ALT Linux Sisyphus - Пакет knot-resolver

.gear/knot-resolver.spec                           | 252 +++++++++++++++++++++
 .gear/rules                                        |   4 +
 .../tags/e6e8ff43e87c81d9681f7139dd3d7a47002998e6  |  22 ++
 .gear/tags/list                                    |   2 +
 .gear/upstream/remotes                             |   3 +
 meson.build                                        |   6 +-
 6 files changed, 286 insertions(+), 3 deletions(-)

diff --git a/.gear/knot-resolver.spec b/.gear/knot-resolver.spec
new file mode 100644
index 00000000..e4340a59
--- /dev/null
+++ b/.gear/knot-resolver.spec
@@ -0,0 +1,252 @@
+%define _unpackaged_files_terminate_build 1
+%define _localstatedir /var
+
+%def_disable dnstap
+
+Name: knot-resolver
+Version: 6.0.2
+Release: alt1
+Summary: Caching full DNS Resolver
+Group: System/Servers
+
+License: GPLv3
+Url: https://www.knot-resolver.cz/
+Source0: %name-%version.tar
+Source11: lua-aho-corasick.tar
+
+Patch0: %name-%version.patch
+
+ExclusiveArch: %luajit_arches
+
+BuildRequires(pre): meson >= 0.49 rpm-macros-luajit rpm-macros-systemd rpm-macros-python3
+BuildRequires: gcc-c++ luajit
+BuildRequires: python3-module-setuptools
+BuildRequires: pkgconfig(cmocka)
+BuildRequires: pkgconfig(gnutls)
+BuildRequires: pkgconfig(libedit)
+BuildRequires: pkgconfig(libknot) >= 3.0.2
+BuildRequires: pkgconfig(libzscanner) >= 3.0.2
+BuildRequires: pkgconfig(libdnssec) >= 3.0.2
+BuildRequires: pkgconfig(libnghttp2)
+BuildRequires: pkgconfig(libsystemd)
+BuildRequires: pkgconfig(libcap-ng)
+BuildRequires: pkgconfig(libuv) >= 1.7
+BuildRequires: pkgconfig(luajit) >= 2.0
+BuildRequires: pkgconfig(openssl)
+BuildRequires: liblmdb-devel
+%{?_enable_dnstap:BuildRequires: /usr/bin/protoc-c pkgconfig(libfstrm) pkgconfig(libprotobuf-c) >= 1.0.0}
+Requires: lua5.1-module-basexx
+Requires: lua5.1-module-cqueues
+Requires: lua5.1-module-http
+Requires: lua5.1-module-psl
+
+%description
+The Knot Resolver is a DNSSEC-enabled caching full resolver implementation
+written in C and LuaJIT, including both a resolver library and a daemon.
+Modular architecture of the library keeps the core tiny and efficient, and
+provides a state-machine like API for extensions.
+
+%package -n libkres
+Summary: Library for Knot Resolver
+Group: System/Libraries
+
+%description -n libkres
+This package contains shared libraries used by %name's daemons
+and clients.
+
+%package -n libkres-devel
+Summary: Development headers for Knot Resolver
+Group: Development/C
+
+%description -n libkres-devel
+The package contains development headers for Knot Resolver.
+
+%package module-http
+Summary: HTTP module for Knot Resolver
+Group: System/Servers
+Requires: %name = %EVR
+Requires: lua5.1-module-http
+Requires: lua5.1-module-mmdblua
+
+%description module-http
+HTTP module for Knot Resolver can serve as API endpoint for other modules or
+provide a web interface for local visualization of the resolver cache and
+queries. It can also serve DNS-over-HTTPS, but it is deprecated in favor of
+native C implementation, which doesn't require this package.
+
+%package manager
+Summary: Configuration tool for Knot Resolver
+Group: Development/Python3
+
+%description manager
+Knot Resolver Manager is a configuration tool for Knot Resolver. The Manager
+hides the complexity of running several independent resolver processes while
+ensuring zero-downtime reconfiguration with YAML/JSON declarative
+configuration and an optional HTTP API for dynamic changes.
