Received: (at 68621) by debbugs.gnu.org; 23 Apr 2024 18:34:21 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Tue Apr 23 14:34:20 2024 Received: from localhost ([127.0.0.1]:53713 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1rzKyB-0001Jh-0x for submit <at> debbugs.gnu.org; Tue, 23 Apr 2024 14:34:20 -0400 Received: from [195.15.247.228] (port=24017 helo=rdmp.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzKxT-0000zG-CC for 68621 <at> debbugs.gnu.org; Tue, 23 Apr 2024 14:33:38 -0400 Received: from [127.0.0.1] (helo=[IPv6:::1]) by rdmp.org with esmtp (Exim 4.96.1) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzKx5-0004JZ-0W for 68621 <at> debbugs.gnu.org; Tue, 23 Apr 2024 18:33:11 +0000 Message-ID: <41e6590d7cd82331d8782e71782de90f049015ac.camel@HIDDEN> Subject: [PATCH v2 0/4] Allow use of DNSSEC in knot-resolver service From: Dale Mellor <guix-devel-0brg6a@HIDDEN> To: 68621 <at> debbugs.gnu.org Date: Tue, 23 Apr 2024 19:33:10 +0100 Organization: DM Bespoke Computer Solutions Ltd Content-Type: text/plain Content-Transfer-Encoding: 7bit User-Agent: Evolution 3.48.4 MIME-Version: 1.0 X-Spam-Score: 1.3 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: As per previous messages. Content analysis details: (1.3 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS X-Debbugs-Envelope-To: 68621 X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: 0.3 (/) As per previous messages.
guix-patches@HIDDEN
:bug#68621
; Package guix-patches
.
Full text available.Received: (at 68621) by debbugs.gnu.org; 23 Apr 2024 16:14:34 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Tue Apr 23 12:14:33 2024 Received: from localhost ([127.0.0.1]:53062 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1rzImu-0001om-4v for submit <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:14:33 -0400 Received: from [195.15.247.228] (port=10638 helo=rdmp.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzImD-0001eK-3a for 68621 <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:13:56 -0400 Received: from [127.0.0.1] (helo=localhost.localdomain) by rdmp.org with esmtp (Exim 4.96.1) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIlq-00047D-21; Tue, 23 Apr 2024 16:13:27 +0000 From: Dale Mellor <guix-devel-0brg6a@HIDDEN> To: 68621 <at> debbugs.gnu.org Subject: [PATCH v2 4/4] gnu: knot-resolver: version to 5.7.2 Date: Tue, 23 Apr 2024 17:12:26 +0100 Message-ID: <20240423161226.973140-4-guix-devel-0brg6a@HIDDEN> X-Mailer: git-send-email 2.41.0 In-Reply-To: <20240120212542.17473-1-hello@HIDDEN> References: <20240120212542.17473-1-hello@HIDDEN> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: 1.3 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: From: Dale Mellor <black-hole@HIDDEN> * gnu/packages/dns.scm (knot-resolver): Version to 5.7.2. --- gnu/packages/dns.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm index bb86fd34f8..d8b3606f10 100644 --- a/gnu/packages/dns.scm +++ b/gnu/packages/dns.scm @@ -984,14 +984,14 @@ (define (move source target fil [...] Content analysis details: (1.3 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS X-Debbugs-Envelope-To: 68621 Cc: Dale Mellor <black-hole@HIDDEN>, guix-patches@HIDDEN X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: 0.3 (/) From: Dale Mellor <black-hole@HIDDEN> * gnu/packages/dns.scm (knot-resolver): Version to 5.7.2. --- gnu/packages/dns.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm index bb86fd34f8..d8b3606f10 100644 --- a/gnu/packages/dns.scm +++ b/gnu/packages/dns.scm @@ -984,14 +984,14 @@ (define (move source target file) (define-public knot-resolver (package (name "knot-resolver") - (version "5.7.1") + (version "5.7.2") (source (origin (method url-fetch) (uri (string-append "https://secure.nic.cz/files/knot-resolver/" "knot-resolver-" version ".tar.xz")) (sha256 (base32 - "18n3jh17d22xmzpg8syw2dm85vv7jchdc4hzk5x78lqxqqav856s")))) + "03wszdrx5wcd0gz9h4p0ggn67n59almnb2h2m38c5m7wj1rj4sjz")))) (build-system meson-build-system) (outputs '("out" "doc")) (arguments -- 2.41.0
guix-patches@HIDDEN
:bug#68621
; Package guix-patches
.
