modified from community/unbound

5 files changed, 167 insertions, 0 deletions

diff --git a/.SRCINFO b/.SRCINFO
new file mode 100644
index 000000000000..18490349dd69
--- /dev/null
+++ b/.SRCINFO
@@ -0,0 +1,57 @@
+pkgbase = unbound-python
+	pkgdesc = Validating, recursive, and caching DNS resolver, with Python bindings
+	pkgver = 1.13.1
+	pkgrel = 1
+	url = https://unbound.net/
+	arch = x86_64
+	license = BSD
+	makedepends = expat
+	makedepends = protobuf-c
+	makedepends = systemd
+	makedepends = swig
+	depends = dnssec-anchors
+	depends = fstrm
+	depends = hiredis
+	depends = openssl
+	depends = ldns
+	depends = libevent
+	depends = libnghttp2
+	depends = libsodium
+	depends = python
+	optdepends = expat: for unbound-anchor
+	optdepends = sh: for unbound-control-setup
+	provides = libunbound.so
+	provides = unbound
+	provides = python-unbound
+	conflicts = unbound
+	conflicts = python-unbound
+	backup = etc/unbound/unbound.conf
+	source = https://unbound.net/downloads/unbound-1.13.1.tar.gz
+	source = https://unbound.net/downloads/unbound-1.13.1.tar.gz.asc
+	source = unbound-sysusers.conf
+	source = unbound-tmpfiles.conf
+	source = unbound-trusted-key.hook
+	validpgpkeys = EDFAA3F2CA4E6EB05681AF8E9F6F1C2D7E045F8D
+	sha512sums = f4d26dca28dbcc33a5e65a55147fa01077c331292e88b6a87798cb6c3d4edb0515015d131fd893c92b74d22d9998a640f0adce404e6192d61ebe69a6a599287c
+	sha512sums = SKIP
+	sha512sums = ef71d4e9b0eb0cc602d66bd0573d9424578fe33ef28a852c582d56f0fd34fdd63046c365ef7aed8b84a461b81254240af7ad3fd539da72f9587817d21bd6c585
+	sha512sums = 6b1849ae9d7cf427f6fa6cd0590e8f8c3f06210d2d6795e543b0f325a9e866db0f5db2275a29fa90f688783c0dd16f19c8a49a9817d5f5444e13f8f2df3ff712
+	sha512sums = 613826cdf5ab6e77f2805fa2aa65272508dcd11090add1961b3df6dfac3b67db016bc9f45fbcf0ef0de82b2d602c153d5263a488027a6cf13a72680b581b266d
+	b2sums = 5fabb9205773a1983842e41cf7a4d6c3878fa8beb7c8ccc71ae1edf7738cb9506c3d7bb32cf887b305317ca695bf876d9f5bf9aeb0129b0e9e926d437b3e6eb3
+	b2sums = SKIP
+	b2sums = 292a3c2e5fde292a03b6c9b2ddabd5089f52e73b50a404c3d9f54c1a43184924b661a21eea61cc521c594c1005a3b40b630fa585a38195c61298f9b24b248b92
+	b2sums = d3951006b43068be904c6b91a9e0563d56228225854e12b40abbdd4ba9b47338e97265837297a6de879acbc8051bb749163f9457683f5e12fc29ac2e7b687fd3
+	b2sums = d28785390eb6c125bd26ca11f097fe8864b080482157deeb7c70e9bee47ff2844abaed574db59a7c152ed3ec0acba05cfee4c3751f7a9f553320b064578f86c7
+
+pkgname = unbound-python
+	depends = dnssec-anchors
+	depends = fstrm
+	depends = hiredis
+	depends = openssl
+	depends = ldns
+	depends = libevent
+	depends = libnghttp2
+	depends = libsodium
+	depends = python
+	depends = libprotobuf-c.so
+	depends = libsystemd.so
diff --git a/PKGBUILD b/PKGBUILD
new file mode 100644
index 000000000000..f5ad9f0ce275
--- /dev/null
+++ b/PKGBUILD
@@ -0,0 +1,98 @@
+# Maintainer: David Runge <dvzrv@archlinux.org>
+# Contributor: Gaetan Bisson <bisson@archlinux.org>
+# Contributor: Hisato Tatekura <hisato_tatekura@excentrics.net>
+# Contributor: Massimiliano Torromeo <massimiliano DOT torromeo AT google mail service>
+
+_pkgname=unbound
+pkgname=unbound-python
+pkgver=1.13.1
+pkgrel=1
+pkgdesc="Validating, recursive, and caching DNS resolver, with Python bindings"
+url="https://unbound.net/"
+license=('BSD')
+arch=('x86_64')
+depends=('dnssec-anchors' 'fstrm' 'hiredis' 'openssl' 'ldns' 'libevent'
+'libnghttp2' 'libsodium' 'python')
+makedepends=('expat' 'protobuf-c' 'systemd' 'swig')
+optdepends=(
+  'expat: for unbound-anchor'
+  'sh: for unbound-control-setup'
+)
+provides=('libunbound.so' 'unbound' 'python-unbound')
+conflicts=('unbound' 'python-unbound')
+backup=("etc/${_pkgname}/${_pkgname}.conf")
+source=("https://unbound.net/downloads/${_pkgname}-${pkgver}.tar.gz"{,.asc}
+        "${_pkgname}-sysusers.conf"
+        "${_pkgname}-tmpfiles.conf"
+        "${_pkgname}-trusted-key.hook")
+sha512sums=('f4d26dca28dbcc33a5e65a55147fa01077c331292e88b6a87798cb6c3d4edb0515015d131fd893c92b74d22d9998a640f0adce404e6192d61ebe69a6a599287c'
+            'SKIP'
+            'ef71d4e9b0eb0cc602d66bd0573d9424578fe33ef28a852c582d56f0fd34fdd63046c365ef7aed8b84a461b81254240af7ad3fd539da72f9587817d21bd6c585'
+            '6b1849ae9d7cf427f6fa6cd0590e8f8c3f06210d2d6795e543b0f325a9e866db0f5db2275a29fa90f688783c0dd16f19c8a49a9817d5f5444e13f8f2df3ff712'
+            '613826cdf5ab6e77f2805fa2aa65272508dcd11090add1961b3df6dfac3b67db016bc9f45fbcf0ef0de82b2d602c153d5263a488027a6cf13a72680b581b266d')
+b2sums=('5fabb9205773a1983842e41cf7a4d6c3878fa8beb7c8ccc71ae1edf7738cb9506c3d7bb32cf887b305317ca695bf876d9f5bf9aeb0129b0e9e926d437b3e6eb3'
+        'SKIP'
+        '292a3c2e5fde292a03b6c9b2ddabd5089f52e73b50a404c3d9f54c1a43184924b661a21eea61cc521c594c1005a3b40b630fa585a38195c61298f9b24b248b92'
+        'd3951006b43068be904c6b91a9e0563d56228225854e12b40abbdd4ba9b47338e97265837297a6de879acbc8051bb749163f9457683f5e12fc29ac2e7b687fd3'
+        'd28785390eb6c125bd26ca11f097fe8864b080482157deeb7c70e9bee47ff2844abaed574db59a7c152ed3ec0acba05cfee4c3751f7a9f553320b064578f86c7')
+validpgpkeys=('EDFAA3F2CA4E6EB05681AF8E9F6F1C2D7E045F8D') # W.C.A. Wijngaards <wouter@nlnetlabs.nl>
+
+prepare() {
+  cd "${_pkgname}-${pkgver}"
+  # set default location of trusted-key.key
+  sed '/# trust-anchor-file:/c\\ttrust-anchor-file: /etc/unbound/trusted-key.key' \
+    -i doc/example.conf.in
+
+  autoreconf -vfi
+}
+
+build() {
+  cd "${_pkgname}-${pkgver}"
+  ./configure --prefix=/usr \
+              --sysconfdir=/etc \
+              --localstatedir=/var \
+              --sbindir=/usr/bin \
+              --disable-rpath \
+              --enable-dnscrypt \
+              --enable-dnstap \
+              --enable-pie \
+              --enable-relro-now \
+              --enable-subnet \
+              --enable-systemd \
+              --enable-tfo-client \
+              --enable-tfo-server \
+              --enable-cachedb \
+              --with-libhiredis \
+              --with-conf-file=/etc/unbound/unbound.conf \
+              --with-pidfile=/run/unbound.pid \
+              --with-rootkey-file=/etc/trusted-key.key \
+              --with-libevent \
+              --with-libnghttp2 \
+              --with-pythonmodule \
+              --with-pyunbound
+  make
+}
+
+check() {
+  cd "${_pkgname}-${pkgver}"
+  make -k check
+}
+
+package() {
+  depends+=('libprotobuf-c.so' 'libsystemd.so')
+
+  cd "${_pkgname}-${pkgver}"
+  make DESTDIR="${pkgdir}" install
+  install -vDm 644 "contrib/${_pkgname}.service" \
+    -t "${pkgdir}/usr/lib/systemd/system/"
+  install -vDm 644 LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}/"
+  # sysusers.d
+  install -vDm 644 "../${_pkgname}-sysusers.conf" \
+    "${pkgdir}/usr/lib/sysusers.d/${_pkgname}.conf"
+  # tmpfiles.d
+  install -vDm 644 "../${_pkgname}-tmpfiles.conf" \
+    "${pkgdir}/usr/lib/tmpfiles.d/${_pkgname}.conf"
+  # libalpm hook to copy the dnssec-anchors provided key to /etc/unbound
+  install -vDm 644 ../${_pkgname}-trusted-key.hook \
+    -t "${pkgdir}/usr/share/libalpm/hooks/"
+}
diff --git a/unbound-sysusers.conf b/unbound-sysusers.conf
new file mode 100644
index 000000000000..3cd34bfef4bd
--- /dev/null
+++ b/unbound-sysusers.conf
@@ -0,0 +1 @@
+u unbound - "unbound" /etc/unbound
diff --git a/unbound-tmpfiles.conf b/unbound-tmpfiles.conf
new file mode 100644
index 000000000000..7de06d48cb5d
--- /dev/null
+++ b/unbound-tmpfiles.conf
@@ -0,0 +1 @@
+C /etc/unbound/trusted-key.key - - - - /etc/trusted-key.key
diff --git a/unbound-trusted-key.hook b/unbound-trusted-key.hook
new file mode 100644
index 000000000000..a9c6bf57b4db
--- /dev/null
+++ b/unbound-trusted-key.hook
@@ -0,0 +1,10 @@
+[Trigger]
+Type = Path
+Target = etc/trusted-key.key
+Operation = Install
+Operation = Upgrade
+
+[Action]
+Description = Updating trusted-key.key for unbound...
+When = PostTransaction
+Exec = /bin/cp -f /etc/trusted-key.key /etc/unbound/