Commit Graph

99 Commits

Author SHA1 Message Date
Vladimír Čunát
02d8ed2eb1
knot-resolver: patch a possibly unpleasant issue
No more releasing in 2021.
2021-12-09 19:30:31 +01:00
Vladimír Čunát
93ee1a9cb0
knot-resolver: 5.4.2 -> 5.4.3
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.4.3
2021-12-01 13:32:57 +01:00
Vladimír Čunát
4329cbdcc4
knot-resolver: 5.4.1 -> 5.4.2
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.4.2
2021-10-13 13:21:50 +02:00
Vladimír Čunát
c0238e110a
knot-resolver: 5.4.0 -> 5.4.1
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.4.1
2021-08-19 14:58:08 +02:00
Vladimír Čunát
88742cf661
knot-resolver: 5.3.2 -> 5.4.0
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.4.0
It's a prerequisite to updating knot-dns to >= 3.1.0.
2021-07-29 17:14:37 +02:00
Vladimír Čunát
389f628c08
knot-resolver: skip tests on aarch64-darwin (for now)
It used to build in a previous iteration
https://hydra.nixos.org/job/nixpkgs/aarch64-darwin/knot-resolver.aarch64-darwin
so I expect it will work without these tests
(I have no access to a darwin machine).
2021-06-11 20:39:06 +02:00
Vladimír Čunát
fed7086f21
knot-resolver: clean the expression a bit 2021-05-05 13:34:10 +02:00
Vladimír Čunát
fdd9671234
knot-resolver: 5.3.1 -> 5.3.2
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.3.2
2021-05-05 11:45:27 +02:00
Vladimír Čunát
3dee9271d7
knot-resolver: 5.3.0 -> 5.3.1
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.3.1
2021-03-31 20:26:17 +02:00
Vladimír Čunát
d464a379d1
knot-resolver: 5.2.1 -> 5.3.0
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.3.0
2021-02-25 15:08:18 +01:00
Jonathan Ringer
9bb3fccb5b treewide: pkgs.pkgconfig -> pkgs.pkg-config, move pkgconfig to alias.nix
continuation of #109595

pkgconfig was aliased in 2018, however, it remained in
all-packages.nix due to its wide usage. This cleans
up the remaining references to pkgs.pkgsconfig and
moves the entry to aliases.nix.

python3Packages.pkgconfig remained unchanged because
it's the canonical name of the upstream package
on pypi.
2021-01-19 01:16:25 -08:00
Ben Siraphob
872973d7d1 pkgs/servers: stdenv.lib -> lib 2021-01-15 14:24:03 +07:00
Profpatsch
4a7f99d55d treewide: with stdenv.lib; in meta -> with lib;
Part of: https://github.com/NixOS/nixpkgs/issues/108938

meta = with stdenv.lib;

is a widely used pattern. We want to slowly remove
the `stdenv.lib` indirection and encourage people
to use `lib` directly. Thus let’s start with the meta
field.

This used a rewriting script to mostly automatically
replace all occurances of this pattern, and add the
`lib` argument to the package header if it doesn’t
exist yet.

The script in its current form is available at
https://cs.tvl.fyi/depot@2f807d7f141068d2d60676a89213eaa5353ca6e0/-/blob/users/Profpatsch/nixpkgs-rewriter/default.nix
2021-01-11 10:38:22 +01:00
Vladimír Čunát
ace04464b6
knot-resolver: 5.2.0 -> 5.2.1
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.2.1
2020-12-09 11:07:28 +01:00
Vladimír Čunát
9a38c3a11b
knot-resolver: fix evaluation on darwin
I somehow forgot that libcap_ng is linux-only.  I'm missing ofborg's
darwin builder, but I might've tested evaluation at least...
2020-11-18 08:41:28 +01:00
Vladimír Čunát
335798d243
knot-resolver: fix a stupid system breaking non-systemd
I hope this will fix darwin build (no good way of testing locally).
2020-11-17 20:05:51 +01:00
Vladimír Čunát
cd5c7c0ee6
knot-resolver: drop capabilities after startup
By default.  I forgot to add this a long time ago.
The difference in runtime closure is really tiny (232 KiB by du).
2020-11-17 20:04:56 +01:00
Vladimír Čunát
3087df3e8f
knot-resolver: add support for new DoH implementation
By default.  I'm not a DoH fan, but the difference in runtime closure
is really tiny (216 KiB by du).  I somehow forgot this during update.

