initial buildroot for linux 5.15
This commit is contained in:
@@ -0,0 +1,34 @@
|
||||
From 505cc9fcadda5607dc4c5bacb03928c0b35162a8 Mon Sep 17 00:00:00 2001
|
||||
From: Gustavo Zacarias <gustavo@zacarias.com.ar>
|
||||
Date: Wed, 4 Nov 2020 17:51:38 +0100
|
||||
Subject: [PATCH] Use host compiler to build 'gen' since it's run when
|
||||
building.
|
||||
|
||||
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
|
||||
[Fabrice: updated for 9.11.10]
|
||||
Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
|
||||
Signed-off-by: Petr Vorel <petr.vorel@gmail.com>
|
||||
---
|
||||
lib/dns/Makefile.in | 6 ++----
|
||||
1 file changed, 2 insertions(+), 4 deletions(-)
|
||||
|
||||
diff --git a/lib/dns/Makefile.in b/lib/dns/Makefile.in
|
||||
index 8fc4e94f26..4ac92857e0 100644
|
||||
--- a/lib/dns/Makefile.in
|
||||
+++ b/lib/dns/Makefile.in
|
||||
@@ -184,10 +184,8 @@ code.h: gen
|
||||
./gen -s ${srcdir} > code.h || { rm -f $@ ; exit 1; }
|
||||
|
||||
gen: gen.c
|
||||
- ${BUILD_CC} ${BUILD_CFLAGS} -I${top_srcdir}/lib/isc/include \
|
||||
- ${LFS_CFLAGS} ${LFS_LDFLAGS} \
|
||||
- ${BUILD_CPPFLAGS} ${BUILD_LDFLAGS} -o $@ ${srcdir}/gen.c \
|
||||
- ${BUILD_LIBS} ${LFS_LIBS}
|
||||
+ ${HOSTCC} ${HOST_CFLAGS} -I${top_srcdir}/lib/isc/include \
|
||||
+ ${HOST_LDFLAGS} -o $@ ${srcdir}/gen.c
|
||||
|
||||
timestamp: include libdns.@A@
|
||||
touch timestamp
|
||||
--
|
||||
2.29.1
|
||||
|
||||
@@ -0,0 +1,39 @@
|
||||
config BR2_PACKAGE_BIND
|
||||
bool "bind"
|
||||
depends on BR2_USE_MMU # fork()
|
||||
help
|
||||
BIND (Berkeley Internet Name Domain) is an
|
||||
implementation of the Domain Name System (DNS) protocols
|
||||
and provides an openly redistributable reference
|
||||
implementation of the major components of the Domain
|
||||
Name System, including:
|
||||
|
||||
* a Domain Name System server (named)
|
||||
* a Domain Name System resolver library
|
||||
* tools for verifying the proper operation of the DNS
|
||||
server
|
||||
|
||||
The BIND DNS Server is used on the vast majority of name
|
||||
serving machines on the Internet, providing a robust and
|
||||
stable architecture on top of which an organization's naming
|
||||
architecture can be built. The resolver library included in
|
||||
the BIND distribution provides the standard APIs for
|
||||
translation between domain names and Internet addresses and is
|
||||
intended to be linked with applications requiring name
|
||||
service.
|
||||
|
||||
https://www.isc.org/bind/
|
||||
|
||||
if BR2_PACKAGE_BIND
|
||||
|
||||
config BR2_PACKAGE_BIND_SERVER
|
||||
bool "Install server components"
|
||||
help
|
||||
Install server components (named, lwresd)
|
||||
|
||||
config BR2_PACKAGE_BIND_TOOLS
|
||||
bool "Install tools"
|
||||
help
|
||||
Install tools (dig, host, nslookup, nsupdate)
|
||||
|
||||
endif
|
||||
@@ -0,0 +1,38 @@
|
||||
#!/bin/sh
|
||||
|
||||
CONFIG=/etc/bind/named.conf
|
||||
DAEMON=/usr/sbin/named
|
||||
|
||||
[ -f $CONFIG ] || exit 0
|
||||
|
||||
case "$1" in
|
||||
start)
|
||||
if [ ! -f /etc/rndc.key ]; then
|
||||
printf "Initializing bind control key: "
