diff --git a/.github/workflows/go-tests.yml b/.github/workflows/go-tests.yml
index 3709c695231..df5c0b4fb88 100644
--- a/.github/workflows/go-tests.yml
+++ b/.github/workflows/go-tests.yml
@@ -142,6 +142,11 @@ jobs:
         make build BUILD_STATIC=1
         make go-acc | sed 's/ *coverage:.*of statements in.*//' | richgo testfilter
 
+    # check if some component stubs are missing
+    - name: "Build profile: minimal"
+      run: |
+        make build BUILD_PROFILE=minimal
+
     - name: Run tests again, dynamic
       run: |
         make clean build
diff --git a/Makefile b/Makefile
index 207b5d610f0..6bd3cbb7980 100644
--- a/Makefile
+++ b/Makefile
@@ -115,6 +115,68 @@ STRIP_SYMBOLS := -s -w
 DISABLE_OPTIMIZATION :=
 endif
 
+#--------------------------------------
+
+# Handle optional components and build profiles, to save space on the final binaries.
+
+# Keep it safe for now until we decide how to expand on the idea. Either choose a profile or exclude components manually.
+# For example if we want to disable some component by default, or have opt-in components (INCLUDE?).
+
+ifeq ($(and $(BUILD_PROFILE),$(EXCLUDE)),1)
+$(error "Cannot specify both BUILD_PROFILE and EXCLUDE")
+endif
+
+COMPONENTS := \
+	datasource_appsec \
+	datasource_cloudwatch \
+	datasource_docker \
+	datasource_file \
+	datasource_k8saudit \
+	datasource_kafka \
+	datasource_journalctl \
+	datasource_kinesis \
+	datasource_loki \
+	datasource_s3 \
+	datasource_syslog \
+	datasource_wineventlog
+
+comma := ,
+space := $(empty) $(empty)
+
+# Predefined profiles
+
+# keep only datasource-file
+EXCLUDE_MINIMAL := $(subst $(space),$(comma),$(filter-out datasource_file,,$(COMPONENTS)))
+
+# example
+# EXCLUDE_MEDIUM := datasource_kafka,datasource_kinesis,datasource_s3
+
+BUILD_PROFILE ?= default
+
+# Set the EXCLUDE_LIST based on the chosen profile, unless EXCLUDE is already set
+ifeq ($(BUILD_PROFILE),minimal)
+EXCLUDE ?= $(EXCLUDE_MINIMAL)
+else ifneq ($(BUILD_PROFILE),default)
+$(error Invalid build profile specified: $(BUILD_PROFILE). Valid profiles are: minimal, default)
+endif
+
+# Create list of excluded components from the EXCLUDE variable
+EXCLUDE_LIST := $(subst $(comma),$(space),$(EXCLUDE))
+
+INVALID_COMPONENTS := $(filter-out $(COMPONENTS),$(EXCLUDE_LIST))
+ifneq ($(INVALID_COMPONENTS),)
+$(error Invalid optional components specified in EXCLUDE: $(INVALID_COMPONENTS). Valid components are: $(COMPONENTS))
+endif
+
+# Convert the excluded components to "no_<component>" form
+COMPONENT_TAGS := $(foreach component,$(EXCLUDE_LIST),no_$(component))
+
+ifneq ($(COMPONENT_TAGS),)
+GO_TAGS := $(GO_TAGS),$(subst $(space),$(comma),$(COMPONENT_TAGS))
+endif
+
+#--------------------------------------
+
 export LD_OPTS=-ldflags "$(STRIP_SYMBOLS) $(EXTLDFLAGS) $(LD_OPTS_VARS)" \
 	-trimpath -tags $(GO_TAGS) $(DISABLE_OPTIMIZATION)
 
@@ -130,6 +192,7 @@ build: build-info crowdsec cscli plugins  ## Build crowdsec, cscli and plugins
 .PHONY: build-info
 build-info:  ## Print build information
 	$(info Building $(BUILD_VERSION) ($(BUILD_TAG)) $(BUILD_TYPE) for $(GOOS)/$(GOARCH))
+	$(info Excluded components: $(EXCLUDE_LIST))
 
 ifneq (,$(RE2_FAIL))
 	$(error $(RE2_FAIL))
diff --git a/cmd/crowdsec/appsec.go b/cmd/crowdsec/appsec.go
new file mode 100644
index 00000000000..cb02b137dcd
--- /dev/null
+++ b/cmd/crowdsec/appsec.go
@@ -0,0 +1,18 @@
+// +build !no_datasource_appsec
+
+package main
+
+import (
+	"fmt"
+
+	"github.com/crowdsecurity/crowdsec/pkg/appsec"
+	"github.com/crowdsecurity/crowdsec/pkg/cwhub"
+)
+
+func LoadAppsecRules(hub *cwhub.Hub) error {
+	if err := appsec.LoadAppsecRules(hub); err != nil {
+		return fmt.Errorf("while loading appsec rules: %w", err)
+	}
+
+	return nil
+}
diff --git a/cmd/crowdsec/appsec_stub.go b/cmd/crowdsec/appsec_stub.go
new file mode 100644
index 00000000000..4a65b32a9ad
--- /dev/null
+++ b/cmd/crowdsec/appsec_stub.go
@@ -0,0 +1,11 @@
+//go:build no_datasource_appsec
+
+package main
+
+import (
+	"github.com/crowdsecurity/crowdsec/pkg/cwhub"
+)
+
+func LoadAppsecRules(hub *cwhub.Hub) error {
+	return nil
+}
diff --git a/cmd/crowdsec/crowdsec.go b/cmd/crowdsec/crowdsec.go
index 5aafc6b0dfe..460e8ab4328 100644
--- a/cmd/crowdsec/crowdsec.go
+++ b/cmd/crowdsec/crowdsec.go
@@ -14,7 +14,6 @@ import (
 	"github.com/crowdsecurity/crowdsec/pkg/acquisition"
 	"github.com/crowdsecurity/crowdsec/pkg/acquisition/configuration"
 	"github.com/crowdsecurity/crowdsec/pkg/alertcontext"
-	"github.com/crowdsecurity/crowdsec/pkg/appsec"
 	"github.com/crowdsecurity/crowdsec/pkg/csconfig"
 	"github.com/crowdsecurity/crowdsec/pkg/cwhub"
 	"github.com/crowdsecurity/crowdsec/pkg/exprhelpers"
@@ -43,12 +42,13 @@ func initCrowdsec(cConfig *csconfig.Config, hub *cwhub.Hub) (*parser.Parsers, []
 		return nil, nil, fmt.Errorf("while loading parsers: %w", err)
 	}
 
