1 |
%define sdb 1 |
2 |
%define geoip 0 |
3 |
%define gssapi 1 |
4 |
|
5 |
%{?_with_sdbp: %{expand: %%global sdb 1}} |
6 |
%{?_without_sdb: %{expand: %%global sdb 0}} |
7 |
%{?_with_geoip: %{expand: %%global geoip 1}} |
8 |
%{?_without_geoip: %{expand: %%global geoip 0}} |
9 |
%{?_with_gssapi: %{expand: %%global gssapi 1}} |
10 |
%{?_without_gssapi: %{expand: %%global gssapi 0}} |
11 |
|
12 |
%define major_version 9.9.4 |
13 |
%define patch_version P2 |
14 |
%define dashpatch %{?patch_version:-%patch_version}%nil |
15 |
%define dotpatch %{?patch_version:.%patch_version}%nil |
16 |
%define chroot_prefix /var/lib/named |
17 |
|
18 |
Name: bind |
19 |
Version: %{major_version}%{dotpatch} |
20 |
Release: %mkrel 1 |
21 |
Summary: A DNS (Domain Name System) server |
22 |
License: ISC |
23 |
Group: System/Servers |
24 |
URL: http://www.isc.org/products/BIND/ |
25 |
Source0: ftp://ftp.isc.org/isc/%{name}9/%{major_version}%{dashpatch}/%{name}-%{major_version}%{dashpatch}.tar.gz |
26 |
Source1: ftp://ftp.isc.org/isc/%{name}9/%{major_version}%{dashpatch}/%{name}-%{major_version}%{dashpatch}.tar.gz.sha512.asc |
27 |
|
28 |
Source6: named.sysconfig |
29 |
Source7: named.logrotate |
30 |
Source8: named.NetworkManager |
31 |
Source11: ftp://ftp.internic.net/domain/named.cache |
32 |
Source20: bind-keygen.c |
33 |
Source40: bind.tmpfiles |
34 |
Source41: named.service |
35 |
Source42: named-sdb.service |
36 |
Source43: setup-named-chroot.sh |
37 |
|
38 |
# sdb |
39 |
Source30: ldap2zone.c |
40 |
Source31: ldap2zone.1 |
41 |
Source32: named-sdb.8 |
42 |
Source33: zonetodb.1 |
43 |
Source34: zone2sqlite.1 |
44 |
Source35: bind-9.3.1rc1-sdb_tools-Makefile.in |
45 |
Source36: dnszone.schema |
46 |
Source37: README.sdb_pgsql |
47 |
|
48 |
Source100: named.conf |
49 |
Source102: named.root.key |
50 |
Source103: trusted-key.key |
51 |
Source105: rndc.key |
52 |
Source110: named.ca |
53 |
Source111: named.localhost |
54 |
Source112: named.empty |
55 |
Source113: named.loopback |
56 |
|
57 |
# fedora patches |
58 |
Patch5: bind-nonexec.patch |
59 |
Patch10: bind-9.5-PIE.patch |
60 |
Patch72: bind-9.5-dlz-64bit.patch |
61 |
Patch87: bind-9.5-parallel-build.patch |
62 |
Patch99: bind-9.9.3-libtool2.diff |
63 |
Patch101: bind-96-old-api.patch |
64 |
Patch102: bind-95-rh452060.patch |
65 |
Patch106: bind93-rh490837.patch |
66 |
Patch107: bind97-dist-pkcs11.patch |
67 |
Patch109: bind97-rh478718.patch |
68 |
Patch110: bind97-rh570851.patch |
69 |
Patch111: bind97-exportlib.patch |
70 |
Patch112: bind97-rh645544.patch |
71 |
Patch119: bind97-rh693982.patch |
72 |
Patch123: bind98-rh735103.patch |
73 |
Patch124: nslookup-norec.patch |
74 |
Patch125: bind99-buildfix.patch |
75 |
Patch127: bind99-forward.patch |
76 |
Patch130: bind-9.9.3-dlz-libdb4.diff |
77 |
Patch131: bind-9.9.1-P2-multlib-conflict.patch |
78 |
Patch133: bind99-rh640538.patch |
79 |
Patch134: bind97-rh669163.patch |
80 |
Patch135: bind99-libidn4.patch |
81 |
Patch137: bind99-rrl.patch |
82 |
|
83 |
# SDB patches |
84 |
Patch11: bind-9.9.3-sdbsrc.diff |
85 |
Patch12: bind-9.5-sdb.patch |
86 |
Patch62: bind-9.5-sdb-sqlite-bld.patch |
87 |
|
88 |
# needs inpection |
89 |
Patch17: bind-9.3.2b1-fix_sdb_ldap.patch |
90 |
Patch104: bind-96-dyndb.patch |
91 |
|
92 |
# IDN patches |
93 |
Patch73: bind-9.5-libidn.patch |
94 |
Patch83: bind-9.5-libidn2.patch |
95 |
Patch85: bind-9.5-libidn3.patch |
96 |
Patch94: bind95-rh461409.patch |
97 |
|
98 |
# other patches |
99 |
Patch206: bind-9.2.0rc3-varrun.patch |
100 |
Patch208: bind-9.3.2-prctl_set_dumpable.patch |
101 |
Patch209: bind-9.9.3-P2-make_the_test_suite_work.diff |
102 |
|
103 |
# (oe) rediffed patch originates from http://www.caraytech.com/geodns/ |
104 |
Patch300: bind-9.4.0-geoip.diff |
105 |
Requires: bind-utils >= %{version}-%{release} |
106 |
Requires(post): systemd >= %{systemd_required_version} |
107 |
Requires(post): rpm-helper >= 0.24.8-1 |
108 |
Requires(preun): rpm-helper >= 0.24.8-1 |
109 |
BuildRequires: openssl-devel |
110 |
BuildRequires: multiarch-utils >= 1.0.3 |
111 |
BuildRequires: libidn-devel |
112 |
BuildRequires: postgresql-devel |
113 |
BuildRequires: mysql-devel |
114 |
BuildRequires: libcap-devel >= 2.10 |
115 |
BuildRequires: libxml2-devel |
116 |
%if %{gssapi} |
117 |
BuildRequires: krb5-devel |
118 |
%endif |
119 |
%if %{geoip} |
120 |
BuildRequires: libgeoip-devel |
121 |
%endif |
122 |
%if %{sdb} |
123 |
BuildRequires: mysql-devel |
124 |
BuildRequires: openldap-devel |
125 |
BuildRequires: postgresql-devel |
126 |
BuildRequires: sqlite3-devel |
127 |
%endif |
128 |
# needed for "make check" |
129 |
BuildRequires: bind-testsuite-setup perl(Net::DNS) |
130 |
|
131 |
%description |
132 |
BIND (Berkeley Internet Name Domain) is an implementation of the DNS |
133 |
(domain Name System) protocols. BIND includes a DNS server (named), |
134 |
which resolves host names to IP addresses, and a resolver library |
135 |
(routines for applications to use when interfacing with DNS). A DNS |
136 |
server allows clients to name resources or objects and share the |
137 |
information with other network machines. The named DNS server can be |
138 |
used on workstations as a caching name server, but is generally only |
139 |
needed on one machine for an entire network. Note that the |
140 |
configuration files for making BIND act as a simple caching nameserver |
141 |
are included in the caching-nameserver package. |
142 |
|
143 |
Install the bind package if you need a DNS server for your network. If |
144 |
you want bind to act a caching name server, you will also need to install |
145 |
the caching-nameserver package. |
146 |
|
147 |
Many BIND 8 features previously unimplemented in BIND 9, including |
148 |
domain-specific forwarding, the \$GENERATE master file directive, and |
149 |
the "blackhole", "dialup", and "sortlist" options Forwarding of dynamic |
150 |
update requests; this is enabled by the "allow-update-forwarding" option |
151 |
A new, simplified database interface and a number of sample drivers based |
152 |
on it; see doc/dev/sdb for details |
153 |
Support for building single-threaded servers for environments that do not |
154 |
supply POSIX threads |
155 |
New configuration options: "min-refresh-time", "max-refresh-time", |
156 |
"min-retry-time", "max-retry-time", "additional-from-auth", |
