Commit Graph

60 Commits

Author SHA1 Message Date
Vladimír Čunát
f15625a6c0
knot-resolver: 4.0.0 -> 4.1.0 (security)
https://lists.nic.cz/pipermail/knot-resolver-users/2019/000189.html
Fixes DNS spoofing problems: CVE-2019-10190 CVE-2019-10191
but also minor things, adds new features, etc.
In particular aarch64 should work now, at least as long as not using
some lua library that suffers from the same problem with lightuserdata,
e.g. cqueues does suffer from this.
2019-07-10 17:42:37 +02:00
Vladimír Čunát
9efdd2e434
knot-resolver: 3.2.1 -> 4.0.0
https://lists.nic.cz/pipermail/knot-resolver-users/2019/000136.html

Similar commit worked fine for me, including the nixos service.
I'd like to still improve the service to support easy passing of sockets
to http module.
2019-07-10 17:40:04 +02:00
Vladimír Čunát
6fdd315178
knot-resolver: add a check for the last problem 2019-07-05 11:02:14 +02:00
Vladimír Čunát
f0d2da43a7
knot-resolver: hotfix for a recent $LUA_PATH regression
I hope I got all the transitive dependencies.
The 'http' module load again, at least.
Close https://github.com/NixOS/nixpkgs/pull/64174
2019-07-05 10:46:38 +02:00
Matthieu Coudron
c33153bf13
Merge pull request #63108 from Shados/lua-packaging-improvements-pr
Lua/luarocks packaging improvements
2019-06-19 14:23:31 +02:00
volth
f3282c8d1e treewide: remove unused variables (#63177)
* treewide: remove unused variables

* making ofborg happy
2019-06-16 19:59:05 +00:00
Alexei Robyn
274715cbc3 luaPackages: Replace all rockspec packages with generated ones
luaPackages replaced by generated ones:
- bit32
- compat53
- cqueues
- luacyrussasl -> cyrussasl (luarocks name)
- luaexpat
- luadbi -> luadbi front-end module + separate backend modules
  luadbi-{mysql,postgresql,sqlite3}
- luafilesystem
- luaossl
- luasec
- luasocket
- luastdlib -> stdlib (luarocks name)
- lrexlib -> lrexlib-pcre (we already have lrexlib-gnu and
  lrexlib-posix, lrexlib-pcre however appears to be the variant used in
  mudlet, which is the only current dep in nixpkgs)
- luasqlite -> luasql-sqlite3 (luarocks name)
- lfs -> luafilesytem (we literally had two manually written
  luafilesystem expressions, under different names)

Changes and additions to overrides to generated luarocks packgaes,
including:
- busted: Install bash completions along with the zsh ones
- cqueues:
    - Perform minor surgery on the rockspec to allow using a single
      rockspec to build for all supported Lua versions
    - Add a patch by @vcunat to work around a build issue
- luuid: Wrote a tiny patch to allow for Lua 5.1/Luajit compatibility
- General changes:
    - Sorted the packages
    - Attempted to make the formatting consistent
    - Preferenced `.override` instead of `.overrideAttrs` wherever
      possible

