CVS commit: pkgsrc/net/nsd

["Havard Eidnes" <he%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   he
Date:           Wed Sep  3 09:49:52 UTC 2025

Modified Files:
        pkgsrc/net/nsd: Makefile distinfo
Added Files:
        pkgsrc/net/nsd/patches: patch-Makefile.in
Removed Files:
        pkgsrc/net/nsd/patches: patch-aa

Log Message:
Update nsd to version 4.13.0.

Pkgsrc changes:
 * Rename (and adapt) the single patch to use "new" name convention.
 * Checksum changes.

Upstream changes:

This release enables some commonly used features by default, and introduces
experimental support for AF_XDP sockets that can be enabled with the
`--enable-xdp` feature flag
(see https://nsd.docs.nlnetlabs.nl/en/latest/xdp.html).

4.13.0
================
FEATURES:
- Use '(all)' and '(none)' for the socket server affinity
  log output instead of '*' and '-'.
- The --enable-bind8-stats feature, was already enabled by default,
  is described as enabled by default in usage.
- The --enable-zone-stats feature is enabled by default. It can be
  turned on with config like `zonestats: "%s"`.
- The --enable-ratelimit feature is enabled by default. The
  ratelimit value is off by default. It can be turned on with
  config like `rrl-ratelimit: 200`.
- The --enable-dnstap feature is enabled by default. If fstrm-devel
  or protobuf-c are not found by configure it prints an error.
  It can be turned on with config like `dnstap-enable: yes`.
- Change default for send-buffer-size to 4m, to mitigate a
  cross-layer issue where the UDP socket send buffers are
  exhausted waiting for ARP/NDP resolution. Thanks to Reflyable
  for the report.
- Disable TLSv1.2 if TLSv1.3 is available.
- Merge #449: Add useful logging for XoT transfers.
- Merge #425: Add experimental XDP (AF_XDP) support for UDP traffic
- Merge #455: --with-dbdir option for configure to set the base
  directory for the xfrd zone timer state file, the zone list file
  and the cookie secrets file. Thanks Simon Josefsson.
- Merge #456: Spelling fixes in metrics.c. Thanks Simon Josefsson.

BUG FIXES:
- Fix punctuation of nsd -h output for the -a option.
- Fix checkconf unit test for when metrics are not enabled.
- Prometheus metrics tests require --enable-zone-stats.
- Add unit test for socket server affinity log output.
- Move xfrd-tcp unit test to its own file.
- Fix contrib/nsd.spec to omit configure flags that are default or
  that do not exist.
- Fix to remove mention of obsolete root-server option.
- Fix mention of draft-rrtypes and root-server configure options.
- Fix ci workflow for enable dnstap.
- Fix to remove use of sprintf from metrics.
- Fix for fstrm and protobuf-c for ci workflow coverity-scan.
- Fix for parallel build of dnstap protoc-c output.
- Fix to remove unneeded mkdir from Makefile.
- Fix dnstap to use protoc and keep dnstap_config.h unchanged if
  possible.
- Fix to provide doc for --enable-systemd.
- Fix to remove debug printout for configure dnstap header.
- Fix #441: SystemD script for NSD prevents using chroot.
- Fix to add checks for compression pointers and too long dnames in
  internal dname routines, dname_make and ixfr dname_length.
- Fix to remove shell assignment operator from Makefile for DATE.
- make depend.
- Fix bitwise operators in conditional expressions with parentheses.
- Fix conditional expressions with parentheses for bitwise and.
- Merge #445: contrib/nsd.openrc.in: use supervise-daemon and
  add `need net`.
- Fix #446 nsd_size_db_in_mem_bytes (size.db.mem) metric not
  updated on reload.
- Merge #447: Minimize disruptions on reconfig.
- For #447: Updated simdzone to latest commit. With the padding
  test changes.
- For #447: use need_to_send_reload to detect if a reload is issued.
- For #447: acl_list_equal already tests for TSIG key changes, so
  removed the duplicate checks.
- For #447: log crypto error with the SSL_write error.
- Update simdzone with support for --enable-pie.
- Merge #454 from jaredmauch: handle rare case but seen in
  production where data->query is NULL.

simdzone 0.2.3
================

FEATURES:
- check_pie: match nsd support (#253).

BUG FIXES:
- Fix tests to initialize padding (#252).
- Fix for #253, add acx_nlnetlabs.m4 in the repo and allow CFLAGS passed to
  configure to set the flags.