157 |
"additional-from-cache", "notify explicit" |
158 |
Faster lookups, particularly in large zones. |
159 |
|
160 |
Build Options: |
161 |
--with sdb Build with database backends and DLZ support (enabled by default) |
162 |
--with geoip Build with GeoIP support (disabled per default) |
163 |
|
164 |
%if %{sdb} |
165 |
%package sdb |
166 |
Summary: BIND server with database backends and DLZ support |
167 |
Group: System/Servers |
168 |
Requires: bind |
169 |
Requires(post): rpm-helper >= 0.24.8-1 |
170 |
Requires(preun): rpm-helper >= 0.24.8-1 |
171 |
|
172 |
%description sdb |
173 |
BIND (Berkeley Internet Name Domain) is an implementation of the DNS |
174 |
(Domain Name System) protocols. BIND includes a DNS server (named-sdb) |
175 |
which has compiled-in SDB (Simplified Database Backend) which includes |
176 |
support for using alternative Zone Databases stored in an LDAP server |
177 |
(ldapdb), a postgreSQL database (pgsqldb), an sqlite database (sqlitedb), |
178 |
or in the filesystem (dirdb), in addition to the standard in-memory RBT |
179 |
(Red Black Tree) zone database. It also includes support for DLZ |
180 |
(Dynamic Loadable Zones) |
181 |
%endif |
182 |
|
183 |
%package utils |
184 |
Summary: Utilities for querying DNS name servers |
185 |
Group: Networking/Other |
186 |
|
187 |
%description utils |
188 |
Bind-utils contains a collection of utilities for querying DNS (Domain |
189 |
Name Service) name servers to find out information about Internet hosts. |
190 |
These tools will provide you with the IP addresses for given host names, |
191 |
as well as other information about registered domains and network |
192 |
addresses. |
193 |
|
194 |
You should install bind-utils if you need to get information from DNS name |
195 |
servers. |
196 |
|
197 |
%package devel |
198 |
Summary: Include files and libraries needed for bind DNS development |
199 |
Group: Development/C |
200 |
|
201 |
%description devel |
202 |
The bind-devel package contains all the include files and the |
203 |
library required for DNS (Domain Name Service) development for |
204 |
BIND versions 9.x.x. |
205 |
|
206 |
%package doc |
207 |
Summary: Documentation for BIND |
208 |
Group: Documentation |
209 |
BuildArch: noarch |
210 |
|
211 |
%description doc |
212 |
The bind-devel package contains the documentation for BIND. |
213 |
|
214 |
%prep |
215 |
%setup -q -n %{name}-%{major_version}%{dashpatch} |
216 |
|
217 |
%patch5 -p1 -b .nonexec |
218 |
%patch10 -p1 -b .PIE |
219 |
|
220 |
%patch104 -p1 -b .dyndb |
221 |
%patch72 -p1 -b .64bit |
222 |
%patch73 -p1 -b .libidn |
223 |
%patch83 -p1 -b .libidn2 |
224 |
%patch85 -p1 -b .libidn3 |
225 |
%patch87 -p1 -b .parallel |
226 |
%patch94 -p1 -b .rh461409 |
227 |
mkdir m4 |
228 |
%patch99 -p0 -b .libtool2 |
229 |
|
230 |
%patch102 -p1 -b .rh452060 |
231 |
%patch106 -p0 -b .rh490837 |
232 |
%patch107 -p1 -b .dist-pkcs11 |
233 |
%patch109 -p1 -b .rh478718 |
234 |
%patch110 -p1 -b .rh570851 |
235 |
%patch111 -p1 -b .exportlib |
236 |
%patch112 -p1 -b .rh645544 |
237 |
%patch119 -p1 -b .rh693982 |
238 |
%patch123 -p1 -b .rh735103 |
239 |
pushd bin/dig |
240 |
%patch124 -p0 -b .nslookup-norec |
241 |
popd |
242 |
%patch125 -p1 -b .buildfix |
243 |
%patch127 -p1 -b .forward |
244 |
%patch130 -p1 -b .libdb4 |
245 |
%patch131 -p1 -b .multlib-conflict |
246 |
%patch137 -p1 -b .rrl |
247 |
|
248 |
%if %{sdb} |
249 |
%patch101 -p1 -b .old-api |
250 |
mkdir bin/named-sdb |
251 |
cp -r bin/named/* bin/named-sdb |
252 |
%patch11 -p1 -b .sdbsrc |
253 |
# SDB ldap |
254 |
cp -fp contrib/sdb/ldap/ldapdb.[ch] bin/named-sdb |
255 |
# SDB postgreSQL |
256 |
cp -fp contrib/sdb/pgsql/pgsqldb.[ch] bin/named-sdb |
257 |
# SDB sqlite |
258 |
cp -fp contrib/sdb/sqlite/sqlitedb.[ch] bin/named-sdb |
259 |
# SDB Berkeley DB - needs to be ported to DB4! |
260 |
#cp -fp contrib/sdb/bdb/bdb.[ch] bin/named_sdb |
261 |
# SDB dir |
262 |
cp -fp contrib/sdb/dir/dirdb.[ch] bin/named-sdb |
263 |
# SDB tools |
264 |
mkdir -p bin/sdb_tools |
265 |
cp -fp %{SOURCE30} bin/sdb_tools/ldap2zone.c |
266 |
cp -fp %{SOURCE35} bin/sdb_tools/Makefile.in |
267 |
#cp -fp contrib/sdb/bdb/zone2bdb.c bin/sdb_tools |
268 |
cp -fp contrib/sdb/ldap/{zone2ldap.1,zone2ldap.c} bin/sdb_tools |
269 |
cp -fp contrib/sdb/pgsql/zonetodb.c bin/sdb_tools |
270 |
cp -fp contrib/sdb/sqlite/zone2sqlite.c bin/sdb_tools |
271 |
%patch12 -p1 -b .sdb |
272 |
%patch17 -p1 -b .fix_sdb_ldap |
273 |
%patch62 -p1 -b .sdb-sqlite-bld |
274 |
%endif |
275 |
%patch133 -p1 -b .rh640538 |
276 |
%patch134 -p1 -b .rh669163 |
277 |
%patch135 -p1 -b .libidn4 |
278 |
|
279 |
%patch206 -p0 -b .varrun.droplet |
280 |
%patch208 -p0 -b .prctl_set_dumpable.droplet |
281 |
%patch209 -p0 |
282 |
|
283 |
%if %{geoip} |
284 |
%patch300 -p1 -b .geoip |
285 |
%endif |
286 |
|
287 |
cp %{SOURCE20} keygen.c |
288 |
cp %{SOURCE11} named.cache |
289 |
|
290 |
%build |
291 |
%serverbuild |
292 |
|
293 |
export CPPFLAGS="$CPPFLAGS -DDIG_SIGCHASE" |
294 |
export STD_CDEFINES="$CPPFLAGS" |
295 |
|
296 |
libtoolize --copy --force |
297 |
aclocal -I m4 --force |
298 |
autoheader --force |
299 |
autoconf --force |
300 |
|
301 |
# (oe) make queryperf from the contrib _before_ bind..., makes it |
302 |
# easier to determine if it builds or not, it saves time... |
303 |
pushd contrib/queryperf |
304 |
rm -f configure |
305 |
autoconf |
306 |
%configure2_5x |
307 |
%make CFLAGS="$CFLAGS" |
308 |
popd |
309 |
|
310 |
pushd contrib/query-loc-* |
311 |
perl -pi -e "s|-lnsl|-lnsl -lresolv|g" configure* |
312 |
rm -f configure |
313 |
autoconf |
314 |
%configure2_5x |
315 |
%make CFLAGS="$CFLAGS" |
316 |
popd |
317 |
|
318 |
%if %{geoip} |
319 |
export CFLAGS="$CFLAGS -DGEOIP" |
320 |
export LDFLAGS="$LDFLAGS -lGeoIP" |
321 |
%endif |
322 |
|
323 |
%configure2_5x \ |
324 |
--localstatedir=/var \ |
325 |
--disable-openssl-version-check \ |
326 |
--enable-exportlib \ |
327 |
--with-export-libdir=%{_libdir} \ |
328 |
--with-export-includedir=%{_includedir} \ |
329 |
--enable-threads \ |
330 |
--enable-largefile \ |
331 |
--enable-ipv6 \ |
332 |
--enable-filter-aaaa \ |
333 |
--enable-epoll \ |
334 |
--with-openssl=%{_prefix} \ |
335 |
%if %{gssapi} |
336 |
--with-gssapi=%{_prefix} --disable-isc-spnego \ |
337 |
%endif |
338 |
--with-randomdev=/dev/urandom \ |
339 |
--with-libxml2=yes \ |
340 |
--enable-newstats \ |
341 |
--enable-rrl \ |
342 |
%if %{sdb} |
343 |
--with-dlz-ldap=yes \ |
344 |
--with-dlz-postgres=yes \ |
345 |
--with-dlz-mysql=yes \ |
346 |
--with-dlz-filesystem=yes \ |
347 |
--with-dlz-stub=yes |
348 |
%endif |
349 |
|
350 |
# pkcs11 support requires a working backend, otherwise bind won't start |
351 |
# http://blogs.sun.com/janp/ |
352 |
# http://sourceforge.net/projects/opencryptoki |
353 |
#--with-pkcs11 \ |
354 |
|
355 |
make |
356 |
|
357 |
gcc $CFLAGS -o dns-keygen keygen.c |
358 |
|
359 |
#%%check |
360 |
## run the test suite |
361 |
#make check |
362 |
|
363 |
%install |
364 |
rm -rf %{buildroot} |
365 |
|
366 |
%makeinstall_std |
367 |
|
368 |
install -d -p %{buildroot}%{_libdir}/bind |
369 |
install -d %{buildroot}/var/named/{slaves,data,dynamic} |
370 |
install -d %{buildroot}/var/log |
371 |
|
372 |
# chroot |
373 |
install -d %{buildroot}%{chroot_prefix}/{dev,etc,var} |
374 |
install -d %{buildroot}%{chroot_prefix}/var/{log,named,run/named,tmp} |
375 |
install -d %{buildroot}%{chroot_prefix}/etc/{pki/dnssec-keys,named} |
376 |
install -d %{buildroot}%{chroot_prefix}/%{_libdir}/bind |
377 |
install -d %{buildroot}%{chroot_prefix}/%{_libdir}/openssl |
378 |
|
379 |
# these are required to prevent them being erased during upgrade of previous |
380 |
# versions that included them (rh bug #130121): |
381 |
touch %{buildroot}%{chroot_prefix}/dev/null |
382 |
touch %{buildroot}%{chroot_prefix}/dev/random |
383 |
touch %{buildroot}%{chroot_prefix}/dev/zero |
384 |
touch %{buildroot}%{chroot_prefix}/etc/localtime |
385 |
|
386 |
install -m 755 %{SOURCE43} %{buildroot}%{_sbindir}/setup-named-chroot.sh |
387 |
|
388 |
# systemd files |
389 |
install -d -m 755 %{buildroot}%{_unitdir} |
390 |
install -m 644 %{SOURCE41} %{buildroot}%{_unitdir} |
391 |
install -m 644 %{SOURCE42} %{buildroot}%{_unitdir} |
392 |
|
393 |
install -D -m 644 %{SOURCE40} %{buildroot}%{_tmpfilesdir}/named.conf |
394 |
|
395 |
# main configuration |
396 |
install -m 644 %{SOURCE100} %{buildroot}%{_sysconfdir}/named.conf |
397 |
install -m 644 %{SOURCE102} %{buildroot}%{_sysconfdir}/named.root.key |
398 |
install -m 644 %{SOURCE103} %{buildroot}%{_sysconfdir}/trusted-key.key |
399 |
install -m 640 %{SOURCE105} %{buildroot}%{_sysconfdir}/rndc.key |
400 |
|
401 |
mv %{buildroot}%{_sysconfdir}/bind.keys \ |
402 |
%{buildroot}%{_sysconfdir}/named.iscdlv.key |
403 |
install -d 755 %{buildroot}/etc/named |
404 |
|
405 |
install -d 755 %{buildroot}%{_localstatedir}/named |
406 |
install -m 644 %{SOURCE110} %{buildroot}%{_localstatedir}/named/named.ca |
407 |
install -m 644 %{SOURCE111} %{buildroot}%{_localstatedir}/named/named.localhost |
408 |
install -m 644 %{SOURCE112} %{buildroot}%{_localstatedir}/named/named.empty |
409 |
install -m 644 %{SOURCE113} %{buildroot}%{_localstatedir}/named/named.loopback |
410 |
|
411 |
# other configuration |
412 |
install -D -m 644 %{SOURCE6} %{buildroot}%{_sysconfdir}/sysconfig/named |
413 |
install -D -m 644 %{SOURCE7} %{buildroot}%{_sysconfdir}/logrotate.d/named |
414 |
|
415 |
install -d -m 755 %{buildroot}%{_sysconfdir}/rsyslog.d/ |
416 |
