On Thu, 2020-07-30 at 10:09 +0200, Kevin Kofler wrote:
Jeff Law wrote:
> :( I'll raise it again with Nick and Jakub, it's a sore point for
> everyone I think and it causes far more friction than just what we see
> here in Fedora.
IMHO, we should just drop annobin from Fedora (or at least disable it). It
provides no tangible benefit to end users and the regular sync issues with
the toolchain are a constant source of pain for packagers. Would it not be
enough to do periodic rebuilds with annobin in a side tag to catch packages
that are built with insecure or otherwise suboptimal flags, instead of
burdening the production repository with this debugging tool?
Although the sync issues are annoying I do think we, as developers of
and developers on the Fedora platform benefit from having the annobin
notes in the binaries. It is like making sure there is unwind
information or debug packages for each binary. If things are perfect,
they are just there for assurance. But if there is an issue you want to
look into, or you get a crash, want to do some profiling to see what
your machine is doing, writing a new program, combine two libraries,
etc. you are glad the information is there.
Cheers,
Mark