horok/knot
1
0
Fork 0
Code Activity

Adding debian version 3.4.6-2.

Browse source 
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
This commit is contained in:
Daniel Baumann 2025-06-21 13:47:53 +02:00
parent 70063ca008
commit 41875561e8
Signed by: daniel.baumann
GPG key ID: BCC918A2ABD66424
59 changed files with 3820 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
debian/TODO vendored Normal file
View file

@ -0,0 +1,3 @@
* add more autopkgtest tests
- set up and run an authoritative resolver
- validate the signatures

1906
debian/changelog vendored Normal file
View file

File diff suppressed because it is too large Load diff

2
debian/clean vendored Normal file
View file

@ -0,0 +1,2 @@
doc/modules
.pybuild/

312
debian/control vendored Normal file
View file

@ -0,0 +1,312 @@
Source: knot
Section: net
Priority: optional
Maintainer: knot packagers <knot@packages.debian.org>
Uploaders:
Ondřej Surý <ondrej@debian.org>,
Daniel Salzman <daniel.salzman@nic.cz>,
Daniel Kahn Gillmor <dkg@fifthhorseman.net>,
Robert Edmonds <edmonds@debian.org>,
Jakub Ružička <jru@debian.org>,
Build-Depends:
autoconf,
automake,
debhelper-compat (= 13),
dh-python,
dpkg-dev (>= 1.22.5),
libbpf-dev [amd64 arm64 armhf i386 mips64el ppc64el riscv64 s390x ppc64],
libcap-ng-dev [!hurd-amd64 !hurd-i386],
libedit-dev,
libfstrm-dev [amd64 arm64 armhf i386 mips64el ppc64el riscv64 s390x ppc64],
libgnutls28-dev,
libidn2-dev,
liblmdb-dev,
libmaxminddb-dev [amd64 arm64 armhf i386 mips64el ppc64el riscv64 s390x ppc64],
libmnl-dev [amd64 arm64 armhf i386 mips64el ppc64el riscv64 s390x ppc64],
libnghttp2-dev,
libngtcp2-crypto-gnutls-dev [amd64 arm64 armhf i386 mips64el ppc64el riscv64 s390x ppc64],
libngtcp2-dev [amd64 arm64 armhf i386 mips64el ppc64el riscv64 s390x ppc64],
libprotobuf-c-dev [amd64 arm64 armhf i386 mips64el ppc64el riscv64 s390x ppc64],
libsystemd-dev [linux-any] | libsystemd-daemon-dev [linux-any],
libsystemd-dev [linux-any] | libsystemd-journal-dev [linux-any],
libtool,
liburcu-dev,
libxdp-dev [amd64 arm64 armhf i386 mips64el ppc64el riscv64 s390x ppc64],
pkgconf,
protobuf-c-compiler [amd64 arm64 armhf i386 mips64el ppc64el riscv64 s390x ppc64],
python3-all,
python3-setuptools,
python3-sphinx,
python3-sphinx-panels,
softhsm2 <!nocheck>,
Standards-Version: 4.7.0
Homepage: https://www.knot-dns.cz/
Vcs-Browser: https://salsa.debian.org/dns-team/knot-dns
Vcs-Git: https://salsa.debian.org/dns-team/knot-dns.git
Rules-Requires-Root: no
Package: knot
Architecture: any
Depends:
adduser,
libdnssec9t64 (= ${binary:Version}),
libknot15 (= ${binary:Version}),
libzscanner4t64 (= ${binary:Version}),
${misc:Depends},
${shlibs:Depends},
Pre-Depends:
${misc:Pre-Depends},
Breaks:
knot-dnsutils (<< 2.9.2-5),
Suggests:
systemd,
Description: Authoritative domain name server
Knot DNS is a fast, authoritative only, high performance, feature
full and open source name server.
.
Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
registry and hence is well suited to run anything from the root
zone, the top-level domain, to many smaller standard domain names.
Package: libknot15
Architecture: any
Depends:
${misc:Depends},
${shlibs:Depends},
Section: libs
Description: Authoritative domain name server (shared library)
Knot DNS is a fast, authoritative only, high performance, feature
full and open source name server.
.
Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
registry and hence is well suited to run anything from the root
zone, the top-level domain, to many smaller standard domain names.
.
This package provides libknot shared library used by Knot DNS and
Knot Resolver.
Package: libzscanner4t64
Provides: ${t64:Provides}
Replaces: libzscanner4
Breaks: libzscanner4 (<< ${source:Version})
Architecture: any
Depends:
${misc:Depends},
${shlibs:Depends},
Section: libs
Description: DNS zone-parsing shared library from Knot DNS
Knot DNS is a fast, authoritative only, high performance, feature
full and open source name server.
.
Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
registry and hence is well suited to run anything from the root
zone, the top-level domain, to many smaller standard domain names.
.
This package provides a fast zone parser shared library used by Knot
DNS and Knot Resolver.
Package: libdnssec9t64
Provides: ${t64:Provides}
Replaces: libdnssec9
Breaks: libdnssec9 (<< ${source:Version})
Architecture: any
Depends:
${misc:Depends},
${shlibs:Depends},
Section: libs
Description: DNSSEC shared library from Knot DNS
Knot DNS is a fast, authoritative only, high performance, feature
full and open source name server.
.
Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
registry and hence is well suited to run anything from the root
zone, the top-level domain, to many smaller standard domain names.
.
This package provides common DNSSEC shared library used by Knot DNS
and Knot Resolver.
Package: libknot-dev
Architecture: any
Depends:
libdnssec9t64 (= ${binary:Version}),
libgnutls28-dev,
libknot15 (= ${binary:Version}),
libzscanner4t64 (= ${binary:Version}),
${misc:Depends},
Section: libdevel
Description: Knot DNS shared library development files
Knot DNS is a fast, authoritative only, high performance, feature
full and open source name server.
.
Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
registry and hence is well suited to run anything from the root
zone, the top-level domain, to many smaller standard domain names.
.
This package provides development files for internal common shared
libraries.
Package: knot-dnsutils
Architecture: any
Depends:
libdnssec9t64 (= ${binary:Version}),
libknot15 (= ${binary:Version}),
libzscanner4t64 (= ${binary:Version}),
${misc:Depends},
${shlibs:Depends},
Breaks:
knot (<< 2.9.2-5),
Replaces:
knot (<< 2.9.2-5),
Description: Clients provided with Knot DNS (kdig, knsupdate, kxdpgun)
Knot DNS is a fast, authoritative only, high performance, feature
full and open source name server.
.
Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
registry and hence is well suited to run anything from the root
zone, the top-level domain, to many smaller standard domain names.
.
This package delivers various client programs related to DNS that are
derived from the Knot DNS source tree.
.
- kdig - query a DNS server in various ways
- knsupdate - perform dynamic updates (See RFC2136)
- kxdpgun - send a DNS query stream over UDP to a DNS server
.
Those clients were designed to be 1:1 compatible with BIND dnsutils,
but they provide some enhancements, which are documented in respective
manpages.
.
WARNING: knslookup is not provided as it is considered obsolete.
Package: knot-dnssecutils
Architecture: any
Depends:
libdnssec9t64 (= ${binary:Version}),
libknot15 (= ${binary:Version}),
libzscanner4t64 (= ${binary:Version}),
${misc:Depends},
${shlibs:Depends},
Breaks:
knot (<< 3.2.0-1),
knot-dnsutils (<< 3.2.0-1),
Replaces:
knot (<< 3.2.0-1),
knot-dnsutils (<< 3.2.0-1),
Description: DNSSEC tools provided with Knot DNS (kzonecheck, kzonesign, knsec3hash)
Knot DNS is a fast, authoritative only, high performance, feature
full and open source name server.
.
Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
registry and hence is well suited to run anything from the root
zone, the top-level domain, to many smaller standard domain names.
.
This package delivers various DNSSEC tools from Knot DNS.
.
- kzonecheck
- kzonesign
- knsec3hash
Package: knot-host
Architecture: any
Depends:
libdnssec9t64 (= ${binary:Version}),
libknot15 (= ${binary:Version}),
libzscanner4t64 (= ${binary:Version}),
${misc:Depends},
${shlibs:Depends},
Description: Version of 'host' bundled with Knot DNS
Knot DNS is a fast, authoritative only, high performance, feature
full and open source name server.
.
Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
registry and hence is well suited to run anything from the root
zone, the top-level domain, to many smaller standard domain names.
.
This package provides the 'host' program in the form that is bundled
with the Knot DNS. The 'host' command is designed to be 1:1
compatible with BIND 9.x 'host' program.
Package: knot-module-dnstap
Architecture: amd64 arm64 armhf i386 mips64el ppc64el riscv64 s390x ppc64
Depends:
knot (= ${binary:Version}),
${misc:Depends},
${shlibs:Depends},
Description: dnstap module for Knot DNS
Knot DNS is a fast, authoritative only, high performance, feature
full and open source name server.
.
Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
registry and hence is well suited to run anything from the root
zone, the top-level domain, to many smaller standard domain names.
.
This package contains dnstap module for logging DNS traffic.
Package: knot-module-geoip
Architecture: amd64 arm64 armhf i386 mips64el ppc64el riscv64 s390x ppc64
Depends:
knot (= ${binary:Version}),
${misc:Depends},
${shlibs:Depends},
Description: geoip module for Knot DNS
Knot DNS is a fast, authoritative only, high performance, feature
full and open source name server.
.
Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
registry and hence is well suited to run anything from the root
zone, the top-level domain, to many smaller standard domain names.
.
This package contains geoip module for geography-based responses.
Package: knot-doc
Architecture: all
Multi-Arch: foreign
Depends:
libjs-jquery,
libjs-sphinxdoc,
libjs-underscore,
${misc:Depends},
Section: doc
Description: Documentation for Knot DNS
Knot DNS is a fast, authoritative only, high performance, feature
full and open source name server.
.
Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
registry and hence is well suited to run anything from the root
zone, the top-level domain, to many smaller standard domain names.
.
This package provides various documents that are useful for
maintaining a working Knot DNS installation.
Package: knot-exporter
Architecture: all
Depends:
${misc:Depends},
${python3:Depends},
Section: python
Description: Prometheus exporter for Knot DNS
Knot DNS is a fast, authoritative only, high performance, feature
full and open source name server.
.
Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
registry and hence is well suited to run anything from the root
zone, the top-level domain, to many smaller standard domain names.
.
This package provides Python Prometheus exporter for Knot DNS.
Package: python3-libknot
Architecture: all
Depends:
libknot15 (>= ${source:Version}),
${misc:Depends},
${python3:Depends},
Section: python
Description: Python bindings for libknot
Knot DNS is a fast, authoritative only, high performance, feature
full and open source name server.
.
Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
registry and hence is well suited to run anything from the root
zone, the top-level domain, to many smaller standard domain names.
.
This package provides Python bindings for the libknot shared library.

