On Tue, 27 Oct 2020 20:57:39 -0000 "Olivier Lemasle" <olem@xxxxxxxxxxxxxxxxx> wrote: > Hi all, > > I'm packaging Open Policy Agent [1] (OPA) for Fedora. However, with > version 0.20.0, OPA added a telemetry service, enabled by default, > reporting to a OPA-managed service the OPA version, a UUID and the > build architecture (cf changelog [2] and privacy information [3]) > > I didn't find any Fedora policy regarding this kind of opt-out > telemetry, so I asked the Fedora Packaging Commitee for advice [4]. I > got advised to ask Fedora community on this mailing list. > > So do you think it is ok to package OPA as is, or should I patch it > to make telemetry opt-in by disabling it by default in the Fedora > package? > > More globally, what do you think should be done in Fedora packages > when an upstream project includes a telemetry service? > > Thank you & regards, > > -- > Olem > > [1] https://www.openpolicyagent.org/ > [2] https://github.com/open-policy-agent/opa/releases/tag/v0.20.0 > [3] https://www.openpolicyagent.org/docs/latest/privacy/ > [4] https://pagure.io/packaging-committee/issue/991 Thanks for taking the time and effort to do this. Most of us here are probably not running in the cloud, so this will have little effect on us. However, even though it doesn't affect me, I think that this should be disabled by default (be opt in) as a matter of policy. As part of using a distribution, the updating of software is up to the maintainer because they ensure that it is compatible with other software that is available. For example, firefox has this same capability disabled by default in Fedora. This, of course, is an old school view. I read about people using various methods to install containers, where Fedora does not maintain and takes no responsibility for the quality of the software. In that case, it might be reasonable to turn this on. Linux in general seems to be heading in that direction, so you should take that into account. _______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
