=6
  p5-HTTP-Negotiate>=6
  p5-HTTP-Message>=6
  p5-HTTP-Date>=6
  p5-HTTP-Daemon>=6
  p5-HTTP-Cookies>=6
  p5-HTML-Tagset-[0-9]*
  p5-File-Listing>=6
  p5-Encode-Locale>=0
  p5-Crypt-SSLeay>=0
  libpsl>=0.20.2nb3
  libidn2>=2.0.0
  wget-[0-9]*
  re2c>=0.13.6
  perl>=5.30.0<5.32.0
  p5-libwww-[0-9]*
  p5-NetAddr-IP>=4.007
  p5-Net-DNS>=1.01
  p5-Mail-SPF-[0-9]*
  p5-Mail-DKIM>=0.40
  p5-IO-Socket-SSL>=0.92
  p5-IO-Socket-INET6-[0-9]*
  p5-HTML-Parser>=3.43
  p5-Digest-SHA1-[0-9]*
  gnupg2-[0-9]*

This is a native 9.x build. An 8.x package would add openssl-1.1 as well.

Unless built with some exotic options I don't think any of those 
packages would drag in all those dependencies so I suspect there is some 
sort of corruption in the pkg-summary file pkgin is using. I normally 
build with X11_TYPE=native so I don't know what would happen if the type 
was set to modular (which appears to be what the bulk build was done 
with). I'll try and set one up this afternoon as a test and see what 
happens as I can do that fairly easily without compromising my running 
systems.

I have had pkgin occasionally do strange things with dependencies but 
nothing on this scale. :(

Mike