200
debian/copyright vendored Normal file
View file

@ -0,0 +1,200 @@
Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: Knot DNS
Upstream-Contact: knot-dns@labs.nic.cz
Source: https://secure.nic.cz/files/knot-dns/
Files: *
Copyright: 2011-2023 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
License: GPL-3+
Files: m4/*
Copyright: 2011-2022 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
1996-2001, 2003-2015 Free Software Foundation, Inc.
License: GPL-3+
Files: install-sh
Copyright: 1994 X Consortium
License: MIT
Files: debian/* distro/pkg/deb/*
Copyright: 2011-2023 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
2011 Ondřej Surý <ondrej@debian.org>
License: GPL-3+
Files: tests/tap/*
Copyright: 2000-2001, 2004, 2006-2012 Russ Allbery <rra@stanford.edu>
2006, 2007, 2008, 2013 The Board of Trustees of the Leland Stanford Junior University
License: MIT
Files: tests/tap/files.*
Copyright: 2011-2019 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
License: GPL-3+
Files: src/contrib/dnstap/*
Copyright: 2014, Farsight Security, Inc. <software@farsightsecurity.com>
2011-2022 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
License: GPL-3+
Files: src/contrib/libngtcp2/*
Copyright: 2016-2023 ngtcp2 contributors
2012-2017 nghttp2 contributors
License: MIT
Files: src/contrib/musl/*
Copyright: 2005-2020 Rich Felker, et al.
License: MIT
Files: src/contrib/openbsd/siphash.*
Copyright: 2013 Andre Oppermann <andre@FreeBSD.org>
License: BSD-3-Clause
Files: src/contrib/openbsd/strl*
Copyright: 1998 Todd C. Miller <Todd.Miller@courtesan.com>
License: ISC
Files: src/contrib/proxyv2/*
Copyright: 2022 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
2021 Fastly, Inc.
License: GPL-3+
Files: src/contrib/qp-trie/*
Copyright: 2011-2019 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
2018 Tony Finch <dot@dotat.at>
License: GPL-3+
Files: src/contrib/ucw/*
Copyright: 2011-2022 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
1997-2017 Martin Mares <mj@ucw.cz>
2007 Pavel Charvat <pchar@ucw.cz>
2012 Ondrej Filip <feela@network.cz>
License: LGPL-2+
Files: src/contrib/ucw/lists.*
Copyright: 2011-2022 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
1998 Martin Mares <mj@ucw.cz>
1998 Pavel Machek <pavel@ucw.cz>
1998 Ondrej Zajicek <santiago@crfreenet.org>
License: GPL-2+
Files: src/contrib/url-parser/*
Copyright: 2020 Igor Sysoev
2020 Nginx, Inc.
2020 Joyent, Inc.
License: MIT
Files: src/contrib/vpool/*
Copyright: 2006, 2008 Alexey Vatchenko <av@bsdua.org>
License: ISC
Files: tests-fuzz/main.c
Copyright: 2011-2019 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
2017 Tim Ruehsen
License: MIT
License: GPL-3+
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
.
This program is distributed in the hope that it will be useful, but
WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
General Public License for more details.
.
You should have received a copy of the GNU General Public License
along with this program. If not, see <https://www.gnu.org/licenses/>.
.
On Debian systems, the full text of the GNU General Public License
version 3 can be found in the file `/usr/share/common-licenses/GPL-3'.
License: GPL-2+
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 2 of the License, or
(at your option) any later version.
.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
.
You should have received a copy of the GNU General Public License
along with this program. If not, see <https://www.gnu.org/licenses/>.
.
On Debian GNU/Linux systems, the complete text of the GNU General
Public License can be found in `/usr/share/common-licenses/GPL-2'.
License: LGPL-2+
This library is free software; you can redistribute it and/or
modify it under the terms of the GNU Library General Public
License as published by the Free Software Foundation; either
version 2 of the License, or (at your option) any later version.
.
This library is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
Library General Public License for more details.
.
You should have received a copy of the GNU General Public License
along with this program. If not, see <https://www.gnu.org/licenses/>.
.
On Debian GNU/Linux systems, the complete text of the GNU Lesser
General Public License can be found in `/usr/share/common-licenses/LGPL-2'.
License: ISC
Permission to use, copy, modify, and distribute this software for any
purpose with or without fee is hereby granted, provided that the above
copyright notice and this permission notice appear in all copies.
.
THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
License: BSD-3-Clause
Redistribution and use in source and binary forms, with or without modification,
are permitted provided that the following conditions are met:
1. Redistributions of source code must retain the above copyright notice, this
list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright notice,
this list of conditions and the following disclaimer in the documentation
and/or other materials provided with the distribution.
3. Neither the name of the copyright holder nor the names of its contributors
may be used to endorse or promote products derived from this software without
specific prior written permission.
.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
OF THE POSSIBILITY OF SUCH DAMAGE.
License: MIT
Permission is hereby granted, free of charge, to any person obtaining
a copy of this software and associated documentation files (the
"Software"), to deal in the Software without restriction, including
without limitation the rights to use, copy, modify, merge, publish,
distribute, sublicense, and/or sell copies of the Software, and to
permit persons to whom the Software is furnished to do so, subject to
the following conditions:
.
The above copyright notice and this permission notice shall be
included in all copies or substantial portions of the Software.
.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

9
debian/cz.nic.knotd.conf vendored Normal file
View file

@ -0,0 +1,9 @@
<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN" "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
<busconfig>
<policy user="knot">
<allow own="cz.nic.knotd" />
</policy>
<policy context="default">
<allow receive_sender="cz.nic.knotd" />
</policy>
</busconfig>

1
debian/docs vendored Normal file
View file

@ -0,0 +1 @@
README.md

30
debian/gbp.conf vendored Normal file
View file

@ -0,0 +1,30 @@
[DEFAULT]
debian-branch = debian/master
pristine-tar = True
upstream-branch = upstream/3.4
upstream-vcs-tag = v%(version)s
[dch]
meta = 1
[import-orig]
filter = [
'configure',
'*/Makefile.in',
'*/*/Makefile.in',
'*/*/*/Makefile.in',
'install-sh',
'ltmain.sh',
'm4/libtool.m4',
'/src/lib*/version.h',
'INSTALL',
'aclocal.m4',
'ar-lib',
'depcomp',
'compile',
'missing',
'test-driver',
'config.guess',
'config.sub',
]
filter-pristine-tar = False

3
debian/knot-dnssecutils.install vendored Normal file
View file

@ -0,0 +1,3 @@
usr/bin/knsec3hash
usr/bin/kzonecheck
usr/bin/kzonesign

3
debian/knot-dnssecutils.manpages vendored Normal file
View file

@ -0,0 +1,3 @@
usr/share/man/man1/knsec3hash.1
usr/share/man/man1/kzonecheck.1
usr/share/man/man1/kzonesign.1

3
debian/knot-dnsutils.install vendored Normal file
View file

@ -0,0 +1,3 @@
usr/bin/kdig
usr/bin/knsupdate
usr/sbin/kxdpgun

3
debian/knot-dnsutils.manpages vendored Normal file
View file

@ -0,0 +1,3 @@
usr/share/man/man1/kdig.1
usr/share/man/man1/knsupdate.1
usr/share/man/man8/kxdpgun.8

13
debian/knot-doc.doc-base vendored Normal file
View file

@ -0,0 +1,13 @@
Document: knot
Title: Documentation for the Knot authoritative DNS server
Author: Knot DNS authors at CZ.NIC Labs (https://www.knot-dns.cz)
Abstract: Knot DNS is a high-performance open-source authoritative DNS server
Section: Network/Communication
Format: HTML
Index: /usr/share/doc/knot-doc/index.html
Files: /usr/share/doc/knot-doc
Format: Text
Index: /usr/share/doc/knot-doc/_sources/index.rst.txt
Files: /usr/share/doc/knot-doc/_sources/

1
debian/knot-doc.install vendored Normal file
View file

@ -0,0 +1 @@
usr/share/doc/knot/* /usr/share/doc/knot-doc/

5
debian/knot-doc.links vendored Normal file
View file

@ -0,0 +1,5 @@
usr/share/javascript/jquery/jquery.min.js usr/share/doc/knot-doc/_static/jquery.js
usr/share/javascript/sphinxdoc/1.0/doctools.js usr/share/doc/knot-doc/_static/doctools.js
usr/share/javascript/sphinxdoc/1.0/language_data.js usr/share/doc/knot-doc/_static/language_data.js
usr/share/javascript/sphinxdoc/1.0/searchtools.js usr/share/doc/knot-doc/_static/searchtools.js
usr/share/javascript/underscore/underscore.min.js usr/share/doc/knot-doc/_static/underscore.js

3
debian/knot-exporter.install vendored Normal file
View file

@ -0,0 +1,3 @@
usr/lib/python3*/dist-packages/knot_exporter-*.egg-info
usr/lib/python3*/dist-packages/knot_exporter/*.py
usr/bin/knot-exporter /usr/sbin/

