Merging upstream version 3.4.0.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

67 files changed, 599 insertions, 2943 deletions

diff --git a/distro/pkg/deb-nolibxdp/control b/distro/pkg/deb-nolibxdp/control
index ac5211b..30dc1fd 100644
--- a/distro/pkg/deb-nolibxdp/control
+++ b/distro/pkg/deb-nolibxdp/control
@@ -43,7 +43,7 @@ Architecture: any
 Depends:
  adduser,
  libdnssec9 (= ${binary:Version}),
- libknot14 (= ${binary:Version}),
+ libknot15 (= ${binary:Version}),
  libzscanner4 (= ${binary:Version}),
  ${misc:Depends},
  ${shlibs:Depends},
@@ -59,7 +59,7 @@ Description: Authoritative domain name server
  registry and hence is well suited to run anything from the root
  zone, the top-level domain, to many smaller standard domain names.
 
-Package: libknot14
+Package: libknot15
 Architecture: any
 Depends:
  ${misc:Depends},
@@ -115,10 +115,9 @@ Architecture: any
 Depends:
  libdnssec9 (= ${binary:Version}),
  libgnutls28-dev,
- libknot14 (= ${binary:Version}),
+ libknot15 (= ${binary:Version}),
  libzscanner4 (= ${binary:Version}),
  ${misc:Depends},
- ${shlibs:Depends},
 Section: libdevel
 Description: Knot DNS shared library development files
  Knot DNS is a fast, authoritative only, high performance, feature
@@ -134,7 +133,7 @@ Package: knot-dnsutils
 Architecture: any
 Depends:
  libdnssec9 (= ${binary:Version}),
- libknot14 (= ${binary:Version}),
+ libknot15 (= ${binary:Version}),
  libzscanner4 (= ${binary:Version}),
  ${misc:Depends},
  ${shlibs:Depends},
@@ -161,7 +160,7 @@ Package: knot-dnssecutils
 Architecture: any
 Depends:
  libdnssec9 (= ${binary:Version}),
- libknot14 (= ${binary:Version}),
+ libknot15 (= ${binary:Version}),
  libzscanner4 (= ${binary:Version}),
  ${misc:Depends},
  ${shlibs:Depends},
@@ -183,7 +182,7 @@ Package: knot-host
 Architecture: any
 Depends:
  libdnssec9 (= ${binary:Version}),
- libknot14 (= ${binary:Version}),
+ libknot15 (= ${binary:Version}),
  libzscanner4 (= ${binary:Version}),
  ${misc:Depends},
  ${shlibs:Depends},
@@ -269,7 +268,7 @@ Description: Prometheus exporter for Knot DNS
 Package: python3-libknot
 Architecture: all
 Depends:
- libknot14 (= ${binary:Version}),
+ libknot15 (= ${binary:Version}),
  ${misc:Depends},
  ${python3:Depends},
 Section: python
diff --git a/distro/pkg/deb-nolibxdp/knot.install b/distro/pkg/deb-nolibxdp/knot.install
index 5c716fc..a31224f 100644
--- a/distro/pkg/deb-nolibxdp/knot.install
+++ b/distro/pkg/deb-nolibxdp/knot.install
@@ -1,5 +1,4 @@
 debian/cz.nic.knotd.conf usr/share/dbus-1/system.d/
-debian/ufw/knot etc/ufw/applications.d/
 etc/knot/knot.conf
 usr/sbin/kcatalogprint
 usr/sbin/keymgr
diff --git a/distro/pkg/deb-nolibxdp/libknot14.symbols b/distro/pkg/deb-nolibxdp/libknot14.symbols
deleted file mode 100644
index 174d517..0000000
--- a/distro/pkg/deb-nolibxdp/libknot14.symbols
+++ /dev/null
@@ -1,277 +0,0 @@
-libknot.so.14 libknot14 #MINVER#
-* Build-Depends-Package: libknot-dev
- KNOT_DB_LMDB_DUPSORT@Base 3.3.0
- KNOT_DB_LMDB_INTEGERKEY@Base 3.3.0
- KNOT_DB_LMDB_MAPASYNC@Base 3.3.0
- KNOT_DB_LMDB_NOSYNC@Base 3.3.0
- KNOT_DB_LMDB_NOTLS@Base 3.3.0
- KNOT_DB_LMDB_RDONLY@Base 3.3.0
- KNOT_DB_LMDB_WRITEMAP@Base 3.3.0
- KNOT_DUMP_STYLE_DEFAULT@Base 3.3.0
- knot_ctl_accept@Base 3.3.0
- knot_ctl_alloc@Base 3.3.0
- knot_ctl_bind@Base 3.3.0
- knot_ctl_bind2@Base 3.3.6
- knot_ctl_close@Base 3.3.0
- knot_ctl_connect@Base 3.3.0
- knot_ctl_free@Base 3.3.0
- knot_ctl_receive@Base 3.3.0
- knot_ctl_send@Base 3.3.0
- knot_ctl_set_timeout@Base 3.3.0
- knot_ctl_unbind@Base 3.3.0
- knot_db_lmdb_api@Base 3.3.0
- knot_db_lmdb_del_exact@Base 3.3.0
- knot_db_lmdb_get_mapsize@Base 3.3.0
- knot_db_lmdb_get_path@Base 3.3.0
- knot_db_lmdb_get_usage@Base 3.3.0
- knot_db_lmdb_iter_del@Base 3.3.0
- knot_db_lmdb_txn_begin@Base 3.3.0
- knot_db_trie_api@Base 3.3.0
- knot_dname_cmp@Base 3.3.0
- knot_dname_copy@Base 3.3.0
- knot_dname_copy_lower@Base 3.3.0
- knot_dname_free@Base 3.3.0
- knot_dname_from_str@Base 3.3.0
- knot_dname_in_bailiwick@Base 3.3.0
- knot_dname_is_case_equal@Base 3.3.0
- knot_dname_is_equal@Base 3.3.0
- knot_dname_labels@Base 3.3.0
- knot_dname_lf@Base 3.3.0
- knot_dname_matched_labels@Base 3.3.0
- knot_dname_prefixlen@Base 3.3.0
- knot_dname_realsize@Base 3.3.0
- knot_dname_replace_suffix@Base 3.3.0
- knot_dname_size@Base 3.3.0
- knot_dname_store@Base 3.3.0
- knot_dname_to_lower@Base 3.3.0
- knot_dname_to_str@Base 3.3.0
- knot_dname_to_wire@Base 3.3.0
- knot_dname_unpack@Base 3.3.0
- knot_dname_wire_check@Base 3.3.0
- knot_dnssec_alg_names@Base 3.3.0
- knot_edns_add_option@Base 3.3.0
- knot_edns_alignment_size@Base 3.3.0
- knot_edns_chain_parse@Base 3.3.0
- knot_edns_chain_size@Base 3.3.0
- knot_edns_chain_write@Base 3.3.0
- knot_edns_client_subnet_get_addr@Base 3.3.0
- knot_edns_client_subnet_parse@Base 3.3.0
- knot_edns_client_subnet_set_addr@Base 3.3.0
- knot_edns_client_subnet_size@Base 3.3.0
- knot_edns_client_subnet_write@Base 3.3.0
- knot_edns_cookie_client_check@Base 3.3.0
- knot_edns_cookie_client_generate@Base 3.3.0
- knot_edns_cookie_parse@Base 3.3.0
- knot_edns_cookie_server_check@Base 3.3.0
- knot_edns_cookie_server_generate@Base 3.3.0
- knot_edns_cookie_size@Base 3.3.0
- knot_edns_cookie_write@Base 3.3.0
- knot_edns_ede_names@Base 3.3.0
- knot_edns_get_ext_rcode@Base 3.3.0
- knot_edns_get_option@Base 3.3.0
- knot_edns_get_options@Base 3.3.0
- knot_edns_get_version@Base 3.3.0
- knot_edns_init@Base 3.3.0
- knot_edns_keepalive_parse@Base 3.3.0
- knot_edns_keepalive_size@Base 3.3.0
- knot_edns_keepalive_write@Base 3.3.0
- knot_edns_opt_names@Base 3.3.0
- knot_edns_reserve_option@Base 3.3.0
- knot_edns_set_ext_rcode@Base 3.3.0
- knot_edns_set_version@Base 3.3.0
- knot_error_from_libdnssec@Base 3.3.0
- knot_eth_mtu@Base 3.3.0
- knot_eth_name_from_addr@Base 3.3.0
- knot_eth_queues@Base 3.3.0
- knot_eth_rss@Base 3.3.0
- knot_eth_vlans@Base 3.3.0
- knot_eth_xdp_mode@Base 3.3.0
- knot_get_obsolete_rdata_descriptor@Base 3.3.0
- knot_get_rdata_descriptor@Base 3.3.0
- knot_naptr_header_size@Base 3.3.0
- knot_opcode_names@Base 3.3.0
- knot_opt_code_to_string@Base 3.3.0
- knot_pkt_begin@Base 3.3.0
- knot_pkt_clear@Base 3.3.0
- knot_pkt_copy@Base 3.3.0
- knot_pkt_ext_rcode@Base 3.3.0
- knot_pkt_ext_rcode_name@Base 3.3.0
- knot_pkt_free@Base 3.3.0
- knot_pkt_init_response@Base 3.3.0
- knot_pkt_new@Base 3.3.0
- knot_pkt_parse@Base 3.3.0
- knot_pkt_parse_question@Base 3.3.0
- knot_pkt_put_question@Base 3.3.0
- knot_pkt_put_rotate@Base 3.3.0
- knot_pkt_reclaim@Base 3.3.0
- knot_pkt_reserve@Base 3.3.0
- knot_probe_alloc@Base 3.3.0
- knot_probe_consume@Base 3.3.0
- knot_probe_data_set@Base 3.3.0
- knot_probe_fd@Base 3.3.0
- knot_probe_free@Base 3.3.0
- knot_probe_produce@Base 3.3.0
- knot_probe_set_consumer@Base 3.3.0
- knot_probe_set_producer@Base 3.3.0
- knot_probe_tcp_rtt@Base 3.3.0
- knot_quic_cleanup@Base 3.3.0
- knot_quic_client@Base 3.3.0
- knot_quic_conn_get_stream@Base 3.3.0
- knot_quic_conn_local_port@Base 3.3.0
- knot_quic_conn_new_stream@Base 3.3.0
- knot_quic_conn_next_timeout@Base 3.3.3
- knot_quic_conn_pin@Base 3.3.0
- knot_quic_conn_rtt@Base 3.3.0
- knot_quic_conn_stream_free@Base 3.3.0
- knot_quic_creds_cert@Base 3.3.0
- knot_quic_free_creds@Base 3.3.0
- knot_quic_handle@Base 3.3.0
- knot_quic_hanle_expiry@Base 3.3.3
- knot_quic_init_creds@Base 3.3.0
- knot_quic_init_creds_peer@Base 3.3.0
- knot_quic_send@Base 3.3.0
- knot_quic_session_available@Base 3.3.0
- knot_quic_session_load@Base 3.3.0
- knot_quic_session_save@Base 3.3.0
- knot_quic_stream_add_data@Base 3.3.0
- knot_quic_stream_get_process@Base 3.3.0
- knot_quic_table_free@Base 3.3.0
- knot_quic_table_new@Base 3.3.0
- knot_quic_table_rem@Base 3.3.0
- knot_quic_table_sweep@Base 3.3.0
- knot_rcode_names@Base 3.3.0
- knot_rdataset_add@Base 3.3.0
- knot_rdataset_at@Base 3.3.0
- knot_rdataset_clear@Base 3.3.0
- knot_rdataset_copy@Base 3.3.0
- knot_rdataset_eq@Base 3.3.0
- knot_rdataset_intersect@Base 3.3.0
- knot_rdataset_intersect2@Base 3.3.0
- knot_rdataset_member@Base 3.3.0
- knot_rdataset_merge@Base 3.3.0
- knot_rdataset_subset@Base 3.3.0
- knot_rdataset_subtract@Base 3.3.0
- knot_rrclass_from_string@Base 3.3.0
- knot_rrclass_to_string@Base 3.3.0
- knot_rrset_add_rdata@Base 3.3.0
- knot_rrset_clear@Base 3.3.0
- knot_rrset_copy@Base 3.3.0
- knot_rrset_equal@Base 3.3.0
- knot_rrset_free@Base 3.3.0
- knot_rrset_is_nsec3rel@Base 3.3.0
- knot_rrset_new@Base 3.3.0
- knot_rrset_rr_from_wire@Base 3.3.0
- knot_rrset_rr_to_canonical@Base 3.3.0
- knot_rrset_size@Base 3.3.0
- knot_rrset_to_wire_extra@Base 3.3.0
- knot_rrset_txt_dump@Base 3.3.0
- knot_rrset_txt_dump_data@Base 3.3.0
- knot_rrset_txt_dump_edns@Base 3.3.0
- knot_rrset_txt_dump_header@Base 3.3.0
- knot_rrtype_additional_needed@Base 3.3.0
- knot_rrtype_from_string@Base 3.3.0
- knot_rrtype_is_dnssec@Base 3.3.0
- knot_rrtype_is_metatype@Base 3.3.0
- knot_rrtype_should_be_lowercased@Base 3.3.0
- knot_rrtype_to_string@Base 3.3.0
- knot_strerror@Base 3.3.0
- knot_svcb_param_names@Base 3.3.0
- knot_tcp_cleanup@Base 3.3.0
- knot_tcp_inbufs_upd@Base 3.3.0
- knot_tcp_outbufs_ack@Base 3.3.0
- knot_tcp_outbufs_add@Base 3.3.0
- knot_tcp_outbufs_can_send@Base 3.3.0
- knot_tcp_outbufs_usage@Base 3.3.0
- knot_tcp_recv@Base 3.3.0
- knot_tcp_reply_data@Base 3.3.0
- knot_tcp_send@Base 3.3.0
- knot_tcp_sweep@Base 3.3.0
- knot_tcp_table_free@Base 3.3.0
- knot_tcp_table_new@Base 3.3.0
- knot_tsig_add@Base 3.3.0
- knot_tsig_append@Base 3.3.0
- knot_tsig_client_check@Base 3.3.0
- knot_tsig_client_check_next@Base 3.3.0
- knot_tsig_create_rdata@Base 3.3.0
- knot_tsig_key_copy@Base 3.3.0
- knot_tsig_key_deinit@Base 3.3.0
- knot_tsig_key_init@Base 3.3.0
- knot_tsig_key_init_file@Base 3.3.0
- knot_tsig_key_init_str@Base 3.3.0
- knot_tsig_rcode_names@Base 3.3.0
- knot_tsig_rdata_alg@Base 3.3.0
- knot_tsig_rdata_alg_name@Base 3.3.0
- knot_tsig_rdata_error@Base 3.3.0
- knot_tsig_rdata_fudge@Base 3.3.0
- knot_tsig_rdata_is_ok@Base 3.3.0
- knot_tsig_rdata_mac@Base 3.3.0
- knot_tsig_rdata_mac_length@Base 3.3.0
- knot_tsig_rdata_orig_id@Base 3.3.0
- knot_tsig_rdata_other_data@Base 3.3.0
- knot_tsig_rdata_other_data_length@Base 3.3.0
- knot_tsig_rdata_set_fudge@Base 3.3.0
- knot_tsig_rdata_set_mac@Base 3.3.0
- knot_tsig_rdata_set_orig_id@Base 3.3.0
- knot_tsig_rdata_set_other_data@Base 3.3.0
- knot_tsig_rdata_set_time_signed@Base 3.3.0
- knot_tsig_rdata_time_signed@Base 3.3.0
- knot_tsig_rdata_tsig_timers_length@Base 3.3.0
- knot_tsig_rdata_tsig_variables_length@Base 3.3.0
- knot_tsig_server_check@Base 3.3.0
- knot_tsig_sign@Base 3.3.0
- knot_tsig_sign_next@Base 3.3.0
- knot_tsig_wire_maxsize@Base 3.3.0
- knot_tsig_wire_size@Base 3.3.0
- knot_xdp_deinit@Base 3.3.0
- knot_xdp_init@Base 3.3.0
- knot_xdp_recv@Base 3.3.0
- knot_xdp_recv_finish@Base 3.3.0
- knot_xdp_reply_alloc@Base 3.3.0
- knot_xdp_send@Base 3.3.0
- knot_xdp_send_alloc@Base 3.3.0
- knot_xdp_send_finish@Base 3.3.0
- knot_xdp_send_free@Base 3.3.0
- knot_xdp_send_prepare@Base 3.3.0
- knot_xdp_socket_info@Base 3.3.0
- knot_xdp_socket_fd@Base 3.3.0
- yp_addr@Base 3.3.0
- yp_addr_noport@Base 3.3.0
- yp_addr_noport_to_bin@Base 3.3.0
- yp_addr_noport_to_txt@Base 3.3.0
- yp_addr_range_to_bin@Base 3.3.0
- yp_addr_range_to_txt@Base 3.3.0
- yp_addr_to_bin@Base 3.3.0
- yp_addr_to_txt@Base 3.3.0
- yp_base64_to_bin@Base 3.3.0
- yp_base64_to_txt@Base 3.3.0
- yp_bool_to_bin@Base 3.3.0
- yp_bool_to_txt@Base 3.3.0
- yp_deinit@Base 3.3.0
- yp_dname_to_bin@Base 3.3.0
- yp_dname_to_txt@Base 3.3.0
- yp_format_id@Base 3.3.0
- yp_format_key0@Base 3.3.0
- yp_format_key1@Base 3.3.0
- yp_hex_to_bin@Base 3.3.0
- yp_hex_to_txt@Base 3.3.0
- yp_init@Base 3.3.0
- yp_int_to_bin@Base 3.3.0
- yp_int_to_txt@Base 3.3.0
- yp_item_to_bin@Base 3.3.0
- yp_item_to_txt@Base 3.3.0
- yp_option_to_bin@Base 3.3.0
- yp_option_to_txt@Base 3.3.0
- yp_parse@Base 3.3.0
- yp_schema_check_deinit@Base 3.3.0
- yp_schema_check_init@Base 3.3.0
- yp_schema_check_parser@Base 3.3.0
- yp_schema_check_str@Base 3.3.0
- yp_schema_copy@Base 3.3.0
- yp_schema_find@Base 3.3.0
- yp_schema_free@Base 3.3.0
- yp_schema_merge@Base 3.3.0
- yp_schema_purge_dynamic@Base 3.3.0
- yp_set_input_file@Base 3.3.0
- yp_set_input_string@Base 3.3.0
- yp_str_to_bin@Base 3.3.0
- yp_str_to_txt@Base 3.3.0
diff --git a/distro/pkg/deb-nolibxdp/libknot14.install b/distro/pkg/deb-nolibxdp/libknot15.install
index f9b9f93..f9b9f93 100644
--- a/distro/pkg/deb-nolibxdp/libknot14.install
+++ b/distro/pkg/deb-nolibxdp/libknot15.install
diff --git a/distro/pkg/deb-nolibxdp/libknot15.symbols b/distro/pkg/deb-nolibxdp/libknot15.symbols
new file mode 100644
index 0000000..77dd5b0
--- /dev/null
+++ b/distro/pkg/deb-nolibxdp/libknot15.symbols
@@ -0,0 +1,290 @@
+libknot.so.15 libknot15 #MINVER#
+* Build-Depends-Package: libknot-dev
+ KNOT_DB_LMDB_DUPSORT@Base 3.4.0
+ KNOT_DB_LMDB_INTEGERKEY@Base 3.4.0
+ KNOT_DB_LMDB_MAPASYNC@Base 3.4.0
+ KNOT_DB_LMDB_NOSYNC@Base 3.4.0
+ KNOT_DB_LMDB_NOTLS@Base 3.4.0
+ KNOT_DB_LMDB_RDONLY@Base 3.4.0
+ KNOT_DB_LMDB_WRITEMAP@Base 3.4.0
+ KNOT_DUMP_STYLE_DEFAULT@Base 3.4.0
+ knot_creds_cert@Base 3.4.0
+ knot_creds_free@Base 3.4.0
+ knot_creds_init@Base 3.4.0
+ knot_creds_init_peer@Base 3.4.0
+ knot_creds_update@Base 3.4.0
+ knot_ctl_accept@Base 3.4.0
+ knot_ctl_alloc@Base 3.4.0
+ knot_ctl_bind@Base 3.4.0
+ knot_ctl_clone@Base 3.4.0
+ knot_ctl_close@Base 3.4.0
+ knot_ctl_connect@Base 3.4.0
+ knot_ctl_free@Base 3.4.0
+ knot_ctl_receive@Base 3.4.0
+ knot_ctl_send@Base 3.4.0
+ knot_ctl_set_timeout@Base 3.4.0
+ knot_ctl_unbind@Base 3.4.0
+ knot_db_lmdb_api@Base 3.4.0
+ knot_db_lmdb_del_exact@Base 3.4.0
+ knot_db_lmdb_get_mapsize@Base 3.4.0
+ knot_db_lmdb_get_path@Base 3.4.0
+ knot_db_lmdb_get_usage@Base 3.4.0
+ knot_db_lmdb_iter_del@Base 3.4.0
+ knot_db_lmdb_txn_begin@Base 3.4.0
+ knot_db_trie_api@Base 3.4.0
+ knot_dname_cmp@Base 3.4.0
+ knot_dname_copy@Base 3.4.0
+ knot_dname_copy_lower@Base 3.4.0
+ knot_dname_free@Base 3.4.0
+ knot_dname_from_str@Base 3.4.0
+ knot_dname_in_bailiwick@Base 3.4.0
+ knot_dname_is_case_equal@Base 3.4.0
+ knot_dname_is_equal@Base 3.4.0
+ knot_dname_labels@Base 3.4.0
+ knot_dname_lf@Base 3.4.0
+ knot_dname_matched_labels@Base 3.4.0
+ knot_dname_prefixlen@Base 3.4.0
+ knot_dname_realsize@Base 3.4.0
+ knot_dname_replace_suffix@Base 3.4.0
+ knot_dname_size@Base 3.4.0
+ knot_dname_store@Base 3.4.0
+ knot_dname_to_lower@Base 3.4.0
+ knot_dname_to_str@Base 3.4.0
+ knot_dname_to_wire@Base 3.4.0
+ knot_dname_unpack@Base 3.4.0
+ knot_dname_wire_check@Base 3.4.0
+ knot_dnssec_alg_names@Base 3.4.0
+ knot_edns_add_option@Base 3.4.0
+ knot_edns_alignment_size@Base 3.4.0
+ knot_edns_chain_parse@Base 3.4.0
+ knot_edns_chain_size@Base 3.4.0
+ knot_edns_chain_write@Base 3.4.0
+ knot_edns_client_subnet_get_addr@Base 3.4.0
+ knot_edns_client_subnet_parse@Base 3.4.0
+ knot_edns_client_subnet_set_addr@Base 3.4.0
+ knot_edns_client_subnet_size@Base 3.4.0
+ knot_edns_client_subnet_write@Base 3.4.0
+ knot_edns_cookie_client_check@Base 3.4.0
+ knot_edns_cookie_client_generate@Base 3.4.0
+ knot_edns_cookie_parse@Base 3.4.0
+ knot_edns_cookie_server_check@Base 3.4.0
+ knot_edns_cookie_server_generate@Base 3.4.0
+ knot_edns_cookie_size@Base 3.4.0
+ knot_edns_cookie_write@Base 3.4.0
+ knot_edns_ede_names@Base 3.4.0
+ knot_edns_get_ext_rcode@Base 3.4.0
+ knot_edns_get_option@Base 3.4.0
+ knot_edns_get_options@Base 3.4.0
+ knot_edns_get_version@Base 3.4.0
+ knot_edns_init@Base 3.4.0
+ knot_edns_keepalive_parse@Base 3.4.0
+ knot_edns_keepalive_size@Base 3.4.0
+ knot_edns_keepalive_write@Base 3.4.0
+ knot_edns_opt_names@Base 3.4.0
+ knot_edns_reserve_option@Base 3.4.0
+ knot_edns_set_ext_rcode@Base 3.4.0
+ knot_edns_set_version@Base 3.4.0
+ knot_error_from_libdnssec@Base 3.4.0
+ knot_eth_mtu@Base 3.4.0
+ knot_eth_name_from_addr@Base 3.4.0
+ knot_eth_queues@Base 3.4.0
+ knot_eth_rss@Base 3.4.0
+ knot_eth_vlans@Base 3.4.0
+ knot_eth_xdp_mode@Base 3.4.0
+ knot_get_obsolete_rdata_descriptor@Base 3.4.0
+ knot_get_rdata_descriptor@Base 3.4.0
+ knot_naptr_header_size@Base 3.4.0
+ knot_opcode_names@Base 3.4.0
+ knot_opt_code_to_string@Base 3.4.0
+ knot_pkt_begin@Base 3.4.0
+ knot_pkt_clear@Base 3.4.0
+ knot_pkt_copy@Base 3.4.0
+ knot_pkt_ext_rcode@Base 3.4.0
+ knot_pkt_ext_rcode_name@Base 3.4.0
+ knot_pkt_free@Base 3.4.0
+ knot_pkt_init_response@Base 3.4.0
+ knot_pkt_new@Base 3.4.0
+ knot_pkt_parse@Base 3.4.0
+ knot_pkt_parse_question@Base 3.4.0
+ knot_pkt_put_question@Base 3.4.0
+ knot_pkt_put_rotate@Base 3.4.0
+ knot_pkt_reclaim@Base 3.4.0
