Hi Peter, Took a look at the acmetool package, and it looks pretty good.
You might want to suppress the lintian warnings for some of the hardening flags; it's my understanding (please correct me if I'm wrong -- I'm far from a Golang expert) that Golang simply doesn't support many kinds of hardening flags on its output -- PIE just doesn't work, and since it produces statically linked binaries, some of the other stuff doesn't work either. There's also a newer version that's been released since you first packaged acmetool; it should be updated prior to upload. Thanks for your help! Sincerely, -- Harlan Lieberman-Berg ~hlieberman