From: "Marc Schiffbauer" <mschiff@gentoo.org>
To: gentoo-commits@lists.gentoo.org
Subject: [gentoo-commits] repo/gentoo:master commit in: net-dns/unbound/
Date: Wed, 28 Dec 2022 16:07:06 +0000 (UTC) [thread overview]
Message-ID: <1672243501.e3ce17731d70e556664407c6b773feedfdec55f1.mschiff@gentoo> (raw)
commit: e3ce17731d70e556664407c6b773feedfdec55f1
Author: Marc Schiffbauer <mschiff <AT> gentoo <DOT> org>
AuthorDate: Wed Dec 28 16:05:01 2022 +0000
Commit: Marc Schiffbauer <mschiff <AT> gentoo <DOT> org>
CommitDate: Wed Dec 28 16:05:01 2022 +0000
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e3ce1773
net-dns/unbound: add 1.17.0
Closes: https://bugs.gentoo.org/888675
Signed-off-by: Marc Schiffbauer <mschiff <AT> gentoo.org>
net-dns/unbound/Manifest | 2 +
net-dns/unbound/unbound-1.17.0.ebuild | 213 ++++++++++++++++++++++++++++++++++
2 files changed, 215 insertions(+)
diff --git a/net-dns/unbound/Manifest b/net-dns/unbound/Manifest
index 7c9893120384..7cc02ae03afd 100644
--- a/net-dns/unbound/Manifest
+++ b/net-dns/unbound/Manifest
@@ -1,2 +1,4 @@
DIST unbound-1.16.3.tar.gz 6204330 BLAKE2B b97deade78ab903363e06ff9d71b9895c754378ec276bb17556de62c48a88af5fbabd26f97fb47313d1e631fe75dee245aa38fbf42a865ac3e764882a1124a51 SHA512 ef5cda926dd1082a750615d8687bccd756869c66e9f24f984fda4c6613f94f3e4884db328b8d7b490777a75d3e616dcb61c5258e7777923c0590e6fabacd207c
DIST unbound-1.16.3.tar.gz.asc 833 BLAKE2B 2009dac660405b11725c046099cf9bd2f6ccea0bda8936530228b6ab3ceebfadd119b5d91ff1c86845d54444104f578597a574daed80a5e6e677c8f7d68b789b SHA512 b106f080d877e479d944a7ebe24a380f4c40c38308733f43f8a60d4e7aedc6597e6daa4a1428f596e705c9c75e6ee7b4187dbbc5750a9c406f59d76d4f1b4a8d
+DIST unbound-1.17.0.tar.gz 6235060 BLAKE2B 611c1b96ff84e6dd8f7a592135cc17f416cd810d0f35d27c8cedd56af069badd8dca112cc5927a1fe50ec3335c377b6bd6fc4e1a6d63a332a90d676e3c23dcef SHA512 f6b9f279330fb19b5feca09524959940aad8c4e064528aa82b369c726d77e9e8e5ca23f366f6e9edcf2c061b96f482ed7a2c26ac70fc15ae5762b3d7e36a5284
+DIST unbound-1.17.0.tar.gz.asc 833 BLAKE2B 8b77a16fa1287af7c12720cce0b45c1ab49f691a0516674d28009d5da8c71d5d56a9518e16fb752c2db58dc835223d55ff863bfc03971aa408eb0f65a65600bf SHA512 e1567f088bdf0a96dbdcf365deccb72f42319b9b29510d5d9aefbe66df054446d3dcdfcc54826046af6e4f751aa518798b968685611b1b7f1860f66a96e32a57
diff --git a/net-dns/unbound/unbound-1.17.0.ebuild b/net-dns/unbound/unbound-1.17.0.ebuild
new file mode 100644
index 000000000000..ccc9419c7b78
--- /dev/null
+++ b/net-dns/unbound/unbound-1.17.0.ebuild
@@ -0,0 +1,213 @@
+# Copyright 1999-2022 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI="8"
+PYTHON_COMPAT=( python3_{8..11} )
+
+inherit autotools flag-o-matic multilib-minimal python-single-r1 systemd verify-sig
+
+MY_P=${PN}-${PV/_/}
+DESCRIPTION="A validating, recursive and caching DNS resolver"
+HOMEPAGE="https://unbound.net/ https://nlnetlabs.nl/projects/unbound/about/"
+SRC_URI="https://nlnetlabs.nl/downloads/unbound/${MY_P}.tar.gz
+ verify-sig? ( https://nlnetlabs.nl/downloads/unbound/${MY_P}.tar.gz.asc )"
+VERIFY_SIG_OPENPGP_KEY_PATH=${BROOT}/usr/share/openpgp-keys/unbound.net.asc
+
+LICENSE="BSD GPL-2"
+SLOT="0/8" # ABI version of libunbound.so
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~mips ~ppc ~ppc64 ~riscv ~x86"
+IUSE="debug dnscrypt dnstap +ecdsa ecs gost +http2 python redis selinux static-libs systemd test +tfo threads"
+REQUIRED_USE="python? ( ${PYTHON_REQUIRED_USE} )"
+RESTRICT="!test? ( test )"
+
+# Note: expat is needed by executable only but the Makefile is custom
+# and doesn't make it possible to easily install the library without
+# the executables. MULTILIB_USEDEP may be dropped once build system
+# is fixed.
+
+CDEPEND="acct-group/unbound
+ acct-user/unbound
+ >=dev-libs/expat-2.1.0-r3[${MULTILIB_USEDEP}]
+ >=dev-libs/libevent-2.0.21:0=[${MULTILIB_USEDEP}]
+ >=dev-libs/openssl-1.0.1h-r2:0=[${MULTILIB_USEDEP}]
+ dnscrypt? ( dev-libs/libsodium:=[${MULTILIB_USEDEP}] )
+ dnstap? (
+ dev-libs/fstrm[${MULTILIB_USEDEP}]
+ >=dev-libs/protobuf-c-1.0.2-r1:=[${MULTILIB_USEDEP}]
+ )
+ ecdsa? (
+ dev-libs/openssl:0[-bindist(-)]
+ )
+ http2? ( net-libs/nghttp2:=[${MULTILIB_USEDEP}] )
+ python? ( ${PYTHON_DEPS} )
+ redis? ( dev-libs/hiredis:= )
+ systemd? ( sys-apps/systemd )
+"
+
+BDEPEND="virtual/pkgconfig
+ python? ( dev-lang/swig )
+ test? (
+ || (
+ net-libs/ldns[examples(-)]
+ net-dns/ldns-utils[examples(-)]
+ )
+ dev-util/splint
+ app-text/wdiff
+ )
+ verify-sig? ( sec-keys/openpgp-keys-unbound )
+"
+
+DEPEND="${CDEPEND}"
+
+RDEPEND="${CDEPEND}
+ net-dns/dnssec-root
+ selinux? ( sec-policy/selinux-bind )"
+
+# bug #347415
+RDEPEND="${RDEPEND}
+ net-dns/dnssec-root"
+
+PATCHES=(
+ "${FILESDIR}"/${PN}-1.5.7-trust-anchor-file.patch
+ "${FILESDIR}"/${PN}-1.6.3-pkg-config.patch
+ "${FILESDIR}"/${PN}-1.10.1-find-ar.patch
+)
+
+S=${WORKDIR}/${MY_P}
+
+pkg_setup() {
+ use python && python-single-r1_pkg_setup
+}
+
+src_prepare() {
+ default
+
+ eautoreconf
+
+ # required for the python part
+ multilib_copy_sources
+}
+
+src_configure() {
+ [[ ${CHOST} == *-darwin* ]] || append-ldflags -Wl,-z,noexecstack
+ multilib-minimal_src_configure
+}
+
+multilib_src_configure() {
+ econf \
+ $(multilib_native_use_enable debug) \
+ $(multilib_native_use_enable gost) \
+ $(multilib_native_use_enable dnscrypt) \
+ $(multilib_native_use_enable dnstap) \
