163 lines
3.9 KiB
Nix
163 lines
3.9 KiB
Nix
{
|
|
stdenv,
|
|
lib,
|
|
fetchurl,
|
|
darwin,
|
|
perl,
|
|
pkg-config,
|
|
libcap,
|
|
libidn2,
|
|
libtool,
|
|
libxml2,
|
|
openssl,
|
|
libuv,
|
|
nghttp2,
|
|
jemalloc,
|
|
enablePython ? false,
|
|
python3,
|
|
enableGSSAPI ? true,
|
|
libkrb5,
|
|
buildPackages,
|
|
nixosTests,
|
|
cmocka,
|
|
tzdata,
|
|
gitUpdater,
|
|
}:
|
|
|
|
stdenv.mkDerivation (finalAttrs: {
|
|
pname = "bind";
|
|
version = "9.18.28";
|
|
|
|
src = fetchurl {
|
|
url = "https://downloads.isc.org/isc/bind9/${finalAttrs.version}/${finalAttrs.pname}-${finalAttrs.version}.tar.xz";
|
|
hash = "sha256-58zpoWX3thnu/Egy8KjcFrAF0p44kK7WAIxQbqKGpec=";
|
|
};
|
|
|
|
outputs = [
|
|
"out"
|
|
"lib"
|
|
"dev"
|
|
"man"
|
|
"dnsutils"
|
|
"host"
|
|
];
|
|
|
|
patches = [
|
|
./dont-keep-configure-flags.patch
|
|
];
|
|
|
|
nativeBuildInputs = [
|
|
perl
|
|
pkg-config
|
|
];
|
|
buildInputs =
|
|
[
|
|
libidn2
|
|
libtool
|
|
libxml2
|
|
openssl
|
|
libuv
|
|
nghttp2
|
|
jemalloc
|
|
]
|
|
++ lib.optional stdenv.hostPlatform.isLinux libcap
|
|
++ lib.optional enableGSSAPI libkrb5
|
|
++ lib.optional enablePython (python3.withPackages (ps: with ps; [ ply ]))
|
|
++ lib.optionals stdenv.hostPlatform.isDarwin [ darwin.apple_sdk.frameworks.CoreServices ];
|
|
|
|
depsBuildBuild = [ buildPackages.stdenv.cc ];
|
|
|
|
configureFlags =
|
|
[
|
|
"--localstatedir=/var"
|
|
"--without-lmdb"
|
|
"--with-libidn2"
|
|
]
|
|
++ lib.optional enableGSSAPI "--with-gssapi=${libkrb5.dev}/bin/krb5-config"
|
|
++ lib.optional (stdenv.hostPlatform != stdenv.buildPlatform) "BUILD_CC=$(CC_FOR_BUILD)";
|
|
|
|
postInstall = ''
|
|
moveToOutput bin/bind9-config $dev
|
|
|
|
moveToOutput bin/host $host
|
|
|
|
moveToOutput bin/dig $dnsutils
|
|
moveToOutput bin/delv $dnsutils
|
|
moveToOutput bin/nslookup $dnsutils
|
|
moveToOutput bin/nsupdate $dnsutils
|
|
|
|
for f in "$lib/lib/"*.la "$dev/bin/"bind*-config; do
|
|
sed -i "$f" -e 's|-L${openssl.dev}|-L${lib.getLib openssl}|g'
|
|
done
|
|
|
|
cat <<EOF >$out/etc/rndc.conf
|
|
include "/etc/bind/rndc.key";
|
|
options {
|
|
default-key "rndc-key";
|
|
default-server 127.0.0.1;
|
|
default-port 953;
|
|
};
|
|
EOF
|
|
'';
|
|
|
|
enableParallelBuilding = true;
|
|
|
|
doCheck = false;
|
|
# TODO: investigate failures; see this and linked discussions:
|
|
# https://github.com/NixOS/nixpkgs/pull/192962
|
|
/*
|
|
doCheck = with stdenv.hostPlatform; !isStatic && !(isAarch64 && isLinux)
|
|
# https://gitlab.isc.org/isc-projects/bind9/-/issues/4269
|
|
&& !is32bit;
|
|
*/
|
|
checkTarget = "unit";
|
|
checkInputs =
|
|
[
|
|
cmocka
|
|
]
|
|
++ lib.optionals (!stdenv.hostPlatform.isMusl) [
|
|
tzdata
|
|
];
|
|
preCheck =
|
|
lib.optionalString stdenv.hostPlatform.isMusl ''
|
|
# musl doesn't respect TZDIR, skip timezone-related tests
|
|
sed -i '/^ISC_TEST_ENTRY(isc_time_formatISO8601L/d' tests/isc/time_test.c
|
|
''
|
|
+ lib.optionalString stdenv.hostPlatform.isDarwin ''
|
|
# Test timeouts on Darwin
|
|
sed -i '/^ISC_TEST_ENTRY(tcpdns_recv_one/d' tests/isc/netmgr_test.c
|
|
'';
|
|
|
|
passthru = {
|
|
tests = {
|
|
withCheck = finalAttrs.finalPackage.overrideAttrs { doCheck = true; };
|
|
inherit (nixosTests) bind;
|
|
prometheus-exporter = nixosTests.prometheus-exporters.bind;
|
|
kubernetes-dns-single-node = nixosTests.kubernetes.dns-single-node;
|
|
kubernetes-dns-multi-node = nixosTests.kubernetes.dns-multi-node;
|
|
};
|
|
|
|
updateScript = gitUpdater {
|
|
# No nicer place to find latest stable release.
|
|
url = "https://gitlab.isc.org/isc-projects/bind9.git";
|
|
rev-prefix = "v";
|
|
# Avoid unstable 9.19 releases.
|
|
odd-unstable = true;
|
|
};
|
|
};
|
|
|
|
meta = with lib; {
|
|
homepage = "https://www.isc.org/bind/";
|
|
description = "Domain name server";
|
|
license = licenses.mpl20;
|
|
changelog = "https://downloads.isc.org/isc/bind9/cur/${lib.versions.majorMinor finalAttrs.version}/CHANGES";
|
|
maintainers = with maintainers; [ globin ];
|
|
platforms = platforms.unix;
|
|
|
|
outputsToInstall = [
|
|
"out"
|
|
"dnsutils"
|
|
"host"
|
|
];
|
|
};
|
|
})
|