Full text available.Received: (at 68621) by debbugs.gnu.org; 23 Apr 2024 16:14:30 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Tue Apr 23 12:14:30 2024 Received: from localhost ([127.0.0.1]:53058 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1rzImq-0001nu-Hq for submit <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:14:30 -0400 Received: from [195.15.247.228] (port=53410 helo=rdmp.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIm7-0001dN-E9 for 68621 <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:13:45 -0400 Received: from [127.0.0.1] (helo=localhost.localdomain) by rdmp.org with esmtp (Exim 4.96.1) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIlk-00047D-36; Tue, 23 Apr 2024 16:13:21 +0000 From: Dale Mellor <guix-devel-0brg6a@HIDDEN> To: 68621 <at> debbugs.gnu.org Subject: [PATCH v2 2/4] gnu: knot-resolver: Appease some guix lint complaints. Date: Tue, 23 Apr 2024 17:12:24 +0100 Message-ID: <20240423161226.973140-2-guix-devel-0brg6a@HIDDEN> X-Mailer: git-send-email 2.41.0 In-Reply-To: <20240120212542.17473-1-hello@HIDDEN> References: <20240120212542.17473-1-hello@HIDDEN> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Spam-Score: 1.3 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: From: Dale Mellor <black-hole@HIDDEN> * gnu/packages/dns.scm (knot-resolver): Add bash-minimal to inputs, re-label input items to 'lua5.1-bitop' and 'nghttp2:lib'. --- gnu/packages/dns.scm | 7 ++++--- 1 file changed, 4 insertions(+), 3 d [...] Content analysis details: (1.3 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS X-Debbugs-Envelope-To: 68621 Cc: Dale Mellor <black-hole@HIDDEN>, guix-patches@HIDDEN X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: 0.3 (/) From: Dale Mellor <black-hole@HIDDEN> * gnu/packages/dns.scm (knot-resolver): Add bash-minimal to inputs, re-label input items to 'lua5.1-bitop' and 'nghttp2:lib'. --- gnu/packages/dns.scm | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm index 947a6e89ba..bb86fd34f8 100644 --- a/gnu/packages/dns.scm +++ b/gnu/packages/dns.scm @@ -1051,15 +1051,16 @@ (define-public knot-resolver python-sphinx-rtd-theme texinfo)) (inputs - `(("fstrm" ,fstrm) + `(("bash-minimal" ,bash-minimal) + ("fstrm" ,fstrm) ("gnutls" ,gnutls) ("knot:lib" ,knot "lib") ("libuv" ,libuv) ("lmdb" ,lmdb) ("luajit" ,luajit) ;; TODO: Add optional lua modules: basexx and psl. - ("lua-bitop" ,lua5.1-bitop) - ("nghttp2" ,nghttp2 "lib") + ("lua5.1-bitop" ,lua5.1-bitop) + ("nghttp2:lib" ,nghttp2 "lib") ("python" ,python))) (home-page "https://www.knot-resolver.cz/") (synopsis "Caching validating DNS resolver") -- 2.41.0
guix-patches@HIDDEN
:bug#68621
; Package guix-patches
.
Full text available.Received: (at 68621) by debbugs.gnu.org; 23 Apr 2024 16:14:19 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Tue Apr 23 12:14:19 2024 Received: from localhost ([127.0.0.1]:53052 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1rzImg-0001la-Bz for submit <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:14:18 -0400 Received: from [195.15.247.228] (port=9898 helo=rdmp.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzImA-0001df-71 for 68621 <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:13:48 -0400 Received: from [127.0.0.1] (helo=localhost.localdomain) by rdmp.org with esmtp (Exim 4.96.1) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIln-00047D-2L; Tue, 23 Apr 2024 16:13:24 +0000 From: Dale Mellor <guix-devel-0brg6a@HIDDEN> To: 68621 <at> debbugs.gnu.org Subject: [PATCH v2 3/4] services: knot-resolver: Use default DNSSEC trust anchors. Date: Tue, 23 Apr 2024 17:12:25 +0100 Message-ID: <20240423161226.973140-3-guix-devel-0brg6a@HIDDEN> X-Mailer: git-send-email 2.41.0 In-Reply-To: <20240120212542.17473-1-hello@HIDDEN> References: <20240120212542.17473-1-hello@HIDDEN> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Spam-Score: 1.3 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: From: Leo Nikkilä <hello@HIDDEN> * gnu/services/dns.scm (%kresd.conf): Use default anchors. (knot-resolver-activation): Install default anchors when missing. --- gnu/services/dns.scm | 17 +++++++++++++---- 1 file changed, 13 insertio [...] Content analysis details: (1.3 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS X-Debbugs-Envelope-To: 68621 Cc: =?UTF-8?q?Leo=20Nikkil=C3=A4?= <hello@HIDDEN>, guix-patches@HIDDEN X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: 0.3 (/) From: Leo Nikkilä <hello@HIDDEN> * gnu/services/dns.scm (%kresd.conf): Use default anchors. (knot-resolver-activation): Install default anchors when missing. --- gnu/services/dns.scm | 17 +++++++++++++---- 1 file changed, 13 insertions(+), 4 deletions(-) diff --git a/gnu/services/dns.scm b/gnu/services/dns.scm index 6608046909..f83c5b6594 100644 --- a/gnu/services/dns.scm +++ b/gnu/services/dns.scm @@ -655,7 +655,6 @@ (define-record-type* <knot-resolver-configuration> (define %kresd.conf (plain-file "kresd.conf" "-- -*- mode: lua -*- -trust_anchors.add_file('/var/cache/knot-resolver/root.keys') net = { '127.0.0.1', '::1' } user('knot-resolver', 'knot-resolver') modules = { 'hints > iterate', 'stats', 'predict' } @@ -676,10 +675,20 @@ (define %knot-resolver-accounts (define (knot-resolver-activation config) #~(begin (use-modules (guix build utils)) - (let ((rundir "/var/cache/knot-resolver") - (owner (getpwnam "knot-resolver"))) + (let* ((rundir "/var/cache/knot-resolver") + (keyfile (string-append rundir "/root.keys")) + (owner (getpwnam "knot-resolver"))) (mkdir-p rundir) - (chown rundir (passwd:uid owner) (passwd:gid owner))))) + (chown rundir (passwd:uid owner) (passwd:gid owner)) + + ;; Install initial trust anchors when missing. + (unless (file-exists? keyfile) + (copy-file #$(file-append (knot-resolver-configuration-package + config) + "/etc/knot-resolver/root.keys") + keyfile) + (chown keyfile (passwd:uid owner) (passwd:gid owner)) + (chmod keyfile #o755))))) (define knot-resolver-shepherd-services (match-lambda -- 2.41.0
guix-patches@HIDDEN
:bug#68621
; Package guix-patches
.