+ knot_pkt_reserve@Base 3.4.0
+ knot_probe_alloc@Base 3.4.0
+ knot_probe_consume@Base 3.4.0
+ knot_probe_data_set@Base 3.4.0
+ knot_probe_fd@Base 3.4.0
+ knot_probe_free@Base 3.4.0
+ knot_probe_produce@Base 3.4.0
+ knot_probe_set_consumer@Base 3.4.0
+ knot_probe_set_producer@Base 3.4.0
+ knot_probe_tcp_rtt@Base 3.4.0
+ knot_quic_cleanup@Base 3.4.0
+ knot_quic_client@Base 3.4.0
+ knot_quic_conn_block@Base 3.4.0
+ knot_quic_conn_get_stream@Base 3.4.0
+ knot_quic_conn_local_port@Base 3.4.0
+ knot_quic_conn_new_stream@Base 3.4.0
+ knot_quic_conn_next_timeout@Base 3.4.0
+ knot_quic_conn_rtt@Base 3.4.0
+ knot_quic_conn_stream_free@Base 3.4.0
+ knot_quic_handle@Base 3.4.0
+ knot_quic_hanle_expiry@Base 3.4.0
+ knot_quic_send@Base 3.4.0
+ knot_quic_session_available@Base 3.4.0
+ knot_quic_session_load@Base 3.4.0
+ knot_quic_session_save@Base 3.4.0
+ knot_quic_stream_add_data@Base 3.4.0
+ knot_quic_stream_get_process@Base 3.4.0
+ knot_quic_table_free@Base 3.4.0
+ knot_quic_table_new@Base 3.4.0
+ knot_quic_table_rem@Base 3.4.0
+ knot_quic_table_sweep@Base 3.4.0
+ knot_rcode_names@Base 3.4.0
+ knot_rdataset_add@Base 3.4.0
+ knot_rdataset_at@Base 3.4.0
+ knot_rdataset_clear@Base 3.4.0
+ knot_rdataset_copy@Base 3.4.0
+ knot_rdataset_eq@Base 3.4.0
+ knot_rdataset_intersect@Base 3.4.0
+ knot_rdataset_intersect2@Base 3.4.0
+ knot_rdataset_member@Base 3.4.0
+ knot_rdataset_merge@Base 3.4.0
+ knot_rdataset_subset@Base 3.4.0
+ knot_rdataset_subtract@Base 3.4.0
+ knot_rrclass_from_string@Base 3.4.0
+ knot_rrclass_to_string@Base 3.4.0
+ knot_rrset_add_rdata@Base 3.4.0
+ knot_rrset_clear@Base 3.4.0
+ knot_rrset_copy@Base 3.4.0
+ knot_rrset_equal@Base 3.4.0
+ knot_rrset_free@Base 3.4.0
+ knot_rrset_is_nsec3rel@Base 3.4.0
+ knot_rrset_new@Base 3.4.0
+ knot_rrset_rr_from_wire@Base 3.4.0
+ knot_rrset_rr_to_canonical@Base 3.4.0
+ knot_rrset_size@Base 3.4.0
+ knot_rrset_to_wire_extra@Base 3.4.0
+ knot_rrset_txt_dump@Base 3.4.0
+ knot_rrset_txt_dump_data@Base 3.4.0
+ knot_rrset_txt_dump_edns@Base 3.4.0
+ knot_rrset_txt_dump_header@Base 3.4.0
+ knot_rrtype_additional_needed@Base 3.4.0
+ knot_rrtype_from_string@Base 3.4.0
+ knot_rrtype_is_dnssec@Base 3.4.0
+ knot_rrtype_is_metatype@Base 3.4.0
+ knot_rrtype_should_be_lowercased@Base 3.4.0
+ knot_rrtype_to_string@Base 3.4.0
+ knot_strerror@Base 3.4.0
+ knot_svcb_param_names@Base 3.4.0
+ knot_tcp_cleanup@Base 3.4.0
+ knot_tcp_inbufs_upd@Base 3.4.0
+ knot_tcp_outbufs_ack@Base 3.4.0
+ knot_tcp_outbufs_add@Base 3.4.0
+ knot_tcp_outbufs_can_send@Base 3.4.0
+ knot_tcp_outbufs_usage@Base 3.4.0
+ knot_tcp_recv@Base 3.4.0
+ knot_tcp_reply_data@Base 3.4.0
+ knot_tcp_send@Base 3.4.0
+ knot_tcp_sweep@Base 3.4.0
+ knot_tcp_table_free@Base 3.4.0
+ knot_tcp_table_new@Base 3.4.0
+ knot_tls_conn_block@Base 3.4.0
+ knot_tls_conn_del@Base 3.4.0
+ knot_tls_conn_new@Base 3.4.0
+ knot_tls_ctx_free@Base 3.4.0
+ knot_tls_ctx_new@Base 3.4.0
+ knot_tls_handshake@Base 3.4.0
+ knot_tls_pin@Base 3.4.0
+ knot_tls_pin_check@Base 3.4.0
+ knot_tls_recv_dns@Base 3.4.0
+ knot_tls_send_dns@Base 3.4.0
+ knot_tls_session@Base 3.4.0
+ knot_tsig_add@Base 3.4.0
+ knot_tsig_append@Base 3.4.0
+ knot_tsig_client_check@Base 3.4.0
+ knot_tsig_client_check_next@Base 3.4.0
+ knot_tsig_create_rdata@Base 3.4.0
+ knot_tsig_key_copy@Base 3.4.0
+ knot_tsig_key_deinit@Base 3.4.0
+ knot_tsig_key_init@Base 3.4.0
+ knot_tsig_key_init_file@Base 3.4.0
+ knot_tsig_key_init_str@Base 3.4.0
+ knot_tsig_rcode_names@Base 3.4.0
+ knot_tsig_rdata_alg@Base 3.4.0
+ knot_tsig_rdata_alg_name@Base 3.4.0
+ knot_tsig_rdata_error@Base 3.4.0
+ knot_tsig_rdata_fudge@Base 3.4.0
+ knot_tsig_rdata_is_ok@Base 3.4.0
+ knot_tsig_rdata_mac@Base 3.4.0
+ knot_tsig_rdata_mac_length@Base 3.4.0
+ knot_tsig_rdata_orig_id@Base 3.4.0
+ knot_tsig_rdata_other_data@Base 3.4.0
+ knot_tsig_rdata_other_data_length@Base 3.4.0
+ knot_tsig_rdata_set_fudge@Base 3.4.0
+ knot_tsig_rdata_set_mac@Base 3.4.0
+ knot_tsig_rdata_set_orig_id@Base 3.4.0
+ knot_tsig_rdata_set_other_data@Base 3.4.0
+ knot_tsig_rdata_set_time_signed@Base 3.4.0
+ knot_tsig_rdata_time_signed@Base 3.4.0
+ knot_tsig_rdata_tsig_timers_length@Base 3.4.0
+ knot_tsig_rdata_tsig_variables_length@Base 3.4.0
+ knot_tsig_server_check@Base 3.4.0
+ knot_tsig_sign@Base 3.4.0
+ knot_tsig_sign_next@Base 3.4.0
+ knot_tsig_wire_maxsize@Base 3.4.0
+ knot_tsig_wire_size@Base 3.4.0
+ knot_xdp_deinit@Base 3.4.0
+ knot_xdp_init@Base 3.4.0
+ knot_xdp_recv@Base 3.4.0
+ knot_xdp_recv_finish@Base 3.4.0
+ knot_xdp_reply_alloc@Base 3.4.0
+ knot_xdp_send@Base 3.4.0
+ knot_xdp_send_alloc@Base 3.4.0
+ knot_xdp_send_finish@Base 3.4.0
+ knot_xdp_send_free@Base 3.4.0
+ knot_xdp_send_prepare@Base 3.4.0
+ knot_xdp_socket_info@Base 3.4.0
+ knot_xdp_socket_stats@Base 3.4.0
+ knot_xdp_socket_fd@Base 3.4.0
+ yp_addr@Base 3.4.0
+ yp_addr_noport@Base 3.4.0
+ yp_addr_noport_to_bin@Base 3.4.0
+ yp_addr_noport_to_txt@Base 3.4.0
+ yp_addr_range_to_bin@Base 3.4.0
+ yp_addr_range_to_txt@Base 3.4.0
+ yp_addr_to_bin@Base 3.4.0
+ yp_addr_to_txt@Base 3.4.0
+ yp_base64_to_bin@Base 3.4.0
+ yp_base64_to_txt@Base 3.4.0
+ yp_bool_to_bin@Base 3.4.0
+ yp_bool_to_txt@Base 3.4.0
+ yp_deinit@Base 3.4.0
+ yp_dname_to_bin@Base 3.4.0
+ yp_dname_to_txt@Base 3.4.0
+ yp_format_id@Base 3.4.0
+ yp_format_key0@Base 3.4.0
+ yp_format_key1@Base 3.4.0
+ yp_hex_to_bin@Base 3.4.0
+ yp_hex_to_txt@Base 3.4.0
+ yp_init@Base 3.4.0
+ yp_int_to_bin@Base 3.4.0
+ yp_int_to_txt@Base 3.4.0
+ yp_item_to_bin@Base 3.4.0
+ yp_item_to_txt@Base 3.4.0
+ yp_option_to_bin@Base 3.4.0
+ yp_option_to_txt@Base 3.4.0
+ yp_parse@Base 3.4.0
+ yp_schema_check_deinit@Base 3.4.0
+ yp_schema_check_init@Base 3.4.0
+ yp_schema_check_parser@Base 3.4.0
+ yp_schema_check_str@Base 3.4.0
+ yp_schema_copy@Base 3.4.0
+ yp_schema_find@Base 3.4.0
+ yp_schema_free@Base 3.4.0
+ yp_schema_merge@Base 3.4.0
+ yp_schema_purge_dynamic@Base 3.4.0
+ yp_set_input_file@Base 3.4.0
+ yp_set_input_string@Base 3.4.0
+ yp_str_to_bin@Base 3.4.0
+ yp_str_to_txt@Base 3.4.0
diff --git a/distro/pkg/deb-nolibxdp/rules b/distro/pkg/deb-nolibxdp/rules
index 82cc34b..c5c81d0 100755
--- a/distro/pkg/deb-nolibxdp/rules
+++ b/distro/pkg/deb-nolibxdp/rules
@@ -36,11 +36,9 @@ BASE_VERSION := $(shell echo $(DEB_VERSION) | sed 's/^\([^.]\+\.[^.]\+\).*/\1/')
 # invocation due to bug in dh-python's plugin_pyproject.py wheel unpack
 export PYBUILD_SYSTEM = distutils
 
-
 %:
 	dh $@ \
-	 --exclude=.la --exclude=example.com.zone \
-	 --with python3
+	  --with python3
 
 override_dh_auto_configure:
 	dh_auto_configure -- \
@@ -95,7 +93,7 @@ ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS)))
 endif
 
 override_dh_missing:
-	dh_missing --fail-missing
+	dh_missing --exclude=.la --fail-missing
 
 override_dh_installchangelogs:
 	dh_installchangelogs NEWS
diff --git a/distro/pkg/deb-nolibxdp/ufw/knot b/distro/pkg/deb-nolibxdp/ufw/knot
deleted file mode 100644
index ee36916..0000000
--- a/distro/pkg/deb-nolibxdp/ufw/knot
+++ /dev/null
@@ -1,4 +0,0 @@
-[Knot]
-title=Internet Domain Name Server
-description=The Knot DNS implements an Internet domain name server.
-ports=53
diff --git a/distro/pkg/deb-noxdp/changelog b/distro/pkg/deb-noxdp/changelog
deleted file mode 100644
index 123f92b..0000000
--- a/distro/pkg/deb-noxdp/changelog
+++ /dev/null
@@ -1,6 +0,0 @@
-knot ({{ version }}-cznic.{{ release }}) unstable; urgency=medium
-
-  * upstream package
-  * see https://www.knot-dns.cz
-
- -- Knot DNS <knot-dns@labs.nic.cz>  {{ now }}
diff --git a/distro/pkg/deb-noxdp/clean b/distro/pkg/deb-noxdp/clean
deleted file mode 100644
index b2a9f3f..0000000
--- a/distro/pkg/deb-noxdp/clean
+++ /dev/null
@@ -1,2 +0,0 @@
-doc/modules
-.pybuild/
diff --git a/distro/pkg/deb-noxdp/compat b/distro/pkg/deb-noxdp/compat
deleted file mode 100644
index b4de394..0000000
--- a/distro/pkg/deb-noxdp/compat
+++ /dev/null
@@ -1 +0,0 @@
-11
diff --git a/distro/pkg/deb-noxdp/control b/distro/pkg/deb-noxdp/control
deleted file mode 100644
index be9dd3f..0000000
--- a/distro/pkg/deb-noxdp/control
+++ /dev/null
@@ -1,288 +0,0 @@
-Source: knot
-Section: net
-Priority: optional
-Maintainer: Knot DNS <knot-dns@labs.nic.cz>
-Uploaders:
- Jakub Ružička <jakub.ruzicka@nic.cz>,
- Daniel Salzman <daniel.salzman@nic.cz>,
-Build-Depends-Indep:
- python3-setuptools,
- python3-sphinx,
-Build-Depends:
- autoconf,
- automake,
- debhelper (>= 11),
- dh-python,
- libcap-ng-dev,
- libedit-dev,
- libfstrm-dev,
- libgnutls28-dev,
- libidn2-dev,
- liblmdb-dev,
- libmaxminddb-dev,
- libmnl-dev,
- libnghttp2-dev,
- libprotobuf-c-dev,
- libsofthsm2 <!nocheck>,
- libsystemd-dev [linux-any] | libsystemd-daemon-dev [linux-any],
- libsystemd-dev [linux-any] | libsystemd-journal-dev [linux-any],
- libtool,
- liburcu-dev,
- pkg-config,
- protobuf-c-compiler,
- python3-all,
-Standards-Version: 4.5.0
-Homepage: https://www.knot-dns.cz/
-Vcs-Browser: https://gitlab.nic.cz/knot/knot-dns
-Vcs-Git: https://gitlab.nic.cz/knot/knot-dns.git
-Rules-Requires-Root: no
-
-Package: knot
-Architecture: any
-Depends:
- adduser,
- libdnssec9 (= ${binary:Version}),
- libknot14 (= ${binary:Version}),
- libzscanner4 (= ${binary:Version}),
- lsb-base (>= 3.0-6),
- ${misc:Depends},
- ${shlibs:Depends},
-Pre-Depends:
- ${misc:Pre-Depends},
-Suggests:
- systemd,
-Description: Authoritative domain name server
- Knot DNS is a fast, authoritative only, high performance, feature
- full and open source name server.
- .
- Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
- registry and hence is well suited to run anything from the root
- zone, the top-level domain, to many smaller standard domain names.
-
-Package: libknot14
-Architecture: any
-Multi-Arch: same
-Depends:
- ${misc:Depends},
- ${shlibs:Depends},
-Section: libs
-Description: DNS shared library from Knot DNS
- Knot DNS is a fast, authoritative only, high performance, feature
- full and open source name server.
- .
- Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
- registry and hence is well suited to run anything from the root
- zone, the top-level domain, to many smaller standard domain names.
- .
- This package provides a DNS shared library used by Knot DNS and
- Knot Resolver.
-
-Package: libzscanner4
-Architecture: any
-Multi-Arch: same
-Depends:
- ${misc:Depends},
- ${shlibs:Depends},
-Section: libs
-Description: DNS zone-parsing shared library from Knot DNS
- Knot DNS is a fast, authoritative only, high performance, feature
- full and open source name server.
- .
- Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
- registry and hence is well suited to run anything from the root
- zone, the top-level domain, to many smaller standard domain names.
- .
- This package provides a fast zone parser shared library used by Knot
- DNS and Knot Resolver.
-
-Package: libdnssec9
-Architecture: any
-Multi-Arch: same
-Depends:
- ${misc:Depends},
- ${shlibs:Depends},
-Section: libs
-Description: DNSSEC shared library from Knot DNS
- Knot DNS is a fast, authoritative only, high performance, feature
- full and open source name server.
- .
- Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
- registry and hence is well suited to run anything from the root
- zone, the top-level domain, to many smaller standard domain names.
- .
- This package provides common DNSSEC shared library used by Knot DNS
- and Knot Resolver.
-
-Package: libknot-dev
-Architecture: any
-Depends:
- libdnssec9 (= ${binary:Version}),
- libgnutls28-dev,
- libknot14 (= ${binary:Version}),
- libzscanner4 (= ${binary:Version}),
- ${misc:Depends},
- ${shlibs:Depends},
-Section: libdevel
-Description: Knot DNS shared library development files
- Knot DNS is a fast, authoritative only, high performance, feature
- full and open source name server.
- .
- Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
- registry and hence is well suited to run anything from the root
- zone, the top-level domain, to many smaller standard domain names.
- .
- This package provides development files for shared libraries from Knot DNS.
-
-Package: knot-dnsutils
-Architecture: any
-Depends:
- libdnssec9 (= ${binary:Version}),
- libknot14 (= ${binary:Version}),
- libzscanner4 (= ${binary:Version}),
- ${misc:Depends},
- ${shlibs:Depends},
-Description: DNS clients provided with Knot DNS (kdig, knsupdate)
- Knot DNS is a fast, authoritative only, high performance, feature
- full and open source name server.
- .
- Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
- registry and hence is well suited to run anything from the root
- zone, the top-level domain, to many smaller standard domain names.
- .
- This package delivers various DNS client programs from Knot DNS.
- .
-  - kdig - query a DNS server in various ways
-  - knsupdate - perform dynamic updates (See RFC2136)
- .
- Those clients were designed to be almost 1:1 compatible with BIND dnsutils,
- but they provide some enhancements, which are documented.
- .
- WARNING: knslookup is not provided as it is considered obsolete.
-
-Package: knot-dnssecutils
-Architecture: any
-Depends:
- libdnssec9 (= ${binary:Version}),
- libknot14 (= ${binary:Version}),
- libzscanner4 (= ${binary:Version}),
- ${misc:Depends},
- ${shlibs:Depends},
-Description: DNSSEC tools provided with Knot DNS
- Knot DNS is a fast, authoritative only, high performance, feature
- full and open source name server.
- .
- Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
- registry and hence is well suited to run anything from the root
- zone, the top-level domain, to many smaller standard domain names.
- .
- This package delivers various DNSSEC tools from Knot DNS.
- .
-  - kzonecheck
-  - kzonesign
-  - knsec3hash
-
-Package: knot-host
-Architecture: any
-Depends:
- libdnssec9 (= ${binary:Version}),
- libknot14 (= ${binary:Version}),
- libzscanner4 (= ${binary:Version}),
- ${misc:Depends},
- ${shlibs:Depends},
-Description: Version of 'host' bundled with Knot DNS
- Knot DNS is a fast, authoritative only, high performance, feature
- full and open source name server.
- .
- Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
- registry and hence is well suited to run anything from the root
- zone, the top-level domain, to many smaller standard domain names.
- .
- This package provides the 'host' program from Knot DNS. This program is
- designed to be almost 1:1 compatible with BIND 9.x 'host' program.
-
-Package: knot-module-dnstap
-Architecture: any
-Multi-Arch: same
-Depends:
- knot (= ${binary:Version}),
- ${misc:Depends},
- ${shlibs:Depends},
-Description: dnstap module for Knot DNS
- Knot DNS is a fast, authoritative only, high performance, feature
- full and open source name server.
- .
- Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
- registry and hence is well suited to run anything from the root
- zone, the top-level domain, to many smaller standard domain names.
- .
- This package contains dnstap module for logging DNS traffic.
-
-Package: knot-module-geoip
-Architecture: any
-Multi-Arch: same
-Depends:
- knot (= ${binary:Version}),
- ${misc:Depends},
- ${shlibs:Depends},
-Description: geoip module for Knot DNS
- Knot DNS is a fast, authoritative only, high performance, feature
- full and open source name server.
- .
- Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
- registry and hence is well suited to run anything from the root
- zone, the top-level domain, to many smaller standard domain names.
- .
- This package contains geoip module for geography-based responses.
-
-Package: knot-doc
-Architecture: all
-Multi-Arch: foreign
-Depends:
- libjs-jquery,
- libjs-sphinxdoc,
- libjs-underscore,
- ${misc:Depends},
-Section: doc
-Description: Documentation for Knot DNS
- Knot DNS is a fast, authoritative only, high performance, feature
- full and open source name server.
- .
- Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
- registry and hence is well suited to run anything from the root
- zone, the top-level domain, to many smaller standard domain names.
- .
- This package provides various documents that are useful for
- maintaining a working Knot DNS installation.
-
-Package: knot-exporter
-Architecture: all
-Depends:
- ${misc:Depends},
- ${python3:Depends},
-Section: python
-Description: Prometheus exporter for Knot DNS
- Knot DNS is a fast, authoritative only, high performance, feature
- full and open source name server.
- .
- Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
- registry and hence is well suited to run anything from the root
- zone, the top-level domain, to many smaller standard domain names.
- .
