From 8a5c4384e059b83edb5869748706bad17ae5f8ff Mon Sep 17 00:00:00 2001 From: 宋文武 Date: Wed, 22 Jan 2020 20:06:41 +0800 Subject: gnu: knot-resolver: Install but disable the default managed root TA. * gnu/packages/dns.scm (knot-resolver)[arguments]: Enable 'managed_ta', so 'icann-ca.pem' get installed. Add 'disable-default-ta' phase. --- gnu/packages/dns.scm | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) (limited to 'gnu/packages/dns.scm') diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm index e5148d5bc9..3091444ed6 100644 --- a/gnu/packages/dns.scm +++ b/gnu/packages/dns.scm @@ -680,11 +680,16 @@ (define-public knot-resolver "09ffmqx79lv5psr433x4n946njgsn071b9b7161pcb9bmrqz380c")))) (build-system meson-build-system) (arguments - '(#:configure-flags - '("-Dmanaged_ta=disabled" ; we'll manage the DNS root data ourself - "-Ddoc=enabled") + '(#:configure-flags '("-Ddoc=enabled") #:phases (modify-phases %standard-phases + (add-before 'configure 'disable-default-ta + (lambda _ + ;; Disable the default managed root TA, since we don't have + ;; write access to the keyfile and its directory in store. + (substitute* "daemon/lua/sandbox.lua.in" + (("^trust_anchors\\.add_file.*") "")) + #t)) (add-after 'build 'build-doc (lambda _ (invoke "ninja" "doc"))) -- cgit v1.2.3 From c356e65610f287e740d3ec25cf5301f8e928a654 Mon Sep 17 00:00:00 2001 From: Tobias Geerinckx-Rice Date: Thu, 23 Jan 2020 04:57:11 +0100 Subject: gnu: bind: Update to 9.14.10. * gnu/packages/dns.scm (bind): Update to 9.14.10. --- gnu/packages/dns.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'gnu/packages/dns.scm') diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm index 3091444ed6..7c52722cb6 100644 --- a/gnu/packages/dns.scm +++ b/gnu/packages/dns.scm @@ -114,7 +114,7 @@ (define-public dnsmasq (define-public isc-bind (package (name "bind") - (version "9.14.9") + (version "9.14.10") (source (origin (method url-fetch) (uri (string-append @@ -122,7 +122,7 @@ (define-public isc-bind "/bind-" version ".tar.gz")) (sha256 (base32 - "0g2ph3hlw86yib8hv13qgkb4i84s9zv22r4k6yqlycm2izamwmr9")))) + "0nkkc2phkkzwgl922xg41gx5pc5f4safabqslaw3880hwdf8vfaa")))) (build-system gnu-build-system) (outputs `("out" "utils")) (inputs -- cgit v1.2.3