|
|
3031aea |
%{?!with_python2: %global with_python2 0}
|
|
|
9d0dace |
%{?!with_python3: %global with_python3 1}
|
|
|
9d0dace |
%{?!with_munin: %global with_munin 1}
|
|
|
ac21a84 |
%bcond_without dnstap
|
|
|
776a059 |
%bcond_with systemd
|
|
|
07b18f1 |
%bcond_without doh
|
|
|
668ceaf |
%bcond_with redis
|
|
|
9d0dace |
|
|
|
1b283a2 |
%global _hardened_build 1
|
|
|
1b283a2 |
|
|
|
d389610 |
#global extra_version rc1
|
|
|
1b283a2 |
|
|
|
1b283a2 |
%if 0%{with_python2}
|
|
|
1b283a2 |
%global python_primary %{__python2}
|
|
|
373ff61 |
%endif
|
|
|
1b283a2 |
|
|
|
1b283a2 |
%if 0%{with_python3}
|
|
|
1b283a2 |
%global python_primary %{__python3}
|
|
|
373ff61 |
%endif
|
|
|
1b283a2 |
|
|
|
1b283a2 |
%if 0%{?rhel}
|
|
|
1b283a2 |
%global with_munin 0
|
|
|
1b283a2 |
|
|
|
1b283a2 |
%if 0%{?rhel} <= 7
|
|
|
1b283a2 |
%global with_python3 0
|
|
|
1b283a2 |
%else
|
|
|
1b283a2 |
%global with_python2 0
|
|
|
373ff61 |
%endif
|
|
|
373ff61 |
%endif
|
|
|
72771a7 |
|
|
|
05f86a0 |
Summary: Validating, recursive, and caching DNS(SEC) resolver
|
|
|
05f86a0 |
Name: unbound
|
|
|
d389610 |
Version: 1.19.0
|
|
|
cac99bf |
Release: %autorelease %{?extra_version:-e %{extra_version}}
|
|
|
ad8a936 |
License: BSD-3-Clause
|
|
|
c8f0468 |
Url: https://nlnetlabs.nl/projects/unbound/
|
|
|
c8f0468 |
Source: https://nlnetlabs.nl/downloads/%{name}/%{name}-%{version}%{?extra_version}.tar.gz
|
|
|
a523624 |
Source1: unbound.service
|
|
|
d2fe1dc |
Source3: unbound.munin
|
|
Paul Wouters |
4c0de48 |
Source4: unbound_munin_
|
|
Paul Wouters |
4c0de48 |
Source5: root.key
|
|
|
a523624 |
Source7: unbound-keygen.service
|
|
|
a523624 |
Source8: tmpfiles-unbound.conf
|
|
|
6f8d333 |
Source9: example.com.key
|
|
|
6f8d333 |
Source10: example.com.conf
|
|
|
6f8d333 |
Source11: block-example.com.conf
|
|
|
3c9b28d |
Source12: https://data.iana.org/root-anchors/icannbundle.pem
|
|
|
90deaa6 |
Source13: root.anchor
|
|
|
90deaa6 |
Source14: unbound.sysconfig
|
|
|
2a169a8 |
Source15: unbound-anchor.timer
|
|
|
daed88d |
Source16: unbound-munin.README
|
|
|
2a169a8 |
Source17: unbound-anchor.service
|
|
|
c78f3c8 |
Source18: https://nlnetlabs.nl/downloads/%{name}/%{name}-%{version}%{?extra_version}.tar.gz.asc
|
|
|
adccc55 |
# source: https://nlnetlabs.nl/people/
|
|
|
adccc55 |
Source19: https://keys.openpgp.org/pks/lookup?op=get&search=0x9F6F1C2D7E045F8D#/wouter.nlnetlabs.nl.key
|
|
|
0953d81 |
Source20: unbound.sysusers
|
|
|
b9ddae3 |
|
|
|
8eb43fc |
# Downstream configuration changes
|
|
|
8eb43fc |
Patch1: unbound-fedora-config.patch
|
|
|
4f85ef9 |
|
|
|
2098280 |
BuildRequires: gcc, make
|
|
|
035078b |
BuildRequires: flex, openssl-devel
|
|
Paul Wouters |
4c0de48 |
BuildRequires: libevent-devel expat-devel
|
|
|
be41633 |
BuildRequires: pkgconfig
|
|
|
b29f943 |
%if 0%{?fedora}
|
|
|
b6d9ed0 |
BuildRequires: gnupg2
|
|
|
b29f943 |
%endif
|
|
|
1b283a2 |
%if 0%{with_python2}
|
|
|
9d0dace |
BuildRequires: python2-devel swig
|
|
|
373ff61 |
%endif
|
|
|
9d0dace |
%if 0%{with_python3}
|
|
|
1b283a2 |
BuildRequires: python3-devel swig
|
|
|
373ff61 |
%endif
|
|
|
776a059 |
%if %{with dnstap}
|
|
|
776a059 |
