hak5
/
openwrt
mirror of https://github.com/hak5/openwrt.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
openwrt/package/network/services/dnsmasq/Makefile

186 lines
5.6 KiB
Makefile
Raw Normal View History

upgrade to 2.57 SVN-Revision: 25576
2011-02-19 08:50:15 +00:00
#
dnsmasq: add host-specific lease time option for static hosts Enable setting a host-specific lease time for static hosts. The new option is called "leasetime" and the format is similar as for the default lease time: e.g. 12h, 3d, infinite Default lease time is used for all hosts for which there is no host-specific definition. The option is added to /etc/config/dhcp for the selected hosts: config host option name 'Nexus' option mac 'd8:50:66:55:59:7c' option ip '192.168.1.245' option leasetime '2h' It gets appended to /var/etc/dnsmasq.conf like this: dhcp-host=d8:50:66:55:59:7c,192.168.1.245,Nexus,2h Signed-off-by: Hannu Nyman <hannu.nyman@iki.fi> SVN-Revision: 48801
2016-02-26 09:13:03 +00:00
# Copyright (C) 2006-2016 OpenWrt.org
credit where credit is due SVN-Revision: 4091
2006-06-27 00:35:46 +00:00
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
add md5sums SVN-Revision: 405
2005-03-21 08:12:49 +00:00
nbd's makefile/menuconfig rewrite SVN-Revision: 307
2005-03-06 03:34:52 +00:00
include $(TOPDIR)/rules.mk
bring up to date with nbd's br2_test20.tar.bz2 SVN-Revision: 308
2005-03-06 03:53:29 +00:00
PKG_NAME:=dnsmasq
dnsmasq: bump to 2.79 release 94b6878 Tidy crypto.c of old library compat. Now need libnettle 3. 8b96552 Fix compiler warning. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2018-03-18 22:25:42 +00:00
PKG_VERSION:=2.79
dnsmasq: bump to 2.79rc1 1721453 Remove special handling of A-for-A queries. 499d8dd Fix boundary for test introduced in 3e3f1029c9ec6c63e430ff51063a6301d4b2262 6f1cbfd Fix debian/readme typo. 55ecde7 Inotify: Ignore backup files created by editors 6b54d69 Make failure to chown() pidfile a warning. 246a31c Change ownership of pid file, to keep systemd happy. 83e4b73 Remove confusion between --user and --script-user. 6340ca7 Tweak heuristic for initial DNSSEC memory allocation. baf553d Default min-port to 1024 to avoid reserved ports. 486bcd5 Simplify and correct bindtodevice(). be9a74d Close Debian bug for CVE-2017-15107. ffcbc0f Example config typo fixes. a969ba6 Special case NSEC processing for root DS record, to avoid spurious BOGUS. f178172 Add homepage to Debian control file. cd7df61 Fix DNSSEC validation errors introduced in 4fe6744a220eddd3f1749b40cac3dfc510787de6 c1a4e25 Try to be a little more clever at falling back to smaller DNS packet sizes. 4fe6744 DNSSEC fix for wildcard NSEC records. CVE-2017-15107 applies. 3bd4c47 Remove limit on length of command-line options. 98196c4 Typo fix. 22cd860 Allow more than one --bridge-interface option to refer to an interface. 3c973ad Use SIGINT (instead of overloading SIGHUP) to turn on DNSSEC time validation. faaf306 Spelling fixes. c7e6aea Change references to gPXE to iPXE. Development of EtherBoot gPXE was always development of iPXE core developer Michael Brown. e541245 Handle duplicate RRs in DNSSEC validation. 84a01be Bump year in Debian copyright notice. d1ced3a Update copyrights to 2018. a6cee69 Fix exit code from dhcp_release6. 0039920 Severely fix code formating of contrib/lease-tools/dhcp_release6.c 39d8550 Run Debian startup regex in "C" locale. ef3d137 Fix infinite retries in strict-order mode. 8c707e1 Make 373e91738929a3d416e6292e65824184ba8428a6 compile without DNSSEC. 373e917 Fix a6004d7f17687ac2455f724d0b57098c413f128d to cope with >256 RRs in answer section. 74f0f9a Commment language tweaks. ed6bdb0 Man page typos. c88af04 Modify doc.html to mention git-over-http is now available. ae0187d Fix trust-anchor regexp in Debian init script. 0c50e3d Bump version in Debian package. 075366a Open inotify socket only when used. 8e8b2d6 Release notes update. 087eb76 Always return a SERVFAIL response to DNS queries with RD=0. ebedcba Typo in printf format string added in 22dee512f3738f87539a79aeb52b9e670b3bd104 0954a97 Remove RSA/MD5 DNSSEC algorithm. b77efc1 Tidy DNSSEC algorithm table use. 3b0cb34 Fix manpage which said ZSK but meant KSK. aa6f832 Add a few DNS RRs to the table. ad9c6f0 Add support for Ed25519 DNSSEC signature algorithm. a6004d7 Fix caching logic for validated answers. c366717 Tidy up add_resource_record() buffer size checks. 22dee51 Log DNS server max packet size reduction. 6fd5d79 Fix logic on EDNS0 headers. 9d6918d Use IP[V6]_UNICAST_IF socket option instead of SO_BINDTODEVICE for DNS. a49c5c2 Fix search_servers() segfault with DNSSEC. 30858e3 Spaces in CNAME options break parsing. Refresh patches. Remove upstreamed patches: 250-Fix-infinite-retries-in-strict-order-mode.patch 260-dnssec-SIGINT.patch 270-dnssec-wildcards.patch Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2018-02-15 10:45:38 +00:00
PKG_RELEASE:=1
add md5sums SVN-Revision: 405
2005-03-21 08:12:49 +00:00
