18 Commits

Author SHA256 Message Date
e14ea03e3c Accepting request 1280332 from server:dns
no change for TW

- disable luajit on ppc64le for SLFO (bsc#1243566)

OBS-URL: https://build.opensuse.org/request/show/1280332
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dnsdist?expand=0&rev=14
2025-05-26 18:16:50 +00:00
a67cb55165 OBS-URL: https://build.opensuse.org/package/show/server:dns/dnsdist?expand=0&rev=73 2025-05-26 17:11:32 +00:00
3df33d0e2b - disable luajit on ppc64le for SLFO (bsc#1243566)
OBS-URL: https://build.opensuse.org/package/show/server:dns/dnsdist?expand=0&rev=72
2025-05-26 16:50:44 +00:00
4e1cd8dd96 Accepting request 1280131 from server:dns
- update to 1.9.10: (bsc#1243378, bsc#1242028, CVE-2025-30194, CVE-2025-30193)
  https://www.dnsdist.org/changelog.html#change-1.9.10

OBS-URL: https://build.opensuse.org/request/show/1280131
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dnsdist?expand=0&rev=13
2025-05-26 16:40:36 +00:00
b7538c0cb6 - update to 1.9.10: (bsc#1243378, bsc#1242028, CVE-2025-30194, CVE-2025-30193)
https://www.dnsdist.org/changelog.html#change-1.9.10

OBS-URL: https://build.opensuse.org/package/show/server:dns/dnsdist?expand=0&rev=70
2025-05-26 11:21:16 +00:00
aec02e206b Accepting request 1221287 from server:dns
- update to 1.9.7:
  https://dnsdist.org/changelog.html#change-1.9.7
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update

OBS-URL: https://build.opensuse.org/request/show/1221287
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dnsdist?expand=0&rev=12
2024-11-05 14:41:36 +00:00
1adcf51cfb - update to 1.9.7:
https://dnsdist.org/changelog.html#change-1.9.7
- drop powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch included
  in update

OBS-URL: https://build.opensuse.org/package/show/server:dns/dnsdist?expand=0&rev=68
2024-11-05 02:08:30 +00:00
0d23a319cf Accepting request 1204907 from server:dns
- update to 1.9.6:
  https://dnsdist.org/changelog.html#change-1.9.6
  https://dnsdist.org/changelog.html#change-1.9.5
- add powerdns-5_1_1-2_fix-build-with-boost-1_86_0.patch from Arch
  linux to fix build with Boost 1.86
- track series file for easier patching

OBS-URL: https://build.opensuse.org/request/show/1204907
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dnsdist?expand=0&rev=11
2024-10-01 15:19:54 +00:00
f90fe0c445 OBS-URL: https://build.opensuse.org/package/show/server:dns/dnsdist?expand=0&rev=66 2024-10-01 10:21:49 +00:00
487e06c50d Accepting request 1173740 from server:dns
- update to 1.9.4: (bsc#1224001, CVE-2024-25581)
  * Fix “C++ One Definition Rule” warnings in XSK
  * Fix DNS over plain HTTP broken by reloadAllCertificates()
  * Fix a crash in incoming DoH with nghttp2
  * Fix handling of XFR requests over DoH
- changes since 1.9.0:
  * Support “no server available” result from Lua FFI load-balancing policies
  * Release incoming TCP connection right away on backend failure
  * Use server preference algorithm for ALPN selection
  * Fix a null-deref in incoming DNS over HTTPS with the nghttp2 provider
  * Fix DNS over HTTP connections/queries counters with the nghttp2 provider
  * Fix first IPv6 console connection being rejected
  * Fix XSK-enabled check when reconnecting a backend
  * Properly handle a failure of the first lazy health-check
  * Also handle EHOSTUNREACH as a case for reconnecting the socket

OBS-URL: https://build.opensuse.org/request/show/1173740
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dnsdist?expand=0&rev=10
2024-05-14 11:37:57 +00:00
bb714bdd65 Accepting request 1147125 from server:dns
- update to 1.9.0:
  * Fall back to libcrypto for authenticated encryption
  * Optimize the DoQ packet handling path
  * DNSName: Correct len and offset types
  * DNSName: Optimize parsing of uncompressed labels
  * enable DNS-over-HTTPS via nghttp2 library usage
  
  For details, see
  https://dnsdist.org/changelog.html#change-1.9.0

OBS-URL: https://build.opensuse.org/request/show/1147125
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dnsdist?expand=0&rev=9
2024-02-16 20:42:57 +00:00
6f722dc84a Accepting request 1146199 from server:dns
Forwarded request #1145445 from dimstar

- Revert "provide user(dnsdist) and group(dnsdist)": the package
  already uses sysusers-tools to create the user.
- Actually install dnsdist.user as %{_sysusersdir}/dnsdist.conf.

