nixpkgs/pkgs/tools/networking/unbound/default.nix

54 lines
1.7 KiB
Nix
Raw Normal View History

2017-06-16 03:11:56 +00:00
{ stdenv, fetchurl, openssl, nettle, expat, libevent, dns-root-data }:
stdenv.mkDerivation rec {
2014-12-23 05:49:51 +00:00
name = "unbound-${version}";
unbound: 1.7.1 -> 1.7.2 Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/unbound/versions. These checks were done: - built on NixOS - Warning: no invocation of /nix/store/pka3ii26dp5xsxi7xs2rx3laxca2bv9l-unbound-1.7.2/bin/unbound had a zero exit code or showed the expected version - Warning: no invocation of /nix/store/pka3ii26dp5xsxi7xs2rx3laxca2bv9l-unbound-1.7.2/bin/unbound-checkconf had a zero exit code or showed the expected version - Warning: no invocation of /nix/store/pka3ii26dp5xsxi7xs2rx3laxca2bv9l-unbound-1.7.2/bin/unbound-control had a zero exit code or showed the expected version - /nix/store/pka3ii26dp5xsxi7xs2rx3laxca2bv9l-unbound-1.7.2/bin/unbound-host passed the binary check. - Warning: no invocation of /nix/store/pka3ii26dp5xsxi7xs2rx3laxca2bv9l-unbound-1.7.2/bin/unbound-anchor had a zero exit code or showed the expected version - Warning: no invocation of /nix/store/pka3ii26dp5xsxi7xs2rx3laxca2bv9l-unbound-1.7.2/bin/unbound-control-setup had a zero exit code or showed the expected version - 1 of 6 passed binary check by having a zero exit code. - 0 of 6 passed binary check by having the new version present in output. - found 1.7.2 with grep in /nix/store/pka3ii26dp5xsxi7xs2rx3laxca2bv9l-unbound-1.7.2 - directory tree listing: https://gist.github.com/24f2136689bd3209095feb3b71734811 - du listing: https://gist.github.com/9efb5b527b161e93a47f0237c7d556a8
2018-06-13 15:56:56 +00:00
version = "1.7.2";
src = fetchurl {
url = "https://unbound.net/downloads/${name}.tar.gz";
unbound: 1.7.1 -> 1.7.2 Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/unbound/versions. These checks were done: - built on NixOS - Warning: no invocation of /nix/store/pka3ii26dp5xsxi7xs2rx3laxca2bv9l-unbound-1.7.2/bin/unbound had a zero exit code or showed the expected version - Warning: no invocation of /nix/store/pka3ii26dp5xsxi7xs2rx3laxca2bv9l-unbound-1.7.2/bin/unbound-checkconf had a zero exit code or showed the expected version - Warning: no invocation of /nix/store/pka3ii26dp5xsxi7xs2rx3laxca2bv9l-unbound-1.7.2/bin/unbound-control had a zero exit code or showed the expected version - /nix/store/pka3ii26dp5xsxi7xs2rx3laxca2bv9l-unbound-1.7.2/bin/unbound-host passed the binary check. - Warning: no invocation of /nix/store/pka3ii26dp5xsxi7xs2rx3laxca2bv9l-unbound-1.7.2/bin/unbound-anchor had a zero exit code or showed the expected version - Warning: no invocation of /nix/store/pka3ii26dp5xsxi7xs2rx3laxca2bv9l-unbound-1.7.2/bin/unbound-control-setup had a zero exit code or showed the expected version - 1 of 6 passed binary check by having a zero exit code. - 0 of 6 passed binary check by having the new version present in output. - found 1.7.2 with grep in /nix/store/pka3ii26dp5xsxi7xs2rx3laxca2bv9l-unbound-1.7.2 - directory tree listing: https://gist.github.com/24f2136689bd3209095feb3b71734811 - du listing: https://gist.github.com/9efb5b527b161e93a47f0237c7d556a8
2018-06-13 15:56:56 +00:00
sha256 = "187a8l4292b43wwam2w12pzc33dvirii484b2b7r46bi6jxwfpx8";
};
2014-12-23 05:49:51 +00:00
2015-10-05 08:53:30 +00:00
outputs = [ "out" "lib" "man" ]; # "dev" would only split ~20 kB
buildInputs = [ openssl nettle expat libevent ];
2014-12-23 05:49:51 +00:00
configureFlags = [
"--with-ssl=${openssl.dev}"
"--with-libexpat=${expat.dev}"
"--with-libevent=${libevent.dev}"
2014-12-23 05:49:51 +00:00
"--localstatedir=/var"
2015-04-21 00:50:39 +00:00
"--sysconfdir=/etc"
2016-03-06 12:50:41 +00:00
"--sbindir=\${out}/bin"
2017-06-16 03:11:56 +00:00
"--with-rootkey-file=${dns-root-data}/root.key"
"--enable-pie"
"--enable-relro-now"
2014-12-23 05:49:51 +00:00
];
2015-04-21 00:50:39 +00:00
installFlags = [ "configfile=\${out}/etc/unbound/unbound.conf" ];
preFixup = stdenv.lib.optionalString (stdenv.isLinux && !stdenv.hostPlatform.isMusl) # XXX: revisit
# Build libunbound again, but only against nettle instead of openssl.
# This avoids gnutls.out -> unbound.lib -> openssl.out.
# There was some problem with this on Darwin; let's not complicate non-Linux.
''
configureFlags="$configureFlags --with-nettle=${nettle.dev} --with-libunbound-only"
configurePhase
buildPhase
installPhase
''
# get rid of runtime dependencies on $dev outputs
+ ''substituteInPlace "$lib/lib/libunbound.la" ''
2015-10-15 11:57:38 +00:00
+ stdenv.lib.concatMapStrings
(pkg: " --replace '-L${pkg.dev}/lib' '-L${pkg.out}/lib' ")
buildInputs;
2015-10-05 08:53:30 +00:00
meta = with stdenv.lib; {
description = "Validating, recursive, and caching DNS resolver";
2015-10-05 08:53:30 +00:00
license = licenses.bsd3;
homepage = https://www.unbound.net;
2016-02-08 01:20:00 +00:00
maintainers = with maintainers; [ ehmry fpletz ];
platforms = stdenv.lib.platforms.unix;
};
}