BuildRequires: fstrm-devel protobuf-c-devel
|
|
|
776a059 |
%endif
|
|
|
776a059 |
%if %{with systemd}
|
|
|
776a059 |
BuildRequires: systemd-devel
|
|
|
776a059 |
%endif
|
|
|
ee9c337 |
%if %{with doh}
|
|
|
ee9c337 |
BuildRequires: libnghttp2-devel
|
|
|
ee9c337 |
%endif
|
|
|
668ceaf |
%if %{with redis}
|
|
|
fd868a8 |
BuildRequires: hiredis-devel
|
|
|
668ceaf |
%endif
|
|
|
2efa55a |
%if 0%{?fedora} >= 30 || 0%{?rhel} >= 9
|
|
|
3ebaa95 |
BuildRequires: systemd-rpm-macros
|
|
|
e1df65a |
%else
|
|
|
e1df65a |
BuildRequires: systemd
|
|
|
e1df65a |
%endif
|
|
Paul Wouters |
8c4f681 |
# Required for SVN versions
|
|
Paul Wouters |
8c4f681 |
# BuildRequires: bison
|
|
|
fdd77f9 |
# BuildRequires: automake autoconf libtool
|
|
|
cd8741f |
|
|
|
5458f44 |
# Needed because /usr/sbin/unbound links unbound libs staticly
|
|
|
a7ba25e |
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
ab99d1d |
Requires: %{name}-anchor%{?_isa} = %{version}-%{release}
|
|
|
9e8de94 |
Recommends: %{name}-utils%{?_isa} = %{version}-%{release}
|
|
|
2868e37 |
# unbound-keygen.service requires it, bug #2116790
|
|
|
2868e37 |
Requires: openssl
|
|
|
05f86a0 |
|
|
|
05f86a0 |
%description
|
|
|
05f86a0 |
Unbound is a validating, recursive, and caching DNS(SEC) resolver.
|
|
|
05f86a0 |
|
|
|
05f86a0 |
The C implementation of Unbound is developed and maintained by NLnet
|
|
|
05f86a0 |
Labs. It is based on ideas and algorithms taken from a java prototype
|
|
|
05f86a0 |
developed by Verisign labs, Nominet, Kirei and ep.net.
|
|
|
05f86a0 |
|
|
|
05f86a0 |
Unbound is designed as a set of modular components, so that also
|
|
|
05f86a0 |
DNSSEC (secure DNS) validation and stub-resolvers (that do not run
|
|
|
05f86a0 |
as a server, but are linked into an application) are easily possible.
|
|
|
05f86a0 |
|
|
|
938672c |
%if %{with_munin}
|
|
|
d2fe1dc |
%package munin
|
|
|
d2fe1dc |
Summary: Plugin for the munin / munin-node monitoring package
|
|
|
d2fe1dc |
Requires: munin-node
|
|
|
24585b9 |
Requires: %{name} = %{version}-%{release}, bc
|
|
|
a7ba25e |
BuildArch: noarch
|
|
|
d2fe1dc |
|
|
|
d2fe1dc |
%description munin
|
|
|
d2fe1dc |
Plugin for the munin / munin-node monitoring package
|
|
Adam Tkac |
0a7dcbe |
%endif
|
|
|
d2fe1dc |
|
|
|
05f86a0 |
%package devel
|
|
|
05f86a0 |
Summary: Development package that includes the unbound header files
|
|
|
035078b |
Requires: %{name}-libs%{?_isa} = %{version}-%{release}, openssl-devel
|
|
|
be41633 |
Requires: pkgconfig
|
|
|
05f86a0 |
|
|
|
05f86a0 |
%description devel
|
|
|
05f86a0 |
The devel package contains the unbound library and the include files
|
|
|
05f86a0 |
|
|
|
05f86a0 |
%package libs
|
|
|
05f86a0 |
Summary: Libraries used by the unbound server and client applications
|
|
|
ab99d1d |
Recommends: %{name}-anchor
|
|
|
9972998 |
%{?sysusers_requires_compat}
|
|
|
57baf9a |
%if ! 0%{with_python2}
|
|
|
57baf9a |
# Make explicit conflict with no longer provided python package
|
|
|
57baf9a |
Obsoletes: python2-unbound < 1.9.3
|
|
|
57baf9a |
%endif
|
|
|
05f86a0 |
|
|
|
05f86a0 |
%description libs
|
|
|
ab99d1d |
Contains libraries used by the unbound server and client applications.