OBS-URL: https://build.opensuse.org/request/show/1146199
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dnsdist?expand=0&rev=8
2024-02-13 21:42:15 +00:00
5fad8296c6 Accepting request 1128351 from server:dns
OBS-URL: https://build.opensuse.org/request/show/1128351
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dnsdist?expand=0&rev=7
2023-11-23 20:42:33 +00:00
8df488d1ec Accepting request 1109721 from server:dns
- update to 1.8.1
  bug fix release. For details, see
  https://dnsdist.org/changelog.html#change-1.8.1

OBS-URL: https://build.opensuse.org/request/show/1109721
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dnsdist?expand=0&rev=6
2023-09-08 19:16:09 +00:00
4fbe28fc8f Accepting request 1079926 from server:dns
Changelog only change

OBS-URL: https://build.opensuse.org/request/show/1079926
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dnsdist?expand=0&rev=5
2023-04-17 15:41:14 +00:00
bd7496f07e Accepting request 1077173 from server:dns
- update to 1.8.0
  https://dnsdist.org/changelog.html#change-1.8.0

OBS-URL: https://build.opensuse.org/request/show/1077173
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dnsdist?expand=0&rev=4
2023-04-04 19:26:49 +00:00
448cea2e19 Accepting request 1073801 from server:dns
- update to 1.8.0~rc3
  https://dnsdist.org/changelog.html#change-1.8.0-rc3
- dnsdist.lua sample config -- comment google's DNS servers. Valid
  downstream DNS resolver configuration should be chosen by the admin

OBS-URL: https://build.opensuse.org/request/show/1073801
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dnsdist?expand=0&rev=3
2023-03-22 21:31:46 +00:00
50c174b1d7 Accepting request 1070406 from server:dns
- update to 1.8.0~rc2
  https://dnsdist.org/changelog.html#change-1.8.0-rc2
- no_doh_protobuf.patch, f44a8a8f19aff191fb1dc0631e37ec30ff087c25.patch
  upstreamed and removed

OBS-URL: https://build.opensuse.org/request/show/1070406
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/dnsdist?expand=0&rev=2
2023-03-09 16:46:54 +00:00
10 changed files with 56 additions and 164 deletions

View File

@@ -1,7 +0,0 @@
<services>
<service name="cargo_vendor" mode="manual">
<param name="srcdir">dnsdist*/dnsdist-rust-lib/rust/</param>
<param name="update">false</param>
<param name="compression">xz</param>
</service>
</services>

BIN
dnsdist-1.9.10.tar.bz2 LFS Normal file

Binary file not shown.

BIN
dnsdist-1.9.10.tar.bz2.sig Normal file

Binary file not shown.

View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:da30742f51aac8be7e116677cb07bc49fbea979fc5443e7e1fa8fa7bd0a63fe5
size 2275260

Binary file not shown.

View File

@@ -1,42 +1,3 @@
-------------------------------------------------------------------
Sun Aug 10 01:50:43 UTC 2025 - Marcus Rueckert <mrueckert@suse.de>
- properly set the profilename for apparmor
-------------------------------------------------------------------
Sat Aug 9 03:26:26 UTC 2025 - Marcus Rueckert <mrueckert@suse.de>
- package the docs directory so we can reference it in the example
config
-------------------------------------------------------------------
Fri Aug 8 22:02:53 UTC 2025 - Marcus Rueckert <mrueckert@suse.de>
- Fix url to the sample configuration
-------------------------------------------------------------------
Fri Aug 8 21:50:56 UTC 2025 - Marcus Rueckert <mrueckert@suse.de>
- switch build system to meson
- fix code 15 build by forcing a newer gcc
-------------------------------------------------------------------
Fri Aug 8 20:58:12 UTC 2025 - Marcus Rueckert <mrueckert@suse.de>
- update to 2.0.0
https://www.dnsdist.org/changelog.html#change-2.0.0
- new buildrequires:
- gnutls
- libebpf
- build script needs python3-PyYAML to generate sources
- preparation for enabling new features in the future:
- yaml-config:
- adds vendor.tar.xz to vendor the rust modules.
built linking fails currently
- xdp support
- not sure yet if that can be later toggled in the config
- quiche support which brings DoH3
-------------------------------------------------------------------
Mon May 26 11:13:10 UTC 2025 - Adam Majer <adam.majer@suse.de>