Minor changes to other packages to adjust for the Lua package changes:
- luakit expression simplified
- prosody expression simplified; but users will now need to specify the
  luadbi backend module they intend to use in withExtraLibs
- knot-resolver inputs correctd
- mudlet inputs corrected (although this package was and should still be
  broken)
2019-06-14 13:17:15 +10:00
Vladimír Čunát
110fb944f1
lua*Packages.http: 0.3 -> 0.4 (and generate)
One bugfix patch is included - merged upstream but not released yet.
knot-resolver wrapper would need to add binaryheap explicitly,
so it's migrated to the automatic LUA path discovery instead.
2019-05-01 11:28:47 +02:00
Vladimír Čunát
3e4d8d2fc6
knot-dns: 2.7.6 -> 2.8.0
https://gitlab.labs.nic.cz/knot/knot-dns/tags/v2.8.0
Some explanation for the patching is in this ML thread:
https://lists.nic.cz/pipermail/knot-dns-users/2019-March/001616.html
2019-03-06 19:19:13 +01:00
Vladimír Čunát
98385ff540
knot-resolver: cross-compilation fix 2019-02-23 18:17:35 +01:00
Vladimír Čunát
d49f83442b
knot-resolver: 3.2.0 -> 3.2.1
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v3.2.1
2019-01-10 13:10:50 +01:00
Vladimír Čunát
ee9ba43a1c
knot-resolver: 3.1.0 -> 3.2.0
https://lists.nic.cz/pipermail/knot-resolver-announce/2018/000005.html
2018-12-17 14:54:36 +01:00
Vladimír Čunát
1fe3328593
knot-resolver: 3.0.0 -> 3.1.0
https://lists.nic.cz/pipermail/knot-resolver-users/2018/000086.html
2018-11-02 16:46:03 +01:00
Vladimír Čunát
765d695b89
Merge branch 'staging-next'
Security fixes for a few packages are included.
2018-08-21 15:36:02 +02:00
Vladimír Čunát
8d539c9933
knot-dns, knot-resolver: major updates
They're in a single commit, as splitting would break knot-resolver build.
https://gitlab.labs.nic.cz/knot/knot-dns/blob/v2.7.1/NEWS
https://gitlab.labs.nic.cz/knot/knot-resolver/blob/v3.0.0/NEWS
2018-08-20 11:23:36 +02:00
Vladimír Čunát
153a19df05
Merge branch 'master' into staging-next
Hydra: ?compare=1474536
2018-08-20 09:15:33 +02:00
Vladimír Čunát
fe32659616
Merge #44235: add various lua modules 2018-08-17 14:23:14 +02:00
Jan Malakhovski
0449c1258c knot-resolver: use checkInputs 2018-08-11 09:35:25 +00:00
Jan Malakhovski
b135329dc5 treewide: random cleanups 2018-08-10 12:56:31 +00:00
Vladimír Čunát
1895354eed
knot-resolver: 2.4.0 -> 2.4.1 (security)
Fixes CVE-2018-10920 and some less important things.
https://lists.nic.cz/pipermail/knot-resolver-announce/2018/000002.html
2018-08-02 14:36:20 +02:00
Vladimír Čunát
2d75c47eab
knot-resolver: extraFeatures -> +deps for 'http' module
The module feels as a toy mostly, but why not in non-default setup...
2018-07-30 18:49:11 +02:00
Jörg Thalheim
218298b30f
Merge branch 'master' into unused5 2018-07-21 15:41:22 +01:00
volth
52f53c69ce pkgs/*: remove unreferenced function arguments 2018-07-21 02:48:04 +00:00
volth
6d2857a311 [bot] treewide: remove unused 'inherit' in let blocks 2018-07-20 19:38:19 +00:00
Vladimír Čunát
1c5addde5f
knot_resolver: support prefill module in extraFeatures 2018-07-08 09:21:42 +02:00
Vladimír Čunát
ea8b0fa1cc
knot-resolver: 2.3.0 -> 2.4.0
It includes security-relevant fixes.
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v2.4.0
2018-07-03 10:53:30 +02:00
Silvan Mosberger
57bccb3cb8 treewide: http -> https sources (#42676)
* treewide: http -> https sources

This updates the source urls of all top-level packages from http to
https where possible.

* buildtorrent: fix url and tab -> spaces
2018-06-28 20:43:35 +02:00
Vladimír Čunát
2becf90c93
knot-resolver: 2.2.0 -> 2.3.0 (security)
Contains fixes for CVE-2018-1110.
2018-04-23 13:26:57 +02:00
Vladimír Čunát
366ae3dfe0
knot-resolver: fix /bin/sh impurity
Manifestation in this case: ./scripts/embed-lua.sh: line 4: alias: not found
2018-04-01 10:53:18 +02:00
Ryan Mulligan
dc13867e99 knot-resolver: 2.1.1 -> 2.2.0
Semi-automatic update generated by https://github.com/ryantm/nix-update tools.

This update was made based on information from https://repology.org/metapackage/knot-resolver/versions.

