# Copyright (c) 2009 The Chromium OS Authors. All rights reserved.
# Distributed under the terms of the GNU General Public License v2

app-accessibility/brltty	-beeper -contracted-braille -doc -fm -gpm -java -learn-mode -midi -ncurses -ocaml -pcm -speech -tcl -X
app-admin/logrotate	-cron
app-admin/rsyslog	-gcrypt -ssl -zlib
app-benchmarks/i7z	-X
app-editors/nano	-unicode
app-editors/qemacs	-X
app-editors/vim		-X minimal
# We don't use network functionality in bash, and since we ship it in a release
# image, we'd prefer that attack surface simply not exist.
app-shells/bash		-net
# Drop this once we audit code to make sure we aren't using `echo -n` or `echo -e`.
app-shells/dash	vanilla
app-text/poppler	cairo
app-text/tessdata_fast  osd
app-text/tesseract      -doc jpeg -opencl -openmp png -static-libs tiff -training -webp
dev-cpp/glog		gflags
dev-db/sqlite		-extensions
# Disable Segger J-Link for building openocd-0.10.0. We currently
# don't use J-Link. It requires upgrading libjaylink, which is not yet
# supported by official Gentoo portage repository.
dev-embedded/openocd	-jlink
dev-lang/perl		gdbm
dev-lang/python		gdbm -sqlite
dev-libs/dbus-glib	tools
dev-libs/elfutils	-utils
dev-libs/expat		-unicode
dev-libs/glib		-doc
dev-libs/libjcat        pkcs7
dev-libs/libp11         -bindist
# Readline is used by pcretest which we don't use.
# zlib/bzip2 are only used by pcregrep which we don't use.
dev-libs/libpcre	-bzip2 -readline -zlib
dev-libs/leveldb	-tcmalloc
dev-libs/nss		-utils
dev-libs/opencryptoki	tpmtok
dev-libs/opensc	-pcsc-lite ctapi
dev-libs/openssl	pkcs11 -tls-heartbeat
dev-python/pygobject	-cairo
dev-python/pyudev	pygobject
dev-util/dialog		-unicode minimal
dev-util/perf		-audit -doc -demangle -tui -ncurses -perl -python -slang -unwind
chromeos-base/chromeos-chrome   build_tests
chromeos-base/nsswitch	zeroconf
media-gfx/imagemagick	jpeg png svg tiff
# Disable all SANE backends that don't support USB.
media-gfx/sane-backends -sane_backends_abaton -sane_backends_agfafocus -sane_backends_apple -sane_backends_artec -sane_backends_bh -sane_backends_canon -sane_backends_coolscan -sane_backends_dc210 -sane_backends_dc240 -sane_backends_dc25 -sane_backends_dmc -sane_backends_hs2p -sane_backends_ibm -sane_backends_kodak -sane_backends_leo -sane_backends_matsushita -sane_backends_microtek -sane_backends_mustek -sane_backends_nec -sane_backends_net -sane_backends_p5 -sane_backends_pie -sane_backends_plustek_pp -sane_backends_qcam -sane_backends_ricoh -sane_backends_s9036 -sane_backends_sceptre -sane_backends_sharp -sane_backends_sp15c -sane_backends_st400 -sane_backends_tamarack -sane_backends_teco1 -sane_backends_teco2 -sane_backends_teco3 -sane_backends_umax_pp
media-gfx/zbar		-gtk -imagemagick jpeg python -qt4 threads -v4l -X -xv
media-libs/freeimage	jpeg png
# TODO(derat): Unset glib for harfbuzz if/when pango is no longer needed:
# http://crbug.com/691477
media-libs/harfbuzz	-cairo -introspection
media-libs/leptonica    zlib -gif jpeg  -jpeg2k png -static-libs -test tiff -utils -webp
media-libs/libdvdread	-css
media-libs/libsndfile	minimal
# disabled in profiles/default/linux/package.use
media-libs/mesa		gallium classic shared-glapi gles2 egl -gbm
media-libs/opencv	-gtk python png jpeg -tiff v4l
media-libs/openh264	utils
media-libs/waffle	gbm
media-plugins/live      -ssl
media-sound/sox		alsa ogg
media-video/mplayer	cpudetection fbcon -encode -ass -a52 -cdio -dirac -dts -dv -dvd -dvdnav -enca -faac -faad -live -quicktime -mp3 -rar -real -speex -schroedinger -theora -tremor -toolame -twolame -vorbis -xscreensaver -x264 -xv -xvid
