From: Michal Nowak <mnowak@isc.org>
Date: Wed, 25 Jun 2025 13:35:23 +0000 (+0200)
Subject: Disable Kerberos in tumbleweed
X-Git-Tag: v9.21.10~19^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=1b2c191bed4097e1095de3bc2f3854b6db894a8e;p=thirdparty%2Fbind9.git

Disable Kerberos in tumbleweed

In the tumbleweed image, we utilize LibreSSL. Several BIND 9 libraries
are linked against LibreSSL's libcrypto.so.55, and when Kerberos is
enabled, we link against libk5crypto.so.3, which in turn links against
OpenSSL's libcrypto.so.3. This might theoretically lead to a symbol
conflict.
---

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 51ea3d1a730..bb4fc8b29c7 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -1074,7 +1074,7 @@ gcc:tumbleweed:amd64:
   variables:
     CC: gcc
     CFLAGS: "${CFLAGS_COMMON} -DDEBUG"
-    EXTRA_CONFIGURE: "-Didn=enabled ${WITH_LIBEDIT}"
+    EXTRA_CONFIGURE: "-Didn=enabled -Dgssapi=disabled ${WITH_LIBEDIT}"
     BUILD_TEST_PREREQ: 1
 
 system:gcc:tumbleweed:amd64: