Commit graph

79 commits

Author SHA1 Message Date
Vladimír Čunát ec5ef6bd2b
knot-resolver: 5.1.1 -> 5.1.2
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.1.2
I could highlight fixing the garbage collector on 32-bit systems.
2020-07-01 16:20:49 +02:00
Vladimír Čunát d0d90908c8
knot-resolver: 5.1.0 -> 5.1.1 (security)
https://en.blog.nic.cz/2020/05/19/nxnsattack-upgrade-resolvers-to-stop-new-kind-of-random-subdomain-attack/
2020-05-19 11:29:33 +02:00
Vladimír Čunát 26d3ae2f24
knot-resolver: 5.0.1 -> 5.1.0
https://gitlab.labs.nic.cz/knot/knot-resolver/-/tags/v5.1.0

The upcoming major version will contain reworked
hints/policy/prefill/rebinding/view modules and related functionalities.
Please participate in the following survey to ensure we do not forget
about your particular use-case:
https://www.knot-resolver.cz/survey/
It will help us to improve Knot Resolver. Thank you!
2020-04-29 17:38:21 +02:00
Michael Reilly 84cf00f980
treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
Vladimír Čunát b7f5450e4d
knot-resolver: apply upstream patch
Encrypted ZFS users were affected, in particular some NixOS users
who reported the issue upstream.  Close #81188.
2020-03-04 13:36:54 +01:00
Frederik Rietdijk 419bc0a4cd Revert "Revert "Merge master into staging-next""
In 87a19e9048 I merged staging-next into master using the GitHub gui as intended.
In ac241fb7a5 I merged master into staging-next for the next staging cycle, however, I accidentally pushed it to master.
Thinking this may cause trouble, I reverted it in 0be87c7979. This was however wrong, as it "removed" master.

This reverts commit 0be87c7979.
2020-02-05 19:41:25 +01:00
Frederik Rietdijk 0be87c7979 Revert "Merge master into staging-next"
I merged master into staging-next but accidentally pushed it to master.
This should get us back to 87a19e9048.

This reverts commit ac241fb7a5, reversing
changes made to 76a439239e.
2020-02-05 19:18:35 +01:00
Vladimír Čunát e3edb004c6
knot-resolver: 5.0.0 -> 5.0.1
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v5.0.1
2020-02-05 16:53:40 +01:00
Vladimír Čunát ae74a0e27c
(nixos/)knot-resolver: 4.3.0 -> 5.0.0
Minor incompatibilities due to moving to upstream defaults:
  - capabilities are used instead of systemd.socket units
  - the control socket moved:
    /run/kresd/control -> /run/knot-resolver/control/1
  - cacheDir moved and isn't configurable anymore
  - different user+group names, without static IDs

Thanks Mic92 for multiple ideas.
2020-01-31 15:22:52 +01:00
Vladimír Čunát 93ad21dedd
knot-resolver: remove older lua path workarounds
Part of this is approximate revert of commit f0d2da43a7.
2020-01-31 15:06:20 +01:00
Vladimír Čunát e980e7a3ab
knot-resolver: enable checks on aarch64
The cqueues fix is in nixpkgs already, so it works now.
2020-01-30 18:48:57 +01:00
Vladimír Čunát 1ee3c7b405
Revert "knot-resolver: skip a broken test"
This reverts commit 5c0567dcc6.
The issue had been fixed but I forgot to remove this workaround.
2020-01-25 13:42:46 +01:00
Vladimír Čunát 24a4f45319
knot-resolver: 4.2.2 -> 4.3.0 (security)
Fixes CVE-2019-19331 (DoS), but other changes as well:
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v4.3.0
2019-12-04 16:22:49 +01:00
Vladimír Čunát 39049dbd37
knot-resolver: 4.2.1 -> 4.2.2 (tiny bugfix)
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v4.2.2
2019-10-07 14:52:06 +02:00
Vladimír Čunát 4b656c7447
knot-resolver: 4.2.0 -> 4.2.1 (bugfixes)
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v4.2.1
2019-09-27 10:49:45 +02:00
volth 46420bbaa3 treewide: name -> pname (easy cases) (#66585)
treewide replacement of

stdenv.mkDerivation rec {
  name = "*-${version}";
  version = "*";

