1 |
%define sdb 1 |
2 |
%define geoip 0 |
3 |
%define gssapi 1 |
4 |
|
5 |
%{?_with_sdbp: %{expand: %%global sdb 1}} |
6 |
%{?_without_sdb: %{expand: %%global sdb 0}} |
7 |
%{?_with_geoip: %{expand: %%global geoip 1}} |
8 |
%{?_without_geoip: %{expand: %%global geoip 0}} |
9 |
%{?_with_gssapi: %{expand: %%global gssapi 1}} |
10 |
%{?_without_gssapi: %{expand: %%global gssapi 0}} |
11 |
|
12 |
%define major_version 9.9.2 |
13 |
%define patch_version P2 |
14 |
%define dashpatch %{?patch_version:-%patch_version}%nil |
15 |
%define dotpatch %{?patch_version:.%patch_version}%nil |
16 |
%define chroot_prefix /var/lib/named |
17 |
|
18 |
Name: bind |
19 |
Version: %{major_version}%{dotpatch} |
20 |
Release: %mkrel 2 |
21 |
Summary: A DNS (Domain Name System) server |
22 |
License: ISC |
23 |
Group: System/Servers |
24 |
URL: http://www.isc.org/products/BIND/ |
25 |
Source0: ftp://ftp.isc.org/isc/%{name}9/%{major_version}%{dashpatch}/%{name}-%{major_version}%{dashpatch}.tar.gz |
26 |
Source1: ftp://ftp.isc.org/isc/%{name}9/%{major_version}%{dashpatch}/%{name}-%{major_version}%{dashpatch}.tar.gz.sha512.asc |
27 |
|
28 |
Source6: named.sysconfig |
29 |
Source7: named.logrotate |
30 |
Source8: named.NetworkManager |
31 |
Source11: ftp://ftp.internic.net/domain/named.cache |
32 |
Source20: bind-keygen.c |
33 |
Source40: bind.tmpfiles |
34 |
Source41: named.service |
35 |
Source42: named-sdb.service |
36 |
Source43: setup-named-chroot.sh |
37 |
|
38 |
# sdb |
39 |
Source30: ldap2zone.c |
40 |
Source31: ldap2zone.1 |
41 |
Source32: named-sdb.8 |
42 |
Source33: zonetodb.1 |
43 |
Source34: zone2sqlite.1 |
44 |
Source35: bind-9.3.1rc1-sdb_tools-Makefile.in |
45 |
Source36: dnszone.schema |
46 |
Source37: README.sdb_pgsql |
47 |
|
48 |
Source100: named.conf |
49 |
Source102: named.root.key |
50 |
Source103: trusted-key.key |
51 |
Source105: rndc.key |
52 |
Source110: named.ca |
53 |
Source111: named.localhost |
54 |
Source112: named.empty |
55 |
Source113: named.loopback |
56 |
|
57 |
# fedora patches |
58 |
Patch5: bind-nonexec.patch |
59 |
Patch10: bind-9.5-PIE.patch |
60 |
Patch72: bind-9.5-dlz-64bit.patch |
61 |
Patch87: bind-9.5-parallel-build.patch |
62 |
Patch99: bind-96-libtool2.patch |
63 |
Patch101: bind-96-old-api.patch |
64 |
Patch102: bind-95-rh452060.patch |
65 |
Patch106: bind93-rh490837.patch |
66 |
Patch107: bind97-dist-pkcs11.patch |
67 |
Patch109: bind97-rh478718.patch |
68 |
Patch110: bind97-rh570851.patch |
69 |
Patch111: bind97-exportlib.patch |
70 |
Patch112: bind97-rh645544.patch |
71 |
Patch119: bind97-rh693982.patch |
72 |
Patch123: bind98-rh735103.patch |
73 |
Patch124: nslookup-norec.patch |
74 |
Patch125: bind99-buildfix.patch |
75 |
Patch127: bind99-forward.patch |
76 |
Patch130: bind-9.9.2-dlz-libdb4.patch |
77 |
Patch131: bind-9.9.1-P2-multlib-conflict.patch |
78 |
Patch132: bind99-stat.patch |
79 |
|
80 |
# SDB patches |
81 |
Patch11: bind-9.3.2b2-sdbsrc.patch |
82 |
Patch12: bind-9.5-sdb.patch |
83 |
Patch62: bind-9.5-sdb-sqlite-bld.patch |
84 |
|
85 |
# needs inpection |
86 |
Patch17: bind-9.3.2b1-fix_sdb_ldap.patch |
87 |