Full text available.Received: (at submit) by debbugs.gnu.org; 23 Apr 2024 16:14:33 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Tue Apr 23 12:14:32 2024 Received: from localhost ([127.0.0.1]:53060 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1rzIms-0001o7-8I for submit <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:14:32 -0400 Received: from lists.gnu.org ([2001:470:142::17]:37276) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzImG-0001f8-Au for submit <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:13:55 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIlu-0002nK-8P for guix-patches@HIDDEN; Tue, 23 Apr 2024 12:13:30 -0400 Received: from [195.15.247.228] (helo=rdmp.org) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIls-0005kq-GL for guix-patches@HIDDEN; Tue, 23 Apr 2024 12:13:29 -0400 Received: from [127.0.0.1] (helo=localhost.localdomain) by rdmp.org with esmtp (Exim 4.96.1) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIlq-00047D-21; Tue, 23 Apr 2024 16:13:27 +0000 From: Dale Mellor <guix-devel-0brg6a@HIDDEN> To: 68621 <at> debbugs.gnu.org Subject: [PATCH v2 4/4] gnu: knot-resolver: version to 5.7.2 Date: Tue, 23 Apr 2024 17:12:26 +0100 Message-ID: <20240423161226.973140-4-guix-devel-0brg6a@HIDDEN> X-Mailer: git-send-email 2.41.0 In-Reply-To: <20240120212542.17473-1-hello@HIDDEN> References: <20240120212542.17473-1-hello@HIDDEN> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Host-Lookup-Failed: Reverse DNS lookup failed for 195.15.247.228 (failed) Received-SPF: pass client-ip=195.15.247.228; envelope-from=guix-devel-0brg6a@HIDDEN; helo=rdmp.org X-Spam_score_int: -10 X-Spam_score: -1.1 X-Spam_bar: - X-Spam_report: (-1.1 / 5.0 requ) BAYES_00=-1.9, RDNS_NONE=0.793, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-Spam-Score: 1.0 (+) X-Debbugs-Envelope-To: submit Cc: Dale Mellor <black-hole@HIDDEN>, guix-patches@HIDDEN X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -0.0 (/) From: Dale Mellor <black-hole@HIDDEN> * gnu/packages/dns.scm (knot-resolver): Version to 5.7.2. --- gnu/packages/dns.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm index bb86fd34f8..d8b3606f10 100644 --- a/gnu/packages/dns.scm +++ b/gnu/packages/dns.scm @@ -984,14 +984,14 @@ (define (move source target file) (define-public knot-resolver (package (name "knot-resolver") - (version "5.7.1") + (version "5.7.2") (source (origin (method url-fetch) (uri (string-append "https://secure.nic.cz/files/knot-resolver/" "knot-resolver-" version ".tar.xz")) (sha256 (base32 - "18n3jh17d22xmzpg8syw2dm85vv7jchdc4hzk5x78lqxqqav856s")))) + "03wszdrx5wcd0gz9h4p0ggn67n59almnb2h2m38c5m7wj1rj4sjz")))) (build-system meson-build-system) (outputs '("out" "doc")) (arguments -- 2.41.0
guix-patches@HIDDEN
:bug#68621
; Package guix-patches
.
Full text available.Received: (at submit) by debbugs.gnu.org; 23 Apr 2024 16:14:20 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Tue Apr 23 12:14:20 2024 Received: from localhost ([127.0.0.1]:53054 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1rzImg-0001lq-Tx for submit <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:14:20 -0400 Received: from lists.gnu.org ([2001:470:142::17]:40648) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzImC-0001eJ-UV for submit <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:13:52 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIlq-0002n9-Uv for guix-patches@HIDDEN; Tue, 23 Apr 2024 12:13:26 -0400 Received: from [195.15.247.228] (helo=rdmp.org) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIlp-0005kB-Dn for guix-patches@HIDDEN; Tue, 23 Apr 2024 12:13:26 -0400 Received: from [127.0.0.1] (helo=localhost.localdomain) by rdmp.org with esmtp (Exim 4.96.1) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIln-00047D-2L; Tue, 23 Apr 2024 16:13:24 +0000 From: Dale Mellor <guix-devel-0brg6a@HIDDEN> To: 68621 <at> debbugs.gnu.org Subject: [PATCH v2 3/4] services: knot-resolver: Use default DNSSEC trust anchors. Date: Tue, 23 Apr 2024 17:12:25 +0100 Message-ID: <20240423161226.973140-3-guix-devel-0brg6a@HIDDEN> X-Mailer: git-send-email 2.41.0 In-Reply-To: <20240120212542.17473-1-hello@HIDDEN> References: <20240120212542.17473-1-hello@HIDDEN> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Host-Lookup-Failed: Reverse DNS lookup failed for 195.15.247.228 (failed) Received-SPF: pass client-ip=195.15.247.228; envelope-from=guix-devel-0brg6a@HIDDEN; helo=rdmp.org X-Spam_score_int: -10 X-Spam_score: -1.1 X-Spam_bar: - X-Spam_report: (-1.1 / 5.0 requ) BAYES_00=-1.9, RDNS_NONE=0.793, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-Spam-Score: 1.0 (+) X-Debbugs-Envelope-To: submit Cc: =?UTF-8?q?Leo=20Nikkil=C3=A4?= <hello@HIDDEN>, guix-patches@HIDDEN X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -0.0 (/) From: Leo Nikkilä <hello@HIDDEN> * gnu/services/dns.scm (%kresd.conf): Use default anchors. (knot-resolver-activation): Install default anchors when missing. --- gnu/services/dns.scm | 17 +++++++++++++---- 1 file changed, 13 insertions(+), 4 deletions(-) diff --git a/gnu/services/dns.scm b/gnu/services/dns.scm index 6608046909..f83c5b6594 100644 --- a/gnu/services/dns.scm +++ b/gnu/services/dns.scm @@ -655,7 +655,6 @@ (define-record-type* <knot-resolver-configuration> (define %kresd.conf (plain-file "kresd.conf" "-- -*- mode: lua -*- -trust_anchors.add_file('/var/cache/knot-resolver/root.keys') net = { '127.0.0.1', '::1' } user('knot-resolver', 'knot-resolver') modules = { 'hints > iterate', 'stats', 'predict' } @@ -676,10 +675,20 @@ (define %knot-resolver-accounts (define (knot-resolver-activation config) #~(begin (use-modules (guix build utils)) - (let ((rundir "/var/cache/knot-resolver") - (owner (getpwnam "knot-resolver"))) + (let* ((rundir "/var/cache/knot-resolver") + (keyfile (string-append rundir "/root.keys")) + (owner (getpwnam "knot-resolver"))) (mkdir-p rundir) - (chown rundir (passwd:uid owner) (passwd:gid owner))))) + (chown rundir (passwd:uid owner) (passwd:gid owner)) + + ;; Install initial trust anchors when missing. + (unless (file-exists? keyfile) + (copy-file #$(file-append (knot-resolver-configuration-package + config) + "/etc/knot-resolver/root.keys") + keyfile) + (chown keyfile (passwd:uid owner) (passwd:gid owner)) + (chmod keyfile #o755))))) (define knot-resolver-shepherd-services (match-lambda -- 2.41.0
guix-patches@HIDDEN
:bug#68621
; Package guix-patches
.
