Unnecessary things in dom0/templates?

[arthur....@gmail.com]

I just updated dom0 and saw a few packages - avahi and openssl - that made me curious as to why they are there. I'm all about having a lean system, so I remove things where and when I can. If there's a reason for these things being there, then that's cool, but since dom0 is network-isolated, that struck me as a little odd.

I'm also curious to know if other people have thoughts on certain packages and why they're included (in dom0 or in templates), so feel free to list them on this thread.

[Drew White]

On Friday, 26 August 2016 11:11:59 UTC+10, arthur....@gmail.com wrote:
> I just updated dom0 and saw a few packages - avahi and openssl - that made me curious as to why they are there. I'm all about having a lean system, so I remove things where and when I can. If there's a reason for these things being there, then that's cool, but since dom0 is network-isolated, that struck me as a little odd.
>
> I'm also curious to know if other people have thoughts on certain packages and why they're included (in dom0 or in templates), so feel free to list them on this thread.

OpenSSL is there to generate the encrypion keys for the guest backups.
Avahi, not sure why that is there. Probably just for use.

I'm currently building Dom0 and other Templates built more for us that don't want the "bloatware" or just want the "barebones" to then build onto.

I've had to install things in Dom0 because things are missing.
I've had to remove things because I don't want them since I use other programs.
I have been building my own QManager too.

[Jeremy Rand]

arthur....@gmail.com:

> I just updated dom0 and saw a few packages - avahi and openssl - that made me curious as to why they are there. I'm all about having a lean system, so I remove things where and when I can. If there's a reason for these things being there, then that's cool, but since dom0 is network-isolated, that struck me as a little odd.
>
> I'm also curious to know if other people have thoughts on certain packages and why they're included (in dom0 or in templates), so feel free to list them on this thread.

OpenSSL is used for lots of things that aren't network-related. I'm
under the impression that OpenSSL is used for the Qubes backup/restore
system. A Qubes devloper would be able to answer with more certainty.

-Jeremy Rand

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

This is correct. openssl is used by qvm-backup and qvm-backup-restore for HMAC
verification and (symmetric) encryption.

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=7s0l
-----END PGP SIGNATURE-----