Patch104: bind-96-dyndb.patch |
88 |
|
89 |
# IDN patches |
90 |
Patch73: bind-9.5-libidn.patch |
91 |
Patch83: bind-9.5-libidn2.patch |
92 |
Patch85: bind-9.5-libidn3.patch |
93 |
Patch94: bind95-rh461409.patch |
94 |
|
95 |
# other patches |
96 |
Patch206: bind-9.2.0rc3-varrun.patch |
97 |
Patch208: bind-9.3.2-prctl_set_dumpable.patch |
98 |
Patch209: bind-9.9.2-P2-CVE-2012-5689.patch |
99 |
|
100 |
# (oe) rediffed patch originates from http://www.caraytech.com/geodns/ |
101 |
Patch300: bind-9.4.0-geoip.diff |
102 |
Requires: bind-utils >= %{version}-%{release} |
103 |
Requires(post): systemd >= %{systemd_required_version} |
104 |
Requires(post): rpm-helper >= 0.24.8-1 |
105 |
Requires(preun): rpm-helper >= 0.24.8-1 |
106 |
BuildRequires: openssl-devel |
107 |
BuildRequires: multiarch-utils >= 1.0.3 |
108 |
BuildRequires: libidn-devel |
109 |
BuildRequires: postgresql-devel |
110 |
BuildRequires: mysql-devel |
111 |
BuildRequires: libcap-devel >= 2.10 |
112 |
BuildRequires: libxml2-devel |
113 |
%if %{gssapi} |
114 |
BuildRequires: krb5-devel |
115 |
%endif |
116 |
%if %{geoip} |
117 |
BuildRequires: libgeoip-devel |
118 |
%endif |
119 |
%if %{sdb} |
120 |
BuildRequires: mysql-devel |
121 |
BuildRequires: openldap-devel |
122 |
BuildRequires: postgresql-devel |
123 |
BuildRequires: sqlite3-devel |
124 |
%endif |
125 |
|
126 |
%description |
127 |
BIND (Berkeley Internet Name Domain) is an implementation of the DNS |
128 |
(domain Name System) protocols. BIND includes a DNS server (named), |
129 |
which resolves host names to IP addresses, and a resolver library |
130 |
(routines for applications to use when interfacing with DNS). A DNS |
131 |
server allows clients to name resources or objects and share the |
132 |
information with other network machines. The named DNS server can be |
133 |
used on workstations as a caching name server, but is generally only |
134 |
needed on one machine for an entire network. Note that the |
135 |
configuration files for making BIND act as a simple caching nameserver |
136 |
are included in the caching-nameserver package. |
137 |
|
138 |
Install the bind package if you need a DNS server for your network. If |
139 |
you want bind to act a caching name server, you will also need to install |
140 |
the caching-nameserver package. |
141 |
|
142 |
Many BIND 8 features previously unimplemented in BIND 9, including |
143 |
domain-specific forwarding, the \$GENERATE master file directive, and |
144 |
the "blackhole", "dialup", and "sortlist" options Forwarding of dynamic |
145 |
update requests; this is enabled by the "allow-update-forwarding" option |
146 |
A new, simplified database interface and a number of sample drivers based |
147 |
on it; see doc/dev/sdb for details |
148 |
Support for building single-threaded servers for environments that do not |
149 |
supply POSIX threads |
150 |
New configuration options: "min-refresh-time", "max-refresh-time", |
151 |
"min-retry-time", "max-retry-time", "additional-from-auth", |
152 |
"additional-from-cache", "notify explicit" |
153 |
Faster lookups, particularly in large zones. |
154 |