Full text available.Received: (at submit) by debbugs.gnu.org; 23 Apr 2024 16:14:18 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Tue Apr 23 12:14:18 2024 Received: from localhost ([127.0.0.1]:53050 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1rzImf-0001lW-Sn for submit <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:14:18 -0400 Received: from lists.gnu.org ([2001:470:142::17]:40636) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzImA-0001dl-ES for submit <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:13:48 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIlo-0002ms-BY for guix-patches@HIDDEN; Tue, 23 Apr 2024 12:13:24 -0400 Received: from [195.15.247.228] (helo=rdmp.org) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIlm-0005ju-KF for guix-patches@HIDDEN; Tue, 23 Apr 2024 12:13:24 -0400 Received: from [127.0.0.1] (helo=localhost.localdomain) by rdmp.org with esmtp (Exim 4.96.1) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIlk-00047D-36; Tue, 23 Apr 2024 16:13:21 +0000 From: Dale Mellor <guix-devel-0brg6a@HIDDEN> To: 68621 <at> debbugs.gnu.org Subject: [PATCH v2 2/4] gnu: knot-resolver: Appease some guix lint complaints. Date: Tue, 23 Apr 2024 17:12:24 +0100 Message-ID: <20240423161226.973140-2-guix-devel-0brg6a@HIDDEN> X-Mailer: git-send-email 2.41.0 In-Reply-To: <20240120212542.17473-1-hello@HIDDEN> References: <20240120212542.17473-1-hello@HIDDEN> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Host-Lookup-Failed: Reverse DNS lookup failed for 195.15.247.228 (failed) Received-SPF: pass client-ip=195.15.247.228; envelope-from=guix-devel-0brg6a@HIDDEN; helo=rdmp.org X-Spam_score_int: -10 X-Spam_score: -1.1 X-Spam_bar: - X-Spam_report: (-1.1 / 5.0 requ) BAYES_00=-1.9, RDNS_NONE=0.793, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-Spam-Score: 1.0 (+) X-Debbugs-Envelope-To: submit Cc: Dale Mellor <black-hole@HIDDEN>, guix-patches@HIDDEN X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -0.0 (/) From: Dale Mellor <black-hole@HIDDEN> * gnu/packages/dns.scm (knot-resolver): Add bash-minimal to inputs, re-label input items to 'lua5.1-bitop' and 'nghttp2:lib'. --- gnu/packages/dns.scm | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm index 947a6e89ba..bb86fd34f8 100644 --- a/gnu/packages/dns.scm +++ b/gnu/packages/dns.scm @@ -1051,15 +1051,16 @@ (define-public knot-resolver python-sphinx-rtd-theme texinfo)) (inputs - `(("fstrm" ,fstrm) + `(("bash-minimal" ,bash-minimal) + ("fstrm" ,fstrm) ("gnutls" ,gnutls) ("knot:lib" ,knot "lib") ("libuv" ,libuv) ("lmdb" ,lmdb) ("luajit" ,luajit) ;; TODO: Add optional lua modules: basexx and psl. - ("lua-bitop" ,lua5.1-bitop) - ("nghttp2" ,nghttp2 "lib") + ("lua5.1-bitop" ,lua5.1-bitop) + ("nghttp2:lib" ,nghttp2 "lib") ("python" ,python))) (home-page "https://www.knot-resolver.cz/") (synopsis "Caching validating DNS resolver") -- 2.41.0
guix-patches@HIDDEN
:bug#68621
; Package guix-patches
.