dnsmasq: bump to 2.73rc4 Fix crash caused by malformed DNS requests Improved DNSSEC handling Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 45354
2015-04-10 10:19:17 +00:00
PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz
dnsmasq: bump to 2.79 release 94b6878 Tidy crypto.c of old library compat. Now need libnettle 3. 8b96552 Fix compiler warning. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
2018-03-18 22:25:42 +00:00
PKG_SOURCE_URL:=http://thekelleys.org.uk/dnsmasq/
PKG_HASH:=78ad74f5ca14fd85a8bac93f764cd9d60b27579e90eabd3687ca7b030e67861f
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
license info - revert r43155 turns out that r43155 adds duplicate info. Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 43167
2014-11-03 09:56:44 +00:00
PKG_LICENSE:=GPL-2.0
PKG_LICENSE_FILES:=COPYING
add PKG_CPE_ID ids to package and tools CPE ids helps to tracks CVE in packages. https://cpe.mitre.org/specification/ Thanks to swalker for CPE to package mapping and keep tracking CVEs. Acked-by: Jo-Philipp Wich <jo@mein.io> Signed-off-by: Alexander Couzens <lynxis@fe80.eu>
2017-09-28 02:55:46 +00:00
PKG_CPE_ID:=cpe:/a:thekelleys:dnsmasq
licensing: Add licensing metadata to many packages Two new variables are introduces to many packages, namely PKG_LICENSE and PKG_LICENSE_FILES - there may be more than one license applied to packages, and these are listed in the PKG_LICENSE variable and separated by spaces. All relevant license files are also added to the PKG_LICENSE_FILES variable, also space separated. The licensing metadata is put into the bin/<platform>/packages/Packages file for later parsing. A script for that is on it's way! SVN-Revision: 33861
2012-10-19 15:34:28 +00:00
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
PKG_BUILD_DIR:=$(BUILD_DIR)/$(PKG_NAME)-$(BUILD_VARIANT)/$(PKG_NAME)-$(PKG_VERSION)
package/dnsmasq: update to 2.59 (thanks to Raphael Huck) SVN-Revision: 29329
2011-11-25 00:53:13 +00:00
PKG_INSTALL:=1
dnsmasq: enable parallel builds SVN-Revision: 33416
2012-09-15 11:36:58 +00:00
PKG_BUILD_PARALLEL:=1
dnsmasq: add DHCP build switch support in full variant Add config option which allows to enable/disable DHCP support at compile time. Make DHCPv6 support dependant on DHCP support as DHCPv6 support implies having DHCP support. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-12-10 15:25:18 +00:00
PKG_CONFIG_DEPENDS:= CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_dhcp \
CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_dhcpv6 \
dnsmasq: fix dependency problems of the dnsmasq-full variant. This patch tries to - Let the DHCPv6 feature depend on CONFIG_IPV6. - Conditionally select libnettle, kmod-ipv6, kmod-ipt-ipset only if the corresponding features are enabled. - Install `trust-anchors.conf` only if DNSSEC is selected. - Add PKG_CONFIG_DEPENDS for the configurable options. - Add a patch to let the Makefile of dnsmasq be aware of changes in COPTS variable. Big thanks goes to Frank Schäfer <fschaefer.oss@googlemail.com> for providing necessary information on connections and dependency relations between these CONFIGs and packages. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> SVN-Revision: 43851
2015-01-05 13:03:48 +00:00
CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_dnssec \
CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_auth \
dnsmasq: Add conntrack support in the full variant Conntrack support reads the connection track mark associated with incoming DNS queries and sets the same mark value on the upstream forwarded DNS query. This can be usefull to track traffic generated by dnsmasq to associate it with the clients who generate the queries, usefull for bandwidth accouting and firewall. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2016-04-27 09:14:01 +00:00
CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_ipset \
dnsmasq: Add broken realtime clock build switch in full variant By default dnsmasq uses the time function; which returns the time since Epoch; to retrieve the current time. On boards which have no realtime clock this can lead to side effects when the time is synced via ntp as the "time wrap" forces dhcp leases to be considered as expired. By enabling the broken realtime clock build switch dnsmasq uses the times utility which returns the number of clock tick. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> [Jo-Philipp Wich: change symbol name, add sym to PKG_CONFIG_DEPENDS] Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2016-06-29 12:29:48 +00:00
CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_conntrack \
dnsmasq: make NO_ID optional in full variant Permit users of the full variant to disable the NO_ID *.bind pseudo domain masking. Defaulted 'on' in all variants. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2016-09-09 08:03:27 +00:00
CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_noid \