1
debian/knot-host.install vendored Normal file
View file

@ -0,0 +1 @@
usr/bin/khost

1
debian/knot-host.manpages vendored Normal file
View file

@ -0,0 +1 @@
usr/share/man/man1/khost.1

1
debian/knot-module-dnstap.install vendored Normal file
View file

@ -0,0 +1 @@
usr/lib/*/knot/modules-*/dnstap.so

1
debian/knot-module-geoip.install vendored Normal file
View file

@ -0,0 +1 @@
usr/lib/*/knot/modules-*/geoip.so

1
debian/knot.default vendored Normal file
View file

@ -0,0 +1 @@
KNOTD_ARGS=""

1
debian/knot.dirs vendored Normal file
View file

@ -0,0 +1 @@
var/lib/knot

149
debian/knot.init vendored Normal file
View file

@ -0,0 +1,149 @@
#!/bin/sh
### BEGIN INIT INFO
# Provides: knot
# Required-Start: $network $local_fs $remote_fs $syslog
# Required-Stop: $remote_fs $syslog
# Default-Start: 2 3 4 5
# Default-Stop: 0 1 6
# Short-Description: authoritative domain name server
# Description: Knot DNS is a authoritative-only domain name server
### END INIT INFO
# Author: Ondřej Surý <ondrej@debian.org>
# PATH should only include /usr/* if it runs after the mountnfs.sh script
PATH=/sbin:/usr/sbin:/bin:/usr/bin
DESC="Knot DNS server" # Introduce a short description here
NAME=knotd # Introduce the short server's name here
DAEMON=/usr/sbin/$NAME # Introduce the server's location here
PIDFILE=/run/knot/knot.pid
SCRIPTNAME=/etc/init.d/knot
KNOTC=/usr/sbin/knotc
RUNDIR=/run/knot
# Exit if the package is not installed
[ -x $DAEMON ] || exit 0
KNOTD_ARGS=""
# Read configuration variable file if it is present
[ -r /etc/default/knot ] && . /etc/default/knot
DAEMON_ARGS="-d $KNOTD_ARGS"
# Define LSB log_* functions.
# Depend on sysvinit-utils (>= 2.96) to ensure that this file is present.
. /lib/lsb/init-functions
#
# Function that starts the daemon/service
#
do_start()
{
# Return
# 0 if daemon has been started
# 1 if daemon was already running
# 2 if daemon could not be started
$KNOTC status >/dev/null 2>/dev/null \
&& return 1
start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON --test > /dev/null \
|| return 1
start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -- \
$DAEMON_ARGS \
|| return 2
}
#
# Function that stops the daemon/service
#
do_stop()
{
# Return
# 0 if daemon has been stopped
# 1 if daemon was already stopped
# 2 if daemon could not be stopped
# other if a failure occurred
$KNOTC status >/dev/null 2>/dev/null \
|| return 1
$KNOTC stop >/dev/null
RETVAL="$?"
[ $? = 1 ] && return 2
# Many daemons don't delete their pidfiles when they exit.
rm -f $PIDFILE
return 0
}
do_reload() {
$KNOTC reload >/dev/null
return $?
}
do_mkrundir() {
mkdir -p $RUNDIR
chmod 0755 $RUNDIR
chown knot:knot $RUNDIR
}
case "$1" in
start)
do_mkrundir
log_daemon_msg "Starting $DESC " "$NAME"
do_start
case "$?" in
0|1) log_end_msg 0 ;;
2) log_end_msg 1 ;;
esac
;;
stop)
log_daemon_msg "Stopping $DESC" "$NAME"
do_stop
case "$?" in
0|1) log_end_msg 0 ;;
2) log_end_msg 1 ;;
esac
;;
status)
STATUS=$($KNOTC status 2>&1 >/dev/null)
RETVAL=$?
if [ $RETVAL = 0 ]; then
log_success_msg "$NAME is running"
else
log_failure_msg "$NAME is not running ($STATUS)"
fi
exit $RETVAL
;;
reload|force-reload)
log_daemon_msg "Reloading $DESC" "$NAME"
do_reload
log_end_msg $?
;;
restart)
log_daemon_msg "Restarting $DESC" "$NAME"
do_stop
case "$?" in
0|1)
do_start
case "$?" in
0) log_end_msg 0 ;;
1) log_end_msg 1 ;; # Old process is still running
*) log_end_msg 1 ;; # Failed to start
esac
;;
*)
# Failed to stop
log_end_msg 1
;;
esac
;;
*)
echo "Usage: $SCRIPTNAME {start|stop|status|restart|reload|force-reload}" >&2
exit 3
;;
esac
:

7
debian/knot.install vendored Normal file
View file

@ -0,0 +1,7 @@
debian/cz.nic.knotd.conf usr/share/dbus-1/system.d/
etc/knot/knot.conf
usr/sbin/kcatalogprint
usr/sbin/keymgr
usr/sbin/kjournalprint
usr/sbin/knotc
usr/sbin/knotd

6
debian/knot.manpages vendored Normal file
View file

@ -0,0 +1,6 @@
usr/share/man/man5/knot.conf.5
usr/share/man/man8/kcatalogprint.8
usr/share/man/man8/keymgr.8
usr/share/man/man8/kjournalprint.8
usr/share/man/man8/knotc.8
usr/share/man/man8/knotd.8

16
debian/knot.postinst vendored Normal file
View file

@ -0,0 +1,16 @@
#!/bin/sh
set -e
if [ "$1" = "configure" ]; then
if ! getent passwd knot > /dev/null; then
adduser --quiet --system --group --no-create-home --home /var/lib/knot knot
fi
dpkg-statoverride --list /var/lib/knot >/dev/null 2>&1 || dpkg-statoverride --update --add root knot 0770 /var/lib/knot
dpkg-statoverride --list /etc/knot/knot.conf >/dev/null 2>&1 || dpkg-statoverride --update --add root knot 0640 /etc/knot/knot.conf
dpkg-statoverride --list /etc/knot >/dev/null 2>&1 || dpkg-statoverride --update --add root knot 0750 /etc/knot
fi
#DEBHELPER#
exit 0

21
debian/knot.postrm vendored Normal file
View file

@ -0,0 +1,21 @@
#!/bin/sh
set -e
if test "$1" = "purge"; then
state_dir=/var/lib/knot
for db_name in "catalog" "confdb" "journal" "keys" "timers"; do
rm -rf $state_dir/$db_name >/dev/null 2>&1 || true
done
rmdir $state_dir >/dev/null 2>&1 || true
[ -e $state_dir/* ] && echo "Notice: there are still data in ${state_dir}, please check."
dpkg-statoverride --remove /var/lib/knot >/dev/null 2>&1 || true
dpkg-statoverride --remove /etc/knot/knot.conf >/dev/null 2>&1 || true
dpkg-statoverride --remove /etc/knot >/dev/null 2>&1 || true
deluser --quiet knot >/dev/null 2>&1 || true
fi
#DEBHELPER#
exit 0

31
debian/knot.service vendored Normal file
View file

@ -0,0 +1,31 @@
[Unit]
Description=Knot DNS server
Wants=network-online.target
After=network-online.target
Documentation=man:knotd(8) man:knot.conf(5) man:knotc(8)
[Service]
EnvironmentFile=/etc/default/knot
Type=notify
User=knot
Group=knot
CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_SETPCAP
AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_SETPCAP
ExecStartPre=/usr/sbin/knotc conf-check
ExecStart=/usr/sbin/knotd -m "$KNOT_CONF_MAX_SIZE" $KNOTD_ARGS
ExecReload=/bin/kill -HUP $MAINPID
Restart=on-abort
LimitNOFILE=1048576
TimeoutStopSec=300
# Extend the systemd startup timeout by this value (seconds) for each zone
Environment="KNOT_ZONE_LOAD_TIMEOUT_SEC=180"
# Maximum size (MiB) of a configuration database
Environment="KNOT_CONF_MAX_SIZE=512"
# Expected systemd >= v239
RuntimeDirectory=knot
StateDirectory=knot
NoNewPrivileges=yes
[Install]
WantedBy=multi-user.target

