diff options
| author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-10 19:05:44 +0000 |
|---|---|---|
| committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-10 19:05:44 +0000 |
| commit | f907be17e9e25a809c602f2a54c3f8c2d6ad2b51 (patch) | |
| tree | 96d98db4b46c66ae5d3b27e21bc8cf47af8b0751 | |
| parent | Adding upstream version 3.3.4. (diff) | |
| download | knot-f907be17e9e25a809c602f2a54c3f8c2d6ad2b51.tar.xz knot-f907be17e9e25a809c602f2a54c3f8c2d6ad2b51.zip | |
Adding debian version 3.3.4-1.debian/3.3.4-1
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
59 files changed, 3593 insertions, 0 deletions
diff --git a/debian/TODO b/debian/TODO new file mode 100644 index 0000000..41ec2da --- /dev/null +++ b/debian/TODO @@ -0,0 +1,3 @@ + * add more autopkgtest tests + - set up and run an authoritative resolver + - validate the signatures diff --git a/debian/changelog b/debian/changelog new file mode 100644 index 0000000..986ae9d --- /dev/null +++ b/debian/changelog @@ -0,0 +1,1740 @@ +knot (3.3.4-1) unstable; urgency=medium + + * New upstream version 3.3.4 + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Wed, 24 Jan 2024 14:12:36 +0100 + +knot (3.3.3-2) unstable; urgency=medium + + [ Daniel Salzman ] + * debian: synchronize settings for hurd-amd64 with hurd-i386 + * debian/control: disable XDP on loong64 (Closes: #1060123) + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Mon, 08 Jan 2024 13:34:35 +0100 + +knot (3.3.3-1) unstable; urgency=medium + + * New upstream version 3.3.3 + * Add new symbols for 3.3.3 + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Wed, 13 Dec 2023 13:55:57 +0100 + +knot (3.3.2-1) unstable; urgency=medium + + * New upstream version 3.3.2 + * Remove ${shlibs:Depends} from libknot-dev Depends + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Fri, 20 Oct 2023 14:21:35 +0200 + +knot (3.3.1-1) unstable; urgency=medium + + * New upstream version 3.3.1 (Closes: #1051067) + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Mon, 11 Sep 2023 14:14:22 +0200 + +knot (3.3.0-2) unstable; urgency=medium + + [ Daniel Salzman ] + * Update d/libknot14.symbols.hurd-i386: add missing knot_quic_* symbols + * Update d/libknot14.symbols.loong64: add symlink to + libknot14.symbols.hurd-i386 + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Wed, 30 Aug 2023 16:39:24 +0200 + +knot (3.3.0-1) unstable; urgency=medium + + * d/gbp.conf: Use upstream/3.3 branch + * SONAME bump: libknot 13 -> 14 + * knot-doc: Add new BR python3-sphinx-panels + * knot-doc: Drop broken info docs + * knot-exporter: New python subpackage + * Update d/copyright for 3.3.0 + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 29 Aug 2023 13:42:48 +0200 + +knot (3.2.9-1) unstable; urgency=medium + + * New upstream version 3.2.9 + + [ Daniel Salzman ] + * Update d/control: remove exceptions for kfreebsd-amd64 and kfreebsd-i386 + * Update d/libknot13: remove symbols files for kfreebsd-amd64 and kfreebsd-i386 + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Fri, 28 Jul 2023 09:58:53 +0200 + +knot (3.2.6-1) unstable; urgency=medium + + * New upstream version 3.2.6 + * Remove patch included upstream + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 04 Apr 2023 13:54:46 +0200 + +knot (3.2.5-2) unstable; urgency=medium + + [ Daniel Salzman ] + * Update d/changelog: wrap long lines and fix typos + * Update d/*NEWS: remove outdated files + * Update d/knot.install: install D-Bus config to /usr/share/dbus-1/system.d/ + * Update d/control: remove inconsistent 'Multi-Arch: same' hinters + * Update d/copyright: update some years + + [ Jakub Ružička ] + * Add upstream patch fixing errors on modules load + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 28 Feb 2023 18:05:42 +0100 + +knot (3.2.5-1) unstable; urgency=medium + + * New upstream version 3.2.5 + + [ Daniel Salzman ] + * Update d/control: remove dependencies linux-libc-dev and libelf-dev + * Update d/control: update and unify xdp-dependent architecture exceptions + * Update d/libknot.symbols: update symbols files for non-xdp architectures + * Update d/control,rules: switch to external libngtcp2 + * Update d/control: switch from obsolete lsb-base to sysvinit-utils + * Update d/knot.init: fix RUNDIR creation without knot.tmpfiles + * Update d/knot.init: remove explicit knotd configuration specification + to be consistent with knotc + * Update d/knot.postinst: change ownership and permissions for /var/lib/knot, + /etc/knot, and /etc/knot/knot.conf + * Update d/knot.postrm: add missing directories to purge list in postrm script + * Update d/*.symbols: add Build-Depends-Package to libknot and libdnssec + + [ Jakub Ružička ] + * Update Standards-Version to 4.6.2 (no changes) + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Thu, 02 Feb 2023 13:37:42 +0100 + +knot (3.2.4-1) unstable; urgency=medium + + * New upstream version 3.2.4 + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Mon, 12 Dec 2022 11:52:06 +0100 + +knot (3.2.3-1) unstable; urgency=medium + + * New upstream version 3.2.3 + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Mon, 21 Nov 2022 14:31:59 +0100 + +knot (3.2.2-1) unstable; urgency=medium + + * New upstream version 3.2.2 + * Update libknot13.symbols + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 01 Nov 2022 12:40:19 +0000 + +knot (3.2.1-1) unstable; urgency=medium + + * New upstream version 3.2.1 + - Compatible with libbpf 1.0 (Closes: #1018911) + * Add Build-Depends: libxdp-dev where available + * Remove patch included upstream + * Update libknot13.symbols + * Update knot.service from upstream (Closes: #1019583) + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Mon, 12 Sep 2022 16:06:27 +0000 + +knot (3.2.0-3) unstable; urgency=medium + + * Add Breaks+Replaces for knot-dnssecutils (Closes: #1018944) + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Fri, 02 Sep 2022 13:31:57 +0000 + +knot (3.2.0-2) unstable; urgency=medium + + * Update libknot13 symbols for arches without XDP + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Thu, 01 Sep 2022 15:11:32 +0000 + +knot (3.2.0-1) unstable; urgency=medium + + [ Debian Janitor ] + * Avoid explicitly specifying -Wl,--as-needed linker flag. + * Remove constraints unnecessary since buster + + [ Jakub Ružička ] + * gbp: use upstream/3.2 branch + * Bump SONAMEs: libknot13, libdnssec9 + * New knot-dnssecutils subpackage + * Enable QUIC + * Update debian/copyright + * Sync descriptions with upstream package + * Bump Standards-Version to 4.6.1 + * Add d/patches/0001-tests-xdp-tcp-fix-under-32bit-platform.patch + * Update debian/tests + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Wed, 24 Aug 2022 11:22:33 +0000 + +knot (3.1.8-1) unstable; urgency=medium + + * new upstream version 3.1.8 + + [ Daniel Salzman ] + * d/tests/kdig: make the test more stable by using 1.1.1.1 resolver + * d/tests/kdig: skip the test if no internet access detected + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Thu, 28 Apr 2022 11:40:38 +0000 + +knot (3.1.7-1) unstable; urgency=medium + + * new upstream version 3.1.7 + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Wed, 30 Mar 2022 15:09:49 +0000 + +knot (3.1.6-1) unstable; urgency=medium + + * new upstream version 3.1.6 + * d/knot.install: add dbus config file + * d/copyright: update copyright for 2022 + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Thu, 10 Feb 2022 16:20:00 +0000 + +knot (3.1.5-1) unstable; urgency=medium + + * new upstream version 3.1.5 + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 04 Jan 2022 14:59:07 +0000 + +knot (3.1.4-1) unstable; urgency=medium + + * new upstream version 3.1.4 + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Thu, 04 Nov 2021 11:27:41 +0000 + +knot (3.1.3-2) unstable; urgency=medium + + * d/tests: add sleep to ensure the server is reloaded + + -- Daniel Salzman <daniel.salzman@nic.cz> Thu, 21 Oct 2021 13:31:44 +0000 + +knot (3.1.3-1) unstable; urgency=medium + + * new upstream version 3.1.3 + + [ Daniel Salzman ] + * tests: remove obsolete test for kasp_json2lmdb + * knot.postinst: fix lintian warning 'maintainer-script-supports-ancient-package-version' + * kasp_json2lmdb: remove unused and obsolete script + * get_kaspdb: remove unused and obsolete script + * get_user: remove unused and obsolete script + * control: remove no-longer-needed python dependencies + * TODO: update + * doc: fix lintian warnings 'embedded-javascript-library' + + [ Libor Peltan ] + * tests: add simple test of DNSSEC and keymgr + + [ Jakub Ružička ] + * d/copyright: add url-parser copyright + * d/control: add Multi-Arch: same to libknot-dev + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 19 Oct 2021 12:02:30 +0000 + +knot (3.1.2-1) unstable; urgency=medium + + * new upstream version 3.1.2 + * d/copyright: sync with upstream + * d/knot.maintscript: remove obsolete maintscript + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Wed, 08 Sep 2021 15:41:04 +0000 + +knot (3.1.1-6) unstable; urgency=medium + + * Source-only upload (try #2) + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Wed, 01 Sep 2021 22:44:55 +0000 + +knot (3.1.1-5) unstable; urgency=medium + + * Source-only upload to allow migration + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Wed, 01 Sep 2021 11:22:33 +0000 + +knot (3.1.1-4) unstable; urgency=medium + + * Upload to unstable + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 31 Aug 2021 13:13:13 +0000 + +knot (3.1.1-3) experimental; urgency=medium + + * Bump min symbol versions to 3.1.1 + * d/control: bump Standards-Version to 4.6.0 + * d/control: don't require libmnl-dev on archs without XDP + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Wed, 25 Aug 2021 10:42:42 +0000 + +knot (3.1.1-2) experimental; urgency=medium + + * Remove XDP-specific symbols from unsupported archs + * d/control: improve Multi-Arch hints + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 24 Aug 2021 11:11:11 +0000 + +knot (3.1.1-1) experimental; urgency=medium + + * new upstream version 3.1.1 + * d/tests: replace `which` with `command -v` + * d/knot.service: sync upstream improvements + * d/control: update Build-Depends + * Bump SONAMEs: libknot12, libzscanner4 + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 17 Aug 2021 16:20:00 +0000 + +knot (3.0.5-1) unstable; urgency=medium + + * new upstream version 3.0.5 + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Thu, 25 Mar 2021 13:37:00 +0100 + +knot (3.0.4-2) unstable; urgency=medium + + * Team upload. + * Source-only upload to allow migration. + + -- Santiago Ruano Rincón <santiago@debian.org> Thu, 04 Feb 2021 10:40:06 +0100 + +knot (3.0.4-1) unstable; urgency=medium + + * new upstream version 3.0.4 + - Fix segfault when generating new DNSSEC keys on duplicated zones + (Closes: #977101) + * move dnstap module to subpackage + * move geoip module to subpackage + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Thu, 21 Jan 2021 15:51:41 +0000 + +knot (3.0.3-1) unstable; urgency=medium + + [ Jakub Ružička ] + * new upstream version 3.0.3 + * d/patches: remove makefile patch included upstream + + [ Daniel Salzman ] + * Improve XDP mode activation + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 15 Dec 2020 07:08:10 -0500 + +knot (3.0.2-3) unstable; urgency=medium + + * Team upload. + * Disable xdp on armel. Create d/libknot11.symbols.armel accordingly. + * Disable fastparser on sh4. + * Add d/patches/0001-xdp-rework-Makefile.am-to-avoid-make-distcheck-issue.patch + (Closes: #973815) + * Remove build-deps not available on hurd and kfreebsds: libbpf-dev, + libelf-dev linux-libc-dev. Create symbols files accordingly. + + -- Santiago Ruano Rincón <santiago@debian.org> Thu, 10 Dec 2020 21:59:10 +0100 + +knot (3.0.2-2) unstable; urgency=low + + * Team upload. + * Add debian/salsa-ci.yml. + * d/tests/kdig: Add a fallback option to query on port 443 when 853 is + unreachable. + * Bump Standards-Version to 4.5.1. No changes needed + * Bump d/watch version to 4. No changes needed, but makes lintian happier + * Bump debhelper-compat to 13 + + -- Santiago Ruano Rincón <santiago@debian.org> Mon, 07 Dec 2020 16:00:37 +0100 + +knot (3.0.2-1) experimental; urgency=medium + + * New upstream version 3.0.2 + * debian/libknot11.symbols: add 2 new symbols + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Thu, 12 Nov 2020 09:46:41 -0500 + +knot (3.0.1-1) experimental; urgency=medium + + * New upstream version 3.0.1 + * Bump SONAMEs: libknot11, libdnssec8 + * debian/*.symbols: update symbols + * debian/*.install: add new files + * debian/docs: README is now README.md + * debian/knot.service: update from upstream + * debian/copyright: remove obsolete lmdb entry + * debian/control: update knot-dnsutils description + * debian/control: add build deps for XDP support + * debian/control: add build dep for DoH support + * debian/control: add myself to Uploaders + * debian/gbp.conf: use new upstream/3.0 branch + * debian/gbp.conf: use debian/experimental branch + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Thu, 22 Oct 2020 08:56:49 -0400 + +knot (2.9.6-1) unstable; urgency=medium + + * New upstream version 2.9.6 + + -- Jakub Ružička <jakub.ruzicka@nic.cz> Tue, 01 Sep 2020 16:30:41 +0200 + +knot (2.9.5-1) unstable; urgency=medium + + * New upstream version 2.9.5 (Closes: #961075) + + -- Robert Edmonds <edmonds@debian.org> Mon, 25 May 2020 23:16:17 -0400 + +knot (2.9.3-1) unstable; urgency=medium + + * new upstream version + + -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Thu, 05 Mar 2020 18:22:48 -0500 + +knot (2.9.2-5) unstable; urgency=medium + + * move Vcs-Git back to debian/master, since we are not in experimental + any more + * wrap-and-sort -ast + * move kzonecheck into knot-dnsutils (Closes: #925035) + * drop unnecessary empty plugin directory (fixed upstream) + * debhelper: bump to dh 12 + * include ${misc:Pre-Depends} for knot, to resolve + skip-systemd-native-flag-missing-pre-depends + * clean up .pybuild/ as well + * drop dbgsym migration + + -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Fri, 28 Feb 2020 17:53:33 -0500 + +knot (2.9.2-4) unstable; urgency=medium + + [ Robert Edmonds ] + * debian/control: Add ">= 5.1" version for python3-yaml build dependency (Closes: #949931) + + [ Ondřej Surý ] + * Upload to unstable + + -- Ondřej Surý <ondrej@debian.org> Fri, 21 Feb 2020 11:51:46 +0100 + +knot (2.9.2-3) experimental; urgency=medium + + * debian/rules: Run pybuild's configure step in + override_dh_auto_configure-indep + + -- Robert Edmonds <edmonds@debian.org> Sun, 26 Jan 2020 16:31:16 -0500 + +knot (2.9.2-2) experimental; urgency=medium + + * Build a python3-libknot package containing the libknot Python bindings + (Closes: #913701) + + -- Robert Edmonds <edmonds@debian.org> Sat, 25 Jan 2020 15:51:36 -0500 + +knot (2.9.2-1) experimental; urgency=medium + + * New upstream version 2.9.2 + + [ Daniel Kahn Gillmor ] + * d/control, d/gbp.conf: pointing to DEP-14 debian/experimental branch + (revert before releasing to unstable!) + + [ Robert Edmonds ] + * debian/gbp.conf: Set "upstream-branch = upstream/2.9" + * debian/patches/0002-zonefile-Verify-mtime-against-full-precision- + timesta.patch: Remove, applied upstream + * Bump SONAMEs: libknot10, libdnssec7, libzscanner3 + * debian/control: Drop Replaces/Breaks on knot-libs (<< 2.0.1-4) + * debian/control: Drop obsolete Replaces/Breaks on old library packages + * debian/rules: Set environment variable KNOT_VERSION_FORMAT=release + * debian/patches/0001-avoid-git-version-inclusion-in-debian- + packages.patch: Remove + * debian/*.symbols: Update symbol files for added/removed symbols in new + library SONAMEs + * debian/*.symbols: Bump minimum versions to 2.9.2 for all symbols + * debian/copyright: Fix path to src/contrib/vpool/* files + * debian/knot-doc.doc-base: Remove PDF registration + + -- Robert Edmonds <edmonds@debian.org> Fri, 24 Jan 2020 22:36:09 -0500 + +knot (2.7.8-1) unstable; urgency=medium + + * New upstream version 2.7.8 + + [ Daniel Salzman ] + * Remove resolved lintian-overrides + * Don't require libcap-ng-dev on kfreebsd-i386, kfreebsd-amd64, and + hurd-i386 + * Update copyright (Closes: #925905) + * Fix typo in copyright + * Don't