Knot Resolver is a caching DNS resolver scalable from huge resolver
farms down to home network routers.
Knot Resolver is a modern resolver implementation designed for
scalability, resiliency, and flexibility. Its design is
different from other resolvers: The core architecture is tiny and
efficient, and most of the rich features are implemented as
optional modules, which limits attack surface and improves
performance.
===> The following configuration options are available for knot-resolver-5.7.8:
DNSTAP=off: dnstap support
DOCS=on: Build and/or install documentation
EXAMPLES=on: Build and/or install examples
ROOTKEYS=on: Install root.keys
TESTUNIT=off: Build unit tests
TRUSTANCHOR=on: Trust anchor bootstrapping, management and stats
===> Use 'make config' to modify these settings
databases/lmdb0: Add port for LMDB 0.9.x legacy ABI
LMDB 1.0 introduced an incompatible on-disk format change and subtle
API breakage: applications that compiled cleanly against 1.0 headers
could fail silently at run time. Known affected ports include dns/knot3,
mail/bogofilter, and mail/postfix; the postfix issue has been confirmed
upstream. Linux distributions such as Arch Linux have observed the same
breakage. Samba can also be affected in certain configurations.
Because the regression is not detectable in an -exp build run -- the
postfix failure only manifests at run time, and bogofilter was caught
only because post-build self-tests happen to exercise this path -- we
cannot rely on package builds to validate the 1.0 upgrade.
This commit introduces databases/lmdb0 as a holding port for the 0.9.35
(Only the first 15 lines of the commit message are shown above )
*/*: Bump all devel/protobuf consumers
They must always be bumped after devel/protobuf because it include
following files whose filenames contain %%PORTVERSION%%. Consequently,
the shlib will always change when PORTVERSION is increased.
lib/libprotobuf-lite.so.%%PORTVERSION%%.0
lib/libprotobuf.so.%%PORTVERSION%%.0
lib/libprotoc.so.%%PORTVERSION%%.0
Approved by: portmgr (blanket; fixing consumers)
dns/knot-resolver: Update 5.7.5 => 5.7.6 (security fixes)
Security
--------
- DoS: fix a rare segfault in `resolve` function (!1720)
Someone controlling the DNS traffic might be able
to trigger this crash intentionally and too often.
- DoS: drop a wrong assertion/crash (!1721)
Someone controlling the DNS traffic will most likely be able
to trigger this crash intentionally and too often.
Changelog:
https://gitlab.nic.cz/knot/knot-resolver/raw/v5.7.6/NEWS
- Modify MASTER_SITES in Makefile, see:
https://lists.nic.cz/hyperkitty/list/knot-resolver-users@lists.nic.cz/thread/H3M2A7NJR6MHRU53MW7P4SW2IWY4QX74/
- Move cmake from BUILD_DEPENDS to USES.
PR: 288586
Approved by: Leo Vandewoestijne <freebsd@dns.company> (maintainer)
MFH: 2025Q3
lang/luajit: update to v2.1
Disconnect lang/luajit-devel from the build, will be removed soon.
Bump PORTREVISIONs for the consumers.
Discussed with: adamw
PR: 225342
dns/knot-resolver: Upgrade 5.7.3 → 5.7.4
Changelog:
Security
reduce buffering of transmitted data, especially TCP-based in
userspace Also expose some of the new tweaks in lua:
(require 'ffi').C.the_worker.engine.net.tcp.user_timeout = 1000
(require
'ffi').C.the_worker.engine.net.listen_{tcp,udp}_buflens.{snd,rcv}
Improvements
add the fresh DNSSEC root key "KSK-2024" already, Key ID 38696
(!1556)
Incompatible changes
libknot 3.0.x support is dropped (!1558) Upstream last maintained
3.0.x in spring 2022.
https://www.knot-resolver.cz/2024-07-23-knot-resolver-5.7.4.html
PR: 280688
dns/knot-resolver: upgrade to 5.7.0
ChangeLog: https://www.knot-resolver.cz/2023-08-22-knot-resolver-5.7.0.html
Security
* avoid excessive TCP reconnections in a few more cases Like before, the remote
server had to behave nonsensically in order to inflict this upon itself, but
it might be abusable for DoS.
Improvements
* forwarding mode: tweak dealing with failures from forwarders, in particular
prefer sending CD=0 upstream
Bugfixes
* fix unusual timestamp format in debug dumps of records
* adjust linker options; it should help less common platforms
* hints module: fix names inside home.arpa.
* EDNS padding (RFC 8467) compatibility with knot-dns 3.3 libs
PR: 273308
Reported by: freebsd@dns.company (maintainer)
all: remove explicit versions in USES=python for "3.x+"
The logic in USES=python will automatically convert this to 3.8+ by
itself.
Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.
finance/quickfix: mark BROKEN with PYTHON
libtool: compile: c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++
-DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable
-Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong
-fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi
-Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings
-Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x
-MT _quickfix_la-QuickfixPython.lo -MD -MP -MF
.deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp -fPIC -DPIC -o
.libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean
'-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
^~~~~~~~~~
1 warning and 1 error generated.
Reviewed by: portmgr, vishwin, yuri
Differential Revision: <https://reviews.freebsd.org/D40568>
dns/knot-resolver: Update to 5.6.0
- Remove unused TEST option
- Remove broken TESTCONFIG and TESTEXTRA options
- Update TESTUNIT option description to reflect that it only builds
tests so `make test` can be run after
ChangeLog: https://www.knot-resolver.cz/2023-01-26-knot-resolver-5.6.0.html
PR: 269368
*/*: Update path set in BUILD_DEPENDS for CMake in more ports
Commit b23ea4e2d2f51b53d8915fe9fd7b4efbdd575e38 changed its location to
devel/cmake-core
Approved by: portmgr (blanket)
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
dns/knot3-lib: Fix pkg-plist after master upgrade
After commit 19c2289c66eba7a9a02ebd0862c5009ceb36f637
dns/knot3: upgrade to 3.2.0
the pkg-plist of the slave port must be updated as well.
