Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
|
|
|
|
I should've noticed before pushing; I'm sorry.
|
|
Upgrade should be pretty easy:
https://www.knot-dns.cz/docs/3.0/html/migration.html#upgrade-2-9-x-to-3-0-x
https://en.blog.nic.cz/2020/09/09/knot-dns-3-0-news/
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.0.0
For now, it's built with XDP support but the NixOS service
isn't ready for that yet. I'll try to look at that sometime later.
|
|
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.1.3
|
|
Closure size: 261 -> 171 MiB. (Only .bin was affected.)
|
|
This is mostly a bug fix version with some small improvements.
https://gitlab.nic.cz/knot/knot-dns/-/tags/v2.9.6
|
|
|
|
It's really small and some people might find it useful.
(If needed, its output could be split to make it even smaller.)
|
|
derivations (#95092)
The buildGoModule infrastructure does not make use of goPackagePath it is a residue from buildGoPackage.
|
|
|
|
|
|
dnsdist: 1.4.0 -> 1.5.0
|
|
|
|
|
|
The incorrect extension was confusing my code search tool.
|
|
|
|
pdns-recursor: 4.3.1 -> 4.3.2
|
|
ncdns: init at 0.0.10.3
|
|
|
|
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.1.2
I could highlight fixing the garbage collector on 32-bit systems.
|
|
We remove the configFile build flag override in the NixOS module.
Instead of embedding the conf file link to the binaries, we symlink it
to /etc/nsd/nsd.nix, the hardcoded config file location for the
various CLI nsd utilities.
This config file build option override is triggerring a nsd rebuild
for each configuration change. This prevent us to use the nixos cache
in many cases.
Co-authored-by: Erjo <erjo@cocoba.work>
|
|
|
|
|
|
This is due to a hint by @Ericson2314 in
https://github.com/NixOS/nixpkgs/pull/86166#issuecomment-633153996
|
|
|
|
|
|
There's a bugfix important for some auto-signer setups.
https://gitlab.labs.nic.cz/knot/knot-dns/-/tags/v2.9.5
$ nix build -f nixos/release-combined.nix nixos.tests.knot.x86_64-linux
|
|
https://en.blog.nic.cz/2020/05/19/nxnsattack-upgrade-resolvers-to-stop-new-kind-of-random-subdomain-attack/
|
|
https://www.isc.org/blogs/bind9-vulnerabilities-2020-05/
$ nix build -f nixos/release.nix tests.bind.x86_64-linux
|
|
https://doc.powerdns.com/recursor/changelog/4.3.html#change-4.3.1
It fixes DoS CVEs; details e.g. on http://www.nxnsattack.com/
$ nix build -f nixos/release.nix tests.pdns-recursor.x86_64-linux
|
|
|
|
|
|
https://gitlab.labs.nic.cz/knot/knot-dns/-/tags/v2.9.4
|
|
https://gitlab.labs.nic.cz/knot/knot-resolver/-/tags/v5.1.0
The upcoming major version will contain reworked
hints/policy/prefill/rebinding/view modules and related functionalities.
Please participate in the following survey to ensure we do not forget
about your particular use-case:
https://www.knot-resolver.cz/survey/
It will help us to improve Knot Resolver. Thank you!
|
|
https-dns-proxy: init at unstable-20200419
|
|
|
|
|
|
|
|
This reverts commit 4e6bf03504c9e09f067cc6dee6b5aeec43a1405c, reversing
changes made to afd997aab6e9b7a322198092c7828d6c560ac06f.
Instead we propagate those frameworks from the compiler again
|
|
|
|
|
|
coredns: 1.6.6 -> 1.6.7
|
|
I see just a single small bugfix in the news:
https://downloads.isc.org/isc/bind9/9.14.11/RELEASE-NOTES-bind-9.14.11.html
|
|
|
|
|
|
Encrypted ZFS users were affected, in particular some NixOS users
who reported the issue upstream. Close #81188.
|
|
https://gitlab.labs.nic.cz/knot/knot-dns/-/tags/v2.9.3
|
|
Otherwise knot tries to write to non-writable directories.
This for example breaks dnssec signing.
While it's possible to overwrite these path in the configuration,
having a sane defaults is nicer.
|