The PowerDNS Authoritative Server is a versatile nameserver which supports a
large number of backends. These backends can either be plain zone files or be
more dynamic in nature.
PowerDNS has the concepts of 'backends'. A backend is a datastore that the
server will consult that contains DNS records (and some metadata). The backends
range from database backends (MySQL, PostgreSQL) and BIND zone files to
co-processes and JSON API's.
Multiple backends can be enabled in the configuration by using the launch
option. Each backend can be configured separately.
Reason:
In Authoritative Server 4.8, the LMDB backend gains a new Lightning
Stream-compatible schema, which requires a data migration (this is
automatic, and there is no migration back to the old schema). LMDB
backend users should pay extra attention to the Upgrade Notes
(https://doc.powerdns.com/authoritative/upgrading.html).
Number of commits found: 261 (showing only 100 on this page) #
databases/lmdb: allow to install both 0.x and 1.x together
LMDB 1.0 and the legacy 0.9 ABI cannot be mixed, the datanase format are
incompatibles as well.
Rename or relocate everything databases/lmdb0 installs so that it no
longer overlaps with databases/lmdb:
- the utilities are now mdb_copy0, mdb_dump0, mdb_load0 and mdb_stat0
- the header is include/lmdb0/lmdb.h
- the linker name is liblmdb0.so, the shared object keeps its ABI name
liblmdb.so.0 so already linked programs are unaffected
- the pkg-config file is lmdb0.pc
A compatibility prefix holding the previous layout is also installed
under ${PREFIX}/lmdb0/ (include/, lib/ and libdata/pkgconfig/) so that
build systems which expect to find lmdb.h and -llmdb relative to a
single directory only need a path change.
Now all ports should migrate to lmdb 1.X and use the lmdb 0.9 port to ease
in the migration path, lmdb, the lmdb 0.x is supposed to get removed at
some point.
Approved by: mat (portmgr)
Reviewed by: mat
Differential Revision: https://reviews.freebsd.org/D60741
databases/lmdb0: Add port for LMDB 0.9.x legacy ABI
LMDB 1.0 introduced an incompatible on-disk format change and subtle
API breakage: applications that compiled cleanly against 1.0 headers
could fail silently at run time. Known affected ports include dns/knot3,
mail/bogofilter, and mail/postfix; the postfix issue has been confirmed
upstream. Linux distributions such as Arch Linux have observed the same
breakage. Samba can also be affected in certain configurations.
Because the regression is not detectable in an -exp build run -- the
postfix failure only manifests at run time, and bogofilter was caught
only because post-build self-tests happen to exercise this path -- we
cannot rely on package builds to validate the 1.0 upgrade.
This commit introduces databases/lmdb0 as a holding port for the 0.9.35
(Only the first 15 lines of the commit message are shown above )
dns/powerdns: Update 5.1.2 => 5.1.3
While here:
- Update options' descriptions.
- Drop the backported patch, it's made into release.
Changelog:
https://doc.powerdns.com/authoritative/changelog/5.1.html#change-5.1.3
PR: 296400
Reported by: Jordan Ostreff <jordan@ostreff.info>
Approved by: Ralf van der Enden <tremere@cainites.net> (maintainer)
Approved by: osa, vvd (Mentors, implicit)
MFH: 2026Q2
lang/luajit: update to v2.1
Disconnect lang/luajit-devel from the build, will be removed soon.
Bump PORTREVISIONs for the consumers.
Discussed with: adamw
PR: 225342
*/*: Sunset 12.4-RELEASE/12-STABLE from ports tree
- Remove all references to defunct ARCH arm
- Remove all references to defunct ARCH sparc64
- Remove x11-drivers/xf86-video-sunffb which requires defunct sparc64
ARCH
- Remove sysutils/afbinit requires defunct sparc64 ARCH
- Remove all references to bktr driver
- Remove all references to defunct FreeBSD_12
- Remove all references to OSVERSION/OSREL corresponding to 12
- Remove conditionals in Mk/Uses/cabal.mk
- Remove sparc reference from Mk/Uses/qt-dist.mk
- Remove BROKEN_sparc64/NOT_FOR_ARCH=sparc64
- Remove BROKEN_FreeBSD_12* from:
- Remove OpenSSL patches from:
- Remove conditional flags for OSVERSION >= 1300000 to fixed flags.
Also move conditional flags for non sparc64/arm ARCH to fixed flags.
Reviewed by: brooks, jbeich, rene, salvadore
Differential Revision: https://reviews.freebsd.org/D42068
dns/powerdns: update to 4.8.1
ChangeLog: https://blog.powerdns.com/2023/07/07/authoritative-server-4-8-1
New Features
* lmdb: add backend commands for checking & refreshing indexes
Improvements
* lmdb: in Lightning Stream mode, during deleteDomain, use RW transaction to
get ID list
* Stop using the now deprecated ERR_load_CRYPTO_strings() to detect OpenSSL
* Work around Red Hat 8 pooping the bed in OpenSSL’s headers
Bug Fixes
* YaHTTP: Prevent integer overflow on very large chunks
PR: 272476
Reported by: tremere@cainites.net (maintainer)
dns/powerdns: fix build on 14.0-CURRENT (+ OpenSSL 3.0.9)
This fixes the way OpenSSL is detected (it now uses a non-deprecated function),
which is not available anymore on 14.0-CURRENT. Doesn't change anything for
previous versions of FreeBSD.
PR: 272231
Reported by: tremere@cainites.net (maintainer)
dns/powerdns: improve installation/upgrade instructions (pkg-message)
Fix a typo (mimimum_version -> minimum_version), wrap some very long
lines for better readability, add missing Oxford commas, and replace
UTF-8 quotes with ASCII ones.
