From 3d13db08a16357df1f95f132c20eb38b190e8a78 Mon Sep 17 00:00:00 2001 From: Peter van Dijk Date: Fri, 22 Aug 2025 12:52:44 +0200 Subject: [PATCH] pdns: update to 5.0.2 updates pdns.conf-dist Signed-off-by: Peter van Dijk --- net/pdns/Makefile | 4 +- net/pdns/files/pdns.conf-dist | 48 +++++++++++++++---- .../100-pdns-disable-pdns.conf-dist.patch | 8 ++-- 3 files changed, 45 insertions(+), 15 deletions(-) diff --git a/net/pdns/Makefile b/net/pdns/Makefile index 32f931804cc93f..b3b12686ad3129 100644 --- a/net/pdns/Makefile +++ b/net/pdns/Makefile @@ -1,12 +1,12 @@ include $(TOPDIR)/rules.mk PKG_NAME:=pdns -PKG_VERSION:=4.9.7 +PKG_VERSION:=5.0.2 PKG_RELEASE:=1 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.bz2 PKG_SOURCE_URL:=https://downloads.powerdns.com/releases/ -PKG_HASH:=782875d210de20cee9f22f33ffc59ef1cdc6693c30efcb21f3ce8bf528fb09d4 +PKG_HASH:=d360e1fa127a562a4ad0ff648aef56af76b678311c6553a7f7034677438a085d PKG_MAINTAINER:=Peter van Dijk , Remi Gacogne PKG_LICENSE:=GPL-2.0-only diff --git a/net/pdns/files/pdns.conf-dist b/net/pdns/files/pdns.conf-dist index e5765aad8d2128..a13abe56a1ebe5 100644 --- a/net/pdns/files/pdns.conf-dist +++ b/net/pdns/files/pdns.conf-dist @@ -108,7 +108,7 @@ ################################# # config-dir Location of configuration directory (pdns.conf) # -# config-dir=/usr/local/etc +# config-dir=/etc/powerdns ################################# # config-name Name of this virtual configuration - will rename the binary image @@ -200,6 +200,11 @@ # # direct-dnskey=no +################################# +# direct-dnskey-signature Fetch signature of DNSKEY RRs from backend directly +# +# direct-dnskey-signature=no + ################################# # disable-axfr Disable zonetransfers but do allow TCP queries # @@ -225,6 +230,11 @@ # # dname-processing=no +################################# +# dnsproxy-udp-port-range Select DNS Proxy outgoing UDP port from given range (lower upper) +# +# dnsproxy-udp-port-range=10000 60000 + ################################# # dnssec-key-cache-ttl Seconds to cache DNSSEC keys from the database # @@ -256,7 +266,7 @@ # edns-subnet-processing=no ################################# -# enable-lua-records Process LUA records for all zones (metadata overrides this) +# enable-lua-records Process Lua records for all zones (metadata overrides this) # # enable-lua-records=no @@ -356,7 +366,7 @@ # lua-consistent-hashes-cleanup-interval=3600 ################################# -# lua-consistent-hashes-expire-delay Cleanup pre-computed hashes that haven't been used for the given delay (in seconds). See pickchashed() LUA function +# lua-consistent-hashes-expire-delay Cleanup pre-computed hashes that haven't been used for the given delay (in seconds). See pickchashed() Lua function # # lua-consistent-hashes-expire-delay=86400 @@ -365,13 +375,18 @@ # # lua-dnsupdate-policy-script= +################################# +# lua-global-include-dir Include *.lua files from this directory into Lua contexts +# +# lua-global-include-dir= + ################################# # lua-health-checks-expire-delay Stops doing health checks after the record hasn't been used for that delay (in seconds) # # lua-health-checks-expire-delay=3600 ################################# -# lua-health-checks-interval LUA records health checks monitoring interval in seconds +# lua-health-checks-interval Lua records health checks monitoring interval in seconds # # lua-health-checks-interval=5 @@ -381,12 +396,12 @@ # lua-prequery-script= ################################# -# lua-records-exec-limit LUA records scripts execution limit (instructions count). Values <= 0 mean no limit +# lua-records-exec-limit Lua records scripts execution limit (instructions count). Values <= 0 mean no limit # # lua-records-exec-limit=1000 ################################# -# lua-records-insert-whitespace Insert whitespace when combining LUA chunks +# lua-records-insert-whitespace Insert whitespace when combining Lua chunks # # lua-records-insert-whitespace=no @@ -453,7 +468,7 @@ ################################# # module-dir Default directory for modules # -# module-dir=/usr/local/lib/pdns +# module-dir=/usr/lib/powerdns/pdns ################################# # negquery-cache-ttl Seconds to store negative query results in the QueryCache @@ -530,6 +545,11 @@ # # receiver-threads=1 +################################# +# resolve-across-zones Resolve CNAME targets and other referrals across local zones +# +# resolve-across-zones=yes + ################################# # resolver Use this resolver for ALIAS and the internal stub resolver # @@ -596,7 +616,7 @@ # signing-threads=3 ################################# -# socket-dir Where the controlsocket will live, /var/run/pdns when unset and not chrooted. Set to the RUNTIME_DIRECTORY environment variable when that variable has a value (e.g. under systemd). +# socket-dir Where the controlsocket will live, /var/run/pdns when unset and not chrooted # # socket-dir= @@ -660,13 +680,18 @@ # # version-string=full +################################# +# views Enable views (variants) of zones, for backends which support them +# +# views=no + ################################# # webserver Start a webserver for monitoring (api=yes also enables the HTTP listener) # # webserver=no ################################# -# webserver-address IP Address of webserver/API to listen on +# webserver-address IP Address or path to UNIX domain socket for webserver/API to listen on # # webserver-address=127.0.0.1 @@ -675,6 +700,11 @@ # # webserver-allow-from=127.0.0.1,::1 +################################# +# webserver-connection-timeout Webserver/API request/response timeout in seconds +# +# webserver-connection-timeout=5 + ################################# # webserver-hash-plaintext-credentials Whether to hash passwords and api keys supplied in plaintext, to prevent keeping the plaintext version in memory at runtime # diff --git a/net/pdns/patches/100-pdns-disable-pdns.conf-dist.patch b/net/pdns/patches/100-pdns-disable-pdns.conf-dist.patch index d5d77325b66098..bd95c1c4b9147f 100644 --- a/net/pdns/patches/100-pdns-disable-pdns.conf-dist.patch +++ b/net/pdns/patches/100-pdns-disable-pdns.conf-dist.patch @@ -1,6 +1,6 @@ --- a/pdns/Makefile.am +++ b/pdns/Makefile.am -@@ -82,7 +82,6 @@ CLEANFILES = \ +@@ -78,7 +78,6 @@ CLEANFILES = \ backends/gsql/gsqlbackend.gcda \ backends/gsql/gsqlbackend.gcno \ backends/gsql/gsqlbackend.gcov \ @@ -8,7 +8,7 @@ apidocfiles.h if !HAVE_API_SWAGGER_JSON -@@ -116,8 +115,6 @@ apidocfiles.h: api-swagger.yaml api-swag +@@ -112,8 +111,6 @@ apidocfiles.h: api-swagger.yaml api-swag $(AM_V_GEN)$(srcdir)/incfiles $^ > $@.tmp @mv $@.tmp $@ @@ -17,7 +17,7 @@ sbin_PROGRAMS = pdns_server bin_PROGRAMS = \ pdns_control \ -@@ -157,7 +154,7 @@ if IXFRDIST +@@ -151,7 +148,7 @@ if IXFRDIST bin_PROGRAMS += \ ixfrdist @@ -26,7 +26,7 @@ ixfrdist.example.yml endif -@@ -1342,9 +1339,6 @@ dnspcap2protobuf_LDADD = \ +@@ -1333,9 +1330,6 @@ dnspcap2protobuf_LDADD = \ $(BOOST_PROGRAM_OPTIONS_LIBS) \ $(RT_LIBS)