The package rpms/knot-resolver.git has added or updated architecture specific content in
its
spec file (ExclusiveArch/ExcludeArch or %ifarch/%ifnarch) in commit(s):
https://src.fedoraproject.org/cgit/rpms/knot-resolver.git/commit/?id=399f....
Change:
+ExclusiveArch: %{arm} aarch64 %{ix86} x86_64
Thanks.
Full change:
============
commit 399ff667c63b07f89216733c6c64f7e674539959
Author: Tomas Krizek <tomas.krizek(a)nic.cz>
Date: Tue Jul 3 12:14:27 2018 +0200
new upstream release 2.4.0
diff --git a/knot-resolver.spec b/knot-resolver.spec
index bf55bbe..57c8443 100644
--- a/knot-resolver.spec
+++ b/knot-resolver.spec
@@ -1,7 +1,7 @@
%global _hardened_build 1
%define GPG_CHECK 1
-%define VERSION 2.3.0
+%define VERSION 2.4.0
%define repodir %{_builddir}/%{name}-%{version}
Name: knot-resolver
@@ -16,9 +16,9 @@ Source0:
https://secure.nic.cz/files/%{name}/%{name}-%{version}.tar.xz
# LuaJIT only on these arches
%if 0%{?rhel}
# RHEL 7 does not have aarch64 LuaJIT
-ExclusiveArch: %{ix86} x86_64
+ExclusiveArch: %{ix86} x86_64
%else
-ExclusiveArch: %{arm} aarch64 %{ix86} x86_64
+ExclusiveArch: %{arm} aarch64 %{ix86} x86_64
%endif
Source2: kresd.conf
@@ -29,49 +29,47 @@ Source1:
https://secure.nic.cz/files/%{name}/%{name}-%{version}.tar.xz.as
# PGP keys used to sign upstream releases
# Export with --armor using command from
https://fedoraproject.org/wiki/PackagingDrafts:GPGSignatures
# Don't forget to update %%prep section when adding/removing keys
-Source100: gpgkey-B6006460B60A80E782062449E747DF1F9575A3AA.gpg.asc
-Source101: gpgkey-BE26EBB9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc
-Source102: gpgkey-4A8BA48C2AED933BD495C509A1FBA5F7EF8C4869.gpg.asc
+Source100: gpgkey-B6006460B60A80E782062449E747DF1F9575A3AA.gpg.asc
+Source101: gpgkey-BE26EBB9CBE059B3910CA35BCE8DD6A1A50A21E4.gpg.asc
+Source102: gpgkey-4A8BA48C2AED933BD495C509A1FBA5F7EF8C4869.gpg.asc
BuildRequires: gnupg2
%endif
-BuildRequires: pkgconfig(libknot) >= 2.6.4
+BuildRequires: pkgconfig(cmocka)
+BuildRequires: pkgconfig(gnutls)
+BuildRequires: pkgconfig(libedit)
+BuildRequires: pkgconfig(libknot) >= 2.6.7
BuildRequires: pkgconfig(libzscanner) >= 2.4.2
BuildRequires: pkgconfig(libdnssec) >= 2.3.1
+BuildRequires: pkgconfig(libsystemd)
BuildRequires: pkgconfig(libuv)
BuildRequires: pkgconfig(luajit) >= 2.0
+BuildRequires: pkgconfig(systemd)
-BuildRequires: pkgconfig(libedit)
-BuildRequires: pkgconfig(libmemcached) >= 1.0
-BuildRequires: pkgconfig(hiredis)
-BuildRequires: pkgconfig(libsystemd)
-
-BuildRequires: pkgconfig(cmocka)
-
-BuildRequires: systemd
-
-%if 0%{?fedora}
-# dependencies for doc package; disable in EPEL (missing fonts)
-#
https://bugzilla.redhat.com/show_bug.cgi?id=1492884
-BuildRequires: doxygen
-BuildRequires: python2-breathe
-BuildRequires: python2-sphinx
-BuildRequires: python2-sphinx_rtd_theme
-%endif
-
-# Lua 5.1 version of the libraries have different package names
%if 0%{?rhel}
+BuildRequires: lmdb-devel
+# Lua 5.1 version of the libraries have different package names
Requires: lua-socket
Requires: lua-sec
%else
+BuildRequires: pkgconfig(lmdb)
Requires: lua-socket-compat
Requires: lua-sec-compat
%endif
-Requires(pre): shadow-utils
-Requires(post): systemd
-Requires(preun): systemd
-Requires(postun): systemd
+%if 0%{?fedora}
+# dependencies for doc package; disable in EPEL (missing fonts)
+#
