Commit graph

506 commits

Author SHA1 Message Date
Vladimír Čunát 9af686703d
powerdns: patch build with gcc 10 2021-01-04 19:14:09 +01:00
Michele Guerini Rocco 3f67972103
Merge pull request #108295 from rnhmjoj/pdns
pdns-recursor: 4.4.1 -> 4.4.2
2021-01-03 13:59:14 +01:00
rnhmjoj 9f5e31e926
pdns-recursor: 4.4.1 -> 4.4.2 2021-01-03 10:05:20 +01:00
Colin L Rice 71d479fbd3 ncdns: Update to 2020-11-22 to remove go1.14 dep.
I've poked them to tag a new version at
https://github.com/namecoin/ncdns/issues/126, but master builds cleanly
with go1.15, so I just updated to unstable
2020-12-30 00:01:49 -05:00
Tim Steinbach 87e7d8b371
bind: 9.16.8 -> 9.16.10 2020-12-23 10:15:35 -05:00
Vladimír Čunát 818c3001e8
knot-dns: 3.0.2 -> 3.0.3
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.0.3
2020-12-15 16:58:56 +01:00
Vladimír Čunát ace04464b6
knot-resolver: 5.2.0 -> 5.2.1
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.2.1
2020-12-09 11:07:28 +01:00
R. RyanTM ea7b8d5ce9 nsd: 4.3.3 -> 4.3.4 2020-12-06 14:28:11 +00:00
R. RyanTM 694a371f12 pdns-recursor: 4.4.0 -> 4.4.1 2020-11-29 05:40:58 +00:00
Ben Wolsieffer 82a9f2331c bind: fix cross-compilation
Upstream accidently broke cross-compilation. It has been fixed but not released
yet, so we temporarily add the patch here.
2020-11-19 21:49:19 +01:00
Vladimír Čunát 9a38c3a11b
knot-resolver: fix evaluation on darwin
I somehow forgot that libcap_ng is linux-only.  I'm missing ofborg's
darwin builder, but I might've tested evaluation at least...
2020-11-18 08:41:28 +01:00
Vladimír Čunát 335798d243
knot-resolver: fix a stupid system breaking non-systemd
I hope this will fix darwin build (no good way of testing locally).
2020-11-17 20:05:51 +01:00
Vladimír Čunát cd5c7c0ee6
knot-resolver: drop capabilities after startup
By default.  I forgot to add this a long time ago.
The difference in runtime closure is really tiny (232 KiB by du).
2020-11-17 20:04:56 +01:00
Vladimír Čunát 3087df3e8f
knot-resolver: add support for new DoH implementation
By default.  I'm not a DoH fan, but the difference in runtime closure
is really tiny (216 KiB by du).  I somehow forgot this during update.

Some of the newly running tests were failing and got disabled.
2020-11-17 20:04:55 +01:00
Vladimír Čunát 280e27327d
knot-resolver: 5.1.3 -> 5.2.0
https://lists.nic.cz/pipermail/knot-resolver-users/2020/000318.html