- This package provides Python Prometheus exporter for Knot DNS.
-
-Package: python3-libknot
-Architecture: all
-Depends:
- libknot14 (= ${binary:Version}),
- ${misc:Depends},
- ${python3:Depends},
-Section: python
-Description: Python bindings for libknot
- Knot DNS is a fast, authoritative only, high performance, feature
- full and open source name server.
- .
- Knot DNS is developed by CZ.NIC Labs, the R&D department of .CZ
- registry and hence is well suited to run anything from the root
- zone, the top-level domain, to many smaller standard domain names.
- .
- This package provides Python bindings for the libknot shared library.
diff --git a/distro/pkg/deb-noxdp/copyright b/distro/pkg/deb-noxdp/copyright
deleted file mode 100644
index 20c8b97..0000000
--- a/distro/pkg/deb-noxdp/copyright
+++ /dev/null
@@ -1,179 +0,0 @@
-Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
-Upstream-Name: Knot DNS
-Upstream-Contact: knot-dns@labs.nic.cz
-Source: https://secure.nic.cz/files/knot-dns/
-
-Files: *
-Copyright: 2011-2023 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
-License: GPL-3+
-
-Files: m4/*
-Copyright: 2011-2022 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
-           1996-2001, 2003-2015 Free Software Foundation, Inc.
-License: GPL-3+
-
-Files: install-sh
-Copyright: 1994 X Consortium
-License: MIT
-
-Files: debian/* distro/pkg/deb/*
-Copyright: 2011-2023 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
-           2011 Ondřej Surý <ondrej@debian.org>
-License: GPL-3+
-
-Files: tests/tap/*
-Copyright: 2000-2001, 2004, 2006-2012 Russ Allbery <rra@stanford.edu>
-           2006, 2007, 2008, 2013 The Board of Trustees of the Leland Stanford Junior University
-License: MIT
-
-Files: tests/tap/files.*
-Copyright: 2011-2019 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
-License: GPL-3+
-
-Files: src/contrib/dnstap/*
-Copyright: 2014, Farsight Security, Inc. <software@farsightsecurity.com>
-           2011-2022 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
-License: GPL-3+
-
-Files: src/contrib/libngtcp2/*
-Copyright: 2016-2023 ngtcp2 contributors
-           2012-2017 nghttp2 contributors
-License: MIT
-
-Files: src/contrib/musl/*
-Copyright: 2005-2020 Rich Felker, et al.
-License: MIT
-
-Files: src/contrib/openbsd/siphash.*
-Copyright: 2013 Andre Oppermann <andre@FreeBSD.org>
-License: BSD-3-Clause
-
-Files: src/contrib/openbsd/strl*
-Copyright: 1998 Todd C. Miller <Todd.Miller@courtesan.com>
-License: 0BSD
-
-Files: src/contrib/proxyv2/*
-Copyright: 2022 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
-           2021 Fastly, Inc.
-License: GPL-3+
-
-Files: src/contrib/qp-trie/*
-Copyright: 2011-2019 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
-           2018 Tony Finch <dot@dotat.at>
-License: GPL-3+
-
-Files: src/contrib/ucw/*
-Copyright: 2011-2022 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
-           1997-2017 Martin Mares <mj@ucw.cz>
-           2007 Pavel Charvat <pchar@ucw.cz>
-           2012 Ondrej Filip <feela@network.cz>
-License: LGPL-2.0
-
-Files: src/contrib/ucw/heap.h
-Copyright: 2011-2022 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
-License: GPL-3+
-
-Files: src/contrib/url-parser/*
-Copyright: 2020 Igor Sysoev
-           2020 Nginx, Inc.
-           2020 Joyent, Inc.
-License: MIT
-
-Files: src/contrib/vpool/*
-Copyright: 2006, 2008 Alexey Vatchenko <av@bsdua.org>
-License: 0BSD
-
-Files: tests-fuzz/main.c
-Copyright: 2011-2019 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
-           2017 Tim Ruehsen
-License: MIT
-
-License: GPL-3+
- This program is free software: you can redistribute it and/or modify
- it under the terms of the GNU General Public License as published by
- the Free Software Foundation, either version 3 of the License, or
- (at your option) any later version.
- .
- This program is distributed in the hope that it will be useful, but
- WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
- General Public License for more details.
- .
- You should have received a copy of the GNU General Public License
- along with this program.  If not, see <https://www.gnu.org/licenses/>.
- .
- On Debian systems, the full text of the GNU General Public License
- version 3 can be found in the file `/usr/share/common-licenses/GPL-3'.
-
-License: LGPL-2.0
- This library is free software; you can redistribute it and/or
- modify it under the terms of the GNU Library General Public
- License as published by the Free Software Foundation; either
- version 2 of the License, or (at your option) any later version.
- .
- This library is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
- Library General Public License for more details.
- .
- You should have received a copy of the GNU Library General Public
- License along with this library; if not, write to the
- Free Software Foundation, Inc., 51 Franklin St, Fifth Floor,
- Boston, MA  02110-1301, USA.
-
-License: 0BSD
- Permission to use, copy, modify, and distribute this software for any
- purpose with or without fee is hereby granted, provided that the above
- copyright notice and this permission notice appear in all copies.
- .
- THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
- WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
- MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
- ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
- WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
- ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
- OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-
-License: BSD-3-Clause
- Redistribution and use in source and binary forms, with or without modification,
- are permitted provided that the following conditions are met:
- 1. Redistributions of source code must retain the above copyright notice, this
-    list of conditions and the following disclaimer.
- 2. Redistributions in binary form must reproduce the above copyright notice,
-    this list of conditions and the following disclaimer in the documentation
-    and/or other materials provided with the distribution.
- 3. Neither the name of the copyright holder nor the names of its contributors
-    may be used to endorse or promote products derived from this software without
-    specific prior written permission.
- .
- THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
- ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
- WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
- IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
- INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
- BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
- DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
- LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
- OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
- OF THE POSSIBILITY OF SUCH DAMAGE.
-
-License: MIT
- Permission is hereby granted, free of charge, to any person obtaining
- a copy of this software and associated documentation files (the
- "Software"), to deal in the Software without restriction, including
- without limitation the rights to use, copy, modify, merge, publish,
- distribute, sublicense, and/or sell copies of the Software, and to
- permit persons to whom the Software is furnished to do so, subject to
- the following conditions:
- .
- The above copyright notice and this permission notice shall be
- included in all copies or substantial portions of the Software.
- .
- THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
- EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
- MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
- NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
- BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
- ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
- CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- SOFTWARE.
diff --git a/distro/pkg/deb-noxdp/cz.nic.knotd.conf b/distro/pkg/deb-noxdp/cz.nic.knotd.conf
deleted file mode 100644
index 50af87a..0000000
--- a/distro/pkg/deb-noxdp/cz.nic.knotd.conf
+++ /dev/null
@@ -1,9 +0,0 @@
-<!DOCTYPE busconfig PUBLIC "-//freedesktop//DTD D-BUS Bus Configuration 1.0//EN" "http://www.freedesktop.org/standards/dbus/1.0/busconfig.dtd">
-<busconfig>
-  <policy user="knot">
-    <allow own="cz.nic.knotd" />
-  </policy>
-  <policy context="default">
-    <allow receive_sender="cz.nic.knotd" />
-  </policy>
-</busconfig>
diff --git a/distro/pkg/deb-noxdp/docs b/distro/pkg/deb-noxdp/docs
deleted file mode 100644
index b43bf86..0000000
--- a/distro/pkg/deb-noxdp/docs
+++ /dev/null
@@ -1 +0,0 @@
-README.md
diff --git a/distro/pkg/deb-noxdp/knot-dnssecutils.install b/distro/pkg/deb-noxdp/knot-dnssecutils.install
deleted file mode 100644
index 20009e8..0000000
--- a/distro/pkg/deb-noxdp/knot-dnssecutils.install
+++ /dev/null
@@ -1,3 +0,0 @@
-usr/bin/knsec3hash
-usr/bin/kzonecheck
-usr/bin/kzonesign
diff --git a/distro/pkg/deb-noxdp/knot-dnssecutils.manpages b/distro/pkg/deb-noxdp/knot-dnssecutils.manpages
deleted file mode 100644
index 913c4cb..0000000
--- a/distro/pkg/deb-noxdp/knot-dnssecutils.manpages
+++ /dev/null
@@ -1,3 +0,0 @@
-usr/share/man/man1/knsec3hash.1
-usr/share/man/man1/kzonecheck.1
-usr/share/man/man1/kzonesign.1
diff --git a/distro/pkg/deb-noxdp/knot-dnsutils.install b/distro/pkg/deb-noxdp/knot-dnsutils.install
deleted file mode 100644
index 960fa92..0000000
--- a/distro/pkg/deb-noxdp/knot-dnsutils.install
+++ /dev/null
@@ -1,2 +0,0 @@
-usr/bin/kdig
-usr/bin/knsupdate
diff --git a/distro/pkg/deb-noxdp/knot-dnsutils.manpages b/distro/pkg/deb-noxdp/knot-dnsutils.manpages
deleted file mode 100644
index 3cc29ec..0000000
--- a/distro/pkg/deb-noxdp/knot-dnsutils.manpages
+++ /dev/null
@@ -1,2 +0,0 @@
-usr/share/man/man1/kdig.1
-usr/share/man/man1/knsupdate.1
diff --git a/distro/pkg/deb-noxdp/knot-doc.install b/distro/pkg/deb-noxdp/knot-doc.install
deleted file mode 100644
index c2a345d..0000000
--- a/distro/pkg/deb-noxdp/knot-doc.install
+++ /dev/null
@@ -1 +0,0 @@
-usr/share/doc/knot/* /usr/share/doc/knot-doc/
diff --git a/distro/pkg/deb-noxdp/knot-doc.links b/distro/pkg/deb-noxdp/knot-doc.links
deleted file mode 100644
index 1376b3a..0000000
--- a/distro/pkg/deb-noxdp/knot-doc.links
+++ /dev/null
@@ -1,5 +0,0 @@
-usr/share/javascript/jquery/jquery.min.js usr/share/doc/knot-doc/_static/jquery.js
-usr/share/javascript/sphinxdoc/1.0/doctools.js usr/share/doc/knot-doc/_static/doctools.js
-usr/share/javascript/sphinxdoc/1.0/language_data.js usr/share/doc/knot-doc/_static/language_data.js
-usr/share/javascript/sphinxdoc/1.0/searchtools.js usr/share/doc/knot-doc/_static/searchtools.js
-usr/share/javascript/underscore/underscore.min.js usr/share/doc/knot-doc/_static/underscore.js
diff --git a/distro/pkg/deb-noxdp/knot-exporter.install b/distro/pkg/deb-noxdp/knot-exporter.install
deleted file mode 100644
index 4c2d5ed..0000000
--- a/distro/pkg/deb-noxdp/knot-exporter.install
+++ /dev/null
@@ -1,3 +0,0 @@
-usr/lib/python3*/dist-packages/knot_exporter-*.egg-info
-usr/lib/python3*/dist-packages/knot_exporter/*.py
-usr/bin/knot-exporter /usr/sbin/knot-exporter
diff --git a/distro/pkg/deb-noxdp/knot-host.install b/distro/pkg/deb-noxdp/knot-host.install
deleted file mode 100644
index 51bacf0..0000000
--- a/distro/pkg/deb-noxdp/knot-host.install
+++ /dev/null
@@ -1 +0,0 @@
-usr/bin/khost
diff --git a/distro/pkg/deb-noxdp/knot-host.manpages b/distro/pkg/deb-noxdp/knot-host.manpages
deleted file mode 100644
index 4891e2c..0000000
--- a/distro/pkg/deb-noxdp/knot-host.manpages
+++ /dev/null
@@ -1 +0,0 @@
-usr/share/man/man1/khost.1
diff --git a/distro/pkg/deb-noxdp/knot-module-dnstap.install b/distro/pkg/deb-noxdp/knot-module-dnstap.install
deleted file mode 100644
index 983455e..0000000
--- a/distro/pkg/deb-noxdp/knot-module-dnstap.install
+++ /dev/null
@@ -1 +0,0 @@
-usr/lib/*/knot/modules-*/dnstap.so
diff --git a/distro/pkg/deb-noxdp/knot-module-geoip.install b/distro/pkg/deb-noxdp/knot-module-geoip.install
deleted file mode 100644
index 16d87c3..0000000
--- a/distro/pkg/deb-noxdp/knot-module-geoip.install
+++ /dev/null
@@ -1 +0,0 @@
-usr/lib/*/knot/modules-*/geoip.so
diff --git a/distro/pkg/deb-noxdp/knot.dirs b/distro/pkg/deb-noxdp/knot.dirs
deleted file mode 100644
index 6e937aa..0000000
--- a/distro/pkg/deb-noxdp/knot.dirs
+++ /dev/null
@@ -1 +0,0 @@
-var/lib/knot
diff --git a/distro/pkg/deb-noxdp/knot.init b/distro/pkg/deb-noxdp/knot.init
deleted file mode 100644
index 3f8fcae..0000000
--- a/distro/pkg/deb-noxdp/knot.init
+++ /dev/null
@@ -1,149 +0,0 @@
-#!/bin/sh
-### BEGIN INIT INFO
-# Provides:          knot
-# Required-Start:    $network $local_fs $remote_fs $syslog
-# Required-Stop:     $remote_fs $syslog
-# Default-Start:     2 3 4 5
-# Default-Stop:      0 1 6
-# Short-Description: authoritative domain name server
-# Description:       Knot DNS is a authoritative-only domain name server
-### END INIT INFO
-
-# Author: Ondřej Surý <ondrej@debian.org>
-
-# PATH should only include /usr/* if it runs after the mountnfs.sh script
-PATH=/sbin:/usr/sbin:/bin:/usr/bin
-DESC="Knot DNS server" # Introduce a short description here
-NAME=knotd             # Introduce the short server's name here
-DAEMON=/usr/sbin/$NAME # Introduce the server's location here
-PIDFILE=/run/knot/knot.pid
-SCRIPTNAME=/etc/init.d/knot
-KNOTC=/usr/sbin/knotc
-RUNDIR=/run/knot
-
-# Exit if the package is not installed
-[ -x $DAEMON ] || exit 0
-
-KNOTD_ARGS=""
-
-# Read configuration variable file if it is present
-[ -r /etc/default/knot ] && . /etc/default/knot
-
-DAEMON_ARGS="-d $KNOTD_ARGS"
-
-# Define LSB log_* functions.
-# Depend on sysvinit-utils (>= 2.96) to ensure that this file is present.
-. /lib/lsb/init-functions
-
-#
-# Function that starts the daemon/service
-#
-do_start()
-{
-    # Return
-    #   0 if daemon has been started
-    #   1 if daemon was already running
-    #   2 if daemon could not be started
-
-    $KNOTC status >/dev/null 2>/dev/null \
-	&& return 1
-
-    start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON --test > /dev/null \
-	|| return 1
-    start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON -- \
-	$DAEMON_ARGS \
-	|| return 2
-}
-
-#
-# Function that stops the daemon/service
-#
-do_stop()
-{
-    # Return
-    #   0 if daemon has been stopped
-    #   1 if daemon was already stopped
-    #   2 if daemon could not be stopped
-    #   other if a failure occurred
-
-    $KNOTC status >/dev/null 2>/dev/null \
-	|| return 1
-
-    $KNOTC stop >/dev/null
-    RETVAL="$?"
-    [ $? = 1 ] && return 2
-
-    # Many daemons don't delete their pidfiles when they exit.
-    rm -f $PIDFILE
-    return 0
-}
-
-do_reload() {
-    $KNOTC reload >/dev/null
-    return $?
-}
-
-do_mkrundir() {
-    mkdir -p $RUNDIR
-    chmod 0755 $RUNDIR
-    chown knot:knot $RUNDIR
-}
-
-case "$1" in
-    start)
-	do_mkrundir
-	log_daemon_msg "Starting $DESC " "$NAME"
-	do_start
-	case "$?" in
-	    0|1) log_end_msg 0 ;;
-	    2) log_end_msg 1 ;;
-	esac
-	;;
-    stop)
-	log_daemon_msg "Stopping $DESC" "$NAME"
-	do_stop
-	case "$?" in
-	    0|1) log_end_msg 0 ;;
-	    2) log_end_msg 1 ;;
-	esac
-	;;
-    status)
-	STATUS=$($KNOTC status 2>&1 >/dev/null)
-	RETVAL=$?
-	if [ $RETVAL = 0 ]; then
-	    log_success_msg "$NAME is running"
-	else
-	    log_failure_msg "$NAME is not running ($STATUS)"
-	fi
-	exit $RETVAL
-	;;
-    reload|force-reload)
-	log_daemon_msg "Reloading $DESC" "$NAME"
-	do_reload
-	log_end_msg $?
-	;;
-    restart)
-	log_daemon_msg "Restarting $DESC" "$NAME"
-	do_stop
-	case "$?" in
-	    0|1)
-		do_start
-		case "$?" in
-		    0) log_end_msg 0 ;;
-		    1) log_end_msg 1 ;; # Old process is still running
-		    *) log_end_msg 1 ;; # Failed to start
-		esac
-		;;
-	    *)
-	  	# Failed to stop
-		log_end_msg 1
-		;;
-	esac
-	;;
-    *)
-	echo "Usage: $SCRIPTNAME {start|stop|status|restart|reload|force-reload}" >&2
-	exit 3
-	;;
-esac
-
-:
diff --git a/distro/pkg/deb-noxdp/knot.install b/distro/pkg/deb-noxdp/knot.install
deleted file mode 100644
index 5c716fc..0000000
--- a/distro/pkg/deb-noxdp/knot.install
+++ /dev/null
@@ -1,8 +0,0 @@
-debian/cz.nic.knotd.conf usr/share/dbus-1/system.d/
-debian/ufw/knot etc/ufw/applications.d/
-etc/knot/knot.conf
-usr/sbin/kcatalogprint
-usr/sbin/keymgr
-usr/sbin/kjournalprint
-usr/sbin/knotc
-usr/sbin/knotd
diff --git a/distro/pkg/deb-noxdp/knot.manpages b/distro/pkg/deb-noxdp/knot.manpages
deleted file mode 100644
index 5d23e9f..0000000
--- a/distro/pkg/deb-noxdp/knot.manpages
+++ /dev/null
@@ -1,6 +0,0 @@
-usr/share/man/man5/knot.conf.5
-usr/share/man/man8/kcatalogprint.8
-usr/share/man/man8/keymgr.8
-usr/share/man/man8/kjournalprint.8
-usr/share/man/man8/knotc.8
-usr/share/man/man8/knotd.8
diff --git a/distro/pkg/deb-noxdp/knot.postinst b/distro/pkg/deb-noxdp/knot.postinst
deleted file mode 100644
index da747c8..0000000
--- a/distro/pkg/deb-noxdp/knot.postinst
+++ /dev/null
@@ -1,16 +0,0 @@
-#!/bin/sh
-set -e
-
-if [ "$1" = "configure" ]; then
-    if ! getent passwd knot > /dev/null; then
-        adduser --quiet --system --group --no-create-home --home /var/lib/knot knot
-    fi
-
-    dpkg-statoverride --list /var/lib/knot >/dev/null 2>&1 || dpkg-statoverride --update --add root knot 0770 /var/lib/knot
-    dpkg-statoverride --list /etc/knot/knot.conf >/dev/null 2>&1 || dpkg-statoverride --update --add root knot 0640 /etc/knot/knot.conf
-    dpkg-statoverride --list /etc/knot >/dev/null 2>&1 || dpkg-statoverride --update --add root knot 0750 /etc/knot
-fi
-
-#DEBHELPER#
-
-exit 0
diff --git a/distro/pkg/deb-noxdp/knot.postrm b/distro/pkg/deb-noxdp/knot.postrm
deleted file mode 100644
index 14b3d69..0000000
--- a/distro/pkg/deb-noxdp/knot.postrm
+++ /dev/null
@@ -1,21 +0,0 @@
-#!/bin/sh
-set -e
-
-if test "$1" = "purge"; then
-    state_dir=/var/lib/knot
-    for db_name in "catalog" "confdb" "journal" "keys" "timers"; do
-        rm -rf $state_dir/$db_name >/dev/null 2>&1 || true
-    done
-    rmdir $state_dir >/dev/null 2>&1 || true
-    [ -e $state_dir/* ] && echo "Notice: there are still data in ${state_dir}, please check."
