Commit Graph

818 Commits

Author SHA1 Message Date
aktaboot
5fa90efdef trust-dns: 0.24.0 -> 0.24.1 2024-04-17 20:11:39 +02:00
Florian Klink
d6f46ee34e Revert "knot-resolver: temporarily make it pass"
This reverts commit 4cad0502db.

The underlying issue has been fixed in
https://github.com/NixOS/nixpkgs/pull/300905/files, this workaround is
not needed anymore.
2024-04-05 00:53:17 +03:00
Florian Klink
80592f5bcd Revert "fixup! knot-resolver: temporarily make it pass"
This reverts commit 11fd36353e.

The underlying issue has been fixed in
https://github.com/NixOS/nixpkgs/pull/300905/files, this workaround is
not needed anymore.
2024-04-05 00:53:08 +03:00
Vladimír Čunát
11fd36353e
fixup! knot-resolver: temporarily make it pass
Fixes evaluation.  I'm sorry.
2024-04-01 22:15:30 +02:00
Vladimír Čunát
4cad0502db
knot-resolver: temporarily make it pass
even if luajitPackages.http is broken.
I'm confident that most people don't use it,
so at least those should get immediately unblocked.
(The main derivation only uses it for this test.)
2024-04-01 20:25:17 +02:00
Vladimír Čunát
d7d6471a69
bind: doCheck = false;
The flakiness of netmgr_test and doh_test on Hydra is very annoying.
It's a long-term problem, and sometimes really bad:
https://hydra.nixos.org/build/254045328#tabs-buildsteps

Feel free to do partial test instead of full disabling,
or anything that's relatively reliable.
2024-03-28 11:28:22 +01:00
Sergei Trofimovich
31987782cc bind: 9.18.24 -> 9.18.25
Changes: https://downloads.isc.org/isc/bind9/9.18.25/doc/arm/html/notes.html#notes-for-bind-9-18-25
2024-03-21 21:43:58 +00:00
stuebinm
ff1a94e523 treewide: add meta.mainProgram to packages with a single binary
The nixpkgs-unstable channel's programs.sqlite was used to identify
packages producing exactly one binary, and these automatically added
to their package definitions wherever possible.
2024-03-19 03:14:51 +01:00
Nick Cao
0537bbd042
pdns: 4.8.4 -> 4.9.0
Changelog: https://doc.powerdns.com/authoritative/changelog/4.9.html#change-4.9.0
Upgrade Notes: https://doc.powerdns.com/authoritative/upgrading.html#to-4-9-0
2024-03-16 12:09:08 -07:00
rnhmjoj
09030d1d33
pdns-recursor: 5.0.2 -> 5.0.3 2024-03-12 20:48:01 +01:00
Vladimír Čunát
fb45e89a6e
knot-dns: 3.3.4 -> 3.3.5
https://gitlab.nic.cz/knot/knot-dns/-/releases/v3.3.5
2024-03-06 08:52:32 +01:00
Robert Scott
619cb8eb53
Merge pull request #288662 from LeSuisse/bind-9.18.24
bind: 9.18.21 -> 9.18.24
2024-02-17 13:24:52 +00:00
ajs124
bba3bb3237 pdns-recursor: 4.9.3 -> 5.0.2
https://doc.powerdns.com/recursor/changelog/5.0.html#change-5.0.2
2024-02-15 10:39:00 +01:00
Thomas Gerbet
324f730e54 bind: 9.18.21 -> 9.18.24
Fixes CVE-2023-4408, CVE-2023-5517, CVE-2023-5679, CVE-2023-6516, CVE-2023-50387 and CVE-2023-50868.

Security advisories:
https://kb.isc.org/docs/cve-2023-4408
https://kb.isc.org/docs/cve-2023-5517
https://kb.isc.org/docs/cve-2023-5679
https://kb.isc.org/docs/cve-2023-6516
https://kb.isc.org/docs/cve-2023-50387
https://kb.isc.org/docs/cve-2023-50868