+ $(multilib_native_use_enable ecdsa) \
+ $(multilib_native_use_enable ecs subnet) \
+ $(multilib_native_use_enable redis cachedb) \
+ $(multilib_native_use_enable static-libs static) \
+ $(multilib_native_use_enable systemd) \
+ $(multilib_native_use_with python pythonmodule) \
+ $(multilib_native_use_with python pyunbound) \
+ $(multilib_native_use_with threads pthreads) \
+ $(multilib_native_use_with http2 libnghttp2) \
+ $(multilib_native_use_enable tfo tfo-client) \
+ $(multilib_native_use_enable tfo tfo-server) \
+ --disable-flto \
+ --disable-rpath \
+ --enable-event-api \
+ --enable-ipsecmod \
+ --with-libevent="${ESYSROOT}"/usr \
+ $(multilib_native_usex redis --with-libhiredis="${ESYSROOT}/usr" --without-libhiredis) \
+ --with-pidfile="${EPREFIX}"/run/unbound.pid \
+ --with-rootkey-file="${EPREFIX}"/etc/dnssec/root-anchors.txt \
+ --with-ssl="${ESYSROOT}"/usr \
+ --with-libexpat="${ESYSROOT}"/usr
+
+ # http://unbound.nlnetlabs.nl/pipermail/unbound-users/2011-April/001801.html
+ # $(use_enable debug lock-checks) \
+ # $(use_enable debug alloc-checks) \
+ # $(use_enable debug alloc-lite) \
+ # $(use_enable debug alloc-nonregional) \
+}
+
+multilib_src_install() {
+ emake DESTDIR="${D}" install
+ systemd_dounit contrib/unbound.service
+ systemd_dounit contrib/unbound.socket
+}
+
+multilib_src_install_all() {
+ use python && python_optimize
+
+ newinitd "${FILESDIR}"/unbound-r1.initd unbound
+ newconfd "${FILESDIR}"/unbound-r1.confd unbound
+
+ systemd_newunit "${FILESDIR}"/unbound_at.service "unbound@.service"
+ systemd_dounit "${FILESDIR}"/unbound-anchor.service
+
+ dodoc doc/{README,CREDITS,TODO,Changelog,FEATURES}
+
+ # bug #315519
+ dodoc contrib/unbound_munin_
+
+ docinto selinux
+ dodoc contrib/selinux/*
+
+ exeinto /usr/share/${PN}
+ doexe contrib/update-anchor.sh
+
+ # create space for auto-trust-anchor-file...
+ keepdir /etc/unbound/var
+ fowners root:unbound /etc/unbound/var
+ fperms 0770 /etc/unbound/var
+ # ... and point example config to it
+ sed -i \
+ -e '/# auto-trust-anchor-file:/s,/etc/dnssec/root-anchors.txt,/etc/unbound/var/root-anchors.txt,' \
+ "${ED}/etc/unbound/unbound.conf" \
+ || die
+
+ # Used to store cache data
+ keepdir /var/lib/${PN}
+ fowners root:unbound /var/lib/${PN}
+ fperms 0770 /var/lib/${PN}
+
+ find "${ED}" -name '*.la' -delete || die
+ if ! use static-libs ; then
+ find "${ED}" -name "*.a" -delete || die
+ fi
+}
+
+pkg_postinst() {
+ if [[ ! -f "${EROOT}/etc/unbound/unbound_control.key" ]] ; then
+ einfo "Trying to create unbound control key ..."
+ if ! unbound-control-setup &>/dev/null ; then
+ ewarn "Failed to create unbound control key!"
+ fi
+ fi
+
+ if [[ ! -f "${EROOT}/etc/unbound/var/root-anchors.txt" ]] ; then
+ einfo ""
+ einfo "If you want unbound to automatically update the root-anchor file for DNSSEC validation"
+ einfo "set 'auto-trust-anchor-file: ${EROOT}/etc/unbound/var/root-anchors.txt' in ${EROOT}/etc/unbound/unbound.conf"
+ einfo "and run"
+ einfo ""
+ einfo " su -s /bin/sh -c '${EROOT}/usr/sbin/unbound-anchor -a ${EROOT}/etc/unbound/var/root-anchors.txt' unbound"
+ einfo ""
+ einfo "as root to create it initially before starting unbound for the first time after enabling this."
+ einfo ""
+ fi
+
+ # Our user is not available on prefix
+ use prefix && return
+
+ local _perm_check_testfile=$(mktemp --dry-run "${EPREFIX}"/etc/unbound/var/.pkg_postinst-perm-check.XXXXXXXXX)
+ su -s /bin/sh -c "touch ${_perm_check_testfile}" unbound &>/dev/null
+ if [ $? -ne 0 ] ; then
+ ewarn "WARNING: unbound user cannot write to \"${EPREFIX}/etc/unbound/var\"!"
+ ewarn "Run the following commands to restore default permission:"
+ ewarn ""
+ ewarn " chown root:unbound ${EPREFIX}/etc/unbound/var"
+ ewarn " chmod 0770 ${EPREFIX}/etc/unbound/var"
+ else
+ # Cleanup -- no reason to die here!
+ rm -f "${_perm_check_testfile}"
+ fi
+}
next reply other threads:[~2022-12-28 16:07 UTC|newest]
Thread overview: 193+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-12-28 16:07 Marc Schiffbauer [this message]
-- strict thread matches above, loose matches on Subject: below --
2025-06-22 16:03 [gentoo-commits] repo/gentoo:master commit in: net-dns/unbound/ Sam James
2025-06-22 16:03 Sam James
2025-06-22 15:23 Sam James
2025-05-15 18:04 Marc Schiffbauer
2025-05-14 23:37 Marc Schiffbauer
2025-05-01 20:04 Arthur Zamarin
2025-05-01 17:32 Sam James
2025-05-01 16:10 Sam James
2025-05-01 16:10 Sam James
2025-05-01 16:10 Sam James
2025-05-01 16:10 Sam James
2025-04-03 15:26 Sam James
2025-03-28 13:37 Marc Schiffbauer
2025-03-24 16:25 Arthur Zamarin
2025-03-24 0:33 Sam James
2025-03-24 0:33 Sam James
2025-03-24 0:33 Sam James
2025-03-24 0:33 Sam James
2025-03-24 0:33 Sam James
2024-10-25 5:46 Arthur Zamarin
2024-10-25 5:46 Arthur Zamarin
2024-10-24 22:19 Marc Schiffbauer
2024-10-24 18:34 Arthur Zamarin
2024-10-24 18:27 Arthur Zamarin
2024-06-03 7:36 Sam James
2024-05-28 12:29 Michał Górny
2024-05-10 21:03 Marc Schiffbauer
2024-05-10 20:57 Marc Schiffbauer
2024-04-15 8:53 Marc Schiffbauer
2024-03-02 18:42 Arthur Zamarin
2024-03-02 15:36 Arthur Zamarin
2024-03-02 12:11 Arthur Zamarin
2024-02-24 15:26 Arthur Zamarin
2024-02-24 10:07 Sam James
2024-02-21 11:05 Sam James
2024-02-14 9:55 Marc Schiffbauer
2024-01-12 8:30 Arthur Zamarin
