[arch-commits] Commit in nsd/repos (5 files)

[Bruno Pagani]

    Date: Saturday, February 6, 2021 @ 12:39:41
  Author: archange
Revision: 846614

archrelease: copy trunk to community-testing-x86_64

Added:
  nsd/repos/community-testing-x86_64/
  nsd/repos/community-testing-x86_64/PKGBUILD
    (from rev 846613, nsd/trunk/PKGBUILD)
  nsd/repos/community-testing-x86_64/nsd.service
    (from rev 846613, nsd/trunk/nsd.service)
  nsd/repos/community-testing-x86_64/nsd.sysusers
    (from rev 846613, nsd/trunk/nsd.sysusers)
  nsd/repos/community-testing-x86_64/nsd.tmpfiles
    (from rev 846613, nsd/trunk/nsd.tmpfiles)

--------------+
 PKGBUILD     |   60 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 nsd.service  |   39 +++++++++++++++++++++++++++++++++++++
 nsd.sysusers |    1 
 nsd.tmpfiles |    1 
 4 files changed, 101 insertions(+)

Copied: nsd/repos/community-testing-x86_64/PKGBUILD (from rev 846613, nsd/trunk/PKGBUILD)
===================================================================
--- community-testing-x86_64/PKGBUILD	                        (rev 0)
+++ community-testing-x86_64/PKGBUILD	2021-02-06 12:39:41 UTC (rev 846614)
@@ -0,0 +1,60 @@
+# Maintainer: Bruno Pagani <archange at archlinux.org>
+# Contributor: Gaetan Bisson <bisson at archlinux.org>
+# Contributor: Kaiting Chen <kaitocracy at gmail.com>
+# Contributor: Roberto Alsina <ralsina at kde.org>
+
+pkgname=nsd
+pkgver=4.3.5
+pkgrel=1
+pkgdesc="Authoritative only, high performance and simple DNS server"
+arch=(x86_64)
+url="https://www.nlnetlabs.nl/nsd/"
+license=(BSD)
+depends=(openssl libevent fstrm protobuf-c systemd-libs)
+makedepends=(systemd)
+validpgpkeys=(EDFAA3F2CA4E6EB05681AF8E9F6F1C2D7E045F8D  # W.C.A. Wijngaards <wouter at nlnetlabs.nl>
+              C3E356788FAD0179D872D092BA811E62E7194568)
+source=("https://www.nlnetlabs.nl/downloads/${pkgname}/${pkgname}-${pkgver}.tar.gz"{,.asc}
+        nsd.service
+        nsd.sysusers
+        nsd.tmpfiles)
+sha256sums=('7da2b43e30b3d7f307722c608f719bfb169f0d985c764a34fa0669dc33484472'
+            'SKIP'
+            'af6935d55916b186d0aa8baf59ad6cb531bb000189cc9fd240ef95272b80bf8c'
+            '12ce2a05fbb23bb38c31933530a7773f796e250691843b9da76f178f5e7c94f5'
+            '07a31cecdc787c7ef44018dfc696115bd7b5d44b6e93f56c6c08ed0887d51579')
+
+prepare() {
+  cd ${pkgname}-${pkgver}
+  autoreconf -vfi
+}
+
+build() {
+  cd ${pkgname}-${pkgver}
+  ./configure \
+    --prefix=/ \
+    --sbindir=/usr/bin \
+    --datarootdir=/usr/share \
+    --with-pidfile=/run/nsd/nsd.pid \
+    --enable-ratelimit \
+    --enable-relro-now \
+    --enable-pie \
+    --enable-dnstap \
+    --enable-systemd \
+    --enable-tcp-fastopen
+  make
+}
+
+package() {
+  cd ${pkgname}-${pkgver}
+  make DESTDIR="${pkgdir}" install
+  rmdir "${pkgdir}"/{tmp,run{/nsd,},var{/db{/nsd,},}}
+
+  rm doc/differences.pdf
+  install -d "${pkgdir}"/usr/share/{doc,licenses}/"${pkgname}"
+  install -m644 doc/* "${pkgdir}"/usr/share/doc/"${pkgname}"
+  ln -s ../../doc/"${pkgname}"/LICENSE "${pkgdir}"/usr/share/licenses/"${pkgname}"/LICENSE
+  install -Dm644 ../nsd.service -t "${pkgdir}"/usr/lib/systemd/system/
+  install -Dm644 ../nsd.sysusers "${pkgdir}"/usr/lib/sysusers.d/nsd.conf
+  install -Dm644 ../nsd.tmpfiles "${pkgdir}"/usr/lib/tmpfiles.d/nsd.conf
+}

Copied: nsd/repos/community-testing-x86_64/nsd.service (from rev 846613, nsd/trunk/nsd.service)
===================================================================
--- community-testing-x86_64/nsd.service	                        (rev 0)
+++ community-testing-x86_64/nsd.service	2021-02-06 12:39:41 UTC (rev 846614)
@@ -0,0 +1,39 @@
+[Unit]
+Description=Name Server Daemon
+After=network.target
+
+[Service]
+User=nsd
+Group=nsd
+PermissionsStartOnly=true
+WorkingDirectory=~
+RuntimeDirectory=nsd
+ReadWritePaths=/var/db/nsd
+PIDFile=/run/nsd/nsd.pid
+ExecStart=/usr/bin/nsd -d -c /etc/nsd/nsd.conf
+ExecReload=/bin/kill -HUP $MAINPID
+ExecStop=/bin/kill -TERM $MAINPID
+Restart=always
+CapabilityBoundingSet=CAP_NET_BIND_SERVICE
+NoNewPrivileges=True
+#SecureBits=noroot-locked
+ProtectSystem=strict
+ProtectHome=true
+PrivateTmp=true
+PrivateDevices=true
+PrivateUsers=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+LockPersonality=true
+MemoryDenyWriteExecute=true
+RestrictRealtime=true
+RestrictSUIDSGID=true
+SystemCallArchitectures=native
+SystemCallFilter=@system-service
+
+[Install]
+WantedBy=multi-user.target

Copied: nsd/repos/community-testing-x86_64/nsd.sysusers (from rev 846613, nsd/trunk/nsd.sysusers)
===================================================================
--- community-testing-x86_64/nsd.sysusers	                        (rev 0)
+++ community-testing-x86_64/nsd.sysusers	2021-02-06 12:39:41 UTC (rev 846614)
@@ -0,0 +1 @@
+u nsd - "Name Server Daemon"

Copied: nsd/repos/community-testing-x86_64/nsd.tmpfiles (from rev 846613, nsd/trunk/nsd.tmpfiles)
===================================================================
--- community-testing-x86_64/nsd.tmpfiles	                        (rev 0)
+++ community-testing-x86_64/nsd.tmpfiles	2021-02-06 12:39:41 UTC (rev 846614)
@@ -0,0 +1 @@
+d /var/db/nsd 0700 nsd nsd