-
-    dpkg-statoverride --remove /var/lib/knot >/dev/null 2>&1 || true
-    dpkg-statoverride --remove /etc/knot/knot.conf >/dev/null 2>&1 || true
-    dpkg-statoverride --remove /etc/knot >/dev/null 2>&1 || true
-
-    deluser --quiet knot >/dev/null 2>&1 || true
-fi
-
-#DEBHELPER#
-
-exit 0
diff --git a/distro/pkg/deb-noxdp/knot.service b/distro/pkg/deb-noxdp/knot.service
deleted file mode 100644
index e6c13ed..0000000
--- a/distro/pkg/deb-noxdp/knot.service
+++ /dev/null
@@ -1,30 +0,0 @@
-[Unit]
-Description=Knot DNS server
-Wants=network-online.target
-After=network-online.target
-Documentation=man:knotd(8) man:knot.conf(5) man:knotc(8)
-
-[Service]
-Type=notify
-User=knot
-Group=knot
-CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_SETPCAP
-AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_SETPCAP
-ExecStartPre=/usr/sbin/knotc conf-check
-ExecStart=/usr/sbin/knotd -m "$KNOT_CONF_MAX_SIZE"
-ExecReload=/bin/kill -HUP $MAINPID
-Restart=on-abort
-LimitNOFILE=1048576
-TimeoutStopSec=300
-# Extend the systemd startup timeout by this value (seconds) for each zone
-Environment="KNOT_ZONE_LOAD_TIMEOUT_SEC=180"
-# Maximum size (MiB) of a configuration database
-Environment="KNOT_CONF_MAX_SIZE=512"
-
-# Expected systemd >= v239
-RuntimeDirectory=knot
-StateDirectory=knot
-NoNewPrivileges=yes
-
-[Install]
-WantedBy=multi-user.target
diff --git a/distro/pkg/deb-noxdp/libdnssec9.install b/distro/pkg/deb-noxdp/libdnssec9.install
deleted file mode 100644
index 17a9fe6..0000000
--- a/distro/pkg/deb-noxdp/libdnssec9.install
+++ /dev/null
@@ -1 +0,0 @@
-usr/lib/*/libdnssec.so.*
diff --git a/distro/pkg/deb-noxdp/libdnssec9.symbols b/distro/pkg/deb-noxdp/libdnssec9.symbols
deleted file mode 100644
index c3ab2ed..0000000
--- a/distro/pkg/deb-noxdp/libdnssec9.symbols
+++ /dev/null
@@ -1,96 +0,0 @@
-libdnssec.so.9 libdnssec9 #MINVER#
-* Build-Depends-Package: libknot-dev
- dnssec_algorithm_digest_support@Base 3.2.0
- dnssec_algorithm_key_size_check@Base 3.2.0
- dnssec_algorithm_key_size_default@Base 3.2.0
- dnssec_algorithm_key_size_range@Base 3.2.0
- dnssec_algorithm_key_support@Base 3.2.0
- dnssec_algorithm_reproducible@Base 3.2.0
- dnssec_binary_alloc@Base 3.2.0
- dnssec_binary_cmp@Base 3.2.0
- dnssec_binary_dup@Base 3.2.0
- dnssec_binary_free@Base 3.2.0
- dnssec_binary_from_base64@Base 3.2.0
- dnssec_binary_resize@Base 3.2.0
- dnssec_binary_to_base64@Base 3.2.0
- dnssec_crypto_cleanup@Base 3.2.0
- dnssec_crypto_init@Base 3.2.0
- dnssec_crypto_reinit@Base 3.2.0
- dnssec_digest@Base 3.2.0
- dnssec_digest_finish@Base 3.2.0
- dnssec_digest_init@Base 3.2.0
- dnssec_key_can_sign@Base 3.2.0
- dnssec_key_can_verify@Base 3.2.0
- dnssec_key_clear@Base 3.2.0
- dnssec_key_create_ds@Base 3.2.0
- dnssec_key_dup@Base 3.2.0
- dnssec_key_free@Base 3.2.0
- dnssec_key_get_algorithm@Base 3.2.0
- dnssec_key_get_dname@Base 3.2.0
- dnssec_key_get_flags@Base 3.2.0
- dnssec_key_get_keyid@Base 3.2.0
- dnssec_key_get_keytag@Base 3.2.0
- dnssec_key_get_protocol@Base 3.2.0
- dnssec_key_get_pubkey@Base 3.2.0
- dnssec_key_get_rdata@Base 3.2.0
- dnssec_key_get_size@Base 3.2.0
- dnssec_key_load_pkcs8@Base 3.2.0
- dnssec_key_new@Base 3.2.0
- dnssec_key_set_algorithm@Base 3.2.0
- dnssec_key_set_dname@Base 3.2.0
- dnssec_key_set_flags@Base 3.2.0
- dnssec_key_set_protocol@Base 3.2.0
- dnssec_key_set_pubkey@Base 3.2.0
- dnssec_key_set_rdata@Base 3.2.0
- dnssec_keyid_copy@Base 3.2.0
- dnssec_keyid_equal@Base 3.2.0
- dnssec_keyid_is_valid@Base 3.2.0
- dnssec_keyid_normalize@Base 3.2.0
- dnssec_keystore_close@Base 3.2.0
- dnssec_keystore_deinit@Base 3.2.0
- dnssec_keystore_generate@Base 3.2.0
- dnssec_keystore_get_private@Base 3.2.0
- dnssec_keystore_import@Base 3.2.0
- dnssec_keystore_init@Base 3.2.0
- dnssec_keystore_init_pkcs11@Base 3.2.0
- dnssec_keystore_init_pkcs8@Base 3.2.0
- dnssec_keystore_open@Base 3.2.0
- dnssec_keystore_remove@Base 3.2.0
- dnssec_keystore_set_private@Base 3.2.0
- dnssec_keytag@Base 3.2.0
- dnssec_nsec3_hash@Base 3.2.0
- dnssec_nsec3_hash_length@Base 3.2.0
- dnssec_nsec3_params_free@Base 3.2.0
- dnssec_nsec3_params_from_rdata@Base 3.2.0
- dnssec_nsec3_params_match@Base 3.2.0
- dnssec_nsec_bitmap_add@Base 3.2.0
- dnssec_nsec_bitmap_clear@Base 3.2.0
- dnssec_nsec_bitmap_contains@Base 3.2.0
- dnssec_nsec_bitmap_free@Base 3.2.0
- dnssec_nsec_bitmap_new@Base 3.2.0
- dnssec_nsec_bitmap_size@Base 3.2.0
- dnssec_nsec_bitmap_write@Base 3.2.0
- dnssec_pem_from_privkey@Base 3.2.0
- dnssec_pem_from_x509@Base 3.2.0
- dnssec_pem_to_privkey@Base 3.2.0
- dnssec_pem_to_x509@Base 3.2.0
- dnssec_random_binary@Base 3.2.0
- dnssec_random_buffer@Base 3.2.0
- dnssec_sign_add@Base 3.2.0
- dnssec_sign_free@Base 3.2.0
- dnssec_sign_init@Base 3.2.0
- dnssec_sign_new@Base 3.2.0
- dnssec_sign_verify@Base 3.2.0
- dnssec_sign_write@Base 3.2.0
- dnssec_strerror@Base 3.2.0
- dnssec_tsig_add@Base 3.2.0
- dnssec_tsig_algorithm_from_dname@Base 3.2.0
- dnssec_tsig_algorithm_from_name@Base 3.2.0
- dnssec_tsig_algorithm_size@Base 3.2.0
- dnssec_tsig_algorithm_to_dname@Base 3.2.0
- dnssec_tsig_algorithm_to_name@Base 3.2.0
- dnssec_tsig_free@Base 3.2.0
- dnssec_tsig_new@Base 3.2.0
- dnssec_tsig_optimal_key_size@Base 3.2.0
- dnssec_tsig_size@Base 3.2.0
- dnssec_tsig_write@Base 3.2.0
diff --git a/distro/pkg/deb-noxdp/libknot-dev.install b/distro/pkg/deb-noxdp/libknot-dev.install
deleted file mode 100644
index cb60d88..0000000
--- a/distro/pkg/deb-noxdp/libknot-dev.install
+++ /dev/null
@@ -1,3 +0,0 @@
-usr/include/
-usr/lib/*/*.so
-usr/lib/*/pkgconfig/*
diff --git a/distro/pkg/deb-noxdp/libknot14.symbols b/distro/pkg/deb-noxdp/libknot14.symbols
deleted file mode 100644
index ba2024a..0000000
--- a/distro/pkg/deb-noxdp/libknot14.symbols
+++ /dev/null
@@ -1,226 +0,0 @@
-libknot.so.14 libknot14 #MINVER#
- KNOT_DB_LMDB_DUPSORT@Base 3.3.0
- KNOT_DB_LMDB_INTEGERKEY@Base 3.3.0
- KNOT_DB_LMDB_MAPASYNC@Base 3.3.0
- KNOT_DB_LMDB_NOSYNC@Base 3.3.0
- KNOT_DB_LMDB_NOTLS@Base 3.3.0
- KNOT_DB_LMDB_RDONLY@Base 3.3.0
- KNOT_DB_LMDB_WRITEMAP@Base 3.3.0
- KNOT_DUMP_STYLE_DEFAULT@Base 3.3.0
- knot_ctl_accept@Base 3.3.0
- knot_ctl_alloc@Base 3.3.0
- knot_ctl_bind@Base 3.3.0
- knot_ctl_bind2@Base 3.3.6
- knot_ctl_close@Base 3.3.0
- knot_ctl_connect@Base 3.3.0
- knot_ctl_free@Base 3.3.0
- knot_ctl_receive@Base 3.3.0
- knot_ctl_send@Base 3.3.0
- knot_ctl_set_timeout@Base 3.3.0
- knot_ctl_unbind@Base 3.3.0
- knot_db_lmdb_api@Base 3.3.0
- knot_db_lmdb_del_exact@Base 3.3.0
- knot_db_lmdb_get_mapsize@Base 3.3.0
- knot_db_lmdb_get_path@Base 3.3.0
- knot_db_lmdb_get_usage@Base 3.3.0
- knot_db_lmdb_iter_del@Base 3.3.0
- knot_db_lmdb_txn_begin@Base 3.3.0
- knot_db_trie_api@Base 3.3.0
- knot_dname_cmp@Base 3.3.0
- knot_dname_copy@Base 3.3.0
- knot_dname_copy_lower@Base 3.3.0
- knot_dname_free@Base 3.3.0
- knot_dname_from_str@Base 3.3.0
- knot_dname_in_bailiwick@Base 3.3.0
- knot_dname_is_case_equal@Base 3.3.0
- knot_dname_is_equal@Base 3.3.0
- knot_dname_labels@Base 3.3.0
- knot_dname_lf@Base 3.3.0
- knot_dname_matched_labels@Base 3.3.0
- knot_dname_prefixlen@Base 3.3.0
- knot_dname_realsize@Base 3.3.0
- knot_dname_replace_suffix@Base 3.3.0
- knot_dname_size@Base 3.3.0
- knot_dname_store@Base 3.3.0
- knot_dname_to_lower@Base 3.3.0
- knot_dname_to_str@Base 3.3.0
- knot_dname_to_wire@Base 3.3.0
- knot_dname_unpack@Base 3.3.0
- knot_dname_wire_check@Base 3.3.0
- knot_dnssec_alg_names@Base 3.3.0
- knot_edns_add_option@Base 3.3.0
- knot_edns_alignment_size@Base 3.3.0
- knot_edns_chain_parse@Base 3.3.0
- knot_edns_chain_size@Base 3.3.0
- knot_edns_chain_write@Base 3.3.0
- knot_edns_client_subnet_get_addr@Base 3.3.0
- knot_edns_client_subnet_parse@Base 3.3.0
- knot_edns_client_subnet_set_addr@Base 3.3.0
- knot_edns_client_subnet_size@Base 3.3.0
- knot_edns_client_subnet_write@Base 3.3.0
- knot_edns_cookie_client_check@Base 3.3.0
- knot_edns_cookie_client_generate@Base 3.3.0
- knot_edns_cookie_parse@Base 3.3.0
- knot_edns_cookie_server_check@Base 3.3.0
- knot_edns_cookie_server_generate@Base 3.3.0
- knot_edns_cookie_size@Base 3.3.0
- knot_edns_cookie_write@Base 3.3.0
- knot_edns_ede_names@Base 3.3.0
- knot_edns_get_ext_rcode@Base 3.3.0
- knot_edns_get_option@Base 3.3.0
- knot_edns_get_options@Base 3.3.0
- knot_edns_get_version@Base 3.3.0
- knot_edns_init@Base 3.3.0
- knot_edns_keepalive_parse@Base 3.3.0
- knot_edns_keepalive_size@Base 3.3.0
- knot_edns_keepalive_write@Base 3.3.0
- knot_edns_opt_names@Base 3.3.0
- knot_edns_reserve_option@Base 3.3.0
- knot_edns_set_ext_rcode@Base 3.3.0
- knot_edns_set_version@Base 3.3.0
- knot_error_from_libdnssec@Base 3.3.0
- knot_get_obsolete_rdata_descriptor@Base 3.3.0
- knot_get_rdata_descriptor@Base 3.3.0
- knot_naptr_header_size@Base 3.3.0
- knot_opcode_names@Base 3.3.0
- knot_opt_code_to_string@Base 3.3.0
- knot_pkt_begin@Base 3.3.0
- knot_pkt_clear@Base 3.3.0
- knot_pkt_copy@Base 3.3.0
- knot_pkt_ext_rcode@Base 3.3.0
- knot_pkt_ext_rcode_name@Base 3.3.0
- knot_pkt_free@Base 3.3.0
- knot_pkt_init_response@Base 3.3.0
- knot_pkt_new@Base 3.3.0
- knot_pkt_parse@Base 3.3.0
- knot_pkt_parse_question@Base 3.3.0
- knot_pkt_put_question@Base 3.3.0
- knot_pkt_put_rotate@Base 3.3.0
- knot_pkt_reclaim@Base 3.3.0
- knot_pkt_reserve@Base 3.3.0
- knot_probe_alloc@Base 3.3.0
- knot_probe_consume@Base 3.3.0
- knot_probe_data_set@Base 3.3.0
- knot_probe_fd@Base 3.3.0
- knot_probe_free@Base 3.3.0
- knot_probe_produce@Base 3.3.0
- knot_probe_set_consumer@Base 3.3.0
- knot_probe_set_producer@Base 3.3.0
- knot_probe_tcp_rtt@Base 3.3.0
- knot_rcode_names@Base 3.3.0
- knot_rdataset_add@Base 3.3.0
- knot_rdataset_at@Base 3.3.0
- knot_rdataset_clear@Base 3.3.0
- knot_rdataset_copy@Base 3.3.0
- knot_rdataset_eq@Base 3.3.0
- knot_rdataset_intersect@Base 3.3.0
- knot_rdataset_intersect2@Base 3.3.0
- knot_rdataset_member@Base 3.3.0
- knot_rdataset_merge@Base 3.3.0
- knot_rdataset_subset@Base 3.3.0
- knot_rdataset_subtract@Base 3.3.0
- knot_rrclass_from_string@Base 3.3.0
- knot_rrclass_to_string@Base 3.3.0
- knot_rrset_add_rdata@Base 3.3.0
- knot_rrset_clear@Base 3.3.0
- knot_rrset_copy@Base 3.3.0
- knot_rrset_equal@Base 3.3.0
- knot_rrset_free@Base 3.3.0
- knot_rrset_is_nsec3rel@Base 3.3.0
- knot_rrset_new@Base 3.3.0
- knot_rrset_rr_from_wire@Base 3.3.0
- knot_rrset_rr_to_canonical@Base 3.3.0
- knot_rrset_size@Base 3.3.0
- knot_rrset_to_wire_extra@Base 3.3.0
- knot_rrset_txt_dump@Base 3.3.0
- knot_rrset_txt_dump_data@Base 3.3.0
- knot_rrset_txt_dump_edns@Base 3.3.0
- knot_rrset_txt_dump_header@Base 3.3.0
- knot_rrtype_additional_needed@Base 3.3.0
- knot_rrtype_from_string@Base 3.3.0
- knot_rrtype_is_dnssec@Base 3.3.0
- knot_rrtype_is_metatype@Base 3.3.0
- knot_rrtype_should_be_lowercased@Base 3.3.0
- knot_rrtype_to_string@Base 3.3.0
- knot_strerror@Base 3.3.0
- knot_svcb_param_names@Base 3.3.0
- knot_tcp_inbufs_upd@Base 3.3.0
- knot_tcp_outbufs_ack@Base 3.3.0
- knot_tcp_outbufs_add@Base 3.3.0
- knot_tcp_outbufs_can_send@Base 3.3.0
- knot_tcp_outbufs_usage@Base 3.3.0
- knot_tsig_add@Base 3.3.0
- knot_tsig_append@Base 3.3.0
- knot_tsig_client_check@Base 3.3.0
- knot_tsig_client_check_next@Base 3.3.0
- knot_tsig_create_rdata@Base 3.3.0
- knot_tsig_key_copy@Base 3.3.0
- knot_tsig_key_deinit@Base 3.3.0
- knot_tsig_key_init@Base 3.3.0
- knot_tsig_key_init_file@Base 3.3.0
- knot_tsig_key_init_str@Base 3.3.0
- knot_tsig_rcode_names@Base 3.3.0
- knot_tsig_rdata_alg@Base 3.3.0
- knot_tsig_rdata_alg_name@Base 3.3.0
- knot_tsig_rdata_error@Base 3.3.0
- knot_tsig_rdata_fudge@Base 3.3.0
- knot_tsig_rdata_is_ok@Base 3.3.0
- knot_tsig_rdata_mac@Base 3.3.0
- knot_tsig_rdata_mac_length@Base 3.3.0
- knot_tsig_rdata_orig_id@Base 3.3.0
- knot_tsig_rdata_other_data@Base 3.3.0
- knot_tsig_rdata_other_data_length@Base 3.3.0
- knot_tsig_rdata_set_fudge@Base 3.3.0
- knot_tsig_rdata_set_mac@Base 3.3.0
- knot_tsig_rdata_set_orig_id@Base 3.3.0
- knot_tsig_rdata_set_other_data@Base 3.3.0
- knot_tsig_rdata_set_time_signed@Base 3.3.0
- knot_tsig_rdata_time_signed@Base 3.3.0
- knot_tsig_rdata_tsig_timers_length@Base 3.3.0
- knot_tsig_rdata_tsig_variables_length@Base 3.3.0
- knot_tsig_server_check@Base 3.3.0
- knot_tsig_sign@Base 3.3.0
- knot_tsig_sign_next@Base 3.3.0
- knot_tsig_wire_maxsize@Base 3.3.0
- knot_tsig_wire_size@Base 3.3.0
- yp_addr@Base 3.3.0
- yp_addr_noport@Base 3.3.0
- yp_addr_noport_to_bin@Base 3.3.0
- yp_addr_noport_to_txt@Base 3.3.0
- yp_addr_range_to_bin@Base 3.3.0
- yp_addr_range_to_txt@Base 3.3.0
- yp_addr_to_bin@Base 3.3.0
- yp_addr_to_txt@Base 3.3.0
- yp_base64_to_bin@Base 3.3.0
- yp_base64_to_txt@Base 3.3.0
- yp_bool_to_bin@Base 3.3.0
- yp_bool_to_txt@Base 3.3.0
- yp_deinit@Base 3.3.0
- yp_dname_to_bin@Base 3.3.0
- yp_dname_to_txt@Base 3.3.0
- yp_format_id@Base 3.3.0
- yp_format_key0@Base 3.3.0
- yp_format_key1@Base 3.3.0
- yp_hex_to_bin@Base 3.3.0
- yp_hex_to_txt@Base 3.3.0
- yp_init@Base 3.3.0
- yp_int_to_bin@Base 3.3.0
- yp_int_to_txt@Base 3.3.0
- yp_item_to_bin@Base 3.3.0
- yp_item_to_txt@Base 3.3.0
- yp_option_to_bin@Base 3.3.0
- yp_option_to_txt@Base 3.3.0
- yp_parse@Base 3.3.0
- yp_schema_check_deinit@Base 3.3.0
- yp_schema_check_init@Base 3.3.0
- yp_schema_check_parser@Base 3.3.0
- yp_schema_check_str@Base 3.3.0
- yp_schema_copy@Base 3.3.0
- yp_schema_find@Base 3.3.0
- yp_schema_free@Base 3.3.0
- yp_schema_merge@Base 3.3.0
- yp_schema_purge_dynamic@Base 3.3.0
- yp_set_input_file@Base 3.3.0
- yp_set_input_string@Base 3.3.0
- yp_str_to_bin@Base 3.3.0
- yp_str_to_txt@Base 3.3.0
diff --git a/distro/pkg/deb-noxdp/libzscanner4.install b/distro/pkg/deb-noxdp/libzscanner4.install
deleted file mode 100644
index a8dc226..0000000
--- a/distro/pkg/deb-noxdp/libzscanner4.install
+++ /dev/null
@@ -1 +0,0 @@
-usr/lib/*/libzscanner.so.*
diff --git a/distro/pkg/deb-noxdp/libzscanner4.symbols b/distro/pkg/deb-noxdp/libzscanner4.symbols
deleted file mode 100644
index 99ac3b7..0000000
--- a/distro/pkg/deb-noxdp/libzscanner4.symbols
+++ /dev/null
@@ -1,12 +0,0 @@
-libzscanner.so.4 libzscanner4 #MINVER#
-* Build-Depends-Package: libknot-dev
- zs_deinit@Base 3.1.0
- zs_errorname@Base 3.1.0
- zs_init@Base 3.1.0
- zs_parse_all@Base 3.1.0
- zs_parse_record@Base 3.1.0
- zs_set_input_file@Base 3.1.0
- zs_set_input_string@Base 3.1.0
- zs_set_processing@Base 3.1.0
- zs_set_processing_comment@Base 3.1.0
- zs_strerror@Base 3.1.0
diff --git a/distro/pkg/deb-noxdp/not-installed b/distro/pkg/deb-noxdp/not-installed
deleted file mode 100644
index c928be1..0000000
--- a/distro/pkg/deb-noxdp/not-installed
+++ /dev/null
@@ -1 +0,0 @@
-etc/knot/example.com.zone
diff --git a/distro/pkg/deb-noxdp/patches/05-revert-mod-dnstap-TCP-sink.patch b/distro/pkg/deb-noxdp/patches/05-revert-mod-dnstap-TCP-sink.patch
deleted file mode 100644
index dae0fac..0000000
--- a/distro/pkg/deb-noxdp/patches/05-revert-mod-dnstap-TCP-sink.patch
+++ /dev/null
@@ -1,160 +0,0 @@
-From d236d2b7fcd5fa607f7bfd38044eb6f510fac7ce Mon Sep 17 00:00:00 2001
-From: Daniel Salzman <daniel.salzman@nic.cz>
-Date: Wed, 12 Jun 2024 11:18:31 +0200
-Subject: [PATCH] Revert "mod-dnstap: add sink for TCP connection"
-
-This reverts commit 2ffd7dfa58ddcd1b860f0c9980fd082c3852d3e6.
