OpenWrt
/
packages
mirror of https://git.openwrt.org/feed/packages.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
packages/net/knot-resolver/Makefile

89 lines
2.5 KiB
Makefile
Raw Normal View History

knot-resolver: add new package Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-10-15 21:14:41 +08:00
#
knot-resolver: update to version 5.7.4 Knot Resolver 5.7.4 (2024-07-23) ================================ Security -------- - reduce buffering of transmitted data, especially TCP-based in userspace Also expose some of the new tweaks in lua: (require 'ffi').C.the_worker.engine.net.tcp.user_timeout = 1000 (require 'ffi').C.the_worker.engine.net.listen_{tcp,udp}_buflens.{snd,rcv} Improvements ------------ - add the fresh DNSSEC root key KSK-2024 already, Key ID 38696 Incompatible changes -------------------- - libknot 3.0.x support is dropped Upstream last maintained 3.0.x in spring 2022. Knot Resolver 5.7.3 (2024-05-30) ================================ Improvements ------------ - stats: add separate metrics for IPv6 and IPv4 Bugfixes -------- - fix NSEC3 records missing in answer for positive wildcard expansion with the NSEC3 having over-limit iteration count Knot Resolver 5.7.2 (2024-03-27) ================================ Bugfixes -------- - fix on 32-bit systems with 64-bit time_t Signed-off-by: Jan Hák <jan.hak@nic.cz>
2024-09-19 18:37:10 +08:00
# Copyright (C) 2015-2024 CZ.NIC, z. s. p. o. (https://www.nic.cz/)
knot-resolver: add new package Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-10-15 21:14:41 +08:00
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
PKG_RELRO_FULL:=0
include $(TOPDIR)/rules.mk
PKG_NAME:=knot-resolver
knot-resolver: update to version 5.7.4 Knot Resolver 5.7.4 (2024-07-23) ================================ Security -------- - reduce buffering of transmitted data, especially TCP-based in userspace Also expose some of the new tweaks in lua: (require 'ffi').C.the_worker.engine.net.tcp.user_timeout = 1000 (require 'ffi').C.the_worker.engine.net.listen_{tcp,udp}_buflens.{snd,rcv} Improvements ------------ - add the fresh DNSSEC root key KSK-2024 already, Key ID 38696 Incompatible changes -------------------- - libknot 3.0.x support is dropped Upstream last maintained 3.0.x in spring 2022. Knot Resolver 5.7.3 (2024-05-30) ================================ Improvements ------------ - stats: add separate metrics for IPv6 and IPv4 Bugfixes -------- - fix NSEC3 records missing in answer for positive wildcard expansion with the NSEC3 having over-limit iteration count Knot Resolver 5.7.2 (2024-03-27) ================================ Bugfixes -------- - fix on 32-bit systems with 64-bit time_t Signed-off-by: Jan Hák <jan.hak@nic.cz>
2024-09-19 18:37:10 +08:00
PKG_VERSION:=5.7.4
knot-resolver: Update to version 5.7.1 - Fixes CVE-2023-50868 and CVE-2023-50387 - Also, the resolver has not been called 'Knot DNS Resolver' for quite some time, so fix that, too. Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2024-02-13 21:17:31 +08:00
PKG_RELEASE:=1
knot-resolver: add new package Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-10-15 21:14:41 +08:00
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
PKG_SOURCE_URL:=https://secure.nic.cz/files/knot-resolver
knot-resolver: update to version 5.7.4 Knot Resolver 5.7.4 (2024-07-23) ================================ Security -------- - reduce buffering of transmitted data, especially TCP-based in userspace Also expose some of the new tweaks in lua: (require 'ffi').C.the_worker.engine.net.tcp.user_timeout = 1000 (require 'ffi').C.the_worker.engine.net.listen_{tcp,udp}_buflens.{snd,rcv} Improvements ------------ - add the fresh DNSSEC root key KSK-2024 already, Key ID 38696 Incompatible changes -------------------- - libknot 3.0.x support is dropped Upstream last maintained 3.0.x in spring 2022. Knot Resolver 5.7.3 (2024-05-30) ================================ Improvements ------------ - stats: add separate metrics for IPv6 and IPv4 Bugfixes -------- - fix NSEC3 records missing in answer for positive wildcard expansion with the NSEC3 having over-limit iteration count Knot Resolver 5.7.2 (2024-03-27) ================================ Bugfixes -------- - fix on 32-bit systems with 64-bit time_t Signed-off-by: Jan Hák <jan.hak@nic.cz>
2024-09-19 18:37:10 +08:00
PKG_HASH:=6b6da6ecf06828041afad44dfa227781f0ae34ad183a667008509355d18bd9c8
knot-resolver: add new package Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-10-15 21:14:41 +08:00
treewide: change email Change from jan.pavlinec@nic.cz to jan.pavlinec1@gmail.com Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-07-08 21:32:31 +08:00
PKG_MAINTAINER:=Jan Pavlinec <jan.pavlinec1@gmail.com>
knot-resolver: add new package Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-10-15 21:14:41 +08:00
PKG_LICENSE:=GPL-3.0-later
PKG_LICENSE_FILES:=COPYING