dnsmasq: Add broken realtime clock build switch in full variant By default dnsmasq uses the time function; which returns the time since Epoch; to retrieve the current time. On boards which have no realtime clock this can lead to side effects when the time is synced via ntp as the "time wrap" forces dhcp leases to be considered as expired. By enabling the broken realtime clock build switch dnsmasq uses the times utility which returns the number of clock tick. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> [Jo-Philipp Wich: change symbol name, add sym to PKG_CONFIG_DEPENDS] Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2016-06-29 12:29:48 +00:00
CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_broken_rtc
nbd's makefile/menuconfig rewrite SVN-Revision: 307
2005-03-06 03:34:52 +00:00
add INCLUDE_DIR variable for $(TOPDIR)/include SVN-Revision: 4033
2006-06-21 02:32:39 +00:00
include $(INCLUDE_DIR)/package.mk
bring up to date with nbd's br2_test20.tar.bz2 SVN-Revision: 308
2005-03-06 03:53:29 +00:00
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
define Package/dnsmasq/Default
standardize Makefile, change section from base to net and category to "base system" SVN-Revision: 4820
2006-09-23 13:41:42 +00:00
SECTION:=net
CATEGORY:=Base system
dnsmasq: various house-keeping updates * Add Authoritative DNS and IPSET to full variant * Remove some bloat from IPSET support * Reintroduce "DHCP no address warning"-patch Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 41246
2014-06-18 10:04:34 +00:00
TITLE:=DNS and DHCP server
standardize Makefile, change section from base to net and category to "base system" SVN-Revision: 4820
2006-09-23 13:41:42 +00:00
URL:=http://www.thekelleys.org.uk/dnsmasq/
dnsmasq: add ubus notifications for new leases Signed-off-by: John Crispin <john@phrozen.org>
2017-08-22 14:43:02 +00:00
DEPENDS:=+libubus
dnsmasq: run as dedicated UID/GID Running dnsmasq in a dedicated user/group allows matching its outgoing traffic more easily using iptables' owner match. Add UID/GID to the package metadata and append the user/group parameters to the init script. Signed-off-by: Daniel Golle <daniel@makrotopia.org> SVN-Revision: 49252
2016-04-26 11:44:10 +00:00
USERID:=dnsmasq=453:dnsmasq=453
convert to new template SVN-Revision: 3744
2006-05-09 23:19:52 +00:00
endef
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
define Package/dnsmasq
$(call Package/dnsmasq/Default)
VARIANT:=nodhcpv6
endef
define Package/dnsmasq-dhcpv6
$(call Package/dnsmasq/Default)
TITLE += (with DHCPv6 support)
dnsmasq: add ubus notifications for new leases Signed-off-by: John Crispin <john@phrozen.org>
2017-08-22 14:43:02 +00:00
DEPENDS+=@IPV6
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
VARIANT:=dhcpv6
endef
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
define Package/dnsmasq-full
$(call Package/dnsmasq/Default)
dnsmasq: make NO_ID optional in full variant Permit users of the full variant to disable the NO_ID *.bind pseudo domain masking. Defaulted 'on' in all variants. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2016-09-09 08:03:27 +00:00
TITLE += (with DNSSEC, DHCPv6, Auth DNS, IPset, Conntrack, NO_ID enabled by default)
dnsmasq: add ubus notifications for new leases Signed-off-by: John Crispin <john@phrozen.org>
2017-08-22 14:43:02 +00:00
DEPENDS+=+PACKAGE_dnsmasq_full_dnssec:libnettle \
dnsmasq: Add conntrack support in the full variant Conntrack support reads the connection track mark associated with incoming DNS queries and sets the same mark value on the upstream forwarded DNS query. This can be usefull to track traffic generated by dnsmasq to associate it with the clients who generate the queries, usefull for bandwidth accouting and firewall. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2016-04-27 09:14:01 +00:00
+PACKAGE_dnsmasq_full_ipset:kmod-ipt-ipset \
+PACKAGE_dnsmasq_full_conntrack:libnetfilter-conntrack
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
VARIANT:=full
endef
move package description to a separate definition, remove it when DESCRIPTION=TITLE SVN-Revision: 8659
2007-09-07 08:34:51 +00:00
define Package/dnsmasq/description
dnsmasq: update to 2.58 patch by Raphael Huck. SVN-Revision: 28333
2011-09-30 12:55:23 +00:00
It is intended to provide coupled DNS and DHCP service to a LAN.
move package description to a separate definition, remove it when DESCRIPTION=TITLE SVN-Revision: 8659
2007-09-07 08:34:51 +00:00
endef
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
define Package/dnsmasq-dhcpv6/description
$(call Package/dnsmasq/description)
This is a variant with DHCPv6 support
endef
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
define Package/dnsmasq-full/description
$(call Package/dnsmasq/description)
dnsmasq: add DHCP build switch support in full variant Add config option which allows to enable/disable DHCP support at compile time. Make DHCPv6 support dependant on DHCP support as DHCPv6 support implies having DHCP support. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-12-10 15:25:18 +00:00
This is a fully configurable variant with DHCPv4, DHCPv6, DNSSEC, Authoritative DNS
and IPset, Conntrack support & NO_ID enabled by default.