----
- src/knot/modules/dnstap/dnstap.c   | 74 +++++-------------------------
- src/knot/modules/dnstap/dnstap.rst |  9 ++--
- 2 files changed, 15 insertions(+), 68 deletions(-)
-
-diff --git a/src/knot/modules/dnstap/dnstap.c b/src/knot/modules/dnstap/dnstap.c
-index 612e48869..c8c82eaa4 100644
---- a/src/knot/modules/dnstap/dnstap.c
-+++ b/src/knot/modules/dnstap/dnstap.c
-@@ -1,4 +1,4 @@
--/*  Copyright (C) 2024 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
-+/*  Copyright (C) 2023 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
- 
-     This program is free software: you can redistribute it and/or modify
-     it under the terms of the GNU General Public License as published by
-@@ -185,33 +185,6 @@ finish:
- 	return writer;
- }
- 
--static struct fstrm_writer* dnstap_tcp_writer(const char *address, const char *port)
--{
--	struct fstrm_tcp_writer_options *opt = NULL;
--	struct fstrm_writer_options *wopt = NULL;
--	struct fstrm_writer *writer = NULL;
--
--	opt =  fstrm_tcp_writer_options_init();
--	if (opt == NULL) {
--		goto finish;
--	}
--
--	fstrm_tcp_writer_options_set_socket_address(opt, address);
--	fstrm_tcp_writer_options_set_socket_port(opt, port);
--
--	wopt = fstrm_writer_options_init();
--	if (wopt == NULL) {
--		goto finish;
--	}
--	fstrm_writer_options_add_content_type(wopt, DNSTAP_CONTENT_TYPE,
--	                                      strlen(DNSTAP_CONTENT_TYPE));
--	writer = fstrm_tcp_writer_init(opt, wopt);
--finish:
--	fstrm_tcp_writer_options_destroy(&opt);
--	fstrm_writer_options_destroy(&wopt);
--	return writer;
--}
--
- /*! \brief Create a basic file writer sink. */
- static struct fstrm_writer* dnstap_file_writer(const char *path)
- {
-@@ -240,42 +213,17 @@ finish:
- }
- 
- /*! \brief Create a log sink according to the path string. */
--static struct fstrm_writer* dnstap_writer(knotd_mod_t *mod, const char *path)
-+static struct fstrm_writer* dnstap_writer(const char *path)
- {
--	const char *unix_prefix = "unix:";
--	const size_t unix_prefix_len = strlen(unix_prefix);
--
--	const char *tcp_prefix = "tcp:";
--	const size_t tcp_prefix_len = strlen(tcp_prefix);
--
--	const size_t path_len = strlen(path);
-+	const char *prefix = "unix:";
-+	const size_t prefix_len = strlen(prefix);
- 
- 	/* UNIX socket prefix. */
--	if (path_len > unix_prefix_len &&
--	    strncmp(path, unix_prefix, unix_prefix_len) == 0) {
--		knotd_mod_log(mod, LOG_DEBUG, "using sink UNIX socket '%s'", path);
--		return dnstap_unix_writer(path + unix_prefix_len);
--	/* TCP socket prefix. */
--	} else if (path_len > tcp_prefix_len &&
--	           strncmp(path, tcp_prefix, tcp_prefix_len) == 0) {
--		char addr[INET6_ADDRSTRLEN] = { 0 };
--		const char *delimiter = strchr(path + tcp_prefix_len, '@');
--		if (delimiter == NULL) {
--			return NULL;
--		}
--		size_t addr_len = delimiter - path - tcp_prefix_len;
--		if (addr_len >= sizeof(addr)) {
--			return NULL;
--		}
--		memcpy(addr, path + tcp_prefix_len, addr_len);
--		knotd_mod_log(mod, LOG_DEBUG, "using sink TCP address '%s' port '%s'",
--		              addr, delimiter + 1);
--		return dnstap_tcp_writer(addr, delimiter + 1);
--	/* File path. */
--	} else {
--		knotd_mod_log(mod, LOG_DEBUG, "using sink file '%s'", path);
--		return dnstap_file_writer(path);
-+	if (strlen(path) > prefix_len && strncmp(path, prefix, prefix_len) == 0) {
-+		return dnstap_unix_writer(path + prefix_len);
- 	}
-+
-+	return dnstap_file_writer(path);
- }
- 
- int dnstap_load(knotd_mod_t *mod)
-@@ -325,7 +273,7 @@ int dnstap_load(knotd_mod_t *mod)
- 	const bool log_responses = conf.single.boolean;
- 
- 	/* Initialize the writer and the options. */
--	struct fstrm_writer *writer = dnstap_writer(mod, sink);
-+	struct fstrm_writer *writer = dnstap_writer(sink);
- 	if (writer == NULL) {
- 		goto fail;
- 	}
-@@ -359,13 +307,13 @@ int dnstap_load(knotd_mod_t *mod)
- 
- 	return KNOT_EOK;
- fail:
--	knotd_mod_log(mod, LOG_ERR, "failed to initialize sink '%s'", sink);
-+	knotd_mod_log(mod, LOG_ERR, "failed to init sink '%s'", sink);
- 
- 	free(ctx->identity);
- 	free(ctx->version);
- 	free(ctx);
- 
--	return KNOT_EINVAL;
-+	return KNOT_ENOMEM;
- }
- 
- void dnstap_unload(knotd_mod_t *mod)
-diff --git a/src/knot/modules/dnstap/dnstap.rst b/src/knot/modules/dnstap/dnstap.rst
-index 05eac09ab..358977da0 100644
---- a/src/knot/modules/dnstap/dnstap.rst
-+++ b/src/knot/modules/dnstap/dnstap.rst
-@@ -11,7 +11,7 @@ Example
- -------
- 
- The configuration comprises only a :ref:`mod-dnstap_sink` path parameter,
--which can be either a file, a UNIX socket, or a TCP address::
-+which can be either a file or a UNIX socket::
- 
-    mod-dnstap:
-      - id: capture_all
-@@ -60,10 +60,9 @@ A module identifier.
- sink
- ....
- 
--A sink path, which can be either a file, a UNIX socket when prefixed with
--``unix:``, or a TCP `address@port` when prefixed with ``tcp:``. The file may
--be specified as an absolute path or a path relative to
--the :doc:`knotd<man_knotd>` startup directory.
-+A sink path, which can be either a file or a UNIX socket when prefixed with
-+``unix:``. The file may be specified as an absolute path or a path relative
-+to the :doc:`knotd<man_knotd>` startup directory.
- 
- *Required*
- 
--- 
-2.34.1
-
diff --git a/distro/pkg/deb-noxdp/patches/series b/distro/pkg/deb-noxdp/patches/series
deleted file mode 100644
index 54de4e3..0000000
--- a/distro/pkg/deb-noxdp/patches/series
+++ /dev/null
@@ -1 +0,0 @@
-05-revert-mod-dnstap-TCP-sink.patch
diff --git a/distro/pkg/deb-noxdp/prepare-environment b/distro/pkg/deb-noxdp/prepare-environment
deleted file mode 100755
index 7176f5e..0000000
--- a/distro/pkg/deb-noxdp/prepare-environment
+++ /dev/null
@@ -1,38 +0,0 @@
-#!/bin/sh
-
-set -eu
-
-CONFFILE=${1:-/etc/knot/knot.conf}
-
-if [ ! -r $CONFFILE ]; then
-   echo "$CONFFILE doesn't exist or has wrong permissions."
-   exit 1;
-fi
-
-KNOT_RUNDIR=$(sed -ne "s/#.*$//;s/.*rundir: \"*\([^\";]*\\).*/\\1/p;" $CONFFILE)
-[ -z "$KNOT_RUNDIR" ] && KNOT_RUNDIR=/run/knot
-
-mkdir --parents "$KNOT_RUNDIR";
-
-KNOT_USER=$(sed -ne "s/#.*$//;s/.*user:[ \"]*\\([^\\:\"]*\\)[ \"]*/\\1/p;" $CONFFILE)
-
-if [ -n "$KNOT_USER" ]; then
-    if ! getent passwd $KNOT_USER >/dev/null; then
-	echo "Configured user '$KNOT_USER' doesn't exist."
-	exit 1
-    fi
-
-    KNOT_GROUP=$(sed -ne "s/#.*$//;s/.*user:[ \"]*[^\\:\"]*\\:\\([^\"]*\\)[ \"]*/\\1/p;" $CONFFILE)
-    if [ -z "$KNOT_GROUP" ]; then
-	KNOT_GROUP=$(getent group $(getent passwd "$KNOT_USER" | cut -f 4 -d :) | cut -f 1 -d :)
-    fi
-
-    if ! getent group $KNOT_GROUP >/dev/null; then
-	echo "Configured group '$KNOT_GROUP' doesn't exist."
-	exit 1
-    fi
-    chown --silent "$KNOT_USER:$KNOT_GROUP" "$KNOT_RUNDIR"
-    chmod 775 "$KNOT_RUNDIR"
-fi
-
-:
diff --git a/distro/pkg/deb-noxdp/python3-libknot.install b/distro/pkg/deb-noxdp/python3-libknot.install
deleted file mode 100644
index ce92dec..0000000
--- a/distro/pkg/deb-noxdp/python3-libknot.install
+++ /dev/null
@@ -1,2 +0,0 @@
-usr/lib/python3*/dist-packages/libknot-*.egg-info
-usr/lib/python3*/dist-packages/libknot/*.py
diff --git a/distro/pkg/deb-noxdp/rules b/distro/pkg/deb-noxdp/rules
deleted file mode 100755
index 2372f70..0000000
--- a/distro/pkg/deb-noxdp/rules
+++ /dev/null
@@ -1,95 +0,0 @@
-#!/usr/bin/make -f
-
-export DEB_BUILD_MAINT_OPTIONS = hardening=+all
-export DEB_CFLAGS_MAINT_APPEND  = -Wall -DNDEBUG
-export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed
-
-export DPKG_GENSYMBOLS_CHECK_LEVEL := 4
-export KNOT_SOFTHSM2_DSO = /usr/lib/softhsm/libsofthsm2.so
-
-include /usr/share/dpkg/default.mk
-
-ifeq (maint,$(filter $(DEB_BUILD_OPTIONS),maint))
-  FASTPARSER := --disable-fastparser
-else
-  FASTPARSER := --enable-fastparser
-endif
-
-ifeq ($(DEB_HOST_ARCH),$(filter $(DEB_HOST_ARCH),hurd-i386))
-  RECVMMSG:=--enable-recvmmsg=no
-else
-  RECVMMSG:=--enable-recvmmsg=yes
-endif
-
-ifeq ($(DEB_HOST_ARCH),$(filter $(DEB_HOST_ARCH),amd64 i386))
-  RUN_TEST :=
-else
-  RUN_TEST := -timeout --kill-after=5s 5m
-endif
-
-LIBKNOT_SYMBOLS := $(wildcard $(CURDIR)/debian/libknot*.symbols)
-
-# MAJOR.MINOR version part
-BASE_VERSION := $(shell echo $(DEB_VERSION) | sed 's/^\([^.]\+\.[^.]\+\).*/\1/')
-
-# pyproject is supported by knot but fails on second `pybuild --build`
-# invocation due to bug in dh-python's plugin_pyproject.py wheel unpack
-export PYBUILD_SYSTEM = distutils
-
-
-%:
-	dh $@ \
-	 --exclude=.la --exclude=example.com.zone \
-	 --with python3
-
-override_dh_auto_configure:
-	dh_auto_configure -- \
-	  --sysconfdir=/etc \
-	  --localstatedir=/var/lib \
-	  --libexecdir=/usr/lib/knot \
-	  --with-rundir=/run/knot \
-	  --with-moduledir=/usr/lib/$(DEB_HOST_MULTIARCH)/knot/modules-$(BASE_VERSION) \
-	  --with-storage=/var/lib/knot \
-	  --enable-systemd=auto \
-	  --enable-dnstap \
-	  --with-module-dnstap=shared \
-	  --with-module-geoip=shared \
-	  $(RECVMMSG) \
-	  $(FASTPARSER) \
-	  --disable-silent-rules \
-	  --disable-static
-
-override_dh_auto_configure-indep:
-	pybuild --dir python/libknot --configure
-	pybuild --dir python/knot_exporter --configure
-
-override_dh_auto_build-indep:
-	dh_auto_build -- html
-	pybuild --dir python/libknot --build
-	pybuild --dir python/knot_exporter --build
-
-override_dh_auto_install-arch:
-	dh_auto_install -- install
-	# rename knot.sample.conf to knot.conf
-	mv $(CURDIR)/debian/tmp/etc/knot/knot.sample.conf $(CURDIR)/debian/tmp/etc/knot/knot.conf
-
-override_dh_auto_install-indep:
-	dh_auto_install -- install-html
-	# rename knot.sample.conf to knot.conf
-	mv $(CURDIR)/debian/tmp/etc/knot/knot.sample.conf $(CURDIR)/debian/tmp/etc/knot/knot.conf
-	pybuild --dir python/libknot --install
-	pybuild --dir python/knot_exporter --install
-	rm -rf $(CURDIR)/debian/tmp/usr/lib/python*/dist-packages/libknot/__pycache__
-	rm -rf $(CURDIR)/debian/tmp/usr/lib/python*/dist-packages/knot_exporter/__pycache__
-
-override_dh_auto_test-indep:
-override_dh_auto_test-arch:
-ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS)))
-	$(RUN_TEST) dh_auto_test
-endif
-
-override_dh_missing:
-	dh_missing --fail-missing
-
-override_dh_installchangelogs:
-	dh_installchangelogs NEWS
diff --git a/distro/pkg/deb-noxdp/source/format b/distro/pkg/deb-noxdp/source/format
deleted file mode 100644
index 163aaf8..0000000
--- a/distro/pkg/deb-noxdp/source/format
+++ /dev/null
@@ -1 +0,0 @@
-3.0 (quilt)
diff --git a/distro/pkg/deb-noxdp/tests/authoritative-server b/distro/pkg/deb-noxdp/tests/authoritative-server
deleted file mode 100755
index 028dfbf..0000000
--- a/distro/pkg/deb-noxdp/tests/authoritative-server
+++ /dev/null
@@ -1,150 +0,0 @@
-#!/bin/bash
-
-# Author: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
-# 2018-11-02
-# License: GPLv3+
-
-# error on exit
-set -e
-# for handling jobspecs:
-set -m
-
-if [ -z "$AUTOPKGTEST_ARTIFACTS" ]; then
-    d="$(mktemp -d)"
-    remove="$d"
-else
-    d="$AUTOPKGTEST_ARTIFACTS"
-fi
-ip="${TESTIP:-127.$(( $RANDOM % 256 )).$(( $RANDOM % 256 )).$(( $RANDOM % 256 ))}"
-port="${PORT:-8123}"
-knotc="${KNOTC:-/usr/sbin/knotc}"
-knotd="${KNOTD:-/usr/sbin/knotd}"
-keymgr="${KEYMGR:-/usr/sbin/keymgr}"
-kdig="${KDIG:-$(command -v kdig)}"
-kzonecheck="${KZONECHECK:-$(command -v kzonecheck)}"
-test_address="${TEST_ADDRESS:-192.0.2.199}"
-
-declare -a knot_conf="--config=$d/knot.conf"
-declare -a knot_args=("$knot_conf" --verbose)
-
-printf "%s + %s roundtrip tests\n------------\n    workdir: %s\n    IP addr: %s\n  knot args: %s\n" "$knotd" "$kdig" "$d" "$ip" "${knot_args[*]}"
-
-section() {
-    printf "\n%s\n" "$1"
-    sed 's/./-/g' <<<"$1"
-}
-
-cleanup () {
-    section "cleaning up"
-    find "$d" -ls
-    "${knotc}" "${knot_args[@]}" stop
-    wait %1
-    tail -n +1 -v "$d"/*.err
-    if [ "$remove" ]; then
-        printf "\ncleaning up working directory %s\n" "$remove"
-        rm -rf "$remove"
-    fi
-}
-trap cleanup EXIT
-
-section "set up config file and zonefile"
-
-user=$(id -nu)
-group=$(id -ng)
-cat > "$d/knot.conf" <<EOF
-server:
- rundir: "$d"
- listen: $ip@$port
- user: $user:$group
-database:
- storage: "$d"
-template:
- - id: default
-   storage: "$d"
-   file: "%s.zone"
-zone:
- - domain: example.net
-   dnssec-signing: on
-EOF
-
-cat > "$d/example.net.zone" <<EOF
-@ 1D IN SOA a.ns hostmaster 2018103100 3h 15m 1w 1d
-@ 1D IN NS a.ns.example.net.
-@ 1D IN NS b.ns.example.net.
-a.ns 1D IN A 192.0.2.1
-b.ns 1D IN A 192.0.2.2
-test 1D IN A $test_address
-EOF
-
-find "$d" -maxdepth 1 -type f -print0 | xargs -0 tail -n +1 -v
-
-mkdir -p "${d}"
-
-section "kzonecheck'ing zonefile"
-"${kzonecheck}" -v "$d/example.net.zone"
-
-section "launching knot"
-"${knotd}" "${knot_args[@]}" 2> "$d/knotd.err" &
-
-# FIXME: this is an annoying poll -- would be better if we could be
-# alerted when the daemon is done setting up the socket, but i don't
-# want to "--daemonize" if i can avoid it because i want the shell to
-# remain in direct supervision of all its processes
-tried=0
-while [ $tried -lt 10 ] ; do
-    if "${knotc}" "${knot_args[@]}" status 2>&1; then
-        break;
-    fi
-    sleep 0.5
-    tried=$(( $tried + 1 ))
-done
-if [ $tried -ge 10 ]; then
-    printf "failed to use %s\n" "${knotc}" >&2
-    exit 1
-fi
-
-section "querying knot"
-"${kdig}" -p "${port}" @"${ip}" -t A test.example.net test2.example.net
-answer="$("${kdig}" +short -p "${port}" @"${ip}" -t A test.example.net)"
-if ! [ "$answer" = "$test_address" ]; then
-    printf "test.example.net mismatch!\nexpected: %s\n     got: %s\n" "$test_address" "$answer" >&2
-    exit 1
-fi
-answer2="$("${kdig}" +short -p "${port}" @"${ip}" -t A test2.example.net)"
-if ! [ "$answer2" = "" ]; then
-    printf "test2.example.net gave unexpected answer!\n  got: %s\n" "$answer2" >&2
-    exit 1
-fi
-
-section "modifying zone"
-printf "test2 1D IN A $test_address\n" >>"$d/example.net.zone"
-sed -i 's/^@ 1D IN SOA.*/@ 1D IN SOA a.ns hostmaster 2018110100 3h 15m 1w 1d/' "$d/example.net.zone"
-"${knotc}" "${knot_args[@]}" reload
-sleep 1
-
-section "querying again"
-"${kdig}" -p "${port}" @"${ip}" -t A test.example.net test2.example.net
-answer="$("${kdig}" +short -p "${port}" @"${ip}" -t A test.example.net)"
-if ! [ "$answer" = "$test_address" ]; then
-    printf "test.example.net mismatch!\nexpected: %s\n     got: %s\n" "$test_address" "$answer" >&2
-    exit 1
-fi
-answer2="$("${kdig}" +short -p "${port}" @"${ip}" -t A test2.example.net)"
-if ! [ "$answer2" = "$test_address" ]; then
-    printf "test2.example.net mismatch!\nexpected: %s\n     got: %s\n" "$test_address" "$answer2" >&2
-    exit 1
-fi
-
-section "querying DNSSEC"
-"${kdig}" -p "${port}" @"${ip}" -t DNSKEY example.net. +dnssec
-if ! "${kdig}" -p "${port}" @"${ip}" -t DNSKEY example.net. +dnssec 2>&1 | grep -q "RRSIG[[:space:]]*DNSKEY"; then
-    printf "DNSSEC query not successful" >&2
-    exit 1
-fi
-
-section "listing keys with keymgr"
-"${keymgr}" "$knot_conf" -e example.net. list
-if ! "${keymgr}" "$knot_conf" -e example.net. list 2>&1 | grep -q "ksk=yes"; then
-    printf "keymgr did not list KSK as expected" >&2
-    exit 1
-fi
diff --git a/distro/pkg/deb-noxdp/tests/control b/distro/pkg/deb-noxdp/tests/control
deleted file mode 100644
index e8b3dcb..0000000
--- a/distro/pkg/deb-noxdp/tests/control
+++ /dev/null
@@ -1,13 +0,0 @@
-Tests: kdig
-Restrictions: skippable
-Depends:
- ca-certificates,
- iputils-ping,
- knot-dnsutils,
-
-Tests: authoritative-server
-Depends:
- findutils,
- knot,
- knot-dnsutils,
- knot-dnssecutils,
diff --git a/distro/pkg/deb-noxdp/tests/kdig b/distro/pkg/deb-noxdp/tests/kdig
deleted file mode 100755
index f1dbe5a..0000000
--- a/distro/pkg/deb-noxdp/tests/kdig
+++ /dev/null
@@ -1,14 +0,0 @@
-#!/bin/bash
-
-set -e
-
-# Skip the test if no internet access
-ping -c1 1.1.1.1 2>&1 || exit 77
-
-expected=198.41.0.4
-answer=$(kdig +short +tls-ca @1.1.1.1 -q a.root-servers.net. -t A 2>&1 || true)
-
-if [ "$answer" != "$expected" ]; then
-    printf "expected: %s\ngot: %s\n" "$expected" "$answer" >&2
-    kdig -d +tls-ca @1.1.1.1 -q a.root-servers.net. -t A
-fi
diff --git a/distro/pkg/deb-noxdp/ufw/knot b/distro/pkg/deb-noxdp/ufw/knot
deleted file mode 100644
index ee36916..0000000
--- a/distro/pkg/deb-noxdp/ufw/knot
+++ /dev/null
@@ -1,4 +0,0 @@
-[Knot]
-title=Internet Domain Name Server
-description=The Knot DNS implements an Internet domain name server.
-ports=53
diff --git a/distro/pkg/deb-noxdp/watch b/distro/pkg/deb-noxdp/watch
deleted file mode 100644
index 7cf9ea1..0000000
--- a/distro/pkg/deb-noxdp/watch
+++ /dev/null
@@ -1,4 +0,0 @@
-version=4
-opts=uversionmangle=s/-((alpha|beta|rc)\d*)$/~$1/,pgpsigurlmangle=s/$/.asc/,dversionmangle=s/\+hotfix// \
-https://secure.nic.cz/files/knot-dns/ \
-(?:|.*/)knot(?:[_\-]v?|)(\d\S*)\.(?:tar\.xz|txz|tar\.bz2|tbz2|tar\.gz|tgz)
diff --git a/distro/pkg/deb/control b/distro/pkg/deb/control
index 5df1b62..b98dc4a 100644
--- a/distro/pkg/deb/control
+++ b/distro/pkg/deb/control
@@ -45,7 +45,7 @@ Architecture: any
 Depends:
  adduser,
  libdnssec9 (= ${binary:Version}),
- libknot14 (= ${binary:Version}),
+ libknot15 (= ${binary:Version}),
  libzscanner4 (= ${binary:Version}),
  ${misc:Depends},
  ${shlibs:Depends},
@@ -61,7 +61,7 @@ Description: Authoritative domain name server
  registry and hence is well suited to run anything from the root
  zone, the top-level domain, to many smaller standard domain names.