+
+%prep
+%setup
+tar -xf %SOURCE11 -C modules/policy/lua-aho-corasick
+%patch0 -p1
+
+%build
+%meson \
+    -Dsystemd_files=enabled \
+    -Dunit_tests=enabled \
+    -Dmanaged_ta=enabled \
+    -Dkeyfile_default="%_sharedstatedir/%name/root.keys" \
+    -Dinstall_root_keys=enabled \
+    %{?_enable_dnstap:-Ddnstap=enabled}
+
+%meson_build
+pushd manager
+%python3_build
+popd
+
+%install
+%meson_install
+# install knot-resolver-manager
+pushd manager
+%python3_install
+install -m 644 -D etc/knot-resolver/config.yaml %buildroot%_sysconfdir/knot-resolver/config.yaml
+install -m 644 -D shell-completion/client.bash %buildroot%_datadir/bash-completion/completions/kresctl
+install -m 644 -D shell-completion/client.fish %buildroot%_datadir/fish/completions/kresctl.fish
+popd
+
+# add knot-resolver.service to multi-user.target.wants to support enabling kresd services
+install -m 0755 -d %buildroot%_unitdir/multi-user.target.wants
+ln -s ../knot-resolver.service %buildroot%_unitdir/multi-user.target.wants/knot-resolver.service
+
+# remove modules with missing dependencies
+#rm %buildroot%_libdir/%name/kres_modules/etcd.lua
+#rm %buildroot%_libdir/%name/kres_modules/experimental_dot_auth.lua
+#rm -r %buildroot%_libdir/%name/kres_modules/http
+#rm %buildroot%_libdir/%name/kres_modules/http*.lua
+#rm %buildroot%_libdir/%name/kres_modules/prometheus.lua
+
+mkdir -p %buildroot%_cachedir/%name
+rm -rf %buildroot%_defaultdocdir/*
+
+%check
+export LD_LIBRARY_PATH=$(pwd)/%{__builddir}/lib:$(pwd)/%{__builddir}
+%meson_test
+
+%pre
+groupadd -r -f %name >/dev/null 2>&1 ||:
+useradd -M -r -d %_sharedstatedir/%name -s /bin/false -c "Knot Resolver" -g %name %name >/dev/null 2>&1 ||:
+
+%post manager
+%post_systemd_postponed knot-resolver.service
+
+%preun manager
+%systemd_preun knot-resolver.service
+
+%files
+%doc COPYING AUTHORS NEWS etc/config/config.*
+%dir %_sysconfdir/%name
+%config(noreplace) %_sysconfdir/%name/root.hints
+%_sysconfdir/%name/icann-ca.pem
+%attr(750,%name,%name) %dir %_sharedstatedir/%name
+%attr(640,%name,%name) %_sharedstatedir/%name/root.keys
+%attr(750,%name,%name) %dir %_cachedir/%name
+/lib/sysusers.d/knot-resolver.conf
+%_tmpfilesdir/%name.conf
+%_sbindir/kresd
+%_sbindir/kres-cache-gc
+%_libdir/%name
+%_man8dir/*
+%exclude %_libdir/%name/debug_opensslkeylog.so
+%exclude %_libdir/%name/kres_modules/http
+%exclude %_libdir/%name/kres_modules/http*.lua
+%exclude %_libdir/%name/kres_modules/prometheus.lua
+
+%files -n libkres
+%_libdir/libkres.so.*
+
+%files -n libkres-devel