-	if err := LoadBuckets(cConfig, hub); err != nil {
+	if err = LoadBuckets(cConfig, hub); err != nil {
 		return nil, nil, fmt.Errorf("while loading scenarios: %w", err)
 	}
 
-	if err := appsec.LoadAppsecRules(hub); err != nil {
-		return nil, nil, fmt.Errorf("while loading appsec rules: %w", err)
+	// can be nerfed by a build flag
+	if err = LoadAppsecRules(hub); err != nil {
+		return nil, nil, err
 	}
 
 	datasources, err := LoadAcquisition(cConfig)
@@ -82,6 +82,7 @@ func runCrowdsec(cConfig *csconfig.Config, parsers *parser.Parsers, hub *cwhub.H
 				return nil
 			})
 		}
+
 		parserWg.Done()
 
 		return nil
@@ -108,6 +109,7 @@ func runCrowdsec(cConfig *csconfig.Config, parsers *parser.Parsers, hub *cwhub.H
 				return runPour(inputEventChan, holders, buckets, cConfig)
 			})
 		}
+
 		bucketWg.Done()
 
 		return nil
@@ -134,6 +136,7 @@ func runCrowdsec(cConfig *csconfig.Config, parsers *parser.Parsers, hub *cwhub.H
 				return runOutput(inputEventChan, outputEventChan, buckets, *parsers.Povfwctx, parsers.Povfwnodes, apiClient)
 			})
 		}
+
 		outputWg.Done()
 
 		return nil
diff --git a/pkg/acquisition/acquisition.go b/pkg/acquisition/acquisition.go
index 634557021f1..38bf228abbc 100644
--- a/pkg/acquisition/acquisition.go
+++ b/pkg/acquisition/acquisition.go
@@ -18,18 +18,6 @@ import (
 	"github.com/crowdsecurity/go-cs-lib/trace"
 
 	"github.com/crowdsecurity/crowdsec/pkg/acquisition/configuration"
-	appsecacquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/appsec"
-	cloudwatchacquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/cloudwatch"
-	dockeracquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/docker"
-	fileacquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/file"
-	journalctlacquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/journalctl"
-	kafkaacquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/kafka"
-	kinesisacquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/kinesis"
-	k8sauditacquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/kubernetesaudit"
-	lokiacquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/loki"
-	s3acquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/s3"
-	syslogacquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/syslog"
-	wineventlogacquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/wineventlog"
 	"github.com/crowdsecurity/crowdsec/pkg/csconfig"
 	"github.com/crowdsecurity/crowdsec/pkg/exprhelpers"
 	"github.com/crowdsecurity/crowdsec/pkg/types"
@@ -64,29 +52,72 @@ type DataSource interface {
 	Dump() interface{}
 }
 
-var AcquisitionSources = map[string]func() DataSource{
-	"file":        func() DataSource { return &fileacquisition.FileSource{} },
-	"journalctl":  func() DataSource { return &journalctlacquisition.JournalCtlSource{} },
-	"cloudwatch":  func() DataSource { return &cloudwatchacquisition.CloudwatchSource{} },
-	"syslog":      func() DataSource { return &syslogacquisition.SyslogSource{} },
-	"docker":      func() DataSource { return &dockeracquisition.DockerSource{} },
-	"kinesis":     func() DataSource { return &kinesisacquisition.KinesisSource{} },
-	"wineventlog": func() DataSource { return &wineventlogacquisition.WinEventLogSource{} },
-	"kafka":       func() DataSource { return &kafkaacquisition.KafkaSource{} },
-	"k8s-audit":   func() DataSource { return &k8sauditacquisition.KubernetesAuditSource{} },
-	"loki":        func() DataSource { return &lokiacquisition.LokiSource{} },
-	"s3":          func() DataSource { return &s3acquisition.S3Source{} },
-	"appsec":      func() DataSource { return &appsecacquisition.AppsecSource{} },
-}
+var (
+	// We declare everything here so we can tell if they are unsupported, or excluded from the build
+	AcquisitionSources = map[string]func() DataSource{
+		"appsec":      nil,
+		"cloudwatch":  nil,
+		"docker":      nil,
+		"file":        nil,
+		"journalctl":  nil,
+		"k8s-audit":   nil,
+		"kafka":       nil,
+		"kinesis":     nil,
+		"loki":        nil,
+		"s3":          nil,
+		"syslog":      nil,
+		"wineventlog": nil,
+	}
+	transformRuntimes = map[string]*vm.Program{}
+)
 
-var transformRuntimes = map[string]*vm.Program{}
+func GetDataSourceIface(dataSourceType string) (DataSource, error) {
+	source, ok := AcquisitionSources[dataSourceType]
+	if !ok {
+		return nil, fmt.Errorf("unknown data source %s", dataSourceType)
+	}
 