|
155 |
Build Options: |
156 |
--with sdb Build with database backends and DLZ support (enabled by default) |
157 |
--with geoip Build with GeoIP support (disabled per default) |
158 |
|
159 |
%if %{sdb} |
160 |
%package sdb |
161 |
Summary: BIND server with database backends and DLZ support |
162 |
Group: System/Servers |
163 |
Requires: bind |
164 |
Requires(post): rpm-helper >= 0.24.8-1 |
165 |
Requires(preun): rpm-helper >= 0.24.8-1 |
166 |
|
167 |
%description sdb |
168 |
BIND (Berkeley Internet Name Domain) is an implementation of the DNS |
169 |
(Domain Name System) protocols. BIND includes a DNS server (named-sdb) |
170 |
which has compiled-in SDB (Simplified Database Backend) which includes |
171 |
support for using alternative Zone Databases stored in an LDAP server |
172 |
(ldapdb), a postgreSQL database (pgsqldb), an sqlite database (sqlitedb), |
173 |
or in the filesystem (dirdb), in addition to the standard in-memory RBT |
174 |
(Red Black Tree) zone database. It also includes support for DLZ |
175 |
(Dynamic Loadable Zones) |
176 |
%endif |
177 |
|
178 |
%package utils |
179 |
Summary: Utilities for querying DNS name servers |
180 |
Group: Networking/Other |
181 |
|
182 |
%description utils |
183 |
Bind-utils contains a collection of utilities for querying DNS (Domain |
184 |
Name Service) name servers to find out information about Internet hosts. |
185 |
These tools will provide you with the IP addresses for given host names, |
186 |
as well as other information about registered domains and network |
187 |
addresses. |
188 |
|
189 |
You should install bind-utils if you need to get information from DNS name |
190 |
servers. |
191 |
|
192 |
%package devel |
193 |
Summary: Include files and libraries needed for bind DNS development |
194 |
Group: Development/C |
195 |
|
196 |
%description devel |
197 |
The bind-devel package contains all the include files and the |
198 |
library required for DNS (Domain Name Service) development for |
199 |
BIND versions 9.x.x. |
200 |
|
201 |
%package doc |
202 |
Summary: Documentation for BIND |
203 |
Group: Documentation |
204 |
BuildArch: noarch |
205 |
|
206 |
%description doc |
207 |
The bind-devel package contains the documentation for BIND. |
208 |
|
209 |
%prep |
210 |
%setup -q -n %{name}-%{major_version}%{dashpatch} |
211 |
|
212 |
%patch5 -p1 -b .nonexec |
213 |
%patch10 -p1 -b .PIE |
214 |
|
215 |
%patch104 -p1 -b .dyndb |
216 |
%patch72 -p1 -b .64bit |
217 |
%patch73 -p1 -b .libidn |
218 |
%patch83 -p1 -b .libidn2 |
219 |
%patch85 -p1 -b .libidn3 |
220 |
%patch87 -p1 -b .parallel |
221 |
%patch94 -p1 -b .rh461409 |
222 |
mkdir m4 |
223 |
%patch99 -p1 -b .libtool2 |
224 |
|
225 |
%patch102 -p1 -b .rh452060 |
226 |
%patch106 -p0 -b .rh490837 |
227 |
%patch107 -p1 -b .dist-pkcs11 |
228 |
%patch109 -p1 -b .rh478718 |
229 |
%patch110 -p1 -b .rh570851 |
230 |
%patch111 -p1 -b .exportlib |
231 |
%patch112 -p1 -b .rh645544 |
232 |
%patch119 -p1 -b .rh693982 |
233 |
%patch123 -p1 -b .rh735103 |
234 |
pushd bin/dig |
235 |
%patch124 -p0 -b .nslookup-norec |
236 |
popd |
237 |
%patch125 -p1 -b .buildfix |
238 |
%patch127 -p1 -b .forward |
239 |
%patch130 -p1 -b .libdb4 |
240 |
%patch131 -p1 -b .multlib-conflict |
241 |
|
242 |
%if %{sdb} |
243 |
%patch101 -p1 -b .old-api |
244 |
mkdir bin/named-sdb |
245 |
cp -r bin/named/* bin/named-sdb |
246 |
%patch11 -p1 -b .sdbsrc |
247 |
# SDB ldap |
248 |
cp -fp contrib/sdb/ldap/ldapdb.[ch] bin/named-sdb |
249 |
# SDB postgreSQL |
250 |
cp -fp contrib/sdb/pgsql/pgsqldb.[ch] bin/named-sdb |
251 |
# SDB sqlite |
252 |
cp -fp contrib/sdb/sqlite/sqlitedb.[ch] bin/named-sdb |
253 |
# SDB Berkeley DB - needs to be ported to DB4! |
254 |
#cp -fp contrib/sdb/bdb/bdb.[ch] bin/named_sdb |
255 |
# SDB dir |
256 |
cp -fp contrib/sdb/dir/dirdb.[ch] bin/named-sdb |
257 |
# SDB tools |
258 |
mkdir -p bin/sdb_tools |
259 |
cp -fp %{SOURCE30} bin/sdb_tools/ldap2zone.c |
260 |
cp -fp %{SOURCE35} bin/sdb_tools/Makefile.in |
261 |
#cp -fp contrib/sdb/bdb/zone2bdb.c bin/sdb_tools |
262 |
cp -fp contrib/sdb/ldap/{zone2ldap.1,zone2ldap.c} bin/sdb_tools |
263 |
cp -fp contrib/sdb/pgsql/zonetodb.c bin/sdb_tools |
264 |
cp -fp contrib/sdb/sqlite/zone2sqlite.c bin/sdb_tools |
265 |
%patch12 -p1 -b .sdb |
266 |
%patch17 -p1 -b .fix_sdb_ldap |
267 |
%patch62 -p1 -b .sdb-sqlite-bld |
268 |
%endif |
269 |
%patch132 -p1 -b .stat |
270 |
|
271 |
%patch206 -p0 -b .varrun.droplet |
272 |
%patch208 -p0 -b .prctl_set_dumpable.droplet |
273 |
%patch209 -p1 -b .CVE-2012-5689 |
274 |
|
275 |
%if %{geoip} |
276 |
%patch300 -p1 -b .geoip |
277 |
%endif |
278 |
|
279 |
cp %{SOURCE20} keygen.c |
280 |
cp %{SOURCE11} named.cache |
281 |
|
282 |
%build |
283 |
%serverbuild |
284 |
|
285 |
export CPPFLAGS="$CPPFLAGS -DDIG_SIGCHASE" |
286 |
export STD_CDEFINES="$CPPFLAGS" |
287 |
|
288 |
libtoolize --copy --force |
289 |
aclocal -I m4 --force |
290 |
autoheader --force |
291 |
autoconf --force |
292 |
|
293 |
# (oe) make queryperf from the contrib _before_ bind..., makes it |
294 |
# easier to determine if it builds or not, it saves time... |
295 |
pushd contrib/queryperf |
296 |
rm -f configure |
297 |
autoconf |
298 |
%configure2_5x |
299 |
%make CFLAGS="$CFLAGS" |
300 |
popd |
301 |
|
302 |
pushd contrib/query-loc-* |
303 |
perl -pi -e "s|-lnsl|-lnsl -lresolv|g" configure* |
304 |
rm -f configure |
305 |
autoconf |
306 |
%configure2_5x |
307 |
%make CFLAGS="$CFLAGS" |
308 |
popd |
309 |
|
310 |
%if %{geoip} |
311 |
export CFLAGS="$CFLAGS -DGEOIP" |
312 |
export LDFLAGS="$LDFLAGS -lGeoIP" |
313 |
%endif |
314 |
|
315 |
%configure2_5x \ |
316 |
--localstatedir=/var \ |
317 |
--disable-openssl-version-check \ |
318 |
--enable-exportlib \ |
319 |
--with-export-libdir=%{_libdir} \ |
320 |
--with-export-includedir=%{_includedir} \ |
321 |
--enable-threads \ |
322 |
--enable-largefile \ |
323 |
--enable-ipv6 \ |
324 |
--enable-filter-aaaa \ |
325 |
--enable-epoll \ |
326 |
--with-openssl=%{_prefix} \ |
327 |
%if %{gssapi} |
328 |
--with-gssapi=%{_prefix} --disable-isc-spnego \ |
329 |
%endif |
330 |
--with-randomdev=/dev/urandom \ |
331 |
--with-libxml2=yes \ |
332 |
%if %{sdb} |
333 |
--with-dlz-ldap=yes \ |
334 |
--with-dlz-postgres=yes \ |
335 |
