On Mon, Jan 29, 2018 at 03:55:53PM +0100, Florian Weimer wrote: > On 01/29/2018 03:43 PM, Kevin Kofler wrote: > >Is https://fedoraproject.org/wiki/Changes/Annobin (no user-visible > >improvements, only yet another global distrowide size increase) really worth > >the circular dependency nightmare (rebuilding annobin requires GCC, but GCC > >is configured to not work without annobin) or is it time to drop the feature > >and enact the contingency plan? > > Yes, it is required for meeting our security hardening objectives. > > Ideally, annobin would be built from the GCC source package, but > since GCC needs more than twelve hours to build on armhfp, that is > not really an option while we are still adjusting the information > that annobin collects. annobin.spec now uses: %undefine _annotated_build so at least the circular dependency is no longer there. You still have to remember to rebuild it when a new version of GCC comes out however. RIch. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones Read my programming and virtualization blog: http://rwmj.wordpress.com virt-builder quickly builds VMs from scratch http://libguestfs.org/virt-builder.1.html _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
