]> git.ipfire.org Git - thirdparty/pdns.git/blame - builder-support/debian/recursor/debian-jessie/rules
Merge pull request #8352 from mnordhoff/chmod-chown-pdns.conf
[thirdparty/pdns.git] / builder-support / debian / recursor / debian-jessie / rules
CommitLineData
c436b421
PL
1#!/usr/bin/make -f
2DEB_HOST_ARCH_OS ?= $(shell dpkg-architecture -qDEB_HOST_ARCH_OS)
3
4# Enable hardening features for daemons
5# Note: blhc (build log hardening check) will find these false positivies: CPPFLAGS 2 missing, LDFLAGS 1 missing
6export DEB_BUILD_MAINT_OPTIONS=hardening=+bindnow,+pie
7DPKG_EXPORT_BUILDFLAGS = 1
8# Include buildflags.mk so we can append to the vars it sets.
9include /usr/share/dpkg/buildflags.mk
10
11# Disable systemd integration on non-linux archs
12ifeq ($(DEB_HOST_ARCH_OS),linux)
13CONFIGURE_ARGS += --enable-systemd --with-systemd=/lib/systemd/system
14DH_ARGS += --with systemd
15else
16CONFIGURE_ARGS += --disable-systemd
17endif
18
19
20# Use new build system
21%:
22 dh $@ \
23 --with autoreconf \
24 $(DH_ARGS)
25
26override_dh_auto_configure:
27 dh_auto_configure -- \
28 --sysconfdir=/etc/powerdns \
29 --enable-unit-tests \
66f0acb2 30 --with-lua=luajit \
88301a04 31 --with-libcap \
cb264691 32 --with-libsodium \
c436b421
PL
33 --with-protobuf=yes \
34 --with-net-snmp \
35 --disable-silent-rules \
02a1700a
PL
36 --with-service-user=pdns \
37 --with-service-group=pdns \
c436b421
PL
38 $(CONFIGURE_ARGS)
39
40override_dh_auto_install:
41 dh_auto_install -- STRIP_BINARIES=0
42 rm -f debian/tmp/etc/powerdns/recursor.conf-dist
43 ./pdns_recursor --no-config --config | sed \
44 -e 's!# config-dir=.*!config-dir=/etc/powerdns!' \
45 -e 's!# local-address=.*!local-address=127.0.0.1!' \
46 -e 's!# quiet=.*!quiet=yes!' \
fe9e7b8d
PL
47 -e 's!# setgid=.*!setgid=pdns!' \
48 -e 's!# setuid=.*!setuid=pdns!' \
c436b421 49 -e 's!# hint-file=.*!&\nhint-file=/usr/share/dns/root.hints!' \
c436b421
PL
50 > debian/tmp/etc/powerdns/recursor.conf
51
52override_dh_strip:
53 dh_strip --dbg-package=pdns-recursor-dbg
54
55override_dh_installinit:
56 dh_installinit --error-handler=initscript_error
57
58override_dh_gencontrol:
59 dh_gencontrol -- $(SUBSTVARS)
ddf55a09
OM
60
61override_dh_fixperms:
62 dh_fixperms
63 # these files often contain passwords. 640 as it is chowned to root:pdns
316b23af 64 chmod 0640 debian/tmp/etc/powerdns/recursor.conf