cat > %{buildroot}%{_sysconfdir}/rsyslog.d/named.conf <<'EOF' |
417 |
$AddUnixListenSocket /var/lib/named/dev/log |
418 |
EOF |
419 |
|
420 |
install -D -m 755 \ |
421 |
%{SOURCE8} %{buildroot}%{_sysconfdir}/NetworkManager/dispatcher.d/13-named |
422 |
|
423 |
%if %{sdb} |
424 |
mkdir -p %{buildroot}/etc/openldap/schema |
425 |
install -m 644 %{SOURCE36} %{buildroot}/etc/openldap/schema/dnszone.schema |
426 |
install -m 644 %{SOURCE37} contrib/sdb/pgsql/ |
427 |
|
428 |
install -m 644 %{SOURCE31} %{buildroot}%{_mandir}/man1/ldap2zone.1 |
429 |
install -m 644 %{SOURCE32} %{buildroot}%{_mandir}/man8/named-sdb.8 |
430 |
install -m 644 %{SOURCE33} %{buildroot}%{_mandir}/man1/zonetodb.1 |
431 |
install -m 644 %{SOURCE34} %{buildroot}%{_mandir}/man1/zone2sqlite.1 |
432 |
%endif |
433 |
|
434 |
# contrib |
435 |
install -m0755 contrib/named-bootconf/named-bootconf.sh %{buildroot}%{_sbindir}/named-bootconf |
436 |
install -m0755 contrib/queryperf/queryperf %{buildroot}%{_bindir}/ |
437 |
cp contrib/queryperf/README README.queryperf |
438 |
|
439 |
install -m0755 contrib/query-loc-*/query-loc %{buildroot}%{_bindir}/ |
440 |
install -m0644 contrib/query-loc-*/query-loc.1 %{buildroot}%{_mandir}/man1/ |
441 |
cp contrib/query-loc-*/ADDRESSES ADDRESSES.query-loc |
442 |
cp contrib/query-loc-*/ALGO ALGO.query-loc |
443 |
cp contrib/query-loc-*/README README.query-loc |
444 |
cp contrib/query-loc-*/USAGE USAGE.query-loc |
445 |
|
446 |
install -m 755 dns-keygen %{buildroot}%{_sbindir}/dns-keygen |
447 |
|
448 |
install -d -m 755 %{buildroot}%{_docdir}/%{name} |
449 |
install -d -m 755 %{buildroot}%{_docdir}/%{name}/arm |
450 |
install -m 644 doc/arm/*.html %{buildroot}%{_docdir}/%{name}/arm |
451 |
install -m 644 doc/arm/*.pdf %{buildroot}%{_docdir}/%{name}/arm |
452 |
cp -pr doc/misc %{buildroot}%{_docdir}/%{name} |
453 |
rm -f %{buildroot}%{_docdir}/%{name}/misc/Makefile* |
454 |
|
455 |
%multiarch_binaries %{buildroot}%{_bindir}/isc-config.sh |
456 |
|
457 |
cat > README.mga <<EOF |
458 |
Mageia BIND SDB support: |
459 |
|
460 |
Mageia ships named with compiled in Simplified Database Backend modules that |
461 |
ISC provides in the "contrib/sdb" directory. Install bind-sdb package if you |
462 |
want to use them. The SDB modules for LDAP, PostGreSQL, DirDB and SQLite are |
463 |
compiled into named-sdb. |
464 |
EOF |
465 |
|
466 |
%triggerpostun -- bind < 9.9.2 |
467 |
# handle migration from previous setup after uninstallation of previous release |
468 |
# so as to catch modified configuration files saved as .rpmsave |
469 |
for f in named.conf trusted_networks_acl.conf logging.conf rndc.conf rndc.key; do |
470 |
if [ -f %{chroot_prefix}/etc/$f.rpmsave ]; then |
471 |
if [ -f %{_sysconfdir}/$f ]; then |
472 |
mv %{_sysconfdir}/$f %{_sysconfdir}/$f.rpmnew |
473 |
fi |
474 |
mv %{chroot_prefix}/etc/$f.rpmsave %{_sysconfdir}/$f; |
475 |
fi |
476 |
done |
477 |
|
478 |
if [ -d %{chroot_prefix}/var/named/master ]; then |
479 |
mv %{chroot_prefix}/var/named/master %{_localstatedir}/named |
480 |
fi |
481 |
|
482 |
if [ -d %{chroot_prefix}/var/named/reverse ]; then |
483 |
mv %{chroot_prefix}/var/named/reverse %{_localstatedir}/named |
