125 Commits

Author	SHA1	Message	Date
github-actions[bot]	11b87cbe59	Merge master into staging-next	2024-04-19 12:01:13 +00:00
Vladimír Čunát	1f04f9a6d1	Merge #305135: knot-resolver: 5.7.1 -> 5.7.2	2024-04-19 08:33:10 +02:00
Sandro Jäckel	1385946a93	knot-resolver: 5.7.1 -> 5.7.2	2024-04-18 22:32:58 +02:00
Florian Klink	d6f46ee34e	Revert "knot-resolver: temporarily make it pass" ... This reverts commit 4cad0502db. The underlying issue has been fixed in https://github.com/NixOS/nixpkgs/pull/300905/files, this workaround is not needed anymore.	2024-04-05 00:53:17 +03:00
Florian Klink	80592f5bcd	Revert "fixup! knot-resolver: temporarily make it pass" ... This reverts commit 11fd36353e. The underlying issue has been fixed in https://github.com/NixOS/nixpkgs/pull/300905/files, this workaround is not needed anymore.	2024-04-05 00:53:08 +03:00
Vladimír Čunát	11fd36353e	fixup! knot-resolver: temporarily make it pass ... Fixes evaluation. I'm sorry.	2024-04-01 22:15:30 +02:00
Vladimír Čunát	4cad0502db	knot-resolver: temporarily make it pass ... even if luajitPackages.http is broken. I'm confident that most people don't use it, so at least those should get immediately unblocked. (The main derivation only uses it for this test.)	2024-04-01 20:25:17 +02:00
Vladimír Čunát	ad03cc98bb	knot-resolver: 5.7.0 -> 5.7.1 ... Fixes significant DoS: CVE-2023-50387 "KeyTrap" and CVE-2023-50868 https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1	2024-02-13 14:32:42 +01:00
Vladimír Čunát	3bfd251c0c	knot-resolver: add dnstap support ... Fortunately the closure increases only by 0.5 MB, so that sounds suitable to include in the defaults. Knot Resolver packages for other distros typically do have it.	2024-01-25 16:06:08 +01:00
Adam Joseph	c7e0f6b905	treewide: s_targetPlatform_hostPlatform_ in non-compiler packages ... stdenv.targetPlatform really shouldn't be used by software that doesn't generate or manipulate binaries. I reviewed all uses of targetPlatform outside of pkgs/development/compilers and pkgs/stdenv and replaced those which weren't involved in something which fits these criteria.	2023-11-17 08:07:34 +00:00
Vladimír Čunát	1c505f6bb3	knot-resolver: 5.6.0 -> 5.7.0 ... https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.0	2023-08-22 12:05:57 +02:00
Vladimír Čunát	962e2323a2	knot-resolver: respect doInstallCheck even in wrapper ... The main point is to avoid it when cross-compiling.	2023-06-21 18:37:28 +02:00
Vladimír Čunát	50c0e3188c	knot-resolver: avoid a flaky test ... The test is relatively sensitive on timing, so it can fail in case a builder is heavily loaded. In practice we occasionally see that on *-darwin. In distro such tests are more trouble than worth; and we keep running these upstream anyway.	2023-02-03 10:54:27 +01:00
Vladimír Čunát	d027021c71	knot-resolver: 5.5.3 -> 5.6.0 ... https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.6.0 There's a security fix, though I don't consider it severe.	2023-01-26 18:19:22 +01:00
Guillaume Girol	33afbf39f6	treewide: switch to nativeCheckInputs ... checkInputs used to be added to nativeBuildInputs. Now we have nativeCheckInputs to do that instead. Doing this treewide change allows to keep hashes identical to before the introduction of nativeCheckInputs.	2023-01-21 12:00:00 +00:00
Vladimír Čunát	0c0c230cd2	Merge #192065: knot-*: set .meta.mainProgram	2022-09-25 17:06:45 +02:00
Vladimír Čunát	14384cf3ca	knot-resolver: 5.5.2 -> 5.5.3 ... CVE-2022-40188 and also the patches were included in the release. https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.5.3	2022-09-21 14:34:46 +02:00