|
|
|
ab99d1d |
|
|
|
ab99d1d |
%package anchor
|
|
|
ab99d1d |
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
ab99d1d |
Summary: DNSSEC trust anchor maintaining tool
|
|
|
ab99d1d |
|
|
|
ab99d1d |
%description anchor
|
|
|
ab99d1d |
Contains tool maintaining trust anchor using RFC 5011 key rollover algorithm.
|
|
|
05f86a0 |
|
|
|
9e8de94 |
%package utils
|
|
|
9e8de94 |
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
9e8de94 |
Summary: Unbound DNS lookup utilities
|
|
|
9e8de94 |
|
|
|
9e8de94 |
%description utils
|
|
|
9e8de94 |
Contains tools for making DNS queries. Can make queries to DNS servers
|
|
|
9e8de94 |
also over TLS connection or validate DNSSEC signatures. Similar to
|
|
|
9e8de94 |
bind-utils.
|
|
|
9e8de94 |
|
|
|
1b283a2 |
%if 0%{with_python2}
|
|
|
bced8e7 |
%package -n python2-unbound
|
|
|
bced8e7 |
%{?python_provide:%python_provide python2-unbound}
|
|
|
9d0dace |
Summary: Python 2 modules and extensions for unbound
|
|
|
a7ba25e |
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
9d0dace |
Provides: unbound-python = %{version}-%{release}
|
|
|
9d0dace |
Obsoletes: unbound-python < %{version}-%{release}
|
|
|
9d0dace |
|
|
|
bced8e7 |
%description -n python2-unbound
|
|
|
9d0dace |
Python 2 modules and extensions for unbound
|
|
|
373ff61 |
%endif
|
|
|
9d0dace |
|
|
|
9d0dace |
%if 0%{with_python3}
|
|
|
9d0dace |
%package -n python3-unbound
|
|
|
9d0dace |
Summary: Python 3 modules and extensions for unbound
|
|
|
9d0dace |
Requires: %{name}-libs%{?_isa} = %{version}-%{release}
|
|
|
e1df65a |
%if ! 0%{with_python2}
|
|
|
e1df65a |
# Make explicit conflict with no longer provided python package
|
|
|
57baf9a |
Conflicts: python2-unbound < 1.9.3
|
|
|
e1df65a |
%endif
|
|
|
9d0dace |
|
|
|
9d0dace |
%description -n python3-unbound
|
|
|
9d0dace |
Python 3 modules and extensions for unbound
|
|
|
373ff61 |
%endif
|
|
|
41fa067 |
|
|
|
41fa067 |
|
|
|
05f86a0 |
%prep
|
|
|
b29f943 |
%if 0%{?fedora}
|
|
|
49e721c |
%{gpgverify} --keyring='%{SOURCE19}' --signature='%{SOURCE18}' --data='%{SOURCE0}'