-func GetDataSourceIface(dataSourceType string) DataSource {
-	source := AcquisitionSources[dataSourceType]
 	if source == nil {
-		return nil
+		return nil, fmt.Errorf("data source %s is not built in this version of crowdsec", dataSourceType)
+	}
+
+	return source(), nil
+}
+
+// registerDataSource registers a datasource in the AcquisitionSources map.
+// It must be called in the init() function of the datasource package, and the datasource name
+// must be declared with a nil value in the map, to allow for conditional compilation.
+func registerDataSource(dataSourceType string, dsGetter func() DataSource) {
+	_, ok := AcquisitionSources[dataSourceType]
+	if !ok {
+		panic("datasource must be declared in the map: " + dataSourceType)
+	}
+
+	AcquisitionSources[dataSourceType] = dsGetter
+}
+
+// setupLogger creates a logger for the datasource to use at runtime.
+func setupLogger(source, name string, level *log.Level) (*log.Entry, error) {
+	clog := log.New()
+	if err := types.ConfigureLogger(clog); err != nil {
+		return nil, fmt.Errorf("while configuring datasource logger: %w", err)
+	}
+
+	if level != nil {
+		clog.SetLevel(*level)
+	}
+
+	fields := log.Fields{
+		"type": source,
+	}
+
+	if name != "" {
+		fields["name"] = name
 	}
-	return source()
+
+	subLogger := clog.WithFields(fields)
+
+	return subLogger, nil
 }
 
 // DataSourceConfigure creates and returns a DataSource object from a configuration,
@@ -100,33 +131,27 @@ func DataSourceConfigure(commonConfig configuration.DataSourceCommonCfg, metrics
 	if err != nil {
 		return nil, fmt.Errorf("unable to marshal back interface: %w", err)
 	}
-	if dataSrc := GetDataSourceIface(commonConfig.Source); dataSrc != nil {
-		/* this logger will then be used by the datasource at runtime */
-		clog := log.New()
-		if err := types.ConfigureLogger(clog); err != nil {
-			return nil, fmt.Errorf("while configuring datasource logger: %w", err)
-		}
-		if commonConfig.LogLevel != nil {
-			clog.SetLevel(*commonConfig.LogLevel)
-		}
-		customLog := log.Fields{
-			"type": commonConfig.Source,
-		}
-		if commonConfig.Name != "" {
-			customLog["name"] = commonConfig.Name
-		}
-		subLogger := clog.WithFields(customLog)
-		/* check eventual dependencies are satisfied (ie. journald will check journalctl availability) */
-		if err := dataSrc.CanRun(); err != nil {
-			return nil, &DataSourceUnavailableError{Name: commonConfig.Source, Err: err}
-		}
-		/* configure the actual datasource */
-		if err := dataSrc.Configure(yamlConfig, subLogger, metricsLevel); err != nil {
-			return nil, fmt.Errorf("failed to configure datasource %s: %w", commonConfig.Source, err)
-		}
-		return &dataSrc, nil
+
+	dataSrc, err := GetDataSourceIface(commonConfig.Source)
+	if err != nil {
+		return nil, err
+	}
+
+	subLogger, err := setupLogger(commonConfig.Source, commonConfig.Name, commonConfig.LogLevel)
+	if err != nil {
+		return nil, err
+	}
+
+	/* check eventual dependencies are satisfied (ie. journald will check journalctl availability) */
+	if err := dataSrc.CanRun(); err != nil {
+		return nil, &DataSourceUnavailableError{Name: commonConfig.Source, Err: err}
+	}
+	/* configure the actual datasource */
+	if err := dataSrc.Configure(yamlConfig, subLogger, metricsLevel); err != nil {
+		return nil, fmt.Errorf("failed to configure datasource %s: %w", commonConfig.Source, err)
 	}
-	return nil, fmt.Errorf("cannot find source %s", commonConfig.Source)
+
+	return &dataSrc, nil
 }
 
 // detectBackwardCompatAcquis: try to magically detect the type for backward compat (type was not mandatory then)
@@ -134,12 +159,15 @@ func detectBackwardCompatAcquis(sub configuration.DataSourceCommonCfg) string {
 	if _, ok := sub.Config["filename"]; ok {
 		return "file"
 	}
+
 	if _, ok := sub.Config["filenames"]; ok {
 		return "file"
 	}
+
 	if _, ok := sub.Config["journalctl_filter"]; ok {
 		return "journalctl"
 	}
+
 	return ""
 }
 
@@ -150,29 +178,35 @@ func LoadAcquisitionFromDSN(dsn string, labels map[string]string, transformExpr
 	if len(frags) == 1 {
 		return nil, fmt.Errorf("%s isn't valid dsn (no protocol)", dsn)
 	}
-	dataSrc := GetDataSourceIface(frags[0])
-	if dataSrc == nil {
-		return nil, fmt.Errorf("no acquisition for protocol %s://", frags[0])
+
+	dataSrc, err := GetDataSourceIface(frags[0])
+	if err != nil {
+		return nil, fmt.Errorf("no acquisition for protocol %s:// - %w", frags[0], err)
 	}
-	/* this logger will then be used by the datasource at runtime */
-	clog := log.New()
-	if err := types.ConfigureLogger(clog); err != nil {
-		return nil, fmt.Errorf("while configuring datasource logger: %w", err)
+
+	subLogger, err := setupLogger(dsn, "", nil)
+	if err != nil {
+		return nil, err
 	}
-	subLogger := clog.WithField("type", dsn)
+
 	uniqueId := uuid.NewString()
+
 	if transformExpr != "" {
 		vm, err := expr.Compile(transformExpr, exprhelpers.GetExprOptions(map[string]interface{}{"evt": &types.Event{}})...)
 		if err != nil {
 			return nil, fmt.Errorf("while compiling transform expression '%s': %w", transformExpr, err)
 		}
+
 		transformRuntimes[uniqueId] = vm
 	}
-	err := dataSrc.ConfigureByDSN(dsn, labels, subLogger, uniqueId)
+
+	err = dataSrc.ConfigureByDSN(dsn, labels, subLogger, uniqueId)
 	if err != nil {
 		return nil, fmt.Errorf("while configuration datasource for %s: %w", dsn, err)
 	}
+
 	sources = append(sources, dataSrc)
+
 	return sources, nil
 }
 