Vladimír Čunát	f60377210e	knot-*: set .meta.mainProgram ... I believe it's clear what "main program" is in these cases. It seems unclear if this change is useful, but it's very simple and it shouldn't hurt anything.	2022-09-20 13:10:16 +02:00
Vladimír Čunát	6ffee2b5d0	knot-resolver: run more tests also on *-darwin ... The tests need patching a bit, until the next release. These tests would e.g. discover that kresd didn't work at all until the patch in the parent commit.	2022-08-25 18:30:57 +02:00
Vladimír Čunát	6d2168c73c	knot-resolver: patch library loading for darwin ... Apparently until now it could never start up on x86_64-darwin :-/	2022-08-25 18:30:22 +02:00
Vladimír Čunát	55a29891d4	knot-resolver: 5.5.1 -> 5.5.2 ... https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.5.2	2022-08-16 15:10:08 +02:00
Vladimír Čunát	bac638e75b	knot-resolver: 5.5.0 -> 5.5.1 ... https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.5.1	2022-06-14 10:41:50 +02:00
Vladimír Čunát	9791289e84	knot-resolver: enable more tests ... Apparently luarocks works now on aarch64-darwin.	2022-04-29 15:10:27 +02:00
Vladimír Čunát	3eab641238	knot-resolver: switch to systemdMinimal ... It was in closure anyway, and this saves 62M from $ nix path-info -S ./result Still, for those using the service this won't change the closure.	2022-04-29 15:10:25 +02:00
Vladimír Čunát	a1a2ae2955	knot-resolver: 5.4.4 -> 5.5.0 ... https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.5.0	2022-03-15 13:42:23 +01:00
Vladimír Čunát	1071b77c21	knot-resolver: 5.4.3 -> 5.4.4 ... This is basically just no-op. Only version number changes. https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.4.4	2022-01-05 15:28:59 +01:00
Vladimír Čunát	02d8ed2eb1	knot-resolver: patch a possibly unpleasant issue ... No more releasing in 2021.	2021-12-09 19:30:31 +01:00
Vladimír Čunát	93ee1a9cb0	knot-resolver: 5.4.2 -> 5.4.3 ... https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.4.3	2021-12-01 13:32:57 +01:00
Vladimír Čunát	4329cbdcc4	knot-resolver: 5.4.1 -> 5.4.2 ... https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.4.2	2021-10-13 13:21:50 +02:00
Vladimír Čunát	c0238e110a	knot-resolver: 5.4.0 -> 5.4.1 ... https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.4.1	2021-08-19 14:58:08 +02:00
Vladimír Čunát	88742cf661	knot-resolver: 5.3.2 -> 5.4.0 ... https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.4.0 It's a prerequisite to updating knot-dns to >= 3.1.0.	2021-07-29 17:14:37 +02:00
Vladimír Čunát	389f628c08	knot-resolver: skip tests on aarch64-darwin (for now) ... It used to build in a previous iteration https://hydra.nixos.org/job/nixpkgs/aarch64-darwin/knot-resolver.aarch64-darwin so I expect it will work without these tests (I have no access to a darwin machine).	2021-06-11 20:39:06 +02:00
Vladimír Čunát	fed7086f21	knot-resolver: clean the expression a bit	2021-05-05 13:34:10 +02:00
Vladimír Čunát	fdd9671234	knot-resolver: 5.3.1 -> 5.3.2 ... https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.3.2	2021-05-05 11:45:27 +02:00
Vladimír Čunát	3dee9271d7	knot-resolver: 5.3.0 -> 5.3.1 ... https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.3.1	2021-03-31 20:26:17 +02:00
Vladimír Čunát	d464a379d1	knot-resolver: 5.2.1 -> 5.3.0 ... https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.3.0	2021-02-25 15:08:18 +01:00