Full text available.Received: (at 68621) by debbugs.gnu.org; 23 Apr 2024 16:13:37 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Tue Apr 23 12:13:37 2024 Received: from localhost ([127.0.0.1]:53035 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1rzIm1-0001dG-7W for submit <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:13:37 -0400 Received: from [195.15.247.228] (port=6094 helo=rdmp.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIly-0001c4-KC for 68621 <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:13:36 -0400 Received: from [127.0.0.1] (helo=localhost.localdomain) by rdmp.org with esmtp (Exim 4.96.1) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIlb-00047D-2z; Tue, 23 Apr 2024 16:13:12 +0000 From: Dale Mellor <guix-devel-0brg6a@HIDDEN> To: 68621 <at> debbugs.gnu.org Subject: [PATCH v2 1/4] gnu: knot-resolver: Re-enable default DNSSEC trust anchors. Date: Tue, 23 Apr 2024 17:12:23 +0100 Message-ID: <20240423161226.973140-1-guix-devel-0brg6a@HIDDEN> X-Mailer: git-send-email 2.41.0 In-Reply-To: <20240120212542.17473-1-hello@HIDDEN> References: <20240120212542.17473-1-hello@HIDDEN> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Spam-Score: 1.3 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: From: Leo Nikkilä <hello@HIDDEN> * gnu/packages/dns.scm (knot-resolver) [#:configure-flags]: Configure root keys and managed TA. [#:phases] Remove `'disable-default-ta', add `'install-root-keys'. --- gnu/packages/dns.scm | 20 +++++++ [...] Content analysis details: (1.3 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS X-Debbugs-Envelope-To: 68621 Cc: =?UTF-8?q?Leo=20Nikkil=C3=A4?= <hello@HIDDEN>, guix-patches@HIDDEN X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: 0.3 (/) From: Leo Nikkilä <hello@HIDDEN> * gnu/packages/dns.scm (knot-resolver) [#:configure-flags]: Configure root keys and managed TA. [#:phases] Remove `'disable-default-ta', add `'install-root-keys'. --- gnu/packages/dns.scm | 20 +++++++++++++------- 1 file changed, 13 insertions(+), 7 deletions(-) diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm index 36d3eb8b7e..947a6e89ba 100644 --- a/gnu/packages/dns.scm +++ b/gnu/packages/dns.scm @@ -995,15 +995,13 @@ (define-public knot-resolver (build-system meson-build-system) (outputs '("out" "doc")) (arguments - '(#:configure-flags '("-Ddoc=enabled") + `(#:configure-flags + '("-Ddoc=enabled" + "-Dinstall_root_keys=disabled" ; installed manually outside store + "-Dkeyfile_default=/var/cache/knot-resolver/root.keys" + "-Dmanaged_ta=enabled") #:phases (modify-phases %standard-phases - (add-before 'configure 'disable-default-ta - (lambda _ - ;; Disable the default managed root TA, since we don't have - ;; write access to the keyfile and its directory in store. - (substitute* "daemon/lua/sandbox.lua.in" - (("^trust_anchors\\.add_file.*") "")))) (add-after 'build 'build-doc (lambda _ (invoke "ninja" "doc"))) @@ -1021,6 +1019,14 @@ (define-public knot-resolver '("doc/knot-resolver/examples" "doc/knot-resolver/html" "info"))))) + (add-after 'install 'install-root-keys + (lambda* (#:key outputs #:allow-other-keys) + (let ((dir (string-append (assoc-ref outputs "out") + "/etc/knot-resolver"))) + (mkdir-p dir) + (install-file (string-append "../knot-resolver-" ,version + "/etc/root.keys") + dir)))) (add-after 'install 'wrap-binary (lambda* (#:key inputs outputs #:allow-other-keys) (let* ((out (assoc-ref outputs "out")) -- 2.41.0
guix-patches@HIDDEN
:bug#68621
; Package guix-patches
.
Full text available.Received: (at submit) by debbugs.gnu.org; 23 Apr 2024 16:13:45 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Tue Apr 23 12:13:44 2024 Received: from localhost ([127.0.0.1]:53038 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1rzIm6-0001e0-Ij for submit <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:13:44 -0400 Received: from lists.gnu.org ([2001:470:142::17]:49298) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIm3-0001d6-UJ for submit <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:13:41 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIlh-0002mK-HR for guix-patches@HIDDEN; Tue, 23 Apr 2024 12:13:17 -0400 Received: from [195.15.247.228] (helo=rdmp.org) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIlf-0005ik-ML for guix-patches@HIDDEN; Tue, 23 Apr 2024 12:13:17 -0400 Received: from [127.0.0.1] (helo=localhost.localdomain) by rdmp.org with esmtp (Exim 4.96.1) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIlb-00047D-2z; Tue, 23 Apr 2024 16:13:12 +0000 From: Dale Mellor <guix-devel-0brg6a@HIDDEN> To: 68621 <at> debbugs.gnu.org Subject: [PATCH v2 1/4] gnu: knot-resolver: Re-enable default DNSSEC trust anchors. Date: Tue, 23 Apr 2024 17:12:23 +0100 Message-ID: <20240423161226.973140-1-guix-devel-0brg6a@HIDDEN> X-Mailer: git-send-email 2.41.0 In-Reply-To: <20240120212542.17473-1-hello@HIDDEN> References: <20240120212542.17473-1-hello@HIDDEN> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Host-Lookup-Failed: Reverse DNS lookup failed for 195.15.247.228 (failed) Received-SPF: pass client-ip=195.15.247.228; envelope-from=guix-devel-0brg6a@HIDDEN; helo=rdmp.org X-Spam_score_int: -10 X-Spam_score: -1.1 X-Spam_bar: - X-Spam_report: (-1.1 / 5.0 requ) BAYES_00=-1.9, RDNS_NONE=0.793, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-Spam-Score: 1.0 (+) X-Debbugs-Envelope-To: submit Cc: =?UTF-8?q?Leo=20Nikkil=C3=A4?= <hello@HIDDEN>, guix-patches@HIDDEN X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -0.0 (/) From: Leo Nikkilä <hello@HIDDEN> * gnu/packages/dns.scm (knot-resolver) [#:configure-flags]: Configure root keys and managed TA. [#:phases] Remove `'disable-default-ta', add `'install-root-keys'. --- gnu/packages/dns.scm | 20 +++++++++++++------- 1 file changed, 13 insertions(+), 7 deletions(-) diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm index 36d3eb8b7e..947a6e89ba 100644 --- a/gnu/packages/dns.scm +++ b/gnu/packages/dns.scm @@ -995,15 +995,13 @@ (define-public knot-resolver (build-system meson-build-system) (outputs '("out" "doc")) (arguments - '(#:configure-flags '("-Ddoc=enabled") + `(#:configure-flags + '("-Ddoc=enabled" + "-Dinstall_root_keys=disabled" ; installed manually outside store + "-Dkeyfile_default=/var/cache/knot-resolver/root.keys" + "-Dmanaged_ta=enabled") #:phases (modify-phases %standard-phases - (add-before 'configure 'disable-default-ta - (lambda _ - ;; Disable the default managed root TA, since we don't have - ;; write access to the keyfile and its directory in store. - (substitute* "daemon/lua/sandbox.lua.in" - (("^trust_anchors\\.add_file.*") "")))) (add-after 'build 'build-doc (lambda _ (invoke "ninja" "doc"))) @@ -1021,6 +1019,14 @@ (define-public knot-resolver '("doc/knot-resolver/examples" "doc/knot-resolver/html" "info"))))) + (add-after 'install 'install-root-keys + (lambda* (#:key outputs #:allow-other-keys) + (let ((dir (string-append (assoc-ref outputs "out") + "/etc/knot-resolver"))) + (mkdir-p dir) + (install-file (string-append "../knot-resolver-" ,version + "/etc/root.keys") + dir)))) (add-after 'install 'wrap-binary (lambda* (#:key inputs outputs #:allow-other-keys) (let* ((out (assoc-ref outputs "out")) -- 2.41.0
guix-patches@HIDDEN
:bug#68621
; Package guix-patches
.
