Certain files should be optional when publishing app as self-contained

[vitek-karas]

For example:

dotnet new console
dotnet publish -r win-x64

The output directory will contain files like:

• createdump.exe - only useful when trying to create a managed dump of the app's process
• clrgc.dll - only useful when wanting to use different GC for the app (otherwise the default GC is part of coreclr.dll)
• msquic.dll - only useful when using HTTP3 functionality
• mscordaccore* and mscoredbi* - only useful for debugging
• ... possibly others

Currently there's no way to tell the SDK to exclude some of these. Even with trimming turned on, some of these files are still there (and not used).

We should reconsider the list of files included in self-contained apps by default and if it would make sense to provide options to either opt-in or opt-out for some of them.

/cc @richlander

[vitek-karas]

See dotnet/runtime#43716 for an example of customer report on this.

[baronfel]

This sounds reasonable, but we'd need a more concrete proposal from the owners of these files - are there logical groups that would be turned off as a whole, for example?

[guboi]

Do I understand that createdump.exe will be signed and packaged with apps by default? This could be a significant security concern.

[KalleOlaviNiemitalo]

Does this issue cover the inclusion of unmanaged WPF DLLs in an app that uses Windows Forms but not WPF?