Release notes:
https://bind9.readthedocs.io/en/v9.18.24/notes.html
2024-02-14 16:18:41 +01:00
ajs124
279bfa80e8 pdns-recursor: 4.9.2 -> 4.9.3
https://doc.powerdns.com/recursor/changelog/4.9.html#change-4.9.3
Fixes CVE-2023-50387 and CVE-2023-50868
2024-02-14 15:14:18 +01:00
Vladimír Čunát
ad03cc98bb
knot-resolver: 5.7.0 -> 5.7.1
Fixes significant DoS: CVE-2023-50387 "KeyTrap" and CVE-2023-50868
https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1
2024-02-13 14:32:42 +01:00
Vladimír Čunát
3bfd251c0c
knot-resolver: add dnstap support
Fortunately the closure increases only by 0.5 MB,
so that sounds suitable to include in the defaults.
Knot Resolver packages for other distros typically do have it.
2024-01-25 16:06:08 +01:00
Vladimír Čunát
a72644f128
knot-dns: 3.3.3 -> 3.3.4
https://gitlab.nic.cz/knot/knot-dns/-/releases/v3.3.4
2024-01-24 10:14:56 +01:00
Mario Rodas
3623e2df4c
Merge pull request #275800 from trofi/bind-update
bind: 9.18.20 -> 9.18.21
2024-01-06 08:06:36 -05:00
Weijia Wang
6b9adeb513
Merge pull request #274618 from r-ryantm/auto-update/dnsdist
dnsdist: 1.8.2 -> 1.8.3
2024-01-03 17:34:46 +01:00
Nick Cao
8fd9b17537
pdns: 4.8.3 -> 4.8.4
Changelog: https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.4
2023-12-21 11:24:01 -05:00
Sergei Trofimovich
5d81c1faa8 bind: 9.18.20 -> 9.18.21
Changes: https://downloads.isc.org/isc/bind9/9.18.21/doc/arm/html/notes.html#notes-for-bind-9-18-21
2023-12-21 10:42:54 +00:00
Vladimír Čunát
944cd0b02a
knot-dns: fixup build on darwin
Let's simply do this until upstream has a long-term solution.
2023-12-16 09:33:37 +01:00
R. Ryantm
5c1a9b12a7 dnsdist: 1.8.2 -> 1.8.3 2023-12-16 04:46:52 +00:00
Vladimír Čunát
b12769d76d
knot-dns: 3.3.2 -> 3.3.3
https://gitlab.nic.cz/knot/knot-dns/-/releases/v3.3.3
2023-12-13 09:08:55 +01:00
R. Ryantm
697c460ce4 nsd: 4.7.0 -> 4.8.0 2023-12-08 06:25:02 +00:00
R. Ryantm
8f2ec8ab2b bind: 9.18.19 -> 9.18.20 2023-11-17 21:51:41 +00:00
Adam Joseph
c7e0f6b905 treewide: s_targetPlatform_hostPlatform_ in non-compiler packages
stdenv.targetPlatform really shouldn't be used by software that
doesn't generate or manipulate binaries.  I reviewed all uses of
targetPlatform outside of pkgs/development/compilers and pkgs/stdenv
and replaced those which weren't involved in something which fits
these criteria.
2023-11-17 08:07:34 +00:00
R. Ryantm
942fac2c08 pdns-recursor: 4.9.1 -> 4.9.2 2023-11-09 11:54:17 +00:00
Felix Bühler
7aaa664cc2
Merge pull request #263054 from uninsane/pr-trust-dns-0.24.0
trust-dns: 0.23.0 -> 0.24.0
2023-11-08 19:35:23 +01:00
Colin
83bf3ed892 trust-dns: 0.23.0 -> 0.24.0
upstream is in the process of renaming to `hickory-dns`.
a consequence of this is that the main binary has been renamed from
`trust-dns` to `hickory-dns` and the repository has been moved (though
for the time being the old repo is still usable on account that it
redirects to the new one).
see: <https://bluejekyll.github.io/blog/posts/announcing-hickory-dns/>
2023-11-06 15:38:23 +00:00
R. Ryantm
4d03298c6f dnsdist: 1.8.1 -> 1.8.2 2023-10-30 00:47:13 +00:00
Martin Weinelt
d4b380d6a7
knot-dns: test exporter in passthru.tests 2023-10-23 13:19:52 +02:00
Vladimír Čunát
dbb00f5bd9
knot-dns: 3.3.1 -> 3.3.2
https://gitlab.nic.cz/knot/knot-dns/-/releases/v3.3.2
2023-10-20 14:12:09 +02:00
Nick Cao
d4e6bfe297
Merge pull request #259607 from NickCao/pdns
pdns: 4.8.2 -> 4.8.3
2023-10-11 23:43:00 -04:00
R. Ryantm
b06f85c868 dnsdist: 1.8.0 -> 1.8.1 2023-10-10 00:29:29 +00:00
Nick Cao
eac5f9f646
pdns: 4.8.2 -> 4.8.3
Changelog: https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.3
2023-10-07 13:44:05 -04:00
Jared Baur
c10a190986
coredns: Fix cross-compile
When running go generate, an intermediate binary is built called
`directives_generate`, which will be built with whatever is defined in
GOARCH and GOOS.
2023-10-02 20:46:10 -07:00
Brendan Taylor
ca80f30909 coredns: 1.11.0 -> 1.11.1
https://github.com/coredns/coredns/releases/tag/v1.11.1
2023-09-30 20:29:43 +02:00
Brendan Taylor
95e66809de coredns: allow adding external plugins
Solves https://github.com/NixOS/nixpkgs/issues/146603

