diff options
Diffstat (limited to 'community/knot-resolver/APKBUILD')
| -rw-r--r-- | community/knot-resolver/APKBUILD | 105 |
1 files changed, 73 insertions, 32 deletions
diff --git a/community/knot-resolver/APKBUILD b/community/knot-resolver/APKBUILD index a45a40a1499..9f7faa8d1c6 100644 --- a/community/knot-resolver/APKBUILD +++ b/community/knot-resolver/APKBUILD @@ -2,23 +2,48 @@ # Contributor: tcely <knot-resolver+aports@tcely.33mail.com> # Maintainer: Jakub Jirutka <jakub@jirutka.cz> pkgname=knot-resolver -pkgver=4.2.2 -pkgrel=2 +pkgver=5.7.2 +pkgrel=0 pkgdesc="Minimalistic caching DNS resolver implementation" url="https://www.knot-resolver.cz/" -arch="all !s390x" # limited by luajit -license="GPL-3.0" +# x86, armhf and armv7 blocked by knot +# s390x some problem with luajit +# ppc64le, riscv64 blocked by luajit +arch="all !x86 !armhf !armv7 !ppc64le !riscv64 !s390x" +license="GPL-3.0-or-later" pkgusers="kresd" pkggroups="kresd" -depends="dns-root-hints dnssec-root lua5.1-sec lua5.1-socket" +depends="dnssec-root lua5.1-cqueues lua5.1-http" +_depends_dnstap="$pkgname=$pkgver-r$pkgrel" +_depends_http="$pkgname=$pkgver-r$pkgrel lua5.1-mmdb" _depends_dnstap_dev="fstrm-dev protobuf-dev protobuf-c-dev" -_depends_http="$pkgname lua5.1-http" -depends_dev="knot-dev>=2.8.0 libedit-dev libuv-dev>=1.7 lmdb-dev luajit-dev>=2.0 $_depends_dnstap_dev" -depends_static="$pkgname-dev" -makedepends="$depends_dev bash cmake gnutls-dev luacheck meson>=0.46 ninja pkgconf py3-flake8" +depends_dev=" + knot-dev>=2.8.0 + libedit-dev + libuv-dev>=1.7 + luajit-dev>=2.0 + $_depends_dnstap_dev + " +depends_static="$pkgname-dev=$pkgver-r$pkgrel" +makedepends=" + $depends_dev + bash + gnutls-dev + libcap-ng-dev + lmdb-dev + luacheck + meson + py3-flake8 + " checkdepends="cmocka-dev" -install="$pkgname.pre-install" +install=" + $pkgname.pre-install + $pkgname.post-upgrade + $pkgname-openrc.pre-upgrade + $pkgname-openrc.post-upgrade + " subpackages=" + $pkgname-dbg $pkgname-mod-http:http:noarch $pkgname-mod-dnstap:dnstap $pkgname-libs-static @@ -26,14 +51,23 @@ subpackages=" $pkgname-doc $pkgname-openrc " -source="https://secure.nic.cz/files/$pkgname/$pkgname-$pkgver.tar.xz - $pkgname.logrotate - $pkgname.confd - $pkgname.initd +source="https://secure.nic.cz/files/knot-resolver/knot-resolver-$pkgver.tar.xz + kresd.confd + kresd.initd + kres-cache-gc.initd + kres-cache-gc.confd " -builddir="$srcdir/$pkgname-$pkgver" # secfixes: +# 5.7.1-r0: +# - CVE-2023-50387 +# - CVE-2023-50868 +# 5.5.3-r0: +# - CVE-2022-40188 +# 5.1.1-r0: +# - CVE-2020-12667 +# 4.3.0-r0: +# - CVE-2019-19331 # 4.1.0-r0: # - CVE-2019-10190 # - CVE-2019-10191 @@ -41,35 +75,39 @@ builddir="$srcdir/$pkgname-$pkgver" # - CVE-2018-1110 build() { - meson build \ - --prefix=/usr \ - --buildtype=release \ + abuild-meson \ --default-library=both \ -Dclient=enabled \ -Dgroup="$pkggroups" \ -Dinstall_kresd_conf=enabled \ -Dunit_tests=enabled \ -Duser="$pkgusers" \ - -Droot_hints=/usr/share/dns-root-hints/named.root \ -Dmanaged_ta=disabled \ - -Dkeyfile_default=/usr/share/dnssec-root/trusted-key.key + -Dkeyfile_default=/usr/share/dnssec-root/trusted-key.key \ + build - ninja -C build + meson compile -C build } check() { - meson test -C build + meson test --no-rebuild --print-errorlogs -C build } package() { - DESTDIR="$pkgdir" ninja install -C build + DESTDIR="$pkgdir" meson install --no-rebuild -C build cd "$pkgdir" - install -m 755 -D "$srcdir"/$pkgname.initd ./etc/init.d/$pkgname - install -m 644 -D "$srcdir"/$pkgname.confd ./etc/conf.d/$pkgname + # These are useless on non-systemd distro. + rm ./usr/lib/knot-resolver/distro-preconfig.lua + rm ./usr/lib/knot-resolver/upgrade-4-to-5.lua + + install -m 755 -D "$srcdir"/kresd.initd ./etc/init.d/kresd + install -m 644 -D "$srcdir"/kresd.confd ./etc/conf.d/kresd + install -m 755 -D "$srcdir"/kres-cache-gc.initd ./etc/init.d/kres-cache-gc + install -m 644 -D "$srcdir"/kres-cache-gc.confd ./etc/conf.d/kres-cache-gc - install -m 644 -D "$srcdir"/$pkgname.logrotate ./etc/logrotate.d/$pkgname + install -d -m 750 -o kresd -g kresd ./var/cache/knot-resolver } http() { @@ -92,14 +130,17 @@ dnstap() { mv "$pkgdir"/$moddir/dnstap.so "$subpkgdir"/$moddir/ } -gpg_signature_extensions="asc" -gpgfingerprints=" +_gpg_signature_extensions="asc" +_gpgfingerprints=" good:BE26 EBB9 CBE0 59B3 910C A35B CE8D D6A1 A50A 21E4 good:4A8B A48C 2AED 933B D495 C509 A1FB A5F7 EF8C 4869 B600 6460 B60A 80E7 8206 2449 E747 DF1F 9575 A3AA " -sha512sums="53a7cb9419f090609c3ca31f606d40c6b023a1356de79899bc867b0511cc23474ac66af0dbd78cca0a48759ddf95cab6762bb17b24b4d1a376ad8cfdd4042fda knot-resolver-4.2.2.tar.xz -688aeacb0c1f21c7e532533b402e67068897217713fb668636df7533000b493981ddfa0497f8dba7da7c804ee4ab8d587a4f52155b4e2bf1f4025d2588d314bb knot-resolver.logrotate -9a4af28918d85fb973739cc856ac32c07746e4b1b2daee343905d5956bfd6cc45bf5cba87efa56625a9b38aced43aafb793ab37f9a2c06c95a899e47c84ee5a2 knot-resolver.confd -5891eb694f49ff221233afb0e4d7dcc5879783c3e365732189b623886b3a8351af022d80775bddf25e39f8b930ce9fccaed87384ee793e2746518ec5f3b78324 knot-resolver.initd" +sha512sums=" +973e9a541b54cee0d230247d279785a83ce2127216b12ee9f314a49adedac3e23e8369900d6f0985b0a666e9bcae7772f29224565e6208ed4988b13530e4ff0b knot-resolver-5.7.2.tar.xz +2c4002130af10f02735d1503d2543fd334721efb466c0ac288ef9218faa91c3d892f0fafd5fa8c3fd8fdb771be7d2aa367c7c1e0a12b13272e05ab2100d5d7c7 kresd.confd +a9d9fa0472e1e0f65714768755d64e18c45086396476290d4ad29e019e62b641347d866689fda125cee58b34c32e95cb532815eac8831480d16606b9d23d4230 kresd.initd +036b290a6645d9da2805f69d202ab7187e55067d490e38ec9ddaa2fd434a93b6715af9ca585f7a6dad154ed4ce362a973947343a6eb4137a7f2797f6d8adcd5a kres-cache-gc.initd +cbb69b3369f7496f7b481de1e564ad2352e20681f8e40b13003b3b834f1b00aee3f0e0f14d08c1263284052f2e3c2916323e183eac6ffcffe2fe5d353321b376 kres-cache-gc.confd +" |