|
|
|
b29f943 |
%endif
|
|
|
f81c94b |
%global pkgname %{name}-%{version}%{?extra_version}
|
|
|
f81c94b |
|
|
|
f81c94b |
%if 0%{with_python2} && 0%{with_python3}
|
|
|
f81c94b |
%global dir_primary %{pkgname}_python3
|
|
|
f81c94b |
%global python_primary %{__python3}
|
|
|
f81c94b |
%global dir_secondary %{pkgname}_python2
|
|
|
f81c94b |
%global python_secondary %{__python2}
|
|
|
f81c94b |
%else
|
|
|
f81c94b |
%global dir_primary %{pkgname}
|
|
|
373ff61 |
%endif
|
|
|
f81c94b |
|
|
|
c8f0468 |
%autosetup -c -N -n %{pkgname}
|
|
|
9d0dace |
|
|
|
83df90d |
pushd %{pkgname}
|
|
|
5bfdf89 |
# patches go here
|
|
|
8eb43fc |
%autopatch -p2
|
|
|
e9cb729 |
|
|
|
fdd77f9 |
# only for snapshots
|
|
|
fdd77f9 |
# autoreconf -iv
|
|
|
9d0dace |
|
|
|
9d0dace |
# copy common doc files - after here, since it may be patched
|
|
|
9d0dace |
cp -pr doc pythonmod libunbound ../
|
|
|
940496d |
|
|
|
940496d |
%if 0%{?rhel} > 8
|
|
|
940496d |
# SHA-1 breaks some tests. Disable just some tests because of that.
|
|
|
940496d |
# This got broken in ELN
|
|
|
940496d |
ls testdata/*.rpl
|
|
|
940496d |
for TEST in autotrust_init_fail autotrust_init_failsig; do
|
|
|
940496d |
mv testdata/${TEST}.rpl{,-disabled}
|
|
|
940496d |
done
|
|
|
940496d |
%endif
|
|
|
9d0dace |
popd
|
|
|
9d0dace |
|
|
|
1b283a2 |
%if 0%{with_python2} && 0%{with_python3}
|
|
|
1b283a2 |
mv %{pkgname} %{dir_primary}
|
|
|
1b283a2 |
cp -a %{dir_primary} %{dir_secondary}
|
|
|
1b283a2 |
%endif
|
|
|
05f86a0 |
|
|
|
05f86a0 |
%build
|
|
Pavel Šimerda |
748fd03 |
# This is needed to rebuild the configure script to support Python 3.x
|
|
|
9d0dace |
# autoreconf -iv
|
|
|
9d0dace |
|
|
|
9d0dace |
# ./configure script common arguments
|
|
|
9d0dace |
%global configure_args --with-libevent --with-pthreads --with-ssl \\\
|
|
|
9d0dace |
--disable-rpath --disable-static \\\
|
|
|
26cbcab |
--enable-relro-now --enable-pie \\\
|
|
|
07097d2 |
--enable-subnet --enable-ipsecmod \\\
|
|
|
9d0dace |
--with-conf-file=%{_sysconfdir}/%{name}/unbound.conf \\\
|
|
|
5bfdf89 |
--with-pidfile=%{_rundir}/%{name}/%{name}.pid \\\
|
|
|
9d0dace |
--enable-sha2 --disable-gost --enable-ecdsa \\\
|
|
|
8eb43fc |
--with-rootkey-file=%{_sharedstatedir}/%{name}/root.key \\\
|
|
|
8eb43fc |
--with-username=unbound \\\
|
|
|
668ceaf |
--enable-linux-ip-local-port-range \\\
|
|
|
668ceaf |
|
|
|
95ed9b4 |
|
|
|
1b283a2 |
pushd %{dir_primary}
|
|
|
9d0dace |
|
|
|
9d0dace |
%configure \
|
|
|
1b283a2 |
%if 0%{?python_primary:1}
|
|
|
1b283a2 |
--with-pythonmodule --with-pyunbound PYTHON=%{python_primary} \
|
|
|
373ff61 |
%endif
|
|
|
776a059 |
%if %{with dnstap}
|
|
|
776a059 |
--enable-dnstap \
|
|
|
776a059 |
%endif
|
|
|
776a059 |
%if %{with systemd}
|
|
|
776a059 |
--enable-systemd \
|
|
|
776a059 |
%endif
|
|
|
9b40e98 |
%if %{with doh}
|
|
|
9b40e98 |
--with-libnghttp2 \
|
|
|
9b40e98 |
%endif
|
|
|
2efa55a |
%if 0%{?rhel}
|
|
|
2efa55a |
--disable-sha1 \
|
|
|
2efa55a |
%endif
|
|
|
668ceaf |
%if %{with redis}
|
|
|
668ceaf |
--with-libhiredis \
|
|
|
668ceaf |
--enable-cachedb \
|
|
|
668ceaf |
%endif
|
|
|
9d0dace |
%{configure_args}
|
|
|
9d0dace |
|
|
|
66b41c8 |
%make_build
|
|
|
66b41c8 |
%make_build streamtcp
|
|
|
05f86a0 |
|
|
|
9d0dace |
popd
|
|
|
9d0dace |
|
|
|
1b283a2 |
%if 0%{?python_secondary:1}
|
|
|
1b283a2 |
pushd %{dir_secondary}
|
|
|
9d0dace |
%configure \
|
|
|
1b283a2 |
--with-pythonmodule --with-pyunbound PYTHON=%{python_secondary} \
|
|
|
776a059 |
%if %{with dnstap}
|
|
|
776a059 |
--enable-dnstap \
|
|
|
776a059 |
%endif
|
|
|
776a059 |
%if %{with systemd}
|
|
|
776a059 |
--enable-systemd \
|
|
|
776a059 |
%endif
|
|
|
9d0dace |
%{configure_args}
|
|
|
9d0dace |
|
|
|
66b41c8 |
%make_build
|
|
|
9d0dace |
popd
|
|
|
373ff61 |
%endif
|
|
|
9d0dace |
|
|
|
9d0dace |
|
|
|
05f86a0 |
%install
|
|
|
83df90d |
install -p -m 0644 %{SOURCE16} .
