144 lines
4.2 KiB
RPMSpec
144 lines
4.2 KiB
RPMSpec
%global _hardened_build 1
|
|
%{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}-%{version}}
|
|
|
|
Summary: An authoritative DNS daemon
|
|
Name: knot
|
|
Version: 1.4.7
|
|
Release: 1%{?dist}
|
|
License: GPLv3
|
|
Group: System Environment/Daemons
|
|
URL: http://www.knot-dns.cz
|
|
Source0: http://public.nic.cz/files/knot-dns/%{name}-%{version}.tar.gz
|
|
Source1: %{name}.conf
|
|
Source2: %{name}.init
|
|
|
|
BuildRequires: flex bison openssl-devel userspace-rcu-devel libcap-ng-devel libidn-devel
|
|
BuildRequires: texinfo
|
|
|
|
Requires(post): info
|
|
Requires(preun): info
|
|
|
|
Requires(post): chkconfig
|
|
Requires(preun): chkconfig
|
|
Requires(preun): initscripts
|
|
|
|
%description
|
|
Knot DNS is a high-performance authoritative DNS server implementation.
|
|
|
|
%prep
|
|
%setup -q
|
|
|
|
%build
|
|
# disable debug code (causes unused warnings)
|
|
CFLAGS="%{optflags} -DNDEBUG -Wno-unused"
|
|
%configure
|
|
make %{?_smp_mflags}
|
|
|
|
%install
|
|
make install DESTDIR=%{buildroot}
|
|
|
|
# info database is updated at install time
|
|
rm %{buildroot}%{_datadir}/info/dir
|
|
|
|
# install customized configuration file
|
|
rm %{buildroot}%{_sysconfdir}/%{name}/*
|
|
install -p -m 0644 -D %{SOURCE1} %{buildroot}%{_sysconfdir}/%{name}/%{name}.conf
|
|
|
|
# install service file and create rundir
|
|
install -p -m 0755 -D %{SOURCE2} %{buildroot}%{_initddir}/%{name}
|
|
install -d -m 0755 %{buildroot}%{_localstatedir}/run/%{name}
|
|
|
|
# create storage dir and key dir
|
|
mkdir -p %{buildroot}%{_sharedstatedir}
|
|
install -d -m 0775 %{buildroot}%{_sharedstatedir}/%{name}
|
|
install -d -m 0750 %{buildroot}%{_sharedstatedir}/%{name}/keys
|
|
|
|
# install config samples into docdir
|
|
install -d -m 0755 %{buildroot}%{_pkgdocdir}/samples
|
|
for sample_file in knot.full.conf knot.keys.conf example.com.zone; do
|
|
install -p -m 0644 samples/${sample_file} %{buildroot}%{_pkgdocdir}/samples
|
|
done
|
|
|
|
%check
|
|
make check
|
|
|
|
%pre
|
|
getent group knot >/dev/null || groupadd -r knot
|
|
getent passwd knot >/dev/null || \
|
|
useradd -r -g knot -d %{_sysconfdir}/knot -s /sbin/nologin \
|
|
-c "Knot DNS server" knot
|
|
exit 0
|
|
|
|
%post
|
|
/sbin/install-info %{_infodir}/%{name}.info %{_infodir}/dir || :
|
|
/sbin/chkconfig --add %{name}
|
|
|
|
%preun
|
|
if [ $1 -eq 0 ] ; then
|
|
/sbin/install-info --delete %{_infodir}/%{name}.info %{_infodir}/dir || :
|
|
/sbin/service %{name} stop >/dev/null 2>&1
|
|
/sbin/chkconfig --del %{name}
|
|
fi
|
|
|
|
%postun
|
|
if [ "$1" -ge "1" ] ; then
|
|
/sbin/service %{name} condrestart >/dev/null 2>&1 || :
|
|
fi
|
|
|
|
%files
|
|
%doc COPYING AUTHORS NEWS README THANKS
|
|
%{_initddir}/%{name}
|
|
%dir %attr(750,root,knot) %{_sysconfdir}/%{name}
|
|
%config(noreplace) %attr(640,root,knot) %{_sysconfdir}/%{name}/%{name}.conf
|
|
%dir %attr(775,root,knot) %{_sharedstatedir}/%{name}
|
|
%dir %attr(750,root,knot) %{_sharedstatedir}/%{name}/keys
|
|
%dir %attr(-,knot,knot) %{_localstatedir}/run/%{name}
|
|
%{_bindir}/*
|
|
%{_sbindir}/*
|
|
%{_mandir}/man1/*
|
|
%{_mandir}/man5/*
|
|
%{_mandir}/man8/*
|
|
%doc %{_infodir}/%{name}.info.gz
|
|
|
|
%changelog
|
|
* Wed Jun 18 2014 Jan Vcelak <jvcelak@fedoraproject.org> 1.4.7-1
|
|
- update to 1.4.7
|
|
+ Fixed DDNS corner cases
|
|
+ Fixed zone EXPIRE timer
|
|
+ Fixed semantic checks false positives
|
|
+ Fixed sending malformed IXFR with automatic DNSSEC
|
|
+ Fixed NAPTR record serialization
|
|
|
|
* Thu May 22 2014 Jan Vcelak <jvcelak@fedoraproject.org> 1.4.6-2
|
|
- update to 1.4.6
|
|
+ DNSSEC: fix possible signing loop when doing key rollover
|
|
+ RRL: fixed sending of malformed UDP empty responses
|
|
|
|
* Mon Apr 14 2014 Jan Vcelak <jvcelak@fedoraproject.org> 1.4.5-1
|
|
- update to 1.4.5
|
|
+ fix weakness in TSIG digest checking
|
|
|
|
* Thu Mar 27 2014 Jan Vcelak <jvcelak@fedoraproject.org> 1.4.4-1
|
|
- update to 1.4.4
|
|
+ server is logging remote control commands
|
|
+ 'knotc reload' doesn't refresh unchanged zones
|
|
+ 'knotc -f refresh' forces zone retransfer
|
|
+ missing notifications after DDNS/automatic resign
|
|
+ zone is rebootstrapped if the zone file is unreadable
|
|
+ progressive bootstrap retry backoff
|
|
+ zone file parser allows asterisk as part of the label
|
|
+ journal maximum entry size fixes
|
|
+ sign DNSKEYs in non-apex nodes as regular RR sets
|
|
+ various spelling and typo fixes
|
|
|
|
* Tue Feb 18 2014 Jan Vcelak <jvcelak@fedoraproject.org> 1.4.3-1
|
|
- update to 1.4.3
|
|
+ DNSSEC: fixes in authenticated denial proofs
|
|
+ zone parser: case insensitive comparison of $ORIGIN
|
|
+ journal: fix corruption if zone loading fails
|
|
+ config: add support for includes of directories
|
|
|
|
* Tue Feb 04 2014 Jan Vcelak <jvcelak@fedoraproject.org> 1.4.2-1
|
|
- initial package for RHEL
|
|
|