Full text available.Received: (at 68621) by debbugs.gnu.org; 23 Apr 2024 16:02:41 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Tue Apr 23 12:02:41 2024 Received: from localhost ([127.0.0.1]:52961 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1rzIbP-00084Y-8n for submit <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:02:40 -0400 Received: from [195.15.247.228] (port=1179 helo=rdmp.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIZ0-0007eF-8E for 68621 <at> debbugs.gnu.org; Tue, 23 Apr 2024 12:00:13 -0400 Received: from [127.0.0.1] (helo=[IPv6:::1]) by rdmp.org with esmtp (Exim 4.96.1) (envelope-from <guix-devel-0brg6a@HIDDEN>) id 1rzIYc-00046v-0I for 68621 <at> debbugs.gnu.org; Tue, 23 Apr 2024 15:59:46 +0000 Message-ID: <fad6df9ef4070589d84834ab60d26da71d2296bf.camel@HIDDEN> Subject: Consolidating patches under this one issue number From: Dale Mellor <" guix-devel-0brg6a"@rdmp.org> To: 68621 <at> debbugs.gnu.org Date: Tue, 23 Apr 2024 16:59:45 +0100 Organization: DM Bespoke Computer Solutions Ltd Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.48.4 MIME-Version: 1.0 X-Spam-Score: 1.3 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: The patches that follow are: * two patches which were originally supposed to accompany this issue * a fix to quieten some guix lint warnings * a package version micro-bump, to 5.7.2. Content analysis details: (1.3 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 SPF_PASS SPF: sender matches SPF record -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 1.3 RDNS_NONE Delivered to internal network by a host with no rDNS 0.0 FROM_ADDR_WS Malformed From address X-Debbugs-Envelope-To: 68621 X-Mailman-Approved-At: Tue, 23 Apr 2024 12:02:37 -0400 X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: 0.3 (/) The patches that follow are: * two patches which were originally supposed to accompany this issue * a fix to quieten some guix lint warnings * a package version micro-bump, to 5.7.2.
guix-patches@HIDDEN
:bug#68621
; Package guix-patches
.
Full text available.Received: (at 68621) by debbugs.gnu.org; 20 Jan 2024 21:38:07 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Sat Jan 20 16:38:07 2024 Received: from localhost ([127.0.0.1]:36000 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1rRJ2U-0000KT-JW for submit <at> debbugs.gnu.org; Sat, 20 Jan 2024 16:38:06 -0500 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:58623) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <hello@HIDDEN>) id 1rRJ2R-0000Jx-Pg for 68621 <at> debbugs.gnu.org; Sat, 20 Jan 2024 16:38:05 -0500 Received: from compute6.internal (compute6.nyi.internal [10.202.2.47]) by mailout.nyi.internal (Postfix) with ESMTP id 95E895C00BE for <68621 <at> debbugs.gnu.org>; Sat, 20 Jan 2024 16:37:55 -0500 (EST) Received: from imap43 ([10.202.2.93]) by compute6.internal (MEProxy); Sat, 20 Jan 2024 16:37:55 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lnikki.la; h=cc :content-type:content-type:date:date:from:from:in-reply-to :message-id:mime-version:reply-to:subject:subject:to:to; s=fm1; t=1705786675; x=1705873075; bh=pjMQBQPWQUn7wCqJwl5/ALiBXdso8KJL 84QWY0q45/c=; b=n2Q8sFqaztacuBPxrALLKZFzGkjxztfJT8NuJn99+XZNnPvP 8FeHD3pRLFJ8Xr9rttm0bDgYsVqRaaATawjKbb244cNh9D2VhsmQifdQokXLnvDo 63bJGeUpBiEG59R8qgGF+1NepqFoqn0RA1P8DHtlO4wsZlynBavhJRv8DDk2W+tG BvojotzkMV80G8l4C91OvhGWdwlGDGpPmy/iDYtgZ453mya7TUVrdUlYkMY/EGp4 eQe2ENfM93x5eH3GJxmMzK93w9lfHi0gCMQhUNvZzssxZNkQcvmEI9pVV2W07Pcz PW18pWDCw+ltADWo8+8QP9S0ux2oCIx4EoGSAw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:message-id :mime-version:reply-to:subject:subject:to:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1705786675; x=1705873075; bh=pjMQBQPWQUn7wCqJwl5/ALiBXdso8KJL84Q WY0q45/c=; b=eBJaUXZ8+F0qbWQG/VF9VOnach64FZgfNsbH5vCbn/sZzs3oiId