|
|
|
9d0dace |
|
|
|
1b283a2 |
%if 0%{?python_secondary:1}
|
|
|
749ab14 |
# install first secondary build. It will be overwritten by primary
|
|
|
1b283a2 |
pushd %{dir_secondary}
|
|
|
66b41c8 |
%make_install unbound-event-install
|
|
|
749ab14 |
popd
|
|
|
373ff61 |
%endif
|
|
|
749ab14 |
|
|
|
749ab14 |
pushd %{dir_primary}
|
|
|
66b41c8 |
%make_install unbound-event-install
|
|
|
cfb4c4d |
install -m 0755 streamtcp %{buildroot}%{_sbindir}/unbound-streamtcp
|
|
|
8eb43fc |
install -p -m 0755 doc/example.conf %{buildroot}%{_sysconfdir}/unbound/unbound.conf
|
|
|
61d5f48 |
popd
|
|
|
61d5f48 |
|
|
|
ebc942c |
install -d -m 0755 %{buildroot}%{_unitdir} %{buildroot}%{_sysconfdir}/sysconfig
|
|
|
e1ae447 |
install -p -m 0644 %{SOURCE1} %{buildroot}%{_unitdir}/unbound.service
|
|
|
e1ae447 |
install -p -m 0644 %{SOURCE7} %{buildroot}%{_unitdir}/unbound-keygen.service
|
|
|
2a169a8 |
install -p -m 0644 %{SOURCE15} %{buildroot}%{_unitdir}/unbound-anchor.timer
|
|
|
2a169a8 |
install -p -m 0644 %{SOURCE17} %{buildroot}%{_unitdir}/unbound-anchor.service
|
|
|
e1ae447 |
install -p -m 0644 %{SOURCE12} %{buildroot}%{_sysconfdir}/unbound
|
|
|
2a169a8 |
install -p -m 0644 %{SOURCE14} %{buildroot}%{_sysconfdir}/sysconfig/unbound
|
|
|
f3b35b2 |
install -p -D -m 0644 %{SOURCE20} %{buildroot}%{_sysusersdir}/%{name}.conf
|
|
|
938672c |
%if %{with_munin}
|
|
|
12d3cd5 |
# Install munin plugin and its softlinks
|
|
|
ebc942c |
install -d -m 0755 %{buildroot}%{_sysconfdir}/munin/plugin-conf.d
|
|
|
c4f62ca |
install -p -m 0644 %{SOURCE3} %{buildroot}%{_sysconfdir}/munin/plugin-conf.d/unbound
|
|
|
ebc942c |
install -d -m 0755 %{buildroot}%{_datadir}/munin/plugins/
|
|
|
e1ae447 |
install -p -m 0755 %{SOURCE4} %{buildroot}%{_datadir}/munin/plugins/unbound
|
|
|
12d3cd5 |
for plugin in unbound_munin_hits unbound_munin_queue unbound_munin_memory unbound_munin_by_type unbound_munin_by_class unbound_munin_by_opcode unbound_munin_by_rcode unbound_munin_by_flags unbound_munin_histogram; do
|
|
|
12d3cd5 |
ln -s unbound %{buildroot}%{_datadir}/munin/plugins/$plugin
|
|
Adam Tkac |
0a7dcbe |
done
|
|
Adam Tkac |
0a7dcbe |
%endif
|
|
|
05f86a0 |
|
|
|
1b283a2 |
pushd %{dir_primary}
|
|
|
308ffc6 |
# install streamtcp man page
|
|
|
308ffc6 |
install -m 0644 testcode/streamtcp.1 %{buildroot}/%{_mandir}/man1/unbound-streamtcp.1
|
|
|
be41633 |
install -D -m 0644 contrib/libunbound.pc %{buildroot}/%{_libdir}/pkgconfig/libunbound.pc
|
|
|
9d0dace |
popd
|
|
|
9d0dace |
|
|
|
a523624 |
# Install tmpfiles.d config
|
|
|
98e1f21 |
install -d -m 0755 %{buildroot}%{_tmpfilesdir} %{buildroot}%{_sharedstatedir}/unbound
