summaryrefslogtreecommitdiffstats
path: root/debian/rules
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-05-05 18:37:15 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-05-05 18:37:15 +0000
commit55ad72d44a94298a96b8f05488ca5ed97ef04736 (patch)
tree8aaa712c1d8b8d191b77a7eef4dc42c770e3b3d0 /debian/rules
parentAdding upstream version 1:9.11.5.P4+dfsg. (diff)
downloadbind9-55ad72d44a94298a96b8f05488ca5ed97ef04736.tar.xz
bind9-55ad72d44a94298a96b8f05488ca5ed97ef04736.zip
Adding debian version 1:9.11.5.P4+dfsg-5.1+deb10u7.debian/1%9.11.5.P4+dfsg-5.1+deb10u7debian
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'debian/rules')
-rwxr-xr-xdebian/rules186
1 files changed, 186 insertions, 0 deletions
diff --git a/debian/rules b/debian/rules
new file mode 100755
index 0000000..deeb37f
--- /dev/null
+++ b/debian/rules
@@ -0,0 +1,186 @@
+#!/usr/bin/make -f
+# Sample debian/rules that uses debhelper.
+# GNU copyright 1997 to 1999 by Joey Hess.
+
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+DPKG_EXPORT_BUILDFLAGS = 1
+
+export DEB_CFLAGS_MAINT_APPEND = -fno-strict-aliasing -fno-delete-null-pointer-checks -DNO_VERSION_DATE -DDIG_SIGCHASE
+
+export DPKG_GENSYMBOLS_CHECK_LEVEL := 4
+
+include /usr/share/dpkg/default.mk
+
+DEB_REVISION = $(call dpkg_late_eval,DEB_REVISION,echo '$(DEB_VERSION)' | sed -e 's/^.*-/-/')
+
+# Uncomment this to turn on verbose mode.
+#export DH_VERBOSE=1
+
+COMMA = ,
+ifneq (,$(filter parallel=%,$(subst $(COMMA), ,$(DEB_BUILD_OPTIONS))))
+ NJOBS := -j $(subst parallel=,,$(filter parallel=%,$(subst $(COMMA), ,$(DEB_BUILD_OPTIONS))))
+endif
+
+export arch = $(DEB_HOST_ARCH)
+
+ifeq ($(DEB_HOST_ARCH_OS),kfreebsd)
+EXTRA_FEATURES=--disable-linux-caps
+endif
+
+SED_NATIVE_PKCS11 := \
+ sed -e 's,libisc\.,libisc-pkcs11.,g' \
+ -e 's,libisc-nosymtbl\.,libisc-pkcs11-nosymtbl.,g' \
+ -e 's,libdns\.,libdns-pkcs11.,g' \
+ -e 's,@CRYPTO@,@CRYPTO_PK11@,g' \
+ -e 's,ISC_INCLUDES,ISC_PKCS11_INCLUDES,g' \
+ -e 's,DNS_INCLUDES,DNS_PKCS11_INCLUDES,g' \
+ -e 's,\(dnssec-[^ ]*\)@EXEEXT@,\1-pkcs11@EXEEXT@,g' \
+ -e 's,/lib/isc/,/lib/isc-pkcs11/,g' \
+ -e 's,/lib/dns/,/lib/dns-pkcs11/,g' \
+ -e 's,named@EXEEXT@,named-pkcs11@EXEEXT@,g' \
+ -e 's,@CONTRIB_DLZ@,,g' \
+ -e 's,$${DLZDRIVER_INCLUDES} $${DBDRIVER_INCLUDES},,g' \
+ -e 's,$${DLZDRIVER_LIBS} $${DBDRIVER_LIBS},,g' \
+ -e 's,$${DLZDRIVER_OBJS} $${DBDRIVER_OBJS},,g' \
+ -e 's,$${DLZDRIVER_SRCS} $${DBDRIVER_SRCS},,g' \
+ -e 's,@DNS_CRYPTO_LIBS@,@DNS_CRYPTO_PK11_LIBS@,g'
+
+%:
+ dh $@ --with python3 --fail-missing --exclude=.la --exclude=lwresd --exclude=__pycache__
+
+prepare_native_pkcs11:
+ rm -rf bin/named-pkcs11 && cp -r bin/named bin/named-pkcs11
+ rm -rf bin/dnssec-pkcs11 && cp -r bin/dnssec bin/dnssec-pkcs11
+ rm -rf lib/isc-pkcs11 && cp -r lib/isc lib/isc-pkcs11
+ rm -rf lib/dns-pkcs11 && cp -r lib/dns lib/dns-pkcs11
+ $(SED_NATIVE_PKCS11) < bin/named/Makefile.in > bin/named-pkcs11/Makefile.in
+ $(SED_NATIVE_PKCS11) < bin/dnssec/Makefile.in > bin/dnssec-pkcs11/Makefile.in
+ $(SED_NATIVE_PKCS11) < lib/isc/Makefile.in > lib/isc-pkcs11/Makefile.in
+ $(SED_NATIVE_PKCS11) < lib/dns/Makefile.in > lib/dns-pkcs11/Makefile.in
+
+clean_native_pkcs11:
+ rm -rf bin/named-pkcs11
+ rm -rf bin/dnssec-pkcs11
+ rm -rf lib/isc-pkcs11
+ rm -rf lib/dns-pkcs11
+
+prepare_version:
+ if [ ! -f version.bak ]; then cp version version.bak; fi
+ sed -i 's,^EXTENSIONS=.*$$,EXTENSIONS=$(DEB_REVISION)-$(DEB_VENDOR),' version
+
+clean_version:
+ if [ -f version.bak ]; then cp version.bak version; fi
+
+override_dh_autoreconf: prepare_native_pkcs11 prepare_version
+ dh_autoreconf
+
+override_dh_auto_configure:
+ debian/checkapi
+ dh_auto_configure -B build -- \
+ --libdir=/usr/lib/$(DEB_HOST_MULTIARCH) \
+ --sysconfdir=/etc/bind \
+ --with-python=python3 \
+ --localstatedir=/ \
+ --enable-threads \
+ --enable-largefile \
+ --with-libtool \
+ --enable-shared \
+ --enable-static \
+ --with-gost=no \
+ --with-openssl=/usr \
+ --with-gssapi=/usr \
+ --disable-isc-spnego \
+ --with-libidn2 \
+ --with-libjson=/usr \
+ --with-lmdb=/usr \
+ --with-gnu-ld \
+ --with-geoip=/usr \
+ --with-atf=no \
+ --enable-ipv6 \
+ --enable-rrl \
+ --enable-filter-aaaa \
+ --enable-native-pkcs11 \
+ --with-pkcs11=\$${prefix}/lib/softhsm/libsofthsm2.so \
+ --with-randomdev=/dev/urandom \
+ --enable-dnstap \
+ $(EXTRA_FEATURES)
+ dh_auto_configure -B build-udeb -- \
+ --sysconfdir=/etc/bind \
+ --with-python=python3 \
+ --localstatedir=/ \
+ --disable-epoll \
+ --disable-kqueue \
+ --disable-devpoll \
+ --disable-threads \
+ --disable-linux-caps \
+ --with-openssl=/usr \
+ --without-libxml2 \
+ --without-libjson \
+ --without-lmdb \
+ --enable-ipv6 \
+ --enable-shared \
+ --with-libtool \
+ --with-gssapi=no \
+ --disable-isc-spnego \
+ --libdir=/lib/$(DEB_HOST_MULTIARCH) \
+ --includedir=/usr/include/bind-export
+ sh debian/apply-export-patch
+ # no need to build these targets here
+ sed -i 's/dnssec-pkcs11//;s/named-pkcs11//' build-udeb/bin/Makefile
+ sed -i 's/dns-pkcs11//;s/isc-pkcs11//' build-udeb/lib/Makefile