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
endef
add dnsmasq config file to the conffiles section SVN-Revision: 14398
2009-02-03 22:27:44 +00:00
define Package/dnsmasq/conffiles
/etc/config/dhcp
Add default /etc/dnsmasq.conf dnsmasq allows adding of arbitrary SRV/PTR/TXT/CNAME records. However, those options sometimes can not be passed as command-line arguments due to excess length. This patch tries to solve this problem: 1. Provide /etc/dnsmasq.conf file with comments about adding SRV/PTR/TXT/CNAME records. 2. Add this file to conffiles list so it is preserver during backup/restore or system upgrade. If someone needs a lot of custom records, default configuration file can be edited. Since manual pages and documentation is not installed, provided comments should be enough to figure out option syntax. Signed-off-by: Alexey I. Froloff <raorn@altlinux.org> SVN-Revision: 17663
2009-09-21 13:25:11 +00:00
/etc/dnsmasq.conf
add dnsmasq config file to the conffiles section SVN-Revision: 14398
2009-02-03 22:27:44 +00:00
endef
dnsmasq: fix dependency problems of the dnsmasq-full variant. This patch tries to - Let the DHCPv6 feature depend on CONFIG_IPV6. - Conditionally select libnettle, kmod-ipv6, kmod-ipt-ipset only if the corresponding features are enabled. - Install `trust-anchors.conf` only if DNSSEC is selected. - Add PKG_CONFIG_DEPENDS for the configurable options. - Add a patch to let the Makefile of dnsmasq be aware of changes in COPTS variable. Big thanks goes to Frank Schäfer <fschaefer.oss@googlemail.com> for providing necessary information on connections and dependency relations between these CONFIGs and packages. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> SVN-Revision: 43851
2015-01-05 13:03:48 +00:00
define Package/dnsmasq-full/config
if PACKAGE_dnsmasq-full
dnsmasq: add DHCP build switch support in full variant Add config option which allows to enable/disable DHCP support at compile time. Make DHCPv6 support dependant on DHCP support as DHCPv6 support implies having DHCP support. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-12-10 15:25:18 +00:00
config PACKAGE_dnsmasq_full_dhcp
bool "Build with DHCP support."
default y
dnsmasq: fix dependency problems of the dnsmasq-full variant. This patch tries to - Let the DHCPv6 feature depend on CONFIG_IPV6. - Conditionally select libnettle, kmod-ipv6, kmod-ipt-ipset only if the corresponding features are enabled. - Install `trust-anchors.conf` only if DNSSEC is selected. - Add PKG_CONFIG_DEPENDS for the configurable options. - Add a patch to let the Makefile of dnsmasq be aware of changes in COPTS variable. Big thanks goes to Frank Schäfer <fschaefer.oss@googlemail.com> for providing necessary information on connections and dependency relations between these CONFIGs and packages. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> SVN-Revision: 43851
2015-01-05 13:03:48 +00:00
config PACKAGE_dnsmasq_full_dhcpv6
bool "Build with DHCPv6 support."
dnsmasq: add DHCP build switch support in full variant Add config option which allows to enable/disable DHCP support at compile time. Make DHCPv6 support dependant on DHCP support as DHCPv6 support implies having DHCP support. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-12-10 15:25:18 +00:00
depends on IPV6 && PACKAGE_dnsmasq_full_dhcp
dnsmasq: fix dependency problems of the dnsmasq-full variant. This patch tries to - Let the DHCPv6 feature depend on CONFIG_IPV6. - Conditionally select libnettle, kmod-ipv6, kmod-ipt-ipset only if the corresponding features are enabled. - Install `trust-anchors.conf` only if DNSSEC is selected. - Add PKG_CONFIG_DEPENDS for the configurable options. - Add a patch to let the Makefile of dnsmasq be aware of changes in COPTS variable. Big thanks goes to Frank Schäfer <fschaefer.oss@googlemail.com> for providing necessary information on connections and dependency relations between these CONFIGs and packages. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> SVN-Revision: 43851
2015-01-05 13:03:48 +00:00
default y
config PACKAGE_dnsmasq_full_dnssec
bool "Build with DNSSEC support."
default y
config PACKAGE_dnsmasq_full_auth
bool "Build with the facility to act as an authoritative DNS server."
default y
config PACKAGE_dnsmasq_full_ipset
bool "Build with IPset support."
