# Copyright (c) 2009 The Chromium OS Authors. All rights reserved.
# Distributed under the terms of the GNU General Public License v2

app-accessibility/brltty	-beeper -contracted-braille -doc -fm -gpm -java -learn-mode -midi -ncurses -ocaml -pcm -speech -tcl -X
app-admin/logrotate	-cron
app-admin/rsyslog	-gcrypt -ssl -zlib
app-benchmarks/i7z	-X
app-editors/nano	-unicode
app-editors/qemacs	-X
app-editors/vim		-crypt -X minimal
app-editors/vim-core    minimal

# We don't use network functionality in bash, and since we ship it in a release
# image, we'd prefer that attack surface simply not exist.
app-shells/bash		-net
# Drop this once we audit code to make sure we aren't using `echo -n` or `echo -e`.
app-shells/dash	vanilla
app-text/poppler	cairo
app-text/tessdata_fast  osd
app-text/tesseract      -doc jpeg -opencl -openmp png -static-libs tiff -training -webp
dev-cpp/glog		gflags
dev-db/sqlite		-extensions
# Disable Segger J-Link for building openocd-0.10.0. We currently
# don't use J-Link. It requires upgrading libjaylink, which is not yet
# supported by official Gentoo portage repository.
dev-embedded/openocd	-jlink
dev-lang/perl		gdbm
dev-lang/python		gdbm -sqlite
dev-libs/dbus-glib	tools
dev-libs/elfutils	-utils
dev-libs/expat		-unicode
dev-libs/glib		-doc
dev-libs/libjcat        pkcs7
dev-libs/libp11         -bindist
# Readline is used by pcretest which we don't use.
# zlib/bzip2 are only used by pcregrep which we don't use.
dev-libs/libpcre	-bzip2 -readline -zlib
dev-libs/leveldb	-tcmalloc
dev-libs/nss		-utils
dev-libs/opencryptoki	tpmtok
dev-libs/opensc	-pcsc-lite ctapi
dev-libs/openssl	pkcs11 -tls-heartbeat
dev-python/pygobject	-cairo
dev-util/dialog		-unicode minimal
dev-util/perf		-audit -doc -demangle -tui -ncurses -perl -python -slang -unwind
chromeos-base/chromeos-chrome   build_tests
chromeos-base/nsswitch	zeroconf
media-gfx/imagemagick	jpeg png svg tiff
# Disable all SANE backends that don't support USB,
# plus additional backends that metrics indicate have no users.
media-gfx/sane-backends -sane_backends_abaton -sane_backends_agfafocus -sane_backends_apple -sane_backends_artec -sane_backends_artec_eplus48u -sane_backends_as6e -sane_backends_avision -sane_backends_bh -sane_backends_canon -sane_backends_canon630u -sane_backends_canon_lide70 -sane_backends_cardscan -sane_backends_coolscan -sane_backends_coolscan2 -sane_backends_coolscan3 -sane_backends_dc210 -sane_backends_dc240 -sane_backends_dc25 -sane_backends_dell1600n_net -sane_backends_dmc -sane_backends_epjitsu -sane_backends_epson -sane_backends_gt68xx -sane_backends_hp3500 -sane_backends_hp4200 -sane_backends_hp5400 -sane_backends_hpljm1005 -sane_backends_hs2p -sane_backends_hpsj5s -sane_backends_ibm -sane_backends_kodak -sane_backends_kvs1025 -sane_backends_kvs20xx -sane_backends_kvs40xx -sane_backends_leo -sane_backends_ma1509 -sane_backends_magicolor -sane_backends_matsushita -sane_backends_microtek -sane_backends_microtek2 -sane_backends_mustek -sane_backends_mustek_pp -sane_backends_mustek_usb -sane_backends_mustek_usb2 -sane_backends_nec -sane_backends_net -sane_backends_niash -sane_backends_p5 -sane_backends_pie -sane_backends_plustek -sane_backends_plustek_pp -sane_backends_qcam -sane_backends_ricoh -sane_backends_rts8891 -sane_backends_s9036 -sane_backends_sceptre -sane_backends_sharp -sane_backends_sm3600 -sane_backends_sm3840 -sane_backends_sp15c -sane_backends_st400 -sane_backends_stv680 -sane_backends_tamarack -sane_backends_teco1 -sane_backends_teco2 -sane_backends_teco3 -sane_backends_u12 -sane_backends_umax -sane_backends_umax1220u -sane_backends_umax_pp
media-gfx/zbar		-gtk -imagemagick jpeg python -qt4 threads -v4l -X -xv
media-libs/freeimage	jpeg png
# TODO(derat): Unset glib for harfbuzz if/when pango is no longer needed:
# http://crbug.com/691477
media-libs/harfbuzz	-cairo -introspection
media-libs/leptonica    zlib -gif jpeg  -jpeg2k png -static-libs -test tiff -utils -webp
media-libs/libdvdread	-css
media-libs/libsndfile	minimal
# disabled in profiles/default/linux/package.use
media-libs/mesa		gallium classic shared-glapi gles2 egl -gbm
media-libs/opencv	-gtk python png jpeg -tiff v4l
