Packaging Rust for Fedora

OpenSUSE does not allow network access during builds but we do allow vendoring in rust packages. We also have supporting tooling to work with our product security to scan for security issues, update them, and respond.

We have a flourishing rust ecosystem with many new package maintainers, and I even presented at Rust Conf about the approach and how successful it has been.

The primary driver to go "vendoring only" was that there will always be "an exception" where vendoring is the only choice and you can't use distro packages. So why split the problem - just choose a single correct work flow, and make sure it's robust.

(Note - I am the maintainer of Rust in SUSE and OpenSUSE).