include pdf to doc package + * Fix unsafe usage of yaml.load() (Closes: #933917) + + [ Diederik de Haas ] + * Remove knslookup from description as it is not provided. + + [ Santiago Ruano Rincón ] + * Revert changes about excluding pdf files in distro/deb/rules, moving + them to debian/rules (Closes: #933285) + + [ Robert Edmonds ] + * debian/gbp.conf: Set "upstream-branch = upstream/2.7" + * debian/gbp.conf: [import-orig] Also filter config.guess, config.sub + * debian/patches/0003-correct-kdig-documentation-about-no-crypto.patch: + Remove, applied upstream + * debian/control: Add myself to Uploaders + * debian/control: Bump Standards-Version to 4.5.0 (no changes) + * debian/copyright: Fix path to src/libdnssec/contrib/vpool/ files + + -- Robert Edmonds <edmonds@debian.org> Fri, 24 Jan 2020 19:48:01 -0500 + +knot (2.7.6-2) unstable; urgency=medium + + * add libsofthsm2 when testing for libdnssec/test_keystore_pkcs11 + * Check fine-grained timestamps on zonefiles. + * Correct documentation about key formats + * Standards-Version: bump to 4.3.0 (no changes needed) + + -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Fri, 22 Feb 2019 16:51:08 -0500 + +knot (2.7.6-1) unstable; urgency=medium + + * new upstream release + + -- Ondřej Surý <ondrej@debian.org> Fri, 08 Feb 2019 12:53:57 +0000 + +knot (2.7.4-1) unstable; urgency=medium + + * new upstream release + * drop patch applied upstream + * d/upstream/signing-key.asc: minimize OpenPGP certificate + + -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Wed, 14 Nov 2018 01:16:27 -0500 + +knot (2.7.3-3) unstable; urgency=medium + + * update build-deps and autopkgtest deps + + -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Thu, 08 Nov 2018 08:39:43 +0700 + +knot (2.7.3-2) unstable; urgency=medium + + * postinst: use runuser instead of su for safety and simplicity + * fix get_kaspdb and test it against shipped config (Closes: #912210) + * added Build-Depends-Package: libknot-dev to symbols files + * cleaner diffs: put dh args on separate lines + * added authoritative nameserver autopkgtest + * Avoid including git version in debian packages + * fix broken python + * fix up get_user + * autopkgtest: test upgrade/conversion tooling + + -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Wed, 07 Nov 2018 22:55:37 +0700 + +knot (2.7.3-1) unstable; urgency=medium + + * new upstream release + + -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Mon, 15 Oct 2018 17:21:51 -0400 + +knot (2.7.2-2) unstable; urgency=medium + + * d/rules: try moving DEB_HOST_ARCH check for -latomic + * mips and powerpc both appear to build fine without -latomic + + -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Wed, 29 Aug 2018 16:07:02 -0400 + +knot (2.7.2-1) unstable; urgency=medium + + * new upstream release + * try to fix up architecture selection + + -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Wed, 29 Aug 2018 10:34:56 -0400 + +knot (2.7.1-3) unstable; urgency=medium + + [ Daniel Salzman ] + * remove obsolete dependency libjansson-dev + * remove obsolete --with-bash-completions + + -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Mon, 27 Aug 2018 19:18:20 -0400 + +knot (2.7.1-2) unstable; urgency=medium + + * Standards-Version: bump to 4.2.1 (no changes needed) + * add -latomic to riscv64 arch as well + + -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Mon, 27 Aug 2018 19:06:08 -0400 + +knot (2.7.1-1) unstable; urgency=medium + + * new upstream release + * SONAME bumps: move to libknot8, libdnssec6, and libzscanner2 + * adopted pykeymgr from upstream, renaming to + /usr/lib/knot/kasp_json2lmdb + * ship manpages with dh_installman + * kjournalprint is now a shipped as a system administration utility + * avoid more autogened files on package import + * drop THANKS, no longer shipped upstream + * update symbols files + * Standards-Version: bump to 4.2.0 (no changes needed) + * clean up kdns-utils description + * added libcap-ng to build-deps + * move to libidn2 + * d/copyright: correct license of TAP sources + * added build-dep on libmaxminddb-dev for GeoIP module + * Only conditionally add -latomic based on the platform + * record notes about dynamic modules instead of static modules + + -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Fri, 24 Aug 2018 18:02:44 -0400 + +knot (2.6.8-2) unstable; urgency=medium + + * d/knot.NEWS: fix spelling (thanks, Lintian!) + * refresh patches + * Standards-Version: bump to 4.1.5 (no changes needed) + + -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Tue, 10 Jul 2018 16:14:48 -0400 + +knot (2.6.8-1) unstable; urgency=medium + + * New upstream version 2.6.8 + + -- Daniel Salzman <daniel.salzman@nic.cz> Tue, 10 Jul 2018 16:23:19 +0200 + +knot (2.6.7-2) unstable; urgency=medium + + * use knot@packages.debian.org as Maintainer (Closes: #899825) + + -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Thu, 24 May 2018 16:00:33 -0400 + +knot (2.6.7-1) unstable; urgency=medium + + * New upstream version 2.6.7 + + -- Daniel Salzman <daniel.salzman@nic.cz> Thu, 17 May 2018 13:18:22 +0200 + +knot (2.6.6-2) unstable; urgency=medium + + [ Daniel Salzman ] + * Remove already included patches + * Add new symbol to libknot7.symbols + * Update changelog for 2.6.6-1 release + + [ Daniel Kahn Gillmor ] + * standards-version: bump to 4.1.4 (no changes needed) + * clean up libknot7.symbols + * prepare debian release + + -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Mon, 23 Apr 2018 02:07:36 -0400 + +knot (2.6.5-3) unstable; urgency=medium + + * accept suggestions from the Multiarch hinter + * d/tests/control: rely on ca-certificates to validate the + DNS-over-TLS cert + + -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Sun, 25 Feb 2018 15:49:46 -0800 + +knot (2.6.5-2) unstable; urgency=medium + + * re-ship /usr/lib/$(DEB_HOST_MULTIARCH)/knot" (Closes: #891319) + + -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Sun, 25 Feb 2018 10:17:49 -0800 + +knot (2.6.5-1) unstable; urgency=medium + + * new upstream release + + [ Daniel Salzman ] + * Update uploaders and dependencies in the control file + * Downgrade 'Recommends' to 'Suggests' for systemd + * Update upstream signing key + + [ Daniel Kahn Gillmor ] + * wrap-and-sort -ast + * add myself to uploaders + * move to debhelper 11 + * Standards-Version: 4.1.3 (no changes needed) + * build-depend on python3-sphinx instead of python-sphinx + * d/gbp.conf: clean up, use DEP-14 + * dh11: apply --fail-missing only to dh_missing + * remove doc/modules symlink on clean + * Use python3 instead of python2 for helper functions + * use python3 for pykeymgr + * move knot from python 2 to python 3 + * Move python3-lmdb to Recommends + * d/TODO: note future debian packaging work + * knot-doc: use system jquery and underscore javascript + * include upstream VCS in git history + * d/control: add Rules-Requires-Root: no + * d/changelog: strip trailing whitespace + * ship upstream ChangeLog + * d/copyright: drop hat-trie, removed upstream + * d/*.NEWS: stop using asterisks + * stop declaring unnecessary dirs + * stop shipping /usr/lib/$(DEB_HOST_MULTIARCH)/knot + * add doc-base entry for knot-doc + * d/gbp.conf: improve cleanup during import-orig + * fix spelling errors in manpages + * info: fix direntry and category + * add really simple autopkgtest + + -- Daniel Kahn Gillmor <dkg@fifthhorseman.net> Thu, 22 Feb 2018 23:38:33 -0800 + +knot (2.6.4-1) unstable; urgency=medium + + * Update Vcs-* links to salsa.d.o + * New upstream version 2.6.4 + + -- Ondřej Surý <ondrej@debian.org> Thu, 04 Jan 2018 15:02:46 +0000 + +knot (2.6.3-1) unstable; urgency=medium + + * New upstream version 2.6.3 + + -- Ondřej Surý <ondrej@debian.org> Fri, 24 Nov 2017 15:33:43 +0000 + +knot (2.6.1-2) unstable; urgency=medium + + * Add Breaks/Replaces for libdnssec5/libknot7 to remedy botched 2.6.0-1 + upload (Closes: #881638) + + -- Ondřej Surý <ondrej@debian.org> Mon, 13 Nov 2017 19:58:35 +0000 + +knot (2.6.1-1) unstable; urgency=medium + + * New upstream version 2.6.1 + * Remove upstream patch for disabling TCP Fastopen + + -- Ondřej Surý <ondrej@debian.org> Sun, 12 Nov 2017 03:11:26 +0000 + +knot (2.6.0-3) unstable; urgency=medium + + * kdig: disable TCP Fastopen by default as it breaks TLS connection + (Closes: #879079) + + -- Ondřej Surý <ondrej@debian.org> Thu, 19 Oct 2017 08:22:18 +0000 + +knot (2.6.0-2) unstable; urgency=medium + + [ John Bond ] + * fix get_kasp and get_user to support unquoted ipv6 addresses + + -- Ondřej Surý <ondrej@debian.org> Thu, 05 Oct 2017 13:08:26 +0000 + +knot (2.6.0-1) unstable; urgency=medium + + * New upstream version 2.6.0 + * Enable strict symbols checking + * Bump libknot 6->7 and libdnssec 4->5 SONAMEs and update symbols files + + -- Ondřej Surý <ondrej@debian.org> Fri, 29 Sep 2017 19:46:41 +0200 + +knot (2.5.4-2) unstable; urgency=medium + + * Drop conflicting links to dig, nsupdate and host (Closes: #741645) + * Build-Depend on latexmk (Closes: #872203) + + -- Ondřej Surý <ondrej@debian.org> Mon, 18 Sep 2017 07:11:39 +0200 + +knot (2.5.4-1) unstable; urgency=medium + + * New upstream version 2.5.4 + + -- Ondřej Surý <ondrej@debian.org> Fri, 01 Sep 2017 09:03:02 +0200 + +knot (2.5.3-3) unstable; urgency=medium + + * Simple rebuild to make knot-doc arch:all again. + + -- Ondřej Surý <ondrej@debian.org> Wed, 26 Jul 2017 14:41:26 +0200 + +knot (2.5.3-2) unstable; urgency=medium + + * Disable dh-exec usage as #831786 breaks dh_install --fail-missing + (Closes: #869199) + + -- Ondřej Surý <ondrej@debian.org> Mon, 24 Jul 2017 10:26:09 +0200 + +knot (2.5.3-1) unstable; urgency=medium + + * New upstream version 2.5.3 + + -- Ondřej Surý <ondrej@debian.org> Sat, 15 Jul 2017 07:26:12 +0200 + +knot (2.5.2-1) unstable; urgency=medium + + * New upstream version 2.5.2 + * Remove all patches merged upstream + + -- Ondřej Surý <ondrej@debian.org> Fri, 23 Jun 2017 11:46:34 +0200 + +knot (2.5.1-4) unstable; urgency=medium + + * Create the modules M-A directory to workaround the bug that fails to + start knot when modules directory is missing + + -- Ondřej Surý <ondrej@debian.org> Thu, 15 Jun 2017 11:32:09 +0200 + +knot (2.5.1-3) unstable; urgency=medium + + * Enable dnstap module and set default moduledir to multiarch path + + -- Ondřej Surý <ondrej@debian.org> Thu, 15 Jun 2017 08:32:34 +0200 + +knot (2.5.1-2) unstable; urgency=medium + + * Explicitly exclude example.com.zone to support older debhelpers + * Add patch to fix duplicate section merging in the config + + -- Ondřej Surý <ondrej@debian.org> Fri, 09 Jun 2017 13:47:17 +0200 + +knot (2.5.1-1) unstable; urgency=medium + + * New upstream version 2.5.1 + * Remove upstream patches released as Knot DNS 2.5.1 + + -- Ondřej Surý <ondrej@debian.org> Wed, 07 Jun 2017 16:04:16 +0200 + +knot (2.5.0-2) unstable; urgency=medium + + * Add upstream patches to fix old DNSSEC installations + * Skip already converted kasp-db directories + * Install pykeymgr from upstream tarball + + -- Ondřej Surý <ondrej@debian.org> Wed, 07 Jun 2017 14:20:38 +0200 + +knot (2.5.0-1) unstable; urgency=medium + + * New upstream version 2.5.0 + * Update maintscript to use dh-exec and remove obsolete cruft + * Bump the package names for libknot and libdnssec to match new + SOVERSIONs + * Simplify d/rules overrides + * Remove not-installed files from d/*.install + * Install local copy of pykeymgr (not included in the source + distribution) + * Add python-lmdb for pykeymgr migration utility + + -- Ondřej Surý <ondrej@debian.org> Wed, 07 Jun 2017 11:03:22 +0200 + +knot (2.4.3-1) unstable; urgency=medium + + * New upstream version 2.4.3 + + -- Ondřej Surý <ondrej@debian.org> Tue, 11 Apr 2017 21:17:47 +0200 + +knot (2.4.2-1) unstable; urgency=medium + + * New upstream version 2.4.2 + + -- Ondřej Surý <ondrej@debian.org> Thu, 23 Mar 2017 11:47:52 +0100 + +knot (2.4.1-2) unstable; urgency=medium + + * Enable dnstap module + + -- Ondřej Surý <ondrej@debian.org> Mon, 27 Feb 2017 11:35:15 +0100 + +knot (2.4.1-1) unstable; urgency=medium + + * New upstream version 2.4.1 + + -- Ondřej Surý <ondrej@debian.org> Fri, 10 Feb 2017 13:54:24 +0100 + +knot (2.4.0-3) unstable; urgency=medium + + * Fix timeout call syntax in dh_auto_test invocation + + -- Ondřej Surý <ondrej@debian.org> Wed, 25 Jan 2017 15:10:04 +0100 + +knot (2.4.0-2) unstable; urgency=medium + + * Add -latomic to LDFLAGS to fix FTBFS on platforms that need it + + -- Ondřej Surý <ondrej@debian.org> Mon, 23 Jan 2017 11:41:59 +0100 + +knot (2.4.0-1) unstable; urgency=medium + + * Fix gbp.conf to be readable by git config --file debian/gbp.conf on Jessie + * New upstream version 2.4.0 + * Bump libknot SONAME 4->5 + * Update symbols files for 2.4.0 release + + -- Ondřej Surý <ondrej@debian.org> Fri, 20 Jan 2017 12:15:30 +0100 + +knot (2.3.3-1) unstable; urgency=medium + + [ Daniel Kahn Gillmor ] + * Use secure URLs where possible + * Clean up debian/copyright. + * Drop duplicate Source: lines (clears lintian binary-control-field-duplicates-source) + * Avoid using asterisk in NEWS (clears lintian debian-news-entry-uses-asterisk) + * Knot needs a dependency on lsb-base (clears lintian init.d-script-needs-depends-on-lsb-base) + * Filter auto-reconfed files out during future gbp import-orig operations + * debian/control: clean up Description: lines + * Added Documentation= to knot.service + + [ Ondřej Surý ] + * Imported Upstream version 2.3.3 + * Add kjournalprint to knot package + + -- Ondřej Surý <ondrej@debian.org> Thu, 08 Dec 2016 14:49:31 +0100 + +knot (2.3.2-1) unstable; urgency=medium + + * Imported Upstream version 2.3.2 + * Add new symbols to libknot4.symbols + + -- Ondřej Surý <ondrej@debian.org> Fri, 04 Nov 2016 11:31:33 +0100 + +knot (2.3.1-1) unstable; urgency=medium + + * Imported Upstream version 2.3.1 + * Bump libknot3 to libknot4 + * kzonecheck was moved to /usr/bin + + -- Ondřej Surý <ondrej@debian.org> Mon, 10 Oct 2016 12:01:41 +0200 + +knot (2.3.0-4) unstable; urgency=medium + + * Don't fail if there's no knot user defined + * Don't list explicit -c or -C path and let daemon figure it out + + -- Ondřej Surý <ondrej@debian.org> Thu, 15 Sep 2016 12:44:57 +0200 + +knot (2.3.0-3) unstable; urgency=medium + + * Ignore the test results if they don't finish within 5 minutes + * Correctly break/replace libzscanner0 that contained libzscanner.so.1 + + -- Ondřej Surý <ondrej@debian.org> Thu, 11 Aug 2016 08:49:25 +0200 + +knot (2.3.0-2) unstable; urgency=medium + + * Move examples to knot-doc package (fix arch-only FTBFS) + + -- Ondřej Surý <ondrej@debian.org> Wed, 10 Aug 2016 10:17:17 +0200 + +knot (2.3.0-1) unstable; urgency=medium + + * Imported Upstream version 2.3.0 + + Zone size limit restriction for DDNS, AXFR, and IXFR (CVE-2016-6171) + (Closes: #830809) + * Restructure d/rules so dh_install --fail-missing works again + * Upstream bumped SOVERSION to libknot3, libdnssec2 and libzscanner1 + + -- Ondřej Surý <ondrej@debian.org> Wed, 10 Aug 2016 09:16:35 +0200 + +knot (2.2.1-2) unstable; urgency=high + + * Add texlive-generic-extra to B-D for missing iftex.sty + (Closes: #829428) + + -- Ondřej Surý <ondrej@debian.org> Mon, 11 Jul 2016 11:47:34 +0200 + +knot (2.2.1-1) unstable; urgency=medium + + * Imported Upstream version 2.2.1 + + -- Ondřej Surý <ondrej@debian.org> Tue, 24 May 2016 17:48:16 +0200 + +knot (2.2.0-3) unstable; urgency=medium + + * knotc checkconf is not knotc conf-check (Closes: #823574) + + -- Ondřej Surý <ondrej@debian.org> Fri, 20 May 2016 14:22:11 +0200 + +knot (2.2.0-2) unstable; urgency=medium + + * Do dbgsym migration of debug symbols + + -- Ondřej Surý <ondrej@debian.org> Wed, 27 Apr 2016 17:43:59 +0200 + +knot (2.2.0-1) unstable; urgency=medium + + * confdb should be in /var/lib/knot/ by default + * Imported Upstream version 2.2.0 + * Add libedit-dev to Build-Depends + + -- Ondřej Surý <ondrej@debian.org> Wed, 27 Apr 2016 10:10:10 +0200 + +knot (2.1.1-2) unstable; urgency=medium + + * Add python to Depends and run wrap-and-sort -a + * Parse correct /etc/default/knot instead of /etc/default/knotd + + -- Ondřej Surý <ondrej@debian.org> Fri, 15 Apr 2016 17:18:02 +0200 + +knot (2.1.1-1) unstable; urgency=medium + + * Imported Upstream version 2.1.1 + + -- Ondřej Surý <ondrej@debian.org> Wed, 10 Feb 2016 20:01:44 +0100 + +knot (2.1.0-3) unstable; urgency=medium + + * Add small python helper programs to get values from knot.conf + + -- Ondřej Surý <ondrej@debian.org> Mon, 25 Jan 2016 12:44:00 +0100 + +knot (2.1.0-2) unstable; urgency=medium + + * Revert "Run keymgr init on every upgrade (just to be sure it happens)" + * Add support for relative directories in kasp-db + + -- Ondřej Surý <ondrej@debian.org> Thu, 14 Jan 2016 11:46:35 +0100 + +knot (2.1.0-1) unstable; urgency=medium + + * Set knot user home directory to /var/lib/knot + * Imported Upstream version 2.1.0 + * Run keymgr init on every upgrade (just to be sure it happens) + + -- Ondřej Surý <ondrej@debian.org> Thu, 14 Jan 2016 10:55:26 +0100 + +knot (2.1.0~rc1-55-gf227348-1) unstable; urgency=medium + + * Add libgnutls28-dev and libjansson-dev as dependencies to libknot-dev + to satisfy pkg-config requirements + * Imported Upstream version 2.1.0~rc1-55-gf227348 + * Automatically upgrade all KASP databases found in the configuration + and restart the server afterwards when upgrading from 2.0.x to 2.1.x + + -- Ondřej Surý <ondrej@debian.org> Wed, 13 Jan 2016 14:03:17 +0100 + +knot (2.1.0~rc1-52-gd80ce77-1) unstable; urgency=medium + + * Imported Upstream version 2.1.0~rc1-52-gd80ce77 + + -- Ondřej Surý <ondrej@debian.org> Tue, 12 Jan 2016 16:56:12 +0100 + +knot (2.0.2-1) unstable; urgency=medium + + * Imported Upstream version 2.0.2 + * Delete d/p/series as we carry no patches + + -- Ondřej Surý <ondrej@debian.org> Tue, 24 Nov 2015 19:59:56 +0100 + +knot (2.0.1-4) unstable; urgency=medium + + * Split knot-libs into individual library packages + * Add knot.default file and use it from systemd and init.d scripts + + -- Ondřej Surý <ondrej@debian.org> Mon, 05 Oct 2015 20:34:02 +0200 + +knot (2.0.1-3) unstable; urgency=medium + + * The upstart conffile ends with .conf, fix the stale conffile removal + + -- Ondřej Surý <ondrej@debian.org> Mon, 21 Sep 2015 13:54:42 +0200 + +knot (2.0.1-2) unstable; urgency=medium + + * Compile the production version with NDEBUG + * Remove stale upstart init script via dpkg-maintscript-helper rm_config + + -- Ondřej Surý <ondrej@debian.org> Mon, 14 Sep 2015 13:41:29 +0200 + +knot (2.0.1-1) unstable; urgency=medium + + * Imported Upstream version 2.0.1 + * Fix the do_tmpfiles() in sysvrc script (Courtesy of Daniel Baumann) + (Closes: #796921) + * Disable -pedantic as it causes errors to be thrown in the tests + + -- Ondřej Surý <ondrej@debian.org> Thu, 03 Sep 2015 10:56:16 +0200 + +knot (2.0.0-1+0) unstable; urgency=medium + + * Bump the version to workaround ~exp* higher than ~bpo* + + -- Ondřej Surý <ondrej@debian.org> Mon, 17 Aug 2015 15:05:37 +0200 + +knot (2.0.0-1) unstable; urgency=medium + + * New upstream version 2.0.0 + + Bugfixes: + - Fix lost NOTIFY message if received during zone transfer + - Disable fast zone parser when compiled in Clang (workaround for Clang bug) + - kdig: Record correct dnstap SocketProtocol when retrying over TCP + - kdig: Hide TSIG section with +noall + - Do not set AA flag for AXFR/IXFR queries + + Features: + - DNSSEC: separate library, switch to GnuTLS, new utilities + - DNSSEC: basic KASP support (generate initial keys, ZSK rollover) + - Configuration: New text format in YAML, binary store in LMDB + - Zone parser: Split long TXT/SPF strings into multiple strings + - kdig: Add generic dump style option (+generic) + - Try all master servers in multi-master environment + - Improved remotes and ACLs (multiple addresses, multiple keys) + - Basic support for zone file patterns (%s to substitute zone name) + - Disable zone file synchronization by setting 'zonefile_sync' to '-1' + - knsupdate: Add input prompt in interactive mode and 'quit' command + - knsupdate: Allow TSIG algorithm specification in interactive prompt + + Improvements: + - Zone dump: Do not write class for SOA record (unified with other RR types) + - Zone dump: Do not write master server address into the zone file + - Documentation: Manual pages are included in HTML and PDF + * Install knot1to2 configuration file conversion tool + * Automatically convert knot.conf with some safety-checks + * Add note about the conversion to debian/knot.NEWS + * Make the build libsystem-{daemon,journal}-dev friendly to allow Ubuntu + and backported builds + + -- Ondřej Surý <ondrej@debian.org> Mon, 17 Aug 2015 11:56:43 +0200 + +knot (2.0.0-1~exp2) experimental; urgency=medium + + * Update prepare-environment to match the new config file syntax + + -- Ondřej Surý <ondrej@debian.org> Thu, 30 Jul 2015 09:26:52 +0200 + +knot (2.0.0-1~exp1) experimental; urgency=medium + + * New upstream version 2.0.0 + + Bugfixes: + - Fix lost NOTIFY message if received during zone transfer + - Disable fast zone parser when compiled in Clang (workaround for Clang bug) + - kdig: Record correct dnstap SocketProtocol when retrying over TCP + - kdig: Hide TSIG section with +noall + - Do not set AA flag for AXFR/IXFR queries + + Features: + - DNSSEC: separate library, switch to GnuTLS, new utilities + - DNSSEC: basic KASP support (generate initial keys, ZSK rollover) + - Configuration: New text format in YAML, binary store in LMDB + - Zone parser: Split long TXT/SPF strings into multiple strings + - kdig: Add generic dump style option (+generic) + - Try all master servers in multi-master environment + - Improved remotes and ACLs (multiple addresses, multiple keys) + - Basic support for zone file patterns (%s to substitute zone name) + - Disable zone file synchronization by setting 'zonefile_sync' to '-1' + - knsupdate: Add input prompt in interactive mode and 'quit' command + - knsupdate: Allow TSIG algorithm specification in interactive prompt + + Improvements: + - Zone dump: Do not write class for SOA record (unified with other RR types) + - Zone dump: Do not write master server address into the zone file + - Documentation: Manual pages are included in HTML and PDF + * Install knot1to2 configuration file conversion tool + * Automatically convert knot.conf with some safety-checks + * Add note about the conversion to debian/knot.NEWS + * Make the build libsystem-{daemon,journal}-dev friendly to allow Ubuntu + and backported builds + + -- Ondřej Surý <ondrej@debian.org> Mon, 29 Jun 2015 10:40:45 +0200 + +knot (1.6.1-1) unstable; urgency=medium + + * New upstream version 1.6.1 + + -- Ondřej Surý <ondrej@debian.org> Tue, 30 Dec 2014 09:50:54 +0100 + +knot (1.6.0-1) unstable; urgency=medium + + * New upstream version 1.6.0 + * Switch to network-online.target to mitigate some network not-yet-ready races + * Recommend systemd due journald enabled logging (Closes: #766596) + + -- Ondřej Surý <ondrej@debian.org> Fri, 24 Oct 2014 12:41:32 +0200 + +knot (1.6.0~rc2-1) unstable; urgency=medium + + * New upstream version 1.6.0~rc2 + * Update patches for 1.6.0~rc2 release + + -- Ondřej Surý <ondrej@debian.org> Fri, 17 Oct 2014 17:32:30 +0200 + +knot (1.6.0~rc1-1) unstable; urgency=medium + + * New upstream version 1.6.0~rc1 + * Knot needs lmdb for persistent timers + + -- Ondřej Surý <ondrej@debian.org> Mon, 13 Oct 2014 23:06:56 +0200 + +knot (1.5.3-1) unstable; urgency=medium + + * Move knot-libs to Section: net (Closes: #760795) + * New upstream version 1.5.3 + + -- Ondřej Surý <ondrej@debian.org> Mon, 15 Sep 2014 17:00:08 +0200 + +knot (1.5.2-1) unstable; urgency=high + + * Update Vcs-Urls to point to anonscm.debian.org + * New upstream version 1.5.2 + + [CVE-2014-0486]: Fixed remote crash with crafted DNS message + * Update patches for 1.5.2 release + + -- Ondřej Surý <ondrej@debian.org> Mon, 08 Sep 2014 11:11:56 +0200 + +knot (1.5.1-3) unstable; urgency=high + + * More arch/indep build rules splitting to fix binary-arch-only builds + * Add lintian override to override warning about internal libraries in + knot-libs + + -- Ondřej Surý <ondrej@debian.org> Tue, 26 Aug 2014 09:43:05 +0200 + +knot (1.5.1-2) unstable; urgency=medium + + * Enable full hardening via debhelper >= 9 + * Enable IDN in knot-dnsutils and knot-host packages + * Enable systemd libraries only on linux-any + * Split arch and indep builds to build the documentation just once + * Drop ragel from build depends to allow arm64 builds + + -- Ondřej Surý <ondrej@debian.org> Mon, 25 Aug 2014 15:54:34 +0200 + +knot (1.5.1-1) unstable; urgency=medium + + * New upstream version 1.5.1 + * Enable systemd notification mechanism + * Enable systemd journal enhanced logging + + -- Ondřej Surý <ondrej@debian.org> Wed, 20 Aug 2014 10:45:18 +0200 + +knot (1.5.0-1) unstable; urgency=medium + + * New upstream version 1.5.0 + + Features: + - Pluggable query processing modules + - Synthetic IPv4/IPv6 reverse/forward records (optional module) + - dnstap support in both utilities & server (optional module) + - NOTIFY message support and new TSIG section in kdig + - Multi-master support + - edns-client-subnet support in kdig + - Optional asynchronous startup (config "asynchronous-start") + - DDNS forwarding reimplemented + + Improvements: + - Query processing and core functionality overhaul + - Performance and reduced memory footprint + - Faster zone events scheduling + - RFC compliant queries/responses in some corner cases + - Log messages + - New documentation (Sphinx) + - Transfer sizes logged in bytes if needed + - Logging outgoing NOTIFY messages + - Logging unauthorized incoming NOTIFYs + - Preempt task queue for faster reload + - Lazy zone file write after zone transfer (governed by "zonefile-sync") + + Bugfixes: + - Close zone transfer after SERVFAIL response + - Incremental to full zone transfer fallback, wrong log message + - Zone events corner cases, reload replanning + - Zone flush planning after bootstrap + - Incorrect incoming AXFR message sizes + - DDNS signing changes were freed too soon, posibility of stale data + - knotc remote control key handling + * Debian packaging: + + d/control: New documentation is using sphinx + + d/control: New knot-libs package containing internal shared libraries + + -- Ondřej Surý <ondrej@debian.org> Wed, 09 Jul 2014 13:08:26 +0200 + +knot (1.4.6+hotfix-1) unstable; urgency=medium + + * New upstream version 1.4.6+hotfix + + -- Ondřej Surý <ondrej@debian.org> Thu, 22 May 2014 15:39:07 +0200 + +knot (1.4.6-1) unstable; urgency=medium + + * New upstream version 1.4.6 + * Update patches for 1.4.6 release + + -- Ondřej Surý <ondrej@debian.org> Thu, 22 May 2014 13:15:14 +0200 + +knot (1.4.5-2) unstable; urgency=high + + * Re-upload to fix botched amd64 upload in 1.4.5-1 + + -- Ondřej Surý <ondrej@debian.org> Tue, 22 Apr 2014 14:58:30 +0200 + +knot (1.4.5-1) unstable; urgency=high + + * New upstream version 1.4.5 + + Fix possible weakness in TSIG signature checking + * Refresh patches for 1.4.5 release + * Use dh-autoreconf to regenerate autotools files + + -- Ondřej Surý <ondrej@debian.org> Mon, 14 Apr 2014 15:11:12 +0200 + +knot (1.4.4-1) unstable; urgency=medium + + * New upstream version 1.4.4 + + Server is logging remote control commands + + 'knotc reload' doesn't refresh unchanged zones + + 'knotc -f refresh' forces zone retransfer + + Fixed missing notifications after DDNS/automatic resign + + Zone is rebootstrapped if the zone file is unreadable + + Progressive bootstrap retry backoff + + Zone file parser now allows asterisk as part of the label + + Fix journal maximum entry size + + Sign DNSKEYs in non-apex nodes as regular RR sets + + Various spelling and typo fixes (Courtesy of Robert Edmonds) + + -- Ondřej Surý <ondrej@debian.org> Thu, 27 Mar 2014 15:49:54 +0100 + +knot (1.4.3-2) unstable; urgency=medium + + * Add support for autotools-dev and dh-systemd + * Enable parallel builds in dh invocation + + -- Ondřej Surý <ondrej@debian.org> Tue, 18 Feb 2014 13:44:13 +0100 + +knot (1.4.3-1) unstable; urgency=low + + * New upstream version 1.4.3 + + -- Ondřej Surý <ondrej@debian.org> Tue, 18 Feb 2014 13:03:42 +0100 + +knot (1.4.2-1) unstable; urgency=low + + * New upstream version 1.4.2 + * Update OpenSSL << 1.0.0 compatibility patch + + -- Ondřej Surý <ondrej@debian.org> Mon, 27 Jan 2014 16:14:33 +0100 + +knot (1.4.1-2) unstable; urgency=low + + * Add patch to remove the requirement for OpenSSL 1.0.0 to build on + Debian squeeze, be warned though that the OpenSSL before 1.0.0 might + manifest some threading errors and crashes, so you really should + upgrade your system to Debian wheezy. + + -- Ondřej Surý <ondrej@debian.org> Thu, 23 Jan 2014 16:53:03 +0100 + +knot (1.4.1-1) unstable; urgency=low + + * New upstream version 1.4.1 + + Empty APL record support + + 'zonestatus' when using immediate zone syncing + + Immediate zone syncing after reload + + Race condition writing time values to zone file + + Require OpenSSL >= 1.0.0 + * Don't use dh-autoreconf, upstream uses recent enough autotools + * Bump standards version to 3.9.5 + * Run the tests on every arch without the condition, but don't fail + anywhere + + -- Ondřej Surý <ondrej@debian.org> Mon, 13 Jan 2014 18:00:18 +0100 + +knot (1.4.0-1) unstable; urgency=low + + * New major upstream version 1.4.0 + + Experimental automatic DNSSEC signing + + Fastest ragel parser enabled by default + + Reduced memory usage + + Zone SOA SERIAL policies (INCREMENT, UNIXTIME) for DDNS and + automatic DNSSEC signing + + IDN support in Knot utilities (kdig, knsupdate, ...) + + DNSSEC: support for GOST algorithm + + Support for DNSSEC key pre-publication + * Remove PATH_MAX patch, it's already included in upstream + * Run the tests on all archs, but don't fail the build if the tests fail + on broken archs + * Update watch file to match (alpha|beta|rc)\d* versions + + -- Ondřej Surý <ondrej@debian.org> Mon, 06 Jan 2014 11:00:07 +0100 + +knot (1.4.0~rc2-1) experimental; urgency=low + + * New upstream version 1.4.0~rc2 + + -- Ondřej Surý <ondrej@debian.org> Fri, 13 Dec 2013 17:53:26 +0100 + +knot (1.4.0~rc1-1) experimental; urgency=low + + * Disable tests on GNU Hurd + * New upstream version 1.4.0~rc1 + + -- Ondřej Surý <ondrej@debian.org> Mon, 25 Nov 2013 16:19:27 +0100 + +knot (1.4.0~beta-1) experimental; urgency=low + + * New upstream version 1.4.0~beta + * Update patches for 1.4.0~beta release + * Disable fastparser since the ragel is broken in one test + * Add knsec3hash to knot package + + -- Ondřej Surý <ondrej@debian.org> Tue, 29 Oct 2013 12:25:49 +0100 + +knot (1.3.4-1) unstable; urgency=low + + * Disable tests on GNU Hurd + * New upstream version 1.3.4 + + -- Ondřej Surý <ondrej@debian.org> Fri, 13 Dec 2013 17:23:52 +0100 + +knot (1.3.3-1) unstable; urgency=low + + * New upstream version 1.3.3 + + -- Ondřej Surý <ondrej@debian.org> Mon, 28 Oct 2013 11:40:13 +0100 + +knot (1.3.2-3) unstable; urgency=low + + * Add ufw applications.d rule for Knot DNS + * Disable recvmmsg on GNU Hurd (since recvmmsg is not implemented on GNU + Hurd and will always fail) + * Enable fastparser (requires Ragel) + + -- Ondřej Surý <ondrej@debian.org> Fri, 11 Oct 2013 17:23:35 +0200 + +knot (1.3.2-2) unstable; urgency=low + + * Define #PATH_MAX to make GNU Hurd happy + * Don't enable LTO, it doesn't play well with debugging symbols + + -- Ondřej Surý <ondrej@debian.org> Sun, 06 Oct 2013 01:57:13 +0200 + +knot (1.3.2-1) unstable; urgency=low + + * New upstream version 1.3.2 + * Enable link-time-optimizations by default + + -- Ondřej Surý <ondrej@debian.org> Mon, 30 Sep 2013 15:04:01 +0200 + +knot (1.3.1-1) unstable; urgency=low + + * New upstream version 1.3.1 + * Add new debian/watch file (Courtesy of Debian QA) + * Bump standards to 3.9.4 + * Stop using /lib/init/vars.sh, we don't use $VERBOSE anymore anyway + * Drop syslog.target as it is not needed anymore + * Remove SSE detection patch as it was merged upstream + + -- Ondřej Surý <ondrej@debian.org> Tue, 27 Aug 2013 14:27:44 +0200 + +knot (1.3.0-2) unstable; urgency=low + + * Disable SSE detection in the packaged version of Knot DNS + + -- Ondřej Surý <ondrej@debian.org> Fri, 16 Aug 2013 13:04:39 +0200 + +knot (1.3.0-1) unstable; urgency=low + + * New upstream version 1.3.0 + * Remove upstream patch from 1.3.0~rc5-2 as it is included in + this release. + + -- Ondřej Surý <ondrej@debian.org> Mon, 05 Aug 2013 17:01:23 +0200 + +knot (1.3.0~rc5-2) unstable; urgency=low + + * Pull some pre 1.3.0 patches (mainly to test before release): + + Initialize secondary groups for user <user>.