Hi all,
I'm packaging Open Policy Agent [1] (OPA) for Fedora. However, with version 0.20.0,
OPA added a telemetry service, enabled by default, reporting to a OPA-managed service the
OPA version, a UUID and the build architecture (cf changelog [2] and privacy information
[3])
I didn't find any Fedora policy regarding this kind of opt-out telemetry, so I asked
the Fedora Packaging Commitee for advice [4]. I got advised to ask Fedora community on
this mailing list.
So do you think it is ok to package OPA as is, or should I patch it to make telemetry
opt-in by disabling it by default in the Fedora package?
More globally, what do you think should be done in Fedora packages when an upstream
project includes a telemetry service?
Thank you & regards,
--
Olem
[1]
https://www.openpolicyagent.org/
[2]
https://github.com/open-policy-agent/opa/releases/tag/v0.20.0
[3]
https://www.openpolicyagent.org/docs/latest/privacy/
[4]
https://pagure.io/packaging-committee/issue/991