default y
dnsmasq: Add conntrack support in the full variant Conntrack support reads the connection track mark associated with incoming DNS queries and sets the same mark value on the upstream forwarded DNS query. This can be usefull to track traffic generated by dnsmasq to associate it with the clients who generate the queries, usefull for bandwidth accouting and firewall. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2016-04-27 09:14:01 +00:00
config PACKAGE_dnsmasq_full_conntrack
bool "Build with Conntrack support."
default y
dnsmasq: make NO_ID optional in full variant Permit users of the full variant to disable the NO_ID *.bind pseudo domain masking. Defaulted 'on' in all variants. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2016-09-09 08:03:27 +00:00
config PACKAGE_dnsmasq_full_noid
bool "Build with NO_ID. (hide *.bind pseudo domain)"
default y
dnsmasq: Add broken realtime clock build switch in full variant By default dnsmasq uses the time function; which returns the time since Epoch; to retrieve the current time. On boards which have no realtime clock this can lead to side effects when the time is synced via ntp as the "time wrap" forces dhcp leases to be considered as expired. By enabling the broken realtime clock build switch dnsmasq uses the times utility which returns the number of clock tick. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> [Jo-Philipp Wich: change symbol name, add sym to PKG_CONFIG_DEPENDS] Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2016-06-29 12:29:48 +00:00
config PACKAGE_dnsmasq_full_broken_rtc
bool "Build with HAVE_BROKEN_RTC."
default n
dnsmasq: fix dependency problems of the dnsmasq-full variant. This patch tries to - Let the DHCPv6 feature depend on CONFIG_IPV6. - Conditionally select libnettle, kmod-ipv6, kmod-ipt-ipset only if the corresponding features are enabled. - Install `trust-anchors.conf` only if DNSSEC is selected. - Add PKG_CONFIG_DEPENDS for the configurable options. - Add a patch to let the Makefile of dnsmasq be aware of changes in COPTS variable. Big thanks goes to Frank Schäfer <fschaefer.oss@googlemail.com> for providing necessary information on connections and dependency relations between these CONFIGs and packages. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> SVN-Revision: 43851
2015-01-05 13:03:48 +00:00
endif
dnsmasq: allow de-selecting features from -full variant. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> SVN-Revision: 43733
2014-12-17 05:59:12 +00:00
endef
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
Package/dnsmasq-dhcpv6/conffiles = $(Package/dnsmasq/conffiles)
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
Package/dnsmasq-full/conffiles = $(Package/dnsmasq/conffiles)
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
dnsmasq: use COPTS for compile time options As documented in config.h. Doing otherwise will break dnsmasq's pkg-wrapper script to find its libs to link to. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41241
2014-06-18 10:04:02 +00:00
TARGET_CFLAGS += -ffunction-sections -fdata-sections
dnsmasq: respect target's LDFLAGS Append local flags, don't overwrite. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41242
2014-06-18 10:04:17 +00:00
TARGET_LDFLAGS += -Wl,--gc-sections
dnsmasq: use COPTS for compile time options As documented in config.h. Doing otherwise will break dnsmasq's pkg-wrapper script to find its libs to link to. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41241
2014-06-18 10:04:02 +00:00
dnsmasq: make NO_ID optional in full variant Permit users of the full variant to disable the NO_ID *.bind pseudo domain masking. Defaulted 'on' in all variants. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2016-09-09 08:03:27 +00:00
COPTS = $(if $(CONFIG_IPV6),,-DNO_IPV6)
dnsmasq: use -ffunction-sections, -fdata-sections and --gc-sections, saves 8k uncompressed SVN-Revision: 25827
2011-03-02 12:47:57 +00:00
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
ifeq ($(BUILD_VARIANT),nodhcpv6)
dnsmasq: use COPTS for compile time options As documented in config.h. Doing otherwise will break dnsmasq's pkg-wrapper script to find its libs to link to. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41241
2014-06-18 10:04:02 +00:00
COPTS += -DNO_DHCP6
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
endif
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
ifeq ($(BUILD_VARIANT),full)
dnsmasq: add DHCP build switch support in full variant Add config option which allows to enable/disable DHCP support at compile time. Make DHCPv6 support dependant on DHCP support as DHCPv6 support implies having DHCP support. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-12-10 15:25:18 +00:00
COPTS += $(if $(CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_dhcp),,-DNO_DHCP) \
$(if $(CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_dhcpv6),,-DNO_DHCP6) \
dnsmasq: allow de-selecting features from -full variant. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> SVN-Revision: 43733
2014-12-17 05:59:12 +00:00
$(if $(CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_dnssec),-DHAVE_DNSSEC) \
$(if $(CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_auth),,-DNO_AUTH) \
dnsmasq: Add conntrack support in the full variant Conntrack support reads the connection track mark associated with incoming DNS queries and sets the same mark value on the upstream forwarded DNS query. This can be usefull to track traffic generated by dnsmasq to associate it with the clients who generate the queries, usefull for bandwidth accouting and firewall. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2016-04-27 09:14:01 +00:00
$(if $(CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_ipset),,-DNO_IPSET) \
dnsmasq: Add broken realtime clock build switch in full variant By default dnsmasq uses the time function; which returns the time since Epoch; to retrieve the current time. On boards which have no realtime clock this can lead to side effects when the time is synced via ntp as the "time wrap" forces dhcp leases to be considered as expired. By enabling the broken realtime clock build switch dnsmasq uses the times utility which returns the number of clock tick. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> [Jo-Philipp Wich: change symbol name, add sym to PKG_CONFIG_DEPENDS] Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2016-06-29 12:29:48 +00:00
$(if $(CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_conntrack),-DHAVE_CONNTRACK,) \
dnsmasq: make NO_ID optional in full variant Permit users of the full variant to disable the NO_ID *.bind pseudo domain masking. Defaulted 'on' in all variants. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2016-09-09 08:03:27 +00:00
$(if $(CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_noid),-DNO_ID,) \
dnsmasq: Add broken realtime clock build switch in full variant By default dnsmasq uses the time function; which returns the time since Epoch; to retrieve the current time. On boards which have no realtime clock this can lead to side effects when the time is synced via ntp as the "time wrap" forces dhcp leases to be considered as expired. By enabling the broken realtime clock build switch dnsmasq uses the times utility which returns the number of clock tick. Signed-off-by: Hans Dedecker <dedeckeh@gmail.com> [Jo-Philipp Wich: change symbol name, add sym to PKG_CONFIG_DEPENDS] Signed-off-by: Jo-Philipp Wich <jo@mein.io>
2016-06-29 12:29:48 +00:00
$(if $(CONFIG_PACKAGE_dnsmasq_$(BUILD_VARIANT)_broken_rtc),-DHAVE_BROKEN_RTC)
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
COPTS += $(if $(CONFIG_LIBNETTLE_MINI),-DNO_GMP,)
dnsmasq: various house-keeping updates * Add Authoritative DNS and IPSET to full variant * Remove some bloat from IPSET support * Reintroduce "DHCP no address warning"-patch Signed-off-by: Steven Barth <steven@midlink.org> SVN-Revision: 41246
2014-06-18 10:04:34 +00:00
else
dnsmasq: make NO_ID optional in full variant Permit users of the full variant to disable the NO_ID *.bind pseudo domain masking. Defaulted 'on' in all variants. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2016-09-09 08:03:27 +00:00
COPTS += -DNO_AUTH -DNO_IPSET -DNO_ID
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
endif
package/dnsmasq: update to 2.59 (thanks to Raphael Huck) SVN-Revision: 29329
2011-11-25 00:53:13 +00:00
MAKE_FLAGS := \
$(TARGET_CONFIGURE_OPTS) \
dnsmasq: Pass TARGET_CPPFLAGS to Makefile With the introduction of the ubus notifications, we would now fail building dnsmasq with external toolchains that don't automatically search for headers. Pass TARGET_CPPFLAGS to the Makefile to resolve that. Fixes: 34a206bc1194 ("dnsmasq: add ubus notifications for new leases") Signed-off-by: Florian Fainelli <f.fainelli@gmail.com>
2017-09-16 23:27:37 +00:00
CFLAGS="$(TARGET_CFLAGS) $(TARGET_CPPFLAGS)" \
dnsmasq: respect target's LDFLAGS Append local flags, don't overwrite. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41242
2014-06-18 10:04:17 +00:00
LDFLAGS="$(TARGET_LDFLAGS)" \
dnsmasq: use COPTS for compile time options As documented in config.h. Doing otherwise will break dnsmasq's pkg-wrapper script to find its libs to link to. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41241
2014-06-18 10:04:02 +00:00
COPTS="$(COPTS)" \
package/dnsmasq: update to 2.59 (thanks to Raphael Huck) SVN-Revision: 29329
2011-11-25 00:53:13 +00:00
PREFIX="/usr"
add conffiles, use proper optimization flags when building. SVN-Revision: 3997
2006-06-18 18:27:23 +00:00
convert to new template SVN-Revision: 3744
2006-05-09 23:19:52 +00:00
define Package/dnsmasq/install
replace lots of manual install commands with INSTALL_* variables SVN-Revision: 5624
2006-11-23 00:29:07 +00:00
$(INSTALL_DIR) $(1)/usr/sbin
package/dnsmasq: update to 2.59 (thanks to Raphael Huck) SVN-Revision: 29329
2011-11-25 00:53:13 +00:00
$(CP) $(PKG_INSTALL_DIR)/usr/sbin/dnsmasq $(1)/usr/sbin/
upgrade dnsmasq to latest version, rewrite dnsmasq init script for uci, rename /bin/ipcalc to /bin/ipcalc.sh (fixes #1452) SVN-Revision: 6595