484 |
fi |
485 |
|
486 |
%pre |
487 |
%_pre_useradd named /var/lib/named /bin/false |
488 |
|
489 |
%post |
490 |
if [ "$1" -gt 1 ]; then |
491 |
# upgrade |
492 |
mv -f %{chroot_prefix}/var/named/* /var/named/ |
493 |
rm -rf %{chroot_prefix}%{_libdir}/openssl-* |
494 |
fi |
495 |
%_tmpfilescreate named |
496 |
%_post_service named |
497 |
|
498 |
# chroot devices |
499 |
[ -e %{chroot_prefix}/dev/random ] || \ |
500 |
/bin/mknod %{chroot_prefix}/dev/random c 1 8 |
501 |
[ -e %{chroot_prefix}/dev/zero ] || \ |
502 |
/bin/mknod %{chroot_prefix}/dev/zero c 1 5 |
503 |
[ -e %{chroot_prefix}/dev/null ] || \ |
504 |
/bin/mknod %{chroot_prefix}/dev/null c 1 3 |
505 |
rm -f %{chroot_prefix}/etc/localtime |
506 |
cp /etc/localtime %{chroot_prefix}/etc/localtime |
507 |
|
508 |
if [ "$1" -eq 1 ]; then |
509 |
# installation |
510 |
MYKEY="`%{_sbindir}/dns-keygen`" |
511 |
perl -pi -e "s|_MY_KEY_|$MYKEY|g" %{_sysconfdir}/rndc.key |
512 |
fi |
513 |
|
514 |
%preun |
515 |
%_preun_service named |
516 |
|
517 |
if [ "$1" -eq 0 ]; then |
518 |
# uninstallation |
519 |
rm -f %{chroot_prefix}/dev/{random,zero,null} |
520 |
rm -f %{chroot_prefix}/etc/localtime |
521 |
fi |
522 |
|
523 |
%postun |
524 |
%_postun_userdel named |
525 |
|
526 |
%files |
527 |
%doc CHANGES README README.mga FAQ COPYRIGHT |
528 |
%if %{geoip} |
529 |
%doc geodns.INSTALL geodns.named.conf-sample |
530 |
%endif |
531 |
%{_sbindir}/setup-named-chroot.sh |
532 |
%{_sbindir}/arpaname |
533 |
%{_sbindir}/ddns-confgen |
534 |
%{_sbindir}/dns-keygen |
535 |
%{_sbindir}/dnssec-coverage |
536 |
%{_sbindir}/dnssec-dsfromkey |
537 |
%{_sbindir}/dnssec-keyfromlabel |
538 |
%{_sbindir}/dnssec-keygen |
539 |
%{_sbindir}/dnssec-revoke |
540 |
%{_sbindir}/dnssec-settime |
541 |
%{_sbindir}/dnssec-signzone |
542 |
%{_sbindir}/dnssec-checkds |
543 |
%{_sbindir}/dnssec-verify |
544 |
%{_sbindir}/genrandom |
545 |
%{_sbindir}/isc-hmac-fixup |
546 |
%{_sbindir}/lwresd |
547 |
%{_sbindir}/named |
548 |
%{_sbindir}/named-bootconf |
549 |
%{_sbindir}/named-checkconf |
550 |
%{_sbindir}/named-checkzone |
551 |
%{_sbindir}/named-compilezone |
552 |
%{_sbindir}/named-journalprint |
553 |
%{_sbindir}/nsec3hash |
554 |
%{_sbindir}/rndc |
555 |
%{_sbindir}/rndc-confgen |
556 |
%{_mandir}/man1/arpaname.1.* |
557 |
%{_mandir}/man5/named.conf.5* |
558 |
%{_mandir}/man5/rndc.conf.5* |
559 |
%{_mandir}/man8/ddns-confgen.8.* |
560 |
%{_mandir}/man8/dnssec-*.8* |
561 |
%{_mandir}/man8/genrandom.8.* |
562 |
%{_mandir}/man8/isc-hmac-fixup.8.* |
563 |
%{_mandir}/man8/lwresd.8* |
564 |
%{_mandir}/man8/named-*.8* |
565 |
%{_mandir}/man8/named.8* |
566 |
%{_mandir}/man8/nsec3hash.8.* |
567 |
%{_mandir}/man8/rndc.8* |
568 |
%{_mandir}/man8/rndc-confgen.8* |
569 |
%{_libdir}/bind |
570 |
|
571 |
# main configuration |
572 |
%dir %{_sysconfdir}/named |
573 |
%config(noreplace) %{_sysconfdir}/named.conf |
574 |
%attr(-,root,named) %config(noreplace) %{_sysconfdir}/rndc.key |
575 |
%attr(-,root,named) %config(noreplace) %{_sysconfdir}/named.iscdlv.key |
576 |
%attr(-,root,named) %config(noreplace) %{_sysconfdir}/named.root.key |
577 |
|
578 |
# other configuration |
579 |
