mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-11 19:55:52 +02:00
d92134b818
For details see: https://nlnetlabs.nl/projects/unbound/download/#unbound-1-17-1 "Features Expose 'statistics-inhibit-zero' as a configuration option; the default value retains Unbound's behavior. Expose 'max-sent-count' as a configuration option; the default value retains Unbound's behavior. Merge #461 from Christian Allred: Add max-query-restarts option. Exposes an internal configuration but the default value retains Unbound's behavior. Merge #569 from JINMEI Tatuya: add keep-cache option to 'unbound-control reload' to keep caches. Bug Fixes Merge #768 from fobser: Arithmetic on a pointer to void is a GNU extension. In unit test, print python script name list correctly. testcode/dohclient sets log identity to its name. Clarify the use of MAX_SENT_COUNT in the iterator code. Fix that cachedb does not store failures in the external cache. Merge #767 from jonathangray: consistently use IPv4/IPv6 in unbound.conf.5. Fix to ignore tcp events for closed comm points. Fix to make sure to not read again after a tcp comm point is closed. Fix #775: libunbound: subprocess reap causes parent process reap to hang. iana portlist update. Complementary fix for distutils.sysconfig deprecation in Python 3.10 to commit 62c5039ab9da42713e006e840b7578e01d66e7f2. Fix #779: [doc] Missing documention in ub_resolve_event() for callback parameter was_ratelimited. Ignore expired error responses. Merge #720 from jonathangray: fix use after free when WSACreateEvent() fails. Fix for the ignore of tcp events for closed comm points, preserve the use after free protection features. Fix #782: Segmentation fault in stats.c:404. Add SVCB and HTTPS to the types removed by 'unbound-control flush'. Clear documentation for interactivity between the subnet module and the serve-expired and prefetch configuration options. Fix #773: When used with systemd-networkd, unbound does not start until systemd-networkd-wait-online.service times out. Merge #808: Wrap Makefile script's directory variables in quotes. Fix to wrap Makefile scripts directory in quotes for uninstall. Fix windows compile for libunbound subprocess reap comm point closes. Update github workflows to use checkout v3. Fix wildcard in hyperlocal zone service degradation, reported by Sergey Kacheev." Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
115 lines
4.2 KiB
Plaintext
115 lines
4.2 KiB
Plaintext
###############################################################################
|
|
# #
|
|
# IPFire.org - A linux based firewall #
|
|
# Copyright (C) 2007-2023 IPFire Team <info@ipfire.org> #
|
|
# #
|
|
# This program is free software: you can redistribute it and/or modify #
|
|
# it under the terms of the GNU General Public License as published by #
|
|
# the Free Software Foundation, either version 3 of the License, or #
|
|
# (at your option) any later version. #
|
|
# #
|
|
# This program is distributed in the hope that it will be useful, #
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of #
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
|
|
# GNU General Public License for more details. #
|
|
# #
|
|
# You should have received a copy of the GNU General Public License #
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>. #
|
|
# #
|
|
###############################################################################
|
|
|
|
###############################################################################
|
|
# Definitions
|
|
###############################################################################
|
|
|
|
include Config
|
|
|
|
VER = 1.17.1
|
|
|
|
THISAPP = unbound-$(VER)
|
|
DL_FILE = $(THISAPP).tar.gz
|
|
DL_FROM = $(URL_IPFIRE)
|
|
DIR_APP = $(DIR_SRC)/$(THISAPP)
|
|
TARGET = $(DIR_INFO)/$(THISAPP)
|
|
|
|
###############################################################################
|
|
# Top-level Rules
|
|
###############################################################################
|
|
|
|
objects = $(DL_FILE)
|
|
|
|
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
|
|
|
|
$(DL_FILE)_BLAKE2 = c2dec1608e28302da33ee72144bb8eb16cdff2e949e548f9ea5edb10b370e396085de641446b1f94daeb96a48a02f9361ebae69f72f3d449575fe3ce93dcdb5b
|
|
|
|
install : $(TARGET)
|
|
|
|
check : $(patsubst %,$(DIR_CHK)/%,$(objects))
|
|
|
|
download :$(patsubst %,$(DIR_DL)/%,$(objects))
|
|
|
|
b2 : $(subst %,%_BLAKE2,$(objects))
|
|
|
|
###############################################################################
|
|
# Downloading, checking, b2sum
|
|
###############################################################################
|
|
|
|
$(patsubst %,$(DIR_CHK)/%,$(objects)) :
|
|
@$(CHECK)
|
|
|
|
$(patsubst %,$(DIR_DL)/%,$(objects)) :
|
|
@$(LOAD)
|
|
|
|
$(subst %,%_BLAKE2,$(objects)) :
|
|
@$(B2SUM)
|
|
|
|
###############################################################################
|
|
# Installation Details
|
|
###############################################################################
|
|
|
|
$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
|
|
@$(PREBUILD)
|
|
@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
|
|
cd $(DIR_APP) && \
|
|
./configure \
|
|
--prefix=/usr \
|
|
--sysconfdir=/etc \
|
|
--with-pidfile=/var/run/unbound.pid \
|
|
--with-rootkey-file=/var/lib/unbound/root.key \
|
|
--disable-static \
|
|
--with-libevent \
|
|
--enable-event-api \
|
|
--enable-tfo-client \
|
|
--enable-tfo-server \
|
|
ac_cv_func_getentropy=no
|
|
|
|
cd $(DIR_APP) && make $(MAKETUNING)
|
|
cd $(DIR_APP) && make install
|
|
|
|
# Install configuration
|
|
install -v -m 644 $(DIR_SRC)/config/unbound/unbound.conf \
|
|
/etc/unbound/unbound.conf
|
|
touch /etc/unbound/{dhcp-leases,forward}.conf
|
|
-mkdir -pv /etc/unbound/local.d
|
|
|
|
# Install root hints
|
|
install -v -m 644 $(DIR_SRC)/config/unbound/root.hints \
|
|
/etc/unbound/root.hints
|
|
|
|
# Install DHCP leases bridge
|
|
install -v -m 755 $(DIR_SRC)/config/unbound/unbound-dhcp-leases-bridge \
|
|
/usr/sbin/unbound-dhcp-leases-bridge
|
|
|
|
# Install key
|
|
-mkdir -pv /var/lib/unbound
|
|
install -v -m 644 $(DIR_SRC)/config/unbound/root.key \
|
|
/var/lib/unbound/root.key
|
|
chown -Rv nobody.nobody /var/lib/unbound
|
|
|
|
# Ship ICANN's certificates to validate DNS trust anchors
|
|
install -v -m 644 $(DIR_SRC)/config/unbound/icannbundle.pem \
|
|
/etc/unbound/icannbundle.pem
|
|
|
|
@rm -rf $(DIR_APP)
|
|
@$(POSTBUILD)
|