https://bugzilla.redhat.com/show_bug.cgi?id=1492884
+BuildRequires: doxygen
+BuildRequires: python3-breathe
+BuildRequires: python3-sphinx
+BuildRequires: python3-sphinx_rtd_theme
+%endif
+
+Requires(pre): shadow-utils
+Requires(post): systemd
+Requires(preun): systemd
+Requires(postun): systemd
%description
The Knot DNS Resolver is a caching full resolver implementation written in C
@@ -121,6 +119,9 @@ rm -v scripts/bootstrap-depends.sh
make doc
%endif
+%check
+make %{?_smp_mflags} check
+
%install
%make_install %{build_flags}
@@ -137,24 +138,27 @@ install -m 0664 -p %SOURCE3
%{buildroot}%{_sysconfdir}/knot-resolver/root.keys
# install systemd units and doc
mkdir -p %{buildroot}%{_unitdir}
-install -m 0644 -p %{repodir}/systemd/kresd@.service
%{buildroot}%{_unitdir}/kresd@.service
+install -m 0644 -p %{repodir}/distro/common/systemd/kresd@.service
%{buildroot}%{_unitdir}/kresd@.service
+install -m 0644 -p %{repodir}/distro/common/systemd/kresd.target
%{buildroot}%{_unitdir}/kresd.target
+install -m 0755 -d %{buildroot}%{_unitdir}/multi-user.target.wants
+ln -s ../kresd.target %{buildroot}%{_unitdir}/multi-user.target.wants/kresd.target
mkdir -p %{buildroot}%{_mandir}/man7
-install -m 0644 -p %{repodir}/doc/kresd.systemd.7
%{buildroot}%{_mandir}/man7/kresd.systemd.7
+install -m 0644 -p %{repodir}/distro/common/systemd/kresd.systemd.7
%{buildroot}%{_mandir}/man7/kresd.systemd.7
%if 0%{?rhel}
# no socket activation for CentOS 7 (requires systemd.227)
mkdir -p %{buildroot}%{_unitdir}/kresd@.service.d
-install -m 0644 -p %{repodir}/systemd/drop-in/systemd-compat.conf
%{buildroot}%{_unitdir}/kresd@.service.d/override.conf
+install -m 0644 -p %{repodir}/distro/common/systemd/drop-in/systemd-compat.conf
%{buildroot}%{_unitdir}/kresd@.service.d/override.conf
%endif
%if 0%{?fedora}
-install -m 0644 -p %{repodir}/systemd/kresd.socket %{buildroot}%{_unitdir}/kresd.socket
-install -m 0644 -p %{repodir}/systemd/kresd-control@.socket
%{buildroot}%{_unitdir}/kresd-control@.socket
-install -m 0644 -p %{repodir}/systemd/kresd-tls.socket
%{buildroot}%{_unitdir}/kresd-tls.socket
+install -m 0644 -p %{repodir}/distro/common/systemd/kresd.socket
%{buildroot}%{_unitdir}/kresd.socket
+install -m 0644 -p %{repodir}/distro/common/systemd/kresd-control@.socket
%{buildroot}%{_unitdir}/kresd-control@.socket
+install -m 0644 -p %{repodir}/distro/common/systemd/kresd-tls.socket
%{buildroot}%{_unitdir}/kresd-tls.socket
%endif
# install tmpfiles.d
mkdir -p %{buildroot}%{_tmpfilesdir}
-install -m 0644 -p %{repodir}/systemd/tmpfiles/knot-resolver.conf
%{buildroot}%{_tmpfilesdir}/knot-resolver.conf
+install -m 0644 -p %{repodir}/distro/common/tmpfiles/knot-resolver.conf
%{buildroot}%{_tmpfilesdir}/knot-resolver.conf
mkdir -p %{buildroot}%{_rundir}
install -m 0750 -d %{buildroot}%{_rundir}/knot-resolver
@@ -165,16 +169,12 @@ install -m 0750 -d
%{buildroot}%{_localstatedir}/cache/knot-resolver
# remove module with unsatisfied dependencies
rm -r %{buildroot}%{_libdir}/kdns_modules/{http,http.lua}
-%check
-# check-config requires installed version of kresd, do not attempt to run that
-LD_PRELOAD=lib/libkres.so make check-unit %{build_flags}
LDFLAGS="%{__global_ldflags} -ldl"
-
%pre
getent group knot-resolver >/dev/null || groupadd -r knot-resolver
getent passwd knot-resolver >/dev/null || useradd -r -g knot-resolver -d
%{_sysconfdir}/knot-resolver -s /sbin/nologin -c "Knot DNS Resolver"
knot-resolver
%post
-%systemd_post system-kresd.slice
+%systemd_post 'kresd(a)*.service'
/sbin/ldconfig
# TODO: can be removed when Fedora 27 is no longer supported and migration is no longer
necessary
@@ -200,10 +200,11 @@ if [ -d "/run/kresd" ]; then
fi
%preun
-%systemd_preun system-kresd.slice
+%systemd_preun 'kresd(a)*.service' kresd.target kresd.socket kresd-tls.socket
%postun
-%systemd_postun_with_restart system-kresd.slice
+# NOTE: this doesn't restart the services on CentOS 7
+%systemd_postun_with_restart 'kresd(a)*.service'
/sbin/ldconfig
%files
@@ -216,6 +217,8 @@ fi
%attr(644,root,knot-resolver) %config(noreplace)
%{_sysconfdir}/knot-resolver/icann-ca.pem
%attr(750,knot-resolver,knot-resolver) %dir %{_localstatedir}/cache/knot-resolver
%{_unitdir}/kresd*.service
+%{_unitdir}/kresd.target
+%{_unitdir}/multi-user.target.wants/kresd.target
%if 0%{?rhel}
%{_unitdir}/kresd@.service.d/override.conf
%endif
@@ -241,6 +244,43 @@ fi
%endif
%changelog
+* Tue Jul 03 2018 Tomas Krizek <tomas.krizek(a)nic.cz> - 2.4.0-1
+Knot Resolver 2.4.0 (2018-07-03)
+================================
+
+Incompatible changes
+--------------------
+- minimal libknot version is now 2.6.7 to pull in latest fixes (#366)
+
+Security
+--------
+- fix a rare case of zones incorrectly dowgraded to insecure status (!576)
+
+New features
+------------
+- TLS session resumption (RFC 5077), both server and client (!585, #105)
+ (disabled when compiling with gnutls < 3.5)
+- TLS_FORWARD policy uses system CA certificate store by default (!568)
+- aggressive caching for NSEC3 zones (!600)
+- optional protection from DNS Rebinding attack (module rebinding, !608)
+- module bogus_log to log DNSSEC bogus queries without verbose logging (!613)
+
+Bugfixes
+--------
+- prefill: fix ability to read certificate bundle (!578)
+- avoid turning off qname minimization in some cases, e.g. co.uk. (#339)
+- fix validation of explicit wildcard queries (#274)
+- dns64 module: more properties from the RFC implemented (incl. bug #375)
+
+Improvements
+------------
+- systemd: multiple enabled kresd instances can now be started using kresd.target
+- ta_sentinel: switch to version 14 of the RFC draft (!596)
+- support for glibc systems with a non-Linux kernel (!588)
+- support per-request variables for Lua modules (!533)
+- support custom HTTP endpoints for Lua modules (!527)
+
+
* Mon Apr 23 2018 Tomas Krizek <tomas.krizek(a)nic.cz> - 2.3.0-1
Knot Resolver 2.3.0 (2018-04-23)
================================
diff --git a/sources b/sources
index 012f7d0..3999601 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (knot-resolver-2.3.0.tar.xz) =
030594d6b096092962ce5f5c09a4d3a429433837f26b8bbdbaeba3ae201dd12ab8511e8314bd0f1d6f1b6f08d1d57e978425798fe31da4451f798e08610cff36
-SHA512 (knot-resolver-2.3.0.tar.xz.asc) =
06dc8a3bc15d962c1a0eb819191f7b34ce3ef142c3d1b989c54a469f498b4240a8c4b3dfe4c33c7e99686589ef1c918192c991cc6dcf2c87aa180aab629a1035
+SHA512 (knot-resolver-2.4.0.tar.xz) =
bc40d39b1008e72ac747b8d2f3eb33c96819fe4c16ef2f46005cf523717f45ebb4c94927195e687d7243c870739d7db7901edc3ee47d768fbc52f9b4d4b742aa
+SHA512 (knot-resolver-2.4.0.tar.xz.asc) =
4ebb37e95984375244ef2146a7283f571ee4164c0ffcaea1bd23ed0a2822e3261d365d7a43443ce596ddad771b995e97b1c7f311b090e72e8e97edc1b389d0de