 
-Package: libknot14
+Package: libknot15
 Architecture: any
 Depends:
  ${misc:Depends},
@@ -117,7 +117,7 @@ Architecture: any
 Depends:
  libdnssec9 (= ${binary:Version}),
  libgnutls28-dev,
- libknot14 (= ${binary:Version}),
+ libknot15 (= ${binary:Version}),
  libzscanner4 (= ${binary:Version}),
  ${misc:Depends},
 Section: libdevel
@@ -135,7 +135,7 @@ Package: knot-dnsutils
 Architecture: any
 Depends:
  libdnssec9 (= ${binary:Version}),
- libknot14 (= ${binary:Version}),
+ libknot15 (= ${binary:Version}),
  libzscanner4 (= ${binary:Version}),
  ${misc:Depends},
  ${shlibs:Depends},
@@ -162,7 +162,7 @@ Package: knot-dnssecutils
 Architecture: any
 Depends:
  libdnssec9 (= ${binary:Version}),
- libknot14 (= ${binary:Version}),
+ libknot15 (= ${binary:Version}),
  libzscanner4 (= ${binary:Version}),
  ${misc:Depends},
  ${shlibs:Depends},
@@ -184,7 +184,7 @@ Package: knot-host
 Architecture: any
 Depends:
  libdnssec9 (= ${binary:Version}),
- libknot14 (= ${binary:Version}),
+ libknot15 (= ${binary:Version}),
  libzscanner4 (= ${binary:Version}),
  ${misc:Depends},
  ${shlibs:Depends},
@@ -270,7 +270,7 @@ Description: Prometheus exporter for Knot DNS
 Package: python3-libknot
 Architecture: all
 Depends:
- libknot14 (= ${binary:Version}),
+ libknot15 (= ${binary:Version}),
  ${misc:Depends},
  ${python3:Depends},
 Section: python
diff --git a/distro/pkg/deb/knot.install b/distro/pkg/deb/knot.install
index 5c716fc..a31224f 100644
--- a/distro/pkg/deb/knot.install
+++ b/distro/pkg/deb/knot.install
@@ -1,5 +1,4 @@
 debian/cz.nic.knotd.conf usr/share/dbus-1/system.d/
-debian/ufw/knot etc/ufw/applications.d/
 etc/knot/knot.conf
 usr/sbin/kcatalogprint
 usr/sbin/keymgr
diff --git a/distro/pkg/deb/libknot14.install b/distro/pkg/deb/libknot14.install
deleted file mode 100644
index f9b9f93..0000000
--- a/distro/pkg/deb/libknot14.install
+++ /dev/null
@@ -1 +0,0 @@
-usr/lib/*/libknot.so.*
diff --git a/distro/pkg/deb/libknot14.symbols b/distro/pkg/deb/libknot14.symbols
deleted file mode 100644
index 174d517..0000000
--- a/distro/pkg/deb/libknot14.symbols
+++ /dev/null
@@ -1,277 +0,0 @@
-libknot.so.14 libknot14 #MINVER#
-* Build-Depends-Package: libknot-dev
- KNOT_DB_LMDB_DUPSORT@Base 3.3.0
- KNOT_DB_LMDB_INTEGERKEY@Base 3.3.0
- KNOT_DB_LMDB_MAPASYNC@Base 3.3.0
- KNOT_DB_LMDB_NOSYNC@Base 3.3.0
- KNOT_DB_LMDB_NOTLS@Base 3.3.0
- KNOT_DB_LMDB_RDONLY@Base 3.3.0
- KNOT_DB_LMDB_WRITEMAP@Base 3.3.0
- KNOT_DUMP_STYLE_DEFAULT@Base 3.3.0
- knot_ctl_accept@Base 3.3.0
- knot_ctl_alloc@Base 3.3.0
- knot_ctl_bind@Base 3.3.0
- knot_ctl_bind2@Base 3.3.6
- knot_ctl_close@Base 3.3.0
- knot_ctl_connect@Base 3.3.0
- knot_ctl_free@Base 3.3.0
- knot_ctl_receive@Base 3.3.0
- knot_ctl_send@Base 3.3.0
- knot_ctl_set_timeout@Base 3.3.0
- knot_ctl_unbind@Base 3.3.0
- knot_db_lmdb_api@Base 3.3.0
- knot_db_lmdb_del_exact@Base 3.3.0
- knot_db_lmdb_get_mapsize@Base 3.3.0
- knot_db_lmdb_get_path@Base 3.3.0
- knot_db_lmdb_get_usage@Base 3.3.0
- knot_db_lmdb_iter_del@Base 3.3.0
- knot_db_lmdb_txn_begin@Base 3.3.0
- knot_db_trie_api@Base 3.3.0
- knot_dname_cmp@Base 3.3.0
- knot_dname_copy@Base 3.3.0
- knot_dname_copy_lower@Base 3.3.0
- knot_dname_free@Base 3.3.0
- knot_dname_from_str@Base 3.3.0
- knot_dname_in_bailiwick@Base 3.3.0
- knot_dname_is_case_equal@Base 3.3.0
- knot_dname_is_equal@Base 3.3.0
- knot_dname_labels@Base 3.3.0
- knot_dname_lf@Base 3.3.0
- knot_dname_matched_labels@Base 3.3.0
- knot_dname_prefixlen@Base 3.3.0
- knot_dname_realsize@Base 3.3.0
- knot_dname_replace_suffix@Base 3.3.0
- knot_dname_size@Base 3.3.0
- knot_dname_store@Base 3.3.0
- knot_dname_to_lower@Base 3.3.0
- knot_dname_to_str@Base 3.3.0
- knot_dname_to_wire@Base 3.3.0
- knot_dname_unpack@Base 3.3.0
- knot_dname_wire_check@Base 3.3.0
- knot_dnssec_alg_names@Base 3.3.0
- knot_edns_add_option@Base 3.3.0
- knot_edns_alignment_size@Base 3.3.0
- knot_edns_chain_parse@Base 3.3.0
- knot_edns_chain_size@Base 3.3.0
- knot_edns_chain_write@Base 3.3.0
- knot_edns_client_subnet_get_addr@Base 3.3.0
- knot_edns_client_subnet_parse@Base 3.3.0
- knot_edns_client_subnet_set_addr@Base 3.3.0
- knot_edns_client_subnet_size@Base 3.3.0
- knot_edns_client_subnet_write@Base 3.3.0
- knot_edns_cookie_client_check@Base 3.3.0
- knot_edns_cookie_client_generate@Base 3.3.0
- knot_edns_cookie_parse@Base 3.3.0
- knot_edns_cookie_server_check@Base 3.3.0
- knot_edns_cookie_server_generate@Base 3.3.0
- knot_edns_cookie_size@Base 3.3.0
- knot_edns_cookie_write@Base 3.3.0
- knot_edns_ede_names@Base 3.3.0
- knot_edns_get_ext_rcode@Base 3.3.0
- knot_edns_get_option@Base 3.3.0
- knot_edns_get_options@Base 3.3.0
- knot_edns_get_version@Base 3.3.0
- knot_edns_init@Base 3.3.0
- knot_edns_keepalive_parse@Base 3.3.0
- knot_edns_keepalive_size@Base 3.3.0
- knot_edns_keepalive_write@Base 3.3.0
- knot_edns_opt_names@Base 3.3.0
- knot_edns_reserve_option@Base 3.3.0
- knot_edns_set_ext_rcode@Base 3.3.0
- knot_edns_set_version@Base 3.3.0
- knot_error_from_libdnssec@Base 3.3.0
- knot_eth_mtu@Base 3.3.0
- knot_eth_name_from_addr@Base 3.3.0
- knot_eth_queues@Base 3.3.0
- knot_eth_rss@Base 3.3.0
- knot_eth_vlans@Base 3.3.0
- knot_eth_xdp_mode@Base 3.3.0
- knot_get_obsolete_rdata_descriptor@Base 3.3.0
- knot_get_rdata_descriptor@Base 3.3.0
- knot_naptr_header_size@Base 3.3.0
- knot_opcode_names@Base 3.3.0
- knot_opt_code_to_string@Base 3.3.0
- knot_pkt_begin@Base 3.3.0
- knot_pkt_clear@Base 3.3.0
- knot_pkt_copy@Base 3.3.0
- knot_pkt_ext_rcode@Base 3.3.0
- knot_pkt_ext_rcode_name@Base 3.3.0
- knot_pkt_free@Base 3.3.0
- knot_pkt_init_response@Base 3.3.0
- knot_pkt_new@Base 3.3.0
- knot_pkt_parse@Base 3.3.0
- knot_pkt_parse_question@Base 3.3.0
- knot_pkt_put_question@Base 3.3.0
- knot_pkt_put_rotate@Base 3.3.0
- knot_pkt_reclaim@Base 3.3.0
- knot_pkt_reserve@Base 3.3.0
- knot_probe_alloc@Base 3.3.0
- knot_probe_consume@Base 3.3.0
- knot_probe_data_set@Base 3.3.0
- knot_probe_fd@Base 3.3.0
- knot_probe_free@Base 3.3.0
- knot_probe_produce@Base 3.3.0
- knot_probe_set_consumer@Base 3.3.0
- knot_probe_set_producer@Base 3.3.0
- knot_probe_tcp_rtt@Base 3.3.0
- knot_quic_cleanup@Base 3.3.0
- knot_quic_client@Base 3.3.0
- knot_quic_conn_get_stream@Base 3.3.0
- knot_quic_conn_local_port@Base 3.3.0
- knot_quic_conn_new_stream@Base 3.3.0
- knot_quic_conn_next_timeout@Base 3.3.3
- knot_quic_conn_pin@Base 3.3.0
- knot_quic_conn_rtt@Base 3.3.0
- knot_quic_conn_stream_free@Base 3.3.0
- knot_quic_creds_cert@Base 3.3.0
- knot_quic_free_creds@Base 3.3.0
- knot_quic_handle@Base 3.3.0
- knot_quic_hanle_expiry@Base 3.3.3
- knot_quic_init_creds@Base 3.3.0
- knot_quic_init_creds_peer@Base 3.3.0
- knot_quic_send@Base 3.3.0
- knot_quic_session_available@Base 3.3.0
- knot_quic_session_load@Base 3.3.0
- knot_quic_session_save@Base 3.3.0
- knot_quic_stream_add_data@Base 3.3.0
- knot_quic_stream_get_process@Base 3.3.0
- knot_quic_table_free@Base 3.3.0
- knot_quic_table_new@Base 3.3.0
- knot_quic_table_rem@Base 3.3.0
- knot_quic_table_sweep@Base 3.3.0
- knot_rcode_names@Base 3.3.0
- knot_rdataset_add@Base 3.3.0
- knot_rdataset_at@Base 3.3.0
- knot_rdataset_clear@Base 3.3.0
- knot_rdataset_copy@Base 3.3.0
- knot_rdataset_eq@Base 3.3.0
- knot_rdataset_intersect@Base 3.3.0
- knot_rdataset_intersect2@Base 3.3.0
- knot_rdataset_member@Base 3.3.0
- knot_rdataset_merge@Base 3.3.0
- knot_rdataset_subset@Base 3.3.0
- knot_rdataset_subtract@Base 3.3.0
- knot_rrclass_from_string@Base 3.3.0
- knot_rrclass_to_string@Base 3.3.0
- knot_rrset_add_rdata@Base 3.3.0
- knot_rrset_clear@Base 3.3.0
- knot_rrset_copy@Base 3.3.0
- knot_rrset_equal@Base 3.3.0
- knot_rrset_free@Base 3.3.0
- knot_rrset_is_nsec3rel@Base 3.3.0
- knot_rrset_new@Base 3.3.0
- knot_rrset_rr_from_wire@Base 3.3.0
- knot_rrset_rr_to_canonical@Base 3.3.0
- knot_rrset_size@Base 3.3.0
- knot_rrset_to_wire_extra@Base 3.3.0
- knot_rrset_txt_dump@Base 3.3.0
- knot_rrset_txt_dump_data@Base 3.3.0
- knot_rrset_txt_dump_edns@Base 3.3.0
- knot_rrset_txt_dump_header@Base 3.3.0
- knot_rrtype_additional_needed@Base 3.3.0
- knot_rrtype_from_string@Base 3.3.0
- knot_rrtype_is_dnssec@Base 3.3.0
- knot_rrtype_is_metatype@Base 3.3.0
- knot_rrtype_should_be_lowercased@Base 3.3.0
- knot_rrtype_to_string@Base 3.3.0
- knot_strerror@Base 3.3.0
- knot_svcb_param_names@Base 3.3.0
- knot_tcp_cleanup@Base 3.3.0
- knot_tcp_inbufs_upd@Base 3.3.0
- knot_tcp_outbufs_ack@Base 3.3.0
- knot_tcp_outbufs_add@Base 3.3.0
- knot_tcp_outbufs_can_send@Base 3.3.0
- knot_tcp_outbufs_usage@Base 3.3.0
- knot_tcp_recv@Base 3.3.0
- knot_tcp_reply_data@Base 3.3.0
- knot_tcp_send@Base 3.3.0
- knot_tcp_sweep@Base 3.3.0
- knot_tcp_table_free@Base 3.3.0
- knot_tcp_table_new@Base 3.3.0
- knot_tsig_add@Base 3.3.0
- knot_tsig_append@Base 3.3.0
- knot_tsig_client_check@Base 3.3.0
- knot_tsig_client_check_next@Base 3.3.0
- knot_tsig_create_rdata@Base 3.3.0
- knot_tsig_key_copy@Base 3.3.0
- knot_tsig_key_deinit@Base 3.3.0
- knot_tsig_key_init@Base 3.3.0
- knot_tsig_key_init_file@Base 3.3.0
- knot_tsig_key_init_str@Base 3.3.0
- knot_tsig_rcode_names@Base 3.3.0
- knot_tsig_rdata_alg@Base 3.3.0
- knot_tsig_rdata_alg_name@Base 3.3.0
- knot_tsig_rdata_error@Base 3.3.0
- knot_tsig_rdata_fudge@Base 3.3.0
- knot_tsig_rdata_is_ok@Base 3.3.0
- knot_tsig_rdata_mac@Base 3.3.0
- knot_tsig_rdata_mac_length@Base 3.3.0
- knot_tsig_rdata_orig_id@Base 3.3.0
- knot_tsig_rdata_other_data@Base 3.3.0
- knot_tsig_rdata_other_data_length@Base 3.3.0
- knot_tsig_rdata_set_fudge@Base 3.3.0
- knot_tsig_rdata_set_mac@Base 3.3.0
- knot_tsig_rdata_set_orig_id@Base 3.3.0
- knot_tsig_rdata_set_other_data@Base 3.3.0
- knot_tsig_rdata_set_time_signed@Base 3.3.0
- knot_tsig_rdata_time_signed@Base 3.3.0
- knot_tsig_rdata_tsig_timers_length@Base 3.3.0
- knot_tsig_rdata_tsig_variables_length@Base 3.3.0
- knot_tsig_server_check@Base 3.3.0
- knot_tsig_sign@Base 3.3.0
- knot_tsig_sign_next@Base 3.3.0
- knot_tsig_wire_maxsize@Base 3.3.0
- knot_tsig_wire_size@Base 3.3.0
- knot_xdp_deinit@Base 3.3.0
- knot_xdp_init@Base 3.3.0
- knot_xdp_recv@Base 3.3.0
- knot_xdp_recv_finish@Base 3.3.0
- knot_xdp_reply_alloc@Base 3.3.0
- knot_xdp_send@Base 3.3.0
- knot_xdp_send_alloc@Base 3.3.0
- knot_xdp_send_finish@Base 3.3.0
- knot_xdp_send_free@Base 3.3.0
- knot_xdp_send_prepare@Base 3.3.0
- knot_xdp_socket_info@Base 3.3.0
- knot_xdp_socket_fd@Base 3.3.0
- yp_addr@Base 3.3.0
- yp_addr_noport@Base 3.3.0
- yp_addr_noport_to_bin@Base 3.3.0
- yp_addr_noport_to_txt@Base 3.3.0
- yp_addr_range_to_bin@Base 3.3.0
- yp_addr_range_to_txt@Base 3.3.0
- yp_addr_to_bin@Base 3.3.0
- yp_addr_to_txt@Base 3.3.0
- yp_base64_to_bin@Base 3.3.0
- yp_base64_to_txt@Base 3.3.0
- yp_bool_to_bin@Base 3.3.0
- yp_bool_to_txt@Base 3.3.0
- yp_deinit@Base 3.3.0
- yp_dname_to_bin@Base 3.3.0
- yp_dname_to_txt@Base 3.3.0
- yp_format_id@Base 3.3.0
- yp_format_key0@Base 3.3.0
- yp_format_key1@Base 3.3.0
- yp_hex_to_bin@Base 3.3.0
- yp_hex_to_txt@Base 3.3.0
- yp_init@Base 3.3.0
- yp_int_to_bin@Base 3.3.0
- yp_int_to_txt@Base 3.3.0
- yp_item_to_bin@Base 3.3.0
- yp_item_to_txt@Base 3.3.0
- yp_option_to_bin@Base 3.3.0
- yp_option_to_txt@Base 3.3.0
- yp_parse@Base 3.3.0
- yp_schema_check_deinit@Base 3.3.0
- yp_schema_check_init@Base 3.3.0
- yp_schema_check_parser@Base 3.3.0
- yp_schema_check_str@Base 3.3.0
- yp_schema_copy@Base 3.3.0
- yp_schema_find@Base 3.3.0
- yp_schema_free@Base 3.3.0
- yp_schema_merge@Base 3.3.0
- yp_schema_purge_dynamic@Base 3.3.0
- yp_set_input_file@Base 3.3.0
- yp_set_input_string@Base 3.3.0
- yp_str_to_bin@Base 3.3.0
- yp_str_to_txt@Base 3.3.0
diff --git a/distro/pkg/deb-noxdp/libknot14.install b/distro/pkg/deb/libknot15.install
index f9b9f93..f9b9f93 100644
--- a/distro/pkg/deb-noxdp/libknot14.install
+++ b/distro/pkg/deb/libknot15.install
diff --git a/distro/pkg/deb/libknot15.symbols b/distro/pkg/deb/libknot15.symbols
new file mode 100644
index 0000000..77dd5b0
--- /dev/null
+++ b/distro/pkg/deb/libknot15.symbols
@@ -0,0 +1,290 @@
+libknot.so.15 libknot15 #MINVER#
+* Build-Depends-Package: libknot-dev
+ KNOT_DB_LMDB_DUPSORT@Base 3.4.0
+ KNOT_DB_LMDB_INTEGERKEY@Base 3.4.0
+ KNOT_DB_LMDB_MAPASYNC@Base 3.4.0
+ KNOT_DB_LMDB_NOSYNC@Base 3.4.0
+ KNOT_DB_LMDB_NOTLS@Base 3.4.0
+ KNOT_DB_LMDB_RDONLY@Base 3.4.0
+ KNOT_DB_LMDB_WRITEMAP@Base 3.4.0
+ KNOT_DUMP_STYLE_DEFAULT@Base 3.4.0
+ knot_creds_cert@Base 3.4.0
+ knot_creds_free@Base 3.4.0
+ knot_creds_init@Base 3.4.0
+ knot_creds_init_peer@Base 3.4.0
+ knot_creds_update@Base 3.4.0
+ knot_ctl_accept@Base 3.4.0
+ knot_ctl_alloc@Base 3.4.0
+ knot_ctl_bind@Base 3.4.0
+ knot_ctl_clone@Base 3.4.0
+ knot_ctl_close@Base 3.4.0
+ knot_ctl_connect@Base 3.4.0
+ knot_ctl_free@Base 3.4.0
+ knot_ctl_receive@Base 3.4.0
+ knot_ctl_send@Base 3.4.0
+ knot_ctl_set_timeout@Base 3.4.0
+ knot_ctl_unbind@Base 3.4.0
+ knot_db_lmdb_api@Base 3.4.0
+ knot_db_lmdb_del_exact@Base 3.4.0
+ knot_db_lmdb_get_mapsize@Base 3.4.0
+ knot_db_lmdb_get_path@Base 3.4.0
+ knot_db_lmdb_get_usage@Base 3.4.0
+ knot_db_lmdb_iter_del@Base 3.4.0
+ knot_db_lmdb_txn_begin@Base 3.4.0
+ knot_db_trie_api@Base 3.4.0
+ knot_dname_cmp@Base 3.4.0
+ knot_dname_copy@Base 3.4.0
+ knot_dname_copy_lower@Base 3.4.0
+ knot_dname_free@Base 3.4.0
+ knot_dname_from_str@Base 3.4.0
+ knot_dname_in_bailiwick@Base 3.4.0
+ knot_dname_is_case_equal@Base 3.4.0
+ knot_dname_is_equal@Base 3.4.0
+ knot_dname_labels@Base 3.4.0
+ knot_dname_lf@Base 3.4.0
+ knot_dname_matched_labels@Base 3.4.0
+ knot_dname_prefixlen@Base 3.4.0
+ knot_dname_realsize@Base 3.4.0
+ knot_dname_replace_suffix@Base 3.4.0
+ knot_dname_size@Base 3.4.0
+ knot_dname_store@Base 3.4.0
+ knot_dname_to_lower@Base 3.4.0
+ knot_dname_to_str@Base 3.4.0
+ knot_dname_to_wire@Base 3.4.0
+ knot_dname_unpack@Base 3.4.0
+ knot_dname_wire_check@Base 3.4.0
+ knot_dnssec_alg_names@Base 3.4.0
+ knot_edns_add_option@Base 3.4.0
+ knot_edns_alignment_size@Base 3.4.0
+ knot_edns_chain_parse@Base 3.4.0
+ knot_edns_chain_size@Base 3.4.0
+ knot_edns_chain_write@Base 3.4.0
+ knot_edns_client_subnet_get_addr@Base 3.4.0
+ knot_edns_client_subnet_parse@Base 3.4.0
+ knot_edns_client_subnet_set_addr@Base 3.4.0
+ knot_edns_client_subnet_size@Base 3.4.0
+ knot_edns_client_subnet_write@Base 3.4.0
+ knot_edns_cookie_client_check@Base 3.4.0
+ knot_edns_cookie_client_generate@Base 3.4.0
+ knot_edns_cookie_parse@Base 3.4.0
+ knot_edns_cookie_server_check@Base 3.4.0
+ knot_edns_cookie_server_generate@Base 3.4.0
+ knot_edns_cookie_size@Base 3.4.0
+ knot_edns_cookie_write@Base 3.4.0
+ knot_edns_ede_names@Base 3.4.0
+ knot_edns_get_ext_rcode@Base 3.4.0
+ knot_edns_get_option@Base 3.4.0
+ knot_edns_get_options@Base 3.4.0
+ knot_edns_get_version@Base 3.4.0
+ knot_edns_init@Base 3.4.0
+ knot_edns_keepalive_parse@Base 3.4.0
+ knot_edns_keepalive_size@Base 3.4.0
+ knot_edns_keepalive_write@Base 3.4.0
+ knot_edns_opt_names@Base 3.4.0
+ knot_edns_reserve_option@Base 3.4.0
+ knot_edns_set_ext_rcode@Base 3.4.0
+ knot_edns_set_version@Base 3.4.0
+ knot_error_from_libdnssec@Base 3.4.0
+ knot_eth_mtu@Base 3.4.0
+ knot_eth_name_from_addr@Base 3.4.0
+ knot_eth_queues@Base 3.4.0
+ knot_eth_rss@Base 3.4.0
+ knot_eth_vlans@Base 3.4.0
+ knot_eth_xdp_mode@Base 3.4.0
+ knot_get_obsolete_rdata_descriptor@Base 3.4.0
+ knot_get_rdata_descriptor@Base 3.4.0
+ knot_naptr_header_size@Base 3.4.0
+ knot_opcode_names@Base 3.4.0
+ knot_opt_code_to_string@Base 3.4.0
+ knot_pkt_begin@Base 3.4.0
+ knot_pkt_clear@Base 3.4.0
+ knot_pkt_copy@Base 3.4.0
+ knot_pkt_ext_rcode@Base 3.4.0
+ knot_pkt_ext_rcode_name@Base 3.4.0
+ knot_pkt_free@Base 3.4.0
+ knot_pkt_init_response@Base 3.4.0
+ knot_pkt_new@Base 3.4.0
+ knot_pkt_parse@Base 3.4.0
+ knot_pkt_parse_question@Base 3.4.0
+ knot_pkt_put_question@Base 3.4.0
+ knot_pkt_put_rotate@Base 3.4.0
+ knot_pkt_reclaim@Base 3.4.0
+ knot_pkt_reserve@Base 3.4.0
+ knot_probe_alloc@Base 3.4.0
+ knot_probe_consume@Base 3.4.0
+ knot_probe_data_set@Base 3.4.0
+ knot_probe_fd@Base 3.4.0
+ knot_probe_free@Base 3.4.0
+ knot_probe_produce@Base 3.4.0
+ knot_probe_set_consumer@Base 3.4.0
+ knot_probe_set_producer@Base 3.4.0
+ knot_probe_tcp_rtt@Base 3.4.0
+ knot_quic_cleanup@Base 3.4.0
+ knot_quic_client@Base 3.4.0
+ knot_quic_conn_block@Base 3.4.0
+ knot_quic_conn_get_stream@Base 3.4.0
+ knot_quic_conn_local_port@Base 3.4.0
+ knot_quic_conn_new_stream@Base 3.4.0
+ knot_quic_conn_next_timeout@Base 3.4.0
+ knot_quic_conn_rtt@Base 3.4.0
+ knot_quic_conn_stream_free@Base 3.4.0
+ knot_quic_handle@Base 3.4.0
+ knot_quic_hanle_expiry@Base 3.4.0
+ knot_quic_send@Base 3.4.0
+ knot_quic_session_available@Base 3.4.0
+ knot_quic_session_load@Base 3.4.0
+ knot_quic_session_save@Base 3.4.0
+ knot_quic_stream_add_data@Base 3.4.0
+ knot_quic_stream_get_process@Base 3.4.0
+ knot_quic_table_free@Base 3.4.0
+ knot_quic_table_new@Base 3.4.0
+ knot_quic_table_rem@Base 3.4.0
+ knot_quic_table_sweep@Base 3.4.0
+ knot_rcode_names@Base 3.4.0
+ knot_rdataset_add@Base 3.4.0
+ knot_rdataset_at@Base 3.4.0
+ knot_rdataset_clear@Base 3.4.0
+ knot_rdataset_copy@Base 3.4.0
+ knot_rdataset_eq@Base 3.4.0