@@ -219,27 +253,31 @@ func LoadAcquisitionFromFile(config *csconfig.CrowdsecServiceCfg, prom *csconfig
 				break
 			}
 
-			//for backward compat ('type' was not mandatory, detect it)
+			// for backward compat ('type' was not mandatory, detect it)
 			if guessType := detectBackwardCompatAcquis(sub); guessType != "" {
 				sub.Source = guessType
 			}
-			//it's an empty item, skip it
+			// it's an empty item, skip it
 			if len(sub.Labels) == 0 {
 				if sub.Source == "" {
 					log.Debugf("skipping empty item in %s", acquisFile)
 					continue
 				}
 				if sub.Source != "docker" {
-					//docker is the only source that can be empty
+					// docker is the only source that can be empty
 					return nil, fmt.Errorf("missing labels in %s (position: %d)", acquisFile, idx)
 				}
 			}
 			if sub.Source == "" {
 				return nil, fmt.Errorf("data source type is empty ('source') in %s (position: %d)", acquisFile, idx)
 			}
-			if GetDataSourceIface(sub.Source) == nil {
-				return nil, fmt.Errorf("unknown data source %s in %s (position: %d)", sub.Source, acquisFile, idx)
+
+			// pre-check that the source is valid
+			_, err := GetDataSourceIface(sub.Source)
+			if err != nil {
+				return nil, fmt.Errorf("in file %s (position: %d) - %w", acquisFile, idx, err)
 			}
+
 			uniqueId := uuid.NewString()
 			sub.UniqueId = uniqueId
 			src, err := DataSourceConfigure(sub, metrics_level)
@@ -341,7 +379,7 @@ func StartAcquisition(sources []DataSource, output chan types.Event, AcquisTomb
 	}
 
 	for i := range len(sources) {
-		subsrc := sources[i] //ensure its a copy
+		subsrc := sources[i] // ensure its a copy
 		log.Debugf("starting one source %d/%d ->> %T", i, len(sources), subsrc)
 
 		AcquisTomb.Go(func() error {
@@ -369,7 +407,7 @@ func StartAcquisition(sources []DataSource, output chan types.Event, AcquisTomb
 				err = subsrc.OneShotAcquisition(outChan, AcquisTomb)
 			}
 			if err != nil {
-				//if one of the acqusition returns an error, we kill the others to properly shutdown
+				// if one of the acqusition returns an error, we kill the others to properly shutdown
 				AcquisTomb.Kill(err)
 			}
 			return nil
@@ -378,5 +416,6 @@ func StartAcquisition(sources []DataSource, output chan types.Event, AcquisTomb
 
 	/*return only when acquisition is over (cat) or never (tail)*/
 	err := AcquisTomb.Wait()
+
 	return err
 }
diff --git a/pkg/acquisition/acquisition_test.go b/pkg/acquisition/acquisition_test.go
index a5eecbc20ed..e39199f9cdb 100644
--- a/pkg/acquisition/acquisition_test.go
+++ b/pkg/acquisition/acquisition_test.go
@@ -79,13 +79,8 @@ func (f *MockSourceCantRun) GetName() string { return "mock_cant_run" }
 
 // appendMockSource is only used to add mock source for tests
 func appendMockSource() {
-	if GetDataSourceIface("mock") == nil {
-		AcquisitionSources["mock"] = func() DataSource { return &MockSource{} }
-	}
-
-	if GetDataSourceIface("mock_cant_run") == nil {
-		AcquisitionSources["mock_cant_run"] = func() DataSource { return &MockSourceCantRun{} }
-	}
+	AcquisitionSources["mock"] = func() DataSource { return &MockSource{} }
+	AcquisitionSources["mock_cant_run"] = func() DataSource { return &MockSourceCantRun{} }
 }
 
 func TestDataSourceConfigure(t *testing.T) {
@@ -150,7 +145,7 @@ labels:
 log_level: debug
 source: tutu
 `,
-			ExpectedError: "cannot find source tutu",
+			ExpectedError: "unknown data source tutu",
 		},
 		{
 			TestName: "mismatch_config",
@@ -184,6 +179,7 @@ wowo: ajsajasjas
 			yaml.Unmarshal([]byte(tc.String), &common)
 			ds, err := DataSourceConfigure(common, configuration.METRICS_NONE)
 			cstest.RequireErrorContains(t, err, tc.ExpectedError)
+
 			if tc.ExpectedError != "" {
 				return
 			}
@@ -270,7 +266,7 @@ func TestLoadAcquisitionFromFile(t *testing.T) {
 			Config: csconfig.CrowdsecServiceCfg{
 				AcquisitionFiles: []string{"test_files/bad_source.yaml"},
 			},
-			ExpectedError: "unknown data source does_not_exist in test_files/bad_source.yaml",
+			ExpectedError: "in file test_files/bad_source.yaml (position: 0) - unknown data source does_not_exist",
 		},
 		{
 			TestName: "invalid_filetype_config",
@@ -284,6 +280,7 @@ func TestLoadAcquisitionFromFile(t *testing.T) {
 		t.Run(tc.TestName, func(t *testing.T) {
 			dss, err := LoadAcquisitionFromFile(&tc.Config, nil)
 			cstest.RequireErrorContains(t, err, tc.ExpectedError)
+
 			if tc.ExpectedError != "" {
 				return
 			}
@@ -329,6 +326,7 @@ func (f *MockCat) OneShotAcquisition(out chan types.Event, tomb *tomb.Tomb) erro
 
 	return nil
 }
+
 func (f *MockCat) StreamingAcquisition(chan types.Event, *tomb.Tomb) error {
 	return errors.New("can't run in tail")
 }
@@ -367,12 +365,14 @@ func (f *MockTail) GetMode() string                  { return "tail" }
 func (f *MockTail) OneShotAcquisition(out chan types.Event, tomb *tomb.Tomb) error {
 	return errors.New("can't run in cat mode")
 }
+
 func (f *MockTail) StreamingAcquisition(out chan types.Event, t *tomb.Tomb) error {
 	for range 10 {
 		evt := types.Event{}
 		evt.Line.Src = "test"
 		out <- evt
 	}
+
 	<-t.Dying()
 
 	return nil
@@ -386,7 +386,7 @@ func (f *MockTail) ConfigureByDSN(string, map[string]string, *log.Entry, string)
 }
 func (f *MockTail) GetUuid() string { return "" }
 