View File

@@ -1,7 +1,5 @@
-- this is a base example configuration
-- for more see
-- https://github.com/PowerDNS/pdns/blob/master/pdns/dnsdistdist/dnsdistconf.lua
-- /usr/share/doc/packages/dnsdist/docs/reference/config.rst
-- for more see https://github.com/PowerDNS/pdns/blob/master/pdns/dnsdistconf.lua
-- controlSocket("127.0.0.1")
-- setKey(please generate a fresh private key with makeKey())

View File

@@ -1,7 +1,7 @@
#
# spec file for package dnsdist
#
# Copyright (c) 2025 SUSE LLC and contributors
# Copyright (c) 2025 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,20 +17,22 @@
%define home %{_var}/lib/%{name}
%if 0%{?suse_version} == 1500
%global force_gcc_version 14
%endif
%if 0%{?suse_version}
%bcond_without apparmor
%else
%bcond_with apparmor
%endif
%if 0%{?%{is_backports}} || 0%{?suse_version} >= 1599
#
# this should only be needed if we have to patch the ragel files
# in which case it might be faster to just run it locally and put the regenerated file into the tarball
%bcond_with dnsdist_ragel
%if 0%{?%is_backports} || 0%{?suse_version} >= 1599
%bcond_without dnsdist_re2
%else
%bcond_with dnsdist_re2
%endif
%ifarch ppc64le
%bcond_with dnsdist_luajit
%else
@@ -40,51 +42,38 @@
%bcond_with dnsdist_luajit
%endif
%endif
#
# this should only be needed if we have to patch the ragel files
# in which case it might be faster to just run it locally and put the regenerated file into the tarball
%bcond_with dnsdist_ragel
%bcond_with dnsdist_yaml_config
%bcond_with dnsdist_quiche
%bcond_with dnsdist_xdp
Name: dnsdist
Version: 2.0.0
Version: 1.9.10
Release: 0
Summary: A highly DNS-, DoS- and abuse-aware loadbalancer
License: GPL-2.0-only
Group: Productivity/Networking/DNS/Servers
URL: https://www.powerdns.com/
Source0: https://downloads.powerdns.com/releases/dnsdist-%{version}.tar.xz
Source1: https://downloads.powerdns.com/releases/dnsdist-%{version}.tar.xz.sig
Source0: https://downloads.powerdns.com/releases/dnsdist-%{version}.tar.bz2
Source1: https://downloads.powerdns.com/releases/dnsdist-%{version}.tar.bz2.sig
Source2: https://dnsdist.org/_static/dnsdist-keyblock.asc#/dnsdist.keyring
Source3: vendor.tar.xz
Source10: dnsdist.user
Source11: dnsdist.lua
Source12: usr.sbin.dnsdist
Source13: local.usr.sbin.dnsdist
Source99: series
BuildRequires: gcc%{?force_gcc_version}
BuildRequires: gcc%{?force_gcc_version}-c++
BuildRequires: gcc-c++
BuildRequires: libboost_headers-devel
BuildRequires: meson
BuildRequires: libedit-devel
BuildRequires: libfstrm-devel
BuildRequires: libsodium-devel
BuildRequires: lmdb-devel
BuildRequires: net-snmp-devel
BuildRequires: pkgconfig
BuildRequires: pkgconfig(gnutls)
BuildRequires: pkgconfig(libbpf)
BuildRequires: sysuser-shadow
BuildRequires: sysuser-tools
BuildRequires: pkgconfig(libcap)
BuildRequires: pkgconfig(libedit)
BuildRequires: pkgconfig(libfstrm)
BuildRequires: pkgconfig(libnghttp2)
BuildRequires: pkgconfig(libsodium)
BuildRequires: pkgconfig(libsystemd)
BuildRequires: pkgconfig(lmdb)
BuildRequires: pkgconfig(netsnmp)
BuildRequires: pkgconfig(systemd)
%if %{with dnsdist_yaml_config}
BuildRequires: cargo
%endif
%if %{with dnsdist_xdp}
BuildRequires: pkgconfig(libxdp)
%endif
%systemd_ordering
%sysusers_requires
%if %{with apparmor}
BuildRequires: apparmor-profiles
%endif
@@ -92,18 +81,13 @@ BuildRequires: apparmor-profiles
BuildRequires: ragel
%endif
%if %{with dnsdist_re2}