u6oshSAJC/u+/iFXMl1pehHvqIXgRczCL9ul4eSBYj2uK9QxeQeora5J/aOXvTKi PrelERiuq+SUbjOpnS/EONS9LI0r1TeW99iJgFhMd/0ygLQpLra+Ndfo1KFzfFA4 g7mBIepKIUQyWLYWFrWmbhTGVkWJsTeP3ujxYENufUTsC/7h1/p1J40Cnxa/ljs3 sFhp0JFPeZm2MotrNomym8IwUSkcRZvQU3g4tJ1VhRE02RuD6OMQmp8rDfK5XiXq frlqwG3aWTgK+0u3de0E9FYwImBoeDSO6uA== X-ME-Sender: <xms:Mz2sZZ28JHMNR69Lxj46trw3meUd8jG7pbwSmKTNjivdFZ2vI4unFA> <xme:Mz2sZQF5y1aZ-nQvapjSQjV9sL4fTxuqwYqnfQLjUgZNJYryoPAkhETAOyWV6fFEv SlZYXhwC4aCQQW68hQ> X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedrvdekvddgudehfecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecunecujfgurhepofgfggfkfffhvffutgesthdtre dtreerjeenucfhrhhomhepnfgvohcupfhikhhkihhlmocuoehhvghllhhosehlnhhikhhk ihdrlhgrqeenucggtffrrghtthgvrhhnpeetffejjedvgeekgffhiefhhfeggffhfeehhf ehffdvkeeuhfeiuedvudefueeutdenucffohhmrghinhepnhhitgdrtgiinecuvehluhhs thgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomhephhgvlhhloheslhhnih hkkhhirdhlrg X-ME-Proxy: <xmx:Mz2sZZ7DpSXNGg3Ax622FqF2_NSAxtk59K6ueyQSt-Iy3_B5gAMyuQ> <xmx:Mz2sZW2q35MS8-xKrN2a2T3n3EaJy4Pj-361GtYH6dOH1RyQ6UDyMg> <xmx:Mz2sZcFCGchD7IoMuDXuPIYpLar-1MVoZyCxWN3lvSPRV3_-q9BKEw> <xmx:Mz2sZQCF35WlNfH3SwVJkI7S3PhDcQxH39T2vKw1kKAOfHkP3hhTWQ> Feedback-ID: i41f146a7:Fastmail Received: by mailuser.nyi.internal (Postfix, from userid 501) id 57D902D40087; Sat, 20 Jan 2024 16:37:55 -0500 (EST) X-Mailer: MessagingEngine.com Webmail Interface User-Agent: Cyrus-JMAP/3.9.0-alpha0-1374-gc37f3abe3d-fm-20240102.001-gc37f3abe MIME-Version: 1.0 Message-Id: <55e61c14-1737-4252-bd4a-72cefc51c964@HIDDEN> Date: Sat, 20 Jan 2024 23:37:35 +0200 From: =?UTF-8?Q?Leo_Nikkil=C3=A4?= <hello@HIDDEN> To: 68621 <at> debbugs.gnu.org Subject: Re: [PATCH 0/2] Provide default DNSSEC trust anchors for knot-resolver Content-Type: text/plain X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 68621 X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -1.7 (-) Forgot to mention, but this is more or less what was done for the upstream RPM package, see: https://gitlab.nic.cz/knot/knot-resolver/-/issues/513 https://gitlab.nic.cz/knot/knot-resolver/-/merge_requests/888/diffs
guix-patches@HIDDEN
:bug#68621
; Package guix-patches
.
Full text available.Received: (at submit) by debbugs.gnu.org; 20 Jan 2024 21:26:40 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Sat Jan 20 16:26:40 2024 Received: from localhost ([127.0.0.1]:35982 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1rRIrQ-0008RM-BY for submit <at> debbugs.gnu.org; Sat, 20 Jan 2024 16:26:40 -0500 Received: from lists.gnu.org ([2001:470:142::17]:57956) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <hello@HIDDEN>) id 1rRIrM-0008Qk-AB for submit <at> debbugs.gnu.org; Sat, 20 Jan 2024 16:26:37 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <hello@HIDDEN>) id 1rRIr5-00009g-4y for guix-patches@HIDDEN; Sat, 20 Jan 2024 16:26:21 -0500 Received: from out1-smtp.messagingengine.com ([66.111.4.25]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <hello@HIDDEN>) id 1rRIr3-00009B-33 for guix-patches@HIDDEN; Sat, 20 Jan 2024 16:26:18 -0500 Received: from compute2.internal (compute2.nyi.internal [10.202.2.46]) by mailout.nyi.internal (Postfix) with ESMTP id 1FA3C5C00A6; Sat, 20 Jan 2024 16:26:13 -0500 (EST) Received: from mailfrontend1 ([10.202.2.162]) by compute2.internal (MEProxy); Sat, 20 Jan 2024 16:26:13 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lnikki.la; h=cc :cc:content-transfer-encoding:content-type:content-type:date :date:from:from:in-reply-to:message-id:mime-version:reply-to :subject:subject:to:to; s=fm1; t=1705785973; x=1705872373; bh=IJ VC0an6Z4ae0TjMKVkaMAp3A805UexkcMP/7RrpD5w=; b=OWDEyWVzXmgVDE8JN1 FDjX1JIvoO9ivx6t0NQoP/e31/9sTNBG0xQya7tz2P8P0ONCWV+nkzlsVBpsjqKn vIPgExjvT3lRwlIkpyOL6nony4FWTPI+9KbMT9XF5lNqXRrMII8VW6WHUNeWamb4 MYfGK/NK/7IKjYIA+CGsxOpUuNnVr0tLVQyEJ7sxF1QUQ0dmuGJljZNINOrdjRzG 