On 6/4/24 21:43, Frank Ch. Eigler wrote:
Hi, Denys -
dvlasenk wrote:
[...]
Now readelf, annobin and hell knows what else started to talk to
REMOTE SERVERS, deep out of internals of complicated build infrastructure
running on presumably secure build machines of various IT corporations
and whatnot!
(It may not be appropriate for secure build machines to have general
internet access, but that's for the operators to decide.)
[...] Do you understand how many fetches of debuginfo will be
attempted by e.g. a kernel build tooling when it runs readelf on 8000
freshly built modules _for every kernel build_? How slow it is?
If remote debuginfo is not needed for these particular readelf
invocations, then the tools should not be making debuginfod calls.
Can you help identify examples?
Now various tools need to forcibly unset the variable to stop this madness.
The defaults are set with normal developers in mind.
The problem is that nobody expects a tool this low-level to do internet
lookups, and silently at that. It's like 'ls' suddenly started looking
up stuff from the net *by default*.
And, not just interactive use but scripts too, scripts that existed
years or even decades before this thing and cannot possibly expect such
activity. Like the case of
https://bugzilla.redhat.com/show_bug.cgi?id=2079600
And, it's made much worse by the packaging which means you cannot just
remove the package and be done with it, because so much important
tooling links to it. If the library and the configuration to actually
enable it were split between different packages, it'd be less offensive
at least.
- Panu -
--
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