BuildRequires: pkgconfig(re2)
BuildRequires: re2-devel
%endif
%if %{with dnsdist_luajit}
BuildRequires: pkgconfig(luajit)
%else
BuildRequires: pkgconfig(lua)
%endif
BuildRequires: python3-PyYAML
BuildRequires: sysuser-shadow
BuildRequires: sysuser-tools
%systemd_ordering
%sysusers_requires
%description
dnsdist is a highly DNS-, DoS- and abuse-aware loadbalancer. Its goal in life
@@ -114,68 +98,41 @@ dnsdist is dynamic, in the sense that its configuration can be changed at
runtime, and that its statistics can be queried from a console-like interface.
%prep
%autosetup -p1 -a 3 -n %{name}-%{version}
%autosetup -p1 -n %{name}-%{version}
%build
%if 0%{?force_gcc_version}
export CC="gcc-%{?force_gcc_version}"
export CXX="g++-%{?force_gcc_version}"
export CFLAGS="%{optflags} -Wno-error=deprecated-declarations"
%ifarch %{arm} %{ix86}
export CFLAGS="$CFLAGS -D__USE_TIME_BITS64"
%endif
%meson \
--bindir=%{_sbindir} \
--sysconfdir=%{_sysconfdir}/%{name} \
-Ddnscrypt=enabled \
-Dlibcap=enabled \
-Dlibedit=enabled \
-Dlibsodium=enabled \
-Dtls-gnutls=enabled \
-Dtls-libssl-engines=true \
-Dtls-libssl-providers=true \
%if %{with dnsdist_luajit}
-Dlua=luajit \
%else
-Dlua=lua \
%endif
-Dipcipher=enabled \
-Dreproducible=true \
-Dsnmp=enabled \
-Ddnstap=enabled \
-Dnghttp2=enabled \
-Dcdb=disabled \
-Dlmdb=enabled \
%if %{with dnsdist_quiche}
-Dquiche=enabled \
-Ddns-over-http3=enabled \
-Ddns-over-quic=enabled \
%else
-Dquiche=disabled \
-Ddns-over-http3=disabled \
-Ddns-over-quic=disabled \
%endif
%if %{with dnsdist_re2}
-Dre2=enabled \
%else
-Dre2=disabled \
%endif
%if %{with dnsdist_xdp}
-Dxsk=enabled \
%else
-Dxsk=disabled \
%endif
-Debpf=enabled \
%if %{with dnsdist_yaml_config}
-Dyaml=enabled \
%else
-Dyaml=disabled \
%endif
-Dman-pages=true \
%nil
export CXXFLAGS="$CFLAGS"
%meson_build
%configure \
--enable-dnstap \
--enable-dns-over-tls \
--enable-systemd \
--enable-lto \
--enable-dnscrypt \
--enable-dns-over-https \
%if %{with dnsdist_re2}
--with-re2 \
%endif
--with-ebpf \
--with-net-snmp \
--with-libcap \
%if %{with dnsdist_luajit}
--with-lua=luajit \
%endif
--with-lmdb \
--disable-silent-rules \
--bindir=%{_sbindir} \
--sysconfdir=%{_sysconfdir}/%{name}/
%make_build
%sysusers_generate_pre %{SOURCE10} %{name}
%install
%meson_install
%make_install
#
%if 0%{?suse_version}
ln -sf %{_sbindir}/service %{buildroot}%{_sbindir}/rc%{name}
@@ -190,18 +147,6 @@ install -m 0640 %{SOURCE11} %{buildroot}%{_sysconfdir}/%{name}/dnsdist.conf
install -D -m 0644 %{SOURCE10} %{buildroot}%{_sysusersdir}/dnsdist.conf
rm -rv \
docs/*.py \
docs/manpages \
docs/requirements.* \
docs/_static \
docs/_templates
find docs -type f -executable -print0 | xargs -r0 chmod -v a-x
perl -p -i -e 's|\r\n|\n|g ; s|\r|\n|g' docs/reference/logging.rst
%check
%meson_test
%pre -f %{name}.pre
%service_add_pre %{name}.service %{name}@.service
@@ -216,8 +161,6 @@ perl -p -i -e 's|\r\n|\n|g ; s|\r|\n|g' docs/reference/logging.rst
%files
%doc README.md
%license COPYING
%doc docs/
%{_sbindir}/dnsdist
%{_mandir}/man1/dnsdist.1%{?ext_man}
%{_unitdir}/%{name}*.service

View File

@@ -1,6 +1,6 @@
#include <tunables/global>
profile dnsdist /usr/sbin/dnsdist {
/usr/sbin/dnsdist {
#include <abstractions/base>
#include <abstractions/nameservice>

View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:7488e879f3e429ce18f1ba1a491b5fb389ef28f0d811d919c40fc6d1896f42f6
size 6655488