On 01/29/2018 04:45 PM, Richard W.M. Jones wrote:
On Mon, Jan 29, 2018 at 03:55:53PM +0100, Florian Weimer wrote:
On 01/29/2018 03:43 PM, Kevin Kofler wrote:
Is https://fedoraproject.org/wiki/Changes/Annobin (no user-visible
improvements, only yet another global distrowide size increase) really worth
the circular dependency nightmare (rebuilding annobin requires GCC, but GCC
is configured to not work without annobin) or is it time to drop the feature
and enact the contingency plan?
Yes, it is required for meeting our security hardening objectives.
Ideally, annobin would be built from the GCC source package, but
since GCC needs more than twelve hours to build on armhfp, that is
not really an option while we are still adjusting the information
that annobin collects.
annobin.spec now uses:
%undefine _annotated_build
so at least the circular dependency is no longer there. You still
have to remember to rebuild it when a new version of GCC comes out
however.
... which apparently has just happened.
Consequences are affecting all released versions of Fedora, because it's
impossible to apply bugfix updates to Fedora < rawhide, due to the
GCC-chaos in rawhide.
Ralf
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