1
debian/libdnssec9t64.install vendored Normal file
View file

@ -0,0 +1 @@
usr/lib/*/libdnssec.so.*

96
debian/libdnssec9t64.symbols vendored Normal file
View file

@ -0,0 +1,96 @@
libdnssec.so.9 libdnssec9t64 #MINVER#
* Build-Depends-Package: libknot-dev
dnssec_algorithm_digest_support@Base 3.2.0
dnssec_algorithm_key_size_check@Base 3.2.0
dnssec_algorithm_key_size_default@Base 3.2.0
dnssec_algorithm_key_size_range@Base 3.2.0
dnssec_algorithm_key_support@Base 3.2.0
dnssec_algorithm_reproducible@Base 3.2.0
dnssec_binary_alloc@Base 3.2.0
dnssec_binary_cmp@Base 3.2.0
dnssec_binary_dup@Base 3.2.0
dnssec_binary_free@Base 3.2.0
dnssec_binary_from_base64@Base 3.2.0
dnssec_binary_resize@Base 3.2.0
dnssec_binary_to_base64@Base 3.2.0
dnssec_crypto_cleanup@Base 3.2.0
dnssec_crypto_init@Base 3.2.0
dnssec_crypto_reinit@Base 3.2.0
dnssec_digest@Base 3.2.0
dnssec_digest_finish@Base 3.2.0
dnssec_digest_init@Base 3.2.0
dnssec_key_can_sign@Base 3.2.0
dnssec_key_can_verify@Base 3.2.0
dnssec_key_clear@Base 3.2.0
dnssec_key_create_ds@Base 3.2.0
dnssec_key_dup@Base 3.2.0
dnssec_key_free@Base 3.2.0
dnssec_key_get_algorithm@Base 3.2.0
dnssec_key_get_dname@Base 3.2.0
dnssec_key_get_flags@Base 3.2.0
dnssec_key_get_keyid@Base 3.2.0
dnssec_key_get_keytag@Base 3.2.0
dnssec_key_get_protocol@Base 3.2.0
dnssec_key_get_pubkey@Base 3.2.0
dnssec_key_get_rdata@Base 3.2.0
dnssec_key_get_size@Base 3.2.0
dnssec_key_load_pkcs8@Base 3.2.0
dnssec_key_new@Base 3.2.0
dnssec_key_set_algorithm@Base 3.2.0
dnssec_key_set_dname@Base 3.2.0
dnssec_key_set_flags@Base 3.2.0
dnssec_key_set_protocol@Base 3.2.0
dnssec_key_set_pubkey@Base 3.2.0
dnssec_key_set_rdata@Base 3.2.0
dnssec_keyid_copy@Base 3.2.0
dnssec_keyid_equal@Base 3.2.0
dnssec_keyid_is_valid@Base 3.2.0
dnssec_keyid_normalize@Base 3.2.0
dnssec_keystore_close@Base 3.2.0
dnssec_keystore_deinit@Base 3.2.0
dnssec_keystore_generate@Base 3.2.0
dnssec_keystore_get_private@Base 3.2.0
dnssec_keystore_import@Base 3.2.0
dnssec_keystore_init@Base 3.2.0
dnssec_keystore_init_pkcs11@Base 3.2.0
dnssec_keystore_init_pkcs8@Base 3.2.0
dnssec_keystore_open@Base 3.2.0
dnssec_keystore_remove@Base 3.2.0
dnssec_keystore_set_private@Base 3.2.0
dnssec_keytag@Base 3.2.0
dnssec_nsec3_hash@Base 3.2.0
dnssec_nsec3_hash_length@Base 3.2.0
dnssec_nsec3_params_free@Base 3.2.0
dnssec_nsec3_params_from_rdata@Base 3.2.0
dnssec_nsec3_params_match@Base 3.2.0
dnssec_nsec_bitmap_add@Base 3.2.0
dnssec_nsec_bitmap_clear@Base 3.2.0
dnssec_nsec_bitmap_contains@Base 3.2.0
dnssec_nsec_bitmap_free@Base 3.2.0
dnssec_nsec_bitmap_new@Base 3.2.0
dnssec_nsec_bitmap_size@Base 3.2.0
dnssec_nsec_bitmap_write@Base 3.2.0
dnssec_pem_from_privkey@Base 3.2.0
dnssec_pem_from_x509@Base 3.2.0
dnssec_pem_to_privkey@Base 3.2.0
dnssec_pem_to_x509@Base 3.2.0
dnssec_random_binary@Base 3.2.0
dnssec_random_buffer@Base 3.2.0
dnssec_sign_add@Base 3.2.0
dnssec_sign_free@Base 3.2.0
dnssec_sign_init@Base 3.2.0
dnssec_sign_new@Base 3.2.0
dnssec_sign_verify@Base 3.2.0
dnssec_sign_write@Base 3.2.0
dnssec_strerror@Base 3.2.0
dnssec_tsig_add@Base 3.2.0
dnssec_tsig_algorithm_from_dname@Base 3.2.0
dnssec_tsig_algorithm_from_name@Base 3.2.0
dnssec_tsig_algorithm_size@Base 3.2.0
dnssec_tsig_algorithm_to_dname@Base 3.2.0
dnssec_tsig_algorithm_to_name@Base 3.2.0
dnssec_tsig_free@Base 3.2.0
dnssec_tsig_new@Base 3.2.0
dnssec_tsig_optimal_key_size@Base 3.2.0
dnssec_tsig_size@Base 3.2.0
dnssec_tsig_write@Base 3.2.0