|
|
|
98e1f21 |
install -m 0644 %{SOURCE8} %{buildroot}%{_tmpfilesdir}/unbound.conf
|
|
|
a523624 |
|
|
|
d83b37c |
# install root - we keep a copy of the root key in old location,
|
|
|
79e69dc |
# in case user has changed the configuration and we wouldn't update it there
|
|
|
9f873e2 |
install -m 0644 %{SOURCE5} %{buildroot}%{_sysconfdir}/unbound/
|
|
|
00b1b0c |
install -m 0644 %{SOURCE13} %{buildroot}%{_sysconfdir}/unbound/dnssec-root.key
|
|
|
00b1b0c |
# make initial key static
|
|
|
00b1b0c |
pushd %{buildroot}%{_sharedstatedir}/unbound
|
|
|
00b1b0c |
KEYPATH=$(realpath --relative-to="%{buildroot}%{_sharedstatedir}/unbound" "%{buildroot}%{_sysconfdir}/unbound/dnssec-root.key")
|
|
|
00b1b0c |
ln -s "$KEYPATH" root.key
|
|
|
00b1b0c |
popd
|
|
|
4a09e96 |
|
|
|
05f86a0 |
# remove static library from install (fedora packaging guidelines)
|
|
Paul Wouters |
4c0de48 |
rm %{buildroot}%{_libdir}/*.la
|
|
|
9d0dace |
|
|
|
be41633 |
|
|
|
1b283a2 |
%if 0%{with_python2}
|
|
|
9d0dace |
rm %{buildroot}%{python2_sitearch}/*.la
|
|
|
373ff61 |
%endif
|
|
|
9d0dace |
|
|
|
9d0dace |
%if 0%{with_python3}
|
|
|
9d0dace |
rm %{buildroot}%{python3_sitearch}/*.la
|
|
|
373ff61 |
%endif
|
|
|
05f86a0 |
|
|
|
e00e1b5 |
mkdir -p %{buildroot}%{_rundir}/unbound
|
|
|
05f86a0 |
|
|
|
6f8d333 |
# Install directories for easier config file drop in
|
|
|
6f8d333 |
|
|
|
6f8d333 |
mkdir -p %{buildroot}%{_sysconfdir}/unbound/{keys.d,conf.d,local.d}
|
|
|
6f8d333 |
install -p %{SOURCE9} %{buildroot}%{_sysconfdir}/unbound/keys.d/
|
|
|
6f8d333 |
install -p %{SOURCE10} %{buildroot}%{_sysconfdir}/unbound/conf.d/
|
|
|
6f8d333 |
install -p %{SOURCE11} %{buildroot}%{_sysconfdir}/unbound/local.d/
|
|
|
6f8d333 |
|
|
|
938672c |
# Link unbound-control-setup.8 manpage to unbound-control.8
|
|
|
938672c |
echo ".so man8/unbound-control.8" > %{buildroot}/%{_mandir}/man8/unbound-control-setup.8
|
|
Adam Tkac |
0f03662 |
|
|
|
9d0dace |
|
|
|
e70e0f0 |
%pre libs
|
|
|
0953d81 |
%sysusers_create_compat %{SOURCE20}
|
|
|
9d0dace |
|
|
|
9d0dace |
%post
|
|
|
9d0dace |
%systemd_post unbound.service
|
|
|
9d0dace |
%systemd_post unbound-keygen.service
|
|
|
9d0dace |
|
|
|
ab99d1d |
%post anchor
|
|
|
7b3bfe9 |
%systemd_post unbound-anchor.service unbound-anchor.timer
|
|
|
7aa01f9 |
# start the timer only if installing the package to prevent starting it, if it was stopped on purpose
|
|
|
7aa01f9 |
if [ "$1" -eq 1 ]; then
|
|
|
7aa01f9 |
# the Unit is in presets, but would be started after reboot
|
|
|
7aa01f9 |
/bin/systemctl start unbound-anchor.timer >/dev/null 2>&1 || :
|
|
|
7aa01f9 |
fi
|
|
|
9d0dace |
|
|