+ knot_rdataset_intersect@Base 3.4.0
+ knot_rdataset_intersect2@Base 3.4.0
+ knot_rdataset_member@Base 3.4.0
+ knot_rdataset_merge@Base 3.4.0
+ knot_rdataset_subset@Base 3.4.0
+ knot_rdataset_subtract@Base 3.4.0
+ knot_rrclass_from_string@Base 3.4.0
+ knot_rrclass_to_string@Base 3.4.0
+ knot_rrset_add_rdata@Base 3.4.0
+ knot_rrset_clear@Base 3.4.0
+ knot_rrset_copy@Base 3.4.0
+ knot_rrset_equal@Base 3.4.0
+ knot_rrset_free@Base 3.4.0
+ knot_rrset_is_nsec3rel@Base 3.4.0
+ knot_rrset_new@Base 3.4.0
+ knot_rrset_rr_from_wire@Base 3.4.0
+ knot_rrset_rr_to_canonical@Base 3.4.0
+ knot_rrset_size@Base 3.4.0
+ knot_rrset_to_wire_extra@Base 3.4.0
+ knot_rrset_txt_dump@Base 3.4.0
+ knot_rrset_txt_dump_data@Base 3.4.0
+ knot_rrset_txt_dump_edns@Base 3.4.0
+ knot_rrset_txt_dump_header@Base 3.4.0
+ knot_rrtype_additional_needed@Base 3.4.0
+ knot_rrtype_from_string@Base 3.4.0
+ knot_rrtype_is_dnssec@Base 3.4.0
+ knot_rrtype_is_metatype@Base 3.4.0
+ knot_rrtype_should_be_lowercased@Base 3.4.0
+ knot_rrtype_to_string@Base 3.4.0
+ knot_strerror@Base 3.4.0
+ knot_svcb_param_names@Base 3.4.0
+ knot_tcp_cleanup@Base 3.4.0
+ knot_tcp_inbufs_upd@Base 3.4.0
+ knot_tcp_outbufs_ack@Base 3.4.0
+ knot_tcp_outbufs_add@Base 3.4.0
+ knot_tcp_outbufs_can_send@Base 3.4.0
+ knot_tcp_outbufs_usage@Base 3.4.0
+ knot_tcp_recv@Base 3.4.0
+ knot_tcp_reply_data@Base 3.4.0
+ knot_tcp_send@Base 3.4.0
+ knot_tcp_sweep@Base 3.4.0
+ knot_tcp_table_free@Base 3.4.0
+ knot_tcp_table_new@Base 3.4.0
+ knot_tls_conn_block@Base 3.4.0
+ knot_tls_conn_del@Base 3.4.0
+ knot_tls_conn_new@Base 3.4.0
+ knot_tls_ctx_free@Base 3.4.0
+ knot_tls_ctx_new@Base 3.4.0
+ knot_tls_handshake@Base 3.4.0
+ knot_tls_pin@Base 3.4.0
+ knot_tls_pin_check@Base 3.4.0
+ knot_tls_recv_dns@Base 3.4.0
+ knot_tls_send_dns@Base 3.4.0
+ knot_tls_session@Base 3.4.0
+ knot_tsig_add@Base 3.4.0
+ knot_tsig_append@Base 3.4.0
+ knot_tsig_client_check@Base 3.4.0
+ knot_tsig_client_check_next@Base 3.4.0
+ knot_tsig_create_rdata@Base 3.4.0
+ knot_tsig_key_copy@Base 3.4.0
+ knot_tsig_key_deinit@Base 3.4.0
+ knot_tsig_key_init@Base 3.4.0
+ knot_tsig_key_init_file@Base 3.4.0
+ knot_tsig_key_init_str@Base 3.4.0
+ knot_tsig_rcode_names@Base 3.4.0
+ knot_tsig_rdata_alg@Base 3.4.0
+ knot_tsig_rdata_alg_name@Base 3.4.0
+ knot_tsig_rdata_error@Base 3.4.0
+ knot_tsig_rdata_fudge@Base 3.4.0
+ knot_tsig_rdata_is_ok@Base 3.4.0
+ knot_tsig_rdata_mac@Base 3.4.0
+ knot_tsig_rdata_mac_length@Base 3.4.0
+ knot_tsig_rdata_orig_id@Base 3.4.0
+ knot_tsig_rdata_other_data@Base 3.4.0
+ knot_tsig_rdata_other_data_length@Base 3.4.0
+ knot_tsig_rdata_set_fudge@Base 3.4.0
+ knot_tsig_rdata_set_mac@Base 3.4.0
+ knot_tsig_rdata_set_orig_id@Base 3.4.0
+ knot_tsig_rdata_set_other_data@Base 3.4.0
+ knot_tsig_rdata_set_time_signed@Base 3.4.0
+ knot_tsig_rdata_time_signed@Base 3.4.0
+ knot_tsig_rdata_tsig_timers_length@Base 3.4.0
+ knot_tsig_rdata_tsig_variables_length@Base 3.4.0
+ knot_tsig_server_check@Base 3.4.0
+ knot_tsig_sign@Base 3.4.0
+ knot_tsig_sign_next@Base 3.4.0
+ knot_tsig_wire_maxsize@Base 3.4.0
+ knot_tsig_wire_size@Base 3.4.0
+ knot_xdp_deinit@Base 3.4.0
+ knot_xdp_init@Base 3.4.0
+ knot_xdp_recv@Base 3.4.0
+ knot_xdp_recv_finish@Base 3.4.0
+ knot_xdp_reply_alloc@Base 3.4.0
+ knot_xdp_send@Base 3.4.0
+ knot_xdp_send_alloc@Base 3.4.0
+ knot_xdp_send_finish@Base 3.4.0
+ knot_xdp_send_free@Base 3.4.0
+ knot_xdp_send_prepare@Base 3.4.0
+ knot_xdp_socket_info@Base 3.4.0
+ knot_xdp_socket_stats@Base 3.4.0
+ knot_xdp_socket_fd@Base 3.4.0
+ yp_addr@Base 3.4.0
+ yp_addr_noport@Base 3.4.0
+ yp_addr_noport_to_bin@Base 3.4.0
+ yp_addr_noport_to_txt@Base 3.4.0
+ yp_addr_range_to_bin@Base 3.4.0
+ yp_addr_range_to_txt@Base 3.4.0
+ yp_addr_to_bin@Base 3.4.0
+ yp_addr_to_txt@Base 3.4.0
+ yp_base64_to_bin@Base 3.4.0
+ yp_base64_to_txt@Base 3.4.0
+ yp_bool_to_bin@Base 3.4.0
+ yp_bool_to_txt@Base 3.4.0
+ yp_deinit@Base 3.4.0
+ yp_dname_to_bin@Base 3.4.0
+ yp_dname_to_txt@Base 3.4.0
+ yp_format_id@Base 3.4.0
+ yp_format_key0@Base 3.4.0
+ yp_format_key1@Base 3.4.0
+ yp_hex_to_bin@Base 3.4.0
+ yp_hex_to_txt@Base 3.4.0
+ yp_init@Base 3.4.0
+ yp_int_to_bin@Base 3.4.0
+ yp_int_to_txt@Base 3.4.0
+ yp_item_to_bin@Base 3.4.0
+ yp_item_to_txt@Base 3.4.0
+ yp_option_to_bin@Base 3.4.0
+ yp_option_to_txt@Base 3.4.0
+ yp_parse@Base 3.4.0
+ yp_schema_check_deinit@Base 3.4.0
+ yp_schema_check_init@Base 3.4.0
+ yp_schema_check_parser@Base 3.4.0
+ yp_schema_check_str@Base 3.4.0
+ yp_schema_copy@Base 3.4.0
+ yp_schema_find@Base 3.4.0
+ yp_schema_free@Base 3.4.0
+ yp_schema_merge@Base 3.4.0
+ yp_schema_purge_dynamic@Base 3.4.0
+ yp_set_input_file@Base 3.4.0
+ yp_set_input_string@Base 3.4.0
+ yp_str_to_bin@Base 3.4.0
+ yp_str_to_txt@Base 3.4.0
diff --git a/distro/pkg/deb/rules b/distro/pkg/deb/rules
index 82cc34b..c5c81d0 100755
--- a/distro/pkg/deb/rules
+++ b/distro/pkg/deb/rules
@@ -36,11 +36,9 @@ BASE_VERSION := $(shell echo $(DEB_VERSION) | sed 's/^\([^.]\+\.[^.]\+\).*/\1/')
 # invocation due to bug in dh-python's plugin_pyproject.py wheel unpack
 export PYBUILD_SYSTEM = distutils
 
-
 %:
 	dh $@ \
-	 --exclude=.la --exclude=example.com.zone \
-	 --with python3
+	  --with python3
 
 override_dh_auto_configure:
 	dh_auto_configure -- \
@@ -95,7 +93,7 @@ ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS)))
 endif
 
 override_dh_missing:
-	dh_missing --fail-missing
+	dh_missing --exclude=.la --fail-missing
 
 override_dh_installchangelogs:
 	dh_installchangelogs NEWS
diff --git a/distro/pkg/deb/ufw/knot b/distro/pkg/deb/ufw/knot
deleted file mode 100644
index ee36916..0000000
--- a/distro/pkg/deb/ufw/knot
+++ /dev/null
@@ -1,4 +0,0 @@
-[Knot]
-title=Internet Domain Name Server
-description=The Knot DNS implements an Internet domain name server.
-ports=53
diff --git a/distro/pkg/el-7/01-revert-AC_PROG_CC.patch b/distro/pkg/el-7/01-revert-AC_PROG_CC.patch
deleted file mode 100644
index fb49c00..0000000
--- a/distro/pkg/el-7/01-revert-AC_PROG_CC.patch
+++ /dev/null
@@ -1,18 +0,0 @@
-From: Daniel Salzman <daniel.salzman@nic.cz>
-Date: Sun, 20 Feb 2022 20:38:35 +0100
-Subject: [PATCH] Revert "configure: upgrade from AC_PROG_CC_C99 to AC_PROG_CC"
-
-diff --git a/configure.ac b/configure.ac
-index 6506197ed..c7df7f815 100644
---- a/configure.ac
-+++ b/configure.ac
-@@ -38,7 +38,8 @@ release_date=$($SED -n 's/^Knot DNS .* (\(.*\))/\1/p;q;' ${srcdir}/NEWS)
- AC_SUBST([RELEASE_DATE], $release_date)
- 
- # Set compiler compatibility flags
--AC_PROG_CC
-+AC_PROG_CC_C99 # AC_PROG_CC not supported by CentOS 7
-+AM_PROG_CC_C_O # Needed by CentOS 7
- AC_PROG_CPP_WERROR
- 
- # Set default CFLAGS
diff --git a/distro/pkg/el-7/02-fix-compilation-by-using-SHA-1.patch b/distro/pkg/el-7/02-fix-compilation-by-using-SHA-1.patch
deleted file mode 100644
index cbc5aa2..0000000
--- a/distro/pkg/el-7/02-fix-compilation-by-using-SHA-1.patch
+++ /dev/null
@@ -1,67 +0,0 @@
-From: Daniel Salzman <daniel.salzman@nic.cz>
-Date: Mon, 20 Mar 2023 14:57:54 +0100
-Subject: [PATCH] distro/el-7: fix compilation by using SHA-1 for PIN computation
-
-diff --git a/src/libknot/quic/quic.c b/src/libknot/quic/quic.c
-index 5610865f6..555c495d9 100644
---- a/src/libknot/quic/quic.c
-+++ b/src/libknot/quic/quic.c
-@@ -460,7 +460,7 @@ void knot_quic_conn_pin(knot_quic_conn_t *conn, uint8_t *pin, size_t *pin_size,
- 		goto error;
- 	}
- 
--	ret = gnutls_x509_crt_get_key_id(cert, GNUTLS_KEYID_USE_SHA256, pin, pin_size);
-+	ret = gnutls_x509_crt_get_key_id(cert, 0, pin, pin_size);
- 	if (ret != GNUTLS_E_SUCCESS) {
- 		gnutls_x509_crt_deinit(cert);
- 		goto error;
-diff --git a/src/utils/common/tls.c b/src/utils/common/tls.c
-index 245dd3f96..6a2e7a986 100644
---- a/src/utils/common/tls.c
-+++ b/src/utils/common/tls.c
-@@ -328,7 +328,7 @@ static int check_certificates(gnutls_session_t session, const list_t *pins)
- 
- 		uint8_t cert_pin[CERT_PIN_LEN] = { 0 };
- 		size_t cert_pin_size = sizeof(cert_pin);
--		ret = gnutls_x509_crt_get_key_id(cert, GNUTLS_KEYID_USE_SHA256,
-+		ret = gnutls_x509_crt_get_key_id(cert, 0,
- 		                                 cert_pin, &cert_pin_size);
- 		if (ret != 0) {
- 			gnutls_x509_crt_deinit(cert);
-@@ -336,18 +336,18 @@ static int check_certificates(gnutls_session_t session, const list_t *pins)
- 		}
- 
- 		// Check if correspond to a specified PIN.
--		bool match = check_pin(cert_pin, sizeof(cert_pin), pins);
-+		bool match = check_pin(cert_pin, cert_pin_size, pins);
- 		if (match) {
- 			matches++;
- 		}
- 
- 		uint8_t *txt_pin;
--		ret = knot_base64_encode_alloc(cert_pin, sizeof(cert_pin), &txt_pin);
-+		ret = knot_base64_encode_alloc(cert_pin, cert_pin_size, &txt_pin);
- 		if (ret < 0) {
- 			gnutls_x509_crt_deinit(cert);
- 			return ret;
- 		}
--		DBG("     SHA-256 PIN: %.*s%s", ret, txt_pin, match ? ", MATCH" : "");
-+		DBG("     SHA-1 PIN: %.*s%s", ret, txt_pin, match ? ", MATCH" : "");
- 		free(txt_pin);
- 
- 		gnutls_x509_crt_deinit(cert);
-diff --git a/src/utils/kdig/kdig_params.c b/src/utils/kdig/kdig_params.c
-index 359b8b596..8fd33b011 100644
---- a/src/utils/kdig/kdig_params.c
-+++ b/src/utils/kdig/kdig_params.c
-@@ -707,8 +707,8 @@ static int opt_tls_pin(const char *arg, void *query)
- 	if (ret < 0) {
- 		ERR("invalid +tls-pin=%s", arg);
- 		return ret;
--	} else if (ret != CERT_PIN_LEN) { // Check for 256-bit value.
--		ERR("invalid sha256 hash length +tls-pin=%s", arg);
-+	} else if (ret != 20) { // Check for 256-bit value.
-+		ERR("invalid sha1 hash length +tls-pin=%s", arg);
- 		return KNOT_EINVAL;
- 	}
-
diff --git a/distro/pkg/el-7/03-doc-don-t-try-to-import-sphinx_panels.patch b/distro/pkg/el-7/03-doc-don-t-try-to-import-sphinx_panels.patch
deleted file mode 100644
index 8ef7e7e..0000000
--- a/distro/pkg/el-7/03-doc-don-t-try-to-import-sphinx_panels.patch
+++ /dev/null
@@ -1,25 +0,0 @@
-From c05abb0401d3343b96ced4a6cdd724ee04adfe1b Mon Sep 17 00:00:00 2001
-From: Daniel Salzman <daniel.salzman@nic.cz>
-Date: Mon, 21 Aug 2023 16:54:46 +0200
-Subject: [PATCH] doc: don't try to import sphinx_panels on CentOS 7
-
-
- 1 file changed, 3 deletions(-)
-
-diff --git a/doc/conf.py b/doc/conf.py
-index fc2e94d96..515241051 100644
---- a/doc/conf.py
-+++ b/doc/conf.py
-@@ -27,9 +27,6 @@ sys.path.insert(0, os.path.abspath('ext'))
- 
- # Add any Sphinx extension module names here, as strings. They can be extensions
- # coming with Sphinx (named 'sphinx.ext.*') or your custom ones.
--import importlib.util
--if importlib.util.find_spec("sphinx_panels"):
--    extensions = [ 'sphinx_panels' ]
- 
- # Add any paths that contain templates here, relative to this directory.
- templates_path = ['_templates']
--- 
-2.25.1
-
diff --git a/distro/pkg/el-7/04-revert-don-t-share-PKCS-11-private-keys.patch b/distro/pkg/el-7/04-revert-don-t-share-PKCS-11-private-keys.patch
deleted file mode 100644
index d360433..0000000
--- a/distro/pkg/el-7/04-revert-don-t-share-PKCS-11-private-keys.patch
+++ /dev/null
@@ -1,160 +0,0 @@
-From 1bad8f831a9fd506516549ac7461f97c689a0c46 Mon Sep 17 00:00:00 2001
-From: Daniel Salzman <daniel.salzman@nic.cz>
-Date: Mon, 11 Dec 2023 17:08:23 +0100
-Subject: [PATCH] Revert "zone-sign: don't share PKCS 11 private keys by
- multiple signing threads"
-
-This reverts commit 7d63e8e0825e03b8e0608e87b86968c452755c93.
----
- src/knot/dnssec/zone-keys.c | 38 +++----------------------------------
- src/libdnssec/key.h         |  4 ++--
- src/libdnssec/key/key.c     | 24 +----------------------
- tests/libdnssec/test_key.c  |  4 ++--
- 4 files changed, 8 insertions(+), 62 deletions(-)
-
-diff --git a/src/knot/dnssec/zone-keys.c b/src/knot/dnssec/zone-keys.c
-index cd6bf0bb3..d5cccc759 100644
---- a/src/knot/dnssec/zone-keys.c
-+++ b/src/knot/dnssec/zone-keys.c
-@@ -642,21 +642,6 @@ int zone_key_calculate_ds(zone_key_t *for_key, dnssec_key_digest_t digesttype,
- 	return ret;
- }
- 
--static int dup_zone_key(const zone_key_t *src, zone_key_t *dst)
--{
--	assert(src);
--	assert(dst);
--
--	*dst = *src;
--
--	dst->key = dnssec_key_dup(src->key);
--	if (dst->key == NULL) {
--		return KNOT_ENOMEM;
--	}
--
--	return KNOT_EOK;
--}
--
- zone_sign_ctx_t *zone_sign_ctx(const zone_keyset_t *keyset, const kdnssec_ctx_t *dnssec_ctx)
- {
- 	zone_sign_ctx_t *ctx = calloc(1, sizeof(*ctx) + keyset->count * sizeof(*ctx->sign_ctxs));
-@@ -665,24 +650,11 @@ zone_sign_ctx_t *zone_sign_ctx(const zone_keyset_t *keyset, const kdnssec_ctx_t
- 	}
- 
- 	ctx->sign_ctxs = (dnssec_sign_ctx_t **)(ctx + 1);
--
--	ctx->keys = calloc(keyset->count, sizeof(*ctx->keys));
--	if (ctx->keys == NULL) {
--		zone_sign_ctx_free(ctx);
--		return NULL;
--	}
- 	ctx->count = keyset->count;
--
-+	ctx->keys = keyset->keys;
- 	ctx->dnssec_ctx = dnssec_ctx;
- 	for (size_t i = 0; i < ctx->count; i++) {
--		// Clone the key to avoid thread contention on the key mutex.
--		int ret = dup_zone_key(&keyset->keys[i], &ctx->keys[i]);
--		if (ret != KNOT_EOK) {
--			zone_sign_ctx_free(ctx);
--			return NULL;
--		}
--
--		ret = dnssec_sign_new(&ctx->sign_ctxs[i], ctx->keys[i].key);
-+		int ret = dnssec_sign_new(&ctx->sign_ctxs[i], ctx->keys[i].key);
- 		if (ret != DNSSEC_EOK) {
- 			zone_sign_ctx_free(ctx);
- 			return NULL;
-@@ -719,12 +691,8 @@ void zone_sign_ctx_free(zone_sign_ctx_t *ctx)
- {
- 	if (ctx != NULL) {
- 		for (size_t i = 0; i < ctx->count; i++) {
--			if (ctx->keys != NULL) {
--				dnssec_key_free(ctx->keys[i].key);
--			}
- 			dnssec_sign_free(ctx->sign_ctxs[i]);
- 		}
--		free(ctx->keys);
- 		free(ctx);
- 	}
- }
-diff --git a/src/libdnssec/key.h b/src/libdnssec/key.h
-index aa8002b4a..2a69d377f 100644
---- a/src/libdnssec/key.h
-+++ b/src/libdnssec/key.h
-@@ -1,4 +1,4 @@
--/*  Copyright (C) 2023 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
-+/*  Copyright (C) 2022 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
- 
-     This program is free software: you can redistribute it and/or modify
-     it under the terms of the GNU General Public License as published by
-@@ -134,7 +134,7 @@ void dnssec_key_free(dnssec_key_t *key);
- /*!
-  * Create a copy of a DNSSEC key.
-  *
-- * Public key isn't duplicated.
-+ * Only a public part of the key is copied.
-  */
- dnssec_key_t *dnssec_key_dup(const dnssec_key_t *key);
- 
-diff --git a/src/libdnssec/key/key.c b/src/libdnssec/key/key.c
-index 4574bbefb..f36316712 100644
---- a/src/libdnssec/key/key.c
-+++ b/src/libdnssec/key/key.c
-@@ -1,4 +1,4 @@
--/*  Copyright (C) 2023 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
-+/*  Copyright (C) 2019 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
- 
-     This program is free software: you can redistribute it and/or modify
-     it under the terms of the GNU General Public License as published by
-@@ -141,28 +141,6 @@ dnssec_key_t *dnssec_key_dup(const dnssec_key_t *key)
- 		return NULL;
- 	}
- 
--	if (key->private_key != NULL) {
--		gnutls_privkey_init(&dup->private_key);
--
--		gnutls_privkey_type_t type = gnutls_privkey_get_type(key->private_key);
--		if (type == GNUTLS_PRIVKEY_PKCS11) {
--#ifdef ENABLE_PKCS11
--			gnutls_pkcs11_privkey_t tmp;
--			gnutls_privkey_export_pkcs11(key->private_key, &tmp);
--			gnutls_privkey_import_pkcs11(dup->private_key, tmp,
--			                             GNUTLS_PRIVKEY_IMPORT_AUTO_RELEASE);
--#else
--			assert(0);
--#endif // ENABLE_PKCS11
--		} else {
--			assert(type == GNUTLS_PRIVKEY_X509);
--			gnutls_x509_privkey_t tmp;
--			gnutls_privkey_export_x509(key->private_key, &tmp);
--			gnutls_privkey_import_x509(dup->private_key, tmp,
--			                           GNUTLS_PRIVKEY_IMPORT_AUTO_RELEASE);
--		}
--	}
--
- 	return dup;
- }
- 
-diff --git a/tests/libdnssec/test_key.c b/tests/libdnssec/test_key.c
-index c3643f08c..cd0aaee0e 100644
---- a/tests/libdnssec/test_key.c
-+++ b/tests/libdnssec/test_key.c
-@@ -1,4 +1,4 @@
--/*  Copyright (C) 2023 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
-+/*  Copyright (C) 2021 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
- 
-     This program is free software: you can redistribute it and/or modify
-     it under the terms of the GNU General Public License as published by
-@@ -148,7 +148,7 @@ static void test_private_key(const key_parameters_t *params)
- 
- 	check_key_tag(copy, params);
- 	check_key_size(copy, params);
--	check_usage(copy, true, true);
-+	check_usage(copy, true, false);
- 
- 	dnssec_key_free(copy);
- 	dnssec_key_free(key);
--- 
-2.34.1
-
diff --git a/distro/pkg/el-7/05-revert-mod-dnstap-TCP-sink.patch b/distro/pkg/el-7/05-revert-mod-dnstap-TCP-sink.patch
deleted file mode 100644
index dae0fac..0000000
--- a/distro/pkg/el-7/05-revert-mod-dnstap-TCP-sink.patch
+++ /dev/null
@@ -1,160 +0,0 @@
-From d236d2b7fcd5fa607f7bfd38044eb6f510fac7ce Mon Sep 17 00:00:00 2001
-From: Daniel Salzman <daniel.salzman@nic.cz>
-Date: Wed, 12 Jun 2024 11:18:31 +0200
-Subject: [PATCH] Revert "mod-dnstap: add sink for TCP connection"
-
-This reverts commit 2ffd7dfa58ddcd1b860f0c9980fd082c3852d3e6.
