]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
Disable Kerberos in tumbleweed
authorMichal Nowak <mnowak@isc.org>
Wed, 25 Jun 2025 13:35:23 +0000 (15:35 +0200)
committerMichal Nowak <mnowak@isc.org>
Thu, 26 Jun 2025 11:01:24 +0000 (13:01 +0200)
In the tumbleweed image, we utilize LibreSSL. Several BIND 9 libraries
are linked against LibreSSL's libcrypto.so.55, and when Kerberos is
enabled, we link against libk5crypto.so.3, which in turn links against
OpenSSL's libcrypto.so.3. This might theoretically lead to a symbol
conflict.

(cherry picked from commit 1b2c191bed4097e1095de3bc2f3854b6db894a8e)

.gitlab-ci.yml

index 75fb694aba99aa7ce92a8fadd6055beaff0ac56c..e553988d2cad4e1da243a1bc644b4e5c327800fe 100644 (file)
@@ -1217,7 +1217,7 @@ gcc:tumbleweed:amd64:
     # NOTE: This does *not* enable testing of the DNSRPS feature itself.
     # Doing that requires a DNSRPS provider library to be present on the
     # test host.
-    EXTRA_CONFIGURE: "--enable-dnsrps --enable-dnsrps-dl --with-libidn2 ${WITH_READLINE_READLINE}"
+    EXTRA_CONFIGURE: "--enable-dnsrps --enable-dnsrps-dl --with-libidn2 --without-gssapi ${WITH_READLINE_READLINE}"
     GNUMAKEFLAGS: "--shuffle=random"
   <<: *tumbleweed_latest_amd64_image
   <<: *build_job