+ cp lib/dns/dnstap.proto build/lib/dns
+ cp lib/dns-pkcs11/dnstap.proto build/lib/dns-pkcs11
+
+override_dh_auto_build:
+ dh_auto_build -B build
+ dh_auto_build -B build-udeb
+
+override_dh_auto_clean: clean_native_pkcs11 clean_version
+ dh_auto_clean -B build
+ dh_auto_clean -B build-udeb
+
+override_dh_auto_install:
+ dh_auto_install -B build --destdir=$(CURDIR)/debian/tmp
+ dh_auto_install -B build-udeb --destdir=$(CURDIR)/debian/tmp-udeb
+
+override_dh_install:
+ dh_install --exclude=.la --exclude=lwresd --exclude=__pycache__ --fail-missing
+
+ # Fix symlink for export libs to be absolute
+ for lib in `find debian/tmp-udeb/lib/$(DEB_HOST_MULTIARCH)/ -type l -name 'lib*-export.so.*'`; do \
+ lib=$$(basename $$lib); \
+ dev=$$(echo $$lib | sed 's/\.so\..*/.so/'); \
+ echo /lib/$(DEB_HOST_MULTIARCH)/$$lib /usr/lib/$(DEB_HOST_MULTIARCH)/$$dev; \
+ dh_link -plibbind-export-dev /lib/$(DEB_HOST_MULTIARCH)/$$lib \
+ /usr/lib/$(DEB_HOST_MULTIARCH)/$$dev; \
+ done
+
+ dh_apparmor -pbind9 --profile-name=usr.sbin.named
+
+override_dh_systemd_enable:
+ dh_systemd_enable -pbind9 --no-enable --name=bind9-resolvconf bind9-resolvconf.service
+ dh_systemd_enable -pbind9 --no-enable --name=bind9-pkcs11 bind9-pkcs11.service
+ dh_systemd_enable -pbind9 bind9.service
+
+override_dh_makeshlibs: DNS_SOVER=$(shell debian/getapi dns)
+override_dh_makeshlibs: IRS_SOVER=$(shell debian/getapi irs)
+override_dh_makeshlibs: ISCCC_SOVER=$(shell debian/getapi isccc)
+override_dh_makeshlibs: ISCCFG_SOVER=$(shell debian/getapi isccfg)
+override_dh_makeshlibs: ISC_SOVER=$(shell debian/getapi isc)
+override_dh_makeshlibs:
+ dh_makeshlibs -plibdns-export$(DNS_SOVER) --add-udeb=libdns-export$(DNS_SOVER)-udeb
+ dh_makeshlibs -plibirs-export$(IRS_SOVER) --add-udeb=libirs-export$(IRS_SOVER)-udeb
+ dh_makeshlibs -plibisccc-export$(ISCCC_SOVER) --add-udeb=libisccc-export$(ISCCC_SOVER)-udeb
+ dh_makeshlibs -plibisccfg-export$(ISCCFG_SOVER) --add-udeb=libisccfg-export$(ISCCFG_SOVER)-udeb
+ dh_makeshlibs -plibisc-export$(ISC_SOVER) --add-udeb=libisc-export$(ISC_SOVER)-udeb
+ dh_makeshlibs --remaining-packages
+
+override_dh_shlibdeps:
+ dh_shlibdeps
+ # Downgrade libcrypto1.1-udeb dependency from 1.1.1 to 1.1.0
+ # The udebs don't use any newer symbols, but due to them using
+ # shlibs the dependency is generated anyway. This blocks migration
+ # to testing until OpenSSL 1.1.1 is sorted out
+ sed -i 's:libcrypto1.1-udeb (>= 1.1.1):libcrypto1.1-udeb (>= 1.1.0):' debian/*-udeb.substvars
+
+.PHONY: prepare_native_pkcs11 clean_native_pkcs11