CoreDNS has support for plugins that are added at compile time. This
exposes an argument `externalPlugins` that will build coredns with
the specified plugins.

Example:
```
coredns-fanout = pkgs.coredns.override {
  externalPlugins = [
    {name = "fanout"; repo = "github.com/networkservicemesh/fanout"; version = "v1.9.1";}
  ];
  vendorHash = "<SRI hash>";
};
```
2023-09-27 23:35:47 +02:00
Azat Bahawi
97c79c6227
nsd: enable parallel building 2023-09-22 00:26:06 +03:00
Yaya
b0c03e1684 bind: 9.18.18 -> 9.18.19
https://downloads.isc.org/isc/bind9/cur/9.18/CHANGES
https://downloads.isc.org/isc/bind9/9.18.19/doc/arm/html/notes.html#notes-for-bind-9-18-19

Fixes CVE-2023-3341
Fixes CVE-2023-4236
2023-09-20 21:32:41 +00:00
Mario Rodas
5f9390646a
Merge pull request #254827 from hanleym/trust-dns
trust-dns: 0.22.1 -> 0.23.0
2023-09-13 06:56:03 -05:00
Fabián Heredia Montiel
ff323ed355 treewide: vendorSha256 → vendorHash
via: `find pkgs/ -type f -exec sed -i 's/vendorSha256 = "sha256/vendorHash = "sha256/' {};`
2023-09-13 01:03:44 -06:00
Michael Hanley
a60936606c trust-dns: 0.22.1 -> 0.23.0 2023-09-12 18:06:33 -04:00
Vladimír Čunát
1ad90fec0c
knot-dns: 3.3.0 -> 3.3.1
https://gitlab.nic.cz/knot/knot-dns/-/releases/v3.3.1
2023-09-11 11:17:04 +02:00
Nick Cao
47a99ab525
pdns: 4.8.1 -> 4.8.2
Changelog: https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.2
2023-09-07 10:52:08 -04:00
Vladimír Čunát
5842d103dc
bind: disable tests on *all* 32-bit platforms
https://github.com/NixOS/nixpkgs/pull/250563#issuecomment-1702271179
https://gitlab.isc.org/isc-projects/bind9/-/issues/4269#note_397062
2023-09-01 09:13:10 +02:00
R. Ryantm
6881f7264a pdns-recursor: 4.9.0 -> 4.9.1 2023-08-31 16:17:24 +00:00
Vladimír Čunát
a144137fa8
knot-dns: 3.2.9 -> 3.3.0
https://gitlab.nic.cz/knot/knot-dns/-/releases/v3.3.0
2023-08-28 15:08:58 +02:00
Vladimír Čunát
1c505f6bb3
knot-resolver: 5.6.0 -> 5.7.0
https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.0
2023-08-22 12:05:57 +02:00
Vladimír Čunát
7526787a4e
bind: disable tests on i686
rbtdb_test started to fail reproducibly because of last update:
https://hydra.nixos.org/build/232089292/nixlog/127/tail

Of course, feel free to instead investigate deeper or disable tests
on a more fine-grained level, etc.
2023-08-21 17:20:35 +02:00
linsui
a7c6b07478 dig: add IDN support 2023-08-20 22:56:34 +08:00
Pol Dellaiera
67e7dea5e1
Merge pull request #248693 from r-ryantm/auto-update/coredns
coredns: 1.10.1 -> 1.11.0
2023-08-20 00:39:02 +02:00
Sergei Trofimovich
d932fc0163 bind: 9.18.17 -> 9.18.18
While at it added trivial updater.