-//func StartAcquisition(sources []DataSource, output chan types.Event, AcquisTomb *tomb.Tomb) error {
+// func StartAcquisition(sources []DataSource, output chan types.Event, AcquisTomb *tomb.Tomb) error {
 
 func TestStartAcquisitionCat(t *testing.T) {
 	sources := []DataSource{
@@ -456,6 +456,7 @@ func (f *MockTailError) StreamingAcquisition(out chan types.Event, t *tomb.Tomb)
 		evt.Line.Src = "test"
 		out <- evt
 	}
+
 	t.Kill(errors.New("got error (tomb)"))
 
 	return errors.New("got error")
@@ -485,7 +486,7 @@ READLOOP:
 		}
 	}
 	assert.Equal(t, 10, count)
-	//acquisTomb.Kill(nil)
+	// acquisTomb.Kill(nil)
 	time.Sleep(1 * time.Second)
 	cstest.RequireErrorContains(t, acquisTomb.Err(), "got error (tomb)")
 }
@@ -542,9 +543,7 @@ func TestConfigureByDSN(t *testing.T) {
 		},
 	}
 
-	if GetDataSourceIface("mockdsn") == nil {
-		AcquisitionSources["mockdsn"] = func() DataSource { return &MockSourceByDSN{} }
-	}
+	AcquisitionSources["mockdsn"] = func() DataSource { return &MockSourceByDSN{} }
 
 	for _, tc := range tests {
 		t.Run(tc.dsn, func(t *testing.T) {
diff --git a/pkg/acquisition/appsec.go b/pkg/acquisition/appsec.go
new file mode 100644
index 00000000000..81616d3d2b8
--- /dev/null
+++ b/pkg/acquisition/appsec.go
@@ -0,0 +1,12 @@
+//go:build !no_datasource_appsec
+
+package acquisition
+
+import (
+	appsecacquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/appsec"
+)
+
+//nolint:gochecknoinits
+func init() {
+	registerDataSource("appsec", func() DataSource { return &appsecacquisition.AppsecSource{} })
+}
diff --git a/pkg/acquisition/cloudwatch.go b/pkg/acquisition/cloudwatch.go
new file mode 100644
index 00000000000..e6b3d3e3e53
--- /dev/null
+++ b/pkg/acquisition/cloudwatch.go
@@ -0,0 +1,12 @@
+//go:build !no_datasource_cloudwatch
+
+package acquisition
+
+import (
+	cloudwatchacquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/cloudwatch"
+)
+
+//nolint:gochecknoinits
+func init() {
+	registerDataSource("cloudwatch", func() DataSource { return &cloudwatchacquisition.CloudwatchSource{} })
+}
diff --git a/pkg/acquisition/docker.go b/pkg/acquisition/docker.go
new file mode 100644
index 00000000000..3bf792a039a
--- /dev/null
+++ b/pkg/acquisition/docker.go
@@ -0,0 +1,12 @@
+//go:build !no_datasource_docker
+
+package acquisition
+
+import (
+	dockeracquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/docker"
+)
+
+//nolint:gochecknoinits
+func init() {
+	registerDataSource("docker", func() DataSource { return &dockeracquisition.DockerSource{} })
+}
diff --git a/pkg/acquisition/file.go b/pkg/acquisition/file.go
new file mode 100644
index 00000000000..1ff2e4a3c0e
--- /dev/null
+++ b/pkg/acquisition/file.go
@@ -0,0 +1,12 @@
+//go:build !no_datasource_file
+
+package acquisition
+
+import (
+	fileacquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/file"
+)
+
+//nolint:gochecknoinits
+func init() {
+	registerDataSource("file", func() DataSource { return &fileacquisition.FileSource{} })
+}
diff --git a/pkg/acquisition/journalctl.go b/pkg/acquisition/journalctl.go
new file mode 100644
index 00000000000..691f961ae77
--- /dev/null
+++ b/pkg/acquisition/journalctl.go
@@ -0,0 +1,12 @@
+//go:build !no_datasource_journalctl
+
+package acquisition
+
+import (
+	journalctlacquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/journalctl"
+)
+
+//nolint:gochecknoinits
+func init() {
+	registerDataSource("journalctl", func() DataSource { return &journalctlacquisition.JournalCtlSource{} })
+}
diff --git a/pkg/acquisition/k8s.go b/pkg/acquisition/k8s.go
new file mode 100644
index 00000000000..cb9446be285
--- /dev/null
+++ b/pkg/acquisition/k8s.go
@@ -0,0 +1,12 @@
+//go:build !no_datasource_k8saudit
+
+package acquisition
+
+import (
+	k8sauditacquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/kubernetesaudit"
+)
+
+//nolint:gochecknoinits
+func init() {
+	registerDataSource("k8s-audit", func() DataSource { return &k8sauditacquisition.KubernetesAuditSource{} })
+}
diff --git a/pkg/acquisition/kafka.go b/pkg/acquisition/kafka.go
new file mode 100644
index 00000000000..7d315d87feb
--- /dev/null
+++ b/pkg/acquisition/kafka.go
@@ -0,0 +1,12 @@
+//go:build !no_datasource_kafka
+
+package acquisition
+
+import (
+	kafkaacquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/kafka"
+)
+
+//nolint:gochecknoinits
+func init() {
+	registerDataSource("kafka", func() DataSource { return &kafkaacquisition.KafkaSource{} })
+}
diff --git a/pkg/acquisition/kinesis.go b/pkg/acquisition/kinesis.go
new file mode 100644
index 00000000000..b41372e7fb9
--- /dev/null
+++ b/pkg/acquisition/kinesis.go
@@ -0,0 +1,12 @@
+//go:build !no_datasource_kinesis
+
+package acquisition
+
+import (
+	kinesisacquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/kinesis"
+)
+
+//nolint:gochecknoinits
+func init() {
+	registerDataSource("kinesis", func() DataSource { return &kinesisacquisition.KinesisSource{} })
+}
diff --git a/pkg/acquisition/loki.go b/pkg/acquisition/loki.go
new file mode 100644
index 00000000000..1eed6686591
--- /dev/null
+++ b/pkg/acquisition/loki.go
@@ -0,0 +1,12 @@
+//go:build !no_datasource_loki
+
+package acquisition
+
+import (
+	"github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/loki"
+)
+
+//nolint:gochecknoinits
+func init() {
+	registerDataSource("loki", func() DataSource { return &loki.LokiSource{} })
+}
diff --git a/pkg/acquisition/modules/appsec/appsec_lnx_test.go b/pkg/acquisition/modules/appsec/appsec_lnx_test.go
index 3e40a1f970c..61dfc536f5e 100644
--- a/pkg/acquisition/modules/appsec/appsec_lnx_test.go
+++ b/pkg/acquisition/modules/appsec/appsec_lnx_test.go
@@ -1,5 +1,4 @@
 //go:build !windows
-// +build !windows
 