2007-03-17 13:31:13 +00:00
$(INSTALL_DIR) $(1)/etc/config
$(INSTALL_DATA) ./files/dhcp.conf $(1)/etc/config/dhcp
Add default /etc/dnsmasq.conf dnsmasq allows adding of arbitrary SRV/PTR/TXT/CNAME records. However, those options sometimes can not be passed as command-line arguments due to excess length. This patch tries to solve this problem: 1. Provide /etc/dnsmasq.conf file with comments about adding SRV/PTR/TXT/CNAME records. 2. Add this file to conffiles list so it is preserver during backup/restore or system upgrade. If someone needs a lot of custom records, default configuration file can be edited. Since manual pages and documentation is not installed, provided comments should be enough to figure out option syntax. Signed-off-by: Alexey I. Froloff <raorn@altlinux.org> SVN-Revision: 17663
2009-09-21 13:25:11 +00:00
$(INSTALL_DATA) ./files/dnsmasq.conf $(1)/etc/dnsmasq.conf
replace lots of manual install commands with INSTALL_* variables SVN-Revision: 5624
2006-11-23 00:29:07 +00:00
$(INSTALL_DIR) $(1)/etc/init.d
$(INSTALL_BIN) ./files/dnsmasq.init $(1)/etc/init.d/dnsmasq
dnsmasq: add dhcp-script hook for other packages Adds a script which acts as a hook for when dnsmasq creates/destroys a lease, or completes a TFTP file transfer. The hook loops through scripts in appropriate directories inside '/etc/hotplug.d', executing each one with the same arguments supplied by dnsmasq. In case dnsmasq is jailed by ujail the dhcp-script hook will not work as expected as ujail does not yet support executing a script within a jail. Signed-off-by: Nick Brassel <nick@tzarc.org> Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-05-06 10:56:26 +00:00
$(INSTALL_DIR) $(1)/etc/hotplug.d/dhcp
$(INSTALL_DIR) $(1)/etc/hotplug.d/neigh
dnsmasq: dnssec time handling uses ntpd hotplug Change dnsmasq's dnssec time check handling to use time validity indicated by ntpd rather than maintaining a cross boot/upgrade /etc/dnsmasq.time timestamp file. This saves flash device wear. If ntpd client is configured in uci and you're using dnssec, then dnsmasq will not check dnssec timestamp validity until ntpd hotplug indicates sync via a stratum change. The ntpd hotplug leaves a status flag file to indicate to dnsmasq.init that time is valid and that it should now start in 'check dnssec timestamp valid' mode. If ntpd client is not configured and you're using dnssec, then it is presumed you're using an alternate time sync mechanism and that time is correct, thus dnsmasq checks dnssec timestamps are valid from 1st start. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk> V2 - stratum & step ntp changes indicate time is valid V3 - on initial flag file step signal dnsmasq with SIGHUP if running V4 - only accept step ntp changes. Accepting both stratum & step could result in unpleasant script race conditions V5 - Actually only accepting stratum is the correct thing to do after further testing V6 - improve handling of non busybox ntpd if sysntpd not executable dnsmasq checks dnssec timestamps else sysntp script disabled - look for timestamp file - allows external mechanism to use hotplug flag file sysntp script enabled & uci ntp enabled - look for timestamp file sysntp script enabled & uci ntp disabled - dnsmasq checks dnssec timestamps fi
2016-06-14 10:00:21 +00:00
$(INSTALL_DIR) $(1)/etc/hotplug.d/ntp
dnsmasq: add dhcp-script hook for other packages Adds a script which acts as a hook for when dnsmasq creates/destroys a lease, or completes a TFTP file transfer. The hook loops through scripts in appropriate directories inside '/etc/hotplug.d', executing each one with the same arguments supplied by dnsmasq. In case dnsmasq is jailed by ujail the dhcp-script hook will not work as expected as ujail does not yet support executing a script within a jail. Signed-off-by: Nick Brassel <nick@tzarc.org> Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-05-06 10:56:26 +00:00
$(INSTALL_DIR) $(1)/etc/hotplug.d/tftp
dnsmasq: dnssec time handling uses ntpd hotplug Change dnsmasq's dnssec time check handling to use time validity indicated by ntpd rather than maintaining a cross boot/upgrade /etc/dnsmasq.time timestamp file. This saves flash device wear. If ntpd client is configured in uci and you're using dnssec, then dnsmasq will not check dnssec timestamp validity until ntpd hotplug indicates sync via a stratum change. The ntpd hotplug leaves a status flag file to indicate to dnsmasq.init that time is valid and that it should now start in 'check dnssec timestamp valid' mode. If ntpd client is not configured and you're using dnssec, then it is presumed you're using an alternate time sync mechanism and that time is correct, thus dnsmasq checks dnssec timestamps are valid from 1st start. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk> V2 - stratum & step ntp changes indicate time is valid V3 - on initial flag file step signal dnsmasq with SIGHUP if running V4 - only accept step ntp changes. Accepting both stratum & step could result in unpleasant script race conditions V5 - Actually only accepting stratum is the correct thing to do after further testing V6 - improve handling of non busybox ntpd if sysntpd not executable dnsmasq checks dnssec timestamps else sysntp script disabled - look for timestamp file - allows external mechanism to use hotplug flag file sysntp script enabled & uci ntp enabled - look for timestamp file sysntp script enabled & uci ntp disabled - dnsmasq checks dnssec timestamps fi