|
||||
# if rndc.key is a symlink, the target must exist
|
||||
touch /etc/rndc.key
|
||||
rndc-confgen -a -r /dev/urandom 2>/dev/null && echo "OK" || echo "FAIL"
|
||||
fi
|
||||
printf "Starting domain name daemon: "
|
||||
start-stop-daemon -S -x $DAEMON -- -c $CONFIG -u named
|
||||
[ $? = 0 ] && echo "OK" || echo "FAIL"
|
||||
;;
|
||||
stop)
|
||||
printf "Stopping domain name daemon: "
|
||||
rndc stop || start-stop-daemon -K -x $DAEMON
|
||||
[ $? = 0 ] && echo "OK" || echo "FAIL"
|
||||
;;
|
||||
restart)
|
||||
$0 stop || true
|
||||
sleep 1
|
||||
$0 start
|
||||
;;
|
||||
reload|force-reload)
|
||||
rndc reload || $0 restart
|
||||
;;
|
||||
*)
|
||||
echo "Usage: $0 {start|stop|restart|reload|force-reload}"
|
||||
exit 1
|
||||
esac
|
||||
|
||||
exit 0
|
||||
@@ -0,0 +1,4 @@
|
||||
# Verified from https://ftp.isc.org/isc/bind9/9.11.36/bind-9.11.36.tar.gz.asc
|
||||
# with key AADBBA5074F1402F7B69D56BC5B4EE931A9F9DFD
|
||||
sha256 c953fcb6703b395aaa53e65ff8b2869b69a5303dd60507cba2201305e1811681 bind-9.11.36.tar.gz
|
||||
sha256 cad49daa42654bc241762cd998630168a2542c8fd6fad3881e2eac1510bb6fcd COPYRIGHT
|
||||
@@ -0,0 +1,134 @@
|
||||
################################################################################
|
||||
#
|
||||
# bind
|
||||
#
|
||||
################################################################################
|
||||
|
||||
BIND_VERSION = 9.11.36
|
||||
BIND_SITE = https://ftp.isc.org/isc/bind9/$(BIND_VERSION)
|
||||
# bind does not support parallel builds.
|
||||
BIND_MAKE = $(MAKE1)
|
||||
BIND_INSTALL_STAGING = YES
|
||||
BIND_CONFIG_SCRIPTS = bind9-config isc-config.sh
|
||||
BIND_LICENSE = MPL-2.0
|
||||
BIND_LICENSE_FILES = COPYRIGHT
|
||||
BIND_CPE_ID_VENDOR = isc
|
||||
BIND_SELINUX_MODULES = bind
|
||||
# Only applies to RHEL6.x with DNSSEC validation on
|
||||
BIND_IGNORE_CVES = CVE-2017-3139
|
||||
# Library CVE and not used by bind but used by ISC DHCP
|
||||
BIND_IGNORE_CVES += CVE-2019-6470
|
||||
BIND_TARGET_SERVER_SBIN = arpaname ddns-confgen dnssec-checkds dnssec-coverage
|
||||
BIND_TARGET_SERVER_SBIN += dnssec-importkey dnssec-keygen dnssec-revoke
|
||||
BIND_TARGET_SERVER_SBIN += dnssec-settime dnssec-verify genrandom
|
||||
BIND_TARGET_SERVER_SBIN += isc-hmac-fixup named-journalprint nsec3hash
|
||||
BIND_TARGET_SERVER_SBIN += lwresd named named-checkconf named-checkzone
|
||||
BIND_TARGET_SERVER_SBIN += named-compilezone rndc rndc-confgen dnssec-dsfromkey
|
||||
BIND_TARGET_SERVER_SBIN += dnssec-keyfromlabel dnssec-signzone tsig-keygen
|
||||
BIND_TARGET_TOOLS_BIN = dig host nslookup nsupdate
|
||||
BIND_CONF_ENV = \
|
||||
BUILD_CC="$(TARGET_CC)" \
|
||||
BUILD_CFLAGS="$(TARGET_CFLAGS)"
|
||||
BIND_CONF_OPTS = \
|
||||
$(if $(BR2_TOOLCHAIN_HAS_THREADS),--enable-threads,--disable-threads) \
|
||||
--without-lmdb \
|
||||
--with-libjson=no \
|
||||
--with-randomdev=/dev/urandom \
|
||||
--enable-epoll \
|
||||
--with-gssapi=no \
|
||||
--enable-filter-aaaa \
|
||||
--disable-backtrace
|
||||
|
||||
ifeq ($(BR2_PACKAGE_ZLIB),y)
|
||||
BIND_CONF_OPTS += --with-zlib=$(STAGING_DIR)/usr