 package appsecacquisition
 
@@ -16,6 +15,7 @@ import (
 
 func TestAppsecRuleTransformsOthers(t *testing.T) {
 	log.SetLevel(log.TraceLevel)
+
 	tests := []appsecRuleTest{
 		{
 			name:             "normalizepath",
diff --git a/pkg/acquisition/modules/appsec/appsec_win_test.go b/pkg/acquisition/modules/appsec/appsec_win_test.go
index e85d75df251..a6b8f3a0340 100644
--- a/pkg/acquisition/modules/appsec/appsec_win_test.go
+++ b/pkg/acquisition/modules/appsec/appsec_win_test.go
@@ -1,5 +1,4 @@
 //go:build windows
-// +build windows
 
 package appsecacquisition
 
diff --git a/pkg/acquisition/s3.go b/pkg/acquisition/s3.go
new file mode 100644
index 00000000000..73343b0408d
--- /dev/null
+++ b/pkg/acquisition/s3.go
@@ -0,0 +1,12 @@
+//go:build !no_datasource_s3
+
+package acquisition
+
+import (
+	s3acquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/s3"
+)
+
+//nolint:gochecknoinits
+func init() {
+	registerDataSource("s3", func() DataSource { return &s3acquisition.S3Source{} })
+}
diff --git a/pkg/acquisition/syslog.go b/pkg/acquisition/syslog.go
new file mode 100644
index 00000000000..f62cc23b916
--- /dev/null
+++ b/pkg/acquisition/syslog.go
@@ -0,0 +1,12 @@
+//go:build !no_datasource_syslog
+
+package acquisition
+
+import (
+	syslogacquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/syslog"
+)
+
+//nolint:gochecknoinits
+func init() {
+	registerDataSource("syslog", func() DataSource { return &syslogacquisition.SyslogSource{} })
+}
diff --git a/pkg/acquisition/wineventlog.go b/pkg/acquisition/wineventlog.go
new file mode 100644
index 00000000000..0c4889a3f5c
--- /dev/null
+++ b/pkg/acquisition/wineventlog.go
@@ -0,0 +1,12 @@
+//go:build !no_datasource_wineventlog
+
+package acquisition
+
+import (
+	wineventlogacquisition "github.com/crowdsecurity/crowdsec/pkg/acquisition/modules/wineventlog"
+)
+
+//nolint:gochecknoinits
+func init() {
+	registerDataSource("wineventlog", func() DataSource { return &wineventlogacquisition.WinEventLogSource{} })
+}
diff --git a/pkg/cwversion/constraint/constraint.go b/pkg/cwversion/constraint/constraint.go
new file mode 100644
index 00000000000..67593f9ebbc
--- /dev/null
+++ b/pkg/cwversion/constraint/constraint.go
@@ -0,0 +1,32 @@
+package constraint
+
+import (
+	"fmt"
+
+	goversion "github.com/hashicorp/go-version"
+)
+
+const (
+	Parser   = ">= 1.0, <= 3.0"
+	Scenario = ">= 1.0, <= 3.0"
+	API      = "v1"
+	Acquis   = ">= 1.0, < 2.0"
+)
+
+func Satisfies(strvers string, constraint string) (bool, error) {
+	vers, err := goversion.NewVersion(strvers)
+	if err != nil {
+		return false, fmt.Errorf("failed to parse '%s': %w", strvers, err)
+	}
+
+	constraints, err := goversion.NewConstraint(constraint)
+	if err != nil {
+		return false, fmt.Errorf("failed to parse constraint '%s'", constraint)
+	}
+
+	if !constraints.Check(vers) {
+		return false, nil
+	}
+
+	return true, nil
+}
diff --git a/pkg/cwversion/version.go b/pkg/cwversion/version.go
index b208467aef5..867098e7d5a 100644
--- a/pkg/cwversion/version.go
+++ b/pkg/cwversion/version.go
@@ -4,11 +4,12 @@ import (
 	"fmt"
 	"strings"
 
-	goversion "github.com/hashicorp/go-version"
-
+	"github.com/crowdsecurity/go-cs-lib/maptools"
 	"github.com/crowdsecurity/go-cs-lib/version"
 
+	"github.com/crowdsecurity/crowdsec/pkg/acquisition"
 	"github.com/crowdsecurity/crowdsec/pkg/apiclient/useragent"
+	"github.com/crowdsecurity/crowdsec/pkg/cwversion/constraint"
 )
 
 var (
@@ -16,14 +17,19 @@ var (
 	Libre2   = "WebAssembly"
 )
 
