Commit graph

12 commits

Author SHA1 Message Date
schmonz
543b492bc3 Bump default dnscache datalimit, and version. 2019-01-08 18:19:27 +00:00
schmonz
31940d97a1 With the 'inet6' option, depend on djbdnscurve6 instead of djbdns.
Extract most of MESSAGE to README.pkgsrc.

Remove vestigial Red Hat chkconfig stanza from main control script (we
have pkgtools/rc.d-boot now).

Use CONF_FILES where applicable.

rc.d script defaults:
- Tag log entries like qmail-run's; for instance, "nbtinydns" and
  "nbdnscache" become "nbdjbdns/tiny" and "nbdjbdns/cache".
- Have tinydns listen on the network.
- Auto-rebuild CDBs as needed on service start.

Bump version.
2019-01-07 14:01:55 +00:00
schmonz
7e41d89ba2 Catch up to qmail-run:
- Collapse redundant code for invoking service-specific rc.d scripts.
- Don't try to run a service's rc.d script if it isn't enabled in rc.conf.
- Prefix "nb" to procnames.

Bump version.
2017-08-05 15:16:05 +00:00
schmonz
33ee7d5857 Catch up to qmail-run:
- Wrap long command lines for readability
- Document where we set procname=${name} for rc.d
- Detach long-running processes from controlling terminal
- Configurable path to tcpserver
- Configurable user and group names:

DJBDNS_AXFR_USER?=	axfrdns
DJBDNS_CACHE_USER?=	dnscache
DJBDNS_RBL_USER?=	rbldns
DJBDNS_TINY_USER?=	tinydns
DJBDNS_DJBDNS_GROUP?=	djbdns

Bump version.
2017-06-23 15:39:44 +00:00
jperkin
b5a3ccfbce Remove mk/find-prefix.mk usage from the net category.
The find-prefix infrastructure was required in a pkgviews world where
packages installed from pkgsrc could have different installation
prefixes, and this was a way for a dependency prefix to be determined.

Now that pkgviews has been removed there is no longer any need for the
overhead of this infrastructure.  Instead we use BUILDLINK_PREFIX.pkg
for dependencies pulled in via buildlink, or LOCALBASE/PREFIX where the
dependency is coming from pkgsrc.

Provides a reasonable performance win due to the reduction of `pkg_info
-qp` calls, some of which were redundant anyway as they were duplicating
the same information provided by BUILDLINK_PREFIX.pkg.
2015-11-25 12:52:11 +00:00
schmonz
19861569ce Based on feedback from joerg@ and riastradh@, don't save a persistent
seed file on first startup after all. Primary rationale: it is not
desirable that the predictability of the first boot (whatever that
may happen to be) force an upper bound on the unpredictability of
random seeds for all future dnscache instances. Instead, as before,
let dnscache read 128 new bytes on every startup. Just give it
/dev/urandom instead of /dev/random.

While here, abolish references to LOCALBASE. Bump version.
2014-12-07 04:33:30 +00:00
schmonz
955c8d3a4e On rebooting a Xen VPS, dnscache said it started, but failed to
respond to queries and wrote nothing to the logs. This would have
been more fun to debug if my production system hadn't been relying
on it for name resolution. The problem was a blocking read from
/dev/random.

I'm the one who put that there, over 10 years ago. Do we need it?

From my reading of <http://cr.yp.to/djbdns/dnscache-conf.html> and
dnscache-conf.c, the seed needn't consist of top-notch randomness.
A sysadmin following DJB to the letter (rather than using this
djbdns-run package) would run dnscache-conf once to configure a
dnscache instance. dnscache-conf would cook 128 bytes of randomness
-- without direct assistance from any kernel device -- and write
it to a file. dnscache would read the same file on every startup.

Therefore, we...

1. Generate a random seed iff it doesn't exist (not on every startup)
2. Generate it from /dev/urandom instead of /dev/random

...so that the configuration we generate more nearly matches that of
DJB's documented procedure, and the kind of problem I encountered
is much more difficult to trigger.

While here, add LICENSE (2-clause-bsd) and otherwise placate pkglint.

Bump version.
2014-12-06 09:41:04 +00:00
schmonz
82b4876eae Fix the boot-time error (which also resulted in ntpdate failing):
rcorder: Circular dependency on provision `named' in file `/etc/rc.d/ntpdate'.

Fix it by aping -r1.22 of src/etc/rc.d/named, which had replaced
"SERVERS" with "NETWORKING mountcritremote syslogd". Problem and
fix reported by Nathan Arthur.

Bump version by exactly nine years.
2014-04-15 23:07:21 +00:00
schmonz
7add8e3264 Update to 20050415. Changes:
* Add "djbdns" rc.d script to control all enabled djbdns services,
    modeled after the "qmail" rc.d script from mail/qmail-run.
* Set rc.conf defaults more succinctly, modeled after mail/qmail-run.
* Add "reload" as a synonym for "cdb" in axfrdns, rbldns, and tinydns.
* Add "foo_postenv" for additional environment customization, for
    instance to run dnscache as a pure forwarder.
* Add "foo_log" booleans to enable or disable logging (enabled by default).
* Always run loggers as the "dnslog" user. This makes it simpler
    to define alternate loggers.
2005-04-15 05:15:55 +00:00
schmonz
9f6490e274 Move "User-settable rc.conf variables and their default values"
section above the inclusion of rc.subr, and express the default
assignments more succinctly (from Todd Vierling). Remove Jonathan
de Boyne Pollard's dnscache-showctl and tinydns-showctl, since they
don't apply to services run with these rc.d scripts. Bump version.
2004-12-29 16:35:41 +00:00
schmonz
90b4aa8f81 Note in DESCR and in README.pkgsrc that {dnscache,tinydns}-showctl
are useful only for services configured in the standard way (with
{dnscache,tinydns}-conf(8)).

On second thought, don't use the G prefix for the account names.
It makes the dnscache account longer than 8 characters, which in
turn makes noise in the nightly report. (Also, it looks a little
funny.) Since this is already a heavily customized way of running
djbdns services, it's just a little more customized now.

Bump version.
2004-09-02 08:23:02 +00:00
schmonz
01f641147d Initial import of djbdns-run, a package that provides NetBSD-style
rc.d scripts (inspired by Bennett Todd's Linux init.d scripts) to
run djbdns services. It also includes Jonathan de Boyne Pollard's
dnscache-showctl and tinydns-showctl scripts.
2004-09-01 20:13:04 +00:00