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap
Convert the USE_LDAP=yes to USES=ldap and adds the following features:
- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features
Reviewed by: delphij
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D38233
dns/powerdns: broken due to missing mandatory schema changes
Add a message so people are aware and bump PORTREVISION to show it.
PR: 267363
Reported by: freebsd@bengrimm.net (maintainer)
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
dns/powerdns: Set NOT_FOR_ARCHS = i386
archs with 32-bits time_t are no longer supported by upstream
PR: 257257
Reported by: Ralf van der Enden <tremere@cainites.net> (maintainer)
dns/powerdns: Remove unneeded dep and fix TOOLS option
PR: 257198
Reported by: Ralf van der Enden <tremere@cainites.net> (maintainer)
Reviewed by: Ralf van der Enden <tremere@cainites.net> (maintainer)
devel/yaml-cpp: Update to 0.7.0
- Patch cmake include to actually work
- Bump PORTREVISION on consumers, testing shows it is not completely
binary compatible
dns/powerdns: Update to 4.4.0
* This release drops GSS/TSIG support, please see
PowerDNS Security Advisory 2020-06.
* New features:
- the LMDB backend now supports long record content, making it production
ready for everybody
- the SVCB and HTTPS record types are supported, with limited additional
processing transaction handling in the 2136 handler and the HTTP API was
again improved a lot, avoiding various spurious issues users may have
noticed if they do a lot of changes a new setting (consistent-backends)
offers a roughly 30% speedup, subject to conditions
- we finally emit Prometheus metrics!
(Only the first 15 lines of the commit message are shown above )
dns/powerdns: Adjust dependencies for tools
- Adjust dependencies (IXFRTOOL needs yaml-cpp)
- Explicitly disable decaf and sodium in case they are not enabled.
Otherwise they default to "auto" and if detected in the system,
stage-qa reports unresolved dependency.
- Drop user privilges for worker processes to pdns/pdns (UID is new; GUID
already exists)
- Always depend on protobuf. I do the same for dnsdist and powerdns-recursor
- Actually do something with the pdns_flags variable in the rc-script instead of
just mentioning it in the comment block
- Bump PORTREVISION
PR: 250961
Submitted by: Juraj Lutter, Ralf van der Enden
Approved by: Ralf van der Enden (maintainer)
dns/powerdns: update 4.3.0 -> 4.3.1
Improvements:
- EL8 pkgs: Build mysql backend against mariadb-connector-c-devel
- gpgsql: Reintroduce prepared statements
- gsqlite3backend: add missing indexes
- use real remote for supermaster createSlaveDomain()
- Optimize IXFR-to-AXFR fallback path
- Install bind SQL schema files as part of bindbackend
- Do not send out of zone lookups to the backends
Bug Fixes:
- Raise an exception on invalid hex content in unknown records.
- Handle the extra single-row result set of MySQL stored procedures
PR: 249560
Submitted by: Ralf van der Enden <tremere@cainites.net> (maintainer)
Security: CVE-2020-17482
https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2020-05.html
Relnotes: https://doc.powerdns.com/authoritative/changelog/4.3.html#change-4.3.1
dns/powerdns: fix pkg-plist, pidfile in rc.d script and more
- Add missing entries to pkg-plist
- Add ixfrdist tool
- Change pidfile back to ${name}.pid in the rc.d script
- Pet portlint a bit (regenerate files/patch-configure and ran
Makefile though portfmt)
- Remove patch-dns_random.cc (only needed on 12.0, which is EoL)
- Move upgrade instructions from pkg-install to pkg-message
- Bump PORTREVISION
- Upgrading the port now shows a message about required schema
changes for several backends.
PR: 246434
Submitted by: Ralf van der Enden <tremere@cainites.net> (maintainer)
Reported by: Dominik Lisiak <dominik.lisiak@bemsoft.pl>
dns/powerdns: update 4.2.1 -> 4.3.0
Please note that 4.3.0 comes with a mandatory database schema upgrade.
See: https://doc.powerdns.com/authoritative/upgrading.html#x-to-4-3-0
- added OPTIONS LMDB backend
- removed OPTIONS MyDNS backend
- removed OPTIONS OpenDBX backend
- removed patch-fix_memleak_bindbackend
- added `pidfile=/var/run/pdns/pdns_server.pid` to the rc script.
- updated pkg-descr with a more descriptive blurb from their web page.
PR: 246262
Submitted by: yds@Necessitu.de
Approved by: Ralf van der Enden <tremere@cainites.net> (maintainer)
Relnotes: https://blog.powerdns.com/2020/04/07/powerdns-authoritative-4-3-0/
dns/powerdns: update to 4.2.1
4.2.1 release notes:
This release fixes several bugs and makes a few features more robust or
intuitive. It also contains a few performance improvements for API users.
For a full list of changes look here:
https://doc.powerdns.com/authoritative/changelog/4.2.html#change-4.2.1
PR: 242519
Submitted by: Ralf van der Enden <tremere@cainites.net> (maintainer)
Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.
PR: 238330
dns/powerdns: Actually update to 4.1.10
Previous update was old patch to 4.1.9
PR: 238705
Submitted by: Ralf van der Enden <tremere@cainites.net> (maintainer)
MFH: 2019Q2
Security: 1c21f6a3-9415-11e9-95ec-6805ca2fa271
Similar to r502813 for dns/powerdns-recursor, fix build on GCC-based
systems:
Don't add -L/usr/lib unconditionally, it makes gcc8 (used on GCC-based
systems) link to base libstdc++.
Given that this is a build fix that does not affect clang-based systems,
there should be no need to bump portrevision.
PR: 238742
Reported by: pkubaj
Approved by: maintainer