NixOS service: we'll probably want to switch listenDoH
to the new 'doh2' kind, but let me leave that for later.
2020-11-11 15:51:54 +01:00
Vladimír Čunát 193e8bc722
knot-dns: 3.0.1 -> 3.0.2
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.0.2
2020-11-11 15:12:28 +01:00
Christoph Hrdinka c6bb91c9db
Merge pull request #102617 from r-ryantm/auto-update/nsd
nsd: 4.3.2 -> 4.3.3
2020-11-05 08:48:24 +01:00
R. RyanTM e763a9fd70 nsd: 4.3.2 -> 4.3.3 2020-11-03 11:55:51 +00:00
R. RyanTM f06af68d0f coredns: 1.7.1 -> 1.8.0 2020-11-02 08:20:56 -08:00
Janne Heß 6404b25714
dnsdist: Replace myself with SuperSandro2000 2020-11-02 01:35:47 +01:00
rnhmjoj 8f897b0f9c
pdns-recursor: 4.3.5 -> 4.4.0 2020-10-29 08:34:13 +01:00
Mario Rodas 3692288f91
Merge pull request #101584 from r-ryantm/auto-update/dnsdist
dnsdist: 1.5.0 -> 1.5.1
2020-10-27 06:48:58 -05:00
Pierre Bourdon 02796d77f8
bind: 9.16.7 -> 9.16.8
https://bind9.readthedocs.io/en/v9_16_8/notes.html#notes-for-bind-9-16-8
2020-10-27 08:48:19 +01:00
Aaron Andersen 603f0dcae8 powerdns: 4.2.3 -> 4.3.1 2020-10-24 16:40:20 -04:00
R. RyanTM d14027748b dnsdist: 1.5.0 -> 1.5.1 2020-10-24 18:33:26 +00:00
Aaron Andersen fca065aff2 pdns-recursor: fix systemd configure flag 2020-10-18 08:15:29 -04:00
Vladimír Čunát f886c4f282
Merge #97967: knot-dns: doInstallCheck = true
I thought I'd verify darwin through PR+borg, but now I'll just merge
and take action in case it breaks on darwin.
2020-10-17 01:13:46 +02:00
Martin Weinelt f931e3e55d
pdns-recursor: 4.3.4 -> 4.3.5
Fixes: CVE-2020-25829
2020-10-13 14:18:16 +02:00
Aaron Andersen 6019fb179b powerdns: add nixos test to passthru.tests 2020-10-12 20:11:47 -04:00
Aaron Andersen 94c98805cb powerdns: compile with systemd support 2020-10-12 20:11:47 -04:00
Aaron Andersen 7b2b0cc77c powerdns: update configure flags 2020-10-12 20:11:47 -04:00
Aaron Andersen 1cd65c4185
Merge pull request #100335 from aanderse/pdns-cve
powerdns: 4.2.1 -> 4.2.3
2020-10-12 20:08:01 -04:00
Michele Guerini Rocco 47a3b4a57e
Merge pull request #100337 from aanderse/pdns-recursor
pdns-recursor: 4.3.3 -> 4.3.4
2020-10-12 21:13:13 +02:00
Aaron Andersen 75dd806963 pdns-recursor: add nixos test to passthru.tests 2020-10-12 13:55:38 -04:00
Aaron Andersen 84f8419899 pdns-recursor: 4.3.3 -> 4.3.4 2020-10-12 10:50:01 -04:00
Aaron Andersen 85fa83bfb1 powerdns: 4.2.1 -> 4.2.3 2020-10-12 10:38:06 -04:00
Aaron Andersen 176f45cd76
Merge pull request #100251 from aanderse/dnsdist-flags
dnsdist: update compile flags
2020-10-12 08:43:15 -04:00
Aaron Andersen 872cfe067e dnsdist: update compile flags 2020-10-11 11:02:55 -04:00
Vladimír Čunát 497248a558
knot-dns: 3.0.0 -> 3.0.1
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.0.1
2020-10-10 11:06:35 +02:00
Pierre Bourdon 2a4e6a93b9
bind: add nixosTests.bind to passthru.tests 2020-09-24 18:23:30 +02:00
Pierre Bourdon c27c9bd380
bind: 9.14.12 -> 9.16.7 2020-09-24 18:10:16 +02:00
Vladimír Čunát 7de6e5de40
knot-dns: doInstallCheck = true 2020-09-14 11:20:52 +02:00
Vladimír Čunát 6847084284
knot-dns: libbpf is Linux-only
I should've noticed before pushing; I'm sorry.
2020-09-10 08:46:44 +02:00
Vladimír Čunát d09738dd90
knot-dns: 2.9.6 -> 3.0.0
Upgrade should be pretty easy:
https://www.knot-dns.cz/docs/3.0/html/migration.html#upgrade-2-9-x-to-3-0-x

https://en.blog.nic.cz/2020/09/09/knot-dns-3-0-news/
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.0.0