treewide: assign some PKG_CPE_IDs Assign some PKG_CPE_IDs to enhance CVE coverage. https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=aardvark-dns https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=alpine_project https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=boringssl https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=ecdsautils https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=file_project https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=knot_resolver https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=libwrap https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=lsof_project https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=nfdump https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=nlnetlabs%20name_server_daemon https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=rclone https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=setserial https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=tang_project https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=tesseract_project https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=tmate-ssh-server https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=ttyd https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=uw-imap https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=v2ray-core https://nvd.nist.gov/products/cpe/search/results?namingFormat=2.3&keyword=zstandard Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
2025-04-24 19:45:39 +08:00
PKG_CPE_ID:=cpe:/a:nic:knot_resolver
knot-resolver: add new package Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-10-15 21:14:41 +08:00
include $(INCLUDE_DIR)/package.mk
treewide: compile with tools/meson Signed-off-by: Rosen Penev <rosenp@gmail.com>
2021-09-08 06:24:45 +08:00
include $(INCLUDE_DIR)/meson.mk
knot-resolver: add new package Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-10-15 21:14:41 +08:00
define Package/knot-resolver
SECTION:=net
CATEGORY:=Network
SUBMENU:=IP Addresses and Names
knot-resolver: Update to version 5.7.1 - Fixes CVE-2023-50868 and CVE-2023-50387 - Also, the resolver has not been called 'Knot DNS Resolver' for quite some time, so fix that, too. Signed-off-by: Michal Hrusecky <michal.hrusecky@turris.com>
2024-02-13 21:17:31 +08:00
TITLE:=Knot Resolver
knot-resolver: add new package Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-10-15 21:14:41 +08:00
URL:=https://www.knot-resolver.cz
DEPENDS=\
+knot-libs \
+knot-libzscanner \
+libuv \
treewide: add HAS_LUAJIT_ARCH dependency to luajit user Add HAS_LUAJIT_ARCH dependency to any user of luajit to fix circular dependency limitation. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2023-09-24 01:02:07 +08:00
@HAS_LUAJIT_ARCH +luajit \
knot-resolver: add new package Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-10-15 21:14:41 +08:00
+luasec \
+luasocket \
+libstdcpp \
knot-resolver: update to version 5.3.0 Changes: - remove arch limit - add libnghttpd2 dependency Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-02-25 21:46:21 +08:00
+libnghttp2 \
knot-resolver: add new package Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-10-15 21:14:41 +08:00
+lmdb \
PACKAGE_knot-resolver_dnstap:libfstrm \
knot-resolver: update to version 5.3.0 Changes: - remove arch limit - add libnghttpd2 dependency Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2021-02-25 21:46:21 +08:00
PACKAGE_knot-resolver_dnstap:libprotobuf-c
knot-resolver: add new package Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2020-10-15 21:14:41 +08:00
USERID:=kresd=3536:kresd=3536
endef
define Package/knot-resolver/description
The Knot Resolver is a caching full resolver
implementation, including both a resolver library and a daemon.
endef
define Package/knot-resolver/config
source "$(SOURCE)/Config.in"
endef
MESON_ARGS+= \
$(if $(CONFIG_PACKAGE_knot-resolver_dnstap), -Ddnstap=enabled,-Ddnstap=disabled) \
-Dcapng=disabled \
-Dclient=disabled \
-Dconfig_tests=disabled \
-Ddoc=disabled \
-Dinstall_kresd_conf=disabled \
-Dinstall_root_keys=disabled \
-Dkeyfile_default=/etc/knot-resolver/root.keys \
-Dprefix=/usr \
-Dunit_tests=disabled \
-Dutils=disabled
define Package/knot-resolver/install
$(INSTALL_DIR) $(1)/usr/sbin
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/sbin/kresd $(1)/usr/sbin/
$(INSTALL_DIR) $(1)/usr/lib/knot-resolver
$(CP) $(PKG_INSTALL_DIR)/usr/lib/*.so* $(1)/usr/lib/
$(CP) $(PKG_INSTALL_DIR)/usr/lib/knot-resolver/{*.lua,*.so} $(1)/usr/lib/knot-resolver/
$(INSTALL_DIR) $(1)/usr/lib/knot-resolver/kres_modules
$(CP) $(PKG_INSTALL_DIR)/usr/lib/knot-resolver/kres_modules/{*.lua,*.so} $(1)/usr/lib/knot-resolver/kres_modules/
$(INSTALL_DIR) $(1)/etc/init.d
$(INSTALL_BIN) ./files/kresd.init $(1)/etc/init.d/kresd
$(INSTALL_DIR) $(1)/etc/knot-resolver
$(CP) $(PKG_INSTALL_DIR)/etc/knot-resolver/root.hints $(1)/etc/knot-resolver/
$(CP) ./files/root.keys $(1)/etc/knot-resolver
endef
$(eval $(call BuildPackage,knot-resolver))