Arch Linux User Repository

Please fix the package with the new LDFLAGS:

==> Starting build()...
go: downloading github.com/hashicorp/golang-lru v1.0.2
go: downloading github.com/denisbrodbeck/machineid v1.0.1
go: downloading github.com/cespare/xxhash v1.1.0
go: downloading golang.org/x/net v0.19.0
go: downloading github.com/vishvananda/netlink v1.1.0
go: downloading github.com/vishvananda/netns v0.0.4
go: downloading golang.org/x/sys v0.15.0
# github.com/nextdns/nextdns
flag provided but not defined: -Wl,--sort-common
usage: link [options] main.o
  -B note
        add an ELF NT_GNU_BUILD_ID note when using ELF; use "gobuildid" to generate it from the Go build ID
  -E entry

Please add options=(!lto) to the PKGBUILD, see following log:

Also you should all time check, if the package is compiling inside of a chroot, which is using the default devtools config. Here you can find the default used makepkg.conf: https://gitlab.archlinux.org/archlinux/devtools/-/blob/master/config/makepkg/x86_64.conf?ref_type=heads#L97

There you can also see, that lto is as default enabled for devtools, but not users pacman.conf.

Thanks in advance.

==> Starting build()...
go: downloading github.com/cespare/xxhash v1.1.0
go: downloading github.com/denisbrodbeck/machineid v1.0.1
go: downloading github.com/hashicorp/golang-lru v0.5.4
go: downloading golang.org/x/net v0.7.0
go: downloading github.com/vishvananda/netlink v1.1.0
go: downloading golang.org/x/sys v0.5.0
go: downloading github.com/vishvananda/netns v0.0.4
# github.com/nextdns/nextdns
flag provided but not defined: -flto
usage: link [options] main.o

Diff for 1.39.4:

diff --git a/.SRCINFO b/.SRCINFO
index e4b0c1c..4345c50 100644
--- a/.SRCINFO
+++ b/.SRCINFO
@@ -1,14 +1,14 @@
 pkgbase = nextdns
    pkgdesc = NextDNS DNS-over-HTTPS client
-   pkgver = 1.38.0
+   pkgver = 1.39.4
    pkgrel = 1
    url = https://github.com/nextdns/nextdns
    arch = x86_64
    license = MIT
    makedepends = go
-   source = https://github.com/nextdns/nextdns/archive/v1.38.0.tar.gz
+   source = https://github.com/nextdns/nextdns/archive/v1.39.4.tar.gz
    source = nextdns.service
-   sha256sums = 74cd9d37ea9051b5b5f8f10be1462fb4ebe77b4dbcccd8c94ba049828bd21bff
+   sha256sums = e24db909fbd732e064be465b74f4004a6f4fc0f422ef7c10e86ff707a016ccac
    sha256sums = e15d83ec460562c8a81052f37c0e78e18842e95270895524b9853f7aca285eba

 pkgname = nextdns
diff --git a/PKGBUILD b/PKGBUILD
index c3a3c34..d44c3ba 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,6 +1,6 @@
 # Maintainer: Guillaume Lefranc <guillaume@signal18.io>
 pkgname=nextdns
-pkgver=1.38.0
+pkgver=1.39.4
 pkgrel=1
 pkgdesc='NextDNS DNS-over-HTTPS client'
 arch=('x86_64')
@@ -21,5 +21,5 @@ package() {
   install -Dm644 "$srcdir/nextdns.service" "$pkgdir/usr/lib/systemd/system/nextdns.service"
 }

-sha256sums=('74cd9d37ea9051b5b5f8f10be1462fb4ebe77b4dbcccd8c94ba049828bd21bff'
+sha256sums=('e24db909fbd732e064be465b74f4004a6f4fc0f422ef7c10e86ff707a016ccac'
             'e15d83ec460562c8a81052f37c0e78e18842e95270895524b9853f7aca285eba')

Diff for 1.38.0:

diff --git a/PKGBUILD b/PKGBUILD
index 479523c..7cd3dfd 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,6 +1,6 @@
 # Maintainer: Guillaume Lefranc <guillaume@signal18.io>
 pkgname=nextdns
-pkgver=1.37.11
+pkgver=1.38.0
 pkgrel=1
 pkgdesc='NextDNS DNS-over-HTTPS client'
 arch=('x86_64')
@@ -8,7 +8,8 @@ url='https://github.com/nextdns/nextdns'
 license=('MIT')
 makedepends=('go')
 source=("$url/archive/v$pkgver.tar.gz" "nextdns.service")
-sha256sums=('@checksum@')
+sha256sums=('74cd9d37ea9051b5b5f8f10be1462fb4ebe77b4dbcccd8c94ba049828bd21bff'
+            'e15d83ec460562c8a81052f37c0e78e18842e95270895524b9853f7aca285eba')

 build() {
   cd $pkgname-$pkgver
@@ -20,6 +21,3 @@ package() {
   install -Dm755 $pkgname "$pkgdir"/usr/bin/$pkgname
   install -Dm644 "$srcdir/nextdns.service" "$pkgdir/usr/lib/systemd/system/nextdns.service"
 }
-
-sha256sums=('f70cb424b0ae47456c8579d3910b486f75afde34572f28f8cf6eb1222e59b88b'
-            'e15d83ec460562c8a81052f37c0e78e18842e95270895524b9853f7aca285eba')

@tanj I'm happy to maintain this package if you'd like.

Thanks for the information, I am happy to change to whatever is recommended now by the devs. Because of time constraints due to my current occupation, I am not unfortunately not able to follow the mailing lists.

I second @simon04, there is no reason to force users to remove go in favour of go-pie, especially since the latter is about to die (follow arch-dev-public@ if you're interested). As for the guidelines you mentioned, they've since been updated with new instructions to enable PIE (namely go build -buildmode=pie).

Fair enough, I will add this to the next iteration.

Installing this package doesn't fully install nextdns; it only installs a binary that can be then used for installation (which leave me with some files that don't belong to any package).

You probably want to include the service file with this package too.

cat /etc/systemd/system/nextdns.service 
[Unit]
Description=NextDNS DNS53 to DoH proxy.
ConditionFileIsExecutable=/usr/bin/nextdns
After=network.target
Before=nss-lookup.target
Wants=nss-lookup.target

[Service]
StartLimitInterval=5
StartLimitBurst=10
Environment=SERVICE_RUN_MODE=1
ExecStart=/usr/bin/nextdns run
RestartSec=120
LimitMEMLOCK=infinity

[Install]
WantedBy=multi-user.target

Please read https://wiki.archlinux.org/index.php/Go_package_guidelines for a sensible explanation of why go-pie is preferred.