9O1kAo7X+bhbIlZk2A1NmyOEV3m2h4zi3H8JzNQVYkeK4Ncf7xgfNEBK/oL95Pqk +hhlXVO1t3jd5k/hlJN4RfTtYitU/4z3Gq91+G8TjATODU0+0eJefcM15G1YfrM2 rvWw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:content-type:date:date:feedback-id:feedback-id :from:from:in-reply-to:message-id:mime-version:reply-to:subject :subject:to:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm3; t=1705785973; x=1705872373; bh=IJVC0an6Z4ae0 TjMKVkaMAp3A805UexkcMP/7RrpD5w=; b=w5jo03pK1rOfmikn98gUGpdPt1Ouc f5KqAAO824hDRh8MiVlv6rtQyCRMdN6aUXo9M5Smkf266z8Fogug8aXXFPEJh6Fs vxkVmt2gv26pg2OHnDCO0ZLcJqrf39SY6mfaFQKSPcnTWR4faX23SiDTb44kFVao 3OwRvTJnNBAiD5iveWpfwisxu3YYS33llDh+MFo2bf7E/QNNhTTvGGm04RPLrHDb qQCVcsjrUiN3xDqV0GHoN3cSK5mJY7mQoxSOdnVIcVMvmXjBr+jufW6CE4Yp+U53 p7V9A9I/v28dGHXtGzDQAkW2fSQScMjiR15OqO4F8FUuixfyN7vjMhjdQ== X-ME-Sender: <xms:dDqsZTJQmkk__mM52stfTb8XKva1OK50CJi1MDwJvskr-G5vyU5x_Q> <xme:dDqsZXItz4znI-ZRKUIdHqIKlH8mZYveXdhDHqIsC1VYwdZoDv2adC1NiYwdjrloh AtMsSzp9rgt_-rYx7s> X-ME-Received: <xmr:dDqsZbsdg89yPneUansy9CzzhGgFhgrgtQVeIhLzYSddkh8KjLE4OAoaUyD0ZWFReLQho2JB6FyQj9651xObiBOZbp5qAkXPZz8> X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvkedrvdekvddgudehudcutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecunecujfgurhephffvvefufffkofggtgfgsehtke ertdertdejnecuhfhrohhmpefnvghoucfpihhkkhhilhomuceohhgvlhhloheslhhnihhk khhirdhlrgeqnecuggftrfgrthhtvghrnhepvdejfeejuefffeeiuedvleetkeettdefje elfeevvdeffeehgeduvedufefgheeinecuffhomhgrihhnpehrvggrughthhgvughotghs rdhiohenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpe hhvghllhhosehlnhhikhhkihdrlhgr X-ME-Proxy: <xmx:dDqsZcYW0f7Xn5aR-lWn1RHN3YNAZTwv2PyMg5wB8WpmO1xPIlwF7w> <xmx:dDqsZaZaSEiBZ2OiC-fsuGA0A0EpQq7guBLKxOfaCHXdVVnA3bNwnw> <xmx:dDqsZQBZLs5lr0KsMVE9ushRj6uXNSMP4JPFqB8MP_wcis53u7nNng> <xmx:dTqsZRytbe176_zUFuLUTtkjjm-cSi4sEKV-d_uiQQ7gGsEitqRe0w> Feedback-ID: i41f146a7:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sat, 20 Jan 2024 16:26:12 -0500 (EST) From: =?utf-8?Q?Leo=20Nikkil=C3=A4?= <hello@HIDDEN> To: guix-patches@HIDDEN Subject: [PATCH 0/2] Provide default DNSSEC trust anchors for knot-resolver Date: Sat, 20 Jan 2024 23:23:42 +0200 Message-ID: <20240120212542.17473-1-hello@HIDDEN> X-Mailer: git-send-email 2.41.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=66.111.4.25; envelope-from=hello@HIDDEN; helo=out1-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 1.0 (+) X-Debbugs-Envelope-To: submit Cc: =?UTF-8?q?Leo=20Nikkil=C3=A4?= <hello@HIDDEN> X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -0.0 (/) The default DNSSEC trust anchors for knot-resolver are currently disabled through a build phase, but configured when you use the default kresd.conf file provided by Guix. If you write your own configuration, you might expect kresd to have DNSSEC enabled by default since this is what upstream does [1]. On Guix, DNSSEC is disabled unless you provide the same custom path in your own configuration and install the file into the appropriate location. This set updates the package to be built with the correct path as the default, and the service to use that path and install the default trust anchors at activation time when missing. [1]: https://knot-resolver.readthedocs.io/en/stable/config-dnssec.html Leo Nikkilä (2): gnu: knot-resolver: Re-enable default DNSSEC trust anchors. services: knot-resolver: Use default DNSSEC trust anchors. gnu/packages/dns.scm | 20 +++++++++++++------- gnu/services/dns.scm | 17 +++++++++++++---- 2 files changed, 26 insertions(+), 11 deletions(-) base-commit: 9072f27f5d3514be22c6af208f2ad56ef4e112f4 -- 2.41.0
Leo Nikkilä <hello@HIDDEN>
:guix-patches@HIDDEN
.
Full text available.guix-patches@HIDDEN
:bug#68621
; Package guix-patches
.
Full text available.
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd,
1994-97 Ian Jackson.