head 1.8; access; symbols pkgsrc-2026Q3:1.6.0.2 pkgsrc-2026Q3-base:1.6; locks; strict; comment @# @; 1.8 date 2026.10.01.18.58.28; author drixter; state Exp; branches; next 1.7; commitid 6njj1epHyfDF3OXG; 1.7 date 2026.09.26.07.38.10; author wiz; state Exp; branches; next 1.6; commitid 5ZVkZd23mCibs6XG; 1.6 date 2026.09.12.19.52.21; author drixter; state Exp; branches; next 1.5; commitid xxZjngS1I0oCXmVG; 1.5 date 2026.09.04.07.57.46; author adam; state Exp; branches; next 1.4; commitid 9WZ7HEAMye9SghUG; 1.4 date 2026.08.26.10.19.08; author adam; state Exp; branches; next 1.3; commitid b98k6xNpes7hl8TG; 1.3 date 2026.08.05.15.59.30; author drixter; state Exp; branches; next 1.2; commitid 8ke7K5ar8HkTTsQG; 1.2 date 2026.07.22.20.38.03; author drixter; state Exp; branches; next 1.1; commitid SqpNVJyLibhhTGOG; 1.1 date 2026.06.27.20.39.03; author drixter; state Exp; branches; next ; commitid GtM266J3CFajHtLG; desc @@ 1.8 log @knot-resolver: Update to 6.5.0 Thursday, October 1, 2026 Bugfixes views: fix "unused tags" error when repeating a tag in views (!1883) watchdog: detect file-changes done via rename*() syscall (!1895) This is relevant for RPZ files and TLS certs+keys. DoH fixes for sharing connections among different users (!1844) TCP-based connections used Nagle's algorithm since 6.2.0 (!1903) This mistake significantly increased latencies of such transports. local-data: process upper-case names correctly (!1915) Packaging deb: migrate to sysusers and update packaging (!1857) rpm: fix source build against libknot >= 3.6 (!1907) python: 3.9+ (!1886), migrated to setuptools (!1889), removed typing-extensions (!1910) Debian 11 is no longer supported Debian,Ubuntu: i386 and armhf architectures no longer supported Improvements decrease RAM usage by a lot (!1901) local-data: increase capacity to 63 GiB (logged MDB_MAP_FULL, !1885) systemd: use unit's {Runtime,State,Cache}Directory directives instead of tmpfiles.d (!1853) controller: reimplement the notify socket in Python (!1875) python: improve Knot Resolver startup procedure (!1893) Some startup actions previously handled by the manager have been moved to a separate startup program. python: refactoring: utils (!1894), client (!1908) allow running under an unknown user, e.g. in containers (!1914) Incompatible changes remove legacy systemd unit files (kresd@@.service, kres-cache-gc.service) (!1853) remove $KRES_LOGGING_TARGET environment variable (!1893) You can override the default by passing --logtarget to knot-resolver command. (!1912) docker: remove cross-platform build for linux/arm/v7 (!1904) @ text @# $NetBSD: Makefile,v 1.1 2026/06/27 20:39:03 drixter Exp $ DISTNAME= knot-resolver-6.5.0 CATEGORIES= net MASTER_SITES= https://secure.nic.cz/files/knot-resolver/ EXTRACT_SUFX= .tar.xz MAINTAINER= drixter@@e-utp.net HOMEPAGE= https://secure.nic.cz/files/knot-resolver/ COMMENT= Knot (resolver) DNS server LICENSE= gnu-gpl-v3 USE_TOOLS+= pkg-config USE_TOOLS+= cmake USE_TOOLS+= bash USE_LANGUAGES= c c++ USE_LIBTOOL= yes DEPENDS+= daemonize-[0-9]*:../../sysutils/daemonize RCD_SCRIPTS= kresd BUILD_DEFS+= KRESD_USER KRESD_GROUP VARBASE KRESD_USER?= kresd KRESD_GROUP?= kresd PKG_GROUPS+= ${KRESD_GROUP} PKG_USERS+= ${KRESD_USER}:${KRESD_GROUP} PKG_GECOS.${KRESD_USER}= kresd daemon user PKG_GROUPS_VARS+= KRESD_GROUP PKG_USERS_VARS= KRESD_USER CONF_FILES+= ${PREFIX}/share/examples/knot-resolver/icann-ca.pem ${PKG_SYSCONFDIR}/knot-resolver/icann-ca.pem CONF_FILES+= ${PREFIX}/share/examples/knot-resolver/root.hints ${PKG_SYSCONFDIR}/knot-resolver/root.hints CONF_FILES+= ${PREFIX}/share/examples/knot-resolver/root.keys ${PKG_SYSCONFDIR}/knot-resolver/root.keys AUTO_MKDIRS= yes OWN_DIRS_PERMS+= ${PKG_SYSCONFDIR}/knot-resolver ${KRESD_USER} ${KRESD_GROUP} 0755 post-install: ${MV} ${DESTDIR}${PREFIX}/etc/knot-resolver/icann-ca.pem ${DESTDIR}${PREFIX}/share/examples/knot-resolver/ ${MV} ${DESTDIR}${PREFIX}/etc/knot-resolver/root.hints ${DESTDIR}${PREFIX}/share/examples/knot-resolver/ ${MV} ${DESTDIR}${PREFIX}/etc/knot-resolver/root.keys ${DESTDIR}${PREFIX}/share/examples/knot-resolver/ ${RMDIR} ${DESTDIR}${PREFIX}/etc/knot-resolver .include "../../net/knot/buildlink3.mk" .include "../../devel/libuv/buildlink3.mk" .include "../../databases/lmdb/buildlink3.mk" .include "../../lang/LuaJIT2/buildlink3.mk" .include "../../devel/libidn/buildlink3.mk" .include "../../devel/userspace-rcu/buildlink3.mk" .include "../../devel/zlib/buildlink3.mk" .include "../../security/gnutls/buildlink3.mk" .include "../../devel/editline/buildlink3.mk" .include "../../devel/jemalloc/buildlink3.mk" .include "../../devel/cmocka/buildlink3.mk" .include "../../devel/meson/build.mk" .include "../../devel/protobuf-c/buildlink3.mk" .include "../../net/fstrm/buildlink3.mk" .include "../../mk/bsd.pkg.mk" @ 1.7 log @*: recursive bump for new protobuf shlib major changed @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.6 2026/09/12 19:52:21 drixter Exp $ d3 1 a3 2 DISTNAME= knot-resolver-6.4.2 PKGREVISION= 2 d13 3 d18 1 a18 4 USE_TOOLS+= bash cmake pkg-config DEPENDS+= daemonize>=0:../../sysutils/daemonize .include "../../mk/bsd.prefs.mk" d31 1 d46 9 a54 11 OPSYSVARS+= SOEXT SOEXT.Darwin= dylib SOEXT.*= so PLIST_SUBST+= SOEXT=${SOEXT} PLIST_VARS= notdarwin .if ${OPSYS} == "Darwin" || ${OPSYS} == "SunOS" # error: call to undeclared function 'malloc_stats_print' MESON_ARGS+= -Dmalloc=disabled .else PLIST.notdarwin= yes a55 3 .endif .include "../../databases/lmdb/buildlink3.mk" a56 3 .include "../../devel/editline/buildlink3.mk" .include "../../devel/libidn/buildlink3.mk" .include "../../devel/libuv/buildlink3.mk" a58 4 .include "../../devel/userspace-rcu/buildlink3.mk" .include "../../devel/zlib/buildlink3.mk" .include "../../lang/LuaJIT2/buildlink3.mk" .include "../../net/knot/buildlink3.mk" a59 1 .include "../../security/gnutls/buildlink3.mk" @ 1.6 log @knot-resolver: Disable jemalloc also for SunOS, the rest issues are addressed to upstream (#958) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.5 2026/09/04 07:57:46 adam Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.5 log @knot-resolver: fix build on Darwin @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.4 2026/08/26 10:19:08 adam Exp $ d52 1 a52 1 .if ${OPSYS} == "Darwin" @ 1.4 log @Revision bump after abseil update @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.3 2026/08/05 15:59:30 drixter Exp $ a13 3 USE_TOOLS+= pkg-config USE_TOOLS+= cmake USE_TOOLS+= bash d16 4 a19 1 DEPENDS+= daemonize-[0-9]*:../../sysutils/daemonize a31 1 d46 14 a59 2 .include "../../net/knot/buildlink3.mk" .include "../../devel/libuv/buildlink3.mk" d61 2 a62 1 .include "../../lang/LuaJIT2/buildlink3.mk" d64 3 d69 3 a72 6 .include "../../devel/editline/buildlink3.mk" .include "../../devel/jemalloc/buildlink3.mk" .include "../../devel/cmocka/buildlink3.mk" .include "../../devel/meson/build.mk" .include "../../devel/protobuf-c/buildlink3.mk" .include "../../net/fstrm/buildlink3.mk" @ 1.3 log @knot-resolver: Update to 6.4.2 Bugfixes cache: avoid excessive logging introduced in the last release (!1869) /options/serve-stale: avoid SIGSEGV from a LuaJIT bug (#957) Improvements DoH: add unencrypted mode for reverese proxies (alpha, !1877) deal with LMDB 1.0.0 switching format (!1880) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.1 2026/06/27 20:39:03 drixter Exp $ d4 1 @ 1.2 log @knot-resolver: Update to 6.4.1 Knot Resolver 6.4.1 (2026-07-22) Security: DNS-over-QUIC (DoQ) had severe issues, allowing even RCE Many people reported (some of) these issues to us. DNSSEC correctness issues, acting mainly through the aggressive cache: * dealing with Labels field in RRSIGs being smaller than the signer’s * dealing with NSEC’s next-name pointing outside of the zone Special thanks to Qifan Zhang from Palo Alto Networks. Improvements: docker: upgrade to Debian 13 (!1856) update IANA’s certificate for root trust anchor bootstrapping (!1845) Bugfixes: /local-data/addresses*: make multiple addresses work (#808, #954) views: fix protocol-based matching for DoQ @ text @d3 1 a3 1 DISTNAME= knot-resolver-6.4.1 @ 1.1 log @knot-resolver: Adding version 6.4.0 Knot Resolver 6.4.0 (2026-06-17) Improvements packaging: rpm: require python3-setuptools (!1830, #952) packaging: rpm: provide user/group (!1837) controller: improved error handling when sending commands to workers (!1834) Bugfixes dns64: fix CNAME problems again (#797, !1840) @ text @d1 1 a1 1 # $NetBSD$ d3 1 a3 1 DISTNAME= knot-resolver-6.4.0 @