4
debian/libknot-dev.install vendored Normal file
View file

@ -0,0 +1,4 @@
usr/include/
usr/lib/*/*.a
usr/lib/*/*.so
usr/lib/*/pkgconfig/*

1
debian/libknot15.install vendored Normal file
View file

@ -0,0 +1 @@
usr/lib/*/libknot.so.*

296
debian/libknot15.symbols vendored Normal file
View file

@ -0,0 +1,296 @@
libknot.so.15 libknot15 #MINVER#
* Build-Depends-Package: libknot-dev
KNOT_DB_LMDB_DUPSORT@Base 3.3.0
KNOT_DB_LMDB_INTEGERKEY@Base 3.3.0
KNOT_DB_LMDB_MAPASYNC@Base 3.3.0
KNOT_DB_LMDB_NOSYNC@Base 3.3.0
KNOT_DB_LMDB_NOTLS@Base 3.3.0
KNOT_DB_LMDB_RDONLY@Base 3.3.0
KNOT_DB_LMDB_WRITEMAP@Base 3.3.0
KNOT_DUMP_STYLE_DEFAULT@Base 3.3.0
knot_creds_cert@Base 3.4.0
knot_creds_free@Base 3.4.0
knot_creds_init@Base 3.4.0
knot_creds_init_peer@Base 3.4.0
knot_creds_update@Base 3.4.0
knot_ctl_accept@Base 3.3.0
knot_ctl_alloc@Base 3.3.0
knot_ctl_bind@Base 3.3.0
knot_ctl_clone@Base 3.4.0
knot_ctl_close@Base 3.3.0
knot_ctl_connect@Base 3.3.0
knot_ctl_free@Base 3.3.0
knot_ctl_receive@Base 3.3.0
knot_ctl_send@Base 3.3.0
knot_ctl_set_timeout@Base 3.3.0
knot_ctl_unbind@Base 3.3.0
knot_db_lmdb_api@Base 3.3.0
knot_db_lmdb_del_exact@Base 3.3.0
knot_db_lmdb_get_mapsize@Base 3.3.0
knot_db_lmdb_get_path@Base 3.3.0
knot_db_lmdb_get_usage@Base 3.3.0
knot_db_lmdb_iter_del@Base 3.3.0
knot_db_lmdb_txn_begin@Base 3.3.0
knot_db_trie_api@Base 3.3.0
knot_dname_cmp@Base 3.3.0
knot_dname_copy@Base 3.3.0
knot_dname_copy_lower@Base 3.3.0
knot_dname_free@Base 3.3.0
knot_dname_from_str@Base 3.3.0
knot_dname_in_bailiwick@Base 3.3.0
knot_dname_is_case_equal@Base 3.3.0
knot_dname_is_equal@Base 3.3.0
knot_dname_labels@Base 3.3.0
knot_dname_lf@Base 3.3.0
knot_dname_matched_labels@Base 3.3.0
knot_dname_prefixlen@Base 3.3.0
knot_dname_realsize@Base 3.3.0
knot_dname_replace_suffix@Base 3.3.0
knot_dname_size@Base 3.3.0
knot_dname_store@Base 3.3.0
knot_dname_to_lower@Base 3.3.0
knot_dname_to_str@Base 3.3.0
knot_dname_to_wire@Base 3.3.0
knot_dname_with_null@Base 3.4.3
knot_dname_unpack@Base 3.3.0
knot_dname_wire_check@Base 3.3.0
knot_dnssec_alg_names@Base 3.3.0
knot_edns_add_option@Base 3.3.0
knot_edns_alignment_size@Base 3.3.0
knot_edns_chain_parse@Base 3.3.0
knot_edns_chain_size@Base 3.3.0
knot_edns_chain_write@Base 3.3.0
knot_edns_client_subnet_get_addr@Base 3.3.0
knot_edns_client_subnet_parse@Base 3.3.0
knot_edns_client_subnet_set_addr@Base 3.3.0
knot_edns_client_subnet_size@Base 3.3.0
knot_edns_client_subnet_write@Base 3.3.0
knot_edns_cookie_client_check@Base 3.3.0
knot_edns_cookie_client_generate@Base 3.3.0
knot_edns_cookie_parse@Base 3.3.0
knot_edns_cookie_server_check@Base 3.3.0
knot_edns_cookie_server_generate@Base 3.3.0
knot_edns_cookie_size@Base 3.3.0
knot_edns_cookie_write@Base 3.3.0
knot_edns_ede_names@Base 3.3.0
knot_edns_get_ext_rcode@Base 3.3.0
knot_edns_get_option@Base 3.3.0
knot_edns_get_options@Base 3.3.0
knot_edns_get_version@Base 3.3.0
knot_edns_init@Base 3.3.0
knot_edns_keepalive_parse@Base 3.3.0
knot_edns_keepalive_size@Base 3.3.0
knot_edns_keepalive_write@Base 3.3.0
knot_edns_opt_names@Base 3.3.0
knot_edns_reserve_option@Base 3.3.0
knot_edns_set_ext_rcode@Base 3.3.0
knot_edns_set_version@Base 3.3.0
knot_edns_zoneversion_parse@Base 3.4.4
knot_edns_zoneversion_write@Base 3.4.4
knot_error_from_libdnssec@Base 3.3.0
knot_eth_mtu@Base 3.3.0
knot_eth_name_from_addr@Base 3.3.0
knot_eth_queues@Base 3.3.0
knot_eth_rss@Base 3.3.0
knot_eth_vlans@Base 3.3.0
knot_eth_xdp_mode@Base 3.3.0
knot_get_obsolete_rdata_descriptor@Base 3.3.0
knot_get_rdata_descriptor@Base 3.3.0
knot_naptr_header_size@Base 3.3.0
knot_opcode_names@Base 3.3.0
knot_opt_code_to_string@Base 3.3.0
knot_pkt_begin@Base 3.3.0
knot_pkt_clear@Base 3.3.0
knot_pkt_copy@Base 3.3.0
knot_pkt_ext_rcode@Base 3.3.0
knot_pkt_ext_rcode_name@Base 3.3.0
knot_pkt_free@Base 3.3.0
knot_pkt_init_response@Base 3.3.0
knot_pkt_new@Base 3.3.0
knot_pkt_parse@Base 3.3.0
knot_pkt_parse_question@Base 3.3.0
knot_pkt_put_question@Base 3.3.0
knot_pkt_put_rotate@Base 3.3.0
knot_pkt_reclaim@Base 3.3.0
knot_pkt_reserve@Base 3.3.0
knot_probe_alloc@Base 3.3.0
knot_probe_consume@Base 3.3.0
knot_probe_data_set@Base 3.3.0
knot_probe_fd@Base 3.3.0
knot_probe_free@Base 3.3.0
knot_probe_produce@Base 3.3.0
knot_probe_set_consumer@Base 3.3.0
knot_probe_set_producer@Base 3.3.0
knot_probe_tcp_rtt@Base 3.3.0
knot_quic_cleanup@Base 3.3.0
knot_quic_client@Base 3.3.0
knot_quic_conn_block@Base 3.4.0
knot_quic_conn_get_stream@Base 3.3.0
knot_quic_conn_local_port@Base 3.3.0
knot_quic_conn_new_stream@Base 3.3.0
knot_quic_conn_next_timeout@Base 3.3.3
knot_quic_conn_rtt@Base 3.3.0
knot_quic_conn_stream_free@Base 3.3.0
knot_quic_handle@Base 3.3.0
knot_quic_hanle_expiry@Base 3.3.3
knot_quic_send@Base 3.3.0
knot_quic_session_available@Base 3.3.0
knot_quic_session_load@Base 3.3.0
knot_quic_session_save@Base 3.3.0
knot_quic_stream_add_data@Base 3.3.0
knot_quic_stream_get_process@Base 3.3.0
knot_quic_table_free@Base 3.3.0
knot_quic_table_new@Base 3.3.0
knot_quic_table_rem@Base 3.3.0
knot_quic_table_sweep@Base 3.3.0
knot_rcode_names@Base 3.3.0
knot_rdataset_add@Base 3.3.0
knot_rdataset_at@Base 3.3.0
knot_rdataset_clear@Base 3.3.0
knot_rdataset_copy@Base 3.3.0
knot_rdataset_eq@Base 3.3.0
knot_rdataset_intersect2@Base 3.3.0
knot_rdataset_intersect@Base 3.3.0
knot_rdataset_member@Base 3.3.0
knot_rdataset_merge@Base 3.3.0
knot_rdataset_subset@Base 3.3.0
knot_rdataset_subtract@Base 3.3.0
knot_rrclass_from_string@Base 3.3.0
knot_rrclass_to_string@Base 3.3.0
knot_rrset_add_rdata@Base 3.3.0
knot_rrset_clear@Base 3.3.0
knot_rrset_copy@Base 3.3.0
knot_rrset_equal@Base 3.3.0
knot_rrset_free@Base 3.3.0
knot_rrset_is_nsec3rel@Base 3.3.0
knot_rrset_new@Base 3.3.0
knot_rrset_rr_from_wire@Base 3.3.0
knot_rrset_rr_to_canonical@Base 3.3.0
knot_rrset_size@Base 3.3.0
knot_rrset_to_wire_extra@Base 3.3.0
knot_rrset_txt_dump@Base 3.3.0
knot_rrset_txt_dump_data@Base 3.3.0
knot_rrset_txt_dump_edns@Base 3.3.0
knot_rrset_txt_dump_header@Base 3.3.0
knot_rrtype_additional_needed@Base 3.3.0
knot_rrtype_from_string@Base 3.3.0
knot_rrtype_is_dnssec@Base 3.3.0
knot_rrtype_is_metatype@Base 3.3.0
knot_rrtype_should_be_lowercased@Base 3.3.0
knot_rrtype_to_string@Base 3.3.0
knot_strerror@Base 3.3.0
knot_svcb_param_names@Base 3.3.0
knot_tcp_cleanup@Base 3.3.0
knot_tcp_inbufs_upd@Base 3.3.0
knot_tcp_outbufs_ack@Base 3.3.0
knot_tcp_outbufs_add@Base 3.3.0
knot_tcp_outbufs_can_send@Base 3.3.0
knot_tcp_outbufs_usage@Base 3.3.0
knot_tcp_recv@Base 3.3.0
knot_tcp_reply_data@Base 3.3.0
knot_tcp_send@Base 3.3.0
knot_tcp_sweep@Base 3.3.0
knot_tcp_table_free@Base 3.3.0
knot_tcp_table_new@Base 3.3.0
knot_tls_conn_block@Base 3.4.0
knot_tls_conn_del@Base 3.4.0
knot_tls_conn_new@Base 3.4.0
knot_tls_ctx_free@Base 3.4.0
knot_tls_ctx_new@Base 3.4.0
knot_tls_handshake@Base 3.4.0
knot_tls_pin@Base 3.4.0
knot_tls_pin_check@Base 3.4.0
knot_tls_recv_dns@Base 3.4.0
knot_tls_send_dns@Base 3.4.0
knot_tls_session@Base 3.4.0
knot_tls_session_available@Base 3.4.1
knot_tls_session_load@Base 3.4.1
knot_tls_session_save@Base 3.4.1
knot_tsig_add@Base 3.3.0
knot_tsig_append@Base 3.3.0
knot_tsig_client_check@Base 3.3.0
knot_tsig_client_check_next@Base 3.3.0
knot_tsig_create_rdata@Base 3.3.0
knot_tsig_key_copy@Base 3.3.0
knot_tsig_key_deinit@Base 3.3.0
knot_tsig_key_init@Base 3.3.0
knot_tsig_key_init_file@Base 3.3.0
knot_tsig_key_init_str@Base 3.3.0
knot_tsig_rcode_names@Base 3.3.0
knot_tsig_rdata_alg@Base 3.3.0
knot_tsig_rdata_alg_name@Base 3.3.0
knot_tsig_rdata_error@Base 3.3.0
knot_tsig_rdata_fudge@Base 3.3.0
knot_tsig_rdata_is_ok@Base 3.3.0
knot_tsig_rdata_mac@Base 3.3.0
knot_tsig_rdata_mac_length@Base 3.3.0
knot_tsig_rdata_orig_id@Base 3.3.0
knot_tsig_rdata_other_data@Base 3.3.0
knot_tsig_rdata_other_data_length@Base 3.3.0
knot_tsig_rdata_set_fudge@Base 3.3.0
knot_tsig_rdata_set_mac@Base 3.3.0
knot_tsig_rdata_set_orig_id@Base 3.3.0
knot_tsig_rdata_set_other_data@Base 3.3.0
knot_tsig_rdata_set_time_signed@Base 3.3.0
knot_tsig_rdata_time_signed@Base 3.3.0
knot_tsig_rdata_tsig_timers_length@Base 3.3.0
knot_tsig_rdata_tsig_variables_length@Base 3.3.0
knot_tsig_server_check@Base 3.3.0
knot_tsig_sign@Base 3.3.0
knot_tsig_sign_next@Base 3.3.0
knot_tsig_wire_maxsize@Base 3.3.0
knot_tsig_wire_size@Base 3.3.0
knot_xdp_deinit@Base 3.3.0
knot_xdp_init@Base 3.3.0
knot_xdp_recv@Base 3.3.0
knot_xdp_recv_finish@Base 3.3.0
knot_xdp_reply_alloc@Base 3.3.0
knot_xdp_send@Base 3.3.0
knot_xdp_send_alloc@Base 3.3.0
knot_xdp_send_finish@Base 3.3.0
knot_xdp_send_free@Base 3.3.0
knot_xdp_send_prepare@Base 3.3.0
knot_xdp_socket_fd@Base 3.3.0
knot_xdp_socket_info@Base 3.3.0
knot_xdp_socket_stats@Base 3.4.0
yp_addr@Base 3.3.0
yp_addr_noport@Base 3.3.0
yp_addr_noport_to_bin@Base 3.3.0
yp_addr_noport_to_txt@Base 3.3.0
yp_addr_range_to_bin@Base 3.3.0
yp_addr_range_to_txt@Base 3.3.0
yp_addr_to_bin@Base 3.3.0
yp_addr_to_txt@Base 3.3.0
yp_base64_to_bin@Base 3.3.0
yp_base64_to_txt@Base 3.3.0
yp_bool_to_bin@Base 3.3.0
yp_bool_to_txt@Base 3.3.0
yp_deinit@Base 3.3.0
yp_dname_to_bin@Base 3.3.0
yp_dname_to_txt@Base 3.3.0
yp_format_id@Base 3.3.0
yp_format_key0@Base 3.3.0
yp_format_key1@Base 3.3.0
yp_hex_to_bin@Base 3.3.0
yp_hex_to_txt@Base 3.3.0
yp_init@Base 3.3.0
yp_int_to_bin@Base 3.3.0
yp_int_to_txt@Base 3.3.0
yp_item_to_bin@Base 3.3.0
yp_item_to_txt@Base 3.3.0
yp_option_to_bin@Base 3.3.0
yp_option_to_txt@Base 3.3.0
yp_parse@Base 3.3.0
yp_schema_check_deinit@Base 3.3.0
yp_schema_check_init@Base 3.3.0
yp_schema_check_parser@Base 3.3.0
yp_schema_check_str@Base 3.3.0
yp_schema_copy@Base 3.3.0
yp_schema_find@Base 3.3.0
yp_schema_free@Base 3.3.0
yp_schema_merge@Base 3.3.0
yp_schema_purge_dynamic@Base 3.3.0
yp_set_input_file@Base 3.3.0
yp_set_input_string@Base 3.3.0
yp_str_to_bin@Base 3.3.0
yp_str_to_txt@Base 3.3.0

