cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
openbsd-ports/net/isc-bind/Makefile

94 lines
2.3 KiB
Makefile
Raw Normal View History

Change the shebang line from /bin/sh to /bin/ksh in all ports rc.d daemon scripts and bump subpackages that contain the *.rc scripts. discussed with and OK aja@ OK tb
2018-01-11 19:27:01 +00:00
# $OpenBSD: Makefile,v 1.74 2018/01/11 19:27:05 rpe Exp $
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
update to BIND 9.9.3
2013-05-29 20:19:15 +00:00
COMMENT= Berkeley Internet Name Daemon: DNS server and tools
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
update to bind 9.10.6
2017-07-28 23:38:06 +00:00
V= 9.10.6
Change the shebang line from /bin/sh to /bin/ksh in all ports rc.d daemon scripts and bump subpackages that contain the *.rc scripts. discussed with and OK aja@ OK tb
2018-01-11 19:27:01 +00:00
REVISION= 1
add pledges for dig/host/nslookup in the ports version of BIND. initial pledge is "stdio rpath inet unix dns", dropping to "stdio inet dns" after argument parsing. access to resolv.conf is required late; the dns pledge is used for this rather than requiring full rpath; however contrary to the version in base, inet is allowed as well, so that it can be used as a debug tool for servers on alternate ports. works fine for me; no feedback after posting yet so committing to get real-world testing. please report any issues.
2017-01-24 11:46:35 +00:00
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
DISTNAME= bind-$V
PKGNAME= isc-bind-${V:S/-P/pl/}
let it build with clang, just grab the unwinder from c++abi
2017-07-28 20:53:33 +00:00
update to bind 9.10.6
2017-07-28 23:38:06 +00:00
SHARED_LIBS += isc 3.4 # 190.0
SHARED_LIBS += isccc 0.0 # 140.5
SHARED_LIBS += dns 5.0 # 190.1
SHARED_LIBS += isccfg 0.4 # 144.0
SHARED_LIBS += bind9 0.1 # 141.0
SHARED_LIBS += lwres 0.1 # 141.3
SHARED_LIBS += irs 0.0 # 141.7
update to BIND 9.10.0 and add a flavour for the new geolocation support
2014-05-01 20:19:25 +00:00
# not installed:
update to bind 9.10.6
2017-07-28 23:38:06 +00:00
#SHARED_LIBS += isc-nosymtbl 190.0 # 190.0
update to BIND 9.10.0 and add a flavour for the new geolocation support
2014-05-01 20:19:25 +00:00
#SHARED_LIBS += t_api 0.0 # unknown
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
CATEGORIES= net
HOMEPAGE= http://www.isc.org/software/bind
take MAINTAINER
2015-03-14 22:26:21 +00:00
MAINTAINER= Stuart Henderson <sthen@openbsd.org>
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
# ISC
PERMIT_PACKAGE_CDROM= Yes
replace libiconv module
2016-09-13 16:12:14 +00:00
WANTLIB= c iconv json-c lzma m pthread xml2 z
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
MASTER_SITES= ${MASTER_SITE_ISC:=bind9/$V/}
replace libiconv module
2016-09-13 16:12:14 +00:00
MODULES= lang/python
update to BIND 9.9.3
2013-05-29 20:19:15 +00:00
# used for dnssec-checkds/dnssec-coverage, but don't want to force the run dep.
update to BIND 9.10.5
2017-05-03 20:20:42 +00:00
# XXX subpackage?
update to BIND 9.9.3
2013-05-29 20:19:15 +00:00
MODPY_RUNDEP= No
replace libiconv module
2016-09-13 16:12:14 +00:00
LIB_DEPENDS= converters/libiconv \
devel/json-c \
oops, forgot to re-add json-c to WANTLIB/LIB_DEPENDS in previous commit. spotted by nigel@
2015-10-07 19:36:50 +00:00
textproc/libxml
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
SEPARATE_BUILD= Yes
update to bind-9.10.4
2016-04-29 11:01:02 +00:00
CONFIGURE_STYLE= gnu
garbage collect CONFIGURE_SHARED
2016-03-11 20:28:21 +00:00
CONFIGURE_ARGS= --enable-filter-aaaa \
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
--enable-threads \
update to BIND 9.9.3
2013-05-29 20:19:15 +00:00
--with-libtool \
Force use of /dev/random for BIND, overriding an OpenBSD-specific check in upstream's autoconf script to prefer /dev/arandom. One of a couple of options suggested by naddy@.
2017-10-30 22:19:38 +00:00
--with-randomdev=/dev/random \
update to BIND 9.10.3. add a bunch of patches because they now support OpenSSL 1.1 api (OPENSSL_VERSION_NUMBER < / >= 0x10100000L checks).
2015-09-16 15:28:16 +00:00
--without-readline \
update to BIND 9.9.3
2013-05-29 20:19:15 +00:00
--with-python=${MODPY_BIN}
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
build dig with SIGCHASE support
2015-09-25 14:02:31 +00:00
CONFIGURE_ENV= STD_CDEFINES="-DDIG_SIGCHASE=1"
let it build with clang, just grab the unwinder from c++abi
2017-07-28 20:53:33 +00:00
.include <bsd.port.arch.mk>
# we don't link with libgcc, use the c++abi unwinder instead
.if ${PROPERTIES:Mclang}
MAKE_FLAGS += UNWINDERLIB=-lc++abi
WANTLIB += c++abi
.endif
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
FAKE_FLAGS= sysconfdir=${PREFIX}/share/examples/bind9
Add a no_ssl flavour to BIND. Expand the comment about json-c as that's broken on mips64 as well as hppa.
2015-08-24 20:46:49 +00:00
FLAVORS= geoip no_ssl
update to BIND 9.10.0 and add a flavour for the new geolocation support
2014-05-01 20:19:25 +00:00
FLAVOR?=
.if ${FLAVOR:Mgeoip}
CONFIGURE_ARGS+= --with-geoip
LIB_DEPENDS+= net/GeoIP
WANTLIB+= GeoIP
.endif
Add a no_ssl flavour to BIND. Expand the comment about json-c as that's broken on mips64 as well as hppa.
2015-08-24 20:46:49 +00:00
.if ${FLAVOR:Mno_ssl}
CONFIGURE_ARGS+= --without-openssl
.else
WANTLIB+= crypto
.endif
update to BIND 9.9.5 - patch to add another missing stdint.h inclusion for uintptr_t - enable regression tests (these set temporary aliases on lo0; should be safe, but I've set TEST_INTERACTIVE to avoid any unintended consequences on bulk test runs).
2014-01-31 10:12:57 +00:00
# not strictly speaking interactive, but it configures temporary addresses on
# lo0 as root, so let's try and avoid running it unintentionally
TEST_IS_INTERACTIVE= Yes
pre-test:
cd ${WRKSRC}/bin/tests/system && ${SUDO} ./ifconfig.sh up
post-test:
cd ${WRKSRC}/bin/tests/system && ${SUDO} ./ifconfig.sh down
install sample configs and switch to running as _bind uid
2014-08-22 20:32:13 +00:00
post-install:
cd ${FILESDIR}; ${INSTALL_DATA} localhost loopback loopback6.arpa \
named.conf root.hint ${PREFIX}/share/examples/bind9/
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
.include <bsd.port.mk>
Reference in New Issue Copy Permalink