2016-06-14 10:00:21 +00:00
$(INSTALL_DATA) ./files/dnsmasqsec.hotplug $(1)/etc/hotplug.d/ntp/25-dnsmasqsec
dnsmasq: do not forward rfc6761 excluded domains RFC 6761 defines a number of top level domains should not be forwarded to the Internet's domain servers since they are not responsible for those domains. This change adds a list of domains that will be blocked when 'boguspriv' is used and augments that which is already blocked by dnsmasq's notion of 'local service' using '--bogus-priv' i.e. RFC 1918 private addresses and IPv6 prefixes as defined in RFC 6303. To make this configurable rather than hard coded in dnsmasq's init script, a new file /usr/share/dnsmasq/rfc6761.conf is conditionally included. The default file matches the RFC 6761 recommendation along with a few other top level domains that should not be forwarded to the Internet. Compile & run tested Archer C7 v2 Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>
2017-02-20 10:15:55 +00:00
$(INSTALL_DIR) $(1)/usr/share/dnsmasq
$(INSTALL_DATA) ./files/rfc6761.conf $(1)/usr/share/dnsmasq/
dnsmasq: add dhcp-script hook for other packages Adds a script which acts as a hook for when dnsmasq creates/destroys a lease, or completes a TFTP file transfer. The hook loops through scripts in appropriate directories inside '/etc/hotplug.d', executing each one with the same arguments supplied by dnsmasq. In case dnsmasq is jailed by ujail the dhcp-script hook will not work as expected as ujail does not yet support executing a script within a jail. Signed-off-by: Nick Brassel <nick@tzarc.org> Signed-off-by: Hans Dedecker <dedeckeh@gmail.com>
2017-05-06 10:56:26 +00:00
$(INSTALL_DIR) $(1)/usr/lib/dnsmasq
$(INSTALL_BIN) ./files/dhcp-script.sh $(1)/usr/lib/dnsmasq/dhcp-script.sh
dnsmasq: add ubus notifications for new leases Signed-off-by: John Crispin <john@phrozen.org>
2017-08-22 14:43:02 +00:00
$(INSTALL_DIR) $(1)/usr/share/acl.d
$(INSTALL_DATA) ./files/dnsmasq_acl.json $(1)/usr/share/acl.d/
convert to new template SVN-Revision: 3744
2006-05-09 23:19:52 +00:00
endef
convert dnsmasq to new packaging style SVN-Revision: 851
2005-05-12 19:41:18 +00:00
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
Package/dnsmasq-dhcpv6/install = $(Package/dnsmasq/install)
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
define Package/dnsmasq-full/install
$(call Package/dnsmasq/install,$(1))
dnsmasq: fix dependency problems of the dnsmasq-full variant. This patch tries to - Let the DHCPv6 feature depend on CONFIG_IPV6. - Conditionally select libnettle, kmod-ipv6, kmod-ipt-ipset only if the corresponding features are enabled. - Install `trust-anchors.conf` only if DNSSEC is selected. - Add PKG_CONFIG_DEPENDS for the configurable options. - Add a patch to let the Makefile of dnsmasq be aware of changes in COPTS variable. Big thanks goes to Frank Schäfer <fschaefer.oss@googlemail.com> for providing necessary information on connections and dependency relations between these CONFIGs and packages. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> SVN-Revision: 43851
2015-01-05 13:03:48 +00:00
ifneq ($(CONFIG_PACKAGE_dnsmasq_full_dnssec),)
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
$(INSTALL_DIR) $(1)/usr/share/dnsmasq
$(INSTALL_DATA) $(PKG_BUILD_DIR)/trust-anchors.conf $(1)/usr/share/dnsmasq
dnsmasq: fix dependency problems of the dnsmasq-full variant. This patch tries to - Let the DHCPv6 feature depend on CONFIG_IPV6. - Conditionally select libnettle, kmod-ipv6, kmod-ipt-ipset only if the corresponding features are enabled. - Install `trust-anchors.conf` only if DNSSEC is selected. - Add PKG_CONFIG_DEPENDS for the configurable options. - Add a patch to let the Makefile of dnsmasq be aware of changes in COPTS variable. Big thanks goes to Frank Schäfer <fschaefer.oss@googlemail.com> for providing necessary information on connections and dependency relations between these CONFIGs and packages. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> SVN-Revision: 43851
2015-01-05 13:03:48 +00:00
endif
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
endef
convert to new template SVN-Revision: 3744
2006-05-09 23:19:52 +00:00
$(eval $(call BuildPackage,dnsmasq))
dnsmasq: Bump to 2.62, add DHCPv6 variant SVN-Revision: 32764
2012-07-17 11:48:27 +00:00
$(eval $(call BuildPackage,dnsmasq-dhcpv6))
dnsmasq: Add a full variant This variant includes support for DHCPv6 and DNSSEC. DNSSEC adds a dependency on libnettle. Signed-off-by: Andre Heider <a.heider@gmail.com> SVN-Revision: 41244
2014-06-18 10:04:25 +00:00
$(eval $(call BuildPackage,dnsmasq-full))