|
||||
BIND_DEPENDENCIES += zlib
|
||||
else
|
||||
BIND_CONF_OPTS += --without-zlib
|
||||
endif
|
||||
|
||||
ifeq ($(BR2_PACKAGE_LIBCAP),y)
|
||||
BIND_CONF_OPTS += --enable-linux-caps
|
||||
BIND_DEPENDENCIES += libcap
|
||||
else
|
||||
BIND_CONF_OPTS += --disable-linux-caps
|
||||
endif
|
||||
|
||||
ifeq ($(BR2_PACKAGE_LIBXML2),y)
|
||||
BIND_CONF_OPTS += --with-libxml2=$(STAGING_DIR)/usr
|
||||
BIND_DEPENDENCIES += libxml2
|
||||
else
|
||||
BIND_CONF_OPTS += --with-libxml2=no
|
||||
endif
|
||||
|
||||
ifeq ($(BR2_PACKAGE_OPENSSL),y)
|
||||
BIND_DEPENDENCIES += host-pkgconf openssl
|
||||
BIND_CONF_OPTS += \
|
||||
--with-openssl=$(STAGING_DIR)/usr \
|
||||
--with-ecdsa=yes \
|
||||
--with-eddsa=no \
|
||||
--with-aes=yes
|
||||
BIND_CONF_ENV += LIBS=`$(PKG_CONFIG_HOST_BINARY) --libs openssl`
|
||||
# GOST cipher support requires openssl extra engines
|
||||
ifeq ($(BR2_PACKAGE_OPENSSL_ENGINES),y)
|
||||
BIND_CONF_OPTS += --with-gost=yes
|
||||
else
|
||||
BIND_CONF_OPTS += --with-gost=no
|
||||
endif
|
||||
else
|
||||
BIND_CONF_OPTS += --with-openssl=no
|
||||
endif
|
||||
|
||||
# Used by dnssec-keymgr
|
||||
ifeq ($(BR2_PACKAGE_PYTHON_PLY),y)
|
||||
BIND_DEPENDENCIES += host-python-ply
|
||||
BIND_CONF_OPTS += --with-python=$(HOST_DIR)/usr/bin/python
|
||||
else
|
||||
BIND_CONF_OPTS += --with-python=no
|
||||
endif
|
||||
|
||||
ifeq ($(BR2_PACKAGE_READLINE),y)
|
||||
BIND_DEPENDENCIES += readline
|
||||
else
|
||||
BIND_CONF_OPTS += --with-readline=no
|
||||
endif
|
||||
|
||||
ifeq ($(BR2_STATIC_LIBS),y)
|
||||
BIND_CONF_OPTS += \
|
||||
--without-dlopen \
|
||||
--without-libtool
|
||||
else
|
||||
BIND_CONF_OPTS += \
|
||||
--with-dlopen \
|
||||
--with-libtool
|
||||
endif
|
||||
|
||||
define BIND_TARGET_REMOVE_SERVER
|
||||
rm -rf $(addprefix $(TARGET_DIR)/usr/sbin/, $(BIND_TARGET_SERVER_SBIN))
|
||||
endef
|
||||
|
||||
define BIND_TARGET_REMOVE_TOOLS
|
||||
rm -rf $(addprefix $(TARGET_DIR)/usr/bin/, $(BIND_TARGET_TOOLS_BIN))
|
||||
endef
|
||||
|
||||
ifeq ($(BR2_PACKAGE_BIND_SERVER),y)
|
||||
define BIND_INSTALL_INIT_SYSV
|
||||
$(INSTALL) -m 0755 -D $(BIND_PKGDIR)/S81named \
|
||||
$(TARGET_DIR)/etc/init.d/S81named
|
||||
endef
|
||||
define BIND_INSTALL_INIT_SYSTEMD
|
||||
$(INSTALL) -D -m 644 $(BIND_PKGDIR)/named.service \
|
||||
$(TARGET_DIR)/usr/lib/systemd/system/named.service
|
||||
endef
|
||||
else
|
||||
BIND_POST_INSTALL_TARGET_HOOKS += BIND_TARGET_REMOVE_SERVER
|
||||
endif
|
||||
|
||||
ifeq ($(BR2_PACKAGE_BIND_TOOLS),)
|
||||
BIND_POST_INSTALL_TARGET_HOOKS += BIND_TARGET_REMOVE_TOOLS
|
||||
endif
|
||||
|
||||
define BIND_USERS
|
||||
named -1 named -1 * /etc/bind - - BIND daemon
|
||||
endef
|
||||
|
||||
$(eval $(autotools-package))
|
||||
@@ -0,0 +1,12 @@
|
||||
[Unit]
|
||||
Description=BIND Domain Name Server
|
||||
Documentation=man:named(8)
|
||||
After=network.target
|
||||
|
||||
[Service]
|
||||
ExecStart=/usr/sbin/named -f -u named
|
||||
ExecReload=/usr/sbin/rndc reload
|
||||
ExecStop=/usr/sbin/rndc stop
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
Reference in New Issue
Block a user