cpet/openbsd-ports
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
openbsd-ports/net/isc-bind/Makefile

107 lines
2.7 KiB
Makefile
Raw Normal View History

update to BIND-9.16.7
2020-09-17 08:16:03 +00:00
# $OpenBSD: Makefile,v 1.124 2020/09/17 08:16:03 sthen Exp $
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
update to BIND 9.9.3
2013-05-29 20:19:15 +00:00
COMMENT= Berkeley Internet Name Daemon: DNS server and tools
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
update net/isc-bind to 9.16.1
2020-03-19 17:07:20 +00:00
# Odd numbers devel, even numbers stable, ESV branched occasionally.
# 9.16.x is ESV.
update to BIND-9.16.7
2020-09-17 08:16:03 +00:00
V= 9.16.7
update net/isc-bind to 9.16.1
2020-03-19 17:07:20 +00:00
PORTROACH= limitw:1,even
update to BIND 9.16.0 (new stable/ESV release)
2020-02-20 14:00:32 +00:00
EXTRACT_SUFX= .tar.xz
drop back to isc-bind 9.11.x pending investigation into how to fix the named's requirement that cwd is writable. install bind.keys to the right path (it used the compiled-in default anyway but this gives the wrong cue to anyone wanting to update dnssec root zone trust anchors). problems reported by Mikolaj Kucharski
2018-12-02 13:25:44 +00:00
EPOCH= 0
add pledges for dig/host/nslookup in the ports version of BIND. initial pledge is "stdio rpath inet unix dns", dropping to "stdio inet dns" after argument parsing. access to resolv.conf is required late; the dns pledge is used for this rather than requiring full rpath; however contrary to the version in base, inet is allowed as well, so that it can be used as a debug tool for servers on alternate ports. works fine for me; no feedback after posting yet so committing to get real-world testing. please report any issues.
2017-01-24 11:46:35 +00:00
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
DISTNAME= bind-$V
PKGNAME= isc-bind-${V:S/-P/pl/}
let it build with clang, just grab the unwinder from c++abi
2017-07-28 20:53:33 +00:00
drop back to isc-bind 9.11.x pending investigation into how to fix the named's requirement that cwd is writable. install bind.keys to the right path (it used the compiled-in default anyway but this gives the wrong cue to anyone wanting to update dnssec root zone trust anchors). problems reported by Mikolaj Kucharski
2018-12-02 13:25:44 +00:00
# in shared_libs.log but not installed: isc-nosymtbl, t_api
update to BIND 9.16.6, fixes various assertion failures. https://downloads.isc.org/isc/bind9/9.16.6/doc/arm/html/notes.html#notes-for-bind-9-16-6
2020-08-21 06:03:11 +00:00
SHARED_LIBS += isc 7.0
major version update to BIND 9.14.8
2019-12-18 15:05:43 +00:00
SHARED_LIBS += isccc 3.0
update to BIND-9.16.7
2020-09-17 08:16:03 +00:00
SHARED_LIBS += dns 9.4
update to BIND 9.16.0 (new stable/ESV release)
2020-02-20 14:00:32 +00:00
SHARED_LIBS += isccfg 4.1
major version update to BIND 9.14.8
2019-12-18 15:05:43 +00:00
SHARED_LIBS += bind9 1.0
SHARED_LIBS += irs 3.0
SHARED_LIBS += ns 0.0
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
CATEGORIES= net
update HOMEPAGE
2019-12-17 18:03:22 +00:00
HOMEPAGE= https://www.isc.org/bind/
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
switch my maintainer email addresses to my own domain
2020-07-11 22:54:35 +00:00
MAINTAINER= Stuart Henderson <stu.ports@spacehopper.org>
take MAINTAINER
2015-03-14 22:26:21 +00:00
update BIND to 9.11.2, switching from 9.10 to 9.11 branch (which is a long term support branch). note, the license changed to MPL.
2018-01-12 17:08:01 +00:00
# MPL 2.0
s/PERMIT_PACKAGE_CDROM/PERMIT_PACKAGE/ and some light whitespace tidying in ports which I maintain
2019-06-03 16:06:50 +00:00
PERMIT_PACKAGE= Yes
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
update to BIND 9.16.0 (new stable/ESV release)
2020-02-20 14:00:32 +00:00
WANTLIB += c crypto iconv idn2 json-c lzma m pthread unistring uv xml2 z
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
MASTER_SITES= ${MASTER_SITE_ISC:=bind9/$V/}
replace libiconv module
2016-09-13 16:12:14 +00:00
MODULES= lang/python
update to BIND 9.16.0 (new stable/ESV release)
2020-02-20 14:00:32 +00:00
MODPY_VERSION= ${MODPY_DEFAULT_VERSION_3}
update to BIND 9.9.3
2013-05-29 20:19:15 +00:00
# used for dnssec-checkds/dnssec-coverage, but don't want to force the run dep.
MODPY_RUNDEP= No
update to BIND 9.16.0 (new stable/ESV release)
2020-02-20 14:00:32 +00:00
BUILD_DEPENDS= devel/py-ply${MODPY_FLAVOR}
replace libiconv module
2016-09-13 16:12:14 +00:00
LIB_DEPENDS= converters/libiconv \
devel/json-c \
update to bind-9.11.5 enable idn in utilities (dig/etc)
2018-10-19 14:04:45 +00:00
devel/libidn2 \
update to BIND 9.16.0 (new stable/ESV release)
2020-02-20 14:00:32 +00:00
devel/libuv \
oops, forgot to re-add json-c to WANTLIB/LIB_DEPENDS in previous commit. spotted by nigel@
2015-10-07 19:36:50 +00:00
textproc/libxml
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
major version update to BIND 9.14.8
2019-12-18 15:05:43 +00:00
DEBUG_PACKAGES= ${BUILD_PACKAGES}
struct stat definition is in sys/stat.h, not sys/fcntl.h. fix so that libisc knows that we do have nsec timestamps. spotted by florian@ in src/usr.sbin/bind.
2020-01-06 14:45:39 +00:00
CONFIGURE_STYLE= autoconf
AUTOCONF_VERSION= 2.69
isc-bind: drop most of the outdated sample config files (including a very old root.hint, the compiled-in defaults are better). there isn't really a "one size fits all" configuration, these files gave bad examples (combined recursive+auth hasn't been recommended in years), and as this is not the default nameserver on the OS any more hand-holding isn't really needed. by way of compensation: install the docs.
2020-05-29 20:05:37 +00:00
LIBTOOL_FLAGS= --tag=disable-static
update to bind-9.11.5 enable idn in utilities (dig/etc)
2018-10-19 14:04:45 +00:00
CONFIGURE_ARGS= --enable-full-report \
update to BIND 9.9.3
2013-05-29 20:19:15 +00:00
--with-libtool \
update to bind-9.11.5 enable idn in utilities (dig/etc)
2018-10-19 14:04:45 +00:00
--with-libidn2 \
drop hidden dep on lmdb responsible for zkt build failures, reported by naddy@ landry@, thanks landry for testing which led to the cause
2018-06-25 20:42:32 +00:00
--without-lmdb \
update to BIND 9.10.3. add a bunch of patches because they now support OpenSSL 1.1 api (OPENSSL_VERSION_NUMBER < / >= 0x10100000L checks).
2015-09-16 15:28:16 +00:00
--without-readline \
isc-bind: don't pick up cmocka if present at autoconf time
2020-03-19 19:05:22 +00:00
--without-cmocka \
update to BIND 9.9.3
2013-05-29 20:19:15 +00:00
--with-python=${MODPY_BIN}
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
update to bind 9.14.9 (released today) remove the no_openssl flavour, openssl/libressl is required in the current versions
2019-12-18 19:38:17 +00:00
COMPILER= base-clang ports-gcc
COMPILER_LANGS= c
fix atomic for macppc base-clang
2020-04-06 22:10:30 +00:00
.if ${MACHINE_ARCH:Mhppa}
update to BIND 9.16.0 (new stable/ESV release)
2020-02-20 14:00:32 +00:00
WANTLIB += atomic
LIB_DEPENDS += ${MODGCC4_CPPLIBDEP}
MAKE_FLAGS += LDFLAGS="${LDFLAGS} -latomic"
.endif
update to bind 9.14.9 (released today) remove the no_openssl flavour, openssl/libressl is required in the current versions
2019-12-18 19:38:17 +00:00
let it build with clang, just grab the unwinder from c++abi
2017-07-28 20:53:33 +00:00
.include <bsd.port.arch.mk>
# we don't link with libgcc, use the c++abi unwinder instead
.if ${PROPERTIES:Mclang}
MAKE_FLAGS += UNWINDERLIB=-lc++abi
WANTLIB += c++abi
.endif
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
FAKE_FLAGS= sysconfdir=${PREFIX}/share/examples/bind9
update to bind 9.14.9 (released today) remove the no_openssl flavour, openssl/libressl is required in the current versions
2019-12-18 19:38:17 +00:00
FLAVORS= geoip
update to BIND 9.10.0 and add a flavour for the new geolocation support
2014-05-01 20:19:25 +00:00
FLAVOR?=
.if ${FLAVOR:Mgeoip}
update to isc-bind 9.11.9, switch the geoip support to newly added geoip2/libmaxminddb CVE-2019-6471
2019-07-18 07:24:58 +00:00
LIB_DEPENDS+= net/libmaxminddb
WANTLIB+= maxminddb
update to BIND 9.16.0 (new stable/ESV release)
2020-02-20 14:00:32 +00:00
.else
CONFIGURE_ARGS+= --disable-geoip
Add a no_ssl flavour to BIND. Expand the comment about json-c as that's broken on mips64 as well as hppa.