Changes: https://bind9.readthedocs.io/en/v9.18.18/notes.html#notes-for-bind-9-18-18
2023-08-19 09:11:35 +01:00
R. Ryantm
174c3d6dff coredns: 1.10.1 -> 1.11.0 2023-08-12 09:13:02 +00:00
Robert Hensing
4c1d3cee60 treewide: Add meta.mainProgram
This should fix most warnings getExe in based on grepping `nixos/`.
2023-07-31 21:54:43 +02:00
Sergei Trofimovich
0092231e84 bind: 9.18.16 -> 9.18.17
Changes: https://downloads.isc.org/isc/bind9/9.18.17/doc/arm/html/notes.html#notes-for-bind-9-18-17
2023-07-28 19:26:00 +01:00
Vladimír Čunát
9d6f1799e2
knot-dns: 3.2.8 -> 3.2.9
https://gitlab.nic.cz/knot/knot-dns/-/releases/v3.2.9
2023-07-27 09:16:23 +02:00
github-actions[bot]
972652b656
Merge staging-next into staging 2023-07-14 12:02:21 +00:00
Michele Guerini Rocco
38a0e134e5
Merge pull request #243386 from r-ryantm/auto-update/pdns-recursor
pdns-recursor: 4.8.4 -> 4.9.0
2023-07-14 10:18:51 +02:00
R. Ryantm
e8a6acb8d4 pdns-recursor: 4.8.4 -> 4.9.0 2023-07-14 03:43:03 +00:00
Artturin
1c29673fcc treewide: go-modules -> goModules
In 787af0f79f
I had to change ${go-modules} to $goModules to allow overrideAttrs to work;
However, env vars cannot contain -, so  i had to change go-modules too.
This in turn broke nix-update because it uses the go-modules attr.

Instead of making nix-update more complicated, make go-modules naming match cargoDeps.

`fd --type f | xargs sd '\bgo-modules\b' 'goModules'`
and revert change to pkgs/applications/misc/dstask/default.nix
and pkgs/servers/http/dave/default.nix
and pkgs/os-specific/darwin/plistwatch/default.nix

release note added
2023-07-14 00:18:06 +03:00
Nick Cao
20912be33e
pdns: 4.8.0 -> 4.8.1
Changelog: https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.1
2023-07-11 10:34:17 +08:00
TQ Hirsch
dd481f2ee3
pdns: Changed paths in /etc to use pdns instead of powerdns 2023-07-01 18:55:51 +08:00
TQ Hirsch
64e3b6239b
pdns, pdns-recurser: Look for configuration in /etc
This allows the respective management tools to find the config file
without manually specifying it on each invocation.
2023-07-01 18:55:50 +08:00
Vladimír Čunát
8870371562
knot-dns: 3.2.7 -> 3.2.8
https://gitlab.nic.cz/knot/knot-dns/-/releases/v3.2.8
2023-06-26 08:56:12 +02:00
Robin Gloster
1074664caf
Merge pull request #239161 from mweinelt/bind-9.18.16
bind: 9.18.14 -> 9.18.16
2023-06-25 20:58:44 +02:00
Martin Weinelt
75a902e253
bind: 9.18.14 -> 9.18.16
https://downloads.isc.org/isc/bind9/cur/9.18/CHANGES
https://downloads.isc.org/isc/bind9/9.18.16/doc/arm/html/notes.html