net-analyzer/tcpdump	-chroot
net-dns/avahi-daemon	zeroconf
net-dns/dnsmasq		script
net-firewall/iptables	conntrack
net-fs/samba		ads acl gnutls ldap winbind -addc -addns -ceph -cluster -gpg -pam -perl -python -test
# C++ library of gnutls uses exceptions, which breaks with -fno-exceptions flag.
# Clients don't need the C++ library anyway, so disabling it...
net-libs/gnutls	-cxx
net-libs/glib-networking -gnome -libproxy
# We want HTTPS support in web server based on libmicrohttpd.
# Also |messages| is for enabling POST processor in the library.
net-libs/libmicrohttpd	ssl messages
net-libs/libsoup	-ssl
# TODO(b/172893124): Enable http2
net-misc/curl		adns -ftp -imap kerberos -http2 -pop3 -progress-meter -smtp -tftp
net-misc/dhcpcd		crash
net-misc/iperf		threads
# arping is used by some wifi autotests.
# tracepath is exposed to the user via crosh.
net-misc/iputils	arping tracepath
net-misc/ntp		caps
net-misc/openssh	-hpn -X
net-vpn/openvpn		pkcs11
net-vpn/strongswan	cisco nat-transport -strongswan_plugins_unity pkcs11
net-vpn/wireguard-tools	-wg-quick
net-nds/openldap	minimal -cxx
net-print/cups		-dbus zeroconf upstart
net-print/cups-filters	-dbus -pclm -pdf -zeroconf
net-print/hplip		minimal
# squid requires gnutls 3.1.5 for ssl, default it to off until newer gnutls is available
net-proxy/squid		-ssl
net-proxy/tsocks	tordns
# No support for bluetooth printing.
net-wireless/bluez	-cups
net-wireless/wpa_supplicant-cros	dbus debug -readline smartcard
sci-geosciences/gpsd	-python -ntp -X dbus garmin minimal ocean tntc usb -sockets
# Build only TF lite to save disk space.
sci-libs/tensorflow	-python minimal
sys-apps/busybox	-pam -selinux
sys-apps/baselayout	-auto_seed_etc_files
sys-apps/coreutils	multicall
sys-apps/dbus		-X
sys-apps/fwupd		-gpg -man pkcs7 synaptics thunderbolt
sys-apps/hwids		-net
sys-apps/mawk		forced-sandbox
sys-apps/sed		forced-sandbox
sys-apps/smartmontools	minimal -daemon
sys-apps/systemd-tmpfiles selinux
sys-apps/util-linux     -unicode -udev
# pam_unix: empty password is not OK
sys-auth/pambase	-nullok
sys-block/fio		aio
sys-block/parted	device-mapper
sys-devel/bc		forced-sandbox
sys-devel/clang		-multitarget
sys-devel/llvm		-multitarget -ncurses
sys-fs/lvm2		-lvm1 -readline -static
sys-fs/mtools		-X
sys-fs/ntfs3g		-crypt external-fuse ntfsprogs -suid
sys-fs/udev		-devfs-compat -rule_generator hwdb acl
sys-kernel/chromeos-kernel-3_18 frozen_gcc -clang -lld -llvm_ias
sys-kernel/chromeos-kernel-4_4 -llvm_ias
sys-kernel/chromeos-kernel-4_14 -llvm_ias
sys-kernel/chromeos-kernel-experimental -llvm_ias
sys-kernel/chromeos-kernel-next -llvm_ias
sys-kernel/linux-firmware	linux_firmware_keyspan_usb
# We disable berkdb in general, but we need gdbm to provide the API.
sys-libs/gdbm		berkdb
sys-libs/ldb		-python -lmdb
# Use pcre2 rather than pcre as everything else has moved.
sys-libs/libselinux	pcre2
sys-libs/ncurses	-cxx -unicode minimal tinfo
# Readline requires the unicode flag to match sys-libs/ncurses.
sys-libs/readline	-unicode
sys-libs/talloc		-python
sys-libs/timezone-data	zic-slim
sys-libs/tdb		-python
sys-libs/tevent		-python
sys-libs/zlib		static-libs
sys-power/powertop	-unicode
sys-process/htop	-unicode
sys-process/procps	-unicode
x11-apps/igt-gpu-tools	tests
x11-apps/xinit		minimal
x11-base/xorg-server	-suid
x11-libs/libdrm		libkms
x11-libs/libdrm-tests	libkms
x11-libs/cairo		-opengl
x11-libs/libva		egl
# Need png for color font support. bzip2 is not used. It's only for X11 *pcf.bz2
# that we don't have.
media-libs/freetype	png -bzip2

