* [meta-python2][PATCH 1/2] dnssec-conf: move recipe from meta-networking
@ 2020-01-28 4:32 Tim Orling
2020-01-28 4:32 ` [meta-python2][PATCH 2/2] dnssec-conf: add missing RDEPENDS Tim Orling
0 siblings, 1 reply; 2+ messages in thread
From: Tim Orling @ 2020-01-28 4:32 UTC (permalink / raw)
To: openembedded-devel
From: Andrey Zhizhikin <andrey.z@gmail.com>
dnssec-conf did not receive any updates since 2010 and relies heavily on
python2 code base.
Move recipe to meta-python2 layer, since python2 support has been dropped in
oe-core.
Signed-off-by: Andrey Zhizhikin <andrey.z@gmail.com>
Signed-off-by: Tim Orling <ticotimo@gmail.com>
---
.../dnssec-conf/dnssec-conf_2.02.bb | 35 +++++++++++++++++++
1 file changed, 35 insertions(+)
create mode 100644 recipes-support/dnssec-conf/dnssec-conf_2.02.bb
diff --git a/recipes-support/dnssec-conf/dnssec-conf_2.02.bb b/recipes-support/dnssec-conf/dnssec-conf_2.02.bb
new file mode 100644
index 00000000..ca59bd21
--- /dev/null
+++ b/recipes-support/dnssec-conf/dnssec-conf_2.02.bb
@@ -0,0 +1,35 @@
+SUMMARY = "DNSSEC and DLV configuration and priming tool"
+DESCRIPTION = "\
+DNSSEC configuration and priming tool. Keys are required until the root \
+is signed, as well as for local unpublished DNSSEC keys to be preloaded \
+into the recursive nameserver. These DNSSEC configuration files can be \
+directly included in the bind or unbound nameserver configuration files. \
+dnssec-conf includes a commandline configuration client for Bind and \
+Unbound, known DNSSEC keys, URL's to official publication pages of keys, \
+and harvested keys, as well a script to harvest DNSKEY's from DNS. \
+See also: system-config-dnssec"
+HOMEPAGE = "https://github.com/xelerance/dnssec-conf"
+SECTION = "net"
+LICENSE = "GPLv2+"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=0636e73ff0215e8d672dc4c32c317bb3"
+DEPENDS += "xmlto-native docbook-xml-dtd4-native \
+ docbook-xsl-stylesheets-native libxslt-native"
+
+SRC_URI = "git://github.com/xelerance/dnssec-conf.git"
+SRCREV = "8e799683736b4a7b5e5e78f98fba0a6f48393537"
+
+S = "${WORKDIR}/git"
+
+do_install () {
+ rm -rf ${D}
+ make PREFIX=${prefix} DESTDIR=${D} ETCDIR=${D}${sysconfdir} install
+ # We no longer ship trust anchors. Most of these are in the DLV Registry now.
+ # and it prevents the problem of shipping outdated trust anchors.
+ # For DLV, we ship the ISC DLV Registry key
+ rm -rf ${D}${sysconfdir}/pki/dnssec-keys/harvest/*
+ rm -rf ${D}${sysconfdir}/pki/dnssec-keys/production/reverse/*
+ install -d -m 0755 ${D}${sysconfdir}/sysconfig
+ install -m 0644 packaging/fedora/dnssec.sysconfig ${D}${sysconfdir}/sysconfig/dnssec
+}
+
+RDEPENDS_${PN} = "python"
--
2.25.0
^ permalink raw reply related [flat|nested] 2+ messages in thread
* [meta-python2][PATCH 2/2] dnssec-conf: add missing RDEPENDS
2020-01-28 4:32 [meta-python2][PATCH 1/2] dnssec-conf: move recipe from meta-networking Tim Orling
@ 2020-01-28 4:32 ` Tim Orling
0 siblings, 0 replies; 2+ messages in thread
From: Tim Orling @ 2020-01-28 4:32 UTC (permalink / raw)
To: openembedded-devel
Fixes:
"dnssec-configure requires the pyparser package from
http://pyparsing.wikispaces.com
[...]
"
Fixes:
"dnskey-pull requires the python-dns package from
http://www.dnspython.org/
[...]
"
It has dependencies on the split packages from python manifest, but
since it RDEPENDS on "python", all standard lib modules are pulled in.
If someone requires a smaller image, the RDEPENDS could be paired down.
It also requires "curl" as shown in INSTALL and:
https://github.com/xelerance/dnssec-conf/blob/8e799683736b4a7b5e5e78f98fba0a6f48393537/dnskey-pull#L86
It also requires "host" (from bind-utils) as shown in:
https://github.com/xelerance/dnssec-conf/blob/8e799683736b4a7b5e5e78f98fba0a6f48393537/dnskey-pull#L299
It recommends "bind", but another nameserver can be used. That level of
complexity is left up to someone that needs a different configuration.
Signed-off-by: Tim Orling <ticotimo@gmail.com>
---
recipes-support/dnssec-conf/dnssec-conf_2.02.bb | 8 +++++++-
1 file changed, 7 insertions(+), 1 deletion(-)
diff --git a/recipes-support/dnssec-conf/dnssec-conf_2.02.bb b/recipes-support/dnssec-conf/dnssec-conf_2.02.bb
index ca59bd21..1b767a39 100644
--- a/recipes-support/dnssec-conf/dnssec-conf_2.02.bb
+++ b/recipes-support/dnssec-conf/dnssec-conf_2.02.bb
@@ -32,4 +32,10 @@ do_install () {
install -m 0644 packaging/fedora/dnssec.sysconfig ${D}${sysconfdir}/sysconfig/dnssec
}
-RDEPENDS_${PN} = "python"
+RDEPENDS_${PN} = "\
+ bind-utils \
+ curl \
+ python \
+ python-dnspython \
+ python-pyparsing \
+"
--
2.25.0
^ permalink raw reply related [flat|nested] 2+ messages in thread
end of thread, other threads:[~2020-01-28 4:33 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2020-01-28 4:32 [meta-python2][PATCH 1/2] dnssec-conf: move recipe from meta-networking Tim Orling
2020-01-28 4:32 ` [meta-python2][PATCH 2/2] dnssec-conf: add missing RDEPENDS Tim Orling
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.