-const (
-	Constraint_parser   = ">= 1.0, <= 3.0"
-	Constraint_scenario = ">= 1.0, <= 3.0"
-	Constraint_api      = "v1"
-	Constraint_acquis   = ">= 1.0, < 2.0"
-)
-
 func FullString() string {
+	dsBuilt := []string{}
+	dsExcluded := []string{}
+
+	for _, ds := range maptools.SortedKeys(acquisition.AcquisitionSources) {
+		if acquisition.AcquisitionSources[ds] != nil {
+			dsBuilt = append(dsBuilt, ds)
+			continue
+		}
+
+		dsExcluded = append(dsExcluded, ds)
+	}
+
 	ret := fmt.Sprintf("version: %s\n", version.String())
 	ret += fmt.Sprintf("Codename: %s\n", Codename)
 	ret += fmt.Sprintf("BuildDate: %s\n", version.BuildDate)
@@ -31,10 +37,18 @@ func FullString() string {
 	ret += fmt.Sprintf("Platform: %s\n", version.System)
 	ret += fmt.Sprintf("libre2: %s\n", Libre2)
 	ret += fmt.Sprintf("User-Agent: %s\n", useragent.Default())
-	ret += fmt.Sprintf("Constraint_parser: %s\n", Constraint_parser)
-	ret += fmt.Sprintf("Constraint_scenario: %s\n", Constraint_scenario)
-	ret += fmt.Sprintf("Constraint_api: %s\n", Constraint_api)
-	ret += fmt.Sprintf("Constraint_acquis: %s\n", Constraint_acquis)
+	ret += fmt.Sprintf("Constraint_parser: %s\n", constraint.Parser)
+	ret += fmt.Sprintf("Constraint_scenario: %s\n", constraint.Scenario)
+	ret += fmt.Sprintf("Constraint_api: %s\n", constraint.API)
+	ret += fmt.Sprintf("Constraint_acquis: %s\n", constraint.Acquis)
+
+	if len(dsBuilt) > 0 {
+		ret += fmt.Sprintf("Built data sources: %s\n", strings.Join(dsBuilt, ", "))
+	}
+
+	if len(dsExcluded) > 0 {
+		ret += fmt.Sprintf("Excluded data sources: %s\n", strings.Join(dsExcluded, ", "))
+	}
 
 	return ret
 }
@@ -46,21 +60,3 @@ func VersionStrip() string {
 
 	return ret[0]
 }
-
-func Satisfies(strvers string, constraint string) (bool, error) {
-	vers, err := goversion.NewVersion(strvers)
-	if err != nil {
-		return false, fmt.Errorf("failed to parse '%s': %w", strvers, err)
-	}
-
-	constraints, err := goversion.NewConstraint(constraint)
-	if err != nil {
-		return false, fmt.Errorf("failed to parse constraint '%s'", constraint)
-	}
-
-	if !constraints.Check(vers) {
-		return false, nil
-	}
-
-	return true, nil
-}
diff --git a/pkg/leakybucket/manager_load.go b/pkg/leakybucket/manager_load.go
index 6055a5308b5..1ae70fbfab3 100644
--- a/pkg/leakybucket/manager_load.go
+++ b/pkg/leakybucket/manager_load.go
@@ -22,7 +22,7 @@ import (
 	"github.com/crowdsecurity/crowdsec/pkg/alertcontext"
 	"github.com/crowdsecurity/crowdsec/pkg/csconfig"
 	"github.com/crowdsecurity/crowdsec/pkg/cwhub"
-	"github.com/crowdsecurity/crowdsec/pkg/cwversion"
+	"github.com/crowdsecurity/crowdsec/pkg/cwversion/constraint"
 	"github.com/crowdsecurity/crowdsec/pkg/exprhelpers"
 	"github.com/crowdsecurity/crowdsec/pkg/types"
 )
@@ -292,13 +292,13 @@ func LoadBuckets(cscfg *csconfig.CrowdsecServiceCfg, hub *cwhub.Hub, files []str
 				bucketFactory.FormatVersion = "1.0"
 			}
 
-			ok, err := cwversion.Satisfies(bucketFactory.FormatVersion, cwversion.Constraint_scenario)
+			ok, err := constraint.Satisfies(bucketFactory.FormatVersion, constraint.Scenario)
 			if err != nil {
 				return nil, nil, fmt.Errorf("failed to check version: %w", err)
 			}
 
 			if !ok {
-				log.Errorf("can't load %s : %s doesn't satisfy scenario format %s, skip", bucketFactory.Name, bucketFactory.FormatVersion, cwversion.Constraint_scenario)
+				log.Errorf("can't load %s : %s doesn't satisfy scenario format %s, skip", bucketFactory.Name, bucketFactory.FormatVersion, constraint.Scenario)
 				continue
 			}
 
diff --git a/pkg/parser/stage.go b/pkg/parser/stage.go
index fe538023b61..b98db350254 100644
--- a/pkg/parser/stage.go
+++ b/pkg/parser/stage.go
@@ -21,7 +21,7 @@ import (
 	log "github.com/sirupsen/logrus"
 	yaml "gopkg.in/yaml.v2"
 
-	"github.com/crowdsecurity/crowdsec/pkg/cwversion"
+	"github.com/crowdsecurity/crowdsec/pkg/cwversion/constraint"
 	"github.com/crowdsecurity/crowdsec/pkg/exprhelpers"
 )
 