|
9d0dace |
%preun
|
|
|
9d0dace |
%systemd_preun unbound.service
|
|
|
9d0dace |
%systemd_preun unbound-keygen.service
|
|
|
9d0dace |
|
|
|
ab99d1d |
%preun anchor
|
|
|
7b3bfe9 |
%systemd_preun unbound-anchor.service unbound-anchor.timer
|
|
|
2a169a8 |
|
|
|
9d0dace |
%postun
|
|
|
9d0dace |
%systemd_postun_with_restart unbound.service
|
|
|
9d0dace |
%systemd_postun unbound-keygen.service
|
|
|
9d0dace |
|
|
|
7b3bfe9 |
%postun anchor
|
|
|
7b3bfe9 |
%systemd_postun_with_restart unbound-anchor.service unbound-anchor.timer
|
|
|
9d0dace |
|
|
|
1321c08 |
%check
|
|
|
1b283a2 |
pushd %{dir_primary}
|
|
|
9d0dace |
#pushd pythonmod
|
|
|
9d0dace |
#make test
|
|
|
9d0dace |
#popd
|
|
|
9d0dace |
|
|
|
1321c08 |
make check
|
|
|
1321c08 |
|
|
|
9d0dace |
popd
|
|
|
9d0dace |
|
|
|
1b283a2 |
%if 0%{?python_secondary:1}
|
|
|
1b283a2 |
pushd %{dir_secondary}
|
|
|
9d0dace |
#pushd pythonmod
|
|
|
9d0dace |
#make test
|
|
|
9d0dace |
#popd
|
|
|
9d0dace |
make check
|
|
|
9d0dace |
popd
|
|
|
373ff61 |
%endif
|
|
|
9d0dace |
|
|
|
9d0dace |
|
|
|
63b277e |
%files
|
|
|
9d0dace |
%doc doc/CREDITS doc/FEATURES
|
|
|
a523624 |
%{_unitdir}/%{name}.service
|
|
|
a523624 |
%{_unitdir}/%{name}-keygen.service
|
|
|
e00e1b5 |
%attr(0755,unbound,unbound) %dir %{_rundir}/%{name}
|
|
|
04cacae |
%attr(0644,root,root) %{_tmpfilesdir}/unbound.conf
|
|
|
12d3cd5 |
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/%{name}/unbound.conf
|
|
|
938672c |
%dir %attr(0755,root,unbound) %{_sysconfdir}/%{name}/keys.d
|
|
|
14fc685 |
%attr(0644,root,unbound) %config(noreplace) %{_sysconfdir}/%{name}/keys.d/*.key
|
|
|
938672c |
%dir %attr(0755,root,unbound) %{_sysconfdir}/%{name}/conf.d
|
|
|
14fc685 |
%attr(0644,root,unbound) %config(noreplace) %{_sysconfdir}/%{name}/conf.d/*.conf
|
|
|
938672c |
%dir %attr(0755,root,unbound) %{_sysconfdir}/%{name}/local.d
|
|
|
14fc685 |
%attr(0644,root,unbound) %config(noreplace) %{_sysconfdir}/%{name}/local.d/*.conf
|
|
|
dbae66e |
%ghost %attr(0640,root,unbound) %{_sysconfdir}/%{name}/unbound_control.pem
|
|
|
dbae66e |
%ghost %attr(0640,root,unbound) %{_sysconfdir}/%{name}/unbound_control.key
|
|
|
dbae66e |
%ghost %attr(0640,root,unbound) %{_sysconfdir}/%{name}/unbound_server.pem
|
|
|
dbae66e |
%ghost %attr(0640,root,unbound) %{_sysconfdir}/%{name}/unbound_server.key
|
|
|
570b1da |
%{_sbindir}/unbound
|
|
|
570b1da |
%{_sbindir}/unbound-checkconf
|
|
|
570b1da |
%{_sbindir}/unbound-control
|
|
|
570b1da |
%{_sbindir}/unbound-control-setup
|
|
|
8580858 |
%{_mandir}/man5/*
|
|
|
3e229ff |
%exclude %{_mandir}/man8/unbound-anchor*
|
|
|
8580858 |
%{_mandir}/man8/*