<group>. + + Reworked CH TXT records support (RFC 4892). + + Fixed inactive xfers may be disconnected depending on the previous + result. + + Add server starting information to log. + + -- Ondřej Surý <ondrej@debian.org> Mon, 05 Aug 2013 10:39:48 +0200 + +knot (1.3.0~rc5-1) unstable; urgency=low + + * New upstream version 1.3.0~rc5 + * Remove last upstream patch, all our changes have been merged. Yay\! + + -- Ondřej Surý <ondrej@debian.org> Mon, 29 Jul 2013 17:15:56 +0200 + +knot (1.3.0~rc4-2) unstable; urgency=low + + * Disable tests on big endian architectures (but the code still needs to + be fixed) + + -- Ondřej Surý <ondrej@debian.org> Tue, 23 Jul 2013 14:07:39 +0200 + +knot (1.3.0~rc4-1) unstable; urgency=low + + * New upstream version 1.3.0~rc4 + * Add upstream patch to honour CONFIG_DIR + * Remove now obsolete patch to run as knot:knot + * The knot/ is now added by upstream to @sysconfdir@ + + -- Ondřej Surý <ondrej@debian.org> Mon, 15 Jul 2013 15:15:05 +0200 + +knot (1.3.0~rc3-2) unstable; urgency=low + + * Add proper support for upstart and systemd along with sysvinit + * Add /usr/lib/knot/prepare-environment script which will parse + knot configuration file and properly create rundir and set + correct permissions to configured values in /etc/knot/knot.conf + * Remove /etc/default/knot since the values are now parsed + directly from the configuration file + * Add /var/lib/knot to knot.dirs, so it gets created on package + install + * Drop checking for $VERBOSE variable and properly log start/stop from + sysvinit script + + -- Ondřej Surý <ondrej@debian.org> Tue, 02 Jul 2013 13:08:33 +0200 + +knot (1.3.0~rc3-1) unstable; urgency=low + + * New upstream version 1.3.0~rc3 + * Packaging changes: + + Use --fail-missing to check for all new files + + Remove obsolete patches and update installed conffile with latest + options + + Don't install knot-zcompile as it is no more + + Install minimal example configuration file as /etc/knot/knot.conf + + Add --disable-silent-rules to configure invocation + + Add patch to fix missing $(DESTDIR) in src/Makefile.am + + Set --with-rundir and --with-storage to correct locations + + Run under knot:knot by default (create and delete knot user) + + Add knot-dnsutils and knot-host packages + + Add patch to move knot-{host,dnsutils} manpages to correct location + + Add samples/knot.{full,keys}.conf and example zone to examples. + * Add knot-doc package with generated documentation (PDF and HTML) + + -- Ondřej Surý <ondrej@debian.org> Fri, 28 Jun 2013 12:59:55 +0200 + +knot (1.2.0-2) unstable; urgency=low + + * /etc/init.d/knot now sources /etc/default/knot instead of + /etc/init.d/knotd (Closes: #707683) + * Pull upstream fix for pidfile creation before dropping priviledges + (Closes: #707685) + * Enable SSE2 support again (we will simply not support anything older + than Pentium M) + + -- Ondřej Surý <ondrej@debian.org> Wed, 26 Jun 2013 14:41:04 +0200 + +knot (1.2.0-1) unstable; urgency=low + + * Imported Upstream version 1.2.0 + + Final release. + + Some small memory leaks fixes. + + -- Ondřej Surý <ondrej@debian.org> Wed, 03 Apr 2013 09:16:25 +0200 + +knot (1.2.0~rc4-1) unstable; urgency=low + + * Imported Upstream version 1.2.0~rc4 + + knotc 'zonestatus' command + + Changing logfile ownership before dropping privileges + + knotc respects 'control' section from configuration + + RRL: resolved bucket collisions + + RRL: updated bucket mapping to conform RRL technical memo + + -- Ondřej Surý <ondrej@debian.org> Fri, 22 Mar 2013 15:35:50 +0100 + +knot (1.2.0~rc3-1) unstable; urgency=low + + * Imported Upstream version 1.2.0~rc3 + + New functionality: Response Rate Limiting as a response to + reflection DNS DDoS attacks in the wild + + Add missing RRSIG in ANY queries + + -- Ondřej Surý <ondrej@debian.org> Fri, 01 Mar 2013 13:24:28 +0100 + +knot (1.2~rc2-1) unstable; urgency=low + + * Imported Upstream version 1.2~rc2 + * Fix git location + * Update patches for 1.2 release + + -- Ondřej Surý <ondrej@debian.org> Mon, 18 Feb 2013 12:40:01 +0100 + +knot (1.1.3-1) unstable; urgency=low + + * Imported Upstream version 1.1.3 + + -- Ondřej Surý <ondrej@debian.org> Thu, 20 Dec 2012 10:50:41 +0100 + +knot (1.1.3~rc1-1) unstable; urgency=low + + * Imported Upstream version 1.1.3~rc1 + + Fixed answering DS queries (RRSIGs not together with DS, AA bit + missing). + + Fixed setting ARCOUNT in some error responses with EDNS enabled. + + Fixed crash when compiling zone zone with NSEC3PARAM but no NSEC3 + and semantic checks enabled. + + -- Ondřej Surý <ondrej@debian.org> Fri, 07 Dec 2012 11:19:35 +0100 + +knot (1.1.2-1) unstable; urgency=low + + * Imported Upstream version 1.1.2 + + -- Ondřej Surý <ondrej@debian.org> Wed, 21 Nov 2012 14:45:34 +0100 + +knot (1.1.2~rc1-1) unstable; urgency=low + + * Imported Upstream version 1.1.2~rc1 + * Update patches for new release + + -- Ondřej Surý <ondrej@debian.org> Wed, 14 Nov 2012 14:04:17 +0100 + +knot (1.1.1-1) unstable; urgency=low + + * Imported Upstream version 1.1.1 + * Update and remove obsolete patches for new release + + -- Ondřej Surý <ondrej@debian.org> Wed, 31 Oct 2012 10:42:09 +0100 + +knot (1.1.0-5) unstable; urgency=low + + * Disable SSE2 instruction set, might solve some strange crashes. + + -- Ondřej Surý <ondrej@debian.org> Wed, 10 Oct 2012 13:09:54 +0200 + +knot (1.1.0-4) unstable; urgency=low + + * Disable extra hardening via dpkg-buildflags, which is not needed + by debhelper 9, but breaks builds on squeeze + * Install man5 and knot.info documentation + + -- Ondřej Surý <ondrej@debian.org> Mon, 03 Sep 2012 16:43:26 +0200 + +knot (1.1.0-3) unstable; urgency=low + + * Bump dependency on debhelper >= 9 + * Bump standards version to 3.9.3 + * Fix installation of manpages to correct directories + + -- Ondřej Surý <ondrej@debian.org> Mon, 03 Sep 2012 16:02:11 +0200 + +knot (1.1.0-2) unstable; urgency=low + + * Disable AM_MAINTAINER_MODE and re-run autoreconf -fi + * Enable hardening build by default + * Update pidfile patch to 1.1.0 + * Cope with default MultiArch in dh_compat==9 and don't install + unittests* binaries + + -- Ondřej Surý <ondrej@debian.org> Mon, 03 Sep 2012 15:32:53 +0200 + +knot (1.1.0-1) unstable; urgency=low + + * Imported Upstream version 1.1.0 + - User manual now available. + - Optionally disable ANY queries for authoritative answers. + - Dropping identical records in zone and incoming transfers. + - Support for '/' in zone names. + - Generating journal from reloaded zone (EXPERIMENTAL). + - Outgoing-only interfaces in configuration file. + - Following DNAME if the synthetized name is in the same zone. + - IXFR-in optimized. + - Many zones loading optimized. + - Signing SOA with TSIG queries when checking zone version with master. + * Enable maintainer mode to generate version.texi as a workaround. + + -- Ondřej Surý <ondrej@debian.org> Fri, 31 Aug 2012 16:27:07 +0200 + +knot (1.0.6-1) unstable; urgency=low + + * Imported Upstream version 1.0.6 + - Add NSEC/NSEC3 for all wildcard CNAMEs in the response. + - Fixed potential problems with RCU synchronization. + + -- Ondřej Surý <ondrej@debian.org> Wed, 13 Jun 2012 15:31:52 +0200 + +knot (1.0.5-1) unstable; urgency=low + + * Imported Upstream version 1.0.5 + - Fixed bug with creating journal files which didn't get merged + by accident + + -- Ondřej Surý <ondrej@debian.org> Thu, 17 May 2012 12:25:27 +0200 + +knot (1.0.4-1) unstable; urgency=low + + * Imported Upstream version 1.0.4 + - Speed-up loading of many zones due parallelization + - Support for TLSA resource record (Type 52) + - New commands knotc checkzone and knotc refresh (forced update) + - Fixed responses to CNAME queries if the canonical name was also + an alias + - Fixed crash when NS or MX points to an alias + - Fixed crash when bootstraping/compiling a lot of zones + - Significant speed-up and memory usage reduction of IXFR-in + + -- Ondřej Surý <ondrej@debian.org> Wed, 16 May 2012 09:33:26 +0200 + +knot (1.0.3-1) unstable; urgency=low + + * Imported Upstream version 1.0.3 + - Fixed bug in non-EDNS0 queries over TCP + - Zone compilation time regression fixed + + -- Ondřej Surý <ondrej@debian.org> Wed, 18 Apr 2012 09:06:57 +0200 + +knot (1.0.2-1) unstable; urgency=low + + * Imported Upstream version 1.0.2 + - Bugfix release + + -- Ondřej Surý <ondrej@debian.org> Fri, 13 Apr 2012 16:09:11 +0200 + +knot (1.0.1-1) unstable; urgency=low + + * Imported Upstream version 1.0.1 + - Implemented jitter to REFRESH/RETRY timers + - Fixed problem with creating IXFR journal for bootstrapped zone + - Fixed race condition in processing NOTIFY/SOA queries + - Fixed improper assignment of TSIG algorithm type + + -- Ondřej Surý <ondrej@debian.org> Fri, 09 Mar 2012 20:18:37 +0100 + +knot (1.0.0-1) unstable; urgency=low + + * Imported Upstream version 1.0.0 + * Update pidfile patch + + -- Ondřej Surý <ondrej@debian.org> Wed, 29 Feb 2012 18:46:13 +0100 + +knot (1.0~rc1-1) unstable; urgency=low + + * Imported Upstream version 1.0~rc1 + * Move knotd.pid to /var/run where it belongs + + -- Ondřej Surý <ondrej@debian.org> Wed, 15 Feb 2012 21:12:56 +0100 + +knot (0.9.1-3) unstable; urgency=low + + * Install files into knot package (broken build after added debug + package) + + -- Ondřej Surý <ondrej@debian.org> Mon, 23 Jan 2012 15:01:42 +0100 + +knot (0.9.1-2) unstable; urgency=low + + * Build knot-dbg package with debug symbols + + -- Ondřej Surý <ondrej@debian.org> Mon, 23 Jan 2012 13:27:20 +0100 + +knot (0.9.1-1) unstable; urgency=low + + * Imported Upstream version 0.9.1 + + RRSet rotation functionality added + + New pseudo-random number generator (new BSD licensed) + + Fixed build on BSD + + Fixes in parsing and dumping of some RR types + * Add correct git-buildpackage configuration + * Update copyright for new PRNG + + -- Ondřej Surý <ondrej@debian.org> Sat, 21 Jan 2012 15:47:30 +0100 + +knot (0.9-1) unstable; urgency=low + + * Imported Upstream version 0.9 + + Add TSIG support + + Several smaller bugfixes + * Add correct git-buildpackage configuration + * Imported Upstream version 0.9.1 + * Update copyright for new PRNG + + -- Ondřej Surý <ondrej@debian.org> Sat, 21 Jan 2012 15:46:54 +0100 + +knot (0.8.1-1) unstable; urgency=low + + * Imported Upstream version 0.8.1 + + Correctly handle SPF resource records + + Fix wrong text dumping of unknown records. + + -- Ondřej Surý <ondrej@debian.org> Thu, 01 Dec 2011 16:27:44 +0100 + +knot (0.8-1) unstable; urgency=low + + * Initial release (Closes: #647461) + * Add some dependencies in the init.d script + * Add flex and bison to b-d + * Add versioned dependency on liburcu + * Daemonize on the start + * Update copyright file to include all licenses + + -- Ondřej Surý <ondrej@debian.org> Wed, 16 Nov 2011 07:14:55 +0100 diff --git a/debian/clean b/debian/clean new file mode 100644 index 0000000..b2a9f3f --- /dev/null +++ b/debian/clean @@ -0,0 +1,2 @@ +doc/modules +.pybuild/ diff --git a/debian/control b/debian/control new file mode 100644 index 0000000..fdf998e --- /dev/null +++ b/debian/control @@ -0,0 +1,305 @@ +Source: knot +Section: net +Priority: optional +Maintainer: knot packagers <knot@packages.debian.org> +Uploaders: + Ondřej Surý <ondrej@debian.org>, + Daniel Salzman <daniel.salzman@nic.cz>, + Daniel Kahn Gillmor <dkg@fifthhorseman.net>, + Robert Edmonds <edmonds@debian.org>, + Jakub Ružička <jakub.ruzicka@nic.cz>, +Build-Depends-Indep: + python3-setuptools, + python3-sphinx, + python3-sphinx-panels, +Build-Depends: + autoconf, + automake, + debhelper-compat (= 13), + dh-python, + libbpf-dev [!hurd-amd64 !hurd-i386 !alpha !arc !hppa !ia64 !loong64 !m68k !powerpc !sh4 !sparc64 !x32], + libcap-ng-dev [!hurd-amd64 !hurd-i386], + libedit-dev, + libfstrm-dev, + libgnutls28-dev, + libidn2-dev, + liblmdb-dev, + libmaxminddb-dev, + libmnl-dev [!hurd-amd64 !hurd-i386 !alpha !arc !hppa !ia64 !loong64 !m68k !powerpc !sh4 !sparc64 !x32], + libnghttp2-dev, + libngtcp2-crypto-gnutls-dev [!hurd-amd64 !hurd-i386 !alpha !arc !hppa !ia64 !loong64 !m68k !powerpc !sh4 !sparc64 !x32], + libngtcp2-dev [!hurd-amd64 !hurd-i386 !alpha !arc !hppa !ia64 !loong64 !m68k !powerpc !sh4 !sparc64 !x32], + libprotobuf-c-dev, + libsofthsm2 <!nocheck>, + libsystemd-dev [linux-any] | libsystemd-daemon-dev [linux-any], + libsystemd-dev [linux-any] | libsystemd-journal-dev [linux-any], + libtool, + liburcu-dev, + libxdp-dev [!hurd-amd64 !hurd-i386 !alpha !arc !hppa !ia64 !loong64 !m68k !powerpc !sh4 !sparc64 !x32], + pkg-config, + protobuf-c-compiler, + python3-all, +Standards-Version: 4.6.2 +Homepage: https://www.knot-dns.cz/ +Vcs-Browser: https://salsa.debian.org/dns-team/knot-dns +Vcs-Git: https://salsa.debian.org/dns-team/knot-dns.git +Rules-Requires-Root: no + +Package: knot +Architecture: any +Depends: + adduser, + libdnssec9 (= ${binary:Version}), + libknot14 (= ${binary:Version}), + libzscanner4 (= ${binary:Version}), + ${misc:Depends}, + ${shlibs:Depends}, +Pre-Depends: + ${misc:Pre-Depends}, +Breaks: + knot-dnsutils (<< 2.9.2-5), +Suggests: + systemd, +Description: Authoritative domain name server + Knot DNS is a fast, authoritative only, high performance, feature + full and open source name server. + . + Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ + registry and hence is well suited to run anything from the root + zone, the top-level domain, to many smaller standard domain names. + +Package: libknot14 +Architecture: any +Depends: + ${misc:Depends}, + ${shlibs:Depends}, +Section: libs +Description: Authoritative domain name server (shared library) + Knot DNS is a fast, authoritative only, high performance, feature + full and open source name server. + . + Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ + registry and hence is well suited to run anything from the root + zone, the top-level domain, to many smaller standard domain names. + . + This package provides libknot shared library used by Knot DNS and + Knot Resolver. + +Package: libzscanner4 +Architecture: any +Depends: + ${misc:Depends}, + ${shlibs:Depends}, +Section: libs +Description: DNS zone-parsing shared library from Knot DNS + Knot DNS is a fast, authoritative only, high performance, feature + full and open source name server. + . + Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ + registry and hence is well suited to run anything from the root + zone, the top-level domain, to many smaller standard domain names. + . + This package provides a fast zone parser shared library used by Knot + DNS and Knot Resolver. + +Package: libdnssec9 +Architecture: any +Depends: + ${misc:Depends}, + ${shlibs:Depends}, +Section: libs +Description: DNSSEC shared library from Knot DNS + Knot DNS is a fast, authoritative only, high performance, feature + full and open source name server. + . + Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ + registry and hence is well suited to run anything from the root + zone, the top-level domain, to many smaller standard domain names. + . + This package provides common DNSSEC shared library used by Knot DNS + and Knot Resolver. + +Package: libknot-dev +Architecture: any +Depends: + libdnssec9 (= ${binary:Version}), + libgnutls28-dev, + libknot14 (= ${binary:Version}), + libzscanner4 (= ${binary:Version}), + ${misc:Depends}, +Section: libdevel +Description: Knot DNS shared library development files + Knot DNS is a fast, authoritative only, high performance, feature + full and open source name server. + . + Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ + registry and hence is well suited to run anything from the root + zone, the top-level domain, to many smaller standard domain names. + . + This package provides development files for internal common shared + libraries. + +Package: knot-dnsutils +Architecture: any +Depends: + libdnssec9 (= ${binary:Version}), + libknot14 (= ${binary:Version}), + libzscanner4 (= ${binary:Version}), + ${misc:Depends}, + ${shlibs:Depends}, +Breaks: + knot (<< 2.9.2-5), +Replaces: + knot (<< 2.9.2-5), +Description: Clients provided with Knot DNS (kdig, knsupdate, kxdpgun) + Knot DNS is a fast, authoritative only, high performance, feature + full and open source name server. + . + Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ + registry and hence is well suited to run anything from the root + zone, the top-level domain, to many smaller standard domain names. + . + This package delivers various client programs related to DNS that are + derived from the Knot DNS source tree. + . + - kdig - query a DNS server in various ways + - knsupdate - perform dynamic updates (See RFC2136) + - kxdpgun - send a DNS query stream over UDP to a DNS server + . + Those clients were designed to be 1:1 compatible with BIND dnsutils, + but they provide some enhancements, which are documented in respective + manpages. + . + WARNING: knslookup is not provided as it is considered obsolete. + +Package: knot-dnssecutils +Architecture: any +Depends: + libdnssec9 (= ${binary:Version}), + libknot14 (= ${binary:Version}), + libzscanner4 (= ${binary:Version}), + ${misc:Depends}, + ${shlibs:Depends}, +Breaks: + knot (<< 3.2.0-1), + knot-dnsutils (<< 3.2.0-1), +Replaces: + knot (<< 3.2.0-1), + knot-dnsutils (<< 3.2.0-1), +Description: DNSSEC tools provided with Knot DNS (kzonecheck, kzonesign, knsec3hash) + Knot DNS is a fast, authoritative only, high performance, feature + full and open source name server. + . + Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ + registry and hence is well suited to run anything from the root + zone, the top-level domain, to many smaller standard domain names. + . + This package delivers various DNSSEC tools from Knot DNS. + . + - kzonecheck + - kzonesign + - knsec3hash + +Package: knot-host +Architecture: any +Depends: + libdnssec9 (= ${binary:Version}), + libknot14 (= ${binary:Version}), + libzscanner4 (= ${binary:Version}), + ${misc:Depends}, + ${shlibs:Depends}, +Description: Version of 'host' bundled with Knot DNS + Knot DNS is a fast, authoritative only, high performance, feature + full and open source name server. + . + Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ + registry and hence is well suited to run anything from the root + zone, the top-level domain, to many smaller standard domain names. + . + This package provides the 'host' program in the form that is bundled + with the Knot DNS. The 'host' command is designed to be 1:1 + compatible with BIND 9.x 'host' program. + +Package: knot-module-dnstap +Architecture: any +Depends: + knot (= ${binary:Version}), + ${misc:Depends}, + ${shlibs:Depends}, +Description: dnstap module for Knot DNS + Knot DNS is a fast, authoritative only, high performance, feature + full and open source name server. + . + Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ + registry and hence is well suited to run anything from the root + zone, the top-level domain, to many smaller standard domain names. + . + This package contains dnstap module for logging DNS traffic. + +Package: knot-module-geoip +Architecture: any +Depends: + knot (= ${binary:Version}), + ${misc:Depends}, + ${shlibs:Depends}, +Description: geoip module for Knot DNS + Knot DNS is a fast, authoritative only, high performance, feature + full and open source name server. + . + Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ + registry and hence is well suited to run anything from the root + zone, the top-level domain, to many smaller standard domain names. + . + This package contains geoip module for geography-based responses. + +Package: knot-doc +Architecture: all +Multi-Arch: foreign +Depends: + libjs-jquery, + libjs-sphinxdoc, + libjs-underscore, + ${misc:Depends}, +Section: doc +Description: Documentation for Knot DNS + Knot DNS is a fast, authoritative only, high performance, feature + full and open source name server. + . + Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ + registry and hence is well suited to run anything from the root + zone, the top-level domain, to many smaller standard domain names. + . + This package provides various documents that are useful for + maintaining a working Knot DNS installation. + +Package: knot-exporter +Architecture: all +Depends: + ${misc:Depends}, + ${python3:Depends}, +Section: python +Description: Prometheus exporter for Knot DNS + Knot DNS is a fast, authoritative only, high performance, feature + full and open source name server. + . + Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ + registry and hence is well suited to run anything from the root + zone, the top-level domain, to many smaller standard domain names. + . + This package provides Python Prometheus exporter for Knot DNS. + +Package: python3-libknot +Architecture: all +Depends: + ${misc:Depends}, + ${python3:Depends}, +Section: python +Description: Python bindings for libknot + Knot DNS is a fast, authoritative only, high performance, feature + full and open source name server. + . + Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ + registry and hence is well suited to run anything from the root + zone, the top-level domain, to many smaller standard domain names. + . + This package provides Python bindings for the libknot shared library. diff --git a/debian/copyright b/debian/copyright new file mode 100644 index 0000000..20c8b97 --- /dev/null +++ b/debian/copyright @@ -0,0 +1,179 @@ +Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ +Upstream-Name: Knot DNS +Upstream-Contact: knot-dns@labs.nic.cz +Source: https://secure.nic.cz/files/knot-dns/ + +Files: * +Copyright: 2011-2023 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz> +License: GPL-3+ + +Files: m4/* +Copyright: 2011-2022 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz> + 1996-2001, 2003-2015 Free Software Foundation, Inc. +License: GPL-3+ + +Files: install-sh +Copyright: 1994 X Consortium +License: MIT + +Files: debian/* distro/pkg/deb/* +Copyright: 2011-2023 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz> + 2011 Ondřej Surý <ondrej@debian.org> +License: GPL-3+ + +Files: tests/tap/* +Copyright: 2000-2001, 2004, 2006-2012 Russ Allbery <rra@stanford.edu> + 2006, 2007, 2008, 2013 The Board of Trustees of the Leland Stanford Junior University +License: MIT + +Files: tests/tap/files.* +Copyright: 2011-2019 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz> +License: GPL-3+ + +Files: src/contrib/dnstap/* +Copyright: 2014, Farsight Security, Inc. <software@farsightsecurity.com> + 2011-2022 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz> +License: GPL-3+ + +Files: src/contrib/libngtcp2/* +Copyright: 2016-2023 ngtcp2 contributors + 2012-2017 nghttp2 contributors +License: MIT + +Files: src/contrib/musl/* +Copyright: 2005-2020 Rich Felker, et al. +License: MIT + +Files: src/contrib/openbsd/siphash.* +Copyright: 2013 Andre Oppermann <andre@FreeBSD.org> +License: BSD-3-Clause + +Files: src/contrib/openbsd/strl* +Copyright: 1998 Todd C. Miller <Todd.Miller@courtesan.com> +License: 0BSD + +Files: src/contrib/proxyv2/* +Copyright: 2022 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz> + 2021 Fastly, Inc. +License: GPL-3+ + +Files: src/contrib/qp-trie/* +Copyright: 2011-2019 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz> + 2018 Tony Finch <dot@dotat.at> +License: GPL-3+ + +Files: src/contrib/ucw/* +Copyright: 2011-2022 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz> + 1997-2017 Martin Mares <mj@ucw.cz> + 2007 Pavel Charvat <pchar@ucw.cz> + 2012 Ondrej Filip <feela@network.cz> +License: LGPL-2.0 + +Files: src/contrib/ucw/heap.h +Copyright: 2011-2022 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz> +License: GPL-3+ + +Files: src/contrib/url-parser/* +Copyright: 2020 Igor Sysoev + 2020 Nginx, Inc. + 2020 Joyent, Inc. +License: MIT + +Files: src/contrib/vpool/* +Copyright: 2006, 2008 Alexey Vatchenko <av@bsdua.org> +License: 0BSD + +Files: tests-fuzz/main.c +Copyright: 2011-2019 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz> + 2017 Tim Ruehsen +License: MIT + +License: GPL-3+ + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + . + This program is distributed in the hope that it will be useful, but + WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + General Public License for more details. + . + You should have received a copy of the GNU General Public License + along with this program. If not, see <https://www.gnu.org/licenses/>. + . + On Debian systems, the full text of the GNU General Public License + version 3 can be found in the file `/usr/share/common-licenses/GPL-3'. + +License: LGPL-2.0 + This library is free software; you can redistribute it and/or + modify it under the terms of the GNU Library General Public + License as published by the Free Software Foundation; either + version 2 of the License, or (at your option) any later version. + . + This library is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Library General Public License for more details. + . + You should have received a copy of the GNU Library General Public + License along with this library; if not, write to the + Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, + Boston, MA 02110-1301, USA. + +License: 0BSD + Permission to use, copy, modify, and distribute this software for any + purpose with or without fee is hereby granted, provided that the above + copyright notice and this permission notice appear in all copies. + . + THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES + WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF + MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR + ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES + WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN + ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF + OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. + +License: BSD-3-Clause + Redistribution and use in source and binary forms, with or without modification, + are permitted provided that the following conditions are met: + 1. Redistributions of source code must retain the above copyright notice, this + list of conditions and the following disclaimer. + 2. Redistributions in binary form must reproduce the above copyright notice, + this list of conditions and the following disclaimer in the documentation + and/or other materials provided with the distribution. + 3. Neither the name of the copyright holder nor the names of its contributors + may be used to endorse or promote products derived from this software without + specific prior written permission. + . + THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND + ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED + WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. + IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, + INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, + BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, + DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF + LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE + OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED + OF THE POSSIBILITY OF SUCH DAMAGE. + +License: MIT + Permission is hereby granted, free of charge, to any person obtaining + a copy of this software and associated documentation files (the + "Software"), to deal in the Software without restriction, including + without limitation the rights to use, copy, modify, merge, publish, + distribute, sublicense, and/or sell copies of the Software, and to + permit persons to whom the Software is furnished to do so, subject to + the following conditions: + . + The above copyright notice and this permission notice shall be + included in all copies or substantial portions of the Software. + . + THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, + EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF + MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND + NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS + BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN + ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN + CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE + SOFTWARE. diff --git a/debian/cz.nic.knotd.conf b/debian/cz.nic.knotd.conf new file mode 100644 index 0000000..50af87a --- /dev/null +++ b/debian/cz.nic.knotd.conf @@ -0,0 +1,9 @@ +<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN" "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd"> +<busconfig> + <policy user="knot"> + <allow own="cz.nic.knotd" /> + </policy> + <policy context="default"> + <allow receive_sender="cz.nic.knotd" /> + </policy> +</busconfig> diff --git a/debian/docs b/debian/docs new file mode 100644 index 0000000..b43bf86 --- /dev/null +++ b/debian/docs @@ -0,0 +1 @@ +README.md diff --git a/debian/gbp.conf b/debian/gbp.conf new file mode 100644 index 0000000..346c603 --- /dev/null +++ b/debian/gbp.conf @@ -0,0 +1,30 @@ +[DEFAULT] +debian-branch = debian/master +pristine-tar = True +upstream-branch = upstream/3.3 +upstream-vcs-tag = v%(version)s + +[dch] +meta = 1 + +[import-orig] +filter = [ + 'configure', + '*/Makefile.in', + '*/*/Makefile.in', + '*/*/*/Makefile.in', + 'install-sh', + 'ltmain.sh', + 'm4/libtool.m4', + '/src/lib*/version.h', + 'INSTALL', + 'aclocal.m4', + 'ar-lib', + 'depcomp', + 'compile', + 'missing', + 'test-driver', + 'config.guess', + 'config.sub', + ] +filter-pristine-tar = False diff --git a/debian/knot-dnssecutils.install b/debian/knot-dnssecutils.install new file mode 100644 index 0000000..20009e8 --- /dev/null +++ b/debian/knot-dnssecutils.install @@ -0,0 +1,3 @@ +usr/bin/knsec3hash +usr/bin/kzonecheck +usr/bin/kzonesign diff --git a/debian/knot-dnssecutils.manpages b/debian/knot-dnssecutils.manpages new file mode 100644 index 0000000..913c4cb --- /dev/null +++ b/debian/knot-dnssecutils.manpages @@ -0,0 +1,3 @@ +usr/share/man/man1/knsec3hash.1 +usr/share/man/man1/kzonecheck.1 +usr/share/man/man1/kzonesign.1 diff --git a/debian/knot-dnsutils.install b/debian/knot-dnsutils.install new file mode 100644 index 0000000..e2f2a8a --- /dev/null +++ b/debian/knot-dnsutils.install @@ -0,0 +1,3 @@ +usr/bin/kdig +usr/bin/knsupdate +usr/sbin/kxdpgun diff --git a/debian/knot-dnsutils.manpages b/debian/knot-dnsutils.manpages new file mode 100644 index 0000000..67254d9 --- /dev/null +++ b/debian/knot-dnsutils.manpages @@ -0,0 +1,3 @@ +usr/share/man/man1/kdig.1 +usr/share/man/man1/knsupdate.1 +usr/share/man/man8/kxdpgun.8 diff --git a/debian/knot-doc.doc-base b/debian/knot-doc.doc-base new file mode 100644 index 0000000..10cbfae --- /dev/null +++ b/debian/knot-doc.doc-base @@ -0,0 +1,13 @@ +Document: knot +Title: Documentation for the Knot authoritative DNS server +Author: Knot DNS authors at CZ.NIC Labs (https://www.knot-dns.cz) +Abstract: Knot DNS is a high-performance open-source authoritative DNS server +Section: Network/Communication + +Format: HTML +Index: /usr/share/doc/knot-doc/index.html +Files: /usr/share/doc/knot-doc + +Format: Text +Index: /usr/share/doc/knot-doc/_sources/index.rst.txt +Files: /usr/share/doc/knot-doc/_sources/ diff --git a/debian/knot-doc.install b/debian/knot-doc.install new file mode 100644 index 0000000..c2a345d --- /dev/null +++ b/debian/knot-doc.install @@ -0,0 +1 @@ +usr/share/doc/knot/* /usr/share/doc/knot-doc/ diff --git a/debian/knot-doc.links b/debian/knot-doc.links new file mode 100644 index 0000000..1376b3a --- /dev/null +++ b/debian/knot-doc.links @@ -0,0 +1,5 @@ +usr/share/javascript/jquery/jquery.min.js usr/share/doc/knot-doc/_static/jquery.js +usr/share/javascript/sphinxdoc/1.0/doctools.js usr/share/doc/knot-doc/_static/doctools.js +usr/share/javascript/sphinxdoc/1.0/language_data.js usr/share/doc/knot-doc/_static/language_data.js +usr/share/javascript/sphinxdoc/1.0/searchtools.js usr/share/doc/knot-doc/_static/searchtools.js +usr/share/javascript/underscore/underscore.min.js usr/share/doc/knot-doc/_static/underscore.js diff --git a/debian/knot-exporter.install b/debian/knot-exporter.install new file mode 100644 index 0000000..4c2d5ed --- /dev/null +++ b/debian/knot-exporter.install @@ -0,0 +1,3 @@ +usr/lib/python3*/dist-packages/knot_exporter-*.egg-info +usr/lib/python3*/dist-packages/knot_exporter/*.py +usr/bin/knot-exporter /usr/sbin/knot-exporter diff --git a/debian/knot-host.install b/debian/knot-host.install new file mode 100644 index 0000000..51bacf0 --- /dev/null +++ b/debian/knot-host.install @@ -0,0 +1 @@ +usr/bin/khost diff --git a/debian/knot-host.manpages b/debian/knot-host.manpages new file mode 100644 index 0000000..4891e2c --- /dev/null +++ b/debian/knot-host.manpages @@ -0,0 +1 @@ +usr/share/man/man1/khost.1 diff --git a/debian/knot-module-dnstap.install b/debian/knot-module-dnstap.install new file mode 100644 index 0000000..983455e --- /dev/null +++ b/debian/knot-module-dnstap.install @@ -0,0 +1 @@ +usr/lib/*/knot/modules-*/dnstap.so diff --git a/debian/knot-module-geoip.install b/debian/knot-module-geoip.install new file mode 100644 index 0000000..16d87c3 --- /dev/null +++ b/debian/knot-module-geoip.install @@ -0,0 +1 @@ +usr/lib/*/knot/modules-*/geoip.so diff --git a/debian/knot.default b/debian/knot.default new file mode 100644 index 0000000..12d6cc5 --- /dev/null +++ b/debian/knot.default @@ -0,0 +1 @@ +KNOTD_ARGS="" diff --git a/debian/knot.dirs b/debian/knot.dirs new file mode 100644 index 0000000..6e937aa --- /dev/null +++ b/debian/knot.dirs @@ -0,0 +1 @@ +var/lib/knot diff --git a/debian/knot.init b/debian/knot.init new file mode 100644 index 0000000..3f8fcae --- /dev/null +++ b/debian/knot.init @@ -0,0 +1,149 @@ +#!