----
- src/knot/modules/dnstap/dnstap.c   | 74 +++++-------------------------
- src/knot/modules/dnstap/dnstap.rst |  9 ++--
- 2 files changed, 15 insertions(+), 68 deletions(-)
-
-diff --git a/src/knot/modules/dnstap/dnstap.c b/src/knot/modules/dnstap/dnstap.c
-index 612e48869..c8c82eaa4 100644
---- a/src/knot/modules/dnstap/dnstap.c
-+++ b/src/knot/modules/dnstap/dnstap.c
-@@ -1,4 +1,4 @@
--/*  Copyright (C) 2024 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
-+/*  Copyright (C) 2023 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>
- 
-     This program is free software: you can redistribute it and/or modify
-     it under the terms of the GNU General Public License as published by
-@@ -185,33 +185,6 @@ finish:
- 	return writer;
- }
- 
--static struct fstrm_writer* dnstap_tcp_writer(const char *address, const char *port)
--{
--	struct fstrm_tcp_writer_options *opt = NULL;
--	struct fstrm_writer_options *wopt = NULL;
--	struct fstrm_writer *writer = NULL;
--
--	opt =  fstrm_tcp_writer_options_init();
--	if (opt == NULL) {
--		goto finish;
--	}
--
--	fstrm_tcp_writer_options_set_socket_address(opt, address);
--	fstrm_tcp_writer_options_set_socket_port(opt, port);
--
--	wopt = fstrm_writer_options_init();
--	if (wopt == NULL) {
--		goto finish;
--	}
--	fstrm_writer_options_add_content_type(wopt, DNSTAP_CONTENT_TYPE,
--	                                      strlen(DNSTAP_CONTENT_TYPE));
--	writer = fstrm_tcp_writer_init(opt, wopt);
--finish:
--	fstrm_tcp_writer_options_destroy(&opt);
--	fstrm_writer_options_destroy(&wopt);
--	return writer;
--}
--
- /*! \brief Create a basic file writer sink. */
- static struct fstrm_writer* dnstap_file_writer(const char *path)
- {
-@@ -240,42 +213,17 @@ finish:
- }
- 
- /*! \brief Create a log sink according to the path string. */
--static struct fstrm_writer* dnstap_writer(knotd_mod_t *mod, const char *path)
-+static struct fstrm_writer* dnstap_writer(const char *path)
- {
--	const char *unix_prefix = "unix:";
--	const size_t unix_prefix_len = strlen(unix_prefix);
--
--	const char *tcp_prefix = "tcp:";
--	const size_t tcp_prefix_len = strlen(tcp_prefix);
--
--	const size_t path_len = strlen(path);
-+	const char *prefix = "unix:";
-+	const size_t prefix_len = strlen(prefix);
- 
- 	/* UNIX socket prefix. */
--	if (path_len > unix_prefix_len &&
--	    strncmp(path, unix_prefix, unix_prefix_len) == 0) {
--		knotd_mod_log(mod, LOG_DEBUG, "using sink UNIX socket '%s'", path);
--		return dnstap_unix_writer(path + unix_prefix_len);
--	/* TCP socket prefix. */
--	} else if (path_len > tcp_prefix_len &&
--	           strncmp(path, tcp_prefix, tcp_prefix_len) == 0) {
--		char addr[INET6_ADDRSTRLEN] = { 0 };
--		const char *delimiter = strchr(path + tcp_prefix_len, '@');
--		if (delimiter == NULL) {
--			return NULL;
--		}
--		size_t addr_len = delimiter - path - tcp_prefix_len;
--		if (addr_len >= sizeof(addr)) {
--			return NULL;
--		}
--		memcpy(addr, path + tcp_prefix_len, addr_len);
--		knotd_mod_log(mod, LOG_DEBUG, "using sink TCP address '%s' port '%s'",
--		              addr, delimiter + 1);
--		return dnstap_tcp_writer(addr, delimiter + 1);
--	/* File path. */
--	} else {
--		knotd_mod_log(mod, LOG_DEBUG, "using sink file '%s'", path);
--		return dnstap_file_writer(path);
-+	if (strlen(path) > prefix_len && strncmp(path, prefix, prefix_len) == 0) {
-+		return dnstap_unix_writer(path + prefix_len);
- 	}
-+
-+	return dnstap_file_writer(path);
- }
- 
- int dnstap_load(knotd_mod_t *mod)
-@@ -325,7 +273,7 @@ int dnstap_load(knotd_mod_t *mod)
- 	const bool log_responses = conf.single.boolean;
- 
- 	/* Initialize the writer and the options. */
--	struct fstrm_writer *writer = dnstap_writer(mod, sink);
-+	struct fstrm_writer *writer = dnstap_writer(sink);
- 	if (writer == NULL) {
- 		goto fail;
- 	}
-@@ -359,13 +307,13 @@ int dnstap_load(knotd_mod_t *mod)
- 
- 	return KNOT_EOK;
- fail:
--	knotd_mod_log(mod, LOG_ERR, "failed to initialize sink '%s'", sink);
-+	knotd_mod_log(mod, LOG_ERR, "failed to init sink '%s'", sink);
- 
- 	free(ctx->identity);
- 	free(ctx->version);
- 	free(ctx);
- 
--	return KNOT_EINVAL;
-+	return KNOT_ENOMEM;
- }
- 
- void dnstap_unload(knotd_mod_t *mod)
-diff --git a/src/knot/modules/dnstap/dnstap.rst b/src/knot/modules/dnstap/dnstap.rst
-index 05eac09ab..358977da0 100644
---- a/src/knot/modules/dnstap/dnstap.rst
-+++ b/src/knot/modules/dnstap/dnstap.rst
-@@ -11,7 +11,7 @@ Example
- -------
- 
- The configuration comprises only a :ref:`mod-dnstap_sink` path parameter,
--which can be either a file, a UNIX socket, or a TCP address::
-+which can be either a file or a UNIX socket::
- 
-    mod-dnstap:
-      - id: capture_all
-@@ -60,10 +60,9 @@ A module identifier.
- sink
- ....
- 
--A sink path, which can be either a file, a UNIX socket when prefixed with
--``unix:``, or a TCP `address@port` when prefixed with ``tcp:``. The file may
--be specified as an absolute path or a path relative to
--the :doc:`knotd<man_knotd>` startup directory.
-+A sink path, which can be either a file or a UNIX socket when prefixed with
-+``unix:``. The file may be specified as an absolute path or a path relative
-+to the :doc:`knotd<man_knotd>` startup directory.
- 
- *Required*
- 
--- 
-2.34.1
-
diff --git a/distro/pkg/el-7/knot.service b/distro/pkg/el-7/knot.service
deleted file mode 100644
index a872929..0000000
--- a/distro/pkg/el-7/knot.service
+++ /dev/null
@@ -1,25 +0,0 @@
-[Unit]
-Description=Knot DNS server
-Wants=network-online.target
-After=network-online.target
-Documentation=man:knotd(8) man:knot.conf(5) man:knotc(8)
-
-[Service]
-Type=notify
-User=knot
-Group=knot
-CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_SETPCAP
-AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_SETPCAP
-ExecStartPre=/usr/sbin/knotc conf-check
-ExecStart=/usr/sbin/knotd -m "$KNOT_CONF_MAX_SIZE"
-ExecReload=/bin/kill -HUP $MAINPID
-Restart=on-abort
-LimitNOFILE=1048576
-TimeoutStopSec=300
-# Extend the systemd startup timeout by this value (seconds) for each zone
-Environment="KNOT_ZONE_LOAD_TIMEOUT_SEC=180"
-# Maximum size (MiB) of a configuration database
-Environment="KNOT_CONF_MAX_SIZE=512"
-
-[Install]
-WantedBy=multi-user.target
diff --git a/distro/pkg/el-7/knot.spec b/distro/pkg/el-7/knot.spec
deleted file mode 100644
index 887f988..0000000
--- a/distro/pkg/el-7/knot.spec
+++ /dev/null
@@ -1,334 +0,0 @@
-%global _hardened_build 1
-%{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}}
-
-%define GPG_CHECK 0
-%define BASE_VERSION %(echo "%{version}" | sed 's/^\\([^.]\\+\\.[^.]\\+\\).*/\\1/')
-%define repodir %{_builddir}/%{name}-%{version}
-
-Summary:	High-performance authoritative DNS server
-Name:		knot
-Version:	{{ version }}
-Release:	cznic.{{ release }}%{?dist}
-License:	GPL-3.0-or-later
-URL:		https://www.knot-dns.cz
-Source0:	%{name}-%{version}.tar.xz
-
-%if 0%{?GPG_CHECK}
-Source1:	https://secure.nic.cz/files/knot-dns/%{name}-%{version}.tar.xz.asc
-# PGP keys used to sign upstream releases
-# Export with --armor using command from https://fedoraproject.org/wiki/PackagingDrafts:GPGSignatures
-# Don't forget to update %%prep section when adding/removing keys
-Source100:	gpgkey-742FA4E95829B6C5EAC6B85710BB7AF6FEBBD6AB.gpg.asc
-BuildRequires:	gnupg2
-%endif
-
-Patch1:		01-revert-AC_PROG_CC.patch
-Patch2:		02-fix-compilation-by-using-SHA-1.patch
-Patch3:		03-doc-don-t-try-to-import-sphinx_panels.patch
-Patch4:		04-revert-don-t-share-PKCS-11-private-keys.patch
-Patch5:		05-revert-mod-dnstap-TCP-sink.patch
-
-# Required dependencies
-BuildRequires:	autoconf
-BuildRequires:	automake
-BuildRequires:	libtool
-BuildRequires:	devtoolset-11-make
-BuildRequires:	devtoolset-11-gcc
-BuildRequires:	pkgconfig(liburcu)
-BuildRequires:	pkgconfig(gnutls) >= 3.3
-BuildRequires:	pkgconfig(libedit)
-
-# Optional dependencies
-BuildRequires:	pkgconfig(libcap-ng)
-BuildRequires:	pkgconfig(libidn2)
-BuildRequires:	pkgconfig(libmnl)
-BuildRequires:	pkgconfig(libnghttp2)
-BuildRequires:	pkgconfig(libsystemd)
-BuildRequires:	pkgconfig(systemd)
-# dnstap dependencies
-BuildRequires:	pkgconfig(libfstrm)
-BuildRequires:	pkgconfig(libprotobuf-c)
-# geoip dependencies
-BuildRequires:	pkgconfig(libmaxminddb)
-
-# Distro-dependent dependencies
-%if 0%{?suse_version}
-BuildRequires:	python3-Sphinx
-BuildRequires:	lmdb-devel
-BuildRequires:	protobuf-c
-Requires(pre):	pwdutils
-%endif
-%if 0%{?rhel} && 0%{?rhel} <= 7
-BuildRequires:	python-sphinx
-BuildRequires:	lmdb-devel
-%endif
-%if 0%{?fedora} || 0%{?rhel} > 7
-BuildRequires:	python3-sphinx
-BuildRequires:	pkgconfig(lmdb)
-%endif
-
-# disable XDP on old EL
-%define configure_xdp --enable-xdp=no
-
-Requires(post):		systemd %{_sbindir}/runuser
-Requires(preun):	systemd
-Requires(postun):	systemd
-
-Conflicts:	knot-resolver < 5.7.0
-
-Requires:	%{name}-libs%{?_isa} = %{version}-%{release}
-
-%description
-Knot DNS is a high-performance authoritative DNS server implementation.
-
-%package libs
-Summary:	Libraries used by the Knot DNS server and client applications
-
-%description libs
-The package contains shared libraries used by the Knot DNS server and
-utilities.
-
-%package devel
-Summary:	Development header files for the Knot DNS libraries
-Requires:	%{name}-libs%{?_isa} = %{version}-%{release}
-
-%description devel
-The package contains development header files for the Knot DNS libraries
-included in knot-libs package.
-
-%package utils
-Summary:	DNS client utilities shipped with the Knot DNS server
-Requires:	%{name}-libs%{?_isa} = %{version}-%{release}
-# Debian package compat
-Provides:	%{name}-dnsutils = %{version}-%{release}
-
-%description utils
-The package contains DNS client utilities shipped with the Knot DNS server.
-
-%package dnssecutils
-Summary:	DNSSEC tools shipped with the Knot DNS server
-Requires:	%{name}-libs%{?_isa} = %{version}-%{release}
-
-%description dnssecutils
-The package contains DNSSEC tools shipped with the Knot DNS server.
-
-%package module-dnstap
-Summary:	dnstap module for Knot DNS
-Requires:	%{name} = %{version}-%{release}
-
-%description module-dnstap
-The package contains dnstap Knot DNS module for logging DNS traffic.
-
-%package module-geoip
-Summary:	geoip module for Knot DNS
-Requires:	%{name} = %{version}-%{release}
-
-%description module-geoip
-The package contains geoip Knot DNS module for geography-based responses.
-
-%package doc
-Summary:	Documentation for the Knot DNS server
-BuildArch:	noarch
-Provides:	bundled(jquery)
-
-%description doc
-The package contains documentation for the Knot DNS server.
-On-line version is available on https://www.knot-dns.cz/documentation/
-
-%prep
-%if 0%{?GPG_CHECK}
-export GNUPGHOME=./gpg-keyring
-[ -d ${GNUPGHOME} ] && rm -r ${GNUPGHOME}
-mkdir --mode=700 ${GNUPGHOME}
-gpg2 --import %{SOURCE100}
-gpg2 --verify %{SOURCE1} %{SOURCE0}
-%endif
-%autosetup -p1
-
-%build
-# disable debug code (causes unused warnings)
-CFLAGS="%{optflags} -DNDEBUG -Wno-unused"
-
-%ifarch armv7hl i686
-# 32-bit architectures sometimes do not have sufficient amount of
-# contiguous address space to handle default values
-%define configure_db_sizes --with-conf-mapsize=64
-%endif
-
-autoreconf -if
-
-export CC="/opt/rh/devtoolset-11/root/usr/bin/gcc"
-%configure \
-  --sysconfdir=/etc \
-  --localstatedir=/var/lib \
-  --libexecdir=/usr/lib/knot \
-  --with-rundir=/run/knot \
-  --with-moduledir=%{_libdir}/knot/modules-%{BASE_VERSION} \
-  --with-storage=/var/lib/knot \
-  %{?configure_db_sizes} \
-  %{?configure_xdp} \
-  --disable-static \
-  --enable-dnstap=yes \
-  --with-module-dnstap=shared \
-  --with-module-geoip=shared
-make %{?_smp_mflags}
-make html
-
-%install
-make install DESTDIR=%{buildroot}
-
-# install documentation
-install -d -m 0755 %{buildroot}%{_pkgdocdir}/samples
-install -p -m 0644 -t %{buildroot}%{_pkgdocdir}/samples samples/*.zone*
-install -p -m 0644 NEWS README.md %{buildroot}%{_pkgdocdir}
-cp -av doc/_build/html %{buildroot}%{_pkgdocdir}
-[ -r %{buildroot}%{_pkgdocdir}/html/index.html ] || exit 1
-rm -f %{buildroot}%{_pkgdocdir}/html/.buildinfo
-
-# install daemon and dbus configuration files
-rm %{buildroot}%{_sysconfdir}/%{name}/*
-install -p -m 0644 -D %{repodir}/samples/%{name}.sample.conf %{buildroot}%{_sysconfdir}/%{name}/%{name}.conf
-%if 0%{?fedora} || 0%{?rhel} > 7
-install -p -m 0644 -D %{repodir}/distro/common/cz.nic.knotd.conf %{buildroot}%{_sysconfdir}/dbus-1/system.d/cz.nic.knotd.conf
-%endif
-
-# install systemd files
-install -p -m 0644 -D %{repodir}/distro/pkg/el-7/%{name}.service %{buildroot}%{_unitdir}/%{name}.service
-install -p -m 0644 -D %{repodir}/distro/pkg/el-7/%{name}.tmpfiles %{buildroot}%{_tmpfilesdir}/%{name}.conf
-%if 0%{?suse_version}
-ln -s service %{buildroot}/%{_sbindir}/rcknot
-%endif
-
-# create storage dir
-install -d %{buildroot}%{_sharedstatedir}
-install -d -m 0770 -D %{buildroot}%{_sharedstatedir}/knot
-
-# remove libarchive files
-find %{buildroot} -type f -name "*.la" -delete -print
-
-%check
-V=1 make check
-
-%pre
-getent group knot >/dev/null || groupadd -r knot
-getent passwd knot >/dev/null || \
-  useradd -r -g knot -d %{_sharedstatedir}/knot -s /sbin/nologin \
-  -c "Knot DNS server" knot
-%if 0%{?suse_version}
-%service_add_pre knot.service
-%endif
-
-%post
-systemd-tmpfiles --create %{_tmpfilesdir}/knot.conf &>/dev/null || :
-%if 0%{?suse_version}
-%service_add_post knot.service
-%else
-%systemd_post knot.service
-%endif
-
-%preun
-%if 0%{?suse_version}
-%service_del_preun knot.service
-%else
-%systemd_preun knot.service
-%endif
-
-%postun
-%if 0%{?suse_version}
-%service_del_postun knot.service
-%else
-%systemd_postun_with_restart knot.service
-%endif
-
-%if 0%{?fedora} || 0%{?rhel} > 7
-# https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets
-%else
-%post libs -p /sbin/ldconfig
-%postun libs -p /sbin/ldconfig
-%endif
-
-%files
-%license COPYING
-%doc %{_pkgdocdir}
-%exclude %{_pkgdocdir}/html
-%attr(770,root,knot) %dir %{_sysconfdir}/knot
-%config(noreplace) %attr(640,root,knot) %{_sysconfdir}/knot/knot.conf
-%if 0%{?fedora} || 0%{?rhel} > 7
-%config(noreplace) %attr(644,root,root) %{_sysconfdir}/dbus-1/system.d/cz.nic.knotd.conf
-%endif
-%attr(770,root,knot) %dir %{_sharedstatedir}/knot
-%dir %{_libdir}/knot
-%dir %{_libdir}/knot/modules-*
-%{_unitdir}/knot.service
-%{_tmpfilesdir}/knot.conf
-%{_sbindir}/kcatalogprint
-%{_sbindir}/kjournalprint
-%{_sbindir}/keymgr
-%{_sbindir}/knotc
-%{_sbindir}/knotd
-%if 0%{?suse_version}
-%{_sbindir}/rcknot
-%endif
-%{_mandir}/man5/knot.conf.*
-%{_mandir}/man8/kcatalogprint.*
-%{_mandir}/man8/kjournalprint.*
-%{_mandir}/man8/keymgr.*
-%{_mandir}/man8/knotc.*
-%{_mandir}/man8/knotd.*
-%ghost %attr(770,root,knot) %dir %{_rundir}/knot
-
-%files utils
-%{_bindir}/kdig
-%{_bindir}/khost
-%{_bindir}/knsupdate
-%if 0%{?use_xdp}
-%{_sbindir}/kxdpgun
-%{_mandir}/man8/kxdpgun.*
-%endif
-%{_mandir}/man1/kdig.*
-%{_mandir}/man1/khost.*
-%{_mandir}/man1/knsupdate.*
-
-%files dnssecutils
-%{_bindir}/knsec3hash
-%{_bindir}/kzonecheck
-%{_bindir}/kzonesign
-%{_mandir}/man1/knsec3hash.*
-%{_mandir}/man1/kzonecheck.*
-%{_mandir}/man1/kzonesign.*
-
-%files module-dnstap
-%{_libdir}/knot/modules-*/dnstap.so
-
-%files module-geoip
-%{_libdir}/knot/modules-*/geoip.so
-
-%files libs
-%license COPYING
-%doc NEWS
-%doc README.md
-%{_libdir}/libdnssec.so.*
-%{_libdir}/libknot.so.*
-%{_libdir}/libzscanner.so.*
-
-%files devel
-%{_includedir}/libdnssec
-%{_includedir}/knot
-%{_includedir}/libknot
-%{_includedir}/libzscanner
-%{_libdir}/libdnssec.so
-%{_libdir}/libknot.so
-%{_libdir}/libzscanner.so
-%{_libdir}/pkgconfig/knotd.pc
-%{_libdir}/pkgconfig/libdnssec.pc
-%{_libdir}/pkgconfig/libknot.pc
-%{_libdir}/pkgconfig/libzscanner.pc
-
-%files doc
-%dir %{_pkgdocdir}
-%doc %{_pkgdocdir}/html
-
-%changelog
-* {{ now }} Jakub Ružička <jakub.ruzicka@nic.cz> - {{ version }}-{{ release }}
-- upstream package
-- see https://www.knot-dns.cz
diff --git a/distro/pkg/el-7/knot.tmpfiles b/distro/pkg/el-7/knot.tmpfiles
deleted file mode 100644
index edec729..0000000
--- a/distro/pkg/el-7/knot.tmpfiles
+++ /dev/null
@@ -1,3 +0,0 @@
-# tmpfiles.d(5) runtime directory for knot
-#Type Path        Mode UID      GID      Age Argument
-    d /run/knot   0755 knot     knot     -   -
diff --git a/distro/pkg/rpm/knot.spec b/distro/pkg/rpm/knot.spec
index 3a7d89e..c99ea55 100644
--- a/distro/pkg/rpm/knot.spec
+++ b/distro/pkg/rpm/knot.spec
@@ -84,7 +84,7 @@ Knot DNS is a high-performance authoritative DNS server implementation.
 
 %package libs
 Summary:	Libraries used by the Knot DNS server and client applications
-Conflicts:	knot-resolver < 5.7.0
+Conflicts:	knot-resolver < 5.7.3
 
 %description libs
 The package contains shared libraries used by the Knot DNS server and