Jonathan Ringer	9bb3fccb5b	treewide: pkgs.pkgconfig -> pkgs.pkg-config, move pkgconfig to alias.nix ... continuation of #109595 pkgconfig was aliased in 2018, however, it remained in all-packages.nix due to its wide usage. This cleans up the remaining references to pkgs.pkgsconfig and moves the entry to aliases.nix. python3Packages.pkgconfig remained unchanged because it's the canonical name of the upstream package on pypi.	2021-01-19 01:16:25 -08:00
Ben Siraphob	872973d7d1	pkgs/servers: stdenv.lib -> lib	2021-01-15 14:24:03 +07:00
Profpatsch	4a7f99d55d	treewide: with stdenv.lib; in meta -> with lib; ... Part of: https://github.com/NixOS/nixpkgs/issues/108938 meta = with stdenv.lib; is a widely used pattern. We want to slowly remove the `stdenv.lib` indirection and encourage people to use `lib` directly. Thus let’s start with the meta field. This used a rewriting script to mostly automatically replace all occurances of this pattern, and add the `lib` argument to the package header if it doesn’t exist yet. The script in its current form is available at https://cs.tvl.fyi/depot@2f807d7f141068d2d60676a89213eaa5353ca6e0/-/blob/users/Profpatsch/nixpkgs-rewriter/default.nix	2021-01-11 10:38:22 +01:00
Vladimír Čunát	ace04464b6	knot-resolver: 5.2.0 -> 5.2.1 ... https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.2.1	2020-12-09 11:07:28 +01:00
Vladimír Čunát	9a38c3a11b	knot-resolver: fix evaluation on darwin ... I somehow forgot that libcap_ng is linux-only. I'm missing ofborg's darwin builder, but I might've tested evaluation at least...	2020-11-18 08:41:28 +01:00
Vladimír Čunát	335798d243	knot-resolver: fix a stupid system breaking non-systemd ... I hope this will fix darwin build (no good way of testing locally).	2020-11-17 20:05:51 +01:00
Vladimír Čunát	cd5c7c0ee6	knot-resolver: drop capabilities after startup ... By default. I forgot to add this a long time ago. The difference in runtime closure is really tiny (232 KiB by du).	2020-11-17 20:04:56 +01:00
Vladimír Čunát	3087df3e8f	knot-resolver: add support for new DoH implementation ... By default. I'm not a DoH fan, but the difference in runtime closure is really tiny (216 KiB by du). I somehow forgot this during update. Some of the newly running tests were failing and got disabled.	2020-11-17 20:04:55 +01:00
Vladimír Čunát	280e27327d	knot-resolver: 5.1.3 -> 5.2.0 ... https://lists.nic.cz/pipermail/knot-resolver-users/2020/000318.html NixOS service: we'll probably want to switch listenDoH to the new 'doh2' kind, but let me leave that for later.	2020-11-11 15:51:54 +01:00
Vladimír Čunát	3c45610ddd	knot-resolver: 5.1.2 -> 5.1.3 ... https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.1.3	2020-09-09 11:10:16 +02:00
Vladimír Čunát	ec5ef6bd2b	knot-resolver: 5.1.1 -> 5.1.2 ... https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.1.2 I could highlight fixing the garbage collector on 32-bit systems.	2020-07-01 16:20:49 +02:00
Vladimír Čunát	d0d90908c8	knot-resolver: 5.1.0 -> 5.1.1 (security) ... https://en.blog.nic.cz/2020/05/19/nxnsattack-upgrade-resolvers-to-stop-new-kind-of-random-subdomain-attack/	2020-05-19 11:29:33 +02:00
Vladimír Čunát	26d3ae2f24	knot-resolver: 5.0.1 -> 5.1.0 ... https://gitlab.labs.nic.cz/knot/knot-resolver/-/tags/v5.1.0 The upcoming major version will contain reworked hints/policy/prefill/rebinding/view modules and related functionalities. Please participate in the following survey to ensure we do not forget about your particular use-case: https://www.knot-resolver.cz/survey/ It will help us to improve Knot Resolver. Thank you!	2020-04-29 17:38:21 +02:00
Michael Reilly	84cf00f980	treewide: Per RFC45, remove all unquoted URLs	2020-04-10 17:54:53 +01:00