/bin/sh +### BEGIN INIT INFO +# Provides: knot +# Required-Start: $network $local_fs $remote_fs $syslog +# Required-Stop: $remote_fs $syslog +# Default-Start: 2 3 4 5 +# Default-Stop: 0 1 6 +# Short-Description: authoritative domain name server +# Description: Knot DNS is a authoritative-only domain name server +### END INIT INFO + +# Author: Ondřej Surý <ondrej@debian.org> + +# PATH should only include /usr/* if it runs after the mountnfs.sh script +PATH=/sbin:/usr/sbin:/bin:/usr/bin +DESC="Knot DNS server" # Introduce a short description here +NAME=knotd # Introduce the short server's name here +DAEMON=/usr/sbin/$NAME # Introduce the server's location here +PIDFILE=/run/knot/knot.pid +SCRIPTNAME=/etc/init.d/knot +KNOTC=/usr/sbin/knotc +RUNDIR=/run/knot + +# Exit if the package is not installed +[ -x $DAEMON ] || exit 0 + +KNOTD_ARGS="" + +# Read configuration variable file if it is present +[ -r /etc/default/knot ] && . /etc/default/knot + +DAEMON_ARGS="-d $KNOTD_ARGS" + +# Define LSB log_* functions. +# Depend on sysvinit-utils (>= 2.96) to ensure that this file is present. +. /lib/lsb/init-functions + +# +# Function that starts the daemon/service +# +do_start() +{ + # Return + # 0 if daemon has been started + # 1 if daemon was already running + # 2 if daemon could not be started + + $KNOTC status >/dev/null 2>/dev/null \ + && return 1 + + start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON --test > /dev/null \ + || return 1 + start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -- \ + $DAEMON_ARGS \ + || return 2 +} + +# +# Function that stops the daemon/service +# +do_stop() +{ + # Return + # 0 if daemon has been stopped + # 1 if daemon was already stopped + # 2 if daemon could not be stopped + # other if a failure occurred + + $KNOTC status >/dev/null 2>/dev/null \ + || return 1 + + $KNOTC stop >/dev/null + RETVAL="$?" + [ $? = 1 ] && return 2 + + # Many daemons don't delete their pidfiles when they exit. + rm -f $PIDFILE + return 0 +} + +do_reload() { + $KNOTC reload >/dev/null + return $? +} + +do_mkrundir() { + mkdir -p $RUNDIR + chmod 0755 $RUNDIR + chown knot:knot $RUNDIR +} + +case "$1" in + start) + do_mkrundir + log_daemon_msg "Starting $DESC " "$NAME" + do_start + case "$?" in + 0|1) log_end_msg 0 ;; + 2) log_end_msg 1 ;; + esac + ;; + stop) + log_daemon_msg "Stopping $DESC" "$NAME" + do_stop + case "$?" in + 0|1) log_end_msg 0 ;; + 2) log_end_msg 1 ;; + esac + ;; + status) + STATUS=$($KNOTC status 2>&1 >/dev/null) + RETVAL=$? + if [ $RETVAL = 0 ]; then + log_success_msg "$NAME is running" + else + log_failure_msg "$NAME is not running ($STATUS)" + fi + exit $RETVAL + ;; + reload|force-reload) + log_daemon_msg "Reloading $DESC" "$NAME" + do_reload + log_end_msg $? + ;; + restart) + log_daemon_msg "Restarting $DESC" "$NAME" + do_stop + case "$?" in + 0|1) + do_start + case "$?" in + 0) log_end_msg 0 ;; + 1) log_end_msg 1 ;; # Old process is still running + *) log_end_msg 1 ;; # Failed to start + esac + ;; + *) + # Failed to stop + log_end_msg 1 + ;; + esac + ;; + *) + echo "Usage: $SCRIPTNAME {start|stop|status|restart|reload|force-reload}" >&2 + exit 3 + ;; +esac + +: diff --git a/debian/knot.install b/debian/knot.install new file mode 100644 index 0000000..5c716fc --- /dev/null +++ b/debian/knot.install @@ -0,0 +1,8 @@ +debian/cz.nic.knotd.conf usr/share/dbus-1/system.d/ +debian/ufw/knot etc/ufw/applications.d/ +etc/knot/knot.conf +usr/sbin/kcatalogprint +usr/sbin/keymgr +usr/sbin/kjournalprint +usr/sbin/knotc +usr/sbin/knotd diff --git a/debian/knot.manpages b/debian/knot.manpages new file mode 100644 index 0000000..5d23e9f --- /dev/null +++ b/debian/knot.manpages @@ -0,0 +1,6 @@ +usr/share/man/man5/knot.conf.5 +usr/share/man/man8/kcatalogprint.8 +usr/share/man/man8/keymgr.8 +usr/share/man/man8/kjournalprint.8 +usr/share/man/man8/knotc.8 +usr/share/man/man8/knotd.8 diff --git a/debian/knot.postinst b/debian/knot.postinst new file mode 100644 index 0000000..da747c8 --- /dev/null +++ b/debian/knot.postinst @@ -0,0 +1,16 @@ +#!/bin/sh +set -e + +if [ "$1" = "configure" ]; then + if ! getent passwd knot > /dev/null; then + adduser --quiet --system --group --no-create-home --home /var/lib/knot knot + fi + + dpkg-statoverride --list /var/lib/knot >/dev/null 2>&1 || dpkg-statoverride --update --add root knot 0770 /var/lib/knot + dpkg-statoverride --list /etc/knot/knot.conf >/dev/null 2>&1 || dpkg-statoverride --update --add root knot 0640 /etc/knot/knot.conf + dpkg-statoverride --list /etc/knot >/dev/null 2>&1 || dpkg-statoverride --update --add root knot 0750 /etc/knot +fi + +#DEBHELPER# + +exit 0 diff --git a/debian/knot.postrm b/debian/knot.postrm new file mode 100644 index 0000000..14b3d69 --- /dev/null +++ b/debian/knot.postrm @@ -0,0 +1,21 @@ +#!/bin/sh +set -e + +if test "$1" = "purge"; then + state_dir=/var/lib/knot + for db_name in "catalog" "confdb" "journal" "keys" "timers"; do + rm -rf $state_dir/$db_name >/dev/null 2>&1 || true + done + rmdir $state_dir >/dev/null 2>&1 || true + [ -e $state_dir/* ] && echo "Notice: there are still data in ${state_dir}, please check." + + dpkg-statoverride --remove /var/lib/knot >/dev/null 2>&1 || true + dpkg-statoverride --remove /etc/knot/knot.conf >/dev/null 2>&1 || true + dpkg-statoverride --remove /etc/knot >/dev/null 2>&1 || true + + deluser --quiet knot >/dev/null 2>&1 || true +fi + +#DEBHELPER# + +exit 0 diff --git a/debian/knot.service b/debian/knot.service new file mode 100644 index 0000000..54ab197 --- /dev/null +++ b/debian/knot.service @@ -0,0 +1,31 @@ +[Unit] +Description=Knot DNS server +Wants=network-online.target +After=network-online.target +Documentation=man:knotd(8) man:knot.conf(5) man:knotc(8) + +[Service] +EnvironmentFile=/etc/default/knot +Type=notify +User=knot +Group=knot +CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_SETPCAP +AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_SETPCAP +ExecStartPre=/usr/sbin/knotc conf-check +ExecStart=/usr/sbin/knotd -m "$KNOT_CONF_MAX_SIZE" $KNOTD_ARGS +ExecReload=/bin/kill -HUP $MAINPID +Restart=on-abort +LimitNOFILE=1048576 +TimeoutStopSec=300 +# Extend the systemd startup timeout by this value (seconds) for each zone +Environment="KNOT_ZONE_LOAD_TIMEOUT_SEC=180" +# Maximum size (MiB) of a configuration database +Environment="KNOT_CONF_MAX_SIZE=512" + +# Expected systemd >= v239 +RuntimeDirectory=knot +StateDirectory=knot +NoNewPrivileges=yes + +[Install] +WantedBy=multi-user.target diff --git a/debian/libdnssec9.install b/debian/libdnssec9.install new file mode 100644 index 0000000..17a9fe6 --- /dev/null +++ b/debian/libdnssec9.install @@ -0,0 +1 @@ +usr/lib/*/libdnssec.so.* diff --git a/debian/libdnssec9.symbols b/debian/libdnssec9.symbols new file mode 100644 index 0000000..c3ab2ed --- /dev/null +++ b/debian/libdnssec9.symbols @@ -0,0 +1,96 @@ +libdnssec.so.9 libdnssec9 #MINVER# +* Build-Depends-Package: libknot-dev + dnssec_algorithm_digest_support@Base 3.2.0 + dnssec_algorithm_key_size_check@Base 3.2.0 + dnssec_algorithm_key_size_default@Base 3.2.0 + dnssec_algorithm_key_size_range@Base 3.2.0 + dnssec_algorithm_key_support@Base 3.2.0 + dnssec_algorithm_reproducible@Base 3.2.0 + dnssec_binary_alloc@Base 3.2.0 + dnssec_binary_cmp@Base 3.2.0 + dnssec_binary_dup@Base 3.2.0 + dnssec_binary_free@Base 3.2.0 + dnssec_binary_from_base64@Base 3.2.0 + dnssec_binary_resize@Base 3.2.0 + dnssec_binary_to_base64@Base 3.2.0 + dnssec_crypto_cleanup@Base 3.2.0 + dnssec_crypto_init@Base 3.2.0 + dnssec_crypto_reinit@Base 3.2.0 + dnssec_digest@Base 3.2.0 + dnssec_digest_finish@Base 3.2.0 + dnssec_digest_init@Base 3.2.0 + dnssec_key_can_sign@Base 3.2.0 + dnssec_key_can_verify@Base 3.2.0 + dnssec_key_clear@Base 3.2.0 + dnssec_key_create_ds@Base 3.2.0 + dnssec_key_dup@Base 3.2.0 + dnssec_key_free@Base 3.2.0 + dnssec_key_get_algorithm@Base 3.2.0 + dnssec_key_get_dname@Base 3.2.0 + dnssec_key_get_flags@Base 3.2.0 + dnssec_key_get_keyid@Base 3.2.0 + dnssec_key_get_keytag@Base 3.2.0 + dnssec_key_get_protocol@Base 3.2.0 + dnssec_key_get_pubkey@Base 3.2.0 + dnssec_key_get_rdata@Base 3.2.0 + dnssec_key_get_size@Base 3.2.0 + dnssec_key_load_pkcs8@Base 3.2.0 + dnssec_key_new@Base 3.2.0 + dnssec_key_set_algorithm@Base 3.2.0 + dnssec_key_set_dname@Base 3.2.0 + dnssec_key_set_flags@Base 3.2.0 + dnssec_key_set_protocol@Base 3.2.0 + dnssec_key_set_pubkey@Base 3.2.0 + dnssec_key_set_rdata@Base 3.2.0 + dnssec_keyid_copy@Base 3.2.0 + dnssec_keyid_equal@Base 3.2.0 + dnssec_keyid_is_valid@Base 3.2.0 + dnssec_keyid_normalize@Base 3.2.0 + dnssec_keystore_close@Base 3.2.0 + dnssec_keystore_deinit@Base 3.2.0 + dnssec_keystore_generate@Base 3.2.0 + dnssec_keystore_get_private@Base 3.2.0 + dnssec_keystore_import@Base 3.2.0 + dnssec_keystore_init@Base 3.2.0 + dnssec_keystore_init_pkcs11@Base 3.2.0 + dnssec_keystore_init_pkcs8@Base 3.2.0 + dnssec_keystore_open@Base 3.2.0 + dnssec_keystore_remove@Base 3.2.0 + dnssec_keystore_set_private@Base 3.2.0 + dnssec_keytag@Base 3.2.0 + dnssec_nsec3_hash@Base 3.2.0 + dnssec_nsec3_hash_length@Base 3.2.0 + dnssec_nsec3_params_free@Base 3.2.0 + dnssec_nsec3_params_from_rdata@Base 3.2.0 + dnssec_nsec3_params_match@Base 3.2.0 + dnssec_nsec_bitmap_add@Base 3.2.0 + dnssec_nsec_bitmap_clear@Base 3.2.0 + dnssec_nsec_bitmap_contains@Base 3.2.0 + dnssec_nsec_bitmap_free@Base 3.2.0 + dnssec_nsec_bitmap_new@Base 3.2.0 + dnssec_nsec_bitmap_size@Base 3.2.0 + dnssec_nsec_bitmap_write@Base 3.2.0 + dnssec_pem_from_privkey@Base 3.2.0 + dnssec_pem_from_x509@Base 3.2.0 + dnssec_pem_to_privkey@Base 3.2.0 + dnssec_pem_to_x509@Base 3.2.0 + dnssec_random_binary@Base 3.2.0 + dnssec_random_buffer@Base 3.2.0 + dnssec_sign_add@Base 3.2.0 + dnssec_sign_free@Base 3.2.0 + dnssec_sign_init@Base 3.2.0 + dnssec_sign_new@Base 3.2.0 + dnssec_sign_verify@Base 3.2.0 + dnssec_sign_write@Base 3.2.0 + dnssec_strerror@Base 3.2.0 + dnssec_tsig_add@Base 3.2.0 + dnssec_tsig_algorithm_from_dname@Base 3.2.0 + dnssec_tsig_algorithm_from_name@Base 3.2.0 + dnssec_tsig_algorithm_size@Base 3.2.0 + dnssec_tsig_algorithm_to_dname@Base 3.2.0 + dnssec_tsig_algorithm_to_name@Base 3.2.0 + dnssec_tsig_free@Base 3.2.0 + dnssec_tsig_new@Base 3.2.0 + dnssec_tsig_optimal_key_size@Base 3.2.0 + dnssec_tsig_size@Base 3.2.0 + dnssec_tsig_write@Base 3.2.0 diff --git a/debian/libknot-dev.install b/debian/libknot-dev.install new file mode 100644 index 0000000..54f2635 --- /dev/null +++ b/debian/libknot-dev.install @@ -0,0 +1,4 @@ +usr/include/ +usr/lib/*/*.a +usr/lib/*/*.so +usr/lib/*/pkgconfig/* diff --git a/debian/libknot14.install b/debian/libknot14.install new file mode 100644 index 0000000..f9b9f93 --- /dev/null +++ b/debian/libknot14.install @@ -0,0 +1 @@ +usr/lib/*/libknot.so.* diff --git a/debian/libknot14.symbols b/debian/libknot14.symbols new file mode 100644 index 0000000..b6e7caf --- /dev/null +++ b/debian/libknot14.symbols @@ -0,0 +1,276 @@ +libknot.so.14 libknot14 #MINVER# +* Build-Depends-Package: libknot-dev + KNOT_DB_LMDB_DUPSORT@Base 3.3.0 + KNOT_DB_LMDB_INTEGERKEY@Base 3.3.0 + KNOT_DB_LMDB_MAPASYNC@Base 3.3.0 + KNOT_DB_LMDB_NOSYNC@Base 3.3.0 + KNOT_DB_LMDB_NOTLS@Base 3.3.0 + KNOT_DB_LMDB_RDONLY@Base 3.3.0 + KNOT_DB_LMDB_WRITEMAP@Base 3.3.0 + KNOT_DUMP_STYLE_DEFAULT@Base 3.3.0 + knot_ctl_accept@Base 3.3.0 + knot_ctl_alloc@Base 3.3.0 + knot_ctl_bind@Base 3.3.0 + knot_ctl_close@Base 3.3.0 + knot_ctl_connect@Base 3.3.0 + knot_ctl_free@Base 3.3.0 + knot_ctl_receive@Base 3.3.0 + knot_ctl_send@Base 3.3.0 + knot_ctl_set_timeout@Base 3.3.0 + knot_ctl_unbind@Base 3.3.0 + knot_db_lmdb_api@Base 3.3.0 + knot_db_lmdb_del_exact@Base 3.3.0 + knot_db_lmdb_get_mapsize@Base 3.3.0 + knot_db_lmdb_get_path@Base 3.3.0 + knot_db_lmdb_get_usage@Base 3.3.0 + knot_db_lmdb_iter_del@Base 3.3.0 + knot_db_lmdb_txn_begin@Base 3.3.0 + knot_db_trie_api@Base 3.3.0 + knot_dname_cmp@Base 3.3.0 + knot_dname_copy@Base 3.3.0 + knot_dname_copy_lower@Base 3.3.0 + knot_dname_free@Base 3.3.0 + knot_dname_from_str@Base 3.3.0 + knot_dname_in_bailiwick@Base 3.3.0 + knot_dname_is_case_equal@Base 3.3.0 + knot_dname_is_equal@Base 3.3.0 + knot_dname_labels@Base 3.3.0 + knot_dname_lf@Base 3.3.0 + knot_dname_matched_labels@Base 3.3.0 + knot_dname_prefixlen@Base 3.3.0 + knot_dname_realsize@Base 3.3.0 + knot_dname_replace_suffix@Base 3.3.0 + knot_dname_size@Base 3.3.0 + knot_dname_store@Base 3.3.0 + knot_dname_to_lower@Base 3.3.0 + knot_dname_to_str@Base 3.3.0 + knot_dname_to_wire@Base 3.3.0 + knot_dname_unpack@Base 3.3.0 + knot_dname_wire_check@Base 3.3.0 + knot_dnssec_alg_names@Base 3.3.0 + knot_edns_add_option@Base 3.3.0 + knot_edns_alignment_size@Base 3.3.0 + knot_edns_chain_parse@Base 3.3.0 + knot_edns_chain_size@Base 3.3.0 + knot_edns_chain_write@Base 3.3.0 + knot_edns_client_subnet_get_addr@Base 3.3.0 + knot_edns_client_subnet_parse@Base 3.3.0 + knot_edns_client_subnet_set_addr@Base 3.3.0 + knot_edns_client_subnet_size@Base 3.3.0 + knot_edns_client_subnet_write@Base 3.3.0 + knot_edns_cookie_client_check@Base 3.3.0 + knot_edns_cookie_client_generate@Base 3.3.0 + knot_edns_cookie_parse@Base 3.3.0 + knot_edns_cookie_server_check@Base 3.3.0 + knot_edns_cookie_server_generate@Base 3.3.0 + knot_edns_cookie_size@Base 3.3.0 + knot_edns_cookie_write@Base 3.3.0 + knot_edns_ede_names@Base 3.3.0 + knot_edns_get_ext_rcode@Base 3.3.0 + knot_edns_get_option@Base 3.3.0 + knot_edns_get_options@Base 3.3.0 + knot_edns_get_version@Base 3.3.0 + knot_edns_init@Base 3.3.0 + knot_edns_keepalive_parse@Base 3.3.0 + knot_edns_keepalive_size@Base 3.3.0 + knot_edns_keepalive_write@Base 3.3.0 + knot_edns_opt_names@Base 3.3.0 + knot_edns_reserve_option@Base 3.3.0 + knot_edns_set_ext_rcode@Base 3.3.0 + knot_edns_set_version@Base 3.3.0 + knot_error_from_libdnssec@Base 3.3.0 + knot_eth_mtu@Base 3.3.0 + knot_eth_name_from_addr@Base 3.3.0 + knot_eth_queues@Base 3.3.0 + knot_eth_rss@Base 3.3.0 + knot_eth_vlans@Base 3.3.0 + knot_eth_xdp_mode@Base 3.3.0 + knot_get_obsolete_rdata_descriptor@Base 3.3.0 + knot_get_rdata_descriptor@Base 3.3.0 + knot_naptr_header_size@Base 3.3.0 + knot_opcode_names@Base 3.3.0 + knot_opt_code_to_string@Base 3.3.0 + knot_pkt_begin@Base 3.3.0 + knot_pkt_clear@Base 3.3.0 + knot_pkt_copy@Base 3.3.0 + knot_pkt_ext_rcode@Base 3.3.0 + knot_pkt_ext_rcode_name@Base 3.3.0 + knot_pkt_free@Base 3.3.0 + knot_pkt_init_response@Base 3.3.0 + knot_pkt_new@Base 3.3.0 + knot_pkt_parse@Base 3.3.0 + knot_pkt_parse_question@Base 3.3.0 + knot_pkt_put_question@Base 3.3.0 + knot_pkt_put_rotate@Base 3.3.0 + knot_pkt_reclaim@Base 3.3.0 + knot_pkt_reserve@Base 3.3.0 + knot_probe_alloc@Base 3.3.0 + knot_probe_consume@Base 3.3.0 + knot_probe_data_set@Base 3.3.0 + knot_probe_fd@Base 3.3.0 + knot_probe_free@Base 3.3.0 + knot_probe_produce@Base 3.3.0 + knot_probe_set_consumer@Base 3.3.0 + knot_probe_set_producer@Base 3.3.0 + knot_probe_tcp_rtt@Base 3.3.0 + knot_quic_cleanup@Base 3.3.0 + knot_quic_client@Base 3.3.0 + knot_quic_conn_get_stream@Base 3.3.0 + knot_quic_conn_local_port@Base 3.3.0 + knot_quic_conn_new_stream@Base 3.3.0 + knot_quic_conn_next_timeout@Base 3.3.3 + knot_quic_conn_pin@Base 3.3.0 + knot_quic_conn_rtt@Base 3.3.0 + knot_quic_conn_stream_free@Base 3.3.0 + knot_quic_creds_cert@Base 3.3.0 + knot_quic_free_creds@Base 3.3.0 + knot_quic_handle@Base 