Please merge python-secretstorage 3.3.3-2 (main) from Debian unstable (main)

Hi! I am the author of SecretStorage and the Debian maintainer of this package. And I have some concerns about the delta Ubuntu added.

SecretStorage is useless without a Secret Service server implementation.

If Ubuntu server has an alternative implementation other than gnome-keyring, kwallet and keepassxc, it should add it to the list in Recommends field.

If there is no implementation and you don't want to pull any of these three, probably you won't be able to use SecretStorage, and so you don't need to install it in the first place.

SecretStorage is usually pulled as a dependency of Python-Keyring. That package has limited usefulness on headless systems, too, however it can be used with backends other than SecretStorage, for example, the encrypted file backend from keyrings.alt module.

Perhaps the right things to do will be:

- Determine why you need SecretStorage and/or Keyring on the server images.
- Determine if the application(s) using those modules can work with the alternative backends such as encrypted file keyring.
- If yes, make python3-keyring depend on python3-secretstorage | python3-keyrings.alt, and install the latter package, so apt doesn't want to install the former additionally.
- If no, maybe python3-keyring doesn't need to be the server images either?

Hi Dmitry,

Thank you for the feedback! I've spent some time looking into this and I agree with your analysis. python-secretstorage is in fact only being pulled as a dependency of python-keyring and it looks like the only reason we're pulling in this package on server and cloud is because of python-launchpadlib which has python-keyring set as Recommends.

There was a change in python-launchpadlib that stated python-keyring was indeed optional, so I've made a request to change the Recommends/Suggests there as it's more sensical: https://salsa.debian.org/python-team/packages/python-launchpadlib/-/merge_requests/4

Once this is accepted, I will do away with the Ubuntu delta for this package.

An update: I've created a request to make this change in Ubuntu while we wait for discussion/approval on the Debian side. Once this is complete, I will open a separate Sync bug report to request removal of the Ubuntu delta with python-secretstorage.

For reference, the python-launchpadlib bug is here: https://bugs.launchpad.net/ubuntu/+source/python-launchpadlib/+bug/2045082

Instead of waiting, I've just decided to create the Sync request now.

Please track it here:

https://bugs.launchpad.net/ubuntu/+source/python-secretstorage/+bug/2045320