Knot DNS is a high-performance authoritative-only DNS server which
supports all key features of the domain name system including zone
AXFR and IXFR, DDNS and DNSSEC. Its key features:
* Open source
* High-performance, multi-threaded, and mostly lock-free
implementation which scales well on SMPs
* Object-oriented design
* Support for all important DNS protocols:
- Full and incremental zone transfers
- EDNS0 and DNSSEC extensions, including NSEC3
- NSID
WWW: https://www.knot-dns.cz/
===> The following configuration options are available for knot2-2.9.8:
DNSTAP=off: dnstap support (see dnstap.info)
DOCS=on: Build and/or install documentation
FASTPARSER=off: Fast zone parser (demanding compilation)
IDN=off: International Domain Names support
MAXMINDDB=off: Enable MaxMind for geodb module
===> Use 'make config' to modify these settings
Remove expired ports:
2021-02-28 audio/beatslash-lv2: Unmaintained and doesn't build with the latest
audio/lvtk version 2.x
2021-02-28 multimedia/kodi-addon-vfs.libarchive-devel: Depends on deprecated
multimedia/kodi-devel
2021-02-28 multimedia/kodi-addon-peripheral.joystick-devel: Depends on
deprecated multimedia/kodi-devel
2021-02-28 multimedia/kodi-devel: Deprecated. Please use multimedia/kodi
instead.
2021-02-28 multimedia/kodi-addon-inputstream.adaptive-devel: Depends on
deprecated multimedia/kodi-devel
2021-02-28 print/cloud-print-connector: Google Cloud Print has been shut down by
Google as of December 31, 2020
2021-02-28 dns/knot2: Use knot3, it is functionally compatible with 2.9.x
2021-02-28 print/cups-cloud-print: Google Cloud Print has been shut down by
Google as of December 31, 2020
2021-02-28 www/helma: Upstream is basically dead and recommends ringojs.org
dns/knot2: Update to 2.9.6
Changelog: https://www.knot-dns.cz/2020-08-31-version-296.html
Remove Python from DOCS option, it is not necessary at this moment. [1]
PR: 249169
PR: 243374 [1]
Submitted by: Leo Vandewoestijne <freebsd@dns.company> (maintainer)
Reported by: alex_y_xu@yahoo.ca [1]
Multiple ports: improve regex compliance
These changes largely fall into just two categories:
1. Need textproc/gsed for GNU extensions
2. Extraneous escapes that can go away
For #1, there's a further subdivision into those that require autoconf magic
and those that can get away with BINARY_ALIAS=sed=${LOCALBASE}/bin/gsed.
-CURRENT will soon gain GNU extensions, but these will take longer to get to
all supported releases; we must switch them to gsed to ensure we're actually
properly building them as intended.
For #2, I've fixed these as I can and we should upstream these fixes.
(Only the first 15 lines of the commit message are shown above )
sysutils/liburcu: update to 0.12.1
Since the library version changes from 6.0.0 to 6.1.0:
All ports that depend on liburcu in default configuration get
PORTREVISION bumped. All were build-tested in 12.1 amd64 poudriere bulk -t.
Reset maintainer (mmokhi@), repeated maintainer timeout.
PR: 243768
Reported by: alex_y_xu@yahoo.ca
Approved by: maintainer timeout (mmokhi, 88 d)
Bump PORTREVISION for ports depending on the canonical version of GCC
as defined in Mk/bsd.default-versions.mk which has moved from GCC 8.3
to GCC 9.1 under most circumstances now after revision 507371.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, everything INDEX-11 shows with a dependency on lang/gcc9 now.
PR: 238330
dns/knot2: Update from 2.7.6 to 2.8.1
Changelog:
Improvements:
- Possible zone transaction is aborted by zone events to avoid inconsistency
- Added log message if no persistent config DB is available during 'conf-begin'
- New environment setting 'KNOT_VERSION_FORMAT=release' for extended version
suppression
- Various improvements in the documentation
Bugfixes:
- Broken NSEC3-wildcard-nonexistence proof after NSEC3 re-salt
- Glue records under delegation are sometimes signed
- RRL doesn't work correctly on big-endian architectures
- NSEC3 not re-salted during AXFR refresh
- Failed to sign new zone contents if added dynamically #641
- NSEC3 opt-out signing doesn't work in some cases
- Broken NSEC3 chain after adding new sub-delegations
- Redundant SOA RRSIG on slave if RRSIG TTL changed on master
- Sometimes confusing log error message for NOTIFY event
- Improper include for LMDB #638
PR: 237371
Submitted by: Leo Vandewoestijne <freebsd@dns.company>
Approved by: Leo Vandewoestijne (maintainer)
dns/knot2: update to 2.7.5
While here, patch init script to support automatically determining
config type
PR: 234751
Submitted by: Leo Vandewoestijne <freebsd@dns.company> (maintainer)
Bump PORTREVISION for ports depending on the canonical version of GCC
defined via Mk/bsd.default-versions.mk which has moved from GCC 7.4 t
GCC 8.2 under most circumstances.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c11, c++0x, c++11-lang,
c++11-lib, c++14-lang, c++17-lang, or gcc-c++11-lib
plus, as a double check, everything INDEX-11 showed depending on lang/gcc7.
PR: 231590
dns/knot2-lib: create port
This port allows to install only libknot, which comes along with
Knot DNS (authoritative), but also is a depency of knot-resolver
WWW: https://www.knot-dns.cz/
PR: 233165 (with minor changes to dns/knot2)
Submitted by: Leo Vandewoestijne <freebsd@dns.company> (dns/knot2 maintainer)
Remove compatibility code for FreeBSD < 11.2 from all ports.
Simplify some ports where DragonFlyBSD no longer needs to be special-cased.
Submitted by: rene
Reviewed by: bapt, jbeich
Differential Revision: https://reviews.freebsd.org/D17724
Bump PORTREVISION for ports depending on the canonical version of GCC
in the ports tree (via Mk/bsd.default-versions.mk and lang/gcc) which
has now moved from GCC 6 to GCC 7 by default.
This includes ports
- featuring USE_GCC=yes or USE_GCC=any,
- featuring USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and those
- with USES=compiler specifying one of openmp, nestedfct, c11, c++0x,
c++11-lib, c++11-lang, c++14-lang, c++17-lang, or gcc-c++11-lib.
PR: 222542
Bump PORTREVISION for ports depending on the canonical version of GCC
(via Mk/bsd.default-versions.mk and lang/gcc) which has moved from
GCC 5.4 to GCC 6.4 under most circumstances.
This includes ports
- with USE_GCC=yes or USE_GCC=any,
- with USES=fortran,
- using Mk/bsd.octave.mk which in turn features USES=fortran, and
- with USES=compiler specifying openmp, nestedfct, c++11-lib, c++11-lang,
c++14-lang, c++0x, c11, or gcc-c++11-lib.
PR: 219275
sysutils/liburcu: Update port to 0.10.0
Bump revision for consumer ports.
This version contains many fix/features:
* Bump library soname due to urcu flavor structure change
* Cleanup: use mutex_lock() wrapper in rculfhash
* Use workqueue in rculfhash
* Implement urcu workqueues internal API
* Add support for m68k architecture
* Set -Wall globally in AM_CFLAGS
* Fix: remove double use of PTHREAD_CFLAGS
* Re-add PTHREAD_CFLAGS to global CFLAGS
* Fix: Don't override user variables within the build system
* Add report at the end of configure
* uatomic-api docs: use the third-person singular
(Only the first 15 lines of the commit message are shown above )
Update to 2.5.2
This solves a problem with pykeymgr being unable to load the lmdb
module.
PR: 220241, 220258
Submitted by: freebsd@dns-lab.com (maintainer)
Update to 2.5.1
* Add new USES: autoreconf, localbase, python, shebangfix
* Mark broken on i386 --
undefined reference to '__atomic_fetch_add_8'
* Move libfstrm.so dependency so it is only added when the
DNSTAP option is enabled.
PR: 220205
Submitted by: freebsd@dns-lab.com (maintainer)
dns/knot2: update 2.3.1 -> 2.3.2
- Disable recvmmsg by default, this impacted UDP queries on 11.0-RELEASE.
It was later fixed in 11/stable in r307311 but enabling conditionally
provides little benefit so just disable by default as part of update.
PR: 213952, 214303
Submitted by: Leo Vandewoestijne <freebsd@dns-lab.com> (maintainer)
Most commonly used build systems support silent builds, when they
hide actual commands executed and only show short summary line (like
"CC foo.c"). CMake and ninja enable this by default, some autotools
using ports do as well. This is unacceptable because we need complete
build logs at any time, so we now switch to verbose build logs
unconditionally. Note that this change deliberately affects ALL
builds and not only package builds on cluster, because we need to
be sure that user experiencing failure can always provide informative
build log regardless of settings and without rerunning the build.
Change summary:
- Always do verbose builds for cmake, ninja and GNU configure (the
latter includes check if --disable-silent-rules is actually supported
by the configure script; there are isolated cases when it's not true)
(Only the first 15 lines of the commit message are shown above )
- Update security/gnutls to 3.4.10.
- Rename the LIBDANE option DANE because that's the name of the protocol
supported by libgnutls-dane and gnutls-cli. Also clarify the option
description.
- Add an IDN option.
- libgnutls-openssl has been removed in 3.4. Some ports used this library
in their LIB_DEPENDS but no port actually required it.
- Some old API functions have been removed. Ports that used these have been
updated or patched to use the new API.
- Add a patch to print/cups to prevent overlinking of libgnutls.so.
- Bump PORTREVISION on dependent ports.
net-im/jabber: This port used the old API to give users fine grained
control over which crypto algorithms were used via a configuration file.
It's not immediately obvious how to port this to the new API so the port
always uses the defaults now.
www/hydra: Mark BROKEN. This uses more removed calls than the other ports,
is said to be alpha quality and not fully functional and has been abandoned
10 years ago.
PR: 207768
Exp-run by: antoine
Approved by: portmgr (antoine)
Unbreak the build with (non-default) DNSTAP option set. The root cause
here is that `kdig_CPPFLAGS += $(DNSTAP_CFLAGS)' line is missing from the
`src/Makefile.am' file (and thus pre-generated `src/Makefile.in') which
should contain "$libfstrm_CFLAGS $libprotobuf_c_CFLAGS" set by configure
script.
As I'd rather avoid patching `src/Makefile.in' and don't want to request
regeneration thereof, provide DNSTAP_CPPFLAGS explicitly for the moment,
while ideally this bug should be fixed upstream. Add an accompanying XXX
comment about it.
PR: 203931 (partially)
Add knot2 beta, the next major release of the Knot DNS
high-performance authoritative-only DNS server
PR: 199868
Submitted by: Leo Vandewoestijne <freebsd@dns-lab.com>