2023-12-08 9:54 Sam James
2023-12-01 3:30 Sam James
2023-09-27 3:30 Sam James
2023-09-26 2:55 Sam James
2023-09-26 2:55 Sam James
2023-09-26 2:55 Sam James
2023-09-26 2:55 Sam James
2023-09-26 2:16 Sam James
2023-08-24 16:19 Sam James
2023-06-19 22:06 Sam James
2023-06-03 5:24 Jakov Smolić
2022-11-22 18:41 John Helmert III
2022-11-02 5:11 Jakov Smolić
2022-10-31 16:41 Agostino Sarubbo
2022-10-25 17:55 Sam James
2022-10-25 9:45 Arthur Zamarin
2022-10-25 9:45 Arthur Zamarin
2022-10-25 9:45 Arthur Zamarin
2022-10-25 9:28 Sam James
2022-10-12 14:30 Marc Schiffbauer
2022-08-28 15:10 Marc Schiffbauer
2022-06-20 11:36 Marc Schiffbauer
2022-06-20 11:36 Marc Schiffbauer
2022-06-03 8:12 Sam James
2022-03-27 9:43 Marc Schiffbauer
2022-03-27 9:43 Marc Schiffbauer
2022-03-27 9:43 Marc Schiffbauer
2022-03-27 0:24 Sam James
2022-01-25 21:25 Sam James
2021-12-29 10:04 Agostino Sarubbo
2021-12-28 19:29 Arthur Zamarin
2021-12-28 19:29 Arthur Zamarin
2021-12-28 10:19 Sam James
2021-12-28 5:56 Sam James
2021-12-27 10:46 Marc Schiffbauer
2021-12-24 10:57 Marc Schiffbauer
2021-12-24 10:57 Marc Schiffbauer
2021-12-04 16:21 Mike Gilbert
2021-09-02 10:45 Marc Schiffbauer
2021-08-24 13:17 Thomas Deutschmann
2021-08-18 14:59 Sam James
2021-06-25 19:36 Sam James
2021-06-09 6:24 Agostino Sarubbo
2021-06-08 6:59 Agostino Sarubbo
2021-06-07 16:16 Sam James
2021-06-07 16:16 Sam James
2021-05-02 19:19 Mikle Kolyada
2021-02-09 18:47 Thomas Deutschmann
2021-02-07 1:12 Sam James
2020-12-23 1:10 Thomas Deutschmann
2020-12-22 5:19 Sam James
2020-12-20 15:54 Thomas Deutschmann
2020-12-16 23:11 Sam James
2020-12-15 10:37 Sam James
2020-12-14 17:11 Mike Gilbert
2020-12-11 22:12 Sam James
2020-12-10 21:41 Thomas Deutschmann
2020-12-07 0:09 Sam James
2020-12-04 19:39 Thomas Deutschmann
2020-12-04 16:28 Thomas Deutschmann
2020-10-14 20:07 Marc Schiffbauer
2020-10-08 22:53 Thomas Deutschmann
2020-09-18 7:54 Agostino Sarubbo
2020-09-12 18:15 Sam James
2020-08-31 17:13 Thomas Deutschmann
2020-08-31 1:30 Sam James
2020-08-06 13:50 Thomas Deutschmann
2020-08-06 13:50 Thomas Deutschmann
2020-08-06 13:50 Thomas Deutschmann
2020-05-21 23:09 Thomas Deutschmann
2020-05-21 8:00 Agostino Sarubbo
2020-05-21 7:58 Agostino Sarubbo
2020-05-21 7:57 Agostino Sarubbo
2020-05-19 9:49 Thomas Deutschmann
2020-04-21 0:14 Thomas Deutschmann
2020-04-20 18:04 Agostino Sarubbo
2020-04-20 18:03 Agostino Sarubbo
2020-04-20 13:27 Agostino Sarubbo
2020-04-20 9:45 Agostino Sarubbo
2020-04-19 19:01 Agostino Sarubbo
2020-03-03 9:18 Michał Górny
2020-02-24 17:28 Thomas Deutschmann
2020-02-24 17:28 Thomas Deutschmann
2019-12-30 15:53 Agostino Sarubbo