2015-08-24 20:46:49 +00:00
.endif
update to BIND 9.9.5 - patch to add another missing stdint.h inclusion for uintptr_t - enable regression tests (these set temporary aliases on lo0; should be safe, but I've set TEST_INTERACTIVE to avoid any unintended consequences on bulk test runs).
2014-01-31 10:12:57 +00:00
# not strictly speaking interactive, but it configures temporary addresses on
# lo0 as root, so let's try and avoid running it unintentionally
TEST_IS_INTERACTIVE= Yes
update to BIND 9.16.0 (new stable/ESV release)
2020-02-20 14:00:32 +00:00
TEST_DEPENDS= sysutils/coreutils
update to BIND 9.9.5 - patch to add another missing stdint.h inclusion for uintptr_t - enable regression tests (these set temporary aliases on lo0; should be safe, but I've set TEST_INTERACTIVE to avoid any unintended consequences on bulk test runs).
2014-01-31 10:12:57 +00:00
pre-test:
update to BIND 9.16.0 (new stable/ESV release)
2020-02-20 14:00:32 +00:00
@echo '*** tests still need more work in the port - server processes not starting'
update to BIND 9.9.5 - patch to add another missing stdint.h inclusion for uintptr_t - enable regression tests (these set temporary aliases on lo0; should be safe, but I've set TEST_INTERACTIVE to avoid any unintended consequences on bulk test runs).
2014-01-31 10:12:57 +00:00
cd ${WRKSRC}/bin/tests/system && ${SUDO} ./ifconfig.sh up
update to BIND 9.16.0 (new stable/ESV release)
2020-02-20 14:00:32 +00:00
ln -fs ${LOCALBASE}/bin/gseq ${WRKDIR}/bin/seq
update to BIND 9.9.5 - patch to add another missing stdint.h inclusion for uintptr_t - enable regression tests (these set temporary aliases on lo0; should be safe, but I've set TEST_INTERACTIVE to avoid any unintended consequences on bulk test runs).
2014-01-31 10:12:57 +00:00
post-test:
cd ${WRKSRC}/bin/tests/system && ${SUDO} ./ifconfig.sh down
install sample configs and switch to running as _bind uid
2014-08-22 20:32:13 +00:00
post-install:
add edig/ehost/enslookup symlinks move another pledge to a better place, drop some rpath
2019-12-17 14:18:43 +00:00
.for i in dig nslookup host
ln -fs $i ${PREFIX}/bin/e$i; ln -fs $i.1 ${PREFIX}/man/man1/e$i.1
.endfor
update to BIND 9.16.4 - It was possible to trigger an assertion when attempting to fill an oversized TCP buffer. This was disclosed in CVE-2020-8618. [GL #1850] - It was possible to trigger an INSIST failure when a zone with an interior wildcard label was queried in a certain pattern. This was disclosed in CVE-2020-8619. [GL #1111] [GL #1718]
2020-06-17 20:46:54 +00:00
${INSTALL_DATA} ${FILESDIR}/[a-z]* ${PREFIX}/share/examples/bind9/
install sample configs and switch to running as _bind uid
2014-08-22 20:32:13 +00:00
import BIND 9.9.1-P1 as ports/net/isc-bind - this is newer than the version of BIND than is in the base OS (some people require features from this version e.g. DNS64), but note that it does not include the hardening changes made to the version in base. feedback from naddy@ giovanni@, ok giovanni@. "BIND is open source software that implements the Domain Name System (DNS) protocols for the Internet. It is a reference implementation of those protocols, but it is also production-grade software, suitable for use in high-volume and high-reliability applications."
2012-07-19 08:36:45 +00:00
.include <bsd.port.mk>
Reference in New Issue Copy Permalink