%config(noreplace) %{_sysconfdir}/sysconfig/named |
580 |
%config(noreplace) %{_sysconfdir}/rsyslog.d/named.conf |
581 |
%config(noreplace) %{_sysconfdir}/logrotate.d/named |
582 |
%{_sysconfdir}/NetworkManager/dispatcher.d/13-named |
583 |
%{_tmpfilesdir}/named.conf |
584 |
%{_unitdir}/named.service |
585 |
|
586 |
# variable directory |
587 |
%dir %{_localstatedir}/named |
588 |
%attr(-,named,named) %dir %{_localstatedir}/named/slaves |
589 |
%attr(-,named,named) %dir %{_localstatedir}/named/data |
590 |
%attr(-,named,named) %dir %{_localstatedir}/named/dynamic |
591 |
%config(noreplace) %{_localstatedir}/named/named.ca |
592 |
%config(noreplace) %{_localstatedir}/named/named.localhost |
593 |
%config(noreplace) %{_localstatedir}/named/named.loopback |
594 |
%config(noreplace) %{_localstatedir}/named/named.empty |
595 |
|
596 |
# the chroot |
597 |
%ghost %{chroot_prefix}/dev/null |
598 |
%ghost %{chroot_prefix}/dev/random |
599 |
%ghost %{chroot_prefix}/dev/zero |
600 |
%ghost %{chroot_prefix}/etc/localtime |
601 |
%dir %{chroot_prefix} |
602 |
%dir %{chroot_prefix}/dev |
603 |
%dir %{chroot_prefix}/etc |
604 |
%dir %{chroot_prefix}/etc/named |
605 |
%dir %{chroot_prefix}/etc/pki |
606 |
%dir %{chroot_prefix}/etc/pki/dnssec-keys |
607 |
%dir %{chroot_prefix}/var |
608 |
%dir %{chroot_prefix}/var/run |
609 |
%dir %{chroot_prefix}/var/named |
610 |
%dir %{chroot_prefix}/usr |
611 |
%dir %{chroot_prefix}/%{_libdir} |
612 |
%dir %{chroot_prefix}/%{_libdir}/bind |
613 |
%dir %{chroot_prefix}/%{_libdir}/openssl |
614 |
|
615 |
%attr(-,named,named) %dir %{chroot_prefix}/var/run/named |
616 |
%attr(-,named,named) %dir %{chroot_prefix}/var/tmp |
617 |
%attr(-,named,named) %dir %{chroot_prefix}/var/log |
618 |
|
619 |
|
620 |
%files devel |
621 |
%doc CHANGES README |
622 |
%multiarch %{multiarch_bindir}/isc-config.sh |
623 |
%{_bindir}/isc-config.sh |
624 |
%{_includedir}/* |
625 |
%{_libdir}/*.a |
626 |
%{_mandir}/man1/isc-config.sh.1* |
627 |
%{_mandir}/man3/lwres*.3* |
628 |
|
629 |
%files utils |
630 |
%doc README COPYRIGHT *.query-loc *.queryperf |
631 |
%{_bindir}/dig |
632 |
%{_bindir}/host |
633 |
%{_bindir}/nslookup |
634 |
%{_bindir}/nsupdate |
635 |
%{_bindir}/queryperf |
636 |
%{_bindir}/query-loc |
637 |
%{_mandir}/man1/host.1* |
638 |
%{_mandir}/man1/dig.1* |
639 |
%{_mandir}/man1/nslookup.1* |
640 |
%{_mandir}/man1/nsupdate.1* |
641 |
%{_mandir}/man1/query-loc.1* |
642 |
%{_sysconfdir}/trusted-key.key |
643 |
|
644 |
%files doc |
645 |
%{_docdir}/%{name} |
646 |
|
647 |
%if %{sdb} |
648 |
%files sdb |
649 |
%doc contrib/sdb/ldap/README.ldap |
650 |
%doc contrib/sdb/ldap/INSTALL.ldap |
651 |
%doc contrib/sdb/pgsql/README.sdb_pgsql |
652 |
%{_unitdir}/named-sdb.service |
653 |
%{_mandir}/man1/zone2ldap.1* |
654 |
%{_mandir}/man1/ldap2zone.1* |
655 |
%{_mandir}/man1/zonetodb.1* |
656 |
%{_mandir}/man1/zone2sqlite.1* |
657 |
%{_mandir}/man8/named-sdb.8* |
658 |
%config(noreplace) %{_sysconfdir}/openldap/schema/dnszone.schema |
659 |
%{_sbindir}/named-sdb |
660 |
%{_sbindir}/zone2ldap |
661 |
%{_sbindir}/ldap2zone |
662 |
%{_sbindir}/zonetodb |
663 |
%{_sbindir}/zone2sqlite |
664 |
%endif |