|
|
|
05f86a0 |
|
|
|
1b283a2 |
%if 0%{with_python2}
|
|
|
bced8e7 |
%files -n python2-unbound
|
|
|
9d0dace |
%license pythonmod/LICENSE
|
|
|
9d0dace |
%{python2_sitearch}/*
|
|
Paul Wouters |
026f7df |
%doc libunbound/python/examples/*
|
|
Paul Wouters |
026f7df |
%doc pythonmod/examples/*
|
|
|
41fa067 |
%endif
|
|
|
41fa067 |
|
|
|
9d0dace |
%if 0%{with_python3}
|
|
|
9d0dace |
%files -n python3-unbound
|
|
|
9d0dace |
%license pythonmod/LICENSE
|
|
|
9d0dace |
%{python3_sitearch}/*
|
|
|
9d0dace |
%doc libunbound/python/examples/*
|
|
|
9d0dace |
%doc pythonmod/examples/*
|
|
|
9d0dace |
%endif
|
|
|
9d0dace |
|
|
|
9d0dace |
%if 0%{with_munin}
|
|
|
d2fe1dc |
%files munin
|
|
|
9d0dace |
%doc unbound-munin.README
|
|
|
e4c51b0 |
%config(noreplace) %{_sysconfdir}/munin/plugin-conf.d/unbound
|
|
|
12d3cd5 |
%{_datadir}/munin/plugins/unbound*
|
|
Adam Tkac |
0a7dcbe |
%endif
|
|
|
d2fe1dc |
|
|
|
05f86a0 |
%files devel
|
|
|
05f86a0 |
%{_libdir}/libunbound.so
|
|
|
05f86a0 |
%{_includedir}/unbound.h
|
|
|
3e1303e |
%{_includedir}/unbound-event.h
|
|
|
8580858 |
%{_mandir}/man3/*
|
|
|
be41633 |
%{_libdir}/pkgconfig/*.pc
|
|
|
05f86a0 |
|
|
|
05f86a0 |
%files libs
|
|
|
9d0dace |
%doc doc/README
|
|
|
9d0dace |
%license doc/LICENSE
|
|
|
938672c |
%attr(0755,root,root) %dir %{_sysconfdir}/%{name}
|
|
|
f3b35b2 |
%{_sysusersdir}/%{name}.conf
|
|
|
0953d81 |
%{_libdir}/libunbound.so.8*
|
|
|
ab99d1d |
%dir %attr(0755,unbound,unbound) %{_sharedstatedir}/%{name}
|
|
|
06e6f74 |
%config(noreplace) %verify(not link user group) %{_sharedstatedir}/%{name}/root.key
|
|
|
ab99d1d |
# just left for backwards compat with user changed unbound.conf files - format is different!
|
|
|
ab99d1d |
%attr(0644,root,root) %config %{_sysconfdir}/%{name}/root.key
|
|
|
00b1b0c |
%attr(0644,root,root) %config %{_sysconfdir}/%{name}/dnssec-root.key
|
|
|
ab99d1d |
|
|
|
ab99d1d |
%files anchor
|
|
|
ab99d1d |
%attr(0644,root,root) %config(noreplace) %{_sysconfdir}/sysconfig/%{name}
|
|
|
ab99d1d |
%{_sbindir}/unbound-anchor
|
|
|
3e229ff |
%{_mandir}/man8/unbound-anchor*
|
|
|
e00e1b5 |
# icannbundle and root.key(s) should be replaced from package
|
|
|
e00e1b5 |
# intentionally not using noreplace
|
|
|
e00e1b5 |
%config %{_sysconfdir}/%{name}/icannbundle.pem
|
|
|
2a169a8 |
%{_unitdir}/unbound-anchor.timer
|
|
|
2a169a8 |
%{_unitdir}/unbound-anchor.service
|
|
|
a523624 |
|
|
|
9e8de94 |
%files utils
|
|
|
9e8de94 |
%{_sbindir}/unbound-host
|
|
|
9e8de94 |
%{_sbindir}/unbound-streamtcp
|
|
|
9e8de94 |
%{_mandir}/man1/unbound-*
|
|
|
9e8de94 |
|
|
|
05f86a0 |
%changelog
|
|
|
218f551 |
%autochangelog
|