# We don't need Python in these packages, so save some space.
dev-libs/boost -python
sys-apps/flashmap -python

# Freeze Python 2.7 versions for all existing packages.  We'll slowly trim this
# list down as packages don't need them.  New packages should *not* be added
# here as new code should be using Python 3.
# TODO(crbug.com/1007152): Trim this entirely!
chromeos-base/telemetry python_targets_python2_7
dev-python/btsocket python_targets_python2_7
dev-python/certifi python_targets_python2_7
dev-python/cffi python_targets_python2_7
dev-python/chardet python_targets_python2_7
dev-python/cheroot python_targets_python2_7
dev-python/cherrypy python_targets_python2_7
dev-python/contextlib2 python_targets_python2_7
dev-python/cryptography python_targets_python2_7
dev-python/cycler python_targets_python2_7
dev-python/cython python_targets_python2_7
dev-python/dbus-python python_targets_python2_7
dev-python/django python_targets_python2_7
dev-python/dpkt python_targets_python2_7
dev-python/grpcio python_targets_python2_7
dev-python/idna python_targets_python2_7
dev-python/imaging python_targets_python2_7
dev-python/jaraco-functools python_targets_python2_7
dev-python/kiwisolver python_targets_python2_7
dev-python/linecache2 python_targets_python2_7
dev-python/lockfile python_targets_python2_7
dev-python/lxml python_targets_python2_7
dev-python/markupsafe python_targets_python2_7
dev-python/matplotlib python_targets_python2_7
dev-python/mkvparse python_targets_python2_7
dev-python/mock python_targets_python2_7
dev-python/more-itertools python_targets_python2_7
dev-python/mysqlclient python_targets_python2_7
dev-python/namespace-google python_targets_python2_7
dev-python/namespace-jaraco python_targets_python2_7
dev-python/numpy python_targets_python2_7
dev-python/pbr python_targets_python2_7
dev-python/pexpect python_targets_python2_7
dev-python/ply python_targets_python2_7
dev-python/portend python_targets_python2_7
dev-python/protobuf-python python_targets_python2_7
dev-python/psutil python_targets_python2_7
dev-python/ptyprocess python_targets_python2_7
dev-python/py python_targets_python2_7
dev-python/pycparser python_targets_python2_7
dev-python/pygobject python_targets_python2_7
dev-python/pyopenssl python_targets_python2_7
dev-python/pyparsing python_targets_python2_7
dev-python/PySocks python_targets_python2_7
dev-python/python-dateutil python_targets_python2_7
dev-python/python-uinput python_targets_python2_7
dev-python/pytz python_targets_python2_7
dev-python/pyudev python_targets_python2_7
dev-python/pyusb python_targets_python2_7
dev-python/pyxattr python_targets_python2_7
dev-python/pyyaml python_targets_python2_7
dev-python/requests python_targets_python2_7
dev-python/scandir python_targets_python2_7
dev-python/selenium python_targets_python2_7
dev-python/setuptools python_targets_python2_7
dev-python/setuptools_scm python_targets_python2_7
dev-python/six python_targets_python2_7
dev-python/tempora python_targets_python2_7
dev-python/traceback2 python_targets_python2_7
dev-python/trollius python_targets_python2_7
dev-python/urllib3 python_targets_python2_7
dev-python/versioneer python_targets_python2_7
dev-python/zc-lockfile python_targets_python2_7

# These packages only support Python 2.7.  They aren't needed in Python 3.6+.
# TODO(crbug.com/1007152): Trim this entirely!
dev-python/backports-functools-lru-cache python_targets_python2_7 -python_targets_python3_6
dev-python/enum34 python_targets_python2_7 -python_targets_python3_6
dev-python/funcsigs python_targets_python2_7
dev-python/functools32 python_targets_python2_7 -python_targets_python3_6
dev-python/futures python_targets_python2_7 -python_targets_python3_6
dev-python/ipaddress python_targets_python2_7 -python_targets_python3_6
dev-python/mox python_targets_python2_7 -python_targets_python3_6
dev-python/pathlib python_targets_python2_7 -python_targets_python3_6
dev-python/subprocess32 python_targets_python2_7 -python_targets_python3_6
virtual/python-enum34 python_targets_python2_7
virtual/python-funcsigs python_targets_python2_7
virtual/python-futures python_targets_python2_7

# To permit images without Python2.7, these packages must only depend
# conditionally on Python2-only packages. These entries keep those
# dependencies enabled by default.
virtual/target-chromium-os-dev python_targets_python2_7
virtual/target-chromium-os-test python_targets_python2_7