@@ -85,12 +85,12 @@ func LoadStages(stageFiles []Stagefile, pctx *UnixParserCtx, ectx EnricherCtx) (
 				log.Tracef("no version in %s, assuming '1.0'", node.Name)
 				node.FormatVersion = "1.0"
 			}
-			ok, err := cwversion.Satisfies(node.FormatVersion, cwversion.Constraint_parser)
+			ok, err := constraint.Satisfies(node.FormatVersion, constraint.Parser)
 			if err != nil {
 				return nil, fmt.Errorf("failed to check version : %s", err)
 			}
 			if !ok {
-				log.Errorf("%s : %s doesn't satisfy parser format %s, skip", node.Name, node.FormatVersion, cwversion.Constraint_parser)
+				log.Errorf("%s : %s doesn't satisfy parser format %s, skip", node.Name, node.FormatVersion, constraint.Parser)
 				continue
 			}
 
diff --git a/pkg/setup/detect.go b/pkg/setup/detect.go
index 55af951bf89..01368091a6b 100644
--- a/pkg/setup/detect.go
+++ b/pkg/setup/detect.go
@@ -73,9 +73,9 @@ func validateDataSource(opaqueDS DataSourceItem) error {
 
 	// source must be known
 
-	ds := acquisition.GetDataSourceIface(commonDS.Source)
-	if ds == nil {
-		return fmt.Errorf("unknown source '%s'", commonDS.Source)
+	ds, err := acquisition.GetDataSourceIface(commonDS.Source)
+	if err != nil {
+		return err
 	}
 
 	// unmarshal and validate the rest with the specific implementation
diff --git a/pkg/setup/detect_test.go b/pkg/setup/detect_test.go
index c744e7d6796..6f61b5dac78 100644
--- a/pkg/setup/detect_test.go
+++ b/pkg/setup/detect_test.go
@@ -871,7 +871,7 @@ func TestDetectDatasourceValidation(t *testing.T) {
 				    datasource:
 				      source: wombat`,
 			expected:    setup.Setup{Setup: []setup.ServiceSetup{}},
-			expectedErr: "invalid datasource for foobar: unknown source 'wombat'",
+			expectedErr: "invalid datasource for foobar: unknown data source wombat",
 		}, {
 			name: "source is misplaced",
 			config: `
diff --git a/test/bats.mk b/test/bats.mk
index 8f507cb659b..631cc55579b 100644
--- a/test/bats.mk
+++ b/test/bats.mk
@@ -38,6 +38,7 @@ define ENV :=
 export TEST_DIR="$(TEST_DIR)"
 export LOCAL_DIR="$(LOCAL_DIR)"
 export BIN_DIR="$(BIN_DIR)"
+# append .min to the binary names to use the minimal profile
 export CROWDSEC="$(CROWDSEC)"
 export CSCLI="$(CSCLI)"
 export CONFIG_YAML="$(CONFIG_DIR)/config.yaml"
@@ -75,6 +76,11 @@ bats-update-tools:  ## Install/update tools required for functional tests
 # Build and installs crowdsec in a local directory. Rebuilds if already exists.
 bats-build: bats-environment  ## Build binaries for functional tests
 	@$(MKDIR) $(BIN_DIR) $(LOG_DIR) $(PID_DIR) $(BATS_PLUGIN_DIR)
+	# minimal profile
+	@$(MAKE) build DEBUG=1 TEST_COVERAGE=$(TEST_COVERAGE) DEFAULT_CONFIGDIR=$(CONFIG_DIR) DEFAULT_DATADIR=$(DATA_DIR) BUILD_PROFILE=minimal
+	@install -m 0755 cmd/crowdsec/crowdsec $(BIN_DIR)/crowdsec.min
+	@install -m 0755 cmd/crowdsec-cli/cscli $(BIN_DIR)/cscli.min
+	# default profile
 	@$(MAKE) build DEBUG=1 TEST_COVERAGE=$(TEST_COVERAGE) DEFAULT_CONFIGDIR=$(CONFIG_DIR) DEFAULT_DATADIR=$(DATA_DIR)
 	@install -m 0755 cmd/crowdsec/crowdsec cmd/crowdsec-cli/cscli $(BIN_DIR)/
 	@install -m 0755 cmd/notification-*/notification-* $(BATS_PLUGIN_DIR)/
diff --git a/test/bats/01_crowdsec.bats b/test/bats/01_crowdsec.bats
index 83072b0f159..aa5830a6bae 100644
--- a/test/bats/01_crowdsec.bats
+++ b/test/bats/01_crowdsec.bats
@@ -199,7 +199,42 @@ teardown() {
     assert_stderr --partial "crowdsec init: while loading acquisition config: no datasource enabled"
 }
 
-@test "crowdsec (disabled datasources)" {
+@test "crowdsec (datasource not built)" {
+    config_set '.common.log_media="stdout"'
+
+    # a datasource cannot run - it's not built in the log processor executable
+
+    ACQUIS_DIR=$(config_get '.crowdsec_service.acquisition_dir')
+    mkdir -p "$ACQUIS_DIR"
+    cat >"$ACQUIS_DIR"/foo.yaml <<-EOT
+	source: journalctl
+	journalctl_filter:
+	 - "_SYSTEMD_UNIT=ssh.service"
+	labels:
+	  type: syslog
+	EOT
+
+    #shellcheck disable=SC2016
+    rune -1 wait-for \
+        --err "crowdsec init: while loading acquisition config: in file $ACQUIS_DIR/foo.yaml (position: 0) - data source journalctl is not built in this version of crowdsec" \
+        env PATH='' "$CROWDSEC".min
+
+    # auto-detection of journalctl_filter still works
+    cat >"$ACQUIS_DIR"/foo.yaml <<-EOT
+        source: whatever
+	journalctl_filter:
+	 - "_SYSTEMD_UNIT=ssh.service"
+	labels:
+	  type: syslog
+	EOT
+
+    #shellcheck disable=SC2016
+    rune -1 wait-for \
+        --err "crowdsec init: while loading acquisition config: in file $ACQUIS_DIR/foo.yaml (position: 0) - data source journalctl is not built in this version of crowdsec" \
+        env PATH='' "$CROWDSEC".min
+}
+
+@test "crowdsec (disabled datasource)" {
     if is_package_testing; then
         # we can't hide journalctl in package testing
         # because crowdsec is run from systemd