+%_includedir/libkres
+%_pkgconfigdir/libkres.pc
+%_libdir/libkres.so
+
+%files module-http
+%_libdir/%name/debug_opensslkeylog.so
+%_libdir/%name/kres_modules/http
+%_libdir/%name/kres_modules/http*.lua
+%_libdir/%name/kres_modules/prometheus.lua
+
+%files manager
+%python3_sitelibdir/knot_resolver_manager*
+%_sysconfdir/knot-resolver/config.yaml
+%_unitdir/knot-resolver.service
+%_unitdir/multi-user.target.wants/knot-resolver.service
+%_bindir/kresctl
+%_bindir/knot-resolver
+%_man8dir/kresctl.8.*
+%_datadir/bash-completion/completions/kresctl
+%_datadir/fish/completions/kresctl.fish
+
+%changelog
+* Mon Sep 04 2023 Alexey Shabalin <shaba@altlinux.org> 6.0.2-alt1
+- 6.0.2
+
+* Fri Aug 18 2023 Alexey Shabalin <shaba@altlinux.org> 6.0.1-alt1
+- 6.0.1
+
+* Fri Mar 24 2023 Alexey Shabalin <shaba@altlinux.org> 5.6.0-alt1
+- 5.6.0
+
+* Thu Sep 29 2022 Alexey Shabalin <shaba@altlinux.org> 5.5.3-alt1
+- 5.5.3
+
+* Mon Aug 08 2022 Alexey Shabalin <shaba@altlinux.org> 5.5.1-alt1
+- 5.5.1
+
+* Mon Mar 21 2022 Alexey Shabalin <shaba@altlinux.org> 5.5.0-alt1
+- 5.5.0
+
+* Fri Jan 07 2022 Alexey Shabalin <shaba@altlinux.org> 5.4.4-alt1
+- 5.4.4
+
+* Thu Dec 23 2021 Alexey Shabalin <shaba@altlinux.org> 5.4.3-alt1
+- 5.4.3
+- Switch to systemd macros int post and preun.
+
+* Mon Nov 01 2021 Alexey Shabalin <shaba@altlinux.org> 5.4.2-alt1
+- 5.4.2
+
+* Mon Sep 13 2021 Alexey Shabalin <shaba@altlinux.org> 5.4.1-alt1
+- 5.4.1
+
+* Fri Aug 06 2021 Alexey Shabalin <shaba@altlinux.org> 5.4.0-alt1
+- 5.4.0
+
+* Tue May 18 2021 Alexey Shabalin <shaba@altlinux.org> 5.3.2-alt1
+- 5.3.2
+
+* Thu Apr 22 2021 Alexey Shabalin <shaba@altlinux.org> 5.3.1-alt1
+- 5.3.1
+
+* Wed Dec 16 2020 Alexey Shabalin <shaba@altlinux.org> 5.2.1-alt1
+- 5.2.1
+
+* Wed Nov 25 2020 Alexey Shabalin <shaba@altlinux.org> 5.2.0-alt1
+- 5.2.0
+
+* Thu Sep 10 2020 Alexey Shabalin <shaba@altlinux.org> 5.1.3-alt1
+- 5.1.3
+
+* Fri Aug 07 2020 Alexey Shabalin <shaba@altlinux.org> 5.1.2-alt1
+- 5.1.2
+
+* Fri May 22 2020 Alexey Shabalin <shaba@altlinux.org> 5.1.1-alt1
+- 5.1.1 (Fixes: CVE-2020-12667)
+
+* Fri May 08 2020 Alexey Shabalin <shaba@altlinux.org> 5.1.0-alt1
+- 5.1.0
+
+* Sun Mar 29 2020 Alexey Shabalin <shaba@altlinux.org> 5.0.1-alt2
+- add requires on lua5.1 modules
+
+* Thu Mar 19 2020 Alexey Shabalin <shaba@altlinux.org> 5.0.1-alt1
+- Initial build.
+
diff --git a/.gear/rules b/.gear/rules
new file mode 100644
index 00000000..ce3dc15a
--- /dev/null
+++ b/.gear/rules
@@ -0,0 +1,4 @@
+spec: .gear/knot-resolver.spec
+tar: v@version@:.