Fixes: CVE-2023-2828, CVE-2023-2911, CVE-202-3094, CVE-2022-3736,
       CVE-2023-3924
2023-06-22 11:59:22 +02:00
Vladimír Čunát
962e2323a2
knot-resolver: respect doInstallCheck even in wrapper
The main point is to avoid it when cross-compiling.
2023-06-21 18:37:28 +02:00
R. Ryantm
3954302095 trust-dns: 0.22.0 -> 0.22.1 2023-06-18 07:36:03 +00:00
R. Ryantm
3aada93146 nsd: 4.6.1 -> 4.7.0 2023-06-13 08:57:32 +00:00
Vladimír Čunát
7cd7187254
knot-dns: 3.2.6 -> 3.2.7
https://gitlab.nic.cz/knot/knot-dns/-/releases/v3.2.7
2023-06-06 09:30:06 +02:00
Nick Cao
c0bf0c5420
pdns: use finalAttrs pattern and reformat 2023-06-02 10:18:05 +08:00
Nick Cao
43f437088c
pdns: 4.7.4 -> 4.8.0
Changelog: https://doc.powerdns.com/authoritative/changelog/4.8.html#change-4.8.0
Upgrade Notes: https://doc.powerdns.com/authoritative/upgrading.html#any-version-to-4-8-x
2023-06-02 00:10:19 +08:00
emilylange
fa21828be5
nixosTests.acme-dns: init 2023-05-31 15:08:39 +02:00
emilylange
85f1e0c040
acme-dns: init at 1.0 2023-05-31 15:08:35 +02:00
Weijia Wang
7ef1ddae9e
Merge pull request #233854 from chkno/hook-spelling
Fix phase name typos in 5 packages' runHook invocations
2023-05-24 23:40:57 +03:00
Scott Worley
45f6e87822 ncdns: Spell "postUnpack" correctly 2023-05-24 09:21:18 -07:00
R. Ryantm
b0cd101489 dnsdist: 1.7.3 -> 1.8.0 2023-05-16 00:02:05 +00:00
R. Ryantm
8cac6243a3 bind: 9.18.12 -> 9.18.14 2023-05-11 19:13:50 +00:00
R. Ryantm
962fedcc43 doh-proxy-rust: 0.9.8 -> 0.9.9 2023-05-05 15:32:20 +00:00
Nick Cao
f26233b457
pdns: 4.7.3 -> 4.7.4 2023-04-21 14:10:21 +08:00
Michele Guerini Rocco
2f06e8f2a9
pdns-recursor: 4.8.3 -> 4.8.4 (#225063)
Fixes: CVE-2023-26437
2023-04-07 23:12:48 +02:00
Vladimír Čunát
2a36db554b
knot-dns: 3.2.5 -> 3.2.6
This is mostly a bugfix version with a few improvements.
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.2.6
2023-04-04 09:57:19 +02:00
R. Ryantm
29ad004126 pdns-recursor: 4.8.2 -> 4.8.3 2023-03-25 16:38:16 +00:00
Martin Weinelt
66579946d3
knot-dns: Test interaction with kea dhcp-ddns
Tests dynamic updates from kea's dhcp-ddns server.
2023-03-11 22:23:09 +01:00
Vladimír Čunát
41020c3241
bind: avoid tests on aarch64-linux for now
They fail on some machines repeatedly and they were only enabled
around a day ago (6fa6198586).
2023-03-06 12:14:35 +01:00
Robert Scott
ce5093b787 bind: enable unit tests 2023-03-04 17:04:45 +00:00
R. Ryantm
e23609cd21 bind: 9.18.11 -> 9.18.12 2023-03-03 09:43:35 +00:00
Artturin
3251013cc1 treewide: env.NIX_CFLAGS_COMPILE use toString on result of optionals
env values must be strings
2023-02-22 21:23:05 +02:00
Artturin
f9fdf2d402 treewide: move NIX_CFLAGS_COMPILE to the env attrset
with structuredAttrs lists will be bash arrays which cannot be exported
which will be a issue with some patches and some wrappers like cc-wrapper

this makes it clearer that NIX_CFLAGS_COMPILE must be a string as lists
in env cause a eval failure
2023-02-22 21:23:04 +02:00
R. Ryantm
e90c361511 doh-proxy-rust: 0.9.7 -> 0.9.8 2023-02-22 22:08:41 +08:00
R. Ryantm
5ccbeb3a3d coredns: 1.10.0 -> 1.10.1 2023-02-15 14:40:18 +00:00
R. Ryantm
3584033013 pdns-recursor: 4.8.1 -> 4.8.2 2023-02-06 16:32:08 +00:00
Nick Cao
31f4fa4f20
Merge pull request #214167 from vcunat/p/knot-dns_bump
knot-dns: 3.2.4 -> 3.2.5
2023-02-03 20:03:49 +08:00
Vladimír Čunát
50c0e3188c
knot-resolver: avoid a flaky test
The test is relatively sensitive on timing, so it can fail in case
a builder is heavily loaded.  In practice we occasionally see that
on *-darwin.  In distro such tests are more trouble than worth;
and we keep running these upstream anyway.
2023-02-03 10:54:27 +01:00
Artturi
4554582f2e
Merge pull request #199135 from jojosch/dnsdist-update
dnsdist: 1.7.2 -> 1.7.3
2023-02-03 02:29:49 +02:00
Vladimír Čunát
5bcee3f299
knot-dns: 3.2.4 -> 3.2.5
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.2.5
2023-02-02 12:38:13 +01:00
OPNA2608
c9b4c7dccd treewide: Rename libyamlcpp* to yaml-cpp* 2023-01-31 16:22:54 +01:00