to pname
2019-08-15 13:41:18 +01:00
Vladimír Čunát 5c0567dcc6
knot-resolver: skip a broken test
The test fails from roughly today's machine date onwards.
2019-08-09 16:09:18 +02:00
Vladimír Čunát 577508ef14
knot-resolver: 4.1.0 -> 4.2.0
No really significant changes, I'd say:
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v4.2.0
2019-08-05 20:31:40 +02:00
Vladimír Čunát 75369ad991
knot-resolver: disable part of tests on darwin, for now 2019-07-10 18:26:26 +02:00
Vladimír Čunát f15625a6c0
knot-resolver: 4.0.0 -> 4.1.0 (security)
https://lists.nic.cz/pipermail/knot-resolver-users/2019/000189.html
Fixes DNS spoofing problems: CVE-2019-10190 CVE-2019-10191
but also minor things, adds new features, etc.
In particular aarch64 should work now, at least as long as not using
some lua library that suffers from the same problem with lightuserdata,
e.g. cqueues does suffer from this.
2019-07-10 17:42:37 +02:00
Vladimír Čunát 9efdd2e434
knot-resolver: 3.2.1 -> 4.0.0
https://lists.nic.cz/pipermail/knot-resolver-users/2019/000136.html

Similar commit worked fine for me, including the nixos service.
I'd like to still improve the service to support easy passing of sockets
to http module.
2019-07-10 17:40:04 +02:00
Vladimír Čunát 6fdd315178
knot-resolver: add a check for the last problem 2019-07-05 11:02:14 +02:00
Vladimír Čunát f0d2da43a7
knot-resolver: hotfix for a recent $LUA_PATH regression
I hope I got all the transitive dependencies.
The 'http' module load again, at least.
Close https://github.com/NixOS/nixpkgs/pull/64174
2019-07-05 10:46:38 +02:00
Matthieu Coudron c33153bf13
Merge pull request #63108 from Shados/lua-packaging-improvements-pr
Lua/luarocks packaging improvements
2019-06-19 14:23:31 +02:00
volth f3282c8d1e treewide: remove unused variables (#63177)
* treewide: remove unused variables

* making ofborg happy
2019-06-16 19:59:05 +00:00
Alexei Robyn 274715cbc3 luaPackages: Replace all rockspec packages with generated ones
luaPackages replaced by generated ones:
- bit32
- compat53
- cqueues
- luacyrussasl -> cyrussasl (luarocks name)
- luaexpat
- luadbi -> luadbi front-end module + separate backend modules
  luadbi-{mysql,postgresql,sqlite3}
- luafilesystem
- luaossl
- luasec
- luasocket
- luastdlib -> stdlib (luarocks name)
- lrexlib -> lrexlib-pcre (we already have lrexlib-gnu and
  lrexlib-posix, lrexlib-pcre however appears to be the variant used in
  mudlet, which is the only current dep in nixpkgs)
- luasqlite -> luasql-sqlite3 (luarocks name)
- lfs -> luafilesytem (we literally had two manually written
  luafilesystem expressions, under different names)

Changes and additions to overrides to generated luarocks packgaes,
including:
- busted: Install bash completions along with the zsh ones
- cqueues:
    - Perform minor surgery on the rockspec to allow using a single
      rockspec to build for all supported Lua versions
    - Add a patch by @vcunat to work around a build issue
- luuid: Wrote a tiny patch to allow for Lua 5.1/Luajit compatibility
- General changes:
    - Sorted the packages
    - Attempted to make the formatting consistent
    - Preferenced `.override` instead of `.overrideAttrs` wherever
      possible