1
debian/libknot15.symbols.alpha vendored Symbolic link
View file

@ -0,0 +1 @@
libknot15.symbols.hurd-i386

1
debian/libknot15.symbols.armel vendored Symbolic link
View file

@ -0,0 +1 @@
libknot15.symbols.hurd-i386

1
debian/libknot15.symbols.hppa vendored Symbolic link
View file

@ -0,0 +1 @@
libknot15.symbols.hurd-i386

1
debian/libknot15.symbols.hurd-amd64 vendored Symbolic link
View file

@ -0,0 +1 @@
libknot15.symbols.hurd-i386

249
debian/libknot15.symbols.hurd-i386 vendored Normal file
View file

@ -0,0 +1,249 @@
libknot.so.15 libknot15 #MINVER#
* Build-Depends-Package: libknot-dev
KNOT_DB_LMDB_DUPSORT@Base 3.3.0
KNOT_DB_LMDB_INTEGERKEY@Base 3.3.0
KNOT_DB_LMDB_MAPASYNC@Base 3.3.0
KNOT_DB_LMDB_NOSYNC@Base 3.3.0
KNOT_DB_LMDB_NOTLS@Base 3.3.0
KNOT_DB_LMDB_RDONLY@Base 3.3.0
KNOT_DB_LMDB_WRITEMAP@Base 3.3.0
KNOT_DUMP_STYLE_DEFAULT@Base 3.3.0
knot_creds_cert@Base 3.4.0
knot_creds_free@Base 3.4.0
knot_creds_init@Base 3.4.0
knot_creds_init_peer@Base 3.4.0
knot_creds_update@Base 3.4.0
knot_ctl_accept@Base 3.3.0
knot_ctl_alloc@Base 3.3.0
knot_ctl_bind@Base 3.3.0
knot_ctl_clone@Base 3.4.0
knot_ctl_close@Base 3.3.0
knot_ctl_connect@Base 3.3.0
knot_ctl_free@Base 3.3.0
knot_ctl_receive@Base 3.3.0
knot_ctl_send@Base 3.3.0
knot_ctl_set_timeout@Base 3.3.0
knot_ctl_unbind@Base 3.3.0
knot_db_lmdb_api@Base 3.3.0
knot_db_lmdb_del_exact@Base 3.3.0
knot_db_lmdb_get_mapsize@Base 3.3.0
knot_db_lmdb_get_path@Base 3.3.0
knot_db_lmdb_get_usage@Base 3.3.0
knot_db_lmdb_iter_del@Base 3.3.0
knot_db_lmdb_txn_begin@Base 3.3.0
knot_db_trie_api@Base 3.3.0
knot_dname_cmp@Base 3.3.0
knot_dname_copy@Base 3.3.0
knot_dname_copy_lower@Base 3.3.0
knot_dname_free@Base 3.3.0
knot_dname_from_str@Base 3.3.0
knot_dname_in_bailiwick@Base 3.3.0
knot_dname_is_case_equal@Base 3.3.0
knot_dname_is_equal@Base 3.3.0
knot_dname_labels@Base 3.3.0
knot_dname_lf@Base 3.3.0
knot_dname_matched_labels@Base 3.3.0
knot_dname_prefixlen@Base 3.3.0
knot_dname_realsize@Base 3.3.0
knot_dname_replace_suffix@Base 3.3.0
knot_dname_size@Base 3.3.0
knot_dname_store@Base 3.3.0
knot_dname_to_lower@Base 3.3.0
knot_dname_to_str@Base 3.3.0
knot_dname_to_wire@Base 3.3.0
knot_dname_with_null@Base 3.4.3
knot_dname_unpack@Base 3.3.0
knot_dname_wire_check@Base 3.3.0
knot_dnssec_alg_names@Base 3.3.0
knot_edns_add_option@Base 3.3.0
knot_edns_alignment_size@Base 3.3.0
knot_edns_chain_parse@Base 3.3.0
knot_edns_chain_size@Base 3.3.0
knot_edns_chain_write@Base 3.3.0
knot_edns_client_subnet_get_addr@Base 3.3.0
knot_edns_client_subnet_parse@Base 3.3.0
knot_edns_client_subnet_set_addr@Base 3.3.0
knot_edns_client_subnet_size@Base 3.3.0
knot_edns_client_subnet_write@Base 3.3.0
knot_edns_cookie_client_check@Base 3.3.0
knot_edns_cookie_client_generate@Base 3.3.0
knot_edns_cookie_parse@Base 3.3.0
knot_edns_cookie_server_check@Base 3.3.0
knot_edns_cookie_server_generate@Base 3.3.0
knot_edns_cookie_size@Base 3.3.0
knot_edns_cookie_write@Base 3.3.0
knot_edns_ede_names@Base 3.3.0
knot_edns_get_ext_rcode@Base 3.3.0
knot_edns_get_option@Base 3.3.0
knot_edns_get_options@Base 3.3.0
knot_edns_get_version@Base 3.3.0
knot_edns_init@Base 3.3.0
knot_edns_keepalive_parse@Base 3.3.0
knot_edns_keepalive_size@Base 3.3.0
knot_edns_keepalive_write@Base 3.3.0
knot_edns_opt_names@Base 3.3.0
knot_edns_reserve_option@Base 3.3.0
knot_edns_set_ext_rcode@Base 3.3.0
knot_edns_set_version@Base 3.3.0
knot_edns_zoneversion_parse@Base 3.4.4
knot_edns_zoneversion_write@Base 3.4.4
knot_error_from_libdnssec@Base 3.3.0
knot_get_obsolete_rdata_descriptor@Base 3.3.0
knot_get_rdata_descriptor@Base 3.3.0
knot_naptr_header_size@Base 3.3.0
knot_opcode_names@Base 3.3.0
knot_opt_code_to_string@Base 3.3.0
knot_pkt_begin@Base 3.3.0
knot_pkt_clear@Base 3.3.0
knot_pkt_copy@Base 3.3.0
knot_pkt_ext_rcode@Base 3.3.0
knot_pkt_ext_rcode_name@Base 3.3.0
knot_pkt_free@Base 3.3.0
knot_pkt_init_response@Base 3.3.0
knot_pkt_new@Base 3.3.0
knot_pkt_parse@Base 3.3.0
knot_pkt_parse_question@Base 3.3.0
knot_pkt_put_question@Base 3.3.0
knot_pkt_put_rotate@Base 3.3.0
knot_pkt_reclaim@Base 3.3.0
knot_pkt_reserve@Base 3.3.0
knot_probe_alloc@Base 3.3.0
knot_probe_consume@Base 3.3.0
knot_probe_data_set@Base 3.3.0
knot_probe_fd@Base 3.3.0
knot_probe_free@Base 3.3.0
knot_probe_produce@Base 3.3.0
knot_probe_set_consumer@Base 3.3.0
knot_probe_set_producer@Base 3.3.0
knot_probe_tcp_rtt@Base 3.3.0
knot_rcode_names@Base 3.3.0
knot_rdataset_add@Base 3.3.0
knot_rdataset_at@Base 3.3.0
knot_rdataset_clear@Base 3.3.0
knot_rdataset_copy@Base 3.3.0
knot_rdataset_eq@Base 3.3.0
knot_rdataset_intersect2@Base 3.3.0
knot_rdataset_intersect@Base 3.3.0
knot_rdataset_member@Base 3.3.0
knot_rdataset_merge@Base 3.3.0
knot_rdataset_subset@Base 3.3.0
knot_rdataset_subtract@Base 3.3.0
knot_rrclass_from_string@Base 3.3.0
knot_rrclass_to_string@Base 3.3.0
knot_rrset_add_rdata@Base 3.3.0
knot_rrset_clear@Base 3.3.0
knot_rrset_copy@Base 3.3.0
knot_rrset_equal@Base 3.3.0
knot_rrset_free@Base 3.3.0
knot_rrset_is_nsec3rel@Base 3.3.0
knot_rrset_new@Base 3.3.0
knot_rrset_rr_from_wire@Base 3.3.0
knot_rrset_rr_to_canonical@Base 3.3.0
knot_rrset_size@Base 3.3.0
knot_rrset_to_wire_extra@Base 3.3.0
knot_rrset_txt_dump@Base 3.3.0
knot_rrset_txt_dump_data@Base 3.3.0
knot_rrset_txt_dump_edns@Base 3.3.0
knot_rrset_txt_dump_header@Base 3.3.0
knot_rrtype_additional_needed@Base 3.3.0
knot_rrtype_from_string@Base 3.3.0
knot_rrtype_is_dnssec@Base 3.3.0
knot_rrtype_is_metatype@Base 3.3.0
knot_rrtype_should_be_lowercased@Base 3.3.0
knot_rrtype_to_string@Base 3.3.0
knot_strerror@Base 3.3.0
knot_svcb_param_names@Base 3.3.0
knot_tcp_inbufs_upd@Base 3.3.0
knot_tcp_outbufs_ack@Base 3.3.0
knot_tcp_outbufs_add@Base 3.3.0
knot_tcp_outbufs_can_send@Base 3.3.0
knot_tcp_outbufs_usage@Base 3.3.0
knot_tls_conn_block@Base 3.4.0
knot_tls_conn_del@Base 3.4.0
knot_tls_conn_new@Base 3.4.0
knot_tls_ctx_free@Base 3.4.0
knot_tls_ctx_new@Base 3.4.0
knot_tls_handshake@Base 3.4.0
knot_tls_pin@Base 3.4.0
knot_tls_pin_check@Base 3.4.0
knot_tls_recv_dns@Base 3.4.0
knot_tls_send_dns@Base 3.4.0
knot_tls_session@Base 3.4.0
knot_tls_session_available@Base 3.4.1
knot_tls_session_load@Base 3.4.1
knot_tls_session_save@Base 3.4.1
knot_tsig_add@Base 3.3.0
knot_tsig_append@Base 3.3.0
knot_tsig_client_check@Base 3.3.0
knot_tsig_client_check_next@Base 3.3.0
knot_tsig_create_rdata@Base 3.3.0
knot_tsig_key_copy@Base 3.3.0
knot_tsig_key_deinit@Base 3.3.0
knot_tsig_key_init@Base 3.3.0
knot_tsig_key_init_file@Base 3.3.0
knot_tsig_key_init_str@Base 3.3.0
knot_tsig_rcode_names@Base 3.3.0
knot_tsig_rdata_alg@Base 3.3.0
knot_tsig_rdata_alg_name@Base 3.3.0
knot_tsig_rdata_error@Base 3.3.0
knot_tsig_rdata_fudge@Base 3.3.0
knot_tsig_rdata_is_ok@Base 3.3.0
knot_tsig_rdata_mac@Base 3.3.0
knot_tsig_rdata_mac_length@Base 3.3.0
knot_tsig_rdata_orig_id@Base 3.3.0
knot_tsig_rdata_other_data@Base 3.3.0
knot_tsig_rdata_other_data_length@Base 3.3.0
knot_tsig_rdata_set_fudge@Base 3.3.0
knot_tsig_rdata_set_mac@Base 3.3.0
knot_tsig_rdata_set_orig_id@Base 3.3.0
knot_tsig_rdata_set_other_data@Base 3.3.0
knot_tsig_rdata_set_time_signed@Base 3.3.0
knot_tsig_rdata_time_signed@Base 3.3.0
knot_tsig_rdata_tsig_timers_length@Base 3.3.0
knot_tsig_rdata_tsig_variables_length@Base 3.3.0
knot_tsig_server_check@Base 3.3.0
knot_tsig_sign@Base 3.3.0
knot_tsig_sign_next@Base 3.3.0
knot_tsig_wire_maxsize@Base 3.3.0
knot_tsig_wire_size@Base 3.3.0
yp_addr@Base 3.3.0
yp_addr_noport@Base 3.3.0
yp_addr_noport_to_bin@Base 3.3.0
yp_addr_noport_to_txt@Base 3.3.0
yp_addr_range_to_bin@Base 3.3.0
yp_addr_range_to_txt@Base 3.3.0
yp_addr_to_bin@Base 3.3.0
yp_addr_to_txt@Base 3.3.0
yp_base64_to_bin@Base 3.3.0
yp_base64_to_txt@Base 3.3.0
yp_bool_to_bin@Base 3.3.0
yp_bool_to_txt@Base 3.3.0
yp_deinit@Base 3.3.0
yp_dname_to_bin@Base 3.3.0
yp_dname_to_txt@Base 3.3.0
yp_format_id@Base 3.3.0
yp_format_key0@Base 3.3.0
yp_format_key1@Base 3.3.0
yp_hex_to_bin@Base 3.3.0
yp_hex_to_txt@Base 3.3.0
yp_init@Base 3.3.0
yp_int_to_bin@Base 3.3.0
yp_int_to_txt@Base 3.3.0
yp_item_to_bin@Base 3.3.0
yp_item_to_txt@Base 3.3.0
yp_option_to_bin@Base 3.3.0
yp_option_to_txt@Base 3.3.0
yp_parse@Base 3.3.0
yp_schema_check_deinit@Base 3.3.0
yp_schema_check_init@Base 3.3.0
yp_schema_check_parser@Base 3.3.0
yp_schema_check_str@Base 3.3.0
yp_schema_copy@Base 3.3.0
yp_schema_find@Base 3.3.0
yp_schema_free@Base 3.3.0
yp_schema_merge@Base 3.3.0
yp_schema_purge_dynamic@Base 3.3.0
yp_set_input_file@Base 3.3.0
yp_set_input_string@Base 3.3.0
yp_str_to_bin@Base 3.3.0
yp_str_to_txt@Base 3.3.0