To generate a diff of this commit:
cvs rdiff -u -r1.132 -r1.133 pkgsrc/net/nsd/Makefile
cvs rdiff -u -r1.89 -r1.90 pkgsrc/net/nsd/distinfo
cvs rdiff -u -r0 -r1.1 pkgsrc/net/nsd/patches/patch-Makefile.in
cvs rdiff -u -r1.14 -r0 pkgsrc/net/nsd/patches/patch-aa

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/nsd/Makefile
diff -u pkgsrc/net/nsd/Makefile:1.132 pkgsrc/net/nsd/Makefile:1.133
--- pkgsrc/net/nsd/Makefile:1.132       Fri May  2 15:11:33 2025
+++ pkgsrc/net/nsd/Makefile     Wed Sep  3 09:49:52 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.132 2025/05/02 15:11:33 ryoon Exp $
+# $NetBSD: Makefile,v 1.133 2025/09/03 09:49:52 he Exp $
 
-DISTNAME=      nsd-4.12.0
+DISTNAME=      nsd-4.13.0
 CATEGORIES=    net
 MASTER_SITES=  http://www.nlnetlabs.nl/downloads/nsd/
 

Index: pkgsrc/net/nsd/distinfo
diff -u pkgsrc/net/nsd/distinfo:1.89 pkgsrc/net/nsd/distinfo:1.90
--- pkgsrc/net/nsd/distinfo:1.89        Fri May  2 15:11:33 2025
+++ pkgsrc/net/nsd/distinfo     Wed Sep  3 09:49:52 2025
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.89 2025/05/02 15:11:33 ryoon Exp $
+$NetBSD: distinfo,v 1.90 2025/09/03 09:49:52 he Exp $
 
-BLAKE2s (nsd-4.12.0.tar.gz) = 798c261613eda02b215a0bbbe2ae33f924aa5b12317aea707f34e20c84d8d34b
-SHA512 (nsd-4.12.0.tar.gz) = 5efdc95407ee2726856233830501821b6843808760e4c9ed580e5266c8b6797b0902c01238dd7d4441021d5f6b1a0b90767693f1b0db76dae4e2f0621bb79bf4
-Size (nsd-4.12.0.tar.gz) = 1531601 bytes
-SHA1 (patch-aa) = d9a423d5faa8da9a213b21fd2712225ac9645091
+BLAKE2s (nsd-4.13.0.tar.gz) = d696b58d7097e406b093437d7f549c9f707a0a9e496277e79b6ba812d4c5f212
+SHA512 (nsd-4.13.0.tar.gz) = b1f389df50487fb26266c8f6f0025a3cc085eee6d7b09fda1ababf158db574ec8a13c49677d98ebc0976f6d7436d4624062fb255aba9addaa83a5c98a0f93936
+Size (nsd-4.13.0.tar.gz) = 1575303 bytes
+SHA1 (patch-Makefile.in) = 93f77704ee6730aef41955511807ce2f4b6cfc90

Added files:

Index: pkgsrc/net/nsd/patches/patch-Makefile.in
diff -u /dev/null pkgsrc/net/nsd/patches/patch-Makefile.in:1.1
--- /dev/null   Wed Sep  3 09:49:52 2025
+++ pkgsrc/net/nsd/patches/patch-Makefile.in    Wed Sep  3 09:49:52 2025
@@ -0,0 +1,15 @@
+$NetBSD: patch-Makefile.in,v 1.1 2025/09/03 09:49:52 he Exp $
+
+Install nsd.conf.sample in examples directory
+
+--- Makefile.in.orig   2014-08-29 06:24:27.000000000 +0000
++++ Makefile.in
+@@ -192,7 +192,7 @@ install: all
+       $(INSTALL_DATA) nsd-checkzone.8 $(DESTDIR)$(mandir)/man8/nsd-checkzone.8
+       $(INSTALL_DATA) nsd-control.8 $(DESTDIR)$(mandir)/man8/nsd-control.8
+       $(INSTALL_DATA) nsd.conf.5 $(DESTDIR)$(mandir)/man5/nsd.conf.5
+-      $(INSTALL_DATA) nsd.conf.sample $(DESTDIR)$(nsdconfigfile).sample
++      $(INSTALL_DATA) nsd.conf.sample $(DESTDIR)${PREFIX}/share/examples/nsd/nsd.conf
+       if test -n "@xdp@"; then $(INSTALL_DATA) xdp-dns-redirect_kern.o $(DESTDIR)$(sharedfilesdir)/xdp-dns-redirect_kern.o; fi
+       if test -n "@xdp@"; then $(INSTALL_DATA) xdp-dns-redirect_kern_pinned.o $(DESTDIR)$(sharedfilesdir)/xdp-dns-redirect_kern_pinned.o; fi
+