For now, it's built with XDP support but the NixOS service
isn't ready for that yet.  I'll try to look at that sometime later.
2020-09-09 17:21:27 +02:00
Vladimír Čunát 3c45610ddd
knot-resolver: 5.1.2 -> 5.1.3
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.1.3
2020-09-09 11:10:16 +02:00
Vladimír Čunát 63b6353782
knot-dns: Remove unnecessary runtime dependencies
Closure size: 261 -> 171 MiB.  (Only .bin was affected.)
2020-09-08 12:16:56 +02:00
Vladimír Čunát 1dbe47ced5
knot-dns: 2.9.5 -> 2.9.6
This is mostly a bug fix version with some small improvements.
https://gitlab.nic.cz/knot/knot-dns/-/tags/v2.9.6
2020-08-31 11:51:52 +02:00
zowoq a83a88db05 buildGoPackage: remove platform.all from packages 2020-08-15 19:34:47 -07:00
Vladimír Čunát 01cf3b41aa
knot-dns: add libmaxminddb dependency
It's really small and some people might find it useful.
(If needed, its output could be split to make it even smaller.)
2020-08-13 08:19:58 +02:00
Timothy Stott ba7c0893d4
treewide: remove obsolete attribute goPackagePath in buildGoModule derivations (#95092)
The buildGoModule infrastructure does not make use of goPackagePath it is a residue from buildGoPackage.
2020-08-11 21:04:55 +00:00
zowoq cea7cd902e buildGoModule packages: set doCheck = false 2020-08-10 16:02:30 +10:00
R. RyanTM 98e8c6be06 pdns-recursor: 4.3.2 -> 4.3.3 2020-08-07 01:20:21 +00:00
Maximilian Bosch 0b6f0b7b07
Merge pull request #94399 from r-ryantm/auto-update/dnsdist
dnsdist: 1.4.0 -> 1.5.0
2020-08-04 23:23:47 +02:00
R. RyanTM c90c363e64 dnsdist: 1.4.0 -> 1.5.0 2020-08-01 02:32:41 +00:00
zowoq 3c5750d1cd buildGoModule packages: editorconfig fixes 2020-07-31 13:58:04 +10:00
lf- 231e74dcbf ncdns: fix patch extension
The incorrect extension was confusing my code search tool.
2020-07-27 23:17:53 -07:00
R. RyanTM 1715eadebf nsd: 4.3.1 -> 4.3.2 2020-07-17 16:53:07 +00:00
Michele Guerini Rocco 400beaec1e
Merge pull request #92386 from r-ryantm/auto-update/pdns-recursor
pdns-recursor: 4.3.1 -> 4.3.2
2020-07-07 13:30:19 +02:00
Michele Guerini Rocco fc553c0bc5
Merge pull request #89773 from rnhmjoj/ncdns
ncdns: init at 0.0.10.3
2020-07-07 10:58:55 +02:00
R. RyanTM 70e755c19a pdns-recursor: 4.3.1 -> 4.3.2 2020-07-05 23:04:23 +00:00
Vladimír Čunát ec5ef6bd2b
knot-resolver: 5.1.1 -> 5.1.2
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.1.2
I could highlight fixing the garbage collector on 32-bit systems.
2020-07-01 16:20:49 +02:00
Félix Baylac-Jacqué 7020dc8eac
nixos/nsd: symlink conf file to /etc/nsd
We remove the configFile build flag override in the NixOS module.

Instead of embedding the conf file link to the binaries, we symlink it
to /etc/nsd/nsd.nix, the hardcoded config file location for the
various CLI nsd utilities.

This config file build option override is triggerring a nsd rebuild
for each configuration change. This prevent us to use the nixos cache
in many cases.