1
debian/libknot15.symbols.loong64 vendored Symbolic link
View file

@ -0,0 +1 @@
libknot15.symbols.hurd-i386

1
debian/libknot15.symbols.m68k vendored Symbolic link
View file

@ -0,0 +1 @@
libknot15.symbols.hurd-i386

1
debian/libknot15.symbols.powerpc vendored Symbolic link
View file

@ -0,0 +1 @@
libknot15.symbols.hurd-i386

1
debian/libknot15.symbols.sh4 vendored Symbolic link
View file

@ -0,0 +1 @@
libknot15.symbols.hurd-i386

1
debian/libknot15.symbols.sparc64 vendored Symbolic link
View file

@ -0,0 +1 @@
libknot15.symbols.hurd-i386

1
debian/libknot15.symbols.x32 vendored Symbolic link
View file

@ -0,0 +1 @@
libknot15.symbols.hurd-i386

1
debian/libzscanner4t64.install vendored Normal file
View file

@ -0,0 +1 @@
usr/lib/*/libzscanner.so.*

12
debian/libzscanner4t64.symbols vendored Normal file
View file

@ -0,0 +1,12 @@
libzscanner.so.4 libzscanner4t64 #MINVER#
* Build-Depends-Package: libknot-dev
zs_deinit@Base 3.1.1
zs_errorname@Base 3.1.1
zs_init@Base 3.1.1
zs_parse_all@Base 3.1.1
zs_parse_record@Base 3.1.1
zs_set_input_file@Base 3.1.1
zs_set_input_string@Base 3.1.1
zs_set_processing@Base 3.1.1
zs_set_processing_comment@Base 3.1.1
zs_strerror@Base 3.1.1

1
debian/not-installed vendored Normal file
View file

@ -0,0 +1 @@
etc/knot/example.com.zone

24
debian/patches/0001-tls-quic-revert-DISABLE_TLS13_COMPAT_MODE-removal.patch vendored Normal file
View file

@ -0,0 +1,24 @@
From: Daniel Salzman <daniel.salzman@nic.cz>
Date: Wed, 16 Apr 2025 09:58:36 +0200
Subject: tls/quic: revert %DISABLE_TLS13_COMPAT_MODE removal
The compatibility doesn't make sense with QUIC. With TLS it doesn't seem
to be necessary any more.
fixes #954
---
src/libknot/quic/tls_common.h | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/libknot/quic/tls_common.h b/src/libknot/quic/tls_common.h
index fa2168a..5b808bf 100644
--- a/src/libknot/quic/tls_common.h
+++ b/src/libknot/quic/tls_common.h
@@ -31,6 +31,7 @@
#define KNOT_TLS_PIN_LEN 32
#define KNOT_TLS_PRIORITIES "-VERS-ALL:+VERS-TLS1.3:" \
+ "%DISABLE_TLS13_COMPAT_MODE:" \
"-GROUP-ALL:+GROUP-X25519:+GROUP-SECP256R1:" \
"+GROUP-SECP384R1:+GROUP-SECP521R1"

1
debian/patches/series vendored Normal file
View file

@ -0,0 +1 @@
0001-tls-quic-revert-DISABLE_TLS13_COMPAT_MODE-removal.patch

38
debian/prepare-environment vendored Executable file
View file

@ -0,0 +1,38 @@
#!/bin/sh
set -eu
CONFFILE=${1:-/etc/knot/knot.conf}
if [ ! -r $CONFFILE ]; then
echo "$CONFFILE doesn't exist or has wrong permissions."
exit 1;
fi
KNOT_RUNDIR=$(sed -ne "s/#.*$//;s/.*rundir: \"*\([^\";]*\\).*/\\1/p;" $CONFFILE)
[ -z "$KNOT_RUNDIR" ] && KNOT_RUNDIR=/run/knot
mkdir --parents "$KNOT_RUNDIR";
KNOT_USER=$(sed -ne "s/#.*$//;s/.*user:[ \"]*\\([^\\:\"]*\\)[ \"]*/\\1/p;" $CONFFILE)
if [ -n "$KNOT_USER" ]; then
if ! getent passwd $KNOT_USER >/dev/null; then
echo "Configured user '$KNOT_USER' doesn't exist."
exit 1
fi
KNOT_GROUP=$(sed -ne "s/#.*$//;s/.*user:[ \"]*[^\\:\"]*\\:\\([^\"]*\\)[ \"]*/\\1/p;" $CONFFILE)
if [ -z "$KNOT_GROUP" ]; then
KNOT_GROUP=$(getent group $(getent passwd "$KNOT_USER" | cut -f 4 -d :) | cut -f 1 -d :)
fi
if ! getent group $KNOT_GROUP >/dev/null; then
echo "Configured group '$KNOT_GROUP' doesn't exist."
exit 1
fi
chown --silent "$KNOT_USER:$KNOT_GROUP" "$KNOT_RUNDIR"
chmod 775 "$KNOT_RUNDIR"
fi
:

2
debian/python3-libknot.install vendored Normal file
View file

@ -0,0 +1,2 @@
usr/lib/python3*/dist-packages/libknot-*.egg-info
usr/lib/python3*/dist-packages/libknot/*.py

109
debian/rules vendored Executable file
View file

@ -0,0 +1,109 @@
#!/usr/bin/make -f
export DEB_BUILD_MAINT_OPTIONS = hardening=+all
export DEB_CFLAGS_MAINT_APPEND = -Wall -DNDEBUG
export DPKG_GENSYMBOLS_CHECK_LEVEL := 4
export KNOT_SOFTHSM2_DSO = /usr/lib/softhsm/libsofthsm2.so
export KNOT_VERSION_FORMAT = release
export KNOT_FULL_ARCHS = amd64 arm64 armhf i386 mips64el ppc64el riscv64 s390x ppc64
include /usr/share/dpkg/default.mk
# Enable extra modules and features only for well supported architectures
ifeq ($(DEB_HOST_ARCH),$(filter $(DEB_HOST_ARCH),$(KNOT_FULL_ARCHS)))
FASTPARSER := --enable-fastparser
RECVMMSG := --enable-recvmmsg=yes
QUIC := --enable-quic=auto
RRL := --with-module-rrl=yes
GEOIP := --with-module-geoip=shared
DNSTAP := --enable-dnstap --with-module-dnstap=shared
RUN_TEST :=
else
FASTPARSER := --disable-fastparser
RECVMMSG := --enable-recvmmsg=no
QUIC := --enable-quic=no
RRL := --with-module-rrl=no
GEOIP := --with-modle-geoip=no
DNSTAP := --disable-dnstap --with-module-dnstap=no
RUN_TEST := -timeout --kill-after=5s 5m
endif
# Disable fastparser if requested
ifeq (maint,$(filter $(DEB_BUILD_OPTIONS),maint))
FASTPARSER := --disable-fastparser
endif
# MAJOR.MINOR version part
BASE_VERSION := $(shell echo $(DEB_VERSION) | sed 's/^\([^.]\+\.[^.]\+\).*/\1/')
# pyproject is supported by knot but fails on second `pybuild --build`
# invocation due to bug in dh-python's plugin_pyproject.py wheel unpack
export PYBUILD_SYSTEM = distutils
%:
dh $@ \
--exclude=.la --exclude=example.com.zone \
--with python3
override_dh_auto_configure:
@echo 'architecture:' $(DEB_HOST_ARCH)
dh_auto_configure -- \
--sysconfdir=/etc \
--localstatedir=/var/lib \
--libexecdir=/usr/lib/knot \
--with-rundir=/run/knot \
--with-moduledir=/usr/lib/$(DEB_HOST_MULTIARCH)/knot/modules-$(BASE_VERSION) \
--with-storage=/var/lib/knot \
--enable-systemd=auto \
--disable-silent-rules \
$(RRL) \
$(GEOIP) \
$(DNSTAP) \
$(RECVMMSG) \
$(FASTPARSER) \
$(QUIC)
override_dh_auto_configure-indep:
pybuild --dir python/libknot --configure
pybuild --dir python/knot_exporter --configure
override_dh_auto_build-indep:
dh_auto_build -- html
pybuild --dir python/libknot --build
pybuild --dir python/knot_exporter --build
override_dh_auto_install-arch:
dh_auto_install -- install
# rename knot.sample.conf to knot.conf
mv $(CURDIR)/debian/tmp/etc/knot/knot.sample.conf $(CURDIR)/debian/tmp/etc/knot/knot.conf
# Some workarounds where XDP is unavailable
@if [ -f "$(CURDIR)/debian/tmp/usr/sbin/kxdpgun" ]; then \
echo "XDP enabled"; \
else \
echo "XDP disabled"; \
printf '.TH kxdpgun 8 "" "" "not available"\n' > $(CURDIR)/debian/tmp/usr/share/man/man8/kxdpgun.8; \
printf '#!/bin/sh\n\necho "kxdpgun not available"\n' > $(CURDIR)/debian/tmp/usr/sbin/kxdpgun; \
fi
override_dh_auto_install-indep:
dh_auto_install -- install-html
# rename knot.sample.conf to knot.conf
mv $(CURDIR)/debian/tmp/etc/knot/knot.sample.conf $(CURDIR)/debian/tmp/etc/knot/knot.conf
pybuild --dir python/libknot --install
pybuild --dir python/knot_exporter --install
rm -rf $(CURDIR)/debian/tmp/usr/lib/python*/dist-packages/libknot/__pycache__
rm -rf $(CURDIR)/debian/tmp/usr/lib/python*/dist-packages/knot_exporter/__pycache__
override_dh_auto_test-indep:
override_dh_auto_test-arch:
ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS)))
$(RUN_TEST) dh_auto_test
$(MAKE) -C samples knot.sample.conf
endif
override_dh_missing:
dh_missing --fail-missing
override_dh_installchangelogs:
dh_installchangelogs NEWS

