# Contributor: Sören Tempel # Contributor: Carlo Landmeter # Contributor: Natanael Copa # Maintainer: Jakub Jirutka pkgname=unbound pkgver=1.13.2 pkgrel=2 pkgdesc="Unbound is a validating, recursive, and caching DNS resolver" url="http://unbound.net/" arch="all" license="BSD-3-Clause" depends="dnssec-root" depends_dev="expat-dev" _depends_migrate="/bin/sh apk-tools openrc" makedepends="$depends_dev libevent-dev openssl1.1-compat-dev python3-dev swig linux-headers" checkdepends="bind-tools ldns-tools" install="$pkgname.pre-install" pkgusers="unbound" pkggroups="unbound" subpackages="$pkgname-dev $pkgname-doc $pkgname-libs $pkgname-dbg $pkgname-openrc py-unbound:py $pkgname-migrate::noarch" source="https://unbound.net/downloads/unbound-$pkgver.tar.gz conf.patch migrate-dnscache-to-unbound $pkgname.initd $pkgname.confd " # secfixes: # 1.10.1-r0: # - CVE-2020-12662 # - CVE-2020-12663 # 1.9.5-r0: # - CVE-2019-18934 # 1.9.4-r0: # - CVE-2019-16866 build() { PYTHON_VERSION=3 ./configure \ --build="$CBUILD" \ --host="$CHOST" \ --prefix=/usr \ --sysconfdir=/etc \ --mandir=/usr/share/man \ --localstatedir=/var \ --with-username=unbound \ --with-run-dir="" \ --with-pidfile="" \ --with-rootkey-file=/usr/share/dnssec-root/trusted-key.key \ --with-libevent \ --with-pthreads \ --disable-static \ --disable-rpath \ --with-ssl \ --without-pythonmodule \ --with-pyunbound # do not link to libpython sed -i -e '/^LIBS=/s/-lpython.*[[:space:]]/ /' Makefile make } check() { make test } package() { make DESTDIR="$pkgdir" install make DESTDIR="$pkgdir" unbound-event-install install -Dm755 contrib/update-anchor.sh \ "$pkgdir"/usr/share/$pkgname/update-anchor.sh mkdir -p "$pkgdir"/usr/share/doc/$pkgname/ install -m644 doc/CREDITS doc/Changelog doc/FEATURES \ doc/README doc/TODO "$pkgdir"/usr/share/doc/$pkgname/ cd "$pkgdir" install -Dm755 "$srcdir"/unbound.initd ./etc/init.d/unbound install -Dm644 "$srcdir"/unbound.confd ./etc/conf.d/unbound } libs() { pkgdesc="unbound shared libraries" depends="$depends_libs" mkdir -p "$subpkgdir"/usr/lib mv "$pkgdir"/usr/lib/lib*.so.* "$subpkgdir"/usr/lib/ } openrc() { depends="$depends_openrc" default_openrc } py() { pkgdesc="Python bindings to libunbound" depends="$depends_py" mkdir -p "$subpkgdir"/usr/lib/ mv "$pkgdir"/usr/lib/python* "$subpkgdir"/usr/lib/ } migrate() { pkgdesc="Simple tool to migrate from dnscache to unbound" depends="$_depends_migrate" install -m755 -D "$srcdir"/migrate-dnscache-to-unbound \ "$subpkgdir"/usr/bin/migrate-dnscache-to-unbound } sha512sums="1e89441446e7a25c6a49bded645f8b348c1758c3be54e3a986041cb1f00c45d152fd469dc52666fb820574db9d51b16f1627dc8afcb9519508d4833ca358191a unbound-1.13.2.tar.gz 05fec1829dfb5279f35a76eeab768d88b6dffee4477b1db693360021969bdcc89e309f71ea6cc63e0f921b1fc223a073b97892be2095ed93d7da917a59e09d00 conf.patch 7ab3f57ade3fe8add60bfce208efccc968728fac5c94c759c34aaa09aa71e0da06dd7c24ae0fecf9e2ccc869594226d68b24fe2b0a0b161b833e22c0de1b03b6 migrate-dnscache-to-unbound c8e29190a7ab2803bb528fcc008d9788c1d46ca96abd7273023778068156aa65330a99af76a755929d24dfa936a3900bd400368ddf7b89fb3bcef29dbaa32683 unbound.initd 0ceae15d69deb24baa16990226de31fe743d84779a2595f31b4910b46ef925fc132cec1683d0a06141f707d9cbe517d731015702c60d9df4958ccfb9abd5a23f unbound.confd"