Jeff Law wrote:
:( I'll raise it again with Nick and Jakub, it's a sore
point for
everyone I think and it causes far more friction than just what we see
here in Fedora.
IMHO, we should just drop annobin from Fedora (or at least disable it). It
provides no tangible benefit to end users and the regular sync issues with
the toolchain are a constant source of pain for packagers. Would it not be
enough to do periodic rebuilds with annobin in a side tag to catch packages
that are built with insecure or otherwise suboptimal flags, instead of
burdening the production repository with this debugging tool?
Kevin Kofler