The package rpms/podman.git has added or updated architecture specific content in its
spec file (ExclusiveArch/ExcludeArch or %ifarch/%ifnarch) in commit(s):
https://src.fedoraproject.org/cgit/rpms/podman.git/commit/?id=aa5f4c2e24f....
Change:
+%ifarch x86_64
Thanks.
Full change:
============
commit aa5f4c2e24fd8729baa16b7162480766981332a7
Author: Lokesh Mandvekar <lsm5(a)fedoraproject.org>
Date: Mon Dec 7 10:08:03 2020 -0500
Harden cgo based golang binaries
- adjust CGO_CFLAGS to make both koji and checksec happy
Reported-by: Wade Mealing <wmealing(a)gmail.com>
Signed-off-by: Lokesh Mandvekar <lsm5(a)fedoraproject.org>
diff --git a/podman.spec b/podman.spec
index 9473adf..ba016ce 100644
--- a/podman.spec
+++ b/podman.spec
@@ -470,6 +470,12 @@ tar zxf %{SOURCE1}
%build
export GO111MODULE=off
+export CGO_CFLAGS="-O2 -g -grecord-gcc-switches -pipe -Wall -Werror=format-security
-Wp,-D_FORTIFY_SOURCE=2 -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -ffat-lto-objects
-fexceptions -fasynchronous-unwind-tables -fstack-protector-strong
-fstack-clash-protection -D_GNU_SOURCE -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE
-D_FILE_OFFSET_BITS=64"
+%ifarch x86_64
+export CGO_CFLAGS="$CGO_CFLAGS -m64 -mtune=generic -fcf-protection"
+%endif
+# These extra flags present in %%{optflags} have been skipped for now as they break the
build
+#export CGO_CFLAGS="$CGO_CFLAGS -flto=auto -Wp,D_GLIBCXX_ASSERTIONS
-specs=/usr/lib/rpm/redhat/redhat-annobin-cc1"
# build plugins first cause we don't wanna use podman's buildtags
pushd dnsname-%{commit_plugins}