Some of the newly running tests were failing and got disabled.
2020-11-17 20:04:55 +01:00
Vladimír Čunát
280e27327d
knot-resolver: 5.1.3 -> 5.2.0
https://lists.nic.cz/pipermail/knot-resolver-users/2020/000318.html

NixOS service: we'll probably want to switch listenDoH
to the new 'doh2' kind, but let me leave that for later.
2020-11-11 15:51:54 +01:00
Vladimír Čunát
3c45610ddd
knot-resolver: 5.1.2 -> 5.1.3
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.1.3
2020-09-09 11:10:16 +02:00
Vladimír Čunát
ec5ef6bd2b
knot-resolver: 5.1.1 -> 5.1.2
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.1.2
I could highlight fixing the garbage collector on 32-bit systems.
2020-07-01 16:20:49 +02:00
Vladimír Čunát
d0d90908c8
knot-resolver: 5.1.0 -> 5.1.1 (security)
https://en.blog.nic.cz/2020/05/19/nxnsattack-upgrade-resolvers-to-stop-new-kind-of-random-subdomain-attack/
2020-05-19 11:29:33 +02:00
Vladimír Čunát
26d3ae2f24
knot-resolver: 5.0.1 -> 5.1.0
https://gitlab.labs.nic.cz/knot/knot-resolver/-/tags/v5.1.0

The upcoming major version will contain reworked
hints/policy/prefill/rebinding/view modules and related functionalities.
Please participate in the following survey to ensure we do not forget
about your particular use-case:
https://www.knot-resolver.cz/survey/
It will help us to improve Knot Resolver. Thank you!
2020-04-29 17:38:21 +02:00
Michael Reilly
84cf00f980
treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
Vladimír Čunát
b7f5450e4d
knot-resolver: apply upstream patch
Encrypted ZFS users were affected, in particular some NixOS users
who reported the issue upstream.  Close #81188.
2020-03-04 13:36:54 +01:00
Frederik Rietdijk
419bc0a4cd Revert "Revert "Merge master into staging-next""
In 87a19e9048 I merged staging-next into master using the GitHub gui as intended.
In ac241fb7a5 I merged master into staging-next for the next staging cycle, however, I accidentally pushed it to master.
Thinking this may cause trouble, I reverted it in 0be87c7979. This was however wrong, as it "removed" master.

This reverts commit 0be87c7979.
2020-02-05 19:41:25 +01:00
Frederik Rietdijk
0be87c7979 Revert "Merge master into staging-next"
I merged master into staging-next but accidentally pushed it to master.
This should get us back to 87a19e9048.

This reverts commit ac241fb7a5, reversing
changes made to 76a439239e.
2020-02-05 19:18:35 +01:00
Vladimír Čunát
e3edb004c6
knot-resolver: 5.0.0 -> 5.0.1
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v5.0.1
2020-02-05 16:53:40 +01:00
Vladimír Čunát
ae74a0e27c
(nixos/)knot-resolver: 4.3.0 -> 5.0.0
Minor incompatibilities due to moving to upstream defaults:
  - capabilities are used instead of systemd.socket units
  - the control socket moved:
    /run/kresd/control -> /run/knot-resolver/control/1
  - cacheDir moved and isn't configurable anymore
  - different user+group names, without static IDs

Thanks Mic92 for multiple ideas.
2020-01-31 15:22:52 +01:00
Vladimír Čunát
93ad21dedd
knot-resolver: remove older lua path workarounds
Part of this is approximate revert of commit f0d2da43a7.
2020-01-31 15:06:20 +01:00
Vladimír Čunát
e980e7a3ab
knot-resolver: enable checks on aarch64
The cqueues fix is in nixpkgs already, so it works now.
2020-01-30 18:48:57 +01:00
Vladimír Čunát
1ee3c7b405
Revert "knot-resolver: skip a broken test"
This reverts commit 5c0567dcc6.
The issue had been fixed but I forgot to remove this workaround.
2020-01-25 13:42:46 +01:00
Vladimír Čunát
24a4f45319
knot-resolver: 4.2.2 -> 4.3.0 (security)
Fixes CVE-2019-19331 (DoS), but other changes as well:
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v4.3.0
2019-12-04 16:22:49 +01:00
Vladimír Čunát
39049dbd37
knot-resolver: 4.2.1 -> 4.2.2 (tiny bugfix)
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v4.2.2
2019-10-07 14:52:06 +02:00
Vladimír Čunát
4b656c7447
knot-resolver: 4.2.0 -> 4.2.1 (bugfixes)
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v4.2.1
2019-09-27 10:49:45 +02:00
volth
46420bbaa3 treewide: name -> pname (easy cases) (#66585)
treewide replacement of

stdenv.mkDerivation rec {
  name = "*-${version}";
  version = "*";