+diff: v@version@:. . name=@name@-@version@.patch
+tar: upstream-lua-aho-corasick:. name=lua-aho-corasick base=
diff --git a/.gear/tags/e6e8ff43e87c81d9681f7139dd3d7a47002998e6 b/.gear/tags/e6e8ff43e87c81d9681f7139dd3d7a47002998e6
new file mode 100644
index 00000000..9ca3aacb
--- /dev/null
+++ b/.gear/tags/e6e8ff43e87c81d9681f7139dd3d7a47002998e6
@@ -0,0 +1,22 @@
+object 6e3d72bec04c8922545938bc3f2a8317153be119
+type commit
+tag v6.0.2
+tagger Jakub Ruе╬iд█ka <jakub.ruzicka@nic.cz> 1693409198 +0200
+
+Knot Resolver 6.0.2
+-----BEGIN PGP SIGNATURE-----
+
+iQIzBAABCgAdFiEEI+vPfo/EdVZ4cQDfpCVAcuNzBCwFAmTvX8YACgkQpCVAcuNz
+BCy4zw/+Oh7LillBYHKP7+bj14vifRIBefoKo3Tkzahb7nbdDGvel9lNLSLcbGDi
+YiVjvX1FbXGMfWgnt0phM17fbRuE20aen3Bg3U+WZ+Vvu5GzsIsNa9ASgCWx5oAo
+ErQUu4nbh3ZERrPJphghXJs+dyGZzy2Lc1WKhtPAhk+luycEXgOmqtrkAa7CyWK9
+swuvwFp2JD+mO93H6+KvdJMKRFrWNMLpNw2CjcWnn40v3HLVuxHl3lxmsDZYMBN2
+x9PdiVbV6T6LcO/sw4E5HEQLkYwjDLMW3OaClnti8MgcAe2IVgQuA2CYZR9AGH3f
+h9wnIw6f2xaiJFkaOR97adGJTgWYXow0HIC2+E4gnRrt6CryX9EkmtfWf2ialEgf
+WaiLfWz0FnTajFl/w6Ex/ibZk313D7NWWz78XhEmY6yRq/isca86YHkJNjPtTHMq
+8NYHriCR9LyqY63ceGGe3kcPnoLvWLAIPU8m+3E5GrT65ZgYpoYVnE65C7OR6snx
+3ykG9+9SViWQHNQAeX4wmZbf96GgXjP6sptDMXbAckTuf1/RgcGzsBUaqKnN8ihU
+AvgsblPuYn8MogI+/AqlnYDkXSV7li9m6qe6JOb4UlAzfRGhaW4QGOUQ0Z1NirK1
+UbcehCQfYJDhId5MlxRsVxGdwCDJ4A1uOUsnVAHyTPkjb2d2bFE=
+=vZOr
+-----END PGP SIGNATURE-----
diff --git a/.gear/tags/list b/.gear/tags/list
new file mode 100644
index 00000000..4c3c5f00
--- /dev/null
+++ b/.gear/tags/list
@@ -0,0 +1,2 @@
+9f983c48af8ddddbcc38f34a4d589600b47645c1 upstream-lua-aho-corasick
+e6e8ff43e87c81d9681f7139dd3d7a47002998e6 v6.0.2
diff --git a/.gear/upstream/remotes b/.gear/upstream/remotes
new file mode 100644
index 00000000..3c2b4be0
--- /dev/null
+++ b/.gear/upstream/remotes
@@ -0,0 +1,3 @@
+[remote "upstream"]
+	url = https://gitlab.nic.cz/knot/knot-resolver.git
+	fetch = +refs/heads/*:refs/remotes/upstream/*
diff --git a/meson.build b/meson.build
index 41b4df63..7494c943 100644
--- a/meson.build
+++ b/meson.build
@@ -56,9 +56,9 @@ bin_dir = prefix / get_option('bindir')
 run_dir = '/run' / 'knot-resolver'
 systemd_work_dir = prefix / get_option('localstatedir') / 'lib' / 'knot-resolver'
 systemd_cache_dir = prefix / get_option('localstatedir') / 'cache' / 'knot-resolver'
-systemd_unit_dir = prefix / 'lib' / 'systemd' / 'system'
-systemd_tmpfiles_dir = prefix / 'lib' / 'tmpfiles.d'
-systemd_sysusers_dir = prefix / 'lib' / 'sysusers.d'
+systemd_unit_dir = '/lib' / 'systemd' / 'system'
+systemd_tmpfiles_dir = '/lib' / 'tmpfiles.d'
+systemd_sysusers_dir = '/lib' / 'sysusers.d'
 completion_dir = prefix / 'share'
 
 ## Trust anchors