These checks were done:

- built on NixOS
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd -h` got 0 exit code
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd --help` got 0 exit code
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd -V` and found version 2.2.0
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd --version` and found version 2.2.0
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd -h` and found version 2.2.0
- ran `/nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0/bin/kresd --help` and found version 2.2.0
- found 2.2.0 with grep in /nix/store/2fpr2hzspmrnnvmawxd3mv28774rysma-knot-resolver-2.2.0
- directory tree listing: https://gist.github.com/3b59aaaf9f7d90b8de351b6eb712e2a5
2018-03-30 10:23:37 +01:00
Vladimír Čunát
e74b61edde
knot-resolver: 2.1.0 -> 2.1.1 (bugfix)
https://gitlab.labs.nic.cz/knot/knot-resolver/blob/v2.1.1/NEWS
2018-02-23 13:55:29 +01:00
Vladimír Čunát
01a49f38ef
knot-resolver: 2.0.0 -> 2.1.0
No exciting changes to most people, I suppose.
https://lists.nic.cz/pipermail/knot-resolver-users/2018/000007.html
2018-02-16 18:16:33 +01:00
Vladimír Čunát
bbfca0f371
knot-resolver: 1.5.3 -> 2.0.0 (feature update)
Also split extraFeatures into a wrapper derivation.
So far, no changes like user renaming nor systemd unit rework.
2018-02-02 15:26:36 +01:00
Vladimír Čunát
b200979d6e
knot-resolver: 1.5.2 -> 1.5.3 (bugfix)
The fixed problem seems not to happen on NixOS, but let's update anyway.
2018-01-23 15:47:28 +01:00
Vladimír Čunát
7dd50deae5
knot-resolver: 1.5.1 -> 1.5.2 (security)
Fixes CVE-2018-1000002.
https://gitlab.labs.nic.cz/knot/knot-resolver/blob/v1.5.2/NEWS
2018-01-22 12:03:56 +01:00
Vladimír Čunát
4d71ad1bc2
knot-resolver: 1.5.0 -> 1.5.1
It seems to be serving fine, atop 17.09.
2017-12-12 15:12:22 +01:00
Vladimír Čunát
327c351cb2
knot-resolver: disable the hints test for now
It's flaky, unfortunately.
2017-11-12 20:24:03 +01:00
Vladimír Čunát
4b15ca2248
knot-resolver: 1.4.0 -> 1.5.0
https://lists.nic.cz/pipermail/knot-dns-users/2017-November/001240.html
ICANN wants to watch what root trust anchors people use.
https://www.icann.org/resources/pages/ksk-rollover
2017-11-03 11:04:50 +01:00
Vladimír Čunát
7c7f8c9c1d
knot-*: simplify lmdb dependency
Partly thanks to lmdb.pc, partly thanks to 84bd2f4
(hopefully; untested on Darwin).
2017-09-23 14:15:56 +02:00
Vladimír Čunát
fd56648a04
knot-resolver: 1.3.3 -> 1.4.0
Also drop rarely used dependencies, by default,
and utilize root server addresses from nixpkgs.
2017-09-22 11:27:59 +02:00
Vladimír Čunát
10bcf0818f
knot-resolver: security 1.3.2 -> 1.3.3
https://lists.nic.cz/pipermail/knot-dns-users/2017-August/001184.html
2017-08-09 16:36:32 +02:00
Vladimír Čunát
20d2bfa4ff
knot-resolver: remove unused inputs 2017-07-28 15:34:27 +02:00
Vladimír Čunát
62e4e3301b
knot-resolver: maintenance 1.3.1 -> 1.3.2 2017-07-28 15:12:23 +02:00
Vladimír Čunát
3678981f9f
knot-resolver: remove aarch64 from meta.platforms
It will compile but won't really work ATM.
2017-07-10 18:11:40 +02:00
Vladimír Čunát
c76f8d9c7a
knot-resolver: maintenance 1.3.0 -> 1.3.1 2017-06-23 14:48:29 +02:00
Vladimír Čunát
156a9afb2b
knot-resolver: 1.2.6 -> 1.3.0 2017-06-13 10:57:33 +02:00
Vladimír Čunát
d7501b986a
luajit: 2.1.0-beta2 -> 2.1.0-beta3
The removal of `luaL_reg` alias caused lots of breakage.
Only sysdig and knot-resolver needed (also) other changes.
2017-05-02 14:00:45 +02:00
Vladimír Čunát
125cf35273
knot-resolver: maintenance 1.2.5 -> 1.2.6 2017-04-24 16:36:27 +02:00
Vladimír Čunát
44168b4b22
knot-resolver: update the source hash
Just nitpick changes in the tarball, minutes after the release.
2017-04-05 16:08:11 +02:00
Vladimír Čunát
12839e4599
knot-resolver: maintenance 1.2.4 -> 1.2.5 2017-04-05 15:49:27 +02:00