homebrew-core/Formula/bind.rb

173 lines
4.9 KiB
Ruby

class Bind < Formula
desc "Implementation of the DNS protocols"
homepage "https://www.isc.org/downloads/bind/"
url "https://ftp.isc.org/isc/bind9/9.11.1-P1/bind-9.11.1-P1.tar.gz"
mirror "https://fossies.org/linux/misc/dns/bind9/9.11.1-P1/bind-9.11.1-P1.tar.gz"
version "9.11.1-P1"
sha256 "6b1b3e88d51b8471bd6aee24a8cea70817e850a5901315dc506f9dde275ca638"
head "https://source.isc.org/git/bind9.git"
bottle do
sha256 "f62360c81228e2d475c0a0a77daadbc8ae35981c9fbbeee112355f0eb522b0f1" => :sierra
sha256 "21bec15056e9de52bab4d97d94ddd3923a373837f225937992ce1f884d512e4d" => :el_capitan
sha256 "e5d956eec905aa0690a3c02fd1fc0d5defd9980f5d37c1ae16eec55a5c20bba8" => :yosemite
end
depends_on "openssl"
depends_on "json-c" => :optional
def install
# enable DNSSEC signature chasing in dig
ENV["STD_CDEFINES"] = "-DDIG_SIGCHASE=1"
json = build.with?("json-c") ? "yes" : "no"
system "./configure", "--prefix=#{prefix}",
"--enable-threads",
"--enable-ipv6",
"--with-openssl=#{Formula["openssl"].opt_prefix}",
"--with-libjson=#{json}"
# From the bind9 README: "Do not use a parallel "make"."
ENV.deparallelize
system "make"
system "make", "install"
(buildpath/"named.conf").write named_conf
system "#{sbin}/rndc-confgen", "-a", "-c", "#{buildpath}/rndc.key"
etc.install "named.conf", "rndc.key"
end
def post_install
(var/"log/named").mkpath
# Create initial configuration/zone/ca files.
# (Mirrors Apple system install from 10.8)
unless (var/"named").exist?
(var/"named").mkpath
(var/"named/localhost.zone").write localhost_zone
(var/"named/named.local").write named_local
end
end
def named_conf; <<-EOS.undent
//
// Include keys file
//
include "#{etc}/rndc.key";
// Declares control channels to be used by the rndc utility.
//
// It is recommended that 127.0.0.1 be the only address used.
// This also allows non-privileged users on the local host to manage
// your name server.
//
// Default controls
//
controls {
inet 127.0.0.1 port 54 allow { any; }
keys { "rndc-key"; };
};
options {
directory "#{var}/named";
/*
* If there is a firewall between you and nameservers you want
* to talk to, you might need to uncomment the query-source
* directive below. Previous versions of BIND always asked
* questions using port 53, but BIND 8.1 uses an unprivileged
* port by default.
*/
// query-source address * port 53;
};
//
// a caching only nameserver config
//
zone "localhost" IN {
type master;
file "localhost.zone";
allow-update { none; };
};
zone "0.0.127.in-addr.arpa" IN {
type master;
file "named.local";
allow-update { none; };
};
logging {
category default {
_default_log;
};
channel _default_log {
file "#{var}/log/named/named.log";
severity info;
print-time yes;
};
};
EOS
end
def localhost_zone; <<-EOS.undent
$TTL 86400
$ORIGIN localhost.
@ 1D IN SOA @ root (
42 ; serial (d. adams)
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
1D IN NS @
1D IN A 127.0.0.1
EOS
end
def named_local; <<-EOS.undent
$TTL 86400
@ IN SOA localhost. root.localhost. (
1997022700 ; Serial
28800 ; Refresh
14400 ; Retry
3600000 ; Expire
86400 ) ; Minimum
IN NS localhost.
1 IN PTR localhost.
EOS
end
plist_options :startup => true
def plist; <<-EOS.undent
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>EnableTransactions</key>
<true/>
<key>Label</key>
<string>#{plist_name}</string>
<key>RunAtLoad</key>
<true/>
<key>ProgramArguments</key>
<array>
<string>#{opt_sbin}/named</string>
<string>-f</string>
<string>-c</string>
<string>#{etc}/named.conf</string>
</array>
<key>ServiceIPC</key>
<false/>
</dict>
</plist>
EOS
end
test do
system bin/"dig", "-v"
system bin/"dig", "brew.sh"
end
end