to pname
2019-08-15 13:41:18 +01:00
Vladimír Čunát
5c0567dcc6
knot-resolver: skip a broken test
The test fails from roughly today's machine date onwards.
2019-08-09 16:09:18 +02:00
Vladimír Čunát
577508ef14
knot-resolver: 4.1.0 -> 4.2.0
No really significant changes, I'd say:
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v4.2.0
2019-08-05 20:31:40 +02:00
Vladimír Čunát
75369ad991
knot-resolver: disable part of tests on darwin, for now 2019-07-10 18:26:26 +02:00
Vladimír Čunát
f15625a6c0
knot-resolver: 4.0.0 -> 4.1.0 (security)
https://lists.nic.cz/pipermail/knot-resolver-users/2019/000189.html
Fixes DNS spoofing problems: CVE-2019-10190 CVE-2019-10191
but also minor things, adds new features, etc.
In particular aarch64 should work now, at least as long as not using
some lua library that suffers from the same problem with lightuserdata,
e.g. cqueues does suffer from this.
2019-07-10 17:42:37 +02:00
Vladimír Čunát
9efdd2e434
knot-resolver: 3.2.1 -> 4.0.0
https://lists.nic.cz/pipermail/knot-resolver-users/2019/000136.html

Similar commit worked fine for me, including the nixos service.
I'd like to still improve the service to support easy passing of sockets
to http module.
2019-07-10 17:40:04 +02:00
Vladimír Čunát
6fdd315178
knot-resolver: add a check for the last problem 2019-07-05 11:02:14 +02:00
Vladimír Čunát
f0d2da43a7
knot-resolver: hotfix for a recent $LUA_PATH regression
I hope I got all the transitive dependencies.
The 'http' module load again, at least.
Close https://github.com/NixOS/nixpkgs/pull/64174
2019-07-05 10:46:38 +02:00
Matthieu Coudron
c33153bf13
Merge pull request #63108 from Shados/lua-packaging-improvements-pr
Lua/luarocks packaging improvements
2019-06-19 14:23:31 +02:00
volth
f3282c8d1e treewide: remove unused variables (#63177)
* treewide: remove unused variables

* making ofborg happy
2019-06-16 19:59:05 +00:00
Alexei Robyn
274715cbc3 luaPackages: Replace all rockspec packages with generated ones
luaPackages replaced by generated ones:
- bit32
- compat53
- cqueues
- luacyrussasl -> cyrussasl (luarocks name)
- luaexpat
- luadbi -> luadbi front-end module + separate backend modules
  luadbi-{mysql,postgresql,sqlite3}
- luafilesystem
- luaossl
- luasec
- luasocket
- luastdlib -> stdlib (luarocks name)
- lrexlib -> lrexlib-pcre (we already have lrexlib-gnu and
  lrexlib-posix, lrexlib-pcre however appears to be the variant used in
  mudlet, which is the only current dep in nixpkgs)
- luasqlite -> luasql-sqlite3 (luarocks name)
- lfs -> luafilesytem (we literally had two manually written
  luafilesystem expressions, under different names)

Changes and additions to overrides to generated luarocks packgaes,
including:
- busted: Install bash completions along with the zsh ones
- cqueues:
    - Perform minor surgery on the rockspec to allow using a single
      rockspec to build for all supported Lua versions
    - Add a patch by @vcunat to work around a build issue
- luuid: Wrote a tiny patch to allow for Lua 5.1/Luajit compatibility
- General changes:
    - Sorted the packages
    - Attempted to make the formatting consistent
    - Preferenced `.override` instead of `.overrideAttrs` wherever
      possible

Minor changes to other packages to adjust for the Lua package changes:
- luakit expression simplified
- prosody expression simplified; but users will now need to specify the
  luadbi backend module they intend to use in withExtraLibs
- knot-resolver inputs correctd
- mudlet inputs corrected (although this package was and should still be
  broken)
2019-06-14 13:17:15 +10:00
Vladimír Čunát
110fb944f1
lua*Packages.http: 0.3 -> 0.4 (and generate)
One bugfix patch is included - merged upstream but not released yet.
knot-resolver wrapper would need to add binaryheap explicitly,
so it's migrated to the automatic LUA path discovery instead.
2019-05-01 11:28:47 +02:00
Vladimír Čunát
3e4d8d2fc6
knot-dns: 2.7.6 -> 2.8.0
https://gitlab.labs.nic.cz/knot/knot-dns/tags/v2.8.0
Some explanation for the patching is in this ML thread:
https://lists.nic.cz/pipermail/knot-dns-users/2019-March/001616.html
2019-03-06 19:19:13 +01:00
Vladimír Čunát
98385ff540
knot-resolver: cross-compilation fix 2019-02-23 18:17:35 +01:00
Vladimír Čunát
d49f83442b
knot-resolver: 3.2.0 -> 3.2.1
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v3.2.1
2019-01-10 13:10:50 +01:00