Co-authored-by: Erjo <erjo@cocoba.work>
2020-06-26 20:18:33 +02:00
Félix Baylac-Jacqué 15c8a4800e
nsd: set passthru.tests 2020-06-26 17:56:06 +02:00
Matt Layher 6b9c728ef9 coredns: 1.6.9 -> 1.7.0 2020-06-19 09:01:44 -04:00
R. RyanTM aecc33be22 coredns: 1.7.0 -> 1.7.1 2020-09-25 04:10:11 +00:00
Justin Humm 6cdbb1fb1f
bind: set BUILD_CC for cross compilation
This is due to a hint by @Ericson2314 in
https://github.com/NixOS/nixpkgs/pull/86166#issuecomment-633153996
2020-06-15 21:03:03 +02:00
rnhmjoj 8ff681a7ca
ncdns: add test to passthru.tests 2020-06-14 01:16:12 +02:00
rnhmjoj 5ec0bd7649
ncdns: init at 0.0.10.3 2020-06-14 01:09:32 +02:00
Vladimír Čunát da752902c1
knot-dns: 2.9.4 -> 2.9.5
There's a bugfix important for some auto-signer setups.
https://gitlab.labs.nic.cz/knot/knot-dns/-/tags/v2.9.5

$ nix build -f nixos/release-combined.nix nixos.tests.knot.x86_64-linux
2020-05-25 10:56:49 +02:00
Vladimír Čunát d0d90908c8
knot-resolver: 5.1.0 -> 5.1.1 (security)
https://en.blog.nic.cz/2020/05/19/nxnsattack-upgrade-resolvers-to-stop-new-kind-of-random-subdomain-attack/
2020-05-19 11:29:33 +02:00
Vladimír Čunát 13c485d63d
bind: 9.14.11 -> 9.14.12 (security)
https://www.isc.org/blogs/bind9-vulnerabilities-2020-05/
$ nix build -f nixos/release.nix tests.bind.x86_64-linux
2020-05-19 11:21:25 +02:00
Vladimír Čunát 6bf49e3777
pdns-recursor: 4.3.0 -> 4.3.1 (security)
https://doc.powerdns.com/recursor/changelog/4.3.html#change-4.3.1
It fixes DoS CVEs; details e.g. on http://www.nxnsattack.com/

$ nix build -f nixos/release.nix tests.pdns-recursor.x86_64-linux
2020-05-19 11:20:51 +02:00
Colin L Rice d6162dab50
go-modules: Update files to use vendorSha256 2020-05-14 07:22:21 +01:00
R. RyanTM bf707710af nsd: 4.3.0 -> 4.3.1 2020-05-06 10:34:36 -07:00
Vladimír Čunát 2147dd0648
knot-dns: 2.9.3 -> 2.9.4
https://gitlab.labs.nic.cz/knot/knot-dns/-/tags/v2.9.4
2020-05-05 09:20:32 +02:00
Vladimír Čunát 26d3ae2f24
knot-resolver: 5.0.1 -> 5.1.0
https://gitlab.labs.nic.cz/knot/knot-resolver/-/tags/v5.1.0

The upcoming major version will contain reworked
hints/policy/prefill/rebinding/view modules and related functionalities.
Please participate in the following survey to ensure we do not forget
about your particular use-case:
https://www.knot-resolver.cz/survey/
It will help us to improve Knot Resolver. Thank you!
2020-04-29 17:38:21 +02:00
Peter Hoeg 53c14c4e65
Merge pull request #81365 from peterhoeg/p/https-dns
https-dns-proxy: init at unstable-20200419
2020-04-20 14:06:40 +08:00
Peter Hoeg 93df15d79a https-dns-proxy: init at unstable-20200419 2020-04-20 13:36:59 +08:00
Michael Reilly 84cf00f980
treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
R. RyanTM 8866b7d72f coredns: 1.6.7 -> 1.6.9 2020-04-01 10:17:44 +00:00
Jörg Thalheim 066db11215
Revert "Merge pull request #83099 from marsam/fix-buildGoModule-packages-darwin"
This reverts commit 4e6bf03504, reversing
changes made to afd997aab6.