2019-12-30 15:33 Agostino Sarubbo
2019-12-24 15:07 Mikle Kolyada
2019-12-15 13:43 Agostino Sarubbo
2019-12-14 22:11 Thomas Deutschmann
2019-12-14 21:19 Thomas Deutschmann
2019-11-22 9:51 Mikle Kolyada
2019-11-20 13:23 Agostino Sarubbo
2019-11-20 13:21 Agostino Sarubbo
2019-11-20 11:27 Agostino Sarubbo
2019-11-19 13:17 Thomas Deutschmann
2019-10-26 17:33 Thomas Deutschmann
2019-10-20 9:02 Mikle Kolyada
2019-10-07 10:38 Agostino Sarubbo
2019-10-06 21:18 Thomas Deutschmann
2019-10-05 0:37 Thomas Deutschmann
2019-09-03 22:23 Thomas Deutschmann
2019-06-17 18:11 Thomas Deutschmann
2019-05-30 14:05 Thomas Deutschmann
2019-05-21 17:46 Stephen Klimaszewski
2019-03-28 17:27 Aaron Bauman
2019-03-28 17:25 Aaron Bauman
2019-03-13 22:58 Thomas Deutschmann
2019-02-13 11:21 Mikle Kolyada
2019-02-09 19:59 Agostino Sarubbo
2019-02-09 18:36 Thomas Deutschmann
2019-02-09 15:37 Thomas Deutschmann
2018-12-12 11:10 Thomas Deutschmann
2018-12-10 16:45 Thomas Deutschmann
2018-12-02 8:52 Thomas Deutschmann
2018-11-18 15:27 Thomas Deutschmann
2018-10-17 17:32 Mikle Kolyada
2018-10-14 20:48 Marc Schiffbauer
2018-10-14 9:14 Sergei Trofimovich
2018-10-14 8:59 Sergei Trofimovich
2018-10-05 13:27 Mikle Kolyada
2018-10-05 12:25 Thomas Deutschmann
2018-09-14 22:13 Thomas Deutschmann
2018-09-14 22:13 Thomas Deutschmann
2018-09-14 22:13 Thomas Deutschmann
2018-09-14 22:13 Thomas Deutschmann
2018-09-13 22:36 Robin H. Johnson
2018-06-04 8:18 Marc Schiffbauer
2018-04-12 19:38 Marc Schiffbauer
2018-03-04 8:13 Michał Górny
2018-02-26 1:07 Marc Schiffbauer
2018-02-23 20:10 Marc Schiffbauer
2018-01-21 23:44 Robin H. Johnson
2017-10-12 6:00 Robin H. Johnson
2017-10-11 8:22 Jonas Stein
2017-09-27 16:47 Robin H. Johnson
2017-07-16 7:10 Michał Górny
2017-07-15 21:27 Marc Schiffbauer
2017-07-14 16:10 Marc Schiffbauer
2017-07-14 15:51 Marc Schiffbauer
2017-06-20 7:02 Marc Schiffbauer
2017-06-05 15:54 Thomas Deutschmann
2017-03-16 12:23 Michael Weber
2017-02-16 22:29 Michael Weber
2016-12-19 4:57 Mike Gilbert
2016-12-18 23:42 Robin H. Johnson
2016-12-18 20:47 Mike Gilbert
2016-12-17 3:53 Aaron Bauman
2016-11-01 23:46 Robin H. Johnson
2016-07-20 0:13 Robin H. Johnson
2016-06-26 11:47 Aaron Bauman
2016-06-26 11:47 Aaron Bauman
2016-04-29 21:44 Marc Schiffbauer
2016-04-29 21:44 Marc Schiffbauer
2015-12-07 0:02 Marc Schiffbauer
2015-12-07 0:02 Marc Schiffbauer
2015-09-15 5:59 Joshua Kinard
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1672243501.e3ce17731d70e556664407c6b773feedfdec55f1.mschiff@gentoo \
--to=mschiff@gentoo.org \
--cc=gentoo-commits@lists.gentoo.org \
--cc=gentoo-dev@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox