builder: avoid config change prompts on each pdns-recursor update

[thirdparty/pdns.git] / builder-support / debian / recursor / debian-stretch / rules

diff --git a/builder-support/debian/recursor/debian-stretch/rules b/builder-support/debian/recursor/debian-stretch/rules
index b6495990d8c41c17af6a5becb568334505c21033..43099f8cf36d98f6a4c2cc11b8bbd33287c58982 100755 (executable)
--- a/builder-support/debian/recursor/debian-stretch/rules
+++ b/builder-support/debian/recursor/debian-stretch/rules
@@ -2,7 +2,7 @@
 DEB_HOST_ARCH_OS ?= $(shell dpkg-architecture -qDEB_HOST_ARCH_OS)
 
 # Enable hardening features for daemons
-# Note: blhc (build log hardening check) will find these false positivies: CPPFLAGS 2 missing, LDFLAGS 1 missing
+# Note: blhc (build log hardening check) will find these false positives: CPPFLAGS 2 missing, LDFLAGS 1 missing
 export DEB_BUILD_MAINT_OPTIONS=hardening=+bindnow,+pie
 DPKG_EXPORT_BUILDFLAGS = 1
 # Include buildflags.mk so we can append to the vars it sets.
@@ -31,6 +31,7 @@ override_dh_auto_configure:
                --with-libcap \
                --with-libsodium \
                --with-protobuf=yes \
+               --enable-dnstap \
                --without-net-snmp \
                --disable-silent-rules \
                --with-service-user=pdns \
@@ -39,12 +40,20 @@ override_dh_auto_configure:
 
 override_dh_auto_install:
        dh_auto_install
+       install -d debian/pdns-recursor/usr/share/pdns-recursor/lua-config
+       install -m 644 -t debian/pdns-recursor/usr/share/pdns-recursor/lua-config debian/lua-config/rootkeys.lua
+       install -m 644 -t debian/pdns-recursor/etc/powerdns debian/recursor.lua
        rm -f debian/pdns-recursor/etc/powerdns/recursor.conf-dist
-       ./pdns_recursor --no-config --config | sed \
+       ./pdns_recursor --no-config --config=default | sed \
                -e 's!# config-dir=.*!config-dir=/etc/powerdns!' \
+               -e 's!# include-dir=.*!&\ninclude-dir=/etc/powerdns/recursor.d!' \
                -e 's!# local-address=.*!local-address=127.0.0.1!' \
+               -e 's!# lua-config-file=.*!lua-config-file=/etc/powerdns/recursor.lua!' \
                -e 's!# quiet=.*!quiet=yes!' \
+               -e 's!# setgid=.*!setgid=pdns!' \
+               -e 's!# setuid=.*!setuid=pdns!' \
                -e 's!# hint-file=.*!&\nhint-file=/usr/share/dns/root.hints!' \
+               -e '/^# version-string=.*/d' \
                > debian/pdns-recursor/etc/powerdns/recursor.conf
 
 override_dh_strip:
@@ -55,3 +64,8 @@ override_dh_installinit:
 
 override_dh_gencontrol:
        dh_gencontrol -- $(SUBSTVARS)
+
+override_dh_fixperms:
+       dh_fixperms
+# these files often contain passwords. 640 as it is chowned to root:pdns
+       chmod 0640 debian/pdns-recursor/etc/powerdns/recursor.conf