9
debian/salsa-ci.yml vendored Normal file
View file

@ -0,0 +1,9 @@
---
include:
- https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/salsa-ci.yml
- https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/pipeline-jobs.yml
variables:
SALSA_CI_DISABLE_BUILD_PACKAGE_ARM64: 0
SALSA_CI_DISABLE_BUILD_PACKAGE_ARMEL: 0
SALSA_CI_DISABLE_BUILD_PACKAGE_ARMHF: 0

1
debian/source/format vendored Normal file
View file

@ -0,0 +1 @@
3.0 (quilt)

150
debian/tests/authoritative-server vendored Executable file
View file

@ -0,0 +1,150 @@
#!/bin/bash
# Author: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
# 2018-11-02
# License: GPLv3+
# error on exit
set -e
# for handling jobspecs:
set -m
if [ -z "$AUTOPKGTEST_ARTIFACTS" ]; then
d="$(mktemp -d)"
remove="$d"
else
d="$AUTOPKGTEST_ARTIFACTS"
fi
ip="${TESTIP:-127.$(( $RANDOM % 256 )).$(( $RANDOM % 256 )).$(( $RANDOM % 256 ))}"
port="${PORT:-8123}"
knotc="${KNOTC:-/usr/sbin/knotc}"
knotd="${KNOTD:-/usr/sbin/knotd}"
keymgr="${KEYMGR:-/usr/sbin/keymgr}"
kdig="${KDIG:-$(command -v kdig)}"
kzonecheck="${KZONECHECK:-$(command -v kzonecheck)}"
test_address="${TEST_ADDRESS:-192.0.2.199}"
declare -a knot_conf="--config=$d/knot.conf"
declare -a knot_args=("$knot_conf" --verbose)
printf "%s + %s roundtrip tests\n------------\n workdir: %s\n IP addr: %s\n knot args: %s\n" "$knotd" "$kdig" "$d" "$ip" "${knot_args[*]}"
section() {
printf "\n%s\n" "$1"
sed 's/./-/g' <<<"$1"
}
cleanup () {
section "cleaning up"
find "$d" -ls
"${knotc}" "${knot_args[@]}" stop
wait %1
tail -n +1 -v "$d"/*.err
if [ "$remove" ]; then
printf "\ncleaning up working directory %s\n" "$remove"
rm -rf "$remove"
fi
}
trap cleanup EXIT
section "set up config file and zonefile"
user=$(id -nu)
group=$(id -ng)
cat > "$d/knot.conf" <<EOF
server:
rundir: "$d"
listen: $ip@$port
user: $user:$group
database:
storage: "$d"
template:
- id: default
storage: "$d"
file: "%s.zone"
zone:
- domain: example.net
dnssec-signing: on
EOF
cat > "$d/example.net.zone" <<EOF
@ 1D IN SOA a.ns hostmaster 2018103100 3h 15m 1w 1d
@ 1D IN NS a.ns.example.net.
@ 1D IN NS b.ns.example.net.
a.ns 1D IN A 192.0.2.1
b.ns 1D IN A 192.0.2.2
test 1D IN A $test_address
EOF
find "$d" -maxdepth 1 -type f -print0 | xargs -0 tail -n +1 -v
mkdir -p "${d}"
section "kzonecheck'ing zonefile"
"${kzonecheck}" -v "$d/example.net.zone"
section "launching knot"
"${knotd}" "${knot_args[@]}" 2> "$d/knotd.err" &
# FIXME: this is an annoying poll -- would be better if we could be
# alerted when the daemon is done setting up the socket, but i don't
# want to "--daemonize" if i can avoid it because i want the shell to
# remain in direct supervision of all its processes
tried=0
while [ $tried -lt 10 ] ; do
if "${knotc}" "${knot_args[@]}" status 2>&1; then
break;
fi
sleep 0.5
tried=$(( $tried + 1 ))
done
if [ $tried -ge 10 ]; then
printf "failed to use %s\n" "${knotc}" >&2
exit 1
fi
section "querying knot"
"${kdig}" -p "${port}" @"${ip}" -t A test.example.net test2.example.net
answer="$("${kdig}" +short -p "${port}" @"${ip}" -t A test.example.net)"
if ! [ "$answer" = "$test_address" ]; then
printf "test.example.net mismatch!\nexpected: %s\n got: %s\n" "$test_address" "$answer" >&2
exit 1
fi
answer2="$("${kdig}" +short -p "${port}" @"${ip}" -t A test2.example.net)"
if ! [ "$answer2" = "" ]; then
printf "test2.example.net gave unexpected answer!\n got: %s\n" "$answer2" >&2
exit 1
fi
section "modifying zone"
printf "test2 1D IN A $test_address\n" >>"$d/example.net.zone"
sed -i 's/^@ 1D IN SOA.*/@ 1D IN SOA a.ns hostmaster 2018110100 3h 15m 1w 1d/' "$d/example.net.zone"
"${knotc}" "${knot_args[@]}" reload
sleep 1
section "querying again"
"${kdig}" -p "${port}" @"${ip}" -t A test.example.net test2.example.net
answer="$("${kdig}" +short -p "${port}" @"${ip}" -t A test.example.net)"
if ! [ "$answer" = "$test_address" ]; then
printf "test.example.net mismatch!\nexpected: %s\n got: %s\n" "$test_address" "$answer" >&2
exit 1
fi
answer2="$("${kdig}" +short -p "${port}" @"${ip}" -t A test2.example.net)"
if ! [ "$answer2" = "$test_address" ]; then
printf "test2.example.net mismatch!\nexpected: %s\n got: %s\n" "$test_address" "$answer2" >&2
exit 1
fi
section "querying DNSSEC"
"${kdig}" -p "${port}" @"${ip}" -t DNSKEY example.net. +dnssec
if ! "${kdig}" -p "${port}" @"${ip}" -t DNSKEY example.net. +dnssec 2>&1 | grep -q "RRSIG[[:space:]]*DNSKEY"; then
printf "DNSSEC query not successful" >&2
exit 1
fi
section "listing keys with keymgr"
"${keymgr}" "$knot_conf" -e example.net. list
if ! "${keymgr}" "$knot_conf" -e example.net. list 2>&1 | grep -q "ksk=yes"; then
printf "keymgr did not list KSK as expected" >&2
exit 1
fi

13
debian/tests/control vendored Normal file
View file

@ -0,0 +1,13 @@
Tests: kdig
Restrictions: skippable
Depends:
ca-certificates,
iputils-ping,
knot-dnsutils,
Tests: authoritative-server
Depends:
findutils,
knot,
knot-dnsutils,
knot-dnssecutils,

14
debian/tests/kdig vendored Executable file
View file

@ -0,0 +1,14 @@
#!/bin/bash
set -e
# Skip the test if no internet access
ping -c1 1.1.1.1 2>&1 || exit 77
expected=198.41.0.4
answer=$(kdig +short +tls-ca @1.1.1.1 -q a.root-servers.net. -t A 2>&1 || true)
if [ "$answer" != "$expected" ]; then
printf "expected: %s\ngot: %s\n" "$expected" "$answer" >&2
kdig -d +tls-ca @1.1.1.1 -q a.root-servers.net. -t A
fi

51
debian/upstream/signing-key.asc vendored Normal file
View file

@ -0,0 +1,51 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----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=4CxJ
-----END PGP PUBLIC KEY BLOCK-----

4
debian/watch vendored Normal file
View file

@ -0,0 +1,4 @@
version=4
opts=uversionmangle=s/-((alpha|beta|rc)\d*)$/~$1/,pgpsigurlmangle=s/$/.asc/,dversionmangle=s/\+hotfix// \
https://secure.nic.cz/files/knot-dns/ \
(?:|.*/)knot(?:[_\-]v?|)(\d\S*)\.(?:tar\.xz|txz|tar\.bz2|tbz2|tar\.gz|tgz)