Minor changes to other packages to adjust for the Lua package changes:
- luakit expression simplified
- prosody expression simplified; but users will now need to specify the
  luadbi backend module they intend to use in withExtraLibs
- knot-resolver inputs correctd
- mudlet inputs corrected (although this package was and should still be
  broken)
2019-06-14 13:17:15 +10:00
Vladimír Čunát 110fb944f1
lua*Packages.http: 0.3 -> 0.4 (and generate)
One bugfix patch is included - merged upstream but not released yet.
knot-resolver wrapper would need to add binaryheap explicitly,
so it's migrated to the automatic LUA path discovery instead.
2019-05-01 11:28:47 +02:00
Vladimír Čunát 3e4d8d2fc6
knot-dns: 2.7.6 -> 2.8.0
https://gitlab.labs.nic.cz/knot/knot-dns/tags/v2.8.0
Some explanation for the patching is in this ML thread:
https://lists.nic.cz/pipermail/knot-dns-users/2019-March/001616.html
2019-03-06 19:19:13 +01:00
Vladimír Čunát 98385ff540
knot-resolver: cross-compilation fix 2019-02-23 18:17:35 +01:00
Vladimír Čunát d49f83442b
knot-resolver: 3.2.0 -> 3.2.1
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v3.2.1
2019-01-10 13:10:50 +01:00
Vladimír Čunát ee9ba43a1c
knot-resolver: 3.1.0 -> 3.2.0
https://lists.nic.cz/pipermail/knot-resolver-announce/2018/000005.html
2018-12-17 14:54:36 +01:00
Vladimír Čunát 1fe3328593
knot-resolver: 3.0.0 -> 3.1.0
https://lists.nic.cz/pipermail/knot-resolver-users/2018/000086.html
2018-11-02 16:46:03 +01:00
Vladimír Čunát 765d695b89
Merge branch 'staging-next'
Security fixes for a few packages are included.
2018-08-21 15:36:02 +02:00
Vladimír Čunát 8d539c9933
knot-dns, knot-resolver: major updates
They're in a single commit, as splitting would break knot-resolver build.
https://gitlab.labs.nic.cz/knot/knot-dns/blob/v2.7.1/NEWS
https://gitlab.labs.nic.cz/knot/knot-resolver/blob/v3.0.0/NEWS
2018-08-20 11:23:36 +02:00
Vladimír Čunát 153a19df05
Merge branch 'master' into staging-next
Hydra: ?compare=1474536
2018-08-20 09:15:33 +02:00
Vladimír Čunát fe32659616
Merge #44235: add various lua modules 2018-08-17 14:23:14 +02:00
Jan Malakhovski 0449c1258c knot-resolver: use checkInputs 2018-08-11 09:35:25 +00:00
Jan Malakhovski b135329dc5 treewide: random cleanups 2018-08-10 12:56:31 +00:00
Vladimír Čunát 1895354eed
knot-resolver: 2.4.0 -> 2.4.1 (security)
Fixes CVE-2018-10920 and some less important things.
https://lists.nic.cz/pipermail/knot-resolver-announce/2018/000002.html
2018-08-02 14:36:20 +02:00
Vladimír Čunát 2d75c47eab
knot-resolver: extraFeatures -> +deps for 'http' module
The module feels as a toy mostly, but why not in non-default setup...
2018-07-30 18:49:11 +02:00
Jörg Thalheim 218298b30f
Merge branch 'master' into unused5 2018-07-21 15:41:22 +01:00
volth 52f53c69ce pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
volth 6d2857a311 [bot] treewide: remove unused 'inherit' in let blocks 2018-07-20 19:38:19 +00:00
Vladimír Čunát 1c5addde5f
knot_resolver: support prefill module in extraFeatures 2018-07-08 09:21:42 +02:00
Vladimír Čunát ea8b0fa1cc
knot-resolver: 2.3.0 -> 2.4.0
It includes security-relevant fixes.
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v2.4.0
2018-07-03 10:53:30 +02:00
Silvan Mosberger 57bccb3cb8 treewide: http -> https sources (#42676)
* treewide: http -> https sources

This updates the source urls of all top-level packages from http to
https where possible.

* buildtorrent: fix url and tab -> spaces
2018-06-28 20:43:35 +02:00
Vladimír Čunát 2becf90c93
knot-resolver: 2.2.0 -> 2.3.0 (security)
Contains fixes for CVE-2018-1110.
2018-04-23 13:26:57 +02:00
Vladimír Čunát 366ae3dfe0
knot-resolver: fix /bin/sh impurity
Manifestation in this case: ./scripts/embed-lua.sh: line 4: alias: not found
2018-04-01 10:53:18 +02:00
Ryan Mulligan dc13867e99 knot-resolver: 2.1.1 -> 2.2.0
Semi-automatic update generated by https://github.com/ryantm/nix-update tools.

This update was made based on information from https://repology.org/metapackage/knot-resolver/versions.

These checks were done:

- built on NixOS
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd -h` got 0 exit code
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd --help` got 0 exit code
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd -V` and found version 2.2.0
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd --version` and found version 2.2.0
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd -h` and found version 2.2.0
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd --help` and found version 2.2.0
- found 2.2.0 with grep in /nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0
- directory tree listing: https://gist.github.com/3b59aaaf9f7d90b8de351b6eb712e2a5
2018-03-30 10:23:37 +01:00
Vladimír Čunát e74b61edde
knot-resolver: 2.1.0 -> 2.1.1 (bugfix)
https://gitlab.labs.nic.cz/knot/knot-resolver/blob/v2.1.1/NEWS
2018-02-23 13:55:29 +01:00