blob: 0ddc726238f1c27e17357bb9294fbee2cbe205c8 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
|
# Maintainer: Leonardo Arena <rnalrd@alpinelinux.org>
pkgname=dns-root-hints
pkgver=2019073000
pkgrel=2
pkgdesc="The DNS root hint(s)"
url="https://www.internic.net/domain"
arch="noarch"
license="Public-Domain"
depends="curl gnupg"
makedepends="curl"
source="verisign-grs-nstld-key.asc named.root named.root.sig
update-$pkgname
$pkgname.crond
"
package() {
install -D -m 644 -o root -g root "$srcdir"/named.root \
"$pkgdir"/usr/share/$pkgname/named.root
install -D -m 644 -o root -g root "$srcdir"/named.root.sig \
"$pkgdir"/usr/share/$pkgname/named.root.sig
install -D -m 644 -o root -g root "$srcdir"/verisign-grs-nstld-key.asc \
"$pkgdir"/usr/share/$pkgname/verisign-grs-nstld-key.asc
install -D -m 755 -o root -g root "$srcdir"/update-$pkgname \
"$pkgdir"/usr/bin/update-$pkgname
install -D -m 755 -o root -g root "$srcdir"/$pkgname.crond \
"$pkgdir"/etc/periodic/monthly/$pkgname
# compatibility links
cd "$pkgdir/usr/share/$pkgname"
ln -s named.root named.cache
ln -s named.root db.cache
}
check() {
local _awkprog='
/related version of root zone:/ {
rootver=$NF;
if (pkgver != rootver) {
$1="ERROR:";
print;
exit 1;
};
printf "OK: %s\n", rootver;
quit;
}'
awk -v pkgver="$pkgver" "$_awkprog" "$srcdir"/named.root
}
# check new versions of root hints and commit
snapshot() {
# use a temporary dir for new files
export _tmp=$(mktemp -d -p .)
for file in named.root named.root.sig; do
curl -sLR "${url}/${file}" -o "${_tmp}/${file}"
done
# compare new and current versions
local _drh_new_ver=$(grep "related version of root zone:" ${_tmp}/named.root | egrep -o '[0-9]{10}')
local _drh_current_ver=$(grep "related version of root zone:" named.root | egrep -o '[0-9]{10}')
# commit if new version is found
if [ "$_drh_new_ver" != "$_drh_current_ver" ]; then
_check_sig
mv ${_tmp}/named.root named.root
mv ${_tmp}/named.root.sig named.root.sig
git add named.root named.root.sig
abump $pkgname-$_drh_new_ver
fi
# cleanup
rm "${_tmp}"/* 2>/dev/null || true
rmdir "${_tmp}"
}
_check_sig() {
local GNUPGHOME="$builddir/.gpg"
install -d -m 0700 "$GNUPGHOME"
gpg --import < verisign-grs-nstld-key.asc
gpg --verify "${_tmp}/named.root.sig" "${_tmp}/named.root"
}
sha512sums="3ecf5d66e506526ad98ea0b371202f0763b987322bd4407b40fcd95415202bddb18fd06c82eb397566b393e214dc88cb17ec94f3908328e8a55f5f68cc730993 verisign-grs-nstld-key.asc
0491784a0d0722113120bae4dd42c7671cb05b4b76d4dd4773718ee4c7777d7fb7b039f76b8a30179d5dfa8f3142182bf0b0d809f9d6e1ef581d08482e06d250 named.root
b1d76a8040c534f2a5ffc54b92aa3a465ddd01b345e2a7eade258359017c623d5a847a270b259cd58ba3d8550a3519b0921f9f62dc6e98a0acdd3873b2556359 named.root.sig
7e640e997dd0eae47fb1e609f73d5206e09684eada15d3b6043fc23e639859af743b99cbd868e98269c2af25e7c3eeea307f52f2fb7d4a6f3e00f8b14a289322 update-dns-root-hints
67a7ef07ee9086ce584a8b316b15cd05214968f89bbc363fb2d5932ebf47ed962c0862fe254082e68f27574acb62f3672137dd23c40d7d2047c969ee449827f8 dns-root-hints.crond"
|
