Commit Graph

58 Commits

Author SHA1 Message Date
Petr Menšík
22fc7a2c83 Update to 9.19.14 (#2216463)
Security fix:
The overmem cleaning process has been improved, to prevent the cache from
significantly exceeding the configured max-cache-size limit.

https://downloads.isc.org/isc/bind9/9.19.14/doc/arm/html/notes.html#notes-for-bind-9-19-14

Resolves: rhbz#2216463 CVE-2023-2828
2023-06-26 12:22:16 +02:00
Petr Menšík
9850a58bcb Update to 9.19.13 (#2207907)
New Feature:
- dnstap-read can now print long timestamps with millisecond precision. [GL #2360]

https://downloads.isc.org/isc/bind9/9.19.13/doc/arm/html/notes.html#notes-for-bind-9-19-13
2023-05-19 12:33:19 +02:00
Petr Menšík
849d565cea Include TLS certificates in named-chroot
Create /etc/pki/tls directory in chroot and mount /etc/pki/tls/cert.pem
file into the chroot. Even though the that file is symlink, mount during
chroot setup will resolve it correctly.

Resolves: rhbz#2196699
2023-05-13 02:45:29 +02:00
Petr Menšík
fd4193618b fixup! Fix configure check and port configure script to C99 2023-05-02 17:09:27 +02:00
Arjun Shankar
76a914813d Fix configure check and port configure script to C99
Related to:

  <https://fedoraproject.org/wiki/Changes/PortingToModernC>
  <https://fedoraproject.org/wiki/Toolchain/PortingToModernC>
2023-05-02 16:53:14 +02:00
Petr Menšík
4ecbcaf3f3 Update to 9.19.12 (#2187997)
Removed library libirs and libbind9. New depedency of libisc
on userspace-rcu.
2023-05-02 15:06:11 +02:00
Petr Menšík
583510f10c Convert to %autorelease and %autochangelog
[skip changelog]
2023-05-02 15:02:14 +02:00
Petr Menšík
93f304f6c9 Update to 9.19.11 (#2178718)
- removes libirs and libbind9 from libs and devel subpackages.

https://downloads.isc.org/isc/bind9/9.19.11/RELEASE-NOTES-bind-9.19.11.html
2023-03-23 23:51:37 +01:00
Petr Menšík
2f124983ed Update license tag to SPDX tag
List all licenses found by licensecheck
2023-03-23 19:29:25 +01:00
Petr Menšík
d33f8f9c82 Do not fail hard on documentation warnings
RHEL8 is failing building the documentation. Override sphinx flag to
keep those just warnings and do not fail on them. Makes building for
epel8 pass.
2023-03-23 10:56:43 +01:00
Petr Menšík
c8e1c41a96 Try to parametrize tests to run for this component 2023-03-23 10:56:43 +01:00
Petr Menšík
fa3989b99f Update to 9.19.10 (#2170097)
https://downloads.isc.org/isc/bind9/9.19.10/doc/arm/html/notes.html#notes-for-bind-9-19-10
2023-03-06 21:24:04 +01:00
Petr Menšík
fd5e20e272 Remove gating definitions until ready 2023-01-30 13:47:11 +01:00
Petr Menšík
1d75bbd58f Comment out more of gating.yaml 2023-01-30 13:43:33 +01:00
Petr Menšík
2a2014d9c5 Try providing bind-utils even on f36 2023-01-30 11:26:22 +01:00
Petr Menšík
3eca043c27 Stop obsoleting bind packages (#2165264) 2023-01-30 10:49:27 +01:00
Petr Menšík
6d4d0bacaa Disable gating until tests are working properly 2023-01-30 00:55:27 +01:00
Petr Menšík
d5010bd2bd Attempt to not prefer bind9-next as bind upgrade
bind9-next-utils and bind9-next is preferred upgrade of bind utils. Try
to not prefer those versions.

Resolves: rhbz#2165256
2023-01-29 23:44:07 +01:00
Petr Menšík
f9313dd8c1 Describe very briefly differences to bind package 2023-01-27 18:29:53 +01:00
Petr Menšík
574b319823 Update to 9.19.9 2023-01-27 18:26:07 +01:00
Petr Menšík
16501a5fd1 Fix FIPS tests to contain upstream proposal 2023-01-27 18:26:07 +01:00
Petr Menšík
b94624a2fa Add sudo ability detection
Detect current capabilities with help of sudo tool. If addresses are
already configured, then just run tests. If they are not, use capsh to
detect ability to configure network.
2023-01-27 18:26:07 +01:00
Petr Menšík
4a655f56d7 Adjust --with SYSTEMTEST to recent source
Using testsock.pl and ifconfig.sh requires to be in their directory.
Ensure build directory is used, because it needs some configured files.
2023-01-27 18:26:07 +01:00
Petr Menšík
22ec60f6db Removed unused patches, added link to fips-test
Renumbered patches to start from 1 again, only the first one is expected
to remain in the place.
2023-01-27 18:26:07 +01:00
Petr Menšík
e0c66624be Skip some FIPS changes in tests
HMAC_DEFAULT variable already solves those issues in upstream. Keep just
some md5 disablement when MD5 based HMAC is unavailable too.
2023-01-27 18:26:07 +01:00
Petr Menšík
c95a309352 Remove also unstable netmgr changes
Tests received attention from upstream and it seems they are pretty
stable without any modification.