media-libs/openh264	utils
media-libs/waffle	gbm
media-plugins/live      -ssl
media-sound/sox		alsa ogg
# Libvpx is required for video recording using the vnc2video go module.
# Libdrm is required for go/chrome-os-capture-ffmpeg
media-video/ffmpeg vpx libdrm openssl
media-video/mplayer	cpudetection fbcon -encode -ass -a52 -cdio -dirac -dts -dv -dvd -dvdnav -enca -faac -faad -live -quicktime -mp3 -rar -real -speex -schroedinger -theora -tremor -toolame -twolame -vorbis -xscreensaver -x264 -xv -xvid
net-analyzer/tcpdump	-chroot
net-dns/avahi-daemon	zeroconf
net-dns/dnsmasq		script
net-firewall/iptables	conntrack
net-fs/samba		ads acl gnutls ldap winbind -addc -addns -ceph -cluster -gpg -pam -perl -python -test
# C++ library of gnutls uses exceptions, which breaks with -fno-exceptions flag.
# Clients don't need the C++ library anyway, so disabling it...
net-libs/gnutls	-cxx
net-libs/glib-networking -gnome -libproxy
# We want HTTPS support in web server based on libmicrohttpd.
# Also |messages| is for enabling POST processor in the library.
net-libs/libmicrohttpd	ssl messages
net-libs/libsoup	-ssl
# Disable boost.asio in net-libs/nghttp2 (b/172893124).
net-libs/nghttp2	-cxx
net-misc/curl		adns -ftp -imap kerberos -pop3 -progress-meter -smtp -tftp
net-misc/dhcpcd		crash
net-misc/iperf		threads
# arping is used by some wifi autotests.
# tracepath is exposed to the user via crosh.
net-misc/iputils	arping tracepath
net-misc/ntp		caps
net-misc/openssh	-hpn -X
net-vpn/openvpn		pkcs11
net-vpn/strongswan	cisco nat-transport -strongswan_plugins_unity pkcs11 eap
net-vpn/wireguard-tools	-wg-quick
net-nds/openldap	minimal -cxx
net-print/cups		-dbus zeroconf upstart
net-print/cups-filters	-dbus -pclm -pdf -zeroconf
net-print/hplip		minimal
# squid requires gnutls 3.1.5 for ssl, default it to off until newer gnutls is available
net-proxy/squid		-ssl
net-proxy/tsocks	tordns
# No support for bluetooth printing.
net-wireless/bluez	-cups
net-wireless/wpa_supplicant-cros	dbus debug -readline smartcard
# Build only TF lite to save disk space.
sci-libs/tensorflow	-python minimal
chromeos-base/tensorflow-internal	-python minimal
sys-apps/busybox	-pam -selinux
sys-apps/baselayout	-auto_seed_etc_files
sys-apps/coreutils	multicall
sys-apps/dbus		-X
sys-apps/fwupd		-gpg -man pkcs7 synaptics thunderbolt
sys-apps/hwdata		-net -usb
sys-apps/mawk		forced-sandbox
sys-apps/sed		forced-sandbox
sys-apps/smartmontools	minimal -daemon
sys-apps/systemd-tmpfiles selinux
sys-apps/usbguard	-dbus
sys-apps/util-linux     -unicode -udev
# pam_unix: empty password is not OK
sys-auth/pambase	-nullok
sys-block/fio		aio
sys-block/parted	device-mapper
sys-devel/bc		forced-sandbox
sys-devel/clang		-multitarget
sys-devel/llvm		-multitarget -ncurses
sys-fs/lvm2		-lvm1 -readline -static
sys-fs/mtools		-X
sys-fs/ntfs3g		-crypt external-fuse ntfsprogs -suid
sys-fs/udev		-devfs-compat -rule_generator hwdb acl
sys-kernel/chromeos-kernel-4_4 -llvm_ias
sys-kernel/chromeos-kernel-4_14 -llvm_ias
sys-kernel/chromeos-kernel-experimental -llvm_ias
sys-kernel/chromeos-kernel-next -llvm_ias
sys-kernel/linux-firmware	linux_firmware_keyspan_usb
# We disable berkdb in general, but we need gdbm to provide the API.
sys-libs/gdbm		berkdb
sys-libs/ldb		ldap -python -lmdb
# Use pcre2 rather than pcre as everything else has moved.
sys-libs/libselinux	pcre2
sys-libs/ncurses	-cxx -unicode minimal tinfo
# Readline requires the unicode flag to match sys-libs/ncurses.
sys-libs/readline	-unicode
sys-libs/talloc		-python
sys-libs/timezone-data	zic-slim
sys-libs/tdb		-python
sys-libs/tevent		-python
sys-libs/zlib		static-libs
sys-power/powertop	-unicode
sys-process/htop	-unicode
sys-process/procps	-unicode
x11-apps/igt-gpu-tools	tests
x11-apps/xinit		minimal
x11-base/xorg-server	-suid
x11-libs/libdrm		libkms
x11-libs/libdrm-tests	libkms
x11-libs/cairo		-opengl
x11-libs/libva		egl
# Need png for color font support. bzip2 is not used. It's only for X11 *pcf.bz2
# that we don't have.
media-libs/freetype	png -bzip2

# We don't need Python in these packages, so save some space.
dev-libs/boost -python
sys-apps/flashmap -python