Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

unbound: 1.9.4 -> 1.9.5 #74676

Merged
merged 1 commit into from Dec 1, 2019
Merged

unbound: 1.9.4 -> 1.9.5 #74676

merged 1 commit into from Dec 1, 2019

Conversation

@r-ryantm
Copy link
Contributor

r-ryantm commented Nov 29, 2019

Semi-automatic update generated by https://github.com/ryantm/nixpkgs-update tools. This update was made based on information from https://repology.org/metapackage/unbound/versions.

meta.description for unbound is: '"Validating, recursive, and caching DNS resolver"'.

meta.homepage for unbound is: '"https://www.unbound.net"

Checks done (click to expand)
Rebuild report (if merged into master) (click to expand)

23479 total rebuild path(s)

8423 package rebuild(s)

8361 x86_64-linux rebuild(s)
7313 i686-linux rebuild(s)
935 x86_64-darwin rebuild(s)
6870 aarch64-linux rebuild(s)

First fifty rebuilds by attrpath
AgdaSheaves
AgdaStdlib
DisnixWebService
EmptyEpsilon
MMA
OVMF
OVMF-CSM
OVMF-secureBoot
R
SDL
SDL2
SDL2_gfx
SDL2_image
SDL2_mixer
SDL2_net
SDL2_ttf
SDL_Pango
SDL_gfx
SDL_gpu
SDL_image
SDL_mixer
SDL_net
SDL_sound
SDL_stretch
SDL_ttf
Sylk
TotalParserCombinators
_20kly
_90secondportraits
a2jmidid
abbaye-des-morts
abcde
abcl
abiword
abootimg
accountsservice
acoustidFingerprinter
acsccid
adapta-gtk-theme
adementary-theme
adlplug
adobe-reader
adom
adoptopenjdk-icedtea-web
adwaita-qt
aegisub
aeolus
aeon
aerc
aesop

Instructions to test this update (click to expand)

Either download from Cachix:

nix-store -r /nix/store/sbhiiywh3ivgcqc4rvv693bd75vw3dh2-unbound-1.9.5 \
  --option binary-caches 'https://cache.nixos.org/ https://r-ryantm.cachix.org/' \
  --option trusted-public-keys '
  r-ryantm.cachix.org-1:gkUbLkouDAyvBdpBX0JOdIiD2/DP1ldF3Z3Y6Gqcc4c=
  cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY=
  '

(r-ryantm's Cachix cache is only trusted for this store-path realization.)

Or, build yourself:

nix-build -A unbound https://github.com/r-ryantm/nixpkgs/archive/98aae6ce3ba28c6c9838fe9fef3d5743a210b4ee.tar.gz

After you've downloaded or built it, look at the files and if there are any, run the binaries:

ls -la /nix/store/sbhiiywh3ivgcqc4rvv693bd75vw3dh2-unbound-1.9.5
ls -la /nix/store/sbhiiywh3ivgcqc4rvv693bd75vw3dh2-unbound-1.9.5/bin

cc @ehmry @fpletz @globin for testing.

@lsix

This comment has been minimized.

Copy link
Member

lsix commented Nov 30, 2019

This also fixes CVE-2019-18934.

The CVE fix (at least) should probably be backported to release-19.09 (https://nlnetlabs.nl/downloads/unbound/patch_cve_2019-18934.diff)

@lsix
lsix approved these changes Nov 30, 2019
Copy link
Member

lsix left a comment

Tested successfully.

Staging automation moved this from Needs review to Ready Nov 30, 2019
@FRidh FRidh merged commit 335e62b into NixOS:staging Dec 1, 2019
16 checks passed
16 checks passed
unbound on x86_64-darwin Timed out, unknown build status
Details
Evaluation Performance Report Evaluator Performance Report
Details
grahamcofborg-eval ^.^!
Details
grahamcofborg-eval-check-maintainers matching changed paths to changed attrs...
Details
grahamcofborg-eval-check-meta config.nix: checkMeta = true
Details
grahamcofborg-eval-darwin nix-instantiate --arg nixpkgs { outPath=./.; revCount=999999; shortRev="ofborg"; } ./pkgs/top-level/release.nix -A darwin-tested
Details
grahamcofborg-eval-nixos nix-instantiate --arg nixpkgs { outPath=./.; revCount=999999; shortRev="ofborg"; } ./nixos/release-combined.nix -A tested
Details
grahamcofborg-eval-nixos-manual nix-instantiate --arg nixpkgs { outPath=./.; revCount=999999; shortRev="ofborg"; } ./nixos/release.nix -A manual
Details
grahamcofborg-eval-nixos-options nix-instantiate --arg nixpkgs { outPath=./.; revCount=999999; shortRev="ofborg"; } ./nixos/release.nix -A options
Details
grahamcofborg-eval-nixpkgs-manual nix-instantiate --arg nixpkgs { outPath=./.; revCount=999999; shortRev="ofborg"; } ./pkgs/top-level/release.nix -A manual
Details
grahamcofborg-eval-nixpkgs-tarball nix-instantiate --arg nixpkgs { outPath=./.; revCount=999999; shortRev="ofborg"; } ./pkgs/top-level/release.nix -A tarball
Details
grahamcofborg-eval-nixpkgs-unstable-jobset nix-instantiate --arg nixpkgs { outPath=./.; revCount=999999; shortRev="ofborg"; } ./pkgs/top-level/release.nix -A unstable
Details
grahamcofborg-eval-package-list nix-env -qa --json --file .
Details
grahamcofborg-eval-package-list-no-aliases nix-env -qa --json --file . --arg config { allowAliases = false; }
Details
unbound on aarch64-linux Success
Details
unbound on x86_64-linux Success
Details
Staging automation moved this from Ready to Done Dec 1, 2019
@r-ryantm r-ryantm deleted the r-ryantm:auto-update/unbound branch Dec 7, 2019
@vcunat vcunat mentioned this pull request Dec 29, 2019
1 of 1 task complete
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Staging
  
Done
Linked issues

Successfully merging this pull request may close these issues.

None yet

3 participants
You can’t perform that action at this time.