Renumber remaining patches.
2023-01-27 18:26:07 +01:00
Petr Menšík
4bcdb122d8 Remove ancient PIE patch
Originally added by commit 207484f5d447b8b291e04a7304b16a997e71d10b.
I think those flags are not neede anymore. Some of those became defaults
anyway. Others are part of compilation flags used by the system. Nothing
else should be required. Checking by checksec(8) tool did not reveal any
differences with or without this patch.
2023-01-27 18:26:07 +01:00
Petr Menšík
90b4cd1957 Skip PIE patch, remove unused defines
Do not yet delete that patch, but do not use it until it is proven such
change is still useful.
2023-01-27 18:26:07 +01:00
Petr Menšík
9f83e7b6c3 Apply some review fixes (comment #6)
- Own logrotate and chroot %_datadir
- Install files with timestamp preservation
2023-01-27 18:26:07 +01:00
Petr Menšík
b3aaf0112b Update to 9.19.8
Switch to new PGP keys
2023-01-27 18:26:07 +01:00
Petr Menšík
a4d1dd48c9 Provide compatibility provides only from f37+
I do not want to install this package when dnf install bind-utils is
specified. I want to prefer original bind-utils if they are available.
Install this by bind9-next-utils only, but be able to satisfy bind-utils
requirements from other package.

That works as expected only on recent enough distribution, starting with
f37.
2023-01-27 18:26:07 +01:00
Petr Menšík
47ebe1cef0 Add reference to merged patch 2023-01-27 18:26:07 +01:00
Petr Menšík
1c7ffee3d0 Make ARM build pass on EPEL8
More issues is reported on EPEL8. Still build documentation on it, but
do not require no warnings during the process.
2023-01-27 18:26:07 +01:00
Petr Menšík
41841ff366 Build ARM docs even on RHEL9
Sphinx on RHEL9 does not case-insensitive references. Make reference
itself link to correct terms, but use just presentation name to be
lowercase.
2023-01-27 18:26:07 +01:00
Petr Menšík
d31af5c89a Adjust patches 2023-01-27 18:26:07 +01:00
Petr Menšík
f2a78175be Update to 9.19.5 2023-01-27 18:26:07 +01:00
Petr Menšík
1c37705b3c Try unversioned provides for f36 and lower 2023-01-27 18:26:07 +01:00
Petr Menšík
133078a09b Adjust patches 2023-01-27 18:26:07 +01:00
Petr Menšík
40707d700e Update to 9.19.4 2023-01-27 18:26:07 +01:00
Petr Menšík
056fe70b7c Sync with rawhide 2023-01-27 18:26:07 +01:00
Petr Menšík
d0e91f75a2 Remove unused patches 2023-01-27 18:26:07 +01:00
Petr Menšík
ad1c46614e Renumber native PKCS11 patches to beginning
Allow all subsequent patches with higher number to be added to normal
common list of patches. Make just initial patches special.
2023-01-27 18:26:07 +01:00
Petr Menšík
28ff6d69e0 Replace master with primary in configuration
Use more friendly value for primary and secondary zones. It used master
for ages, but that might have wrong connotation to someone. Use
something without problematic history.
2023-01-27 18:26:07 +01:00
Petr Menšík
9d4510ecc6 Update to 9.17.22 2023-01-27 18:26:07 +01:00
Petr Menšík
8fbe7cb296 Update to 9.17.21
Update patches. Add jemalloc to build requires.

https://downloads.isc.org/isc/bind9/9.17.21/RELEASE-NOTES-bind-9.17.21.html
2023-01-27 18:26:07 +01:00
Petr Menšík
7d4bbe8053 Do not fail build on EPEL
Not all PDF building dependencies are present on EPEL. Build at least
HTML documentation, avoid PDF related failures.
2023-01-27 18:26:07 +01:00
Petr Menšík
1cd0a879cb fixup! Change named-checkonf path to bin 2023-01-27 18:26:07 +01:00
Petr Menšík
5d5ad62903 Remove Epoch on new package
Epoch is required on bind package, but is not required on forked
package. Remove it. Makes bind package 'higher' version that this
package.
2023-01-27 18:26:07 +01:00
Petr Menšík
76d9b1ec11 Move backward compatibility into shared define
Fix dependencies of chroot and some other subpackages. Depend on
%name%{?_isa} instead of bind%{?_isa}, Provides: does not provide also
arch provide.

More packages need backward compatibility. Move their definitions to
reusable macro and use it in multiple places.

Resolves: rhbz#1873486
2023-01-27 18:26:07 +01:00
Petr Menšík
50c017891b Change named-checkonf path to bin
Upstream changed named-checkconf directory to bin. Add compatibility
symlinks. Change full paths in services to point to new full path.
2023-01-27 18:26:07 +01:00