Also bump PORTREVISION on consumer dns/knot-resolver.
PR: 265999
Approved by: tcberner (mentor)
Differential Revision: https://reviews.freebsd.org/D36308
dns: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* Aaron Dalton <aaron@FreeBSD.org>
* Akinori MUSHA aka knu <knu@idaemons.org>
* Alex Samorukov <samm@freebsd.org>
* Alexey Dokuchaev <danfe@FreeBSD.org>
* Allan Jude <allanjude@freebsd.org>
* Amar Takhar <verm@drunkmonk.net>
* Anders Nordby <anders@fix.no>
* Andrew Greenwood <greenwood.andy@gmail.com>
* Anton Berezin <tobez@FreeBSD.org>
* Ashish SHUKLA <ashish@FreeBSD.org>
* Attila Nagy <bra@fsn.hu>
(Only the first 15 lines of the commit message are shown above )
dns/knot-resolver: Fix PLIST
- Bump PORTREVISION for package change
====> Checking for pkg-plist issues (check-plist)
===> Parsing plist
===> Checking for items in STAGEDIR missing from pkg-plist
Error: Orphaned: lib/knot-resolver/debug_opensslkeylog.so
===> Checking for items in pkg-plist which are not in STAGEDIR
===> Error: Plist issues found.
*** Error code 1
Stop.
make: stopped in /usr/ports/dns/knot-resolver
dns/knot-resolver: Apply maintainer's cleanup
This also fixes the kresd.conf @sample, prefer the maintainer's
approach in the cleanup patch that arrived after d94ae2c3c666
PR: 254765
Approved by: Leo Vandewoestijne <freebsd@dns.company> (maintainer)
dns/knot-resolver: Fix @sample use
The port was not using the @sample functionality correctly, stage the
correct sample config in post-install and fix the pkg-plist.
PR: 254765
Reported by: Marcel <marcel@brickporch.com>
Approved by: maintainer timeout
Update Sphinx
- Repocopy textproc/py-sphinx to textproc/py-sphinx18
Update it to 1.8.5 (latest version from 1.8.X).
This version supports Python 2 and 3.
Add test target.
- textproc/py-sphinx: Update to 3.0.2
Python 3 only (3.5+).
Add test target.
- Mk/Uses/python.mk: Add PY_SPHINX
(Only the first 15 lines of the commit message are shown above )
USES=lua gained flavors.
Ports using USES=lua:module or lua:flavors will be flavored. A range of
supported lua versions can be set using XX-YY (or XX-, or -YY, or simply ZZ)
for ports not supporting all lua versions.
USES=lua sets LUA_FLAVOR that needs to be used on all dependencies of
flavored lua ports, in a similar way as PHP or Python flavors.
PR: 245038
Submitted by: andrew tao11 riddles org uk
Reviewed by: mat, kevans, russ haley gmail com
Approved by: mat (portmgr)
Differential Revision: https://reviews.freebsd.org/D16494
dns/knot-resolver: no need to explicitly set NOT_FOR_ARCH here.
The ports framework ignores this port by itself because the dependency of this
port will fail.
Reported by: mat
MFH: 2019Q4
dns/knot-resolver: Remove redundant lang/go build dependency
go.mk already configures BUILD_DEPENDS, adding lang/go second time
just adds a duplicate (and conflicting) dependency when another
Go port (e.g. lang/go-devel) is selected with GO_PORT.
Approved by: araujo (mentor)
Differential Revision: https://reviews.freebsd.org/D21793
Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.
PR: 238330
Convert all Go ports to USES=go
This allows for port testing with lang/go-devel via GO_PORT, setting
up the Go build environment in a single place, and is step one in
simplifying Go ports that often define too complicated do-build
targets themselves.
USES=go gains new arguments 'run' to add lang/go to RUN_DEPENDS and
'no_targets' for ports with composite builds that call 'go' themselves
and do not need the do-build/do-install targets of USES=go.
PR: 238849
Submitted by: dg@syrec.org (also D20745)
Reviewed by: mat, tobik
Exp-run by: antoine
Differential Revision: https://reviews.freebsd.org/D20746
dns/knot-resolver: Update to 2.1.1
Port changes:
* Changed to DISTVERSION
* Added USES=ncurses
* Updated the list of stripped files
* Added the patch
PR: 226410
Submitted by: Leo Vandewoestijne <freebsd@dns-lab.com> (maintainer)
Approved by: tcberner (mentor, implicit)
Update to 1.3.3
- fix up OPTIONS processing so that
- turning off an OPTION does disable the option even in the presence
of the optional dependencies required for it
- add PLIST_FILES where appropriate for each option
- rename the STATS option to TRUSTANCHOR since that's the important
capability that option controls
- strip installed files where appropriate
Changes: https://gitlab.labs.nic.cz/knot/knot-resolver/raw/v1.3.3/NEWS
PR: 221177
Submitted by: freebsd@dns-lab.com (maintainer)
New port: dns/knot-resolver
The Knot DNS Resolver is a caching full resolver implementation,
including both a resolver library and a daemon.
WWW: https://www.knot-resolver.cz/
PR: 212215
Submitted by: Leo Vandewoestijne <freebsd@dns-lab.com>