--with-dlz-mysql=yes \ |
336 |
--with-dlz-filesystem=yes \ |
337 |
--with-dlz-stub=yes |
338 |
%endif |
339 |
|
340 |
# pkcs11 support requires a working backend, otherwise bind won't start |
341 |
# http://blogs.sun.com/janp/ |
342 |
# http://sourceforge.net/projects/opencryptoki |
343 |
#--with-pkcs11 \ |
344 |
|
345 |
make |
346 |
|
347 |
gcc $CFLAGS -o dns-keygen keygen.c |
348 |
|
349 |
#%%check |
350 |
## run the test suite |
351 |
#make check |
352 |
|
353 |
%install |
354 |
rm -rf %{buildroot} |
355 |
|
356 |
%makeinstall_std |
357 |
|
358 |
install -d -p %{buildroot}%{_libdir}/bind |
359 |
install -d %{buildroot}/var/named/{slaves,data,dynamic} |
360 |
install -d %{buildroot}/var/log |
361 |
|
362 |
# chroot |
363 |
install -d %{buildroot}%{chroot_prefix}/{dev,etc,var} |
364 |
install -d %{buildroot}%{chroot_prefix}/var/{log,named,run/named,tmp} |
365 |
install -d %{buildroot}%{chroot_prefix}/etc/{pki/dnssec-keys,named} |
366 |
install -d %{buildroot}%{chroot_prefix}/%{_libdir}/bind |
367 |
install -d %{buildroot}%{chroot_prefix}/%{_libdir}/openssl |
368 |
|
369 |
# these are required to prevent them being erased during upgrade of previous |
370 |
# versions that included them (rh bug #130121): |
371 |
touch %{buildroot}%{chroot_prefix}/dev/null |
372 |
touch %{buildroot}%{chroot_prefix}/dev/random |
373 |
touch %{buildroot}%{chroot_prefix}/dev/zero |
374 |
touch %{buildroot}%{chroot_prefix}/etc/localtime |
375 |
|
376 |
install -m 755 %{SOURCE43} %{buildroot}%{_sbindir}/setup-named-chroot.sh |
377 |
|
378 |
# systemd files |
379 |
install -d -m 755 %{buildroot}%{_unitdir} |
380 |
install -m 644 %{SOURCE41} %{buildroot}%{_unitdir} |
381 |
install -m 644 %{SOURCE42} %{buildroot}%{_unitdir} |
382 |
|
383 |
install -D -m 644 %{SOURCE40} %{buildroot}%{_tmpfilesdir}/named.conf |
384 |
|
385 |
# main configuration |
386 |
install -m 644 %{SOURCE100} %{buildroot}%{_sysconfdir}/named.conf |
387 |
install -m 644 %{SOURCE102} %{buildroot}%{_sysconfdir}/named.root.key |
388 |
install -m 644 %{SOURCE103} %{buildroot}%{_sysconfdir}/trusted-key.key |
389 |
install -m 640 %{SOURCE105} %{buildroot}%{_sysconfdir}/rndc.key |
390 |
|
391 |
mv %{buildroot}%{_sysconfdir}/bind.keys \ |
392 |
%{buildroot}%{_sysconfdir}/named.iscdlv.key |
393 |
install -d 755 %{buildroot}/etc/named |
394 |
|
395 |
install -d 755 %{buildroot}%{_localstatedir}/named |
396 |
install -m 644 %{SOURCE110} %{buildroot}%{_localstatedir}/named/named.ca |
397 |
install -m 644 %{SOURCE111} %{buildroot}%{_localstatedir}/named/named.localhost |
398 |
install -m 644 %{SOURCE112} %{buildroot}%{_localstatedir}/named/named.empty |
399 |
install -m 644 %{SOURCE113} %{buildroot}%{_localstatedir}/named/named.loopback |
400 |
|
401 |
# other configuration |
402 |
install -D -m 644 %{SOURCE6} %{buildroot}%{_sysconfdir}/sysconfig/named |
403 |
install -D -m 644 %{SOURCE7} %{buildroot}%{_sysconfdir}/logrotate.d/named |
404 |
|
405 |
install -d -m 755 %{buildroot}%{_sysconfdir}/rsyslog.d/ |
406 |
cat > %{buildroot}%{_sysconfdir}/rsyslog.d/named.conf <<'EOF' |
407 |
$AddUnixListenSocket /var/lib/named/dev/log |
408 |
EOF |
409 |
|
410 |
install -D -m 755 \ |
411 |
%{SOURCE8} %{buildroot}%{_sysconfdir}/NetworkManager/dispatcher.d/13-named |
412 |
|
413 |
%if %{sdb} |
414 |
mkdir -p %{buildroot}/etc/openldap/schema |
415 |
install -m 644 %{SOURCE36} %{buildroot}/etc/openldap/schema/dnszone.schema |
416 |
install -m 644 %{SOURCE37} contrib/sdb/pgsql/ |
417 |
|
418 |
install -m 644 %{SOURCE31} %{buildroot}%{_mandir}/man1/ldap2zone.1 |
419 |
install -m 644 %{SOURCE32} %{buildroot}%{_mandir}/man8/named-sdb.8 |
420 |
install -m 644 %{SOURCE33} %{buildroot}%{_mandir}/man1/zonetodb.1 |
421 |
install -m 644 %{SOURCE34} %{buildroot}%{_mandir}/man1/zone2sqlite.1 |
422 |
%endif |
423 |
|
424 |
# contrib |
425 |
install -m0755 contrib/named-bootconf/named-bootconf.sh %{buildroot}%{_sbindir}/named-bootconf |
426 |
install -m0755 contrib/queryperf/queryperf %{buildroot}%{_bindir}/ |
427 |
cp contrib/queryperf/README README.queryperf |
428 |
|
429 |
install -m0755 contrib/query-loc-*/query-loc %{buildroot}%{_bindir}/ |
430 |
install -m0644 contrib/query-loc-*/query-loc.1 %{buildroot}%{_mandir}/man1/ |
431 |
cp contrib/query-loc-*/ADDRESSES ADDRESSES.query-loc |
432 |
cp contrib/query-loc-*/ALGO ALGO.query-loc |
433 |
cp contrib/query-loc-*/README README.query-loc |
434 |
cp contrib/query-loc-*/USAGE USAGE.query-loc |
435 |
|
436 |
install -m 755 dns-keygen %{buildroot}%{_sbindir}/dns-keygen |
437 |
|
438 |
install -d -m 755 %{buildroot}%{_docdir}/%{name} |
439 |
install -d -m 755 %{buildroot}%{_docdir}/%{name}/arm |
440 |
install -m 644 doc/arm/*.html %{buildroot}%{_docdir}/%{name}/arm |
441 |
install -m 644 doc/arm/*.pdf %{buildroot}%{_docdir}/%{name}/arm |
442 |
cp -pr doc/misc %{buildroot}%{_docdir}/%{name} |
443 |
rm -f %{buildroot}%{_docdir}/%{name}/misc/Makefile* |
444 |
|
445 |
%multiarch_binaries %{buildroot}%{_bindir}/isc-config.sh |
446 |
|
447 |
cat > README.mga <<EOF |
448 |
Mageia BIND SDB support: |
449 |
|
450 |
Mageia ships named with compiled in Simplified Database Backend modules that |
451 |
ISC provides in the "contrib/sdb" directory. Install bind-sdb package if you |
452 |
want to use them. The SDB modules for LDAP, PostGreSQL, DirDB and SQLite are |
453 |
compiled into named-sdb. |
454 |
EOF |
455 |
|
456 |
%triggerpostun -- bind < 9.9.2 |
457 |
# handle migration from previous setup after uninstallation of previous release |
458 |
# so as to catch modified configuration files saved as .rpmsave |
459 |
for f in named.conf trusted_networks_acl.conf logging.conf rndc.conf rndc.key; do |
460 |
if [ -f %{chroot_prefix}/etc/$f.rpmsave ]; then |
461 |
if [ -f %{_sysconfdir}/$f ]; then |
462 |
mv %{_sysconfdir}/$f %{_sysconfdir}/$f.rpmnew |
463 |
fi |
464 |
mv %{chroot_prefix}/etc/$f.rpmsave %{_sysconfdir}/$f; |
465 |
fi |
466 |
done |
467 |
|
468 |
if [ -d %{chroot_prefix}/var/named/master ]; then |
469 |
mv %{chroot_prefix}/var/named/master %{_localstatedir}/named |
470 |
fi |
471 |
|
472 |
if [ -d %{chroot_prefix}/var/named/reverse ]; then |
473 |
mv %{chroot_prefix}/var/named/reverse %{_localstatedir}/named |
474 |
fi |
475 |
|
476 |
%pre |
477 |
%_pre_useradd named /var/lib/named /bin/false |
478 |
|
479 |
%post |
480 |
if [ "$1" -gt 1 ]; then |
481 |
# upgrade |
482 |
mv -f %{chroot_prefix}/var/named/* /var/named/ |
483 |
rm -rf %{chroot_prefix}%{_libdir}/openssl-* |
484 |
fi |
485 |
%_tmpfilescreate named |
486 |
%_post_service named |
487 |
|
488 |
# chroot devices |
489 |
[ -e %{chroot_prefix}/dev/random ] || \ |
490 |
/bin/mknod %{chroot_prefix}/dev/random c 1 8 |
491 |
[ -e %{chroot_prefix}/dev/zero ] || \ |
492 |
/bin/mknod %{chroot_prefix}/dev/zero c 1 5 |
493 |
[ -e %{chroot_prefix}/dev/null ] || \ |
494 |
/bin/mknod %{chroot_prefix}/dev/null c 1 3 |
495 |
rm -f %{chroot_prefix}/etc/localtime |
496 |
cp /etc/localtime %{chroot_prefix}/etc/localtime |
497 |
|
498 |
if [ "$1" -eq 1 ]; then |
499 |
# installation |
500 |
MYKEY="`%{_sbindir}/dns-keygen`" |
501 |
perl -pi -e "s|_MY_KEY_|$MYKEY|g" %{_sysconfdir}/rndc.key |
502 |
fi |
503 |
|
504 |
%preun |
505 |
%_preun_service named |
506 |
|
507 |
if [ "$1" -eq 0 ]; then |
508 |
# uninstallation |
509 |
rm -f %{chroot_prefix}/dev/{random,zero,null} |
510 |
rm -f %{chroot_prefix}/etc/localtime |
511 |
fi |
512 |
|
513 |
%postun |
514 |
%_postun_userdel named |
515 |
|
516 |
%files |
517 |
%doc CHANGES README README.mga FAQ COPYRIGHT |
518 |
%if %{geoip} |
519 |
%doc geodns.INSTALL geodns.named.conf-sample |
520 |
%endif |
521 |
%{_sbindir}/setup-named-chroot.sh |
522 |
%{_sbindir}/arpaname |
523 |
%{_sbindir}/ddns-confgen |
524 |
%{_sbindir}/dns-keygen |
525 |
%{_sbindir}/dnssec-dsfromkey |
526 |
%{_sbindir}/dnssec-keyfromlabel |
527 |
%{_sbindir}/dnssec-keygen |
528 |
%{_sbindir}/dnssec-revoke |
529 |
%{_sbindir}/dnssec-settime |
530 |
%{_sbindir}/dnssec-signzone |
531 |
%{_sbindir}/dnssec-checkds |
532 |
%{_sbindir}/dnssec-verify |
533 |
%{_sbindir}/genrandom |
534 |
%{_sbindir}/isc-hmac-fixup |
535 |
%{_sbindir}/lwresd |
536 |
%{_sbindir}/named |
537 |
%{_sbindir}/named-bootconf |
538 |
%{_sbindir}/named-checkconf |
539 |
%{_sbindir}/named-checkzone |
540 |
%{_sbindir}/named-compilezone |
541 |
%{_sbindir}/named-journalprint |
542 |
%{_sbindir}/nsec3hash |
543 |
%{_sbindir}/rndc |
544 |
%{_sbindir}/rndc-confgen |
545 |
%{_mandir}/man1/arpaname.1.* |
546 |
%{_mandir}/man5/named.conf.5* |
547 |
%{_mandir}/man5/rndc.conf.5* |
548 |
%{_mandir}/man8/ddns-confgen.8.* |
549 |
%{_mandir}/man8/dnssec-*.8* |
550 |
%{_mandir}/man8/genrandom.8.* |
551 |
%{_mandir}/man8/isc-hmac-fixup.8.* |
552 |
%{_mandir}/man8/lwresd.8* |
553 |
%{_mandir}/man8/named-*.8* |
554 |
%{_mandir}/man8/named.8* |
555 |
%{_mandir}/man8/nsec3hash.8.* |
556 |
%{_mandir}/man8/rndc.8* |
557 |
%{_mandir}/man8/rndc-confgen.8* |
558 |
%{_libdir}/bind |
559 |
|
560 |
# main configuration |
561 |
%dir %{_sysconfdir}/named |
562 |
%config(noreplace) %{_sysconfdir}/named.conf |
563 |
%attr(-,root,named) %config(noreplace) %{_sysconfdir}/rndc.key |
564 |
%attr(-,root,named) %config(noreplace) %{_sysconfdir}/named.iscdlv.key |
565 |
%attr(-,root,named) %config(noreplace) %{_sysconfdir}/named.root.key |
566 |
|
567 |
# other configuration |
568 |
%config(noreplace) %{_sysconfdir}/sysconfig/named |
569 |
%config(noreplace) %{_sysconfdir}/rsyslog.d/named.conf |
570 |
%config(noreplace) %{_sysconfdir}/logrotate.d/named |
571 |
%{_sysconfdir}/NetworkManager/dispatcher.d/13-named |
572 |
%{_tmpfilesdir}/named.conf |
573 |
%{_unitdir}/named.service |
574 |
|
575 |
# variable directory |
576 |
%dir %{_localstatedir}/named |
577 |
%attr(-,named,named) %dir %{_localstatedir}/named/slaves |
578 |
%attr(-,named,named) %dir %{_localstatedir}/named/data |
579 |
%attr(-,named,named) %dir %{_localstatedir}/named/dynamic |
580 |
%config(noreplace) %{_localstatedir}/named/named.ca |
581 |
%config(noreplace) %{_localstatedir}/named/named.localhost |
582 |
%config(noreplace) %{_localstatedir}/named/named.loopback |
583 |
%config(noreplace) %{_localstatedir}/named/named.empty |
584 |
|
585 |
# the chroot |
586 |
%ghost %{chroot_prefix}/dev/null |
587 |
%ghost %{chroot_prefix}/dev/random |
588 |
%ghost %{chroot_prefix}/dev/zero |
589 |
%ghost %{chroot_prefix}/etc/localtime |
590 |
%dir %{chroot_prefix} |
591 |
%dir %{chroot_prefix}/dev |
592 |
%dir %{chroot_prefix}/etc |
593 |
%dir %{chroot_prefix}/etc/named |
594 |
%dir %{chroot_prefix}/etc/pki |
595 |
%dir %{chroot_prefix}/etc/pki/dnssec-keys |
596 |
%dir %{chroot_prefix}/var |
597 |
%dir %{chroot_prefix}/var/run |
598 |
%dir %{chroot_prefix}/var/named |
599 |
%dir %{chroot_prefix}/usr |
600 |
%dir %{chroot_prefix}/%{_libdir} |
601 |
%dir %{chroot_prefix}/%{_libdir}/bind |
602 |
%dir %{chroot_prefix}/%{_libdir}/openssl |
603 |
|
604 |
%attr(-,named,named) %dir %{chroot_prefix}/var/run/named |
605 |
%attr(-,named,named) %dir %{chroot_prefix}/var/tmp |
606 |
%attr(-,named,named) %dir %{chroot_prefix}/var/log |
607 |
|
608 |
|
609 |
%files devel |
610 |
%doc CHANGES README |
611 |
%multiarch %{multiarch_bindir}/isc-config.sh |
612 |
%{_bindir}/isc-config.sh |
613 |
%{_includedir}/* |
614 |
%{_libdir}/*.a |
615 |
%{_mandir}/man1/isc-config.sh.1* |
616 |
%{_mandir}/man3/lwres*.3* |
617 |
|
618 |
%files utils |
619 |
%doc README COPYRIGHT *.query-loc *.queryperf |
620 |
%{_bindir}/dig |
621 |
%{_bindir}/host |
622 |
%{_bindir}/nslookup |
623 |
%{_bindir}/nsupdate |
624 |
%{_bindir}/queryperf |
625 |
%{_bindir}/query-loc |
626 |
%{_mandir}/man1/host.1* |
627 |
%{_mandir}/man1/dig.1* |
628 |
%{_mandir}/man1/nslookup.1* |
629 |
%{_mandir}/man1/nsupdate.1* |
630 |
%{_mandir}/man1/query-loc.1* |
631 |
%{_sysconfdir}/trusted-key.key |
632 |
|
633 |
%files doc |
634 |
%{_docdir}/%{name} |
635 |
|
636 |
%if %{sdb} |
637 |
%files sdb |
638 |
%doc contrib/sdb/ldap/README.ldap |
639 |
%doc contrib/sdb/ldap/INSTALL.ldap |
640 |
%doc contrib/sdb/pgsql/README.sdb_pgsql |
641 |
%{_unitdir}/named-sdb.service |
642 |
%{_mandir}/man1/zone2ldap.1* |
643 |
%{_mandir}/man1/ldap2zone.1* |
644 |
%{_mandir}/man1/zonetodb.1* |
645 |
%{_mandir}/man1/zone2sqlite.1* |
646 |
%{_mandir}/man8/named-sdb.8* |
647 |
%config(noreplace) %{_sysconfdir}/openldap/schema/dnszone.schema |
648 |
%{_sbindir}/named-sdb |
649 |
%{_sbindir}/zone2ldap |
650 |
%{_sbindir}/ldap2zone |
651 |
%{_sbindir}/zonetodb |
652 |
%{_sbindir}/zone2sqlite |
653 |
%endif |