Instead we propagate those frameworks from the compiler again
2020-03-27 07:33:21 +00:00
Mario Rodas 36ae531bc2 coredns: fix build on darwin 2020-03-21 04:46:00 -05:00
R. RyanTM ad1aff582f nsd: 4.2.4 -> 4.3.0 2020-03-19 12:08:16 -07:00
Jörg Thalheim c5967df712
Merge pull request #82531 from r-ryantm/auto-update/coredns
coredns: 1.6.6 -> 1.6.7
2020-03-16 15:34:21 +00:00
Vladimír Čunát 47f61c9d7f
bind: 9.14.10 -> 9.14.11 (small bugfix)
I see just a single small bugfix in the news:
https://downloads.isc.org/isc/bind9/9.14.11/RELEASE-NOTES-bind-9.14.11.html
2020-03-15 09:15:41 +01:00
R. RyanTM 5389e95ce0 coredns: 1.6.6 -> 1.6.7 2020-03-14 04:28:21 +00:00
R. RyanTM 2c76b3d8d7 pdns-recursor: 4.2.1 -> 4.3.0 2020-03-09 01:24:14 +00:00
Vladimír Čunát b7f5450e4d
knot-resolver: apply upstream patch
Encrypted ZFS users were affected, in particular some NixOS users
who reported the issue upstream.  Close #81188.
2020-03-04 13:36:54 +01:00
Vladimír Čunát 29a7464115 knot-dns: 2.9.2 -> 2.9.3
https://gitlab.labs.nic.cz/knot/knot-dns/-/tags/v2.9.3
2020-03-03 11:18:02 +01:00
Jörg Thalheim 6adc09ed30
knot: put runtime paths outside the nix store
Otherwise knot tries to write to non-writable directories.
This for example breaks dnssec signing.
While it's possible to overwrite these path in the configuration,
having a sane defaults is nicer.
2020-02-12 16:27:38 +00:00
Frederik Rietdijk 419bc0a4cd Revert "Revert "Merge master into staging-next""
In 87a19e9048 I merged staging-next into master using the GitHub gui as intended.
In ac241fb7a5 I merged master into staging-next for the next staging cycle, however, I accidentally pushed it to master.
Thinking this may cause trouble, I reverted it in 0be87c7979. This was however wrong, as it "removed" master.

This reverts commit 0be87c7979.
2020-02-05 19:41:25 +01:00
Frederik Rietdijk 0be87c7979 Revert "Merge master into staging-next"
I merged master into staging-next but accidentally pushed it to master.
This should get us back to 87a19e9048.

This reverts commit ac241fb7a5, reversing
changes made to 76a439239e.
2020-02-05 19:18:35 +01:00
Vladimír Čunát baeed035ea
Merge #78628: knot-resolver: 4.3.0 -> 5.0.1
The service needed lots of changes. A few smaller changes
are added into the PR, e.g. replacement for PR #72014.
See the commit messages for details.
2020-02-05 16:57:02 +01:00
Vladimír Čunát e3edb004c6
knot-resolver: 5.0.0 -> 5.0.1
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v5.0.1
2020-02-05 16:53:40 +01:00
Vladimír Čunát ae74a0e27c
(nixos/)knot-resolver: 4.3.0 -> 5.0.0
Minor incompatibilities due to moving to upstream defaults:
  - capabilities are used instead of systemd.socket units
  - the control socket moved:
    /run/kresd/control -> /run/knot-resolver/control/1
  - cacheDir moved and isn't configurable anymore
  - different user+group names, without static IDs

Thanks Mic92 for multiple ideas.
2020-01-31 15:22:52 +01:00
Vladimír Čunát 93ad21dedd
knot-resolver: remove older lua path workarounds
Part of this is approximate revert of commit f0d2da43a7.
2020-01-31 15:06:20 +01:00
Vladimír Čunát e980e7a3ab
knot-resolver: enable checks on aarch64
The cqueues fix is in nixpkgs already, so it works now.
2020-01-30 18:48:57 +01:00
Niklas Hambüchen 43a62af3a1
Merge pull request #78561 from r-ryantm/auto-update/bind
bind: 9.14.9 -> 9.14.10
2020-01-27 14:27:45 +01:00
R. RyanTM 0c59818ce7 bind: 9.14.9 -> 9.14.10 2020-01-26 15:58:22 +00:00
Vladimír Čunát 1ee3c7b405
Revert "knot-resolver: skip a broken test"
This reverts commit 5c0567dcc6.
The issue had been fixed but I forgot to remove this workaround.
2020-01-25 13:42:46 +01:00