3.3.0 + knot_quic_hanle_expiry@Base 3.3.3 + knot_quic_init_creds@Base 3.3.0 + knot_quic_init_creds_peer@Base 3.3.0 + knot_quic_send@Base 3.3.0 + knot_quic_session_available@Base 3.3.0 + knot_quic_session_load@Base 3.3.0 + knot_quic_session_save@Base 3.3.0 + knot_quic_stream_add_data@Base 3.3.0 + knot_quic_stream_get_process@Base 3.3.0 + knot_quic_table_free@Base 3.3.0 + knot_quic_table_new@Base 3.3.0 + knot_quic_table_rem@Base 3.3.0 + knot_quic_table_sweep@Base 3.3.0 + knot_rcode_names@Base 3.3.0 + knot_rdataset_add@Base 3.3.0 + knot_rdataset_at@Base 3.3.0 + knot_rdataset_clear@Base 3.3.0 + knot_rdataset_copy@Base 3.3.0 + knot_rdataset_eq@Base 3.3.0 + knot_rdataset_intersect@Base 3.3.0 + knot_rdataset_intersect2@Base 3.3.0 + knot_rdataset_member@Base 3.3.0 + knot_rdataset_merge@Base 3.3.0 + knot_rdataset_subset@Base 3.3.0 + knot_rdataset_subtract@Base 3.3.0 + knot_rrclass_from_string@Base 3.3.0 + knot_rrclass_to_string@Base 3.3.0 + knot_rrset_add_rdata@Base 3.3.0 + knot_rrset_clear@Base 3.3.0 + knot_rrset_copy@Base 3.3.0 + knot_rrset_equal@Base 3.3.0 + knot_rrset_free@Base 3.3.0 + knot_rrset_is_nsec3rel@Base 3.3.0 + knot_rrset_new@Base 3.3.0 + knot_rrset_rr_from_wire@Base 3.3.0 + knot_rrset_rr_to_canonical@Base 3.3.0 + knot_rrset_size@Base 3.3.0 + knot_rrset_to_wire_extra@Base 3.3.0 + knot_rrset_txt_dump@Base 3.3.0 + knot_rrset_txt_dump_data@Base 3.3.0 + knot_rrset_txt_dump_edns@Base 3.3.0 + knot_rrset_txt_dump_header@Base 3.3.0 + knot_rrtype_additional_needed@Base 3.3.0 + knot_rrtype_from_string@Base 3.3.0 + knot_rrtype_is_dnssec@Base 3.3.0 + knot_rrtype_is_metatype@Base 3.3.0 + knot_rrtype_should_be_lowercased@Base 3.3.0 + knot_rrtype_to_string@Base 3.3.0 + knot_strerror@Base 3.3.0 + knot_svcb_param_names@Base 3.3.0 + knot_tcp_cleanup@Base 3.3.0 + knot_tcp_inbufs_upd@Base 3.3.0 + knot_tcp_outbufs_ack@Base 3.3.0 + knot_tcp_outbufs_add@Base 3.3.0 + knot_tcp_outbufs_can_send@Base 3.3.0 + knot_tcp_outbufs_usage@Base 3.3.0 + knot_tcp_recv@Base 3.3.0 + knot_tcp_reply_data@Base 3.3.0 + knot_tcp_send@Base 3.3.0 + knot_tcp_sweep@Base 3.3.0 + knot_tcp_table_free@Base 3.3.0 + knot_tcp_table_new@Base 3.3.0 + knot_tsig_add@Base 3.3.0 + knot_tsig_append@Base 3.3.0 + knot_tsig_client_check@Base 3.3.0 + knot_tsig_client_check_next@Base 3.3.0 + knot_tsig_create_rdata@Base 3.3.0 + knot_tsig_key_copy@Base 3.3.0 + knot_tsig_key_deinit@Base 3.3.0 + knot_tsig_key_init@Base 3.3.0 + knot_tsig_key_init_file@Base 3.3.0 + knot_tsig_key_init_str@Base 3.3.0 + knot_tsig_rcode_names@Base 3.3.0 + knot_tsig_rdata_alg@Base 3.3.0 + knot_tsig_rdata_alg_name@Base 3.3.0 + knot_tsig_rdata_error@Base 3.3.0 + knot_tsig_rdata_fudge@Base 3.3.0 + knot_tsig_rdata_is_ok@Base 3.3.0 + knot_tsig_rdata_mac@Base 3.3.0 + knot_tsig_rdata_mac_length@Base 3.3.0 + knot_tsig_rdata_orig_id@Base 3.3.0 + knot_tsig_rdata_other_data@Base 3.3.0 + knot_tsig_rdata_other_data_length@Base 3.3.0 + knot_tsig_rdata_set_fudge@Base 3.3.0 + knot_tsig_rdata_set_mac@Base 3.3.0 + knot_tsig_rdata_set_orig_id@Base 3.3.0 + knot_tsig_rdata_set_other_data@Base 3.3.0 + knot_tsig_rdata_set_time_signed@Base 3.3.0 + knot_tsig_rdata_time_signed@Base 3.3.0 + knot_tsig_rdata_tsig_timers_length@Base 3.3.0 + knot_tsig_rdata_tsig_variables_length@Base 3.3.0 + knot_tsig_server_check@Base 3.3.0 + knot_tsig_sign@Base 3.3.0 + knot_tsig_sign_next@Base 3.3.0 + knot_tsig_wire_maxsize@Base 3.3.0 + knot_tsig_wire_size@Base 3.3.0 + knot_xdp_deinit@Base 3.3.0 + knot_xdp_init@Base 3.3.0 + knot_xdp_recv@Base 3.3.0 + knot_xdp_recv_finish@Base 3.3.0 + knot_xdp_reply_alloc@Base 3.3.0 + knot_xdp_send@Base 3.3.0 + knot_xdp_send_alloc@Base 3.3.0 + knot_xdp_send_finish@Base 3.3.0 + knot_xdp_send_free@Base 3.3.0 + knot_xdp_send_prepare@Base 3.3.0 + knot_xdp_socket_info@Base 3.3.0 + knot_xdp_socket_fd@Base 3.3.0 + yp_addr@Base 3.3.0 + yp_addr_noport@Base 3.3.0 + yp_addr_noport_to_bin@Base 3.3.0 + yp_addr_noport_to_txt@Base 3.3.0 + yp_addr_range_to_bin@Base 3.3.0 + yp_addr_range_to_txt@Base 3.3.0 + yp_addr_to_bin@Base 3.3.0 + yp_addr_to_txt@Base 3.3.0 + yp_base64_to_bin@Base 3.3.0 + yp_base64_to_txt@Base 3.3.0 + yp_bool_to_bin@Base 3.3.0 + yp_bool_to_txt@Base 3.3.0 + yp_deinit@Base 3.3.0 + yp_dname_to_bin@Base 3.3.0 + yp_dname_to_txt@Base 3.3.0 + yp_format_id@Base 3.3.0 + yp_format_key0@Base 3.3.0 + yp_format_key1@Base 3.3.0 + yp_hex_to_bin@Base 3.3.0 + yp_hex_to_txt@Base 3.3.0 + yp_init@Base 3.3.0 + yp_int_to_bin@Base 3.3.0 + yp_int_to_txt@Base 3.3.0 + yp_item_to_bin@Base 3.3.0 + yp_item_to_txt@Base 3.3.0 + yp_option_to_bin@Base 3.3.0 + yp_option_to_txt@Base 3.3.0 + yp_parse@Base 3.3.0 + yp_schema_check_deinit@Base 3.3.0 + yp_schema_check_init@Base 3.3.0 + yp_schema_check_parser@Base 3.3.0 + yp_schema_check_str@Base 3.3.0 + yp_schema_copy@Base 3.3.0 + yp_schema_find@Base 3.3.0 + yp_schema_free@Base 3.3.0 + yp_schema_merge@Base 3.3.0 + yp_schema_purge_dynamic@Base 3.3.0 + yp_set_input_file@Base 3.3.0 + yp_set_input_string@Base 3.3.0 + yp_str_to_bin@Base 3.3.0 + yp_str_to_txt@Base 3.3.0 diff --git a/debian/libknot14.symbols.alpha b/debian/libknot14.symbols.alpha new file mode 120000 index 0000000..d07ec80 --- /dev/null +++ b/debian/libknot14.symbols.alpha @@ -0,0 +1 @@ +libknot14.symbols.hurd-i386
\ No newline at end of file diff --git a/debian/libknot14.symbols.arc b/debian/libknot14.symbols.arc new file mode 120000 index 0000000..d07ec80 --- /dev/null +++ b/debian/libknot14.symbols.arc @@ -0,0 +1 @@ +libknot14.symbols.hurd-i386
\ No newline at end of file diff --git a/debian/libknot14.symbols.hppa b/debian/libknot14.symbols.hppa new file mode 120000 index 0000000..d07ec80 --- /dev/null +++ b/debian/libknot14.symbols.hppa @@ -0,0 +1 @@ +libknot14.symbols.hurd-i386
\ No newline at end of file diff --git a/debian/libknot14.symbols.hurd-amd64 b/debian/libknot14.symbols.hurd-amd64 new file mode 120000 index 0000000..d07ec80 --- /dev/null +++ b/debian/libknot14.symbols.hurd-amd64 @@ -0,0 +1 @@ +libknot14.symbols.hurd-i386
\ No newline at end of file diff --git a/debian/libknot14.symbols.hurd-i386 b/debian/libknot14.symbols.hurd-i386 new file mode 100644 index 0000000..09756e2 --- /dev/null +++ b/debian/libknot14.symbols.hurd-i386 @@ -0,0 +1,250 @@ +libknot.so.14 libknot14 #MINVER# + KNOT_DB_LMDB_DUPSORT@Base 3.3.0 + KNOT_DB_LMDB_INTEGERKEY@Base 3.3.0 + KNOT_DB_LMDB_MAPASYNC@Base 3.3.0 + KNOT_DB_LMDB_NOSYNC@Base 3.3.0 + KNOT_DB_LMDB_NOTLS@Base 3.3.0 + KNOT_DB_LMDB_RDONLY@Base 3.3.0 + KNOT_DB_LMDB_WRITEMAP@Base 3.3.0 + KNOT_DUMP_STYLE_DEFAULT@Base 3.3.0 + knot_ctl_accept@Base 3.3.0 + knot_ctl_alloc@Base 3.3.0 + knot_ctl_bind@Base 3.3.0 + knot_ctl_close@Base 3.3.0 + knot_ctl_connect@Base 3.3.0 + knot_ctl_free@Base 3.3.0 + knot_ctl_receive@Base 3.3.0 + knot_ctl_send@Base 3.3.0 + knot_ctl_set_timeout@Base 3.3.0 + knot_ctl_unbind@Base 3.3.0 + knot_db_lmdb_api@Base 3.3.0 + knot_db_lmdb_del_exact@Base 3.3.0 + knot_db_lmdb_get_mapsize@Base 3.3.0 + knot_db_lmdb_get_path@Base 3.3.0 + knot_db_lmdb_get_usage@Base 3.3.0 + knot_db_lmdb_iter_del@Base 3.3.0 + knot_db_lmdb_txn_begin@Base 3.3.0 + knot_db_trie_api@Base 3.3.0 + knot_dname_cmp@Base 3.3.0 + knot_dname_copy@Base 3.3.0 + knot_dname_copy_lower@Base 3.3.0 + knot_dname_free@Base 3.3.0 + knot_dname_from_str@Base 3.3.0 + knot_dname_in_bailiwick@Base 3.3.0 + knot_dname_is_case_equal@Base 3.3.0 + knot_dname_is_equal@Base 3.3.0 + knot_dname_labels@Base 3.3.0 + knot_dname_lf@Base 3.3.0 + knot_dname_matched_labels@Base 3.3.0 + knot_dname_prefixlen@Base 3.3.0 + knot_dname_realsize@Base 3.3.0 + knot_dname_replace_suffix@Base 3.3.0 + knot_dname_size@Base 3.3.0 + knot_dname_store@Base 3.3.0 + knot_dname_to_lower@Base 3.3.0 + knot_dname_to_str@Base 3.3.0 + knot_dname_to_wire@Base 3.3.0 + knot_dname_unpack@Base 3.3.0 + knot_dname_wire_check@Base 3.3.0 + knot_dnssec_alg_names@Base 3.3.0 + knot_edns_add_option@Base 3.3.0 + knot_edns_alignment_size@Base 3.3.0 + knot_edns_chain_parse@Base 3.3.0 + knot_edns_chain_size@Base 3.3.0 + knot_edns_chain_write@Base 3.3.0 + knot_edns_client_subnet_get_addr@Base 3.3.0 + knot_edns_client_subnet_parse@Base 3.3.0 + knot_edns_client_subnet_set_addr@Base 3.3.0 + knot_edns_client_subnet_size@Base 3.3.0 + knot_edns_client_subnet_write@Base 3.3.0 + knot_edns_cookie_client_check@Base 3.3.0 + knot_edns_cookie_client_generate@Base 3.3.0 + knot_edns_cookie_parse@Base 3.3.0 + knot_edns_cookie_server_check@Base 3.3.0 + knot_edns_cookie_server_generate@Base 3.3.0 + knot_edns_cookie_size@Base 3.3.0 + knot_edns_cookie_write@Base 3.3.0 + knot_edns_ede_names@Base 3.3.0 + knot_edns_get_ext_rcode@Base 3.3.0 + knot_edns_get_option@Base 3.3.0 + knot_edns_get_options@Base 3.3.0 + knot_edns_get_version@Base 3.3.0 + knot_edns_init@Base 3.3.0 + knot_edns_keepalive_parse@Base 3.3.0 + knot_edns_keepalive_size@Base 3.3.0 + knot_edns_keepalive_write@Base 3.3.0 + knot_edns_opt_names@Base 3.3.0 + knot_edns_reserve_option@Base 3.3.0 + knot_edns_set_ext_rcode@Base 3.3.0 + knot_edns_set_version@Base 3.3.0 + knot_error_from_libdnssec@Base 3.3.0 + knot_get_obsolete_rdata_descriptor@Base 3.3.0 + knot_get_rdata_descriptor@Base 3.3.0 + knot_naptr_header_size@Base 3.3.0 + knot_opcode_names@Base 3.3.0 + knot_opt_code_to_string@Base 3.3.0 + knot_pkt_begin@Base 3.3.0 + knot_pkt_clear@Base 3.3.0 + knot_pkt_copy@Base 3.3.0 + knot_pkt_ext_rcode@Base 3.3.0 + knot_pkt_ext_rcode_name@Base 3.3.0 + knot_pkt_free@Base 3.3.0 + knot_pkt_init_response@Base 3.3.0 + knot_pkt_new@Base 3.3.0 + knot_pkt_parse@Base 3.3.0 + knot_pkt_parse_question@Base 3.3.0 + knot_pkt_put_question@Base 3.3.0 + knot_pkt_put_rotate@Base 3.3.0 + knot_pkt_reclaim@Base 3.3.0 + knot_pkt_reserve@Base 3.3.0 + knot_probe_alloc@Base 3.3.0 + knot_probe_consume@Base 3.3.0 + knot_probe_data_set@Base 3.3.0 + knot_probe_fd@Base 3.3.0 + knot_probe_free@Base 3.3.0 + knot_probe_produce@Base 3.3.0 + knot_probe_set_consumer@Base 3.3.0 + knot_probe_set_producer@Base 3.3.0 + knot_probe_tcp_rtt@Base 3.3.0 + knot_quic_cleanup@Base 3.3.0 + knot_quic_client@Base 3.3.0 + knot_quic_conn_get_stream@Base 3.3.0 + knot_quic_conn_local_port@Base 3.3.0 + knot_quic_conn_new_stream@Base 3.3.0 + knot_quic_conn_next_timeout@Base 3.3.3 + knot_quic_conn_pin@Base 3.3.0 + knot_quic_conn_rtt@Base 3.3.0 + knot_quic_conn_stream_free@Base 3.3.0 + knot_quic_creds_cert@Base 3.3.0 + knot_quic_free_creds@Base 3.3.0 + knot_quic_handle@Base 3.3.0 + knot_quic_hanle_expiry@Base 3.3.3 + knot_quic_init_creds@Base 3.3.0 + knot_quic_init_creds_peer@Base 3.3.0 + knot_quic_send@Base 3.3.0 + knot_quic_session_available@Base 3.3.0 + knot_quic_session_load@Base 3.3.0 + knot_quic_session_save@Base 3.3.0 + knot_quic_stream_add_data@Base 3.3.0 + knot_quic_stream_get_process@Base 3.3.0 + knot_quic_table_free@Base 3.3.0 + knot_quic_table_new@Base 3.3.0 + knot_quic_table_rem@Base 3.3.0 + knot_quic_table_sweep@Base 3.3.0 + knot_rcode_names@Base 3.3.0 + knot_rdataset_add@Base 3.3.0 + knot_rdataset_at@Base 3.3.0 + knot_rdataset_clear@Base 3.3.0 + knot_rdataset_copy@Base 3.3.0 + knot_rdataset_eq@Base 3.3.0 + knot_rdataset_intersect@Base 3.3.0 + knot_rdataset_intersect2@Base 3.3.0 + knot_rdataset_member@Base 3.3.0 + knot_rdataset_merge@Base 3.3.0 + knot_rdataset_subset@Base 3.3.0 + knot_rdataset_subtract@Base 3.3.0 + knot_rrclass_from_string@Base 3.3.0 + knot_rrclass_to_string@Base 3.3.0 + knot_rrset_add_rdata@Base 3.3.0 + knot_rrset_clear@Base 3.3.0 + knot_rrset_copy@Base 3.3.0 + knot_rrset_equal@Base 3.3.0 + knot_rrset_free@Base 3.3.0 + knot_rrset_is_nsec3rel@Base 3.3.0 + knot_rrset_new@Base 3.3.0 + knot_rrset_rr_from_wire@Base 3.3.0 + knot_rrset_rr_to_canonical@Base 3.3.0 + knot_rrset_size@Base 3.3.0 + knot_rrset_to_wire_extra@Base 3.3.0 + knot_rrset_txt_dump@Base 3.3.0 + knot_rrset_txt_dump_data@Base 3.3.0 + knot_rrset_txt_dump_edns@Base 3.3.0 + knot_rrset_txt_dump_header@Base 3.3.0 + knot_rrtype_additional_needed@Base 3.3.0 + knot_rrtype_from_string@Base 3.3.0 + knot_rrtype_is_dnssec@Base 3.3.0 + knot_rrtype_is_metatype@Base 3.3.0 + knot_rrtype_should_be_lowercased@Base 3.3.0 + knot_rrtype_to_string@Base 3.3.0 + knot_strerror@Base 3.3.0 + knot_svcb_param_names@Base 3.3.0 + knot_tcp_inbufs_upd@Base 3.3.0 + knot_tcp_outbufs_ack@Base 3.3.0 + knot_tcp_outbufs_add@Base 3.3.0 + knot_tcp_outbufs_can_send@Base 3.3.0 + knot_tcp_outbufs_usage@Base 3.3.0 + knot_tsig_add@Base 3.3.0 + knot_tsig_append@Base 3.3.0 + knot_tsig_client_check@Base 3.3.0 + knot_tsig_client_check_next@Base 3.3.0 + knot_tsig_create_rdata@Base 3.3.0 + knot_tsig_key_copy@Base 3.3.0 + knot_tsig_key_deinit@Base 3.3.0 + knot_tsig_key_init@Base 3.3.0 + knot_tsig_key_init_file@Base 3.3.0 + knot_tsig_key_init_str@Base 3.3.0 + knot_tsig_rcode_names@Base 3.3.0 + knot_tsig_rdata_alg@Base 3.3.0 + knot_tsig_rdata_alg_name@Base 3.3.0 + knot_tsig_rdata_error@Base 3.3.0 + knot_tsig_rdata_fudge@Base 3.3.0 + knot_tsig_rdata_is_ok@Base 3.3.0 + knot_tsig_rdata_mac@Base 3.3.0 + knot_tsig_rdata_mac_length@Base 3.3.0 + knot_tsig_rdata_orig_id@Base 3.3.0 + knot_tsig_rdata_other_data@Base 3.3.0 + knot_tsig_rdata_other_data_length@Base 3.3.0 + knot_tsig_rdata_set_fudge@Base 3.3.0 + knot_tsig_rdata_set_mac@Base 3.3.0 + knot_tsig_rdata_set_orig_id@Base 3.3.0 + knot_tsig_rdata_set_other_data@Base 3.3.0 + knot_tsig_rdata_set_time_signed@Base 3.3.0 + knot_tsig_rdata_time_signed@Base 3.3.0 + knot_tsig_rdata_tsig_timers_length@Base 3.3.0 + knot_tsig_rdata_tsig_variables_length@Base 3.3.0 + knot_tsig_server_check@Base 3.3.0 + knot_tsig_sign@Base 3.3.0 + knot_tsig_sign_next@Base 3.3.0 + knot_tsig_wire_maxsize@Base 3.3.0 + knot_tsig_wire_size@Base 3.3.0 + yp_addr@Base 3.3.0 + yp_addr_noport@Base 3.3.0 + yp_addr_noport_to_bin@Base 3.3.0 + yp_addr_noport_to_txt@Base 3.3.0 + yp_addr_range_to_bin@Base 3.3.0 + yp_addr_range_to_txt@Base 3.3.0 + yp_addr_to_bin@Base 3.3.0 + yp_addr_to_txt@Base 3.3.0 + yp_base64_to_bin@Base 3.3.0 + yp_base64_to_txt@Base 3.3.0 + yp_bool_to_bin@Base 3.3.0 + yp_bool_to_txt@Base 3.3.0 + yp_deinit@Base 3.3.0 + yp_dname_to_bin@Base 3.3.0 + yp_dname_to_txt@Base 3.3.0 + yp_format_id@Base 3.3.0 + yp_format_key0@Base 3.3.0 + yp_format_key1@Base 3.3.0 + yp_hex_to_bin@Base 3.3.0 + yp_hex_to_txt@Base 3.3.0 + yp_init@Base 3.3.0 + yp_int_to_bin@Base 3.3.0 + yp_int_to_txt@Base 3.3.0 + yp_item_to_bin@Base 3.3.0 + yp_item_to_txt@Base 3.3.0 + yp_option_to_bin@Base 3.3.0 + yp_option_to_txt@Base 3.3.0 + yp_parse@Base 3.3.0 + yp_schema_check_deinit@Base 3.3.0 + yp_schema_check_init@Base 3.3.0 + yp_schema_check_parser@Base 3.3.0 + yp_schema_check_str@Base 3.3.0 + yp_schema_copy@Base 3.3.0 + yp_schema_find@Base 3.3.0 + yp_schema_free@Base 3.3.0 + yp_schema_merge@Base 3.3.0 + yp_schema_purge_dynamic@Base 3.3.0 + yp_set_input_file@Base 3.3.0 + yp_set_input_string@Base 3.3.0 + yp_str_to_bin@Base 3.3.0 + yp_str_to_txt@Base 3.3.0 diff --git a/debian/libknot14.symbols.ia64 b/debian/libknot14.symbols.ia64 new file mode 120000 index 0000000..d07ec80 --- /dev/null +++ b/debian/libknot14.symbols.ia64 @@ -0,0 +1 @@ +libknot14.symbols.hurd-i386
\ No newline at end of file diff --git a/debian/libknot14.symbols.loong64 b/debian/libknot14.symbols.loong64 new file mode 120000 index 0000000..d07ec80 --- /dev/null +++ b/debian/libknot14.symbols.loong64 @@ -0,0 +1 @@ +libknot14.symbols.hurd-i386
\ No newline at end of file diff --git a/debian/libknot14.symbols.m68k b/debian/libknot14.symbols.m68k new file mode 120000 index 0000000..d07ec80 --- /dev/null +++ b/debian/libknot14.symbols.m68k @@ -0,0 +1 @@ +libknot14.symbols.hurd-i386
\ No newline at end of file diff --git a/debian/libknot14.symbols.powerpc b/debian/libknot14.symbols.powerpc new file mode 120000 index 0000000..d07ec80 --- /dev/null +++ b/debian/libknot14.symbols.powerpc @@ -0,0 +1 @@ +libknot14.symbols.hurd-i386
\ No newline at end of file diff --git a/debian/libknot14.symbols.sh4 b/debian/libknot14.symbols.sh4 new file mode 120000 index 0000000..d07ec80 --- /dev/null +++ b/debian/libknot14.symbols.sh4 @@ -0,0 +1 @@ +libknot14.symbols.hurd-i386
\ No newline at end of file diff --git a/debian/libknot14.symbols.sparc64 b/debian/libknot14.symbols.sparc64 new file mode 120000 index 0000000..d07ec80 --- /dev/null +++ b/debian/libknot14.symbols.sparc64 @@ -0,0 +1 @@ +libknot14.symbols.hurd-i386
\ No newline at end of file diff --git a/debian/libknot14.symbols.x32 b/debian/libknot14.symbols.x32 new file mode 120000 index 0000000..d07ec80 --- /dev/null +++ b/debian/libknot14.symbols.x32 @@ -0,0 +1 @@ +libknot14.symbols.hurd-i386
\ No newline at end of file diff --git a/debian/libzscanner4.install b/debian/libzscanner4.install new file mode 100644 index 0000000..a8dc226 --- /dev/null +++ b/debian/libzscanner4.install @@ -0,0 +1 @@ +usr/lib/*/libzscanner.so.* diff --git a/debian/libzscanner4.symbols b/debian/libzscanner4.symbols new file mode 100644 index 0000000..d918fb0 --- /dev/null +++ b/debian/libzscanner4.symbols @@ -0,0 +1,12 @@ +libzscanner.so.4 libzscanner4 #MINVER# +* Build-Depends-Package: libknot-dev + zs_deinit@Base 3.1.1 + zs_errorname@Base 3.1.1 + zs_init@Base 3.1.1 + zs_parse_all@Base 3.1.1 + zs_parse_record@Base 3.1.1 + zs_set_input_file@Base 3.1.1 + zs_set_input_string@Base 3.1.1 + zs_set_processing@Base 3.1.1 + zs_set_processing_comment@Base 3.1.1 + zs_strerror@Base 3.1.1 diff --git a/debian/not-installed b/debian/not-installed new file mode 100644 index 0000000..c928be1 --- /dev/null +++ b/debian/not-installed @@ -0,0 +1 @@ +etc/knot/example.com.zone diff --git a/debian/prepare-environment b/debian/prepare-environment new file mode 100755 index 0000000..7176f5e --- /dev/null +++ b/debian/prepare-environment @@ -0,0 +1,38 @@ +#!/bin/sh + +set -eu + +CONFFILE=${1:-/etc/knot/knot.conf} + +if [ ! -r $CONFFILE ]; then + echo "$CONFFILE doesn't exist or has wrong permissions." + exit 1; +fi + +KNOT_RUNDIR=$(sed -ne "s/#.*$//;s/.*rundir: \"*\([^\";]*\\).*/\\1/p;" $CONFFILE) +[ -z "$KNOT_RUNDIR" ] && KNOT_RUNDIR=/run/knot + +mkdir --parents "$KNOT_RUNDIR"; + +KNOT_USER=$(sed -ne "s/#.*$//;s/.*user:[ \"]*\\([^\\:\"]*\\)[ \"]*/\\1/p;" $CONFFILE) + +if [ -n "$KNOT_USER" ]; then + if ! getent passwd $KNOT_USER >/dev/null; then + echo "Configured user '$KNOT_USER' doesn't exist." + exit 1 + fi + + KNOT_GROUP=$(sed -ne "s/#.*$//;s/.*user:[ \"]*[^\\:\"]*\\:\\([^\"]*\\)[ \"]*/\\1/p;" $CONFFILE) + if [ -z "$KNOT_GROUP" ]; then + KNOT_GROUP=$(getent group $(getent passwd "$KNOT_USER" | cut -f 4 -d :) | cut -f 1 -d :) + fi + + if ! getent group $KNOT_GROUP >/dev/null; then + echo "Configured group '$KNOT_GROUP' doesn't exist." + exit 1 + fi + chown --silent "$KNOT_USER:$KNOT_GROUP" "$KNOT_RUNDIR" + chmod 775 "$KNOT_RUNDIR" +fi + +: diff --git a/debian/python3-libknot.install b/debian/python3-libknot.install new file mode 100644 index 0000000..ce92dec --- /dev/null +++ b/debian/python3-libknot.install @@ -0,0 +1,2 @@ +usr/lib/python3*/dist-packages/libknot-*.egg-info +usr/lib/python3*/dist-packages/libknot/*.py diff --git a/debian/rules b/debian/rules new file mode 100755 index 0000000..cdb3a7f --- /dev/null +++ b/debian/rules @@ -0,0 +1,119 @@ +#!/usr/bin/make -f + +export DEB_BUILD_MAINT_OPTIONS = hardening=+all +export DEB_CFLAGS_MAINT_APPEND = -Wall -DNDEBUG + +export DPKG_GENSYMBOLS_CHECK_LEVEL := 4 +export KNOT_SOFTHSM2_DSO = /usr/lib/softhsm/libsofthsm2.so +export KNOT_VERSION_FORMAT = release + +ifeq ($(DEB_HOST_ARCH),$(filter $(DEB_HOST_ARCH),riscv64)) + export DEB_LDFLAGS_MAINT_APPEND += -latomic +endif + +include /usr/share/dpkg/default.mk + +ifeq (maint,$(filter $(DEB_BUILD_OPTIONS),maint)) + FASTPARSER := --disable-fastparser +else + FASTPARSER := --enable-fastparser +endif + +# To make it build on sh4. +# See https://buildd.debian.org/status/fetch.php?pkg=knot&arch=sh4&ver=3.0.2-2&stamp=1607372581&raw=0 +ifeq ($(DEB_HOST_ARCH),$(filter $(DEB_HOST_ARCH),sh4)) + FASTPARSER := --disable-fastparser +else + FASTPARSER := --enable-fastparser +endif + +ifeq ($(DEB_HOST_ARCH),$(filter $(DEB_HOST_ARCH),hurd-i386)) + RECVMMSG:=--enable-recvmmsg=no +else + RECVMMSG:=--enable-recvmmsg=yes +endif + +ifeq ($(DEB_HOST_ARCH),$(filter $(DEB_HOST_ARCH),amd64 i386)) + RUN_TEST := +else + RUN_TEST := -timeout --kill-after=5s 5m +endif + +# MAJOR.MINOR version part +BASE_VERSION := $(shell echo $(DEB_VERSION) | sed 's/^\([^.]\+\.[^.]\+\).*/\1/') + +# pyproject is supported by knot but fails on second `pybuild --build` +# invocation due to bug in dh-python's plugin_pyproject.py wheel unpack +export PYBUILD_SYSTEM = distutils + + +%: + dh $@ \ + --exclude=.la --exclude=example.com.zone \ + --with python3 + +override_dh_auto_configure: + echo confirming architecture... + echo 'arch:' $(DEB_HOST_ARCH) + echo 'filtered arch:' $(filter $(DEB_HOST_ARCH),mips powerpc riscv64) + echo 'DEB_LDFLAGS_MAINT_APPEND:' $(DEB_LDFLAGS_MAINT_APPEND) + echo done + dh_auto_configure -- \ + --sysconfdir=/etc \ + --localstatedir=/var/lib \ + --libexecdir=/usr/lib/knot \ + --with-rundir=/run/knot \ + --with-moduledir=/usr/lib/$(DEB_HOST_MULTIARCH)/knot/modules-$(BASE_VERSION) \ + --with-storage=/var/lib/knot \ + --enable-systemd=auto \ + --enable-dnstap \ + --with-module-dnstap=shared \ + --with-module-geoip=shared \ + $(RECVMMSG) \ + $(FASTPARSER) \ + --disable-silent-rules \ + --enable-quic + +override_dh_auto_configure-indep: + pybuild --dir python/libknot --configure + pybuild --dir python/knot_exporter --configure + +override_dh_auto_build-indep: + dh_auto_build -- html + pybuild --dir python/libknot --build + pybuild --dir python/knot_exporter --build + +override_dh_auto_install-arch: + dh_auto_install -- install + # rename knot.sample.conf to knot.conf + mv $(CURDIR)/debian/tmp/etc/knot/knot.sample.conf $(CURDIR)/debian/tmp/etc/knot/knot.conf + # Some workarounds where XDP is unavailable + @if [ -f "$(CURDIR)/debian/tmp/usr/sbin/kxdpgun" ]; then \ + echo "XDP enabled"; \ + else \ + echo "XDP disabled"; \ + touch $(CURDIR)/debian/tmp/usr/share/man/man8/kxdpgun.8; \ + printf '#!/bin/sh\n\necho "kxdpgun not available"\n' > $(CURDIR)/debian/tmp/usr/sbin/kxdpgun; \ + fi + +override_dh_auto_install-indep: + dh_auto_install -- install-html + # rename knot.sample.conf to knot.conf + mv $(CURDIR)/debian/tmp/etc/knot/knot.sample.conf $(CURDIR)/debian/tmp/etc/knot/knot.conf + pybuild --dir python/libknot --install + pybuild --dir python/knot_exporter --install + rm -rf $(CURDIR)/debian/tmp/usr/lib/python*/dist-packages/libknot/__pycache__ + rm -rf $(CURDIR)/debian/tmp/usr/lib/python*/dist-packages/knot_exporter/__pycache__ + +override_dh_auto_test-indep: +override_dh_auto_test-arch: +ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS))) + $(RUN_TEST) dh_auto_test + $(MAKE) -C samples knot.sample.conf +endif + +override_dh_missing: + dh_missing --fail-missing + +override_dh_installchangelogs: + dh_installchangelogs NEWS diff --git a/debian/salsa-ci.yml b/debian/salsa-ci.yml new file mode 100644 index 0000000..33c3a64 --- /dev/null +++ b/debian/salsa-ci.yml @@ -0,0 +1,4 @@ +--- +include: + - https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/salsa-ci.yml + - https://salsa.debian.org/salsa-ci-team/pipeline/raw/master/pipeline-jobs.yml diff --git a/debian/source/format b/debian/source/format new file mode 100644 index 0000000..163aaf8 --- /dev/null +++ b/debian/source/format @@ -0,0 +1 @@ +3.0 (quilt) diff --git a/debian/tests/authoritative-server b/debian/tests/authoritative-server new file mode 100755 index 0000000..028dfbf --- /dev/null +++ b/debian/tests/authoritative-server @@ -0,0 +1,150 @@ +#!/bin/bash + +# Author: Daniel Kahn Gillmor <dkg@fifthhorseman.net> +# 2018-11-02 +# License: GPLv3+ + +# error on exit +set -e +# for handling jobspecs: +set -m + +if [ -z "$AUTOPKGTEST_ARTIFACTS" ]; then + d="$(mktemp -d)" + remove="$d" +else + d="$AUTOPKGTEST_ARTIFACTS" +fi +ip="${TESTIP:-127.$(( $RANDOM % 256 )).$(( $RANDOM % 256 )).$(( $RANDOM % 256 ))}" +port="${PORT:-8123}" +knotc="${KNOTC:-/usr/sbin/knotc}" +knotd="${KNOTD:-/usr/sbin/knotd}" +keymgr="${KEYMGR:-/usr/sbin/keymgr}" +kdig="${KDIG:-$(command -v kdig)}" +kzonecheck="${KZONECHECK:-$(command -v kzonecheck)}" +test_address="${TEST_ADDRESS:-192.0.2.199}" + +declare -a knot_conf="--config=$d/knot.conf" +declare -a knot_args=("$knot_conf" --verbose) + +printf "%s + %s roundtrip tests\n------------\n workdir: %s\n IP addr: %s\n knot args: %s\n" "$knotd" "$kdig" "$d" "$ip" "${knot_args[*]}" + +section() { + printf "\n%s\n" "$1" + sed 's/./-/g' <<<"$1" +} + +cleanup () { + section "cleaning up" + find "$d" -ls + "${knotc}" "${knot_args[@]}" stop + wait %1 + tail -n +1 -v "$d"/*.err + if [ "$remove" ]; then + printf "\ncleaning up working directory %s\n" "$remove" + rm -rf "$remove" + fi +} +trap cleanup EXIT + +section "set up config file and zonefile" + +user=$(id -nu) +group=$(id -ng) +cat > "$d/knot.conf" <<EOF +server: + rundir: "$d" + listen: $ip@$port + user: $user:$group +database: + storage: "$d" +template: + - id: default + storage: "$d" + file: "%s.zone" +zone: + - domain: example.net + dnssec-signing: on +EOF + +cat > "$d/example.net.zone" <<EOF +@ 1D IN SOA a.ns hostmaster 2018103100 3h 15m 1w 1d +@ 1D IN NS a.ns.example.net. +@ 1D IN NS b.ns.example.net. +a.ns 1D IN A 192.0.2.1 +b.ns 1D IN A 192.0.2.2 +test 1D IN A $test_address +EOF + +find "$d" -maxdepth 1 -type f -print0 | xargs -0 tail -n +1 -v + +mkdir -p "${d}" + +section "kzonecheck'ing zonefile" +"${kzonecheck}" -v "$d/example.net.zone" + +section "launching knot" +"${knotd}" "${knot_args[@]}" 2> "$d/knotd.err" & + +# FIXME: this is an annoying poll -- would be better if we could be +# alerted when the daemon is done setting up the socket, but i don't +# want to "--daemonize" if i can avoid it because i want the shell to +# remain in direct supervision of all its processes +tried=0 +while [ $tried -lt 10 ] ; do + if "${knotc}" "${knot_args[@]}" status 2>&1; then + break; + fi + sleep 0.5 + tried=$(( $tried + 1 )) +done +if [ $tried -ge 10 ]; then + printf "failed to use %s\n" "${knotc}" >&2 + exit 1 +fi + +section "querying knot" +"${kdig}" -p "${port}" @"${ip}" -t A test.example.net test2.example.net +answer="$("${kdig}" +short -p "${port}" @"${ip}" -t A test.example.net)" +if ! [ "$answer" = "$test_address" ]; then + printf "test.example.net mismatch!\nexpected: %s\n got: %s\n" "$test_address" "$answer" >&2 + exit 1 +fi +answer2="$("${kdig}" +short -p "${port}" @"${ip}" -t A test2.example.net)" +if ! [ "$answer2" = "" ]; then + printf "test2.example.net gave unexpected answer!\n got: %s\n" "$answer2" >&2 + exit 1 +fi + +section "modifying zone" +printf "test2 1D IN A $test_address\n" >>"$d/example.net.zone" +sed -i 's/^@ 1D IN SOA.*/@ 1D IN SOA a.ns hostmaster 2018110100 3h 15m 1w 1d/' "$d/example.net.zone" +"${knotc}" "${knot_args[@]}" reload +sleep 1 + +section "querying again" +"${kdig}" -p "${port}" @"${ip}" -t A test.example.net test2.example.net +answer="$("${kdig}" +short -p "${port}" @"${ip}" -t A test.example.net)" +if ! [ "$answer" = "$test_address" ]; then + printf "test.example.net mismatch!\nexpected: %s\n got: %s\n" "$test_address" "$answer" >&2 + exit 1 +fi +answer2="$("${kdig}" +short -p "${port}" @"${ip}" -t A test2.example.net)" +if ! [ "$answer2" = "$test_address" ]; then + printf "test2.example.net mismatch!\nexpected: %s\n got: %s\n" "$test_address" "$answer2" >&2 + exit 1 +fi + +section "querying DNSSEC" +"${kdig}" -p "${port}" @"${ip}" -t DNSKEY example.net. +dnssec +if ! "${kdig}" -p "${port}" @"${ip}" -t DNSKEY example.net. +dnssec 2>&1 | grep -q "RRSIG[[:space:]]*DNSKEY"; then + printf "DNSSEC query not successful" >&2 + exit 1 +fi + +section "listing keys with keymgr" +"${keymgr}" "$knot_conf" -e example.net. list +if ! "${keymgr}" "$knot_conf" -e example.net. list 2>&1 | grep -q "ksk=yes"; then + printf "keymgr did not list KSK as expected" >&2 + exit 1 +fi diff --git a/debian/tests/control b/debian/tests/control new file mode 100644 index 0000000..e8b3dcb --- /dev/null +++ b/debian/tests/control @@ -0,0 +1,13 @@ +Tests: kdig +Restrictions: skippable +Depends: + ca-certificates, + iputils-ping, + knot-dnsutils, + +Tests: authoritative-server +Depends: + findutils, + knot, + knot-dnsutils, + knot-dnssecutils, diff --git a/debian/tests/kdig b/debian/tests/kdig new file mode 100755 index 0000000..f1dbe5a --- /dev/null +++ b/debian/tests/kdig @@ -0,0 +1,14 @@ +#!/bin/bash + +set -e + +# Skip the test if no internet access +ping -c1 1.1.1.1 2>&1 || exit 77 + +expected=198.41.0.4 +answer=$(kdig +short +tls-ca @1.1.1.1 -q a.root-servers.net. -t A 2>&1 || true) + +if [ "$answer" != "$expected" ]; then + printf "expected: %s\ngot: %s\n" "$expected" "$answer" >&2 + kdig -d +tls-ca @1.1.1.1 -q a.root-servers.net. -t A +fi diff --git a/debian/ufw/knot b/debian/ufw/knot new file mode 100644 index 0000000..ee36916 --- /dev/null +++ b/debian/ufw/knot @@ -0,0 +1,4 @@ +[Knot] +title=Internet Domain Name Server +description=The Knot DNS implements an Internet domain name server. +ports=53 diff --git a/debian/upstream/signing-key.asc b/debian/upstream/signing-key.asc new file mode 100644 index 0000000..7935cee --- /dev/null +++ b/debian/upstream/signing-key.asc @@ -0,0 +1,51 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBFljlBcBEACuCSBlN1vTS9eEDqowZcLAAF8NytcTlRjXTLWMQtjU+fXkz9Vz +10n9TIFj9Kcec0p0+8F+SowybecwhmYoUzhKI7S9M1ziUmaIhFs2KvZ1GzigE/W5 +L448P/7pugh875e1tIrkrbbcIp6+SxaLbgvXlFl630ILZl/gbYOa/Wk21sLu4RjQ +Y39oHb0WTiwPnKhdMdwlnxm6HeWkHzlvI9N8tlDc6oVnUfqVI8gUyExLnEYjDpZf +orTVgHRq6RNyfTRZkh8zRsXSTnJlk/bVEDW5i/VgIQugzkgpuTGWlCstryi/MRhe +NxU1YEUenT69okb96QStfr1J00n8L4VAs8V5IuFUcSc8UqSpB+LgERRTMRFo9IrE +XAW/gEKlEVR+501BvJ0/Qggxbgz4PEnKNaxXmAnykJzot2VDKTzrr26a9LnrT0GW +om9rg89Ih876PA53vUXBB+FWP9QOFDcOfz3nMjCrLbMzhTsAzrNFXxchzLq+66CL +qsQQytDVFpLI+X++sKRTOHkq6vV1bAPjlljrannLnn1y/DvkOOkiHOdYyjmR7Dfk +vxgcWh/3Gx4J9gipxZITOr7LamEYgHfElY/UWCtc1Vjt8Xvgt4dofDpvSwY9YzgR +WxJKC5ewYdqTCI+zxL1f0fjkeiRYNi959UMMjgdcY7Zpi8oPPQmlyBw15QARAQAB +tCZEYW5pZWwgU2Fsem1hbiA8ZGFuaWVsLnNhbHptYW5AbmljLmN6PokCPQQTAQoA +JwUCWWOUFwIbAwUJA8JnAAULCQgHAwUVCgkICwUWAgMBAAIeAQIXgAAKCRAQu3r2 +/rvWq1+eEAClhOEK2MZOz+nwJSeX7iINKbw477Y+LSvYkKG81pve+xtblQEn7rI3 +cYnDrqlUb3bXdbMHujYrg1fPoccpCvf6d/JvlN6WXCE25R+GR6vxr6v7jycHdSOb +Fe4sTcwce6IViwiWiSizh4UCkz8285LjLcf3AnT2v6GJwHiZbPOeMQUNIRj6PEYL +SQsq0ZlqEx8LGKLTc5Ukrkoi4lN44SI1rzSwDPIqvlvrVnDXcDB8M7E2Ii51zU8/ +TVk920KeayUeCPxpmgQW3USI45NrE/jEgyodyxMGp5lg3OqzHT2wu9BVLWkQvTjF +fLfEsTay4K4kUSbYzbpS93b33J+I20rYLGBBYlTrN5417IgF6Bb8NzyrfVy1Wdqh +cggAEKX5EkOmZM8oduRxsHqiRLC/xKF8GqTo6t3GMS5i8RClNvmdq0WUkQUvld4b +OnXBCZ2QLbjV7sXjcr56ee+qdpiuRQjEidjHzpibcIBN8LVupVgXAZl9lsiBtoJX +OHsvSdU3VgGWnRGtzFjSHzl3TRPIsaVVqD7aCzQDfXDjrGlmhzgDfMwkqmBGgsku +8tSR3Ag0MRAouJFXiZrcM3XGeYVbHT6dt7UMAB27Xc5foc0kGRo5tzlK6rWG2sJI +lcQB7tKvwI/tE9lwJDjw+XNekEdIpcdcQ7mWa1COYkcYTre3oPmN+7kCDQRZY5QX +ARAA6RnxYG82/X+A49srgHR9yIxlHqSq6IhNn+iJQ5lpVpfeBItOG4NDu4Aq5X41 +pAJ3NKxsCPV62gEald/C7gJrTI5rag/87GYFFo6QRrwGsWVGORGs9G1pBF7ZZwhP +JwD3MeagGZNfWZzRxXefL1P3mrpO3etSEEwENHtCqEMP6x/JHh3SKonKAlL4xfj3 +F54aKj4upIcjxGBAJH8u66bN1GmYjstBzzbD4TWNTwfKgp15XxjrTgbThFy7CBoO +gcaApiYTPE7D5nB1+AyhGjnO3ZlNgy1ZIHVDFk6HEakaqKM9QlkJnZsB2+cTqXlV +0etmFQsedCg2sUier0hhIrEOOtGQbY1P+0vv+VRoaNym3ritl+70RG8WgrHNLMRH +VGeLRq3gOFnt+d/3h7meAKbORW/ZY30UpwthtlZYgciFzoDJCW8Be1i1X4toiUaM +kFh79jd7YTvZ87+P4DllC9MNsoq5cY/bHBNZYtXf7y6XqVqYo2IbFUR3VXKtzSN5 +eYm5YpFPczzmg1bNgl3i6WBcOF4EPEJEVjZ+u1r59NvfVLQ8XVh/QmLoG7x8oFcv +hWctMy17Vdm4qZjpSA+B1sQocehdra+xT+PWV0kcrYpsqwkYeFRQnJGqIupWHnot +qGOBNAyQWIcjK6K5y0CeioJZpNN5Oe5XloMXsYmgXsR+gTUAEQEAAYkCJQQYAQoA +DwUCWWOUFwIbDAUJA8JnAAAKCRAQu3r2/rvWq+IQD/9ikZ5MtdDOVLtULPqXXeP3 +6Oss2Ie4/4IQ7xkUZZ/Ujig0x1rW+d21o92VryH1s4K+nyCIW31rbtexK/0a54/w +Zyyjbqfh6Tgo9n3f5bMV9qyubb49cfTSKfgzoOkG8Xdc/TIO1IjWHy1NBDl8GWKJ +0QPYz78SCCkEFiVCAFBjuIQsoPqDKcZTs7k661w0A75ken88JJLgUgffZJRQK0i1 +dCw8kS4c2pqm24Q6d0AF5EdqXn2IFH82p49Pp5bRMY3LnibRL3Sq0xvXs7i5vY+o +JLuPAdomiGbdEbxcLytqQ2KitVdrGvrnZJxPs16m0uuTeM06krorDlgGBXFp5+Z9 +JbQpViHkVpLo+vf/GuT9WOWWH8gG0r14ZLVQTvCGXiAR4Aju7W5jPMPmVDJ+wMrD +cLta1Jv0U0+AnVe67mRXb0n5E/7kVshB3rfGzunPSlqT5kEiOXq6fJWB2l0lzCv0 +WtNuINmU9U3ap1oZBGSYl83vyuRUIlx61/tlnJvwseBL1FmASXOgfedCsxjHIlgF +SUeScLxnOSyap/4ePqZ0C76Nkvzx43SfM1LJUeCHwon0o+LZv2GlBmlEp6PbekRQ +Tz1hewLBbfAeXZRnwxvmkRqTP4DJCIVu2AE47+rbqVEjJZuEO4ORlkKoBdLOV3HN +xWbfbG7+n/h2cnUw3pqbHw== +=4CxJ +-----END PGP PUBLIC KEY BLOCK----- diff --git a/debian/watch b/debian/watch new file mode 100644 index 0000000..7cf9ea1 --- /dev/null +++ b/debian/watch @@ -0,0 +1,4 @@ +version=4 +opts=uversionmangle=s/-((alpha|beta|rc)\d*)$/~$1/,pgpsigurlmangle=s/$/.asc/,dversionmangle=s/\+hotfix// \ +https://secure.nic.cz/files/knot-dns/ \ +(?:|.*/)knot(?:[_\-]v?|)(\d\S